Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • perun/perun-proxyidp/perun-proxy-utils
1 result
Show changes
Commits on Source (9)
Expand all Hide whitespace changes
Inline Side-by-side
Showing
with 753 additions and 938 deletions
.commitlintrc.json
View file @ 5d89e44a
{
"extends": ["@commitlint/config-conventional"],
"extends": ["@perun/commitlint-config-perun"],
"rules": {
"scope-enum": [
2,
......
.flake8 deleted 100644 → 0
View file @ f08f5f70
[flake8]
max-line-length = 88
extend-ignore = E203
.git-blame-ignore-revs 0 → 100644
View file @ 5d89e44a
4059a073bfc9aa5955dd0d1a4e816d1b8424d337
.gitlab-ci.yml
View file @ 5d89e44a
include:
- project: perun-proxy-aai/common
- project: perun/common
file: /templates/.gitlab-ci-template.yml
.npmrc
View file @ 5d89e44a
@perun-proxy-aai:registry=https://gitlab.ics.muni.cz/api/v4/packages/npm/
@perun:registry=https://gitlab.ics.muni.cz/api/v4/packages/npm/
@beepbeepgo:registry=https://gitlab.com/api/v4/packages/npm/
.prettierignore deleted 100644 → 0
View file @ f08f5f70
## Ansible
*.retry
## composer
composer.phar
/vendor/
## Java
# Compiled class file
*.class
# Log file
*.log
# BlueJ files
*.ctxt
# Mobile Tools for Java (J2ME)
.mtj.tmp/
# Package Files #
*.jar
*.war
*.nar
*.ear
*.zip
*.tar.gz
*.rar
# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
hs_err_pid*
## JetBrains
# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and WebStorm
# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
# User-specific stuff
.idea/**/workspace.xml
.idea/**/tasks.xml
.idea/**/usage.statistics.xml
.idea/**/dictionaries
.idea/**/shelf
# Generated files
.idea/**/contentModel.xml
# Sensitive or high-churn files
.idea/**/dataSources/
.idea/**/dataSources.ids
.idea/**/dataSources.local.xml
.idea/**/sqlDataSources.xml
.idea/**/dynamic.xml
.idea/**/uiDesigner.xml
.idea/**/dbnavigator.xml
# Gradle
.idea/**/gradle.xml
.idea/**/libraries
# Gradle and Maven with auto-import
.idea/modules.xml
.idea/*.iml
.idea/modules
# CMake
cmake-build-*/
# Mongo Explorer plugin
.idea/**/mongoSettings.xml
# File-based project format
*.iws
# IntelliJ
out/
# mpeltonen/sbt-idea plugin
.idea_modules/
# JIRA plugin
atlassian-ide-plugin.xml
# Cursive Clojure plugin
.idea/replstate.xml
# Crashlytics plugin (for Android Studio and IntelliJ)
com_crashlytics_export_strings.xml
crashlytics.properties
crashlytics-build.properties
fabric.properties
# Editor-based Rest Client
.idea/httpRequests
# Android studio 3.1+ serialized cache file
.idea/caches/build_file_checksums.ser
## macOS
# General
.DS_Store
.AppleDouble
.LSOverride
# Icon must end with two \r
Icon
# Thumbnails
._*
# Files that might appear in the root of a volume
.DocumentRevisions-V100
.fseventsd
.Spotlight-V100
.TemporaryItems
.Trashes
.VolumeIcon.icns
.com.apple.timemachine.donotpresent
# Directories potentially created on remote AFP share
.AppleDB
.AppleDesktop
Network Trash Folder
Temporary Items
.apdisk
## maven
target/
pom.xml.tag
pom.xml.releaseBackup
pom.xml.versionsBackup
pom.xml.next
release.properties
dependency-reduced-pom.xml
buildNumber.properties
.mvn/timing.properties
.mvn/wrapper/maven-wrapper.jar
## node
# Logs
logs
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
# Runtime data
pids
*.pid
*.seed
*.pid.lock
# Directory for instrumented libs generated by jscoverage/JSCover
lib-cov
# Coverage directory used by tools like istanbul
coverage
# nyc test coverage
.nyc_output
# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
.grunt
# Bower dependency directory (https://bower.io/)
bower_components
# node-waf configuration
.lock-wscript
# Compiled binary addons (https://nodejs.org/api/addons.html)
build/Release
# Dependency directories
node_modules/
jspm_packages/
# TypeScript v1 declaration files
typings/
# Optional npm cache directory
.npm
# Optional eslint cache
.eslintcache
