django-ansible-base

What's Changed

• HUB is removing org.users and team.users by @jctanner in https://github.com/ansible/django-ansible-base/pull/591
• Dont require service path by @fosterseth in https://github.com/ansible/django-ansible-base/pull/597
• Several bug fixes for reverse sync by @relrod in https://github.com/ansible/django-ansible-base/pull/589
• Attempt to lock down dependencies by @relrod in https://github.com/ansible/django-ansible-base/pull/585
• Revert #585 by @relrod in https://github.com/ansible/django-ansible-base/pull/600
• Update social_auth.py to move log to debug by @kdelee in https://github.com/ansible/django-ansible-base/pull/604
• Add upload of Junit XML test result files by @tznamena in https://github.com/ansible/django-ansible-base/pull/599
• Add some nuance to the on-off logic for RESOURCE_SERVER by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/603

New Contributors

• @tznamena made their first contribution in https://github.com/ansible/django-ansible-base/pull/599

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.28...2024.9.4

What's Changed

• Add oidc_alt_key to auth code by @newswangerd in https://github.com/ansible/django-ansible-base/pull/586
• Add fallback cache by @bhavenst in https://github.com/ansible/django-ansible-base/pull/572
• Ignore permissions given twice in migrations by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/584
• Do not run resource registry stuff if migrations are not finished by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/557
• [AAP-27692] Add middleware that apps can use to handle graceful timeout signal by @kdelee in https://github.com/ansible/django-ansible-base/pull/581
• Adding additional unit tests by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/590
• [RR] Do not try to redirect to null resource server by @relrod in https://github.com/ansible/django-ansible-base/pull/592

New Contributors

• @kdelee made their first contribution in https://github.com/ansible/django-ansible-base/pull/581

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.26...2024.8.28

What's Changed

• [resource registry] Allow for obtaining an auth code given username/password payload by @relrod in https://github.com/ansible/django-ansible-base/pull/580
• Revert "Pin versions for all optional dependencies" by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/588

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.22...2024.8.26

What's Changed

• fix: coerce reading saml request as via https if REDIRECT_IS_HTTPS by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/570
• RBAC content filter should consider the app_label. by @jctanner in https://github.com/ansible/django-ansible-base/pull/573
• Give 400 respones when roles violate RBAC validators by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/563
• Delete resources so reverse migrations will work by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/576
• Add tests for more than 1 team and org member roles by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/577
• Add service backed SSO by @newswangerd in https://github.com/ansible/django-ansible-base/pull/565
• Use updated heuristic for identifying locally managed roles by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/562

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.19...2024.8.22

What's Changed

• Allow turning off role view requirement with setting by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/566
• Switch service auth class to custom header by @newswangerd in https://github.com/ansible/django-ansible-base/pull/567
• Manage team memberships in hub jwt consumer. by @jctanner in https://github.com/ansible/django-ansible-base/pull/568
• Reverse-syncing of resources to a resource server by @relrod in https://github.com/ansible/django-ansible-base/pull/548
• Add method to get status from redis by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/545
• fix: Replace warning with info/debug messages on jwt.common.auth by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/569
• Removing CODEOWNERS by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/571
• Add SSO and partially migrated flag to Resource API by @newswangerd in https://github.com/ansible/django-ansible-base/pull/564

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.9...2024.8.19

What's Changed

• Skip further validation on team parent model if it has no parent model. by @jctanner in https://github.com/ansible/django-ansible-base/pull/558
• Allow removing permissions even when they are invalid by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/559
• resource_registry: sync organization and team descriptions across services by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/447
• Fix bug where is_registered did not consider app_label by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/560

