Bond_009
24fac4b191
Fix UserNotFoundError
5 years ago
Bond_009
8d3b5c851d
Improvements to UserManager
5 years ago
Joshua M. Boniface
a96fa7a5c7
Merge pull request #1397 from Bond-009/passfast
...
Streamline authentication proccess
5 years ago
Bond-009
6032f31aa6
Use CultureInvariant string conversion for Guids
5 years ago
Bond_009
ab7ef9c9cb
Fix style issues
5 years ago
Bond_009
0f897589ed
Streamline authentication proccess
5 years ago
dkanada
9e9952d81f
Merge pull request #1247 from bugfixin/master
...
Adjust detection of 'sample' in filenames to use regex boundaries
5 years ago
Bond_009
d961278b3d
Reduce amount of raw sql
5 years ago
Joshua M. Boniface
687255aa31
Merge pull request #1442 from jellyfin/release-10.3.z
...
Backmerge for Release 10.3.4 and 10.3.5
5 years ago
Joshua M. Boniface
2946ae1009
Revert "Don't set a default reset provider"
...
This reverts commit c230d49d7c
.
This reenables an edge case where an admin might want to reset, with
the default auth provider, the password of an externally-provided
user so they could "unlock" the account while it was failing. There
might be minor security implications to this, but the malicious
actor would need FS access to do it (as they would with any password
resets) so it's probably best to keep it as-is.
Removing this in the first place was due to a misunderstanding
anyways so no harm.
6 years ago
Joshua M. Boniface
4b8f735cb8
Remove superfluous conditional
...
This wasn't needed to prevent updating the policy on-disk from my
tests and can be removed as suggested by @Bond-009
6 years ago
Joshua M. Boniface
c230d49d7c
Don't set a default reset provider
6 years ago
Joshua M. Boniface
20e2cb2d86
Use SecurityException for auth failure
6 years ago
Joshua M. Boniface
b70083f3b3
Apply suggestions from code review
...
Co-Authored-By: Claus Vium <cvium@users.noreply.github.com>
Co-Authored-By: Bond-009 <bond.009@outlook.com>
6 years ago
Joshua M. Boniface
74ef389879
Add nicer log message and comment
6 years ago
Joshua M. Boniface
d78a55adb4
Implement InvalidAuthProvider
...
Implements the InvalidAuthProvider, which acts as a fallback if a
configured authentication provider, e.g. LDAP, is unavailable due
to a load failure or removal. Until the user or the authentication
plugin is corrected, this will cause users with the missing provider
to be locked out, while throwing errors in the logs about the issue.
Fixes #1445 part 2
6 years ago
Bond-009
a6f9ceedd8
Fix more warnings
6 years ago
DrPandemic
69ee49bee6
Format correctly the PIN when updating it
6 years ago
Bond-009
2d011b781e
Merge pull request #1383 from jellyfin/release-10.3.z
...
Backmerge for Release 10.3.3
6 years ago
DrPandemic
c22068d6b1
Fix pin bug introduced in 10.3.z.
...
The issue is that the new easyPassword format prepends the hash
function. This PR extract the hash from "$SHA1$_hash_".
6 years ago
Bond-009
35d7e97258
Ignore casing photo extensions
6 years ago
bugfixin
1df73fdeba
Fix incorrect hasPassword flag when easy pin set
6 years ago
bugfixin
da842d5a73
Fix incorrect escaping in regex pattern
6 years ago
bugfixin
0794a3edf4
Adjust detection of 'sample' in filenames to use regex boundaries
6 years ago
Joshua Boniface
1af9c047fb
Override username with AuthenticationProvider
...
Pass back the Username directive returned by an AuthenticationProvider
to the calling code, so we may override the user-provided Username
value if the authentication provider passes this back. Useful for
instance in an LDAP scenario where what the user types may not
necessarily be the "username" that is mapped in the system, e.g.
the user providing 'mail' while 'uid' is the "username" value.
Could also then be extensible to other authentication providers
as well, should they wish to do a similar thing.
6 years ago
Joshua Boniface
f0fbd0232c
Correct bad quote characters
6 years ago
LogicalPhallacy
13e94a8b1b
Remove dashes from pins
6 years ago
Phallacy
2d396cb589
adds readonly to properties
6 years ago
Phallacy
b56031b9f3
fix byte string
6 years ago
Phallacy
48b50a22a4
switched to a hexa string with crypto random backing
6 years ago
Phallacy
5e8496bc59
minor fixes and usings
6 years ago
Bond-009
b07c146fd9
Update Emby.Server.Implementations/Library/DefaultPasswordResetProvider.cs
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
6be8624373
async improvements and post reset cleanups
6 years ago
LogicalPhallacy
740c95d557
Apply minor suggestions from code review
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
86772bd7bd
removes needless dictionary
6 years ago
Claus Vium
4e2841f0d7
Update Emby.Server.Implementations/Library/UserManager.cs
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
26fe4040bf
fixes some usings
6 years ago
Phallacy
758e35baba
greaterthen/lessthen reversal fix
6 years ago
Phallacy
09921a00aa
made password resets an interface and per user
6 years ago
Phallacy
80aedcd7e2
really fixed line endings
6 years ago
Phallacy
fc28c9237c
fixed line endings
6 years ago
Phallacy
b04200ca68
adding regex fix
6 years ago
Joshua M. Boniface
e3dbed1c1a
Update Emby.Server.Implementations/Library/UserManager.cs
...
Co-Authored-By: LogicalPhallacy <44458166+LogicalPhallacy@users.noreply.github.com>
6 years ago
Phallacy
7f0fa74467
updated regex to string literal with escaped -
6 years ago
LogicalPhallacy
9df1506794
Merge pull request #2 from LogicalPhallacy/master
...
update lockoutfix to latest for testing
6 years ago
LogicalPhallacy
2d0844b5db
Merge pull request #1 from jellyfin/master
...
merging myself to latest
6 years ago
Phallacy
1ee016c997
configurable user lockout
6 years ago
Phallacy
221389089c
quick fix for auth bug
6 years ago
Bond-009
bf43dc00bb
More warning fixes
6 years ago
Bond_009
37ea50a572
Reduce the amount of exceptions thrown
6 years ago