490 Commits

Author SHA1 Message Date
Jian Qiu
0590e3a434 fix: keystone-role-assignments-list-scope (#25652)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-09-10 17:25:32 +08:00
Jian Qiu
23d7222bd0 fix: keystone idp join project roles check (#25653)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-09-10 16:39:09 +08:00
Jian Qiu
19d63a7a36 fix(identity): validate rolepolicy create and bind-role requests (#25628)
Require role_id and reuse the role add-policy checks when creating a binding.

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-10 13:10:46 +08:00
Jian Qiu
b1d1cad973 fix(identity): check assume login with system scope and target roles (#25629)
Keep the caller session when authorizing assume and reuse join-project role checks.

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-10 12:14:33 +08:00
Jian Qiu
0b7ecb6c3c fix(identity): check SAML assertion issuer, audience, and optional signature (#25596)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 20:04:56 +08:00
Jian Qiu
63ef1dad78 fix: unhandled errors (#25383)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-08-20 17:30:29 +08:00
Jian Qiu
d50f3d8e7f feature: support idp driver attribtue_names (#25335)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-08-15 00:16:19 +08:00
Jian Qiu
05a55ed36b fix: allow deleting idp without checking project count (#25108)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-07-10 08:35:55 +08:00
Jian Qiu
50a7105cff fix: credential scope revisit (#25049)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-06-21 08:34:50 +08:00
Zexi Li
3fd0c13e1a fix(keystone): allow blob update for image credentials (#24565)
Also fix type check to allow secret/image only.
2026-03-26 11:41:19 +08:00
Zexi Li
3bdd431db0 Automated cherry pick of #24411: openclaw llm agent (#24420)
* support comfyui and openclaw

feat(region,host): support env credential of container

feat(llm): openclaw url

* fix(region): delete server without host_id

* feat(llm): llm spec
2026-03-11 15:21:31 +08:00
Jian Qiu
bbfc150e1e fix: user filter revisit (#24088)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-01-19 10:51:08 +08:00
Jian Qiu
f50f83feb1 fix: endpoint mode slave (#24016)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-01-06 18:05:41 +08:00
Jian Qiu
bfc17bc3c7 feature: assume user login support (#23964)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-12-23 13:54:04 +08:00
屈轩
f2ae949583 fix(keystone): change token AuditIds width (#23852) 2025-11-27 17:19:43 +08:00
Jian Qiu
04c1b43c8b fix: validate policy role delete condition (#23816)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-11-21 10:59:28 +08:00
Jian Qiu
f748fa2899 feature: user expired_at attribute support (#23723)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-11-14 10:52:58 +08:00
屈轩
1d361bb4d3 fix(keystone): fetch domain user count (#23590) 2025-10-22 16:25:40 +08:00
Jian Qiu
8bd6dd48bb fix: disable password history unique check by default (#23435)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-09-29 15:48:50 +08:00
Jian Qiu
565424350a fix: auto cleanup obsolete password records (#23370)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-09-24 18:34:50 +08:00
屈轩
eb82b9d9ca fix: upgrade go 1.24 (#23241) 2025-09-05 18:26:33 +08:00
Jian Qiu
6d55de51f0 fix: fail to delete cas idp due to readonly domain (#23218)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-09-03 05:49:06 +08:00
屈轩
bb7bceaa24 fix(keystone): show ldap url (#23173) 2025-08-26 14:28:32 +08:00
屈轩
af9483536e fix(keystone): upgrade ldap version (#23165) 2025-08-26 13:28:32 +08:00
Jian Qiu
7a081ad58f fix: permission check for credential object (#22441)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-04-20 18:03:45 +08:00
屈轩
21ea7ff3db fix(keystone): password history check default 1 (#22410) 2025-04-14 15:27:27 +08:00
Jian Qiu
e1e89cc7a2 feature: archived task show (#22309)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-03-20 10:24:14 +08:00
Zexi Li
8de8e90416 optimized(keystone): local sql auth by password (#22304) 2025-03-19 10:10:46 +08:00
Jian Qiu
f794cb43f0 fix: task clean job in batch limit (#22238)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-03-07 01:50:33 +08:00
wanyaoqi
88cd7551e5 fix(host): update host-base to v0.7.0 (#22085)
* fix(host): update host-base to v0.7.0

* fix(cronjob): init timezone, timer set location
2025-02-15 00:02:32 +08:00
Jian Qiu
fb849aec25 fix: enable task archivers (#21943)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-01-08 23:20:28 +08:00
wanyaoqi
8e1c0ef946 Automated cherry pick of #21876: Automated cherry pick of #21875: Automated cherry pick of #21804: [WIP] fix: add more action log (#21878)
* fix: add more action log

* fix(region): add set cmt bound action
2024-12-29 23:09:27 +08:00
Jian Qiu
4132f245ac fix: enfore mfa (#21800)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-12-17 19:39:31 +08:00
屈轩
795c1788c3 fix(apigateway): add service settings info (#21720) 2024-12-04 09:41:17 +08:00
屈轩
845799178d fix(region): allow disable default policy (#21585) 2024-11-14 14:42:21 +08:00
Jian Qiu
e7d15aca80 fix: update vendor 3.11 20240917, upgrade go to 1.21 (#21256)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-09-18 20:48:31 +08:00
Jian Qiu
09e9ffb004 fix: prevent access from anonymous user (#21242)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-09-14 19:36:40 +08:00
Jian Qiu
7d3006c253 fix: opsadmin deny host perform login-info (#20903)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-07-29 13:21:00 +08:00
屈轩
7196f36a1e fix(keystone): change user mobile field character set to utf8 (#20898) 2024-07-27 13:49:52 +08:00
屈轩
97f5e113fd fix(keystone): remove useless log (#20675) 2024-06-28 14:39:09 +08:00
Jian Qiu
8d93558aed fix: add predefined log policy (#20113)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-06-19 09:32:33 +08:00
屈轩
81222be274 fix(keystone): show user group info for user (#20467) 2024-06-04 14:58:40 +08:00
屈轩
5a036c141e fix(keystone): avoid sync remove disabled ldap user (#20436) 2024-06-04 00:47:43 +08:00
屈轩
b58ad3293f fix(keystone): enable user (#20453) 2024-06-03 18:06:56 +08:00
屈轩
f3e4f3b0d0 fix(keystone): avoid panic (#20433) 2024-06-01 17:47:51 +08:00
屈轩
74cdcf7e6d fix(docs): update swagger api (#20100) 2024-04-22 16:24:28 +08:00
Qiu Jian
284f09f649 fix: idp list query filter by sso_domain 2024-04-02 01:28:28 +08:00
Jian Qiu
6f5ec57944 fix: trigger project sync by informer (#19836)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-04-02 00:23:44 +08:00
Jian Qiu
4a3dcb4c37 fix: host-type-count sql error (#19801)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-03-26 18:57:35 +08:00
Qiu Jian
7bfd200e28 fix: tokenCache newInformer fail 2024-03-05 00:28:55 +08:00