# Optional REPL history
.node_repl_history
# Output of 'npm pack'
*.tgz
# Yarn Integrity file
.yarn-integrity
# dotenv environment variables file
.env
# parcel-bundler cache (https://parceljs.org/)
.cache
# next.js build output
.next
# nuxt.js build output
.nuxt
# vuepress build output
.vuepress/dist
# Serverless directories
.serverless/
# FuseBox cache
.fusebox/
#DynamoDB Local files
.dynamodb/
## Python
# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*.class
# C extensions
*.so
# Distribution / packaging
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib64/
parts/
sdist/
wheels/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST
# PyInstaller
# Usually these files are written by a python script from a template
# before PyInstaller builds the exe, so as to inject date/other infos into it.
*.manifest
*.spec
# Installer logs
pip-log.txt
pip-delete-this-directory.txt
# Unit test / coverage reports
htmlcov/
.tox/
.nox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
.hypothesis/
.pytest_cache/
# Translations
*.mo
*.pot
# Django stuff:
*.log
local_settings.py
db.sqlite3
# Flask stuff:
instance/
.webassets-cache
# Scrapy stuff:
.scrapy
# Sphinx documentation
docs/_build/
# PyBuilder
target/
# Jupyter Notebook
.ipynb_checkpoints
# IPython
profile_default/
ipython_config.py
# pyenv
.python-version
# celery beat schedule file
celerybeat-schedule
# SageMath parsed files
*.sage.py
# Environments
.env
.venv
env/
venv/
ENV/
env.bak/
venv.bak/
# Spyder project settings
.spyderproject
.spyproject
# Rope project settings
.ropeproject
# mkdocs documentation
/site
# mypy
.mypy_cache/
.dmypy.json
dmypy.json
# Pyre type checker
.pyre/
## vim
# Swap
[._]*.s[a-v][a-z]
[._]*.sw[a-p]
[._]s[a-rt-v][a-z]
[._]ss[a-gi-z]
[._]sw[a-p]
# Session
Session.vim
# Temporary
.netrwhist
*~
# Auto-generated tag files
tags
# Persistent undo
[._]*.un~
## Visual Studio
## Ignore Visual Studio temporary files, build results, and
## files generated by popular Visual Studio add-ons.
##
## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
# User-specific files
*.rsuser
*.suo
*.user
*.userosscache
*.sln.docstates
# User-specific files (MonoDevelop/Xamarin Studio)
*.userprefs
# Build results
[Dd]ebug/
[Dd]ebugPublic/
[Rr]elease/
[Rr]eleases/
x64/
x86/
[Aa][Rr][Mm]/
[Aa][Rr][Mm]64/
bld/
[Bb]in/
[Oo]bj/
[Ll]og/
# Visual Studio 2015/2017 cache/options directory
.vs/
# Visual Studio 2017 auto generated files
Generated\ Files/
# MSTest test Results
[Tt]est[Rr]esult*/
[Bb]uild[Ll]og.*
# NUNIT
*.VisualState.xml
TestResult.xml
# Build Results of an ATL Project
[Dd]ebugPS/
[Rr]eleasePS/
dlldata.c
# Benchmark Results
BenchmarkDotNet.Artifacts/
# .NET Core
project.lock.json
project.fragment.lock.json
artifacts/
# StyleCop
StyleCopReport.xml
# Files built by Visual Studio
*_i.c
*_p.c
*_h.h
*.ilk
*.meta
*.obj
*.iobj
*.pch
*.pdb
*.ipdb
*.pgc
*.pgd
*.rsp
*.sbr
*.tlb
*.tli
*.tlh
*.tmp
*.tmp_proj
*_wpftmp.csproj
*.log
*.vspscc
*.vssscc
.builds
*.pidb
*.svclog
*.scc
# Chutzpah Test files
_Chutzpah*
# Visual C++ cache files
ipch/
*.aps
*.ncb
*.opendb
*.opensdf
*.sdf
*.cachefile
*.VC.db
*.VC.VC.opendb
# Visual Studio profiler
*.psess
*.vsp
*.vspx
*.sap
# Visual Studio Trace Files
*.e2e
# TFS 2012 Local Workspace
/
# Guidance Automation Toolkit
*.gpState
# ReSharper is a .NET coding add-in
_ReSharper*/
*.[Rr]e[Ss]harper
*.DotSettings.user
# JustCode is a .NET coding add-in
.JustCode
# TeamCity is a build add-in
_TeamCity*
# DotCover is a Code Coverage Tool
*.dotCover
# AxoCover is a Code Coverage Tool
.axoCover/*
!.axoCover/settings.json
# Visual Studio code coverage results
*.coverage
*.coveragexml
# NCrunch
_NCrunch_*
.*crunch*.local.xml
nCrunchTemp_*
# MightyMoose
*.mm.*
AutoTest.Net/
# Web workbench (sass)
.sass-cache/
# Installshield output folder
[Ee]xpress/
# DocProject is a documentation generator add-in
DocProject/buildhelp/
