Commit Graph

98 Commits

Author SHA1 Message Date
Joe Nahmias af2d972914 fix(test): adjust plugin dir test to work on released versions 2023-06-07 20:38:02 -07:00
Frédéric Guillot 463dfbf4fe Fix incorrect parameter encoding when using URLs rewriting
A parameter with quotes or other special characters should be url encoded.

Incorrect encoding could happen when using search queries like this one:

modified:">=2023-04-01"
2023-04-19 21:37:19 -07:00
peter af8159b4bb Allow full name to be retrieved by SSO ReverseProxy
Expand on #4585 by also getting the user's full name from the Reverse Proxy:
If a ReverseProxy provides more than REMOTE_USER, such as email, it might
as well also provide the user's full name.
2023-02-18 17:28:39 -08:00
irdc 4b76bc5b32
Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>
2022-09-17 17:23:41 -07:00
Frédéric Guillot f5bb55bdb8
PHP 8 Compatibility 2022-02-05 11:49:03 -08:00
Frédéric Guillot 31ce583743 Write RememberMe cookie only after 2FA has been validated 2021-04-04 17:57:47 -07:00
operateur404 d382e2e4be
LDAP protocol/host/port configuration by URL; make BASE_DN optional
PHP ldap_connect($host, $port) function signature is deprecated: https://www.php.net/manual/en/function.ldap-connect.php

Querying an AD Global Catalog across an entire forest requires an empty base DN
2021-02-03 18:49:50 -08:00
Eskiso 4d1205a0fe
Don't force role of user if no ldap groups defined
We should not force role of user on LDAP logins if there are not Manager/Admin groups defined, return null to get the one from database as before.
2020-12-02 22:44:39 -08:00
JayBeeDe e3e9cabd8b
Added setting that makes possible any new LDAP user to be Manager by default 2020-10-04 12:11:07 -07:00
mildis 33c3b32cda
Allow email to be retrieve by SSO ReverseProxy
If REMOTE_EMAIL header is set, use it as user email.
If REVERSE_PROXY_DEFAULT_DOMAIN is set but not REMOTE_EMAIL, use the current construct.
2020-08-28 22:59:59 -07:00
mildis 9e1e4ea381
Allow use of the user's DN as the group filter substitution 2020-05-21 20:57:30 -07:00
Timo 027f875ac6
Save task list order in user session 2020-04-22 20:40:39 -07:00
Timo 64397f45fa Kanboard now requires PHP >= 7.2 since other versions are deprecated 2020-01-14 12:02:31 -08:00
Frédéric Guillot 928f80d569 Update unit tests 2019-01-30 22:25:57 -08:00
Frédéric Guillot c84378648f Fallback to "status:open" if there is no user filter 2018-04-02 19:18:11 -07:00
Aurélien 5f7a3442d6 Add default filter per user 2018-04-02 14:07:04 -07:00
DebianRoxx d34a5c50c4 Fix role precedence in LDAP integration 2018-03-08 13:20:33 -08:00
Frédéric Guillot a93b8e10f5 Kanboard requires at least PHP 5.6 now 2017-12-15 11:55:42 -08:00
Frédéric Guillot ccd177ada6 Store PHP sessions in the database 2017-12-12 15:04:28 -08:00
Frederic Guillot 3e1b1e0249 Improve LDAP error reporting 2017-02-05 19:34:12 -05:00
Frederic Guillot 99b3bfae16 Add unit test for PR #2766 2017-02-05 12:59:39 -05:00
Frederic Guillot c185d24156 Update SQL exports 2017-01-28 11:37:43 -05:00
Frederic Guillot 81d14efbd1 Simplify date and time configuration to avoid potential validation issues 2017-01-24 20:16:43 -05:00
Frederic Guillot d81fb20df6 Fix wrong datetime formatting when task form shows validation errors 2017-01-24 20:04:58 -05:00
Frederic Guillot 2cac4c811d Add workaround when IE11 submit corrupted multipart/form-data 2017-01-14 13:44:57 -05:00
Frederic Guillot 07f9700179 Offer the possibility to define version compatibility from plugins 2017-01-08 17:02:31 -05:00
Frederic Guillot a957195952 Add test case for ExternalTaskManager::getProvidersList() 2016-12-20 17:40:33 -05:00
Frederic Guillot 94cd5869bf
Do not load translations from a relative path
When the application is installed outside of the
document root, loading translations will not work.
2016-11-15 20:43:14 -05:00
Frederic Guillot ae5d31e4c2
Add ExternalTaskManager class 2016-11-01 22:18:43 -04:00
Frederic Guillot fedf4ea2de
Custom project roles inherit from project members 2016-09-08 20:44:03 -04:00
Frederic Guillot ffd58d06fa
Support version operators for plugin directory: >= and > 2016-09-03 18:02:00 -04:00
Frederic Guillot 1b6b1cc5e6
Time spent for subtasks are not rounded too the nearest quarter anymore 2016-08-31 21:32:29 -04:00
Frederic Guillot 3861e90336
Fix wrong project date format (shown as 01/01/1970) 2016-08-31 21:04:22 -04:00
Frederic Guillot 51fef80f7d
Store board collapsed mode user preference in the database 2016-08-22 21:20:48 -04:00
Frederic Guillot 1d16a53c48
Store comment sorting direction in user metadata 2016-08-21 20:36:16 -04:00
Frederic Guillot 8e83e404fb
Add FileCache driver 2016-08-21 18:46:34 -04:00
Frederic Guillot 4ffaba2ba0
Add reference hooks 2016-08-13 14:23:53 -04:00
Frederic Guillot 92a5a0f860
Cleanup events and stuff before processing job in worker 2016-07-31 11:28:33 -04:00
Frederic Guillot 3aa0f85748
Fixed search query with multiple assignees (nested OR conditions) 2016-07-16 19:15:26 -04:00
Frederic Guillot 4364559805
Handle HTTP header X-Real-IP to get IP address 2016-07-16 14:11:14 -04:00
Frederic Guillot 9496dfdb6d
Make search attributes not case sensitive 2016-07-14 11:39:59 -04:00
Frederic Guillot a8a8bfb0af
Added more unit tests for LDAP user class 2016-07-02 18:23:47 -04:00
Frederic Guillot a089cd72de
Fixed lexer issue with non word characters 2016-07-01 09:47:10 -04:00
Frederic Guillot b2e92480c2
Added filter class for tags 2016-06-24 11:40:58 -04:00
Frederic Guillot 656f430632 Changed DateParser to use only user format and ISO-8601 2016-06-05 21:28:56 -04:00
Frederic Guillot c50255813b Added mail helper 2016-06-01 21:28:24 -04:00
Sébastien Kergreis 6af3b6dfdb Fix filters with UTF-8 characters 2016-06-01 13:48:22 -05:00
Frederic Guillot 4987e245bb Do not sync user role if LDAP groups are not configured 2016-05-30 21:47:31 -04:00
Frederic Guillot 14713b0ec7 Rename all models 2016-05-28 19:48:22 -04:00
Frederic Guillot 74a84a28e3 Support strtotime strings for date search 2016-05-25 21:00:01 -04:00