1828 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Alexandre Iooss	df5f9b5f1e	Harden Django project configuration ... Set session and CSRF cookies as secure for production. Set HSTS header to let browser remember HTTPS for 1 year.	2022-03-09 12:12:56 +01:00
Yohann D'ANELLO	4161248bff	Add permissions to view/create/change/delete OAuth2 applications ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-03-09 12:06:19 +01:00
Yohann D'ANELLO	58136f3c48	Fix permission checks in the /api/me view ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-03-09 11:45:24 +01:00
Yohann D'ANELLO	d9b4e0a9a9	Fix membership tables for clubs without an ending membership date ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-02-13 17:53:05 +01:00
Yohann D'ANELLO	8563a8d235	Fix membership tables for clubs without an ending membership date ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-02-13 17:51:22 +01:00
ynerant	5f69232560	Merge branch 'beta' into 'main' ... Optional scopes + small bug fix See merge request bde/nk20!193	2022-02-12 14:37:58 +01:00
Yohann D'ANELLO	d3273e9ee2	Prepare WEI 2022 (because tests are broken) ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-02-12 14:24:32 +01:00
ynerant	4e30f805a7	Merge branch 'optional-scopes' into 'beta' ... Implement optional scopes : clients can request scopes, but they are not guaranteed to get them See merge request bde/nk20!192	2022-02-12 13:57:19 +01:00
Yohann D'ANELLO	546e422e64	Ensure some values exist before updating them ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2022-02-12 13:56:07 +01:00
Yohann D'ANELLO	9048a416df	In the /api/me page, display note, profile and memberships only if we have associated permissions ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 23:25:18 +01:00
Yohann D'ANELLO	8578bd743c	Add documentation about optional scopes ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 22:15:06 +01:00
Yohann D'ANELLO	45a10dad00	Refresh token expire between 14 days ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 22:00:08 +01:00
Yohann D'ANELLO	18a1282773	Implement optional scopes : clients can request scopes, but they are not guaranteed to get them ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 21:59:37 +01:00
Yohann D'ANELLO	132afc3d15	Fix scope view ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-15 18:59:23 +01:00
Yohann D'ANELLO	6bf16a181a	[ansible] Deploy buster-backports repository only on Debian 10 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-15 15:59:58 +01:00
Yohann D'ANELLO	e20df82346	Main branch is now called main ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-15 15:55:13 +01:00
ynerant	1eb72044c2	Merge branch 'beta' into 'master' ... Changements variés et mineurs Closes #107 et #91 See merge request bde/nk20!191	2021-12-13 21:16:26 +01:00
Yohann D'ANELLO	f88eae924c	Use local version of Turbolinks instead of using Cloudfare ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 21:00:34 +01:00
Yohann D'ANELLO	4b6e3ba546	Display club transactions only with note rights, fixes #107 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 20:01:00 +01:00
ynerant	bf0fe3479f	Merge branch 'lock-club-notes' into 'beta' ... Verrouillage de notes See merge request bde/nk20!190	2021-12-13 18:55:03 +01:00
Yohann D'ANELLO	45ba4f9537	Linting ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 18:33:18 +01:00
Yohann D'ANELLO	b204805ce2	Add permissions to (un)lock club notes ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 18:31:36 +01:00
Yohann D'ANELLO	2f28e34cec	Fix permissions to lock our own note ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 18:27:24 +01:00
Yohann D'ANELLO	9c8ea2cd41	Club notes can now be locked through web interface ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 17:48:20 +01:00
ynerant	41289857b2	Merge branch 'tirage-au-sort' into 'beta' ... Boutons See merge request bde/nk20!189	2021-12-13 17:37:13 +01:00
Yohann D'ANELLO	28a8792c9f	[activity] Add space before line breaks in Wiki export of activities ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 17:30:13 +01:00
Yohann D'ANELLO	58cafad032	Sort buttons by category name instead of id in button list ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 17:19:10 +01:00
Yohann D'ANELLO	7848cd9cc2	Don't search buttons by prefix ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 17:18:54 +01:00
Yohann D'ANELLO	d18ccfac23	Sort aliases by normalized name in profile alias view ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 17:18:54 +01:00
Nicolas Margulies	e479e1e3a4	Added messages for Hide/Show	2021-10-07 23:06:40 +02:00
Nicolas Margulies	82b0c83b1f	Added a Hide/Show button for transaction templates, fixes #91	2021-10-07 22:54:01 +02:00
Yohann D'ANELLO	38ca414ef6	Res[pot] can display user information in order to get first/last name in credits ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-06 10:44:24 +02:00
Yohann D'ANELLO	fd811053c7	Commit missing migrations ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-06 10:41:58 +02:00
Yohann D'ANELLO	9d386d1ecf	Unauthenticated users can't display activity entry view ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-06 10:41:42 +02:00
erdnaxe	0bd447b608	Merge branch 'relax_requirements' into 'beta' ... Relax requirements and ignore shell.nix See merge request bde/nk20!187	2021-10-05 15:45:31 +02:00
Alexandre Iooss	3f3c93d928	Ignore shell.nix in Git tree ... shell.nix is used in Nix to create a specific shell with custom packages. The name is standardised and need to be in project folder to ease development tools integrations.	2021-10-05 15:14:56 +02:00
Alexandre Iooss	340c90f5d3	Relax requirements ... Relax requirements to allow the use of newer versions of dependencies found in NixPkgs and ArchLinux. Do not limit upper version of django-extensions as it is not mission critical.	2021-10-05 15:10:20 +02:00
ynerant	ca2b9f061c	Merge branch 'beta' into 'master' ... Multiples fix, réparation des pots Closes #75 See merge request bde/nk20!186	2021-10-05 12:02:03 +02:00
Yohann D'ANELLO	a05dfcbf3d	Linting ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-05 11:46:24 +02:00
Yohann D'ANELLO	ba3c0fb18d	Fix activity get in invite view ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 21:53:35 +02:00
ynerant	ab69963ea1	Merge branch 'cest-lheure-du-pot' into 'beta' ... Améliorations Pot See merge request bde/nk20!184	2021-10-04 18:45:21 +02:00
Yohann D'ANELLO	654c01631a	BDE members can see aliases from other people now ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 18:29:34 +02:00
Yohann D'ANELLO	d94cc2a7ad	NameNAN ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 18:26:14 +02:00
Yohann D'ANELLO	69bb38297f	Fix membership dates for new memberships, fix tests ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 18:15:07 +02:00
Yohann D'ANELLO	9628560d64	Improve entry search with a debouncer ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 14:39:53 +02:00
Yohann D'ANELLO	df3bb71357	Serve static files with Nginx only in production to make JavaScript development easier ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:58:48 +02:00
Yohann D'ANELLO	2a216fd994	Entries are distinct ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:50:39 +02:00
Yohann D'ANELLO	8dd2619013	Activities are distinct ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:50:21 +02:00
Yohann D'ANELLO	62431a4910	Treasurers can manage activity entries ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:49:16 +02:00
Pierre-antoine Comby	946bc1e497	show that rows are clickable, fix #75	2021-10-01 14:35:29 +02:00