DocProject/Help/*.HxT
DocProject/Help/*.HxC
DocProject/Help/*.hhc
DocProject/Help/*.hhk
DocProject/Help/*.hhp
DocProject/Help/Html2
DocProject/Help/html
# Click-Once directory
publish/
# Publish Web Output
*.[Pp]ublish.xml
*.azurePubxml
# Note: Comment the next line if you want to checkin your web deploy settings,
# but database connection strings (with potential passwords) will be unencrypted
*.pubxml
*.publishproj
# Microsoft Azure Web App publish settings. Comment the next line if you want to
# checkin your Azure Web App publish settings, but sensitive information contained
# in these scripts will be unencrypted
PublishScripts/
# NuGet Packages
*.nupkg
# The packages folder can be ignored because of Package Restore
**/[Pp]ackages/*
# except build/, which is used as an MSBuild target.
!**/[Pp]ackages/build/
# NuGet v3's project.json files produces more ignorable files
*.nuget.props
*.nuget.targets
# Microsoft Azure Build Output
csx/
*.build.csdef
# Microsoft Azure Emulator
ecf/
rcf/
# Windows Store app package directories and files
AppPackages/
BundleArtifacts/
Package.StoreAssociation.xml
_pkginfo.txt
*.appx
# Visual Studio cache files
# files ending in .cache can be ignored
*.[Cc]ache
# but keep track of directories ending in .cache
!*.[Cc]ache/
# Others
ClientBin/
~
*~
*.dbmdl
*.dbproj.schemaview
*.jfm
*.pfx
*.publishsettings
orleans.codegen.cs
# Including strong name files can present a security risk
# (https://github.com/github/gitignore/pull/2483#issue-259490424)
#*.snk
bower_components/
# ASP.NET Core default setup: bower directory is configured as wwwroot/lib/ and bower restore is true
**/wwwroot/lib/
# RIA/Silverlight projects
Generated_Code/
# Backup & report files from converting an old project file
# to a newer Visual Studio version. Backup files are not needed,
# because we have git ;-)
_UpgradeReport_Files/
Backup*/
UpgradeLog*.XML
UpgradeLog*.htm
ServiceFabricBackup/
*.rptproj.bak
# SQL Server files
*.mdf
*.ldf
*.ndf
# Business Intelligence projects
*.rdl.data
*.bim.layout
*.bim_*.settings
*.rptproj.rsuser
# Microsoft Fakes
FakesAssemblies/
# GhostDoc plugin setting file
*.GhostDoc.xml
# Node.js Tools for Visual Studio
.ntvs_analysis.dat
node_modules/
# Visual Studio 6 build log
*.plg
# Visual Studio 6 workspace options file
*.opt
# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
*.vbw
# Visual Studio LightSwitch build output
**/*.HTMLClient/GeneratedArtifacts
**/*.DesktopClient/GeneratedArtifacts
**/*.DesktopClient/ModelManifest.xml
**/*.Server/GeneratedArtifacts
**/*.Server/ModelManifest.xml
_Pvt_Extensions
# Paket dependency manager
.paket/paket.exe
paket-files/
# FAKE - F# Make
.fake/
# JetBrains Rider
.idea/
*.sln.iml
# CodeRush personal settings
.cr/personal
# Python Tools for Visual Studio (PTVS)
__pycache__/
*.pyc
# Tabs Studio
*.tss
# Telerik's JustMock configuration file
*.jmconfig
# BizTalk build output
*.btp.cs
*.btm.cs
*.odx.cs
*.xsd.cs
# OpenCover UI analysis results
OpenCover/
# Azure Stream Analytics local run output
ASALocalRun/
# MSBuild Binary and Structured Log
*.binlog
# NVidia Nsight GPU debugger configuration file
*.nvuser
# MFractors (Xamarin productivity tool) working folder
.mfractor/
# Local History for Visual Studio
.localhistory/
## Windows
# Windows thumbnail cache files
Thumbs.db
ehthumbs.db
ehthumbs_vista.db
# Dump file
*.stackdump
# Folder config file
[Dd]esktop.ini
# Recycle Bin used on file shares
.BIN/
# Windows Installer files
*.cab
*.msi
*.msix
*.msm
*.msp
# Windows shortcuts
*.lnk
package-lock.json
composer.lock
CHANGELOG.md
.git
*.min.css
*.min.js
.prettierrc.json deleted 100644 → 0
View file @ f08f5f70
{}
.releaserc.json
View file @ 5d89e44a
{
"extends": ["@perun-proxy-aai/semantic-release-proxy-config"],
"extends": ["@perun/semantic-release-perun-config"],
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
......