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.8...2024.8.9

What's Changed

• Fixing issue when unsetting redis client ssl files by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/539
• Nest the dynamic settings inclusion into a method by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/531
• Altering Redis client to be able to get access directly to a Redis or RedisCluster object by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/546
• Fix validation bug creating invalid custom system roles by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/532
• Returning a DABRedis instead of a raw Redis by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/550
• Fix bug with reference to id as opposed to pk by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/538
• fix: Settings logic rebind installed_apps when adding new items. by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/552
• Fix auto-creation of CALLBACK_URL for AzureAD by @AparnaKarve in https://github.com/ansible/django-ansible-base/pull/544
• Fix auto-creation of CALLBACK_URL for Google OAuth2 by @AparnaKarve in https://github.com/ansible/django-ansible-base/pull/547
• Test concrete inheritance and fix error with nested inheritance by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/551
• Ensure that LDAP User Search field can be set to null or an empty list by @AparnaKarve in https://github.com/ansible/django-ansible-base/pull/554
• Make stop-postgres target remove the container as before by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/549
• Altering redis client - breaking change by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/535
• Send post_migrate signal from DAB RBAC by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/556

New Contributors

• @AparnaKarve made their first contribution in https://github.com/ansible/django-ansible-base/pull/544

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.8.1...2024.8.8

What's Changed

• Adding setting to prevent modification of settings in AoC environment by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/519
• [Low Prio] Add uwsgi + nginx + ssl to the compose stack by @jctanner in https://github.com/ansible/django-ansible-base/pull/508
• Error if Delete permission is issued without Change permission by @thedoubl3j in https://github.com/ansible/django-ansible-base/pull/520
• fix: Skip _system user when syncing resources by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/521
• Prepare 2 User managers to exclude _system user by default by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/522
• Adding get_relative_url and get_fully_qualified_url by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/505
• Fix new user getting created at every login by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/523
• Fix SAML authenticator to set ACS url as CALLBACK_URL by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/525
• Re-enable black and blacken files that got missed in later PRs by @relrod in https://github.com/ansible/django-ansible-base/pull/529
• [get_fully_qualified_url] Fallback to crum request by @relrod in https://github.com/ansible/django-ansible-base/pull/528
• Handle unsupported media type in django-oauth-toolkit by @cutwater in https://github.com/ansible/django-ansible-base/pull/537
• Add bits necessary to satiate pulpcore's openapi generator. by @jctanner in https://github.com/ansible/django-ansible-base/pull/542
• Fix authenticator order by @trucdg in https://github.com/ansible/django-ansible-base/pull/541

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.7.17...2024.8.1

What's Changed

• Fix flaky test failure by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/504
• Custom permission class for oauth token scope adherence by @relrod in https://github.com/ansible/django-ansible-base/pull/500
• Handle system user login via external source by @trucdg in https://github.com/ansible/django-ansible-base/pull/502
• Fix AuthMap groups and attributes rules by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/480
• jwt_consumer: remove unauthorized permissions by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/486
• Require superuser permission to revoke global roles by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/497
• Prevent disabling or deleting the last enabled authenticator by @jctanner in https://github.com/ansible/django-ansible-base/pull/513
• [oauth2_provider] Disable PKCE by default by @relrod in https://github.com/ansible/django-ansible-base/pull/514
• Fix keycloak public key help text typo by @mabashian in https://github.com/ansible/django-ansible-base/pull/516
• Fix incorrect mock object calls by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/518
• Use single postgres definition in compose file by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/515
• Optimize SQL queries when creating orgs and teams by @cutwater in https://github.com/ansible/django-ansible-base/pull/506
• Optimize SQL queries when assigning permissions on teams by @cutwater in https://github.com/ansible/django-ansible-base/pull/509
• Make ansible_id match the JWT data if creating new user by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/512
• Making CALLBACK_URLS optional by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/511
• [Low Prio] Add a sqlite3 check by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/517

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.7.1...2024.7.17

What's Changed

• Properly resolve the AuthenticatorUser for LDAP by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/492
• Avoid extra database queries when not needed by @cutwater in https://github.com/ansible/django-ansible-base/pull/495
• Fix queryset of RoleDefinition-assignment list with new utils by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/425
• Encrypt extra_data to not expose things that might be used by authenticators by @thedoubl3j in https://github.com/ansible/django-ansible-base/pull/378
• Silly attempt at running eda-server tests by @relrod in https://github.com/ansible/django-ansible-base/pull/496
• Add callback to validate role assignment by @fosterseth in https://github.com/ansible/django-ansible-base/pull/490
• Adding .github/CODEOWNERS by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/498
• Enhancements to request logging by @relrod in https://github.com/ansible/django-ansible-base/pull/478
• Allow managing org roles with view permission locally by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/501

