Jian Qiu
0590e3a434
fix: keystone-role-assignments-list-scope ( #25652 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-09-10 17:25:32 +08:00
Jian Qiu
23d7222bd0
fix: keystone idp join project roles check ( #25653 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-09-10 16:39:09 +08:00
Jian Qiu
19d63a7a36
fix(identity): validate rolepolicy create and bind-role requests ( #25628 )
...
Require role_id and reuse the role add-policy checks when creating a binding.
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-10 13:10:46 +08:00
Jian Qiu
b1d1cad973
fix(identity): check assume login with system scope and target roles ( #25629 )
...
Keep the caller session when authorizing assume and reuse join-project role checks.
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-10 12:14:33 +08:00
Jian Qiu
0b7ecb6c3c
fix(identity): check SAML assertion issuer, audience, and optional signature ( #25596 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-08 20:04:56 +08:00
Jian Qiu
63ef1dad78
fix: unhandled errors ( #25383 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-08-20 17:30:29 +08:00
Jian Qiu
d50f3d8e7f
feature: support idp driver attribtue_names ( #25335 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-08-15 00:16:19 +08:00
Jian Qiu
05a55ed36b
fix: allow deleting idp without checking project count ( #25108 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-07-10 08:35:55 +08:00
Jian Qiu
50a7105cff
fix: credential scope revisit ( #25049 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-06-21 08:34:50 +08:00
Zexi Li
3fd0c13e1a
fix(keystone): allow blob update for image credentials ( #24565 )
...
Also fix type check to allow secret/image only.
2026-03-26 11:41:19 +08:00
Zexi Li
3bdd431db0
Automated cherry pick of #24411 : openclaw llm agent ( #24420 )
...
* support comfyui and openclaw
feat(region,host): support env credential of container
feat(llm): openclaw url
* fix(region): delete server without host_id
* feat(llm): llm spec
2026-03-11 15:21:31 +08:00
Jian Qiu
bbfc150e1e
fix: user filter revisit ( #24088 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-01-19 10:51:08 +08:00
Jian Qiu
f50f83feb1
fix: endpoint mode slave ( #24016 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-01-06 18:05:41 +08:00
Jian Qiu
bfc17bc3c7
feature: assume user login support ( #23964 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-12-23 13:54:04 +08:00
屈轩
f2ae949583
fix(keystone): change token AuditIds width ( #23852 )
2025-11-27 17:19:43 +08:00
Jian Qiu
04c1b43c8b
fix: validate policy role delete condition ( #23816 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-11-21 10:59:28 +08:00
Jian Qiu
f748fa2899
feature: user expired_at attribute support ( #23723 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-11-14 10:52:58 +08:00
屈轩
1d361bb4d3
fix(keystone): fetch domain user count ( #23590 )
2025-10-22 16:25:40 +08:00
Jian Qiu
8bd6dd48bb
fix: disable password history unique check by default ( #23435 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-09-29 15:48:50 +08:00
Jian Qiu
565424350a
fix: auto cleanup obsolete password records ( #23370 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-09-24 18:34:50 +08:00
屈轩
eb82b9d9ca
fix: upgrade go 1.24 ( #23241 )
2025-09-05 18:26:33 +08:00
Jian Qiu
6d55de51f0
fix: fail to delete cas idp due to readonly domain ( #23218 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-09-03 05:49:06 +08:00
屈轩
bb7bceaa24
fix(keystone): show ldap url ( #23173 )
2025-08-26 14:28:32 +08:00
屈轩
af9483536e
fix(keystone): upgrade ldap version ( #23165 )
2025-08-26 13:28:32 +08:00
Jian Qiu
7a081ad58f
fix: permission check for credential object ( #22441 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-04-20 18:03:45 +08:00
屈轩
21ea7ff3db
fix(keystone): password history check default 1 ( #22410 )
2025-04-14 15:27:27 +08:00
Jian Qiu
e1e89cc7a2
feature: archived task show ( #22309 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-03-20 10:24:14 +08:00
Zexi Li
8de8e90416
optimized(keystone): local sql auth by password ( #22304 )
2025-03-19 10:10:46 +08:00
Jian Qiu
f794cb43f0
fix: task clean job in batch limit ( #22238 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-03-07 01:50:33 +08:00
wanyaoqi
88cd7551e5
fix(host): update host-base to v0.7.0 ( #22085 )
...
* fix(host): update host-base to v0.7.0
* fix(cronjob): init timezone, timer set location
2025-02-15 00:02:32 +08:00
Jian Qiu
fb849aec25
fix: enable task archivers ( #21943 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-01-08 23:20:28 +08:00
wanyaoqi
8e1c0ef946
Automated cherry pick of #21876 : Automated cherry pick of #21875 : Automated cherry pick of #21804 : [WIP] fix: add more action log ( #21878 )
...
* fix: add more action log
* fix(region): add set cmt bound action
2024-12-29 23:09:27 +08:00
Jian Qiu
4132f245ac
fix: enfore mfa ( #21800 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-12-17 19:39:31 +08:00
屈轩
795c1788c3
fix(apigateway): add service settings info ( #21720 )
2024-12-04 09:41:17 +08:00
屈轩
845799178d
fix(region): allow disable default policy ( #21585 )
2024-11-14 14:42:21 +08:00
Jian Qiu
e7d15aca80
fix: update vendor 3.11 20240917, upgrade go to 1.21 ( #21256 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-09-18 20:48:31 +08:00
Jian Qiu
09e9ffb004
fix: prevent access from anonymous user ( #21242 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-09-14 19:36:40 +08:00
Jian Qiu
7d3006c253
fix: opsadmin deny host perform login-info ( #20903 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-07-29 13:21:00 +08:00
屈轩
7196f36a1e
fix(keystone): change user mobile field character set to utf8 ( #20898 )
2024-07-27 13:49:52 +08:00
屈轩
97f5e113fd
fix(keystone): remove useless log ( #20675 )
2024-06-28 14:39:09 +08:00
Jian Qiu
8d93558aed
fix: add predefined log policy ( #20113 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-06-19 09:32:33 +08:00
屈轩
81222be274
fix(keystone): show user group info for user ( #20467 )
2024-06-04 14:58:40 +08:00
屈轩
5a036c141e
fix(keystone): avoid sync remove disabled ldap user ( #20436 )
2024-06-04 00:47:43 +08:00
屈轩
b58ad3293f
fix(keystone): enable user ( #20453 )
2024-06-03 18:06:56 +08:00
屈轩
f3e4f3b0d0
fix(keystone): avoid panic ( #20433 )
2024-06-01 17:47:51 +08:00
屈轩
74cdcf7e6d
fix(docs): update swagger api ( #20100 )
2024-04-22 16:24:28 +08:00
Qiu Jian
284f09f649
fix: idp list query filter by sso_domain
2024-04-02 01:28:28 +08:00
Jian Qiu
6f5ec57944
fix: trigger project sync by informer ( #19836 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-04-02 00:23:44 +08:00
Jian Qiu
4a3dcb4c37
fix: host-type-count sql error ( #19801 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-03-26 18:57:35 +08:00
Qiu Jian
7bfd200e28
fix: tokenCache newInformer fail
2024-03-05 00:28:55 +08:00