CHANGELOG.md
View file @ 5d89e44a
## [2.2.2](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v2.2.1...v2.2.2) (2024-01-19)
# [2.3.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v2.2.2...v2.3.0) (2024-01-25)
### Bug Fixes
* **check_saml:** adapt security text check, remove image ([ec4ca60](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/ec4ca60834e1995db8d21af5900e790875db8e14))
* modify filtering condition for usable tokens ([ea1707b](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/ea1707b507ce2d494abefa43dd3202b927689268))
## [2.2.1](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v2.2.0...v2.2.1) (2024-01-09)
### Features
* sync script for privacyidea tokens to perun ([aa76214](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/aa762141e6fa1000f016c3adee33e66e62de7086))
## [2.2.2](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v2.2.1...v2.2.2) (2024-01-19)
### Bug Fixes
* **check_saml:** adapt security text check, remove image ([ec4ca60](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/ec4ca60834e1995db8d21af5900e790875db8e14))
## [2.2.1](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v2.2.0...v2.2.1) (2024-01-09)
### Bug Fixes
* **check_saml:** follow all redirects on ProxyIdP ([f7c8fc7](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/f7c8fc768c4a989f523da77777cc4b28b210786f))
* **check_saml:** follow all redirects on ProxyIdP ([f7c8fc7](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/f7c8fc768c4a989f523da77777cc4b28b210786f))
# [2.2.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v2.1.0...v2.2.0) (2024-01-05)
# [2.2.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v2.1.0...v2.2.0) (2024-01-05)
### Features
* check_saml.py security text support ([36ce42d](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/36ce42d33d6410944881203e18f2dc97b3943599))
* check_saml.py security text support ([36ce42d](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/36ce42d33d6410944881203e18f2dc97b3943599))
# [2.1.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v2.0.0...v2.1.0) (2024-01-02)
# [2.1.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v2.0.0...v2.1.0) (2024-01-02)
### Features
* add basic oidc check option ([533b390](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/533b3906665bedcc009cf5491b1f47d237e05701))
* add check saml example to readme ([2a82570](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/2a82570cd13cd174658b9d3abe486b63d56f9a1e))
* add basic oidc check option ([533b390](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/533b3906665bedcc009cf5491b1f47d237e05701))
* add check saml example to readme ([2a82570](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/2a82570cd13cd174658b9d3abe486b63d56f9a1e))
# [2.0.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.11.0...v2.0.0) (2023-09-08)
# [2.0.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.11.0...v2.0.0) (2023-09-08)
### Bug Fixes
* make check_pgsql command work ([3375756](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/3375756a565fa57518a840fd26f299b03d2903d2))
* make check_pgsql command work ([3375756](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/3375756a565fa57518a840fd26f299b03d2903d2))
### chore
* move check_syncrepl_extended to the ldap extra ([898aff3](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/898aff301c8f92ba48a528e739a288f59a8d9b18))
* move check_syncrepl_extended to the ldap extra ([898aff3](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/898aff301c8f92ba48a528e739a288f59a8d9b18))
### BREAKING CHANGES
* usage of check_syncrepl_extended now requires installing with [ldap]
# [1.11.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.10.0...v1.11.0) (2023-09-08)
# [1.11.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.10.0...v1.11.0) (2023-09-08)
### Features
* check_pgsql ([76d83a5](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/76d83a526628daf54cb88eb672c3096e4421d25a))
* check_pgsql ([76d83a5](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/76d83a526628daf54cb88eb672c3096e4421d25a))
# [1.10.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.9.2...v1.10.0) (2023-08-24)
# [1.10.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.9.2...v1.10.0) (2023-08-24)
### Features
* check_privacyidea monitoring probe ([bb00c80](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/bb00c80ff7c4329c3463670cff05b3b2998ca7dd))
* check_privacyidea monitoring probe ([bb00c80](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/bb00c80ff7c4329c3463670cff05b3b2998ca7dd))
## [1.9.2](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.9.1...v1.9.2) (2023-08-23)
## [1.9.2](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.9.1...v1.9.2) (2023-08-23)
### Bug Fixes
* check_saml totp form detection, response message with --skip_logout_check argument ([13ba531](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/13ba531fd9b4e462fa37235862337c82eafa9cde))
