Commit Graph

  • df700ba408 Merge branch 'config' into 'master' [skip ci] ErickSkrauch 2020-01-17 10:55:43 +0000
  • a77950a5da Fixed docker compose config for db valentinpahusko 2020-01-17 13:20:23 +0300
  • 09f7818113 Upgrade PHP to 7.4. Update corresponding dependencies. ErickSkrauch 2019-12-29 18:23:20 +0300
  • 3e1fb19cf3 Update smtp mail transport configuration ErickSkrauch 2019-12-29 17:59:58 +0300
  • 7607248c27 Remove usage of codeception/specify and fzaninotto/faker ErickSkrauch 2019-12-29 17:55:21 +0300
  • 43a4a58053 Remove usage of codeception/specify and fzaninotto/faker ErickSkrauch 2019-12-21 02:26:06 +0300
  • 666213afc7 Rework email_activation model, get rid of behaviors, use json column to store additional data ErickSkrauch 2019-12-21 01:23:58 +0300
  • 22e8158581 Upgrade codeception to 4 version ErickSkrauch 2019-12-20 22:18:09 +0300
  • 1c76d2386e Fixes ACCOUNTS-5Z9. Add import statement for Permissions class ErickSkrauch 2019-12-15 18:33:15 +0300
  • b9b62ead12 Fixes ACCOUNTS-5Z8. Use correct relation column for OauthSession ErickSkrauch 2019-12-15 18:27:31 +0300
  • 3b00e36816 Fixes ACCOUNTS-5Y5. Also idna escape login part of the email. ErickSkrauch 2019-12-15 18:13:47 +0300
  • 3d89e5f94d Fixes ACCOUNTS-5Z7. Search for legacy oauth session by correct column ErickSkrauch 2019-12-15 18:01:36 +0300
  • 299637cc13 Strip keys from the scopes list ErickSkrauch 2019-12-15 17:20:29 +0300
  • 8d28c7c453 Upgrade patch in the build image before install dependencies ErickSkrauch 2019-12-15 05:26:45 +0300
  • 04e399c726 Fix tests ErickSkrauch 2019-12-15 00:49:54 +0300
  • e8b71d33d0 Get rid of mockery library. Still have some troubles with functional tests for api ErickSkrauch 2019-12-14 00:16:05 +0300
  • d9ef27b745 Cleanup code, improve typings ErickSkrauch 2019-12-13 22:27:13 +0300
  • 830a17612b Get rid of ThisShouldNotHappenException ErickSkrauch 2019-12-13 20:48:13 +0300
  • 26f7d6213f Update dependencies ErickSkrauch 2019-12-13 20:02:58 +0300
  • 40eca5b8b6 Remove expires_in field when the access_token isn't expiring ErickSkrauch 2019-12-13 16:00:51 +0300
  • 22d8971dc5 Fix redirect_uri validation for the AuthCodeGrant ErickSkrauch 2019-12-13 15:16:45 +0300
  • a8e20a9775 Replace custom aud and ely-scopes JWT claims with its public analogues ErickSkrauch 2019-12-13 13:55:09 +0300
  • 274d56aa40 Set expires_in value for issue access token response ErickSkrauch 2019-12-11 19:44:55 +0300
  • 14661c2233 Fix manual-migrate command ErickSkrauch 2019-12-11 15:17:38 +0300
  • dcb7345d58 Merge branch 'oauth_jwt_tokens' into 'master' ErickSkrauch 2019-12-11 12:00:50 +0000
  • f06354638e Disallow to perform oauth2 authentication for applications that have no corresponding type ErickSkrauch 2019-12-11 14:41:37 +0300
  • 9da58beccf Add deprecation notices ErickSkrauch 2019-12-11 14:24:31 +0300
  • 2caf0558de Use paragonie's Base64UrlSafe encoding library ErickSkrauch 2019-12-11 14:16:11 +0300
  • cda4be04a1 Fix condition when to store scopes from redis ErickSkrauch 2019-12-11 13:23:56 +0300
  • 3c9050340e Add console command to migrate all oauth sessions scopes data from redis to db ErickSkrauch 2019-12-11 01:29:57 +0300
  • d27070630c Fix revokation validation. Add additional tests cases ErickSkrauch 2019-12-10 22:51:11 +0300
  • 016a193263 Introduce revokation mechanism ErickSkrauch 2019-12-10 01:38:09 +0300
  • ba7fad84a0 Remove refresh_token from OAuth2 result. Return the same access_token as a refresh_token in case when it's requested. Make access_tokens to live forever. ErickSkrauch 2019-12-09 19:31:54 +0300
