Eric
bd9286f903
N°3985 - Performance checks on the back end - Use Session helper
2021-08-26 10:27:26 +02:00
denis.flaven@combodo.com
99d0c05c1c
N°4095 - Provisions for future implementation of users password
...
expiration.
2021-08-09 17:13:08 +02:00
Molkobain
8dd96ea636
Copyright year bump
2021-03-15 09:29:45 +01:00
odain
577ae34b50
Merge branch 'support/2.7' into develop
2021-03-09 15:40:30 +01:00
bruno-ds
1429792690
N°3668 - fix an improper redirection to the homepage when iTop is behind a reverse proxy
2021-03-04 09:39:48 +01:00
Pierre Goiffon
96e7f57a34
Merge remote-tracking branch 'origin/support/2.7' into develop
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
# application/itopwebpage.class.inc.php
# application/webpage.class.inc.php
# application/xmlpage.class.inc.php
# core/config.class.inc.php
# css/css-variables.scss
# datamodels/2.x/version.xml
# pages/ajax.document.php
# pages/ajax.render.php
# pages/ajax.searchform.php
# sources/application/TwigBase/Controller/Controller.php
2020-12-10 18:08:11 +01:00
Pierre Goiffon
ecebe4ecd5
N°3416 XFrame and cache headers optimizations
...
* Remove XFrame header set in \WebPage::no_cache : not this method responsability, was confusing :/
* Remove no_cache() calls when already set in page constructor (ajax_page mainly)
* Also calls everywhere the \WebPage::no_cache method instead of setting headers manually
2020-12-02 17:19:05 +01:00
Pierre Goiffon
8bfcb14d0c
N°3416 XFrame-Options header is now set using a config parameter, defaults to SAMEORIGIN
...
Also adds an indirection (\WebPage::add_xframe_options) to set header
2020-12-02 17:17:11 +01:00
Pierre Goiffon
7d26b6092e
Merge remote-tracking branch 'origin/support/2.7' into develop
...
# Conflicts:
# .idea/codeStyles/codeStyleConfig.xml
# .idea/inspectionProfiles/Combodo.xml
2020-10-06 10:42:55 +02:00
Pierre Goiffon
a765eb8725
Merge remote-tracking branch 'origin/support/2.6' into support/2.7
...
# Conflicts:
# application/ajaxwebpage.class.inc.php
# application/csvpage.class.inc.php
2020-10-05 16:12:49 +02:00
Pierre Goiffon
1551694198
N°3317 Security hardening
2020-10-05 14:42:03 +02:00
Eric
bef1832ac7
N°3317 - Add http headers
2020-09-29 14:07:24 +02:00
Eric
1453558f3e
N°3317 - Add http headers
2020-09-22 11:39:19 +02:00
Eric
1afc6cd4c5
N°2363 - Fix typo
2020-08-27 10:50:34 +02:00
acognet
ca28f8f3c4
2393 - API : Font Awesome remove v4 compatibility
2020-06-30 16:28:15 +02:00
acognet
e9a1167da6
N°2363 - API : deprecate old linkedset update pattern
2020-06-30 09:02:42 +02:00
Eric
fa3610cfee
N°2641 - Create a dedicated ErrorPage for fatal errors
...
Fix fatal errors being logged in setup.log instead of error.log
2020-05-14 14:37:38 +02:00
Eric
1b2d3d1e84
N°2952 - Provisioning for hybrid auth fails
...
Changed Origin for change to an allowed value
2020-04-21 11:59:48 +02:00
Eric
a3a34a94e7
N°1355 - Security hardening
2020-04-06 11:47:57 +02:00
Stephen Abello
f9af8fc912
N°2855 - Security hardening
...
(cherry picked from commit c5c7fd5c85 )
2020-04-06 09:20:02 +02:00
Stephen Abello
c5c7fd5c85
N°2855 - Security hardening
2020-03-12 14:13:17 +01:00
Stephen Abello
ecc0b57b31
Merge branch 'master' into develop
...