* check_saml totp form detection, response message with --skip_logout_check argument ([13ba531](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/13ba531fd9b4e462fa37235862337c82eafa9cde))
## [1.9.1](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.9.0...v1.9.1) (2023-08-23)
## [1.9.1](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.9.0...v1.9.1) (2023-08-23)
### Bug Fixes
* check_php_syntax to work with containers ([5cfec90](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/5cfec908071110ae676cef899014ee1e8ec24481))
* check_php_syntax to work with containers ([5cfec90](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/5cfec908071110ae676cef899014ee1e8ec24481))
# [1.9.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.5...v1.9.0) (2023-08-21)
# [1.9.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.5...v1.9.0) (2023-08-21)
### Features
* check_php_syntax ([0d9e162](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/0d9e162433d54e72dfd6b19dd11c4da6715bc077))
* check_php_syntax ([0d9e162](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/0d9e162433d54e72dfd6b19dd11c4da6715bc077))
## [1.8.5](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.4...v1.8.5) (2023-08-10)
## [1.8.5](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.4...v1.8.5) (2023-08-10)
### Bug Fixes
* double space after probe name ([c2fc77d](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/c2fc77ddb2c75991b19a9eb533994eb8c973654b))
* double space after probe name ([c2fc77d](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/c2fc77ddb2c75991b19a9eb533994eb8c973654b))
## [1.8.4](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.3...v1.8.4) (2023-08-07)
## [1.8.4](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.3...v1.8.4) (2023-08-07)
### Bug Fixes
* containers argument format in check_docker probe ([987ab12](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/987ab12a833f1e53f026e0de8103aa5dbb6c47db))
* containers argument format in check_docker probe ([987ab12](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/987ab12a833f1e53f026e0de8103aa5dbb6c47db))
## [1.8.3](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.2...v1.8.3) (2023-08-06)
## [1.8.3](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.2...v1.8.3) (2023-08-06)
### Bug Fixes
* run_probes support for probes executed without arguments and flags ([60364d4](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/60364d4e0e24166f0f41821304510a3c2cf3720d))
* run_probes support for probes executed without arguments and flags ([60364d4](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/60364d4e0e24166f0f41821304510a3c2cf3720d))
## [1.8.2](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.1...v1.8.2) (2023-07-18)
## [1.8.2](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.1...v1.8.2) (2023-07-18)
### Bug Fixes
* **deps:** move ldap3 to extras ([1795b12](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/1795b1255e6b772e878b600db72099a7b745998a))
* **deps:** move ldap3 to extras ([1795b12](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/1795b1255e6b772e878b600db72099a7b745998a))
## [1.8.1](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.8.0...v1.8.1) (2023-07-12)
## [1.8.1](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.8.0...v1.8.1) (2023-07-12)
### Bug Fixes
* support for PyYAML 5.4 ([fb0cf11](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/fb0cf119ec7614cbf88df58d390075772819157f))
* support for PyYAML 5.4 ([fb0cf11](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/fb0cf119ec7614cbf88df58d390075772819157f))
# [1.8.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.7.1...v1.8.0) (2023-07-12)
# [1.8.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.7.1...v1.8.0) (2023-07-12)
### Features
* run_probes support for command line flags and printing stderr, entry_points support ([55edad8](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/55edad8e344164302aadc920ac9957987218d054))
* run_probes support for command line flags and printing stderr, entry_points support ([55edad8](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/55edad8e344164302aadc920ac9957987218d054))
## [1.7.1](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.7.0...v1.7.1) (2023-06-28)
## [1.7.1](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.7.0...v1.7.1) (2023-06-28)
### Bug Fixes
* dependencies from pypi, not GitLab ([bf643a6](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/bf643a6657428f714ce44c16ff7fc23b87a79708))
* dependencies from pypi, not GitLab ([bf643a6](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/bf643a6657428f714ce44c16ff7fc23b87a79708))
# [1.7.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.6.0...v1.7.0) (2023-06-20)
# [1.7.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.6.0...v1.7.0) (2023-06-20)
### Features
* script to execute multiple monitoring probes ([d39bfa3](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/d39bfa3301794d18ea486e3a90acff9b2998b944))
* script to execute multiple monitoring probes ([d39bfa3](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/d39bfa3301794d18ea486e3a90acff9b2998b944))
