Joe Nahmias
af2d972914
fix(test): adjust plugin dir test to work on released versions
2023-06-07 20:38:02 -07:00
Frédéric Guillot
463dfbf4fe
Fix incorrect parameter encoding when using URLs rewriting
...
A parameter with quotes or other special characters should be url encoded.
Incorrect encoding could happen when using search queries like this one:
modified:">=2023-04-01"
2023-04-19 21:37:19 -07:00
peter
af8159b4bb
Allow full name to be retrieved by SSO ReverseProxy
...
Expand on #4585 by also getting the user's full name from the Reverse Proxy:
If a ReverseProxy provides more than REMOTE_USER, such as email, it might
as well also provide the user's full name.
2023-02-18 17:28:39 -08:00
irdc
4b76bc5b32
Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
...
* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942 .
* Added missing CSRF check for starting/stopping subtask timers.
Co-authored-by: Willemijn Coene <willemijn@irdc.nl>
2022-09-17 17:23:41 -07:00
Frédéric Guillot
f5bb55bdb8
PHP 8 Compatibility
2022-02-05 11:49:03 -08:00
Frédéric Guillot
31ce583743
Write RememberMe cookie only after 2FA has been validated
2021-04-04 17:57:47 -07:00
operateur404
d382e2e4be
LDAP protocol/host/port configuration by URL; make BASE_DN optional
...
PHP ldap_connect($host, $port) function signature is deprecated: https://www.php.net/manual/en/function.ldap-connect.php
Querying an AD Global Catalog across an entire forest requires an empty base DN
2021-02-03 18:49:50 -08:00
Eskiso
4d1205a0fe
Don't force role of user if no ldap groups defined
...
We should not force role of user on LDAP logins if there are not Manager/Admin groups defined, return null to get the one from database as before.
2020-12-02 22:44:39 -08:00
JayBeeDe
e3e9cabd8b
Added setting that makes possible any new LDAP user to be Manager by default
2020-10-04 12:11:07 -07:00
mildis
33c3b32cda
Allow email to be retrieve by SSO ReverseProxy
...
If REMOTE_EMAIL header is set, use it as user email.
If REVERSE_PROXY_DEFAULT_DOMAIN is set but not REMOTE_EMAIL, use the current construct.
2020-08-28 22:59:59 -07:00
mildis
9e1e4ea381
Allow use of the user's DN as the group filter substitution
2020-05-21 20:57:30 -07:00
Timo
027f875ac6
Save task list order in user session
2020-04-22 20:40:39 -07:00
Timo
64397f45fa
Kanboard now requires PHP >= 7.2 since other versions are deprecated
2020-01-14 12:02:31 -08:00
Frédéric Guillot
928f80d569
Update unit tests
2019-01-30 22:25:57 -08:00
Frédéric Guillot
c84378648f
Fallback to "status:open" if there is no user filter
2018-04-02 19:18:11 -07:00
Aurélien
5f7a3442d6
Add default filter per user
2018-04-02 14:07:04 -07:00
DebianRoxx
d34a5c50c4
Fix role precedence in LDAP integration
2018-03-08 13:20:33 -08:00
Frédéric Guillot
a93b8e10f5
Kanboard requires at least PHP 5.6 now
2017-12-15 11:55:42 -08:00
Frédéric Guillot
ccd177ada6
Store PHP sessions in the database
2017-12-12 15:04:28 -08:00
Frederic Guillot
3e1b1e0249
Improve LDAP error reporting
2017-02-05 19:34:12 -05:00
Frederic Guillot
99b3bfae16
Add unit test for PR #2766
2017-02-05 12:59:39 -05:00
Frederic Guillot
c185d24156
Update SQL exports
2017-01-28 11:37:43 -05:00
Frederic Guillot
81d14efbd1
Simplify date and time configuration to avoid potential validation issues
2017-01-24 20:16:43 -05:00
Frederic Guillot
d81fb20df6
Fix wrong datetime formatting when task form shows validation errors
2017-01-24 20:04:58 -05:00
Frederic Guillot
2cac4c811d
Add workaround when IE11 submit corrupted multipart/form-data
2017-01-14 13:44:57 -05:00
Frederic Guillot
07f9700179
Offer the possibility to define version compatibility from plugins
2017-01-08 17:02:31 -05:00
Frederic Guillot
a957195952
Add test case for ExternalTaskManager::getProvidersList()
2016-12-20 17:40:33 -05:00
Frederic Guillot
94cd5869bf
Do not load translations from a relative path
...
When the application is installed outside of the
document root, loading translations will not work.
2016-11-15 20:43:14 -05:00
Frederic Guillot
ae5d31e4c2
Add ExternalTaskManager class
2016-11-01 22:18:43 -04:00
Frederic Guillot
fedf4ea2de
Custom project roles inherit from project members
2016-09-08 20:44:03 -04:00
Frederic Guillot
ffd58d06fa
Support version operators for plugin directory: >= and >
2016-09-03 18:02:00 -04:00
Frederic Guillot
1b6b1cc5e6
Time spent for subtasks are not rounded too the nearest quarter anymore
2016-08-31 21:32:29 -04:00
Frederic Guillot
3861e90336
Fix wrong project date format (shown as 01/01/1970)
2016-08-31 21:04:22 -04:00
Frederic Guillot
51fef80f7d
Store board collapsed mode user preference in the database
2016-08-22 21:20:48 -04:00
Frederic Guillot
1d16a53c48
Store comment sorting direction in user metadata
2016-08-21 20:36:16 -04:00
Frederic Guillot
8e83e404fb
Add FileCache driver
2016-08-21 18:46:34 -04:00
Frederic Guillot
4ffaba2ba0
Add reference hooks
2016-08-13 14:23:53 -04:00
Frederic Guillot
92a5a0f860
Cleanup events and stuff before processing job in worker
2016-07-31 11:28:33 -04:00
Frederic Guillot
3aa0f85748
Fixed search query with multiple assignees (nested OR conditions)
2016-07-16 19:15:26 -04:00
Frederic Guillot
4364559805
Handle HTTP header X-Real-IP to get IP address
2016-07-16 14:11:14 -04:00
Frederic Guillot
9496dfdb6d
Make search attributes not case sensitive
2016-07-14 11:39:59 -04:00
Frederic Guillot
a8a8bfb0af
Added more unit tests for LDAP user class
2016-07-02 18:23:47 -04:00
Frederic Guillot
a089cd72de
Fixed lexer issue with non word characters
2016-07-01 09:47:10 -04:00
Frederic Guillot
b2e92480c2
Added filter class for tags
2016-06-24 11:40:58 -04:00
Frederic Guillot
656f430632
Changed DateParser to use only user format and ISO-8601
2016-06-05 21:28:56 -04:00
Frederic Guillot
c50255813b
Added mail helper
2016-06-01 21:28:24 -04:00
Sébastien Kergreis
6af3b6dfdb
Fix filters with UTF-8 characters
2016-06-01 13:48:22 -05:00
Frederic Guillot
4987e245bb
Do not sync user role if LDAP groups are not configured
2016-05-30 21:47:31 -04:00
Frederic Guillot
14713b0ec7
Rename all models
2016-05-28 19:48:22 -04:00
Frederic Guillot
74a84a28e3
Support strtotime strings for date search
2016-05-25 21:00:01 -04:00