Joakim Plate
38d2cacf7a
Support blocking trusted network from new ip ( #44630 )
...
Co-authored-by: Paulus Schoutsen <paulus@home-assistant.io>
2021-01-28 12:06:20 +01:00
Philip Allgaier
625bbe6238
Cleanup unused loggers (components A-M) ( #41600 )
2020-10-12 16:59:05 +02:00
Franck Nijhof
cc4ebc925c
Improve X-Forwarded-* request headers handling ( #38696 )
...
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
Co-authored-by: Martin Hjelmare <marhje52@gmail.com>
Co-authored-by: Franck Nijhof <git@frenck.dev>
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
2020-08-11 22:57:50 +02:00
springstan
4c38e6cfa5
Use HTTP_BAD_REQUEST constant ( #33797 )
2020-04-09 21:43:42 +02:00
springstan
bc26be3c11
Add and use HTTP_FORBIDDEN constant ( #33839 )
2020-04-09 17:41:17 +02:00
springstan
8d61893c39
Use HTTP_OK constant ( #33798 )
...
* Use http ok constant
* Remove incorrect use
* Run isort
* Fix pylint by adding missing imports
* Fix pylint by fixing one import
2020-04-08 11:47:38 -05:00
Bas Nijholt
6ad3b6426a
sort imports according to PEP8 for auth ( #29619 )
2019-12-08 14:55:23 +01:00
Paulus Schoutsen
4de97abc3a
Black
2019-07-31 12:25:30 -07:00
cgtobi
2c07bfb9e0
Remove dependencies and requirements ( #23024 )
...
* Remove dependencies and requirements
* Revert "Remove dependencies and requirements"
This reverts commit fe7171b4cd
.
* Remove dependencies and requirements
* Revert "Remove dependencies and requirements"
This reverts commit 391355ee2c
.
* Remove dependencies and requirements
* Fix flake8 complaints
* Fix more flake8 complaints
* Revert non-component removals
2019-04-12 10:13:30 -07:00
Robbie Trencheny
f5c677146a
Make inlined JSON example valid
2019-04-10 21:58:50 -07:00
Paulus Schoutsen
8bfbe3e085
Add update user command ( #21922 )
...
* Add update user command
* Add is_admin to current user
2019-03-11 12:08:02 -07:00
Paulus Schoutsen
3da0ed9cc7
Onboarding to generate auth code ( #21777 )
2019-03-08 13:51:42 -08:00
Paulus Schoutsen
312d49caec
Allow creating signed urls ( #17759 )
...
* Allow creating signed urls
* Fix parameter
* Lint
2018-10-25 16:44:57 +02:00
Paulus Schoutsen
c7c0ed89c8
Convert auth websocket commands to use async_response decorator ( #17755 )
2018-10-24 15:23:09 +02:00
Paulus Schoutsen
2e6346ca43
Break up websocket 2 ( #17028 )
...
* Break up websocket 2
* Lint+Test
* Lintttt
* Rename
2018-10-01 16:09:31 +02:00
Jason Hu
75c372021d
Fix example for long-lived access token WS API ( #16882 )
2018-09-26 11:20:48 +02:00
Jason Hu
ff78a5b04b
Track refresh token last usage information ( #16408 )
...
* Extend refresh_token to support last_used_at and last_used_by
* Address code review comment
* Remove unused code
* Add it to websocket response
* Fix typing
2018-09-12 13:24:16 +02:00
Jason Hu
34d369ba26
Return if refresh token is current used one in WS API ( #16575 )
2018-09-12 09:49:44 +02:00
Paulus Schoutsen
0db13a99aa
Add websocket commands for refresh tokens ( #16559 )
...
* Add websocket commands for refresh tokens
* Comment
2018-09-11 09:08:03 -07:00
Jason Hu
9583947012
Long-lived access token ( #16453 )
...
* Allow create refresh_token with specific access_token_expiration
* Add token_type, client_name and client_icon
* Add unit test
* Add websocket API to create long-lived access token
* Allow URL use as client_id for long-lived access token
* Remove mutate_refresh_token method
* Use client name as id for long_lived_access_token type refresh token
* Minor change
* Do not allow duplicate client name
* Update docstring
* Remove unnecessary `list`
2018-09-11 12:05:15 +02:00
Jason Hu
e8775ba2b4
Add multi-factor auth module setup flow ( #16141 )
...