# [1.6.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.5.0...v1.6.0) (2023-06-15)
# [1.6.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.5.0...v1.6.0) (2023-06-15)
### Features
* extend check_saml with logout ([aa218b5](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/aa218b581ad6c35319617a3479b49863c6c385e0))
* extend check_saml with logout ([aa218b5](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/aa218b581ad6c35319617a3479b49863c6c385e0))
# [1.5.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.4.0...v1.5.0) (2023-06-14)
# [1.5.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.4.0...v1.5.0) (2023-06-14)
### Features
* add check for nginx status ([dcce8d6](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/dcce8d6ead873b9f12dc8499b21c7e2f010629ae))
* add check for nginx status ([dcce8d6](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/dcce8d6ead873b9f12dc8499b21c7e2f010629ae))
# [1.4.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.3.0...v1.4.0) (2023-06-07)
# [1.4.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.3.0...v1.4.0) (2023-06-07)
### Features
* check_exabgp_propagation, check_dockers, webserver_availability, check_syncrepl ([5106f36](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/5106f3656227a02d8d17ac5fa3fb819b9bdf75fd))
* check_exabgp_propagation, check_dockers, webserver_availability, check_syncrepl ([5106f36](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/5106f3656227a02d8d17ac5fa3fb819b9bdf75fd))
# [1.3.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.2.0...v1.3.0) (2023-06-07)
# [1.3.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.2.0...v1.3.0) (2023-06-07)
### Features
* check LDAP availability ([ac5eebd](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/ac5eebd95cdb195f03df5b04eb137d771e793647))
* check LDAP availability ([ac5eebd](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/ac5eebd95cdb195f03df5b04eb137d771e793647))
# [1.2.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.1.0...v1.2.0) (2023-06-06)
# [1.2.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.1.0...v1.2.0) (2023-06-06)
### Features
* script calling non-python monitoring scripts ([159b00b](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/159b00b5e0707306a1e1442d4dcdf3018587dcbc))
* script to check RPC availability ([ae1c2d2](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/ae1c2d24add1804a911153d8efc7db2e9f8e8ea3))
* script calling non-python monitoring scripts ([159b00b](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/159b00b5e0707306a1e1442d4dcdf3018587dcbc))
* script to check RPC availability ([ae1c2d2](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/ae1c2d24add1804a911153d8efc7db2e9f8e8ea3))
# [1.1.0](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/compare/v1.0.0...v1.1.0) (2023-04-11)
# [1.1.0](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/compare/v1.0.0...v1.1.0) (2023-04-11)
### Features
* check_saml, check_user_logins ([72fa5fb](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/72fa5fb047c76468834b2a148fa718fc6e5484c5))
* check_saml, check_user_logins ([72fa5fb](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/72fa5fb047c76468834b2a148fa718fc6e5484c5))
# 1.0.0 (2023-03-31)
### Bug Fixes
* correct regular expression syntax ([6c28754](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/6c2875413f3cc5bcc2d1477639cd67250f60d019))
* correct regular expression syntax ([6c28754](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/6c2875413f3cc5bcc2d1477639cd67250f60d019))
### Features
* Added metadata_expiration.py script ([cac41ad](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/cac41ad950e66b755f8c768c11cff82c2dad4aa7))
* check_mongodb monitoring probe, restructuralization, prepared for pypi release ([145227a](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/145227a4ba7efd2a17633f2fb90f2377c300a5c1))
* configuration file instead of command line args in mariadb probe ([c44df19](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/c44df19e6a630443b71dedbdbbe76fe4265acef7))
* print_docker_versions.py, run_version_script.py scripts ([7eb461b](https://gitlab.ics.muni.cz/perun-proxy-aai/python/perun-proxy-utils/commit/7eb461b3742f3a3461e2733b51e53c55252dfbbe))
* Added metadata_expiration.py script ([cac41ad](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/cac41ad950e66b755f8c768c11cff82c2dad4aa7))
* check_mongodb monitoring probe, restructuralization, prepared for pypi release ([145227a](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/145227a4ba7efd2a17633f2fb90f2377c300a5c1))
* configuration file instead of command line args in mariadb probe ([c44df19](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/c44df19e6a630443b71dedbdbbe76fe4265acef7))
* print_docker_versions.py, run_version_script.py scripts ([7eb461b](https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils/commit/7eb461b3742f3a3461e2733b51e53c55252dfbbe))
### BREAKING CHANGES
......
