Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add the ability to disable local authentication #10102

Merged
merged 7 commits into from
May 27, 2021
Merged

Add the ability to disable local authentication #10102

merged 7 commits into from
May 27, 2021

Commits on May 13, 2021

  1. Add a new setting, DISABLE_LOCAL_AUTH 

    and expose it in the settings UI.
    @jbradberry
    jbradberry committed May 13, 2021
    Configuration menu
    Copy the full SHA
    26b7e9d View commit details
    Browse the repository at this point in the history

  2. Write a thin wrapper around the standard Django auth backend

    @jbradberry
    jbradberry committed May 13, 2021
    Configuration menu
    Copy the full SHA
    5c664ea View commit details
    Browse the repository at this point in the history

  3. Add a signal handler to invalidate sessions and tokens for local users 

    when this setting gets turned on.
    @jbradberry
    jbradberry committed May 13, 2021
    Configuration menu
    Copy the full SHA
    9e7f004 View commit details
    Browse the repository at this point in the history

  4. Add a new middleware to force-logout local-only users 

    when the DISABLE_LOCAL_AUTH setting is set.  This avoids the ugliness
of getting a SuspiciousOperation error for any request/response cycles
that are in flight when a user gets bounced.
    @jbradberry
    jbradberry committed May 13, 2021
    Configuration menu
    Copy the full SHA
    81de931 View commit details
    Browse the repository at this point in the history

  5. Add validation checks 

    that prevent the setting from being turned on if remote auth systems
and users are not already present.
    @jbradberry
    jbradberry committed May 13, 2021
    Configuration menu
    Copy the full SHA
    6f4c41a View commit details
    Browse the repository at this point in the history

Commits on May 19, 2021

  1. Remove the remote user existence validation 

    since we are going to do a confirmation modal dialog instead.
    @jbradberry
    jbradberry committed May 19, 2021
    Configuration menu
    Copy the full SHA
    2aa3fe7 View commit details
    Browse the repository at this point in the history

Commits on May 20, 2021

  1. adds confirmation modal to switch

    @AlexSCorey
    AlexSCorey committed May 20, 2021
    Configuration menu
    Copy the full SHA
    3b5641c View commit details
    Browse the repository at this point in the history