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.6.26...2024.7.1

What's Changed

• Prevent system user from logging in via external source by @bhavenst in https://github.com/ansible/django-ansible-base/pull/461
• Fix typo in keycloak public key help text by @mabashian in https://github.com/ansible/django-ansible-base/pull/462
• Avoid references to User.resource which may not be there by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/466
• Revert superuser claims by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/470
• Respect admin password env var and remove duplication creation by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/471
• Split DAB RBAC app docs into 4 parts by intended audience by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/427
• Always clear ContentType cache to enforce determinism by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/474
• Allow null values for ansible_id fields by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/468
• Rename is_system_auditor to is_platform_auditor by @relrod in https://github.com/ansible/django-ansible-base/pull/459
• Process hub auditor role by @newswangerd in https://github.com/ansible/django-ansible-base/pull/477
• Remove OIDC backend config data caching by @bhavenst in https://github.com/ansible/django-ansible-base/pull/460
• Add another variable which might house the public cert by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/464
• Add handling for jwt enc OIDC user info by @bhavenst in https://github.com/ansible/django-ansible-base/pull/448
• Add a test for permission transference moving teams org by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/479
• More robust proxy trust header handling by @chrismeyersfsu in https://github.com/ansible/django-ansible-base/pull/452
• Social Auth reflects Authentication maps by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/463
• Add test model with no view permission by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/473
• Fix issues with saving secrets starting with $encrypted$ by @trucdg in https://github.com/ansible/django-ansible-base/pull/437
• Disable activitystream for access token last_used by @bhavenst in https://github.com/ansible/django-ansible-base/pull/481
• Fix authenticator-related users view with permission handling by @trucdg in https://github.com/ansible/django-ansible-base/pull/487
• Add social auth exception handler middleware by @bhavenst in https://github.com/ansible/django-ansible-base/pull/467
• Prevent N+1 queries problem when reconciling claims by @cutwater in https://github.com/ansible/django-ansible-base/pull/488
• Fix typo in github field label name for scope. by @jctanner in https://github.com/ansible/django-ansible-base/pull/494
• Correct the content type as necessary for older systems. by @jctanner in https://github.com/ansible/django-ansible-base/pull/493
• Parametrize visible users by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/491

New Contributors

• @mabashian made their first contribution in https://github.com/ansible/django-ansible-base/pull/462
• @trucdg made their first contribution in https://github.com/ansible/django-ansible-base/pull/437

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.6.11...2024.6.26

What's Changed

• oauth2_provider: support adding, removing, clearing tokens by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/421
• fix: Do not convert jwt_user_id from None to str by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/441
• Reconcile User Claims with AuthMap roles by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/431
• fix: make RESOURCE_JWT_USER_ID and RESOURCE_SERVICE_PATH optional. by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/442
• Identify specific actions from non-viewset views for resource registry by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/446
• Rename DIRECT_SHARED_RESOURCE_MANAGEMENT_ENABLED by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/456
• Alter JWT authentication by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/420

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.6.8...2024.6.11

What's Changed

• Consolidate member test fixtures by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/439
• Vendoring system for shared role definitions by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/435
• Lock down OAuth2 views by @relrod in https://github.com/ansible/django-ansible-base/pull/434
• Replace X-TRUSTED-HEADER with pub/priv encrypted message by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/389
• Prevent role assignment or removal of unmanaged things by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/430

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.6.6...2024.6.8

What's Changed

• Create system user as needed by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/418
• Fix issue where tests fail to teardown by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/429
• Alter lib/utils/models to not depend on resource_registry by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/433
• AuthenticationMap role by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/407
• Use dynamic docstrings for sublists by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/419
• Fix SSO/radius bug by @bhavenst in https://github.com/ansible/django-ansible-base/pull/436
• [CI] Add check for missing migrations, add missing migration by @relrod in https://github.com/ansible/django-ansible-base/pull/438

