Code

Implement MFA#733

Code

Merged

enricovianello merged 133 commits intodevelopindigo-iam/iam:developfrom mfa-without-rcindigo-iam/iam:mfa-without-rcCopy head branch name to clipboardDec 19, 2024

+6,900-318

Commits

Commits on Nov 28, 2024

• Allow config option in test client app to avoid disclosing tokens

  

  andreaceccanti

  authored and

  rmiccoli

  committed
  2105f7d

• Dynamic downscoping in test client app

  Show description for 58049d1
  

  andreaceccanti

  authored and

  rmiccoli

  committed
  58049d1

• Bumped version to v1.7.1

  

  andreaceccanti

  authored and

  rmiccoli

  committed
  c91b30a

• v1.7.1 changelog

  

  andreaceccanti

  authored and

  rmiccoli

  committed
  48c698a

• More CHANGELOG tweaks

  

  andreaceccanti

  authored and

  rmiccoli

  committed
  08eb9fc

• Initial HTML and JS for enabling MFA on user account through dashboard

  Show description for 804a18f
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  804a18f

• Button and modal for editing MFA settings now appears

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  8fe2afd

• Adding modal for enabling authenticator app

  Show description for 57969b8
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  57969b8

• Adding models for IamTotpMfa and IamTotpRecoveryCode

  Show description for 8f41565
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  8f41565

• Adding modal for disabling authenticator app

  Show description for c43183f
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c43183f

• Unifying controllers, adding auth app service

  Show description for 8bd4703
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  8bd4703

• Initial HTML and JS for enabling MFA on user account through dashboard

  Show description for 15aa1b3
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  15aa1b3

• Button and modal for editing MFA settings now appears

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  a29e2c2

• Adding modal for enabling authenticator app

  Show description for 75f47a6
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  75f47a6

• Adding modal for disabling authenticator app

  Show description for 7ac2e71
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  7ac2e71

• Syncing branch with origin

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  1597238

• Merging changes for updating Spring boot and Java version. Squashed commit of the following:

  Show description for 9491d32
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  9491d32

• Making database schema changes for MySQL and H2

  Show description for 3ea2161
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  3ea2161

• Ignoring .factorypath autogenerated file

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  475d1b0

• Backend for adding TOTP secret to a user

  Show description for ad0dc32
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  ad0dc32

• Removing non-existent files

  Show description for 70bf513
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  70bf513

• MFA secret and QR code now display on authenticator app enabling modal

  Show description for a606a1b
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  a606a1b

• Dynamic mfa settings menu, toaster notifications on successful operation

  Show description for 6cc11ee
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  6cc11ee

• Adding license to files, adding basic input detection for MFA modals

  Show description for fd3a402
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  fd3a402

• Verification code now sends through post successfully

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  353e003

• Adding TOTP validation for enabling and disabling authenticator app MFA

  Show description for 7eb799c
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  7eb799c

• Autowiring QR generator and code verifier into AuthenticatorAppController

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  505dbf2

• Database migrations for totp_mfa now in separate file

  Show description for 698e58e
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  698e58e

• Adding tests for enabling and disabling TOTP MFA through IamAccountService

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  898f0c4

• Adding tests for MFA settings and auth app controllers

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  88a875d

• Adding ROLE_PRE_AUTHENTICATED

  Show description for fcd86be
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  fcd86be

• Adding UUID for IamTotpMfa, fixing migration version numbers

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  120eab2

• Removing UUID from IamTotpMfa due to being unnecessary

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  1a9786f

• Adding java docs for files in iam-login-service

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  28cc1e1

• Adding basic mfa login procedure

  Show description for 05ea3b7
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  05ea3b7

• Improving TOTP input screen post-login, fixing Java 17 Docker upgrade issue

  Show description for 0fe6c64
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  0fe6c64

• Adding error handling for MFA failure, fixing CSS bugs

  Show description for e1a3d5c
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  e1a3d5c

• Separating MFA verification controllers, adding "Back to login" button

  Show description for 7b81b90
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  7b81b90

• Adding mechanism for looping through available factors of authentication on /iam/verify

  Show description for d79bec4
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  d79bec4

• Adding recovery code login procedure, backend for regenerating recovery codes

  Show description for 5f0e3be
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  5f0e3be

• Fixing css bug that broke the btn-login class

  Show description for c4ec07a
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c4ec07a

• Fixing css bugs with MFA verify button

  Show description for f1a91c2
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  f1a91c2