# Conflicts:
# css/css-variables.scss
# css/light-grey.css
# datamodels/2.x/authent-external/module.authent-external.php
# datamodels/2.x/authent-ldap/module.authent-ldap.php
# datamodels/2.x/authent-local/module.authent-local.php
# datamodels/2.x/itop-attachments/module.attachments.php
# datamodels/2.x/itop-backup/module.itop-backup.php
# datamodels/2.x/itop-bridge-virtualization-storage/module.itop-bridge-virtualization-storage.php
# datamodels/2.x/itop-change-mgmt-itil/module.itop-change-mgmt-itil.php
# datamodels/2.x/itop-change-mgmt/module.itop-change-mgmt.php
# datamodels/2.x/itop-config-mgmt/module.itop-config-mgmt.php
# datamodels/2.x/itop-config/module.itop-config.php
# datamodels/2.x/itop-datacenter-mgmt/module.itop-datacenter-mgmt.php
# datamodels/2.x/itop-endusers-devices/module.itop-endusers-devices.php
# datamodels/2.x/itop-full-itil/module.itop-full-itil.php
# datamodels/2.x/itop-hub-connector/module.itop-hub-connector.php
# datamodels/2.x/itop-incident-mgmt-itil/module.itop-incident-mgmt-itil.php
# datamodels/2.x/itop-knownerror-mgmt/module.itop-knownerror-mgmt.php
# datamodels/2.x/itop-portal-base/module.itop-portal-base.php
# datamodels/2.x/itop-portal/module.itop-portal.php
# datamodels/2.x/itop-problem-mgmt/module.itop-problem-mgmt.php
# datamodels/2.x/itop-profiles-itil/module.itop-profiles-itil.php
# datamodels/2.x/itop-request-mgmt-itil/module.itop-request-mgmt-itil.php
# datamodels/2.x/itop-request-mgmt/module.itop-request-mgmt.php
# datamodels/2.x/itop-service-mgmt-provider/module.itop-service-mgmt-provider.php
# datamodels/2.x/itop-service-mgmt/module.itop-service-mgmt.php
# datamodels/2.x/itop-sla-computation/module.itop-sla-computation.php
# datamodels/2.x/itop-storage-mgmt/module.itop-storage-mgmt.php
# datamodels/2.x/itop-tickets/module.itop-tickets.php
# datamodels/2.x/itop-virtualization-mgmt/module.itop-virtualization-mgmt.php
# datamodels/2.x/itop-welcome-itil/module.itop-welcome-itil.php
# datamodels/2.x/version.xml
2020-01-20 16:42:42 +01:00
Stephen Abello
6a1125875b
Merge branch 'support/2.5'
...
# Conflicts:
# css/css-variables.scss
# css/light-grey.css
# datamodels/2.x/authent-external/module.authent-external.php
# datamodels/2.x/authent-ldap/module.authent-ldap.php
# datamodels/2.x/authent-local/module.authent-local.php
# datamodels/2.x/itop-attachments/module.attachments.php
# datamodels/2.x/itop-backup/module.itop-backup.php
# datamodels/2.x/itop-bridge-virtualization-storage/module.itop-bridge-virtualization-storage.php
# datamodels/2.x/itop-change-mgmt-itil/module.itop-change-mgmt-itil.php
# datamodels/2.x/itop-change-mgmt/module.itop-change-mgmt.php
# datamodels/2.x/itop-config-mgmt/module.itop-config-mgmt.php
# datamodels/2.x/itop-config/module.itop-config.php
# datamodels/2.x/itop-datacenter-mgmt/module.itop-datacenter-mgmt.php
# datamodels/2.x/itop-endusers-devices/module.itop-endusers-devices.php
# datamodels/2.x/itop-full-itil/module.itop-full-itil.php
# datamodels/2.x/itop-hub-connector/module.itop-hub-connector.php
# datamodels/2.x/itop-incident-mgmt-itil/module.itop-incident-mgmt-itil.php
# datamodels/2.x/itop-knownerror-mgmt/module.itop-knownerror-mgmt.php
# datamodels/2.x/itop-portal-base/module.itop-portal-base.php
# datamodels/2.x/itop-portal/module.itop-portal.php
# datamodels/2.x/itop-problem-mgmt/module.itop-problem-mgmt.php
# datamodels/2.x/itop-profiles-itil/module.itop-profiles-itil.php
# datamodels/2.x/itop-request-mgmt-itil/module.itop-request-mgmt-itil.php
# datamodels/2.x/itop-request-mgmt/module.itop-request-mgmt.php
# datamodels/2.x/itop-service-mgmt-provider/module.itop-service-mgmt-provider.php
# datamodels/2.x/itop-service-mgmt/module.itop-service-mgmt.php
# datamodels/2.x/itop-sla-computation/module.itop-sla-computation.php
# datamodels/2.x/itop-storage-mgmt/module.itop-storage-mgmt.php
# datamodels/2.x/itop-tickets/module.itop-tickets.php
# datamodels/2.x/itop-virtualization-mgmt/module.itop-virtualization-mgmt.php
# datamodels/2.x/itop-welcome-itil/module.itop-welcome-itil.php
# datamodels/2.x/version.xml
2020-01-20 16:10:21 +01:00
Stephen Abello
248dab9289
N°2633 - Security hardening
2020-01-20 15:46:04 +01:00
bruno DA SILVA
69551378c2
n°524 - password policy
...
