Commit graph

1800 commits

Author SHA1 Message Date
carltietjen
1327c936a5 Changes to BCFIPS provider 2018-01-31 14:16:19 -08:00
carltietjen
566d02cd9e Add the bctls-fips-1.0.3.jar 2018-01-26 11:43:04 -08:00
carltietjen
c70561d400 Initial FIPS changes. Use BCFIPS 2018-01-25 15:33:46 -08:00
Jason
f896f62499
Merge pull request #268 from pwm-project/funtype
Added types to the forgotten username config page
2018-01-17 16:08:05 -05:00
rkeil-git
bbc012d442
Merge branch 'master' into funtype 2018-01-16 12:27:26 -07:00
Jason Rivard
e10fa6e430 further update change password ui to add a dialog for failures submitted before typing verification completes. 2018-01-15 12:31:18 -08:00
rkeil
fdeccd8e78 Added types to the forgotten username config page 2018-01-15 11:30:09 -07:00
Jason Rivard
e8d27c47b5 pom updates and hekpdesk pw set ui mode api check fix 2018-01-13 11:33:18 -08:00
Jason Rivard
38607ce68b fix issue with random pwd generation in config editor pw dialogs 2018-01-13 03:07:48 -08:00
Jason Rivard
5c34ecbce5 fix issue with database cursor leak resulting in DB_UNAVAILABLE error after some time 2018-01-12 01:58:20 -08:00
Jason Rivard
ab8271254e add setting for sms gateway https certificate 2018-01-10 23:47:53 -08:00
Jason Rivard
017801a122 fix issue where sms failed to send if a sms gateway password not configured with 'null' error. 2018-01-10 00:05:10 -08:00
Jason Rivard
e544601bce improve change password page by implementing always enabled submit form 2018-01-08 11:53:07 -08:00
Jason Rivard
f82d67e2b9 fix for unmerged files from ldapchai 0.7 merge 2017-12-31 15:50:48 -05:00
Jason Rivard
b97c78234c Merge remote-tracking branch 'remotes/origin/ldapchai-07-update' 2017-12-31 02:39:32 -08:00
Jason Rivard
7d7b3f0fcf Add 'nb' to standard locale list. 2017-12-31 04:28:47 -05:00
Jason
411ffba0f3
Merge pull request #258 from ilyse63/patch-6
Create Message_nb.properties
2017-12-31 00:01:47 -05:00
Jason
005c3b902f
Merge pull request #257 from ilyse63/patch-5
Create Error_nb.properties
2017-12-31 00:01:16 -05:00
Jason
8e5aa6bfff
Merge pull request #256 from ilyse63/patch-4
Create Display_nb.properties
2017-12-31 00:00:40 -05:00
Jason
f9a4b72737
Merge pull request #259 from danifran/avoid-sending-token-if-sms_email-null
avoid sending token if SMS/Mail is null; fixes #252 and #253
2017-12-30 23:59:36 -05:00
Jason Rivard
f942c69029 changes to support non-static ldapchai APIs 2017-12-30 18:26:45 -08:00
Jason Rivard
c6c0204062 fix client side locale date parsing for duplex locale codes. 2017-12-29 15:51:52 -05:00
Daniele Francioni
f15341d082 Added check to avoid sending token on SMS/Mail verification
If mail/SMS verification are enabled, the updateProfile process and the
newUser process will send a verification token regardless if the value
is empty or not. This would stop a user to complete the registration 
process in case email or mobile number are optional but verification
is enabled. The commit will skip sending the token if email/mobile
values are null or empty (even if the value is sent by the REST 
resolveTokenDestination client)
2017-12-27 20:36:15 +01:00
ilyse63
80f8151d81
Create Message_nb.properties 2017-12-22 09:52:02 +01:00
ilyse63
4eabc65221
Create Error_nb.properties 2017-12-22 09:49:59 +01:00
ilyse63
e2ff7fa4d8
Create Display_nb.properties 2017-12-22 09:46:26 +01:00
Jason Rivard
c458b9c36e helpdesk detail bean refactoring 2017-12-14 04:16:13 -05:00
Jason Rivard
de943b45d0 update js timeformat handler 2017-12-13 19:06:50 -05:00
Jason
f1381992cd
Merge pull request #249 from pwm-project/header-sensitivity-npe-check
NullPointerException Fix
2017-12-08 16:26:11 -05:00
James Albright
627120880f Fixed a problem where a NullPointerException was being thrown when header names weren't found in the HttpHeader enumeration. 2017-12-06 16:16:54 -07:00
Jason Rivard
d293f78358 dependency updates 2017-12-04 17:44:20 -05:00
Jason Rivard
741d55c731 fix issue when incorrect case url is used on emailed token links 2017-12-04 17:44:02 -05:00
Jason Rivard
1585b8dae5 obfuscate outbound authorization header in logs 2017-12-04 15:24:51 -05:00
Jason Rivard
fee3080d2c prevent showing options for sms/email token if user does not have email/sms address 2017-12-04 15:18:32 -05:00
Jason Rivard
8f96587569 allow navigation on error pages 2017-12-04 15:16:40 -05:00
Jason Rivard
be22165af5 make account disabled errors consistent with forgotten pw and login 2017-12-04 15:15:44 -05:00
Jason Rivard
5d05735d44 fix broken db accessor iterator 2017-11-20 23:16:51 -05:00
Jason
6351e3cbcb
Merge pull request #242 from pwm-project/strength-meter
Added the option to use zxcvbn for password meter strength estimation.
2017-11-19 00:59:57 -05:00
Jason Rivard
a77db070f1 convert strength setting to select type to allow future options 2017-11-19 00:53:13 -05:00
James Albright
5f2db920e0 Added the option to use zxcvbn for password meter strength estimation.
This feature can be enabled under Settings > Modules > Authenticated > Change Password > Use zxcvbn for Strength Meter Algorithm.

See:
https://github.com/dropbox/zxcvbn
https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_wheeler.pdf
2017-11-16 09:57:42 -07:00
Jason Rivard
5cfd610883 ldapchai 0.7 update 2017-11-16 02:54:52 -05:00
Jason
abdb76c446
Merge pull request #241 from pwm-project/jrivard-bugs
bug fixes
2017-11-09 03:56:05 -05:00
Jason
aacb865216
Merge branch 'master' into jrivard-bugs 2017-11-09 03:23:34 -05:00
Jason Rivard
1e7b5f1c8c for for NPE in admin dashboard when no audit vault configured. 2017-11-09 02:36:49 -05:00
Jason Rivard
e3b2401254 hide not-yet-working pw expiration email template 2017-11-08 21:41:56 -05:00
Jason Rivard
f193d53b29 remove SMSFIRST, EMAILFIRST and BOTH token send methods 2017-11-06 18:56:19 -05:00
Jason
79f0145ace
Merge pull request #236 from zhongqbin/master
fix the check password features
2017-11-03 17:13:37 -04:00
Jason
e52db89a03
Merge pull request #234 from asacamano/patch-1
Provide a default ldap.guidAttribute for Open LDAP
2017-11-03 17:12:41 -04:00
zhong qibin
ab34dc1b7e fix the CheckPasswordAction 2017-11-03 23:28:50 +08:00
Jason Rivard
b47bcea274 add statistics property test case and new statistics items 2017-11-02 03:29:50 -04:00