dkanada
51cdc6ea16
Merge pull request #1926 from Bond-009/auth
...
Add clearer exceptions, warnings and docs
5 years ago
Bond-009
413ae86dbc
Fix easy password
5 years ago
Bond_009
a245f5a0d4
Rewrite hex encoder/decoder
5 years ago
Bond_009
d9a03c9bb1
Fix more warnings
5 years ago
Bond_009
fef35d0505
Add clearer exceptions, warnings and docs
5 years ago
Bond_009
c9820d30ed
Fix multiple mistakes and warnings
5 years ago
Bond-009
6f17a0b7af
Remove legacy auth code ( #1677 )
...
* Remove legacy auth code
* Adds tests so we don't break PasswordHash (again)
* Clean up interfaces
* Remove duplicate code
* Use auto properties
* static using
* Don't use 'this'
* Fix build
5 years ago
Bond-009
221b831bb2
Reset invalid login counter on successfull login
5 years ago
Bond_009
24fac4b191
Fix UserNotFoundError
5 years ago
Bond_009
8d3b5c851d
Improvements to UserManager
5 years ago
Bond_009
0f897589ed
Streamline authentication proccess
5 years ago
Bond_009
d961278b3d
Reduce amount of raw sql
5 years ago
Joshua M. Boniface
2946ae1009
Revert "Don't set a default reset provider"
...
This reverts commit c230d49d7c
.
This reenables an edge case where an admin might want to reset, with
the default auth provider, the password of an externally-provided
user so they could "unlock" the account while it was failing. There
might be minor security implications to this, but the malicious
actor would need FS access to do it (as they would with any password
resets) so it's probably best to keep it as-is.
Removing this in the first place was due to a misunderstanding
anyways so no harm.
5 years ago
Joshua M. Boniface
4b8f735cb8
Remove superfluous conditional
...
This wasn't needed to prevent updating the policy on-disk from my
tests and can be removed as suggested by @Bond-009
5 years ago
Joshua M. Boniface
c230d49d7c
Don't set a default reset provider
5 years ago
Joshua M. Boniface
b70083f3b3
Apply suggestions from code review
...
Co-Authored-By: Claus Vium <cvium@users.noreply.github.com>
Co-Authored-By: Bond-009 <bond.009@outlook.com>
5 years ago
Joshua M. Boniface
74ef389879
Add nicer log message and comment
5 years ago
Joshua M. Boniface
d78a55adb4
Implement InvalidAuthProvider
...
Implements the InvalidAuthProvider, which acts as a fallback if a
configured authentication provider, e.g. LDAP, is unavailable due
to a load failure or removal. Until the user or the authentication
plugin is corrected, this will cause users with the missing provider
to be locked out, while throwing errors in the logs about the issue.
Fixes #1445 part 2
5 years ago
DrPandemic
69ee49bee6
Format correctly the PIN when updating it
6 years ago
DrPandemic
c22068d6b1
Fix pin bug introduced in 10.3.z.
...
The issue is that the new easyPassword format prepends the hash
function. This PR extract the hash from "$SHA1$_hash_".
6 years ago
bugfixin
1df73fdeba
Fix incorrect hasPassword flag when easy pin set
6 years ago
Joshua Boniface
1af9c047fb
Override username with AuthenticationProvider
...
Pass back the Username directive returned by an AuthenticationProvider
to the calling code, so we may override the user-provided Username
value if the authentication provider passes this back. Useful for
instance in an LDAP scenario where what the user types may not
necessarily be the "username" that is mapped in the system, e.g.
the user providing 'mail' while 'uid' is the "username" value.
Could also then be extensible to other authentication providers
as well, should they wish to do a similar thing.
6 years ago
LogicalPhallacy
740c95d557
Apply minor suggestions from code review
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
86772bd7bd
removes needless dictionary
6 years ago
Claus Vium
4e2841f0d7
Update Emby.Server.Implementations/Library/UserManager.cs
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
09921a00aa
made password resets an interface and per user
6 years ago
Phallacy
80aedcd7e2
really fixed line endings
6 years ago
Phallacy
b04200ca68
adding regex fix
6 years ago
Joshua M. Boniface
e3dbed1c1a
Update Emby.Server.Implementations/Library/UserManager.cs
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
7f0fa74467
updated regex to string literal with escaped -
6 years ago
Phallacy
1ee016c997
configurable user lockout
6 years ago
Phallacy
bef665be36
Minor fixes to address style issues
6 years ago
Phallacy
2c26517172
minor style fixes
6 years ago
Phallacy
a0d31a49a0
merging with master to clear merge conflict
6 years ago
Phallacy
6bbb968b57
minor changes and return to netstandard
6 years ago
Joshua M. Boniface
89d4ce309d
Merge pull request #848 from Bond-009/perf
...
Minor changes to reduce allocations
6 years ago
Phallacy
48e7274d37
added justaman notes, fixed new bug from emty has removals
6 years ago
Phallacy
77602aff88
Minor fixes re:PR870, added null checks from PR876
6 years ago
Bond_009
64d5ec12e2
Use HashSets for increased perf
6 years ago
Phallacy
05bbf71b6d
sha256 with salt auth and sha1 interop
6 years ago
LogicalPhallacy
8bf88f4cb2
Merge pull request #9 from jellyfin/master
...
Yanking in latest changes
6 years ago
Bond_009
a6a4cd5667
Removed some unused fields
6 years ago
Vasily
0b3e6548db
Merge pull request #797 from Bond-009/warnings
...
Fix all warnings
6 years ago
Joshua M. Boniface
c4f51e16a5
Merge pull request #736 from Bond-009/startasync
...
Start startup tasks async
6 years ago
Bond-009
78e4e2ed92
Fix all warnings
6 years ago
Claus Vium
f7a46c7a56
Remove more Connect related stuff
6 years ago
Phallacy
4519ce26e2
Upgrade crypto provider, retarget better framework
6 years ago
Erwin de Haan
b9a111432a
Unwrapped all /(Write|Read)All(Text|Bytes)/ functions.
6 years ago
Erwin de Haan
d7c6d16250
Unwrapped CreateDirectory and DeleteDirectory
6 years ago
Erwin de Haan
3a831994f6
Unwrapped GetDirectoryName and DirectorySeperatorChar
6 years ago