- ajax message is now translated in the user's language
- prevent the form submission if the password policy is not respected
2020-01-06 18:33:47 +01:00
bruno DA SILVA
7a85201a07
524 - password policy
...
"change pwd" page: add feedback during the password typing
2020-01-06 09:31:28 +01:00
bruno DA SILVA
015955f396
N°2306 - Security hardening
2019-12-30 17:31:50 +01:00
bruno DA SILVA
490eda4f4a
n°524 - password policy
...
bugfix : Enter Password phrase no more lack the userName and is properly displayed
2019-12-05 09:55:44 +01:00
bruno DA SILVA
267cdd2aee
n°524 - password policy
...
- "password reset" workflow now handle gracefully the policy enforcement.
2019-11-28 08:52:02 +01:00
Pierre Goiffon
0ee77d8c88
N°2163 DB*Tracked methods : modifications after review with Romain
...
Previous commit : 24eb82d1
Use \CMDBObject::SetTrackInfo
Move \CMDBObject::SetCurrentChange calls at the top most level of the stacks
Restore old behaviors that were removed in previous commit
2019-11-25 14:58:59 +01:00
bruno DA SILVA
23fc4bb4f7
n°524 - password policy
2019-11-22 12:23:00 +01:00
Pierre Goiffon
24eb82d140
N°2361 Deprecate DB*Tracked methods
...
* update methods PHPDoc
* DBInsertTracked update callers
* DBInsertTrackedNoReload update callers
* DBUpdateTracked update callers
* DBDeleteTracked update callers
2019-11-15 17:56:04 +01:00
Eric
4816b2b0fe
N°2311 - Authentication extensibility in iTop (login on specific pages and traces)
2019-11-13 15:08:34 +01:00
Eric
ee037acd34
N°2315 - Login screen extensibility API refactor
2019-10-25 08:32:29 +02:00
Eric
c552e73d20
N°2315 - Login screen extensibility API refactor
2019-10-24 14:56:01 +02:00
Eric
ed9259df9e
🐛 Fix access to change password page
...
🎨 Code cleanup
2019-10-15 11:43:47 +02:00
Pierre Goiffon
4afed39b0e
N°2529 Fix charset sent by logout page
2019-10-09 18:07:08 +02:00
Eric
75dc11b882
N°2311 - Refactor Login FSM for errors
2019-09-30 13:45:50 +02:00
Eric
7acb53a22f
N°2311 - Refactor Login FSM for errors
2019-09-27 13:12:00 +02:00
Eric
ee621c1b92
N°2311 - Login Page extensibility
2019-09-06 17:40:29 +02:00
Eric
b2ab07aa69
N°2311 - Login Page extensibility
2019-08-30 15:07:51 +02:00
Eric
58402cdda8
N°2311 - User Provisioning API documentation
2019-08-22 14:38:07 +02:00
Eric
59fa3e10a3
N°2311 - User Provisioning API
2019-08-22 14:00:54 +02:00
Eric
9a13d4ce04
N°2311 - Code cleanup
2019-08-20 18:04:44 +02:00
Eric
7120201469
N°2311 - Extend logout/error page
2019-08-20 09:53:11 +02:00
Eric
953c9e588e
N°2311 - CAS Extension
2019-08-16 17:39:48 +02:00
Eric
2ceb4068ad
N°2311 - Refactor Login FSM Extensions
2019-08-16 17:39:48 +02:00
Eric
11f62063a6
N°2311 - Debug login FSM
2019-08-16 17:39:47 +02:00
Eric
7885d712a6
N°2311 - Authentication extensibility in iTop
2019-08-16 17:39:47 +02:00
Thomas Casteleyn
ab0c97621a
Add support to optionally mention username in password reset mail ( #76 )
...
Can now use login in reset password email dict keys
* UI:ResetPwd-EmailSubject
* UI:ResetPwd-EmailBody
2019-04-29 11:12:19 +02:00