• Adding recovery code regeneration after use and webpage navigation

  Show description for d8948f1
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  d8948f1

• Adding ability to view and reset recovery codes

  Show description for 09a9581
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  09a9581

• Fixing error message tests in AuthenticatorAppSettingsTests

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  bb9ddab

• Fixing enabling and disabing totpMfa tests for IamAccount

  Show description for 8892de6
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  8892de6

• Adding tests for MfaVerify and AuthenticatorAppVerify controllers

  Show description for fa774a4
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  fa774a4

• Adding licence header

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  63926d9

• Adding tests for recovery code management controller endpoints

  Show description for c0b8ec4
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c0b8ec4

• Adding tests on account service for adding recovery codes, fixing clone account method for cloning MFA secrets

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  a322fbf

• Fixing submit button bug on dashboard modals

  Show description for e6bcb17
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  e6bcb17

• Recovery codes display to the user on MFA enabling

  Show description for 89c31cd
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  89c31cd

• Adding amr claim in OIDC id_token

  Show description for 1bd32a4
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  1bd32a4

• Removing unnecessary database migrations, extending authentication object to contain amr details

  Show description for 32d694f
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  32d694f

• Fixing login bugs with MfaAuthenticationToken, extending authentication for mfa login

  Show description for c7360c9
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c7360c9

• Renaming MfaAuthenticationToken to ExtendedAuthenticationToken

  Show description for 1cc2671
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  1cc2671

• Renaming MfaAuthenticationFilter to ExtendedAuthenticationFilter

  Show description for bb5bb57
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  bb5bb57

• Moving db migrations to correct directory

  Show description for e0a664e
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  e0a664e

• Removing unneeded method to regenerate recovery codes

  Show description for eb6221d
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  eb6221d

• Adding creation time and update time to IamTotpMfa

  Show description for f68e956
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  f68e956

• Demonstrating reading of amr from request parameters to /token

  Show description for 3a32ac1
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  3a32ac1

• Authentication method reference claim now successfully appears in id_token for non-MFA users

  Show description for d62d60a
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  d62d60a

• OAuth2 client login flow now works for MFA users

  Show description for e99132a
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  e99132a

• Fixing login credential failure handling

  Show description for 5585b5e
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  5585b5e

• Fixing TOTP verification process

  Show description for 7f304b9
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  7f304b9

• Adding recovery code verification to login flow

  Show description for 58d2465
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  58d2465

• Merge branch mfa-db-migrations into issue-418-mfa-support

  Show description for 1f39a2e
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  1f39a2e

• Adding comments, fixing assigned authorities bug

  Show description for 4ae4139
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  4ae4139

• Fixing license header in verify JSP

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c8589f3

• Fixing existing MFA tests, improving controller functionality

  Show description for 95a3f68
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  95a3f68

• Adding license header for IamTotpMfaServiceTests

  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  74bac68

• Fixing bugs with MFA verification

  Show description for c0a8604
  

  Sam Glendenning

  authored and

  rmiccoli

  committed
  c0a8604

• Fix MFA settings view

  rmiccoli

  committed
  9402836

• Fix tests

  rmiccoli

  committed
  1a8ad23

• Fix some test

  

  federicaagostini

  authored and

  rmiccoli

  committed
  7d0b835

• Fix other tests

  rmiccoli

  committed
  1dbf7a3

• Add download recovery codes button

  

  Sae126V

  authored and

  rmiccoli

  committed
  a36314d

• Add support to provide password and related config

  

  Sae126V

  authored and

  rmiccoli

  committed
  dd91e96

• Add totpMFA util and helper classes

  

  Sae126V

  authored and

  rmiccoli

  committed
  f8c78f0

• Update method name in mfa properties file

  

  Sae126V

  authored and

  rmiccoli

  committed
  c1d269a

• Update code with encryption and decryption method

  

  Sae126V

  authored and

  rmiccoli

  committed
  a8d76c8

• Remove totp mfa helper class dependency

  

  Sae126V

  authored and

  rmiccoli

  committed
  de0c3e6

• Update test cases to fix TotpMfaUtil changes

  

  Sae126V

  authored and

  rmiccoli

  committed
  65d5264

• Update tests to address totpMfa util change

  

  Sae126V

  authored and

  rmiccoli

  committed
  c22da3e

• Add missing license to the files

  

  Sae126V

  authored and

  rmiccoli

  committed
  feb024e

• Verify test cases after totp mfa util change

  

