about summary refs log tree commit diff
path: root/gn_auth/auth/authorisation/users
AgeCommit message (Collapse)Author
10 daysFix issues caught by mypy. HEAD mainFrederick Muriuki Muriithi
2025-12-03Add endpoint for getting user details, given user IDzsloan
2025-07-30Type-Check fix: Function does not return anything.Frederick Muriuki Muriithi
2025-07-30Implement revocation of `system-administrator` role.Frederick Muriuki Muriithi
2025-07-30Grant user `system-administrator` role on all resourcesFrederick Muriuki Muriithi
During promotion of a user to system admin, grant the user `system-administrator` role on all resources in the system.
2025-07-30Rename function, retaining some backwards compatibility.Frederick Muriuki Muriithi
2025-07-30Function to fetch the `system-administrator` role details from db.Frederick Muriuki Muriithi
2025-07-28Add group details to masquerade data.Frederick Muriuki Muriithi
2025-07-28Only include the group if the user is a member of one.Frederick Muriuki Muriithi
2025-07-17Bugfix: remove obsolete variable name.Frederick Muriuki Muriithi
2025-07-17Bugfix: Get user IDs from objects.Frederick Muriuki Muriithi
2025-07-17Bugfix: Retrieve the reasons, not the entire dict.Frederick Muriuki Muriithi
2025-07-17Improve messaging for deletion failures.Frederick Muriuki Muriithi
2025-07-17Add note to self for possible "improvement" in user deletionFrederick Muriuki Muriithi
Add a note for considerations to make regarding recovery from error trying to delete users, so we can respond with more informative messages. Here, "improvement" is in quotes, because the priority leans more towards collecting more information for better feedback, which might be at the expense of speed of code.
2025-07-16Bugfix: Handle possible missing json data.Frederick Muriuki Muriithi
2025-07-03Fix minor issues caught by mypy.Frederick Muriuki Muriithi
2025-07-03Bugfix: Fix clauses for user listing query.Frederick Muriuki Muriithi
2025-07-03Fix some linting issues.Frederick Muriuki Muriithi
2025-07-03Bugfix: Build up "WHERE" clauses correctlyFrederick Muriuki Muriithi
Have the email and name checked with "OR" where both are present.
2025-07-03Provide missing symbol.Frederick Muriuki Muriithi
2025-07-03Bugfix: Set the correct value.Frederick Muriuki Muriithi
2025-06-25Delete system users.Frederick Muriuki Muriithi
2025-06-24Search in names too. Fix query params.Frederick Muriuki Muriithi
2025-06-24Enable filtering of data, and limiting length.Frederick Muriuki Muriithi
2025-05-06Fix failing mypy.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-05-05Fix "C0301: Line too long" pylint error.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-03-14Add missing fix: Make display of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Make display of number of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Move expiry of auth-based emails into a config variable.Frederick Muriuki Muriithi
To ease setting up of value without changing code, move the value out into a configuration variable.
2025-02-26Fix pylint errors.Frederick Muriuki Muriithi
2024-10-09Linting: Fix minor linting errorsFrederick Muriuki Muriithi
2024-10-09Fix masquerading logicFrederick Muriuki Muriithi
Update the code to actually use JWT bearer tokens that the older plain authorisation tokens that were previously used.
2024-10-09Update Configs: Change `OAUTH2_SCOPE` => `OAUTH2_SCOPES_SUPPORTED`Frederick Muriuki Muriithi
Use the OAUTH2_SCOPES_SUPPORTED application configuration variable, that is used by the flask integration for the Authlib library to set up the supported scopes.
2024-10-09Pass on all GET parameters when redirecting.Frederick Muriuki Muriithi
2024-10-03Provide a way to change OAuth2 client secrets.Frederick Muriuki Muriithi
2024-08-30If config variables are not set, return empty string.Frederick Muriuki Muriithi
2024-08-21Only import anonymous collections if they contain traitszsloan
2024-08-21Update 'changed' field when traits are added or removed from collectionszsloan
2024-08-21Do actual password change.Frederick Muriuki Muriithi
2024-08-21Provide email and improve UI text/notification.Frederick Muriuki Muriithi
2024-08-20Save to DB then send emailFrederick Muriuki Muriithi
Separate the saving of the token from its sending.
2024-08-20Handle the "GET" part of the change-password requestFrederick Muriuki Muriithi
- Delete any expired tokens - Display the UI if token is valid, else redirect with error notification.
2024-08-20Pass GET parameters for correct redirection.Frederick Muriuki Muriithi
2024-08-20Fix query: Replace any existing token.Frederick Muriuki Muriithi
2024-08-19Generate token and send out "Forgot Password" emailFrederick Muriuki Muriithi
* Generate token to use for verifying the password-change request * Send out email with token
2024-08-15Fix a bunch of linting errors.Frederick Muriuki Muriithi
2024-08-15Reduce UI complexityFrederick Muriuki Muriithi
Providing both the "Enter Verification Token" and the "Send Verification Email" elements of the same user interface seems to confuse users. This commit ensures that the system will provide one or the other, but not both, depending on whether or not there is a pending verification token present for the user.
2024-08-15Import specific classes from the datetime module.Frederick Muriuki Muriithi
2024-08-15fix: bugs with generating auth tokensJohn Nduli
2024-08-15fix: bugs in masquerade apiJohn Nduli