ynerant
/
nk20
mirror of https://gitlab.crans.org/bde/nk20
1
0
Fork 0
Code Issues Releases Wiki Activity
1,782 Commits 20 Branches 4 Tags 27 MiB
Commit Graph

273 Commits

Author SHA1 Message Date
parpaing 4d03d9460d Passage des couleurs ttlsp 2022-04-05 14:45:41 +02:00
Alexandre Iooss df5f9b5f1e Harden Django project configuration 
Set session and CSRF cookies as secure for production.
Set HSTS header to let browser remember HTTPS for 1 year.
 2022-03-09 12:12:56 +01:00
Yohann D'ANELLO 45a10dad00
Refresh token expire between 14 days 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-12-23 22:00:08 +01:00
Yohann D'ANELLO 18a1282773
Implement optional scopes : clients can request scopes, but they are not guaranteed to get them 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-12-23 21:59:37 +01:00
Yohann D'ANELLO f88eae924c
Use local version of Turbolinks instead of using Cloudfare 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-12-13 21:00:34 +01:00
Yohann D'ANELLO 9628560d64
Improve entry search with a debouncer 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-10-04 14:39:53 +02:00
Yohann D'ANELLO df3bb71357
Serve static files with Nginx only in production to make JavaScript development easier 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-10-04 13:58:48 +02:00
Yohann D'ANELLO d809b2595a
Pretty money function is invalid in Javascript: it mays display an additional euro 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-28 11:20:57 +02:00
Pierre-antoine Comby 6b4d18f4b3 fix #97 2021-09-26 23:03:25 +02:00
Pierre-antoine Comby 668cfa71a7 fix #98 2021-09-26 23:02:31 +02:00
Yohann D'ANELLO 4c17e2a92b
Fix wrong banner message 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-13 23:29:51 +02:00
Yohann D'ANELLO d965732b65
Support multiple addresses for IP-based connection (useful when using IPv4/IPv6 and for ENS -> Crans transition) 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-08 14:52:39 +02:00
Yohann D'ANELLO f75dbc4525
OAuth2 implementation documentation 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:59:45 +02:00
Yohann D'ANELLO 9b26207515
Rework templates for OAuth2 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:59:43 +02:00
Yohann D'ANELLO 7ea36a5415
[oauth2] Add view to generate authorization link per application with given scopes 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:59:33 +02:00
Yohann D'ANELLO 898f6d52bf
Better templates for OAuth2 authentication 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:59:20 +02:00
Yohann D'ANELLO ea092803d7
Check permissions per request instead of per user 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:58:05 +02:00
Yohann D'ANELLO 5e9f36ef1a
Store current request rather than user/session/ip 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:58:04 +02:00
Yohann D'ANELLO dd639d829e
Implement OAuth2 scopes based on permissions 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-09-02 20:58:04 +02:00
Yohann D'ANELLO 733f145be3
BDE members can now use they note even if they are not in the Kfet club 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-08-29 14:39:36 +02:00
Yohann D'ANELLO d5ecb72a71
Update copyright for 2021 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-06-14 21:45:56 +02:00
Yohann D'ANELLO 35ffb36fbd
Round amounts to the nearest integer rather than take the floor 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-06-07 23:47:07 +02:00
ourspalois c4c4e9594f couleur 4.0 2021-05-22 12:34:31 +02:00
ourspalois dc0f3dbcef Changement de couleur 3.0 2021-05-22 12:19:29 +02:00
ourspalois b3abe9ab18 Changement de couleur 2.0 2021-05-22 11:53:13 +02:00
ourspalois 67e170d4a6 Bonjour c le changement de couleur 2021-05-22 11:30:11 +02:00
Yohann D'ANELLO 76d1784aea
Add OAuth2 authentication for Django Rest Framework 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-03-09 09:44:25 +01:00
Yohann D'ANELLO b5ef937a03
Environment file path is absolute 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-03-09 09:39:57 +01:00
Yohann D'ANELLO e95a8b6e18
Add normalized name to services 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-03-03 18:42:51 +01:00
Yohann D'ANELLO 635adf1360
Use cas server to use authentication in other services 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-03-03 18:13:33 +01:00
Yohann D'ANELLO 84304971d7
Add sample translation file for english 
Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>
 2021-01-19 14:29:12 +01:00
ynerant b8b781f9a2 Merge branch 'beta' into 'master' 
Beta

Closes #84 et #83

See merge request bde/nk20!146
 2021-01-19 12:40:24 +01:00
ynerant 8d71783c42 Merge branch 'docs' into 'beta' 
Docs

See merge request bde/nk20!145
 2021-01-19 12:01:45 +01:00
Yohann D'ANELLO a6f23df7d5
Load the good translation file, fixes #85 
Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>
 2021-01-19 11:58:19 +01:00
Yohann D'ANELLO d9c97628e2
Add Clacks Overhead header on each response. Closes #84 
Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>
 2020-12-31 15:40:18 +01:00
Yohann D'ANELLO e60994e065
API Documentation 
Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>
 2020-12-23 21:06:30 +01:00
Yohann D'ANELLO 016ab5a9c9
Remove dead code, don't try to cover unnecessary things 
Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>
 2020-12-23 18:45:05 +01:00
Yohann D'ANELLO 8434c0062c Merge branch 'beta' into JS_translations 
# Conflicts:
#	apps/note/static/note/js/consos.js
#	locale/de/LC_MESSAGES/django.po
#	locale/es/LC_MESSAGES/django.po
#	locale/fr/LC_MESSAGES/django.po
 2020-11-16 00:59:26 +01:00
Yohann D'ANELLO b9d49d53f2 Export JS translation files as static files 2020-11-16 00:29:27 +01:00
Yohann D'ANELLO 5635598bbc Extract strings from javascript files and translate them in french 2020-11-15 23:28:41 +01:00
Yohann D'ANELLO b58a0c43cd Include auto-generated javascript translation file 2020-11-15 22:53:00 +01:00
Yohann D'ANELLO d773303d18 Add possibility to authenticate an account with its IP address 2020-10-19 23:44:56 +02:00
Yohann D'ANELLO e5e758f9d9 Display banners when a user is no more a BDE or Kfet member 2020-10-07 11:46:43 +02:00
Yohann D'ANELLO 65a2e8c08c Better index page: non-Kfet members will be redirected to their profile page, the account note (when it will be managed) will see the consumption page 2020-10-07 11:29:52 +02:00
Yohann D'ANELLO fb72385773 Warn users that they have to open they Sogé account 2020-10-07 10:59:37 +02:00
Yohann D'ANELLO c3d613947f Pre-registered users can declare that they opened a bank account in the signup form 2020-10-07 10:33:57 +02:00
Alexandre Iooss 3d733ed6af
Use memcached cache 2020-09-21 15:13:43 +02:00
Alexandre Iooss 4f188ca3e5 Admin is autodiscovering partially 2020-09-21 12:34:34 +02:00
Alexandre Iooss 72bac75fbd Add Django OAuth toolkit admin 2020-09-21 12:15:40 +02:00
Alexandre Iooss 8052152ea5
Add OAuth2 endpoints 2020-09-21 11:03:07 +02:00