Commit Graph

351 Commits (master)

Author SHA1 Message Date
IT Creativity + Art Team 89c1ed71e1
feat: Add Bulgarian translation (#753) 2 years ago
Maksim Eltyshev c8d732d936 chore: Update version 2 years ago
Maksim Eltyshev 5a32b6327c fix: Fix actions with members
Closes #737
2 years ago
Emmanuel Guyot 8488105810
feat: Search in card descriptions (#729) 2 years ago
Niccolò Pedrini 57ebfa51d8
fix: Update Italian translation (#727) 2 years ago
Maksim Eltyshev 40170fdf90 chore: Update version 2 years ago
leroyloren 1629f62d09
fix: Update Czech translation (#725) 2 years ago
Maksim Eltyshev fff0552081 chore: Update dependencies
Closes #726
2 years ago
Maksim Eltyshev e792cb26b1 chore: Update version 2 years ago
Maksim Eltyshev 7ee2d76be4 feat: Display avatar next to user name in top bar 2 years ago
Emmanuel Guyot eb56b2147b
feat: Filter cards by keyword with advanced capabilities (#713)
Closes #706
2 years ago
Maksim Eltyshev 8747aa59de fix: Fix title of sort menu item 2 years ago
Samuel 934dcdf39b
feat: Sort cards within list (#717)
Closes #390
2 years ago
Felipe 2c84316fe0
fix: Limit amount of displayed board members (#715)
Closes #617
2 years ago
ItzAndriss 200ea3bbc0
feat: Add Hungarian translation (#590) 2 years ago
Maksim Eltyshev 92f75789fa chore: Update version 2 years ago
Maksim Eltyshev 8a8c1fee0c fix: Fix error output when sending email or message to Slack 2 years ago
Maksim Eltyshev 16499052f7 chore: Update version 2 years ago
HannesOberreiter cc32daa009
feat: Display clickable links in tasks (#694)
Closes #330
2 years ago
Maksim Eltyshev 4e2863faa7 feat: Automatic logout when session expires
Closes #693
2 years ago
Niccolò Pedrini 39e320fe4b
fix: Update Italian translation (#688) 2 years ago
Blyamur 22964cb375
fix: Update Russian translation (#686) 2 years ago
leroyloren fd89cf7f2b
fix: Update Czech translation (#679) 2 years ago
Maksim Eltyshev 5acf84c20b chore: Update version 2 years ago
Matthieu Bollot 6cd9da844f
feat: Add ability to duplicate card (#668) 2 years ago
Maksim Eltyshev d911030831 chore: Update version 2 years ago
Maksim Eltyshev 9d95ed6c41 fix: Fix OIDC authentication error when redirecting from another tab
Closes #650
2 years ago
Maksim Eltyshev 1a5a853fa3 fix: Fix scrollbar styles 2 years ago
Maksim Eltyshev bb358e01dd chore: Update version 2 years ago
Maksim Eltyshev 60ab09771d fix: Add date-fns locale to Portuguese translation 2 years ago
Jeffrey cb3ef783ba
feat: Add Dutch translation (#644) 2 years ago
Reuben Hu fe376b10c1
feat: Add Indonesian translation (#643) 2 years ago
IV16SL 786441cda0
fix: Fix Chinese translation (#641) 2 years ago
Chris 0d3cf0a32d
feat: Add Portuguese translation (#640) 2 years ago
Maksim Eltyshev 73a641b935 chore: Update version 2 years ago
Maksim Eltyshev fd5c33dd5d fix: Remove overflow of attachment dropzone 2 years ago
Maksim Eltyshev 0c1c7e2192 chore: Update version 2 years ago
Maksim Eltyshev b8d262f745 feat: Add ability to enforce SSO
Closes #543, closes #545
2 years ago
Maksim Eltyshev a1fd694248 chore: Update version 2 years ago
Maksim Eltyshev 634d6ceab1 feat: Add ability to map OIDC attributes and ignore username
Closes #554
2 years ago
Maksim Eltyshev 31d4d5f38d chore: Update version 2 years ago
Maksim Eltyshev b2e0c45539 chore: Update version 2 years ago
Maksim Eltyshev 389648b546 fix: Add missing date formats to Ukrainian translation 2 years ago
Denis Polishchuk f4789c28db
feat: Add Ukrainian translation (#571) 2 years ago
ossdate 668092de7d
fix: Update Chinese translation (#569) 2 years ago
Yu Inoue 920f9c097d
fix: Display year when date is outside of current year (#567) 2 years ago
Maksim Eltyshev da63598de3 chore: Update version 2 years ago
Gilberto Vidal 517cb34cfe
fix: Fix eslint rules for Windows (#508) 2 years ago
NavyStack 079b8eba53
fix: Fine-tune Korean and Japanese translations, fix full stops (#561) 2 years ago
Maksim Eltyshev 5f2723623a chore: Update version 2 years ago
Maksim Eltyshev fee6841d0a fix: Attempt to fix error that occurs during reconnection 2 years ago
Maksim Eltyshev ca6fb3b962 fix: Add state parameter to OIDC authorization url
Closes #558
2 years ago
Maksim Eltyshev 80d12aaeeb fix: Fix Korean translation linting 2 years ago
NavyStack 89af209a2e
fix: Update Korean translation (#560) 2 years ago
Maksim Eltyshev eddeb96b16 fix: Fix Romanian translation linting 2 years ago
Maksim Eltyshev 9e8ff3b579 chore: Revert remark-gfm update 2 years ago
Andrei Covali 24163463fc
feat: Add Romanian translation (#555) 2 years ago
Maksim Eltyshev 5b519cb62f chore: Update version 2 years ago
Maksim Eltyshev 239611ad51 chore: Update dependencies 2 years ago
Yu Inoue 0575e665fe
fix: Fix time format in Japanese locale (#546)
Closes #542
2 years ago
Maksim Eltyshev 019766dced chore: Update version 2 years ago
Maksim Eltyshev 6dc9e4ed99 fix: Disable role change when OIDC roles are not ignored 2 years ago
Maksim Eltyshev f1c72df8b6 chore: Update version 2 years ago
Maksim Eltyshev 5056d38848 fix: Fix logging out with invalid token 2 years ago
Vishnu Kaushik ded58dc8b0
fix: Add task counter in card modal (#525)
Closes #467
2 years ago
Maksim Eltyshev fc2f4cd5d3 chore: Update version 2 years ago
Maksim Eltyshev 7ef457157e fix: Fallback to query if there is no fragment 2 years ago
Maksim Eltyshev 23ee815200 chore: Update version 2 years ago
Maksim Eltyshev 40c04c35ff ref: Refactoring 2 years ago
Lorenz Brun 743f2956c8
feat: Improve OIDC SSO (#524)
The OIDC implementation merged in https://github.com/plankanban/planka/pull/491 is flawed for multiple reasons.