* Add mfa setup flow
* Lint
* Address code review comment
* Fix unit test
* Add assertion for WS response ordering
* Missed a return
* Remove setup_schema from MFA base class
* Move auth.util.validate_current_user -> webscoket_api.ws_require_user
2018-08-24 10:17:43 -07:00
Paulus Schoutsen
cdb8361050
Add support for revoking refresh tokens ( #16095 )
...
* Add support for revoking refresh tokens
* Lint
* Split revoke logic in own method
* Simplify
* Update docs
2018-08-21 11:02:55 -07:00
Jason Hu
f84a31871e
Get user after login flow finished ( #16047 )
...
* Get user after login flow finished
* Add optional parameter 'type' to /auth/login_flow
* Update __init__.py
2018-08-21 10:18:04 +02:00
Paulus Schoutsen
e776f88eec
Use JWT for access tokens ( #15972 )
...
* Use JWT for access tokens
* Update requirements
* Improvements
2018-08-14 21:14:12 +02:00
Jason Hu
93d6fb8c60
Break up components/auth ( #15713 )
2018-07-28 17:54:26 -07:00
Jerad Meisner
cbb5d34167
Added user credentials to current_user ws endpoint. ( #15558 )
...
* Added user credentials to current_user ws endpoint.
* Comments. Added another test.
* Return list of credentials.
2018-07-25 10:34:18 +02:00
Jason Hu
d7690c5fda
Add ipban for failed login attempt in new login flow ( #15551 )
...
* Add ipban for failed login attempt in new login flow
* Address review comment
* Use decorator to clean up code
2018-07-24 10:09:52 +02:00
Paulus Schoutsen
4e7dbf9ce5
Allow system users to refresh tokens ( #15574 )
2018-07-23 14:06:09 +02:00
Ville Skyttä
b7c336a687
Pylint cleanups ( #15626 )
...
* Pylint 2 no-else-return fixes
* Remove unneeded abstract-class-not-used pylint disable
2018-07-23 10:16:05 +02:00
Paulus Schoutsen
2a76a0852f
Allow CORS requests to token endpoint ( #15519 )
...
* Allow CORS requests to token endpoint
* Tests
* Fuck emulated hue
* Clean up
* Only cors existing methods
2018-07-19 08:37:00 +02:00
Paulus Schoutsen
8797cb78a9
Add current user WS command ( #15485 )
2018-07-17 09:24:51 +02:00
Paulus Schoutsen
864a254071
Aware comments ( #15480 )
...
* Make sure we cannot deactivate the owner
* Use different error code when trying to fetch token for inactive user
2018-07-15 23:09:05 +02:00
Paulus Schoutsen
ed0cfc4f31
Add user via cmd line creates owner ( #15470 )
...
* Add user via cmd line creates owner
* Ensure access tokens are not verified for inactive users
* Stale print
* Lint
2018-07-15 20:46:15 +02:00
Paulus Schoutsen
70fe463ef0
User management ( #15420 )
...
* User management
* Lint
* Fix dict
* Reuse data instance
* OrderedDict all the way
2018-07-13 15:31:20 +02:00
Paulus Schoutsen
dbdd0a1f56
Expire auth code after 10 minutes ( #15381 )
2018-07-10 11:20:22 +02:00
Paulus Schoutsen
0d4841cbea
Use IndieAuth for client ID ( #15369 )
...
* Use IndieAuth for client ID
* Lint
* Lint & Fix tests
* Allow local IP addresses
* Update comment
2018-07-09 18:24:46 +02:00
Paulus Schoutsen
cb129bd207
Add system generated users ( #15291 )
...
* Add system generated users
* Fix typing
2018-07-04 11:50:08 -04:00
Paulus Schoutsen
5ec7fc7ddb
Backend tweaks to make authorization work ( #14339 )
...
* Backend tweaks to make authorization work
* Lint
* Add test
* Validate redirect uris
* Fix tests
* Fix tests
* Lint
2018-05-10 10:38:11 +02:00
Paulus Schoutsen
cdd45e7878
Foundation for users ( #13968 )
...
* Add initial user foundation to Home Assistant
* Address comments
* Address comments
* Allow non-ascii passwords
* One more utf-8 hmac compare digest
* Add new line
2018-05-01 18:20:41 +02:00