  • efb97a2006 Set access tokens TTL depending on the requested scopes ErickSkrauch 2019-12-06 19:07:08 +0300
  • f0a73f2b7a Make tokens, created by client credentials grant to live forever ErickSkrauch 2019-12-06 18:31:04 +0300
  • 6fb32ec76d Use libsodium to encrypt all data, related to OAuth2 ErickSkrauch 2019-12-06 14:37:51 +0300
  • 642db2e045 Use libsodium to encrypt data, stored in jwt tokens ErickSkrauch 2019-12-05 19:37:46 +0300
  • c3ffb08c4a Cleanup session server module ErickSkrauch 2019-12-05 01:15:45 +0300
  • 25f1ca912c Fix tests ErickSkrauch 2019-12-05 00:52:27 +0300
  • a81ef5cac2 Replace separate minecraft access tokens with JWT ErickSkrauch 2019-12-04 21:10:15 +0300
  • 060a4e960a Handle legacy refresh tokens ErickSkrauch 2019-12-04 13:40:12 +0300
  • a9a56c9e1d Extract encryption key into the configuration param ErickSkrauch 2019-12-04 13:24:30 +0300
  • 72cbf16c97 Merge branch 'master' into oauth_jwt_tokens ErickSkrauch 2019-12-04 01:17:12 +0300
  • 8dad8a3eeb Fix https detection on nginx from haproxy ErickSkrauch 2019-12-03 17:22:18 +0300
  • 46b771a061 Fixes ACCOUNTS-5VE ErickSkrauch 2019-12-02 22:28:47 +0300
  • 9557064a97 Fixes ACCOUNTS-5VF ErickSkrauch 2019-12-02 22:22:51 +0300
  • 01028cf378 Fixes ACCOUNTS-5VC. Handle the case when there is missing session for access or refresh token ErickSkrauch 2019-12-02 22:15:52 +0300
  • 22ef41ac7c Fixes ACCOUNTS-5V9. Handle case when access token don't have associated account ErickSkrauch 2019-12-02 21:14:40 +0300
  • a5f6a2d437 Tune nginx conf ErickSkrauch 2019-11-27 03:41:27 +0300
  • 9f645d0934 Add CSP header ErickSkrauch 2019-11-26 22:47:22 +0300
  • 9eea03df73 Enable gzip and brotli for all response types ErickSkrauch 2019-11-26 22:32:26 +0300
  • 885729fcde Replace nginx image to enable gzpi and brotli encoding ErickSkrauch 2019-11-26 21:30:53 +0300
  • b47522e6f9 Fix CI for bitmani mariadb image ErickSkrauch 2019-11-15 20:09:19 +0300
  • 2fe3ede4ea Replace basic mariadb image with the bitnami ErickSkrauch 2019-11-15 20:03:52 +0300
  • db8e13d749 Hotfix to handle Chrly's long responses ErickSkrauch 2019-11-09 17:46:22 +0300
  • e52dbdbf19 Do not include offline_access scope into access_token ErickSkrauch 2019-11-07 01:12:18 +0300
  • da318ef2ed Merge branch 'master' into oauth_jwt_tokens ErickSkrauch 2019-11-07 00:00:26 +0300
  • 0dc8ca8c78 Define vars for cleanup step ErickSkrauch 2019-11-05 15:31:23 +0300
  • d8b68f7be0 Rename cleanup step [skip ci] ErickSkrauch 2019-11-05 15:28:18 +0300
  • 6cd50f759c Fix gitlab-ci configuration ErickSkrauch 2019-11-05 15:27:07 +0300
  • 80edf03b52 Upgrade PHP version to avoid CVE-2019-11043 ErickSkrauch 2019-11-05 15:15:55 +0300
  • 7505bc8262 Upgrade gitlab-ci ErickSkrauch 2019-11-05 15:10:37 +0300
  • 22982b319b Fix all tests ErickSkrauch 2019-09-24 01:56:32 +0300
  • 2beacd0827 Add tests for the legacy tokens, fix some tests cases [skip ci] ErickSkrauch 2019-09-23 01:03:36 +0300
  • a148da2ecf Add tests for the legacy tokens ErickSkrauch 2019-09-23 00:53:13 +0300
  • cf62c686b1 Rework identity provider for the legacy OAuth2 tokens [skip ci] ErickSkrauch 2019-09-22 18:42:21 +0300
  • c722c46ad5 Add support for the legacy refresh tokens, make the new refresh tokens non-expire [skip ci] ErickSkrauch 2019-09-22 02:42:08 +0300
  • 5536c34b9c Restore full functionality of OAuth2 server [skip ci] ErickSkrauch 2019-09-22 00:17:21 +0300
