272 Commits

Author	SHA1	Message	Date
Alexandre Iooss	df5f9b5f1e	Harden Django project configuration ... Set session and CSRF cookies as secure for production. Set HSTS header to let browser remember HTTPS for 1 year.	2022-03-09 12:12:56 +01:00
Yohann D'ANELLO	45a10dad00	Refresh token expire between 14 days ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 22:00:08 +01:00
Yohann D'ANELLO	18a1282773	Implement optional scopes : clients can request scopes, but they are not guaranteed to get them ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-23 21:59:37 +01:00
Yohann D'ANELLO	f88eae924c	Use local version of Turbolinks instead of using Cloudfare ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-12-13 21:00:34 +01:00
Yohann D'ANELLO	9628560d64	Improve entry search with a debouncer ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 14:39:53 +02:00
Yohann D'ANELLO	df3bb71357	Serve static files with Nginx only in production to make JavaScript development easier ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:58:48 +02:00
Yohann D'ANELLO	d809b2595a	Pretty money function is invalid in Javascript: it mays display an additional euro ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-28 11:20:57 +02:00
Pierre-antoine Comby	6b4d18f4b3	fix #97	2021-09-26 23:03:25 +02:00
Pierre-antoine Comby	668cfa71a7	fix #98	2021-09-26 23:02:31 +02:00
Yohann D'ANELLO	4c17e2a92b	Fix wrong banner message ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-13 23:29:51 +02:00
Yohann D'ANELLO	d965732b65	Support multiple addresses for IP-based connection (useful when using IPv4/IPv6 and for ENS -> Crans transition) ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-08 14:52:39 +02:00
Yohann D'ANELLO	f75dbc4525	OAuth2 implementation documentation ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:45 +02:00
Yohann D'ANELLO	9b26207515	Rework templates for OAuth2 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:43 +02:00
Yohann D'ANELLO	7ea36a5415	[oauth2] Add view to generate authorization link per application with given scopes ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:33 +02:00
Yohann D'ANELLO	898f6d52bf	Better templates for OAuth2 authentication ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:20 +02:00
Yohann D'ANELLO	ea092803d7	Check permissions per request instead of per user ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:05 +02:00
Yohann D'ANELLO	5e9f36ef1a	Store current request rather than user/session/ip ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:04 +02:00
Yohann D'ANELLO	dd639d829e	Implement OAuth2 scopes based on permissions ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:04 +02:00
Yohann D'ANELLO	733f145be3	BDE members can now use they note even if they are not in the Kfet club ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-08-29 14:39:36 +02:00
Yohann D'ANELLO	d5ecb72a71	Update copyright for 2021 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-06-14 21:45:56 +02:00
Yohann D'ANELLO	35ffb36fbd	Round amounts to the nearest integer rather than take the floor ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-06-07 23:47:07 +02:00
ourspalois	c4c4e9594f	couleur 4.0	2021-05-22 12:34:31 +02:00
ourspalois	dc0f3dbcef	Changement de couleur 3.0	2021-05-22 12:19:29 +02:00
ourspalois	b3abe9ab18	Changement de couleur 2.0	2021-05-22 11:53:13 +02:00
ourspalois	67e170d4a6	Bonjour c le changement de couleur	2021-05-22 11:30:11 +02:00
Yohann D'ANELLO	76d1784aea	Add OAuth2 authentication for Django Rest Framework ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-09 09:44:25 +01:00
Yohann D'ANELLO	b5ef937a03	Environment file path is absolute ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-09 09:39:57 +01:00
Yohann D'ANELLO	e95a8b6e18	Add normalized name to services ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-03 18:42:51 +01:00
Yohann D'ANELLO	635adf1360	Use cas server to use authentication in other services ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-03 18:13:33 +01:00
Yohann D'ANELLO	84304971d7	Add sample translation file for english ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2021-01-19 14:29:12 +01:00
ynerant	b8b781f9a2	Merge branch 'beta' into 'master' ... Beta Closes #84 et #83 See merge request bde/nk20!146	2021-01-19 12:40:24 +01:00
ynerant	8d71783c42	Merge branch 'docs' into 'beta' ... Docs See merge request bde/nk20!145	2021-01-19 12:01:45 +01:00
Yohann D'ANELLO	a6f23df7d5	Load the good translation file, fixes #85 ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2021-01-19 11:58:19 +01:00
Yohann D'ANELLO	d9c97628e2	Add Clacks Overhead header on each response. Closes #84 ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-31 15:40:18 +01:00
Yohann D'ANELLO	e60994e065	API Documentation ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 21:06:30 +01:00
Yohann D'ANELLO	016ab5a9c9	Remove dead code, don't try to cover unnecessary things ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 18:45:05 +01:00
Yohann D'ANELLO	8434c0062c	Merge branch 'beta' into JS_translations ... # Conflicts: # apps/note/static/note/js/consos.js # locale/de/LC_MESSAGES/django.po # locale/es/LC_MESSAGES/django.po # locale/fr/LC_MESSAGES/django.po	2020-11-16 00:59:26 +01:00
Yohann D'ANELLO	b9d49d53f2	Export JS translation files as static files	2020-11-16 00:29:27 +01:00
Yohann D'ANELLO	5635598bbc	Extract strings from javascript files and translate them in french	2020-11-15 23:28:41 +01:00
Yohann D'ANELLO	b58a0c43cd	Include auto-generated javascript translation file	2020-11-15 22:53:00 +01:00
Yohann D'ANELLO	d773303d18	Add possibility to authenticate an account with its IP address	2020-10-19 23:44:56 +02:00
Yohann D'ANELLO	e5e758f9d9	Display banners when a user is no more a BDE or Kfet member	2020-10-07 11:46:43 +02:00
Yohann D'ANELLO	65a2e8c08c	Better index page: non-Kfet members will be redirected to their profile page, the account note (when it will be managed) will see the consumption page	2020-10-07 11:29:52 +02:00
Yohann D'ANELLO	fb72385773	Warn users that they have to open they Sogé account	2020-10-07 10:59:37 +02:00
Yohann D'ANELLO	c3d613947f	Pre-registered users can declare that they opened a bank account in the signup form	2020-10-07 10:33:57 +02:00
Alexandre Iooss	3d733ed6af	Use memcached cache	2020-09-21 15:13:43 +02:00
Alexandre Iooss	4f188ca3e5	Admin is autodiscovering partially	2020-09-21 12:34:34 +02:00
Alexandre Iooss	72bac75fbd	Add Django OAuth toolkit admin	2020-09-21 12:15:40 +02:00
Alexandre Iooss	8052152ea5	Add OAuth2 endpoints	2020-09-21 11:03:07 +02:00
Alexandre Iooss	70448db8e5	Remove Django CAS server and add oauth toolkit	2020-09-21 10:31:42 +02:00