README.md
View file @ 5d89e44a
......@@ -73,6 +73,27 @@ For usage instructions, run:
run_version_script --help
```
### sync_usable_token_types.py
Collects information about the usable token types of each privacyIDEA user and sends it
to Perun. Each user with usable tokens in privacyIDEA is assigned a list of their types, for example: `['backupcode', 'totp']`. A token is considered usable when it is **active** and it is not **locked** or
**revoked** and its rollout state allows logging in.
For more usage instructions, run:
```sh
sync_usable_token_types --help
```
Example:
```sh
python3 sync_usable_token_types.py
--mfa-active-tokens-attr-name "attr_name"
--perun-user-id-regex "\d+"
--perun-connector-config-path "/path/to/file"
```
## Nagios probes
All nagios scripts are located under `nagios` directory.
......
package-lock.json
View file @ 5d89e44a
This diff is collapsed.
package.json
View file @ 5d89e44a
......@@ -3,13 +3,13 @@
"version": "0.0.0-development",
"private": true,
"devDependencies": {
"@beepbeepgo/semantic-release-python": "1.1.0",
"@beepbeepgo/semantic-release-python": "^1.1.0",
"@commitlint/config-conventional": "17.8.1",
"@commitlint/cz-commitlint": "17.8.1",
"@perun-proxy-aai/semantic-release-proxy-config": "1.1.10",
"@perun/commitlint-config-perun": "^1.0.0",
"@perun/semantic-release-perun-config": "^1.0.1",
"commitizen": "4.3.0",
"inquirer": "8.2.6",
"semantic-release": "22.0.12"
"inquirer": "8.2.6"
},
"config": {
"commitizen": {
......
perun/proxy/utils/nagios/check_ldap_syncrepl.py
View file @ 5d89e44a
......@@ -3,7 +3,7 @@
from check_syncrepl_extended.check_syncrepl_extended import main
# for program arguments check
# https://gitlab.ics.muni.cz/perun-proxy-aai/python/check_syncrepl_extended
# https://gitlab.ics.muni.cz/perun/deployment/proxyidp/check_syncrepl_extended
if __name__ == "__main__":
main()
perun/proxy/utils/nagios/check_mongodb.py
View file @ 5d89e44a
......@@ -627,7 +627,7 @@ def mongo_connect(
port,
read_preference=pymongo.ReadPreference.SECONDARY,
replicaSet=replica,
**con_args
**con_args,
)
try:
......
perun/proxy/utils/nagios/check_nginx.py
View file @ 5d89e44a
......@@ -4,7 +4,7 @@ import sys
from check_nginx_status.check_nginx_status import main
# for program arguments check
# https://gitlab.ics.muni.cz/perun-proxy-aai/python/check_nginx_status/
# https://gitlab.ics.muni.cz/perun/deployment/proxyidp/check_nginx_status
if __name__ == "__main__":
sys.exit(main())
perun/proxy/utils/sync_usable_token_types.py 0 → 100644
View file @ 5d89e44a
import argparse
import os
import re
from typing import List, Tuple, Optional, Pattern
import yaml
from perun.connector import AdaptersManager
from privacyidea.models import db, TokenOwner, Token
from sqlalchemy import tuple_
# supplied as default values for arguments
PERUN_USER_ID_REGEX = r"perunUserId=(?P<perun_user_id>\d+),"
MFA_ACTIVE_TOKENS_ATTR_NAME = "urn:perun:user:attribute-def:def:mfaTokenTypes:mu"
PERUN_CONNECTOR_CONFIG_PATH = "/etc/perun-connector.yaml"
class ROLLOUTSTATE(object):
CLIENTWAIT = "clientwait"
PENDING = "pending"
VERIFYPENDING = "verify"
ENROLLED = "enrolled"
BROKEN = "broken"
FAILED = "failed"
DENIED = "denied"
USABLE_ROLLOUT_STATES = {
"webauthn": [""],
"backupcode": [""],
"totp": ["", ROLLOUTSTATE.ENROLLED],
}
def load_attrs_manager_config(config_filepath):
if os.path.exists(config_filepath):
with open(config_filepath, "r") as f:
config = yaml.safe_load(f)
return config
else:
raise FileNotFoundError(
f"Attempted to load attributes manager config from '{config_filepath}' "
f"but the file was not found."