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.31...2024.6.6

What's Changed

• Fix IntegrityError when giving overlapping team permissions by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/401
• [oauth2] Add a general /tokens/ to user mixin by @relrod in https://github.com/ansible/django-ansible-base/pull/409
• Make username and password optional for Radius authenticator by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/417
• Fix server error and prohibit team org member assignment by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/412
• More fixes from warnings in /docs/ page by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/377
• RBAC: User can't delete self by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/413
• Fetch is_superuser/is_system_auditor/groups for OIDC, Keycloak, SAML by @bhavenst in https://github.com/ansible/django-ansible-base/pull/399
• Introduce caching utility for lazy managed role references by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/422
• disable POST in options for role definitions if custom roles disabled by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/411
• Implement periodic sync command and functions. by @rochacbruno in https://github.com/ansible/django-ansible-base/pull/297
• disallow filtering by encrypted_fields by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/414

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.23...2024.5.31

What's Changed

• Add back in debugging apps by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/402
• Only check redis file settings if tls is enabled by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/403
• Pin django-oauth-toolkit to 2.3.0 by @slemrmartin in https://github.com/ansible/django-ansible-base/pull/406
• Fix 500 on unintended endpoints and further refactor association router by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/370
• Add file and unix URL support to the redis client by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/381
• Add type hints for OAuth2 serializer method fields by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/405
• Fix dir() giving wrong answer in autogenerated viewsets by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/410
• [oauth2] Prevent filtering on client_secret by @relrod in https://github.com/ansible/django-ansible-base/pull/404
• Add a role metadata endpoint for clients by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/238

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.18...2024.5.23

What's Changed

• Move rest_filter default excludes to unconditional settings include by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/398
• Re-apply fix broken in rebase error by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/400

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.17...2024.5.18

What's Changed

• Move the rest_filters reserved names to a setting by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/384
• Reconcile user teams and organizations by @cutwater in https://github.com/ansible/django-ansible-base/pull/390
• Add check for system user does not exist by @bhavenst in https://github.com/ansible/django-ansible-base/pull/394
• Redis client will now check read access to file settings by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/391

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.16...2024.5.17

What's Changed

• Oauth2 provider by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/133
• REMOTE_ADDR changes by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/366
• Add more test_app api v1 links by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/376
• Remove logo_data from OAuth2Application by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/382
• Move oauth2 fixtures into oauth2_provider.fixtures by @john-westcott-iv in https://github.com/ansible/django-ansible-base/pull/387
• create orgs&teams from auth maps by @jctanner in https://github.com/ansible/django-ansible-base/pull/380
• fix podman-compose on selinux enforcing systems by @BrennanPaciorek in https://github.com/ansible/django-ansible-base/pull/388
• Disallow editing of system user by @bhavenst in https://github.com/ansible/django-ansible-base/pull/375
• Add resource server config by @newswangerd in https://github.com/ansible/django-ansible-base/pull/311
• RBAC: add checks for when request is from Anonymous User by @Dostonbek1 in https://github.com/ansible/django-ansible-base/pull/392

New Contributors

• @BrennanPaciorek made their first contribution in https://github.com/ansible/django-ansible-base/pull/388
• @bhavenst made their first contribution in https://github.com/ansible/django-ansible-base/pull/375

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.6...2024.5.16

What's Changed

• [translations] /rest_filters updates by @thedoubl3j in https://github.com/ansible/django-ansible-base/pull/331
• Fix bug detecting running container that needs migration by @AlanCoding in https://github.com/ansible/django-ansible-base/pull/364
• Return None indicates auth does not apply by @chrismeyersfsu in https://github.com/ansible/django-ansible-base/pull/367

New Contributors

• @chrismeyersfsu made their first contribution in https://github.com/ansible/django-ansible-base/pull/367

Full Changelog: https://github.com/ansible/django-ansible-base/compare/2024.5.1...2024.5.6