  Sae126V

  authored and

  rmiccoli

  committed
  d3a7e0b

• Improve code coverage for totp mfa util change

  

  Sae126V

  authored and

  rmiccoli

  committed
  e76957b

• Update AES size for to fix timeout errors

  

  Sae126V

  authored and

  rmiccoli

  committed
  078031a

• Add GCM mode option along with CBC

  

  Sae126V

  authored and

  rmiccoli

  committed
  782bce7

• Delete recovery codes from the interface

  rmiccoli

  committed
  ee679fd

• Remove recovery codes generator and verifier

  rmiccoli

  committed
  fc70576

• Fix test

  rmiccoli

  committed
  78f0b45

• Change function name

  Show description for d36ce0d
  rmiccoli

  committed
  d36ce0d

• Fix infinite recursion problem

  rmiccoli

  committed
  4578db5

• Add jackson dependency

  rmiccoli

  committed
  3a36d13

• Implement the Serializable interface

  Show description for fb1fa6d
  rmiccoli

  committed
  fb1fa6d

• Ignore junit test

  rmiccoli

  committed
  d853083

• Fix code

  Show description for 8000d23
  rmiccoli

  committed
  8000d23

• Fix tests

  rmiccoli

  committed
  df5476f

• Fix test

  rmiccoli

  committed
  00704ec

• Fix docker compose file

  rmiccoli

  committed
  2edf379

• Allow admins to disable MFA for users

  

  garaimanoj

  authored and

  rmiccoli

  committed
  cd08216

• Fix cosmetics

  rmiccoli

  committed
  84de13b

• Fix tests

  rmiccoli

  committed
  d61a5a7

• Other cosmetic fixes

  rmiccoli

  committed
  b595f79

Commits on Nov 29, 2024

• Remove remaining recovery code methods/classes

  rmiccoli

  authored
  292d1cd

• Remove unused error classes

  rmiccoli

  committed
  6bef59a

Commits on Dec 3, 2024

• Update code to enable MFA only when profile is selected

  

  Sae126V

  authored and

  rmiccoli

  committed
  0e1ab99

• Hide the MFA label in the user homepage

  Show description for 2a11a6e
  rmiccoli

  committed
  2a11a6e

Commits on Dec 6, 2024

• Increase coverage

  Show description for 8c3e459
  rmiccoli

  committed
  8c3e459

• Add more tests

  rmiccoli

  committed
  d55e5a8

• Add tests

  rmiccoli

  committed
  fc82492

Commits on Dec 7, 2024

• Fix tests

  rmiccoli

  committed
  fb123de

Commits on Dec 9, 2024

• Add tests

  rmiccoli

  committed
  8a732e3

• Simplify piece of code

  rmiccoli

  committed
  280e0a9

• Add tests

  Show description for f9c58fc
  rmiccoli

  committed
  f9c58fc

• Add test

  rmiccoli

  committed
  74d68cf

Commits on Dec 10, 2024

• Cover all conditions

  Show description for 2f114c9
  rmiccoli

  committed
  2f114c9

• Test RegistrationFieldProperties

  rmiccoli

  committed
  6841503

Commits on Dec 11, 2024

• Test MultiFactorTotpCheckProvider class

  rmiccoli

  committed
  ba6224d

• Rename tests

  rmiccoli

  committed
  8f6857e

• Rename test class

  rmiccoli

  committed
  053b336

• Test MultiFactorVerificationFilter class

  rmiccoli

  committed
  8792f41

• Clear security context

  rmiccoli

  committed
  feaacfe

• Add more tests

  rmiccoli

  committed
  ab4a8d2

• Solve some code smells

  rmiccoli

  committed
  e921538

Commits on Dec 12, 2024

• Show bad TOTP error

  Show description for f5f209d
  rmiccoli

  committed
  f5f209d

Commits on Dec 16, 2024

• Override equals and hashCode methods

  Show description for 04589a2
  rmiccoli

  committed
  04589a2

• Change service name

  Show description for 5053a7e
  rmiccoli

  committed
  5053a7e

• Delete remaining comment

  rmiccoli

  committed
  57bb2d6

Commits on Dec 19, 2024

• Revert migrations

  rmiccoli

  committed
  9551c74

• Fix formatting

  rmiccoli

  committed
  ba5a88f

• Change service name

  Show description for 73859a0
  rmiccoli

  committed
  73859a0