)
def get_adapters_manager(config_path: str) -> AdaptersManager:
cfg = load_attrs_manager_config(config_path)
if not cfg:
raise ValueError("Was not able to load the attributes manager config.")
adapters_manager = AdaptersManager(
cfg["attributes_manager_config"], cfg["attributes_map"]
)
return adapters_manager
def get_args():
"""
Supports the command-line arguments listed below.
"""
parser = argparse.ArgumentParser(description="SAML authentication check")
parser._optionals.title = "Options"
parser.add_argument(
"--mfa-active-tokens-attr-name",
"-a",
default=MFA_ACTIVE_TOKENS_ATTR_NAME,
help="name of Perun attribute containing user's active MFA tokens",
)
parser.add_argument(
"--perun-user-id-regex",
"-r",
default=PERUN_USER_ID_REGEX,
help="regex for parsing Perun user ID from privacyIDEA user ID",
)
parser.add_argument(
"--perun-connector-config-path",
"-c",
default=PERUN_CONNECTOR_CONFIG_PATH,
help="path to config for Perun Connector",
)
args = parser.parse_args()
return args
def get_user_token_types() -> List[Tuple[str, str]]:
usable_rollout_states_tuples = [
(token_type, usable_state)
for token_type, usable_states_lst in USABLE_ROLLOUT_STATES.items()
for usable_state in usable_states_lst
]
user_token_types = (
db.session.query(TokenOwner.user_id, Token.tokentype)
.join(Token, Token.id == TokenOwner.token_id)
.filter(Token.active.is_(True))
.filter(Token.locked.is_(False))
.filter(Token.revoked.is_(False))
.filter(
tuple_(Token.tokentype, Token.rollout_state).in_(
usable_rollout_states_tuples
)
)
.distinct(TokenOwner.user_id, Token.tokentype)
.order_by(TokenOwner.user_id)
.all()
)
return user_token_types
def parse_perun_user_id(
perun_user_id_regex: Pattern[str], privacyidea_user_id: str
) -> Optional[str]:
match = re.search(perun_user_id_regex, privacyidea_user_id)
if match:
return match.group("perun_user_id")
return None
def main(args):
perun_user_id_regex = re.compile(args.perun_user_id_regex)
mfa_active_tokens_attr_name = args.mfa_active_tokens_attr_name
adapters_manager = get_adapters_manager(args.perun_connector_config_path)
user_token_types = get_user_token_types()
current_user_id = ""
current_user_token_types = []
for privacyidea_user_id, token_type in user_token_types:
perun_user_id = parse_perun_user_id(perun_user_id_regex, privacyidea_user_id)
if perun_user_id and perun_user_id != current_user_id:
if current_user_id:
current_user_token_types.sort()
attr_to_set = {mfa_active_tokens_attr_name: current_user_token_types}
adapters_manager.set_user_attributes(int(perun_user_id), attr_to_set)
current_user_id = perun_user_id
current_user_token_types = []
current_user_token_types.append(token_type)
if __name__ == "__main__":
main(get_args())
renovate.json
View file @ 5d89e44a
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["local>perun-proxy-aai/renovate-config"]
"extends": ["local>perun/renovate-config:app-maintained"]
}
setup.cfg
View file @ 5d89e44a
[metadata]
version = 2.2.2
version = 2.3.0
license_files = LICENSE
long_description = file: README.md
long_description_content_type = text/markdown
......
setup.py
View file @ 5d89e44a
......@@ -3,8 +3,8 @@ import setuptools
setuptools.setup(
name="perun.proxy.utils",
python_requires=">=3.9",
url="https://gitlab.ics.muni.cz/perun-proxy-aai/proxyidp-scripts.git",
description="Module with utilities and monitoring probes",
url="https://gitlab.ics.muni.cz/perun/perun-proxyidp/perun-proxy-utils.git",
description="Utilities and monitoring probes for Perun ProxyIdP",
include_package_data=True,
packages=setuptools.find_namespace_packages(include=["perun.*"]),
install_requires=[
......@@ -17,6 +17,8 @@ setuptools.setup(
"PyYAML>=5.4,<7.0",
"check_nginx_status~=1.0",
"pyotp~=2.9",
"perun.connector~=3.8",
"privacyidea~=3.9",
],
extras_require={
"ldap": [
......@@ -51,6 +53,7 @@ setuptools.setup(
"run_version_script=perun.proxy.utils.run_version_script:main",
"separate_oidc_logs=perun.proxy.utils.separate_oidc_logs:main",
"separate_ssp_logs=perun.proxy.utils.separate_ssp_logs:main",
"sync_usable_token_types=perun.proxy.utils.sync_usable_token_types:main",
]
},
)