It assumes that the access_token returned by the IDP has to be a JWT parseable by the RP which is not the case [1].
Many major IDPs do issue tokens which are not JWTs and RPs should not rely on the contents of these at all.
The only signed token which has a standardized format for direct RP consumption is the OIDC ID token (id_token), but this by default doesn't contain many claims, especially role claims are omitted from them by default for size reasons. To get these additional claims into the ID token, one needs an IDP with support for the "claims" parameter.

It requires manual specification of the JWKS URL which is mandatory in any OIDC discovery document and thus never needs to be manually specified.

It also makes the questionable decision to use a client-side code flow with PKCE where a normal code flow would be much more appropriate as all user data is processed in the backend which can securely hold a client secret (confidential client). This has far wider IDP support, is safer (due to direct involvement of the IDP in obtaining user information) and doesn't require working with ID tokens and claim parameters.

By using a server-side code flow we can also offload most complexity to the server alone, no longer requiring an additional OIDC library on the web client.

Also silent logout doesn't work on most IDPs for security reasons, one needs to actually redirect the user over to the IDP, which then prompts them once more if they actually want to log out.

This implementation should work with any OIDC-compliant IDP and even OAuth 2.0-only IDPs as long as they serve and OIDC discovery document.

[1] rfc-editor.org/rfc/rfc6749#section-5.1
2 years ago
Maksim Eltyshev 667c5daf25 chore: Update version 2 years ago
Maksim Eltyshev 3ac2d289d0 chore: Update version 2 years ago
Maksim Eltyshev 8e0c60f5be fix: OIDC finalization and refactoring 2 years ago
Maksim Eltyshev 91bc889fed feat: Use environment variables for default admin configuration 2 years ago
Gilberto Vidal a34d8e9753
fix: Fix Turkish translation linting (#504) 2 years ago
gorrilla10101 107cb85ba2
feat: OIDC with PKCE flow (#491) 2 years ago
creador30 9333ef562e
feat: Add Turkish translation (#501) 2 years ago
Andrey 5317950b5c
fix: Update Russian translation (#497) 2 years ago
Maksim Eltyshev 7501619b7e fix: Fix Czech translation linting
Closes #487
2 years ago
leroyloren 080e29aa03
fix: Update Czech translation (#485) 2 years ago
[object Object] 48c532b2c2
feat: Add edit icon to project name (#457) 2 years ago
Maksim Eltyshev a62815f825 ref: Little refactoring 3 years ago
Maksim Eltyshev 6938232dc4 fix: Keep task edits when textarea loses focus 3 years ago
[object Object] 4c4cfa9c66
fix: Keep comment edits when textarea loses focus (#443)
Closes #441
3 years ago
Maksim Eltyshev 5c435414f7 chore: Update version 3 years ago
Maksim Eltyshev 2d7812a679 fix: Use creation timestamp instead of id for ordering
Closes #465
3 years ago
ULiiAn 6c4db967c2
fix: Fix Chinese translation (#464)
Closes #463
3 years ago
Zsh 23e2b4a622
fix: Update Chinese translation (#410) 3 years ago
LuisLiu f4cc51e1c0
feat: Add Chinese translation (#398) 3 years ago
Maksim Eltyshev 02eabd203c chore: Update version 3 years ago
Maksim Eltyshev d0a2734161 fix: Rename timer to stopwatch
Closes #392
3 years ago
Maksim Eltyshev 7e2b74627c fix: Prevent board from scrolling when it starts with non-left-click 3 years ago
Maksim Eltyshev 8dd331b895 fix: Fix paths in css files when building on windows 3 years ago
Maksim Eltyshev b9e64d4e91 chore: Update version 3 years ago
Maksim Eltyshev 9d35b8535b feat: Display current project and board in page title 3 years ago
Maksim Eltyshev d622b9df4e fix: Fix line breaks in task preview
Closes #391
3 years ago
Maksim Eltyshev 8a46a2e0b9 ref: Creating popups with hook, fix translation keys passing 3 years ago
Maksim Eltyshev 0d86351d62 chore: Update version 3 years ago
Maksim Eltyshev 3a7e4d2e8f fix: Fix markdown styles and card description font size 3 years ago
Maksim Eltyshev 1bb387d315 feat: Display version in UI
Closes #153
3 years ago