  • 45101d6453 Completely restored authorization_code grant for user side. Reworked oauth_sessions table. Added extension to use MariaDB's JSON columns. Rewritten tests for authorization_code grant for client side. Deprecate some old shit. [skip ci] ErickSkrauch 2019-09-18 02:14:05 +0300
  • 8a1d7148d0 Implemented public scopes repository. Fix some auth cases [skip ci] ErickSkrauch 2019-09-13 01:19:03 +0300
  • 4dc2a3025b Rewrite tests for OAuth2 validate and auth code complete steps [skip ci] ErickSkrauch 2019-09-06 02:32:57 +0300
  • 6c4ce8cb8d Increase cleanup timout for minecraft access tokens ErickSkrauch 2019-09-01 23:16:13 +0300
  • 29fc267148 Do not delete minecraft access token after its validation ErickSkrauch 2019-09-01 23:10:47 +0300
  • 0b63dc2d84 Upgrade oauth2-server to 8.0.0 version, rewrite repositories and entities, start rewriting tests. Intermediate commit [skip ci] ErickSkrauch 2019-08-23 11:28:04 +0300
  • 23a220637c Define default value for AUTHSERVER_HOST ErickSkrauch 2019-08-08 02:49:04 +0300
  • 89f7195a37 Fix index usage for OauthSessions relation from Account model ErickSkrauch 2019-08-08 02:47:36 +0300
  • 25df1c711a Slightly improved configuration for gitlab-ci [skip ci] ErickSkrauch 2019-08-03 22:49:17 +0300
  • 663cfd9dbc Improve caching for the build step ErickSkrauch 2019-08-03 22:10:29 +0300
  • d333798919 Define VERSION env variable as a step ErickSkrauch 2019-08-03 21:50:34 +0300
  • 80b99db0f8 Use 2-spaces for gitlab-ci.yml definitions ErickSkrauch 2019-08-03 16:16:08 +0300
  • 492118a0c0 Improve gitlab-ci configuration ErickSkrauch 2019-08-03 16:15:17 +0300
  • c90331c372 Fixes ACCOUNTS-5J2. Ensure, that JWT certs has correct owners. ErickSkrauch 2019-08-03 02:26:46 +0300
  • 6cfefcebc8 Fix dist docker-compose configuration for dev environment ErickSkrauch 2019-08-03 02:21:28 +0300
  • fff358e038 Merge branch 'jwt-encryption-algorithm' into 'master' ErickSkrauch 2019-08-02 21:27:07 +0000
  • 7f5cf76488 Merge branch 'change-skin-scope' into 'master' ErickSkrauch 2019-08-02 21:03:14 +0000
  • 34bb8da936 Merge branch 'reafactor-tokens-system' into jwt-encryption-algorithm ErickSkrauch 2019-08-02 23:47:15 +0300
  • 6ad66b28cf Generate keys pair if they aren't exists ErickSkrauch 2019-08-02 19:16:34 +0300
  • 967d8b11a0 Improve tests coverage ErickSkrauch 2019-08-02 18:32:08 +0300
  • d9f2b1a8c9 Upgrade PHPUnit to 8. Replace codeception/base with codeception/codeception due to release bug in the base version. ErickSkrauch 2019-08-02 15:57:17 +0300
  • 7b11366a5a Fix rbac generator ErickSkrauch 2019-08-02 03:36:24 +0300
  • f2ab7346aa Fixed almost everything, but all functional tests are broken at the last minute :( ErickSkrauch 2019-08-02 03:29:20 +0300
  • 6bd054e743 Fix some tests ErickSkrauch 2019-08-01 19:58:18 +0300
  • 45c2ed601d Replace emarref/jwt with lcobucci/jwt Refactor all JWT-related components Replace RS256 with ES256 as a preferred JWT algorithm ErickSkrauch 2019-08-01 12:17:12 +0300
  • b2bd267eda Removed change skin scope from refresh code valik 2019-07-31 15:23:01 +0300
  • 4c2a9cc172 Cleanup User Component, update tests ErickSkrauch 2019-07-26 17:04:57 +0300
  • e23c3aeaed Implemented change skin scope valik 2019-07-26 12:49:48 +0300
  • 445c234360 Added jwt public and private key path params to user component valik 2019-07-26 11:11:09 +0300
  • 3f9ee42539 Implemented Rs256 jwt encryption algorithm valik 2019-07-25 16:29:08 +0300
  • 3dbf29d34c Translate all code comments from Russian to English [skip ci] ErickSkrauch 2019-07-15 01:59:56 +0300
  • 31069562b3 Update Yii2 framework to the latest version ErickSkrauch 2019-06-18 02:33:20 +0300