Compare commits

...

13 Commits

Author SHA1 Message Date
1901238f87 Merge pull request 'Update Rust crate clap to 4.5.53' (#443) from renovate/clap-4.x into master
Some checks failed
continuous-integration/drone/push Build is failing
2025-11-21 00:06:51 +00:00
088d682b31 Update Rust crate clap to 4.5.53
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2025-11-20 00:06:35 +00:00
02c7f764f5 Merge pull request 'Update Rust crate actix-web to 4.12.0' (#442) from renovate/actix-web-4.x into master
Some checks failed
continuous-integration/drone/push Build is failing
2025-11-18 00:07:30 +00:00
7b8412682d Update Rust crate actix-web to 4.12.0
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2025-11-17 00:07:08 +00:00
5a05b547a8 Fix cargo clippy issue
All checks were successful
continuous-integration/drone/push Build is passing
2025-11-03 22:23:32 +01:00
da2aa8aac2 Merge pull request 'Update Rust crate lazy-regex to 3.4.2' (#441) from renovate/lazy-regex-3.x into master
Some checks failed
continuous-integration/drone/push Build is failing
2025-11-02 00:06:57 +00:00
bc453cfd26 Update Rust crate lazy-regex to 3.4.2
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2025-11-01 00:07:09 +00:00
4b26a0ea12 Merge pull request 'Update Rust crate jwt-simple to 0.12.13' (#440) from renovate/jwt-simple-0.x into master
Some checks failed
continuous-integration/drone/push Build is failing
2025-11-01 00:06:34 +00:00
242d725ad0 Update Rust crate jwt-simple to 0.12.13
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2025-10-31 00:33:01 +00:00
ce4317299e Merge pull request 'Update Rust crate clap to 4.5.51' (#439) from renovate/clap-4.x into master
All checks were successful
continuous-integration/drone/push Build is passing
2025-10-31 00:31:57 +00:00
14ede196c4 Update Rust crate clap to 4.5.51
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2025-10-30 00:35:05 +00:00
6d341069a0 Fix appearance issue in clients list screen with long client ids
All checks were successful
continuous-integration/drone/push Build is passing
2025-10-29 12:34:47 +01:00
d4de81f1fb Can disable local login
All checks were successful
continuous-integration/drone/push Build is passing
2025-10-29 12:20:05 +01:00
15 changed files with 112 additions and 55 deletions

2
.gitignore vendored
View File

@@ -1,3 +1,3 @@
/target
.idea
storage
/storage

98
Cargo.lock generated
View File

@@ -157,7 +157,7 @@ dependencies = [
"futures-core",
"futures-util",
"mio",
"socket2",
"socket2 0.5.8",
"tokio",
"tracing",
]
@@ -201,9 +201,9 @@ dependencies = [
[[package]]
name = "actix-web"
version = "4.11.0"
version = "4.12.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a597b77b5c6d6a1e1097fddde329a83665e25c5437c696a3a9a4aa514a614dea"
checksum = "2233f53f6cb18ae038ce1f0713ca0c72ca0c4b71fe9aaeb59924ce2c89c6dd85"
dependencies = [
"actix-codec",
"actix-http",
@@ -236,7 +236,7 @@ dependencies = [
"serde_json",
"serde_urlencoded",
"smallvec",
"socket2",
"socket2 0.6.1",
"time",
"tracing",
"url",
@@ -400,9 +400,9 @@ dependencies = [
[[package]]
name = "anyhow"
version = "1.0.97"
version = "1.0.100"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "dcfed56ad506cb2c684a14971b8861fdc3baaaae314b9e5f9bb532cbe3ba7a4f"
checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
[[package]]
name = "arrayref"
@@ -660,9 +660,9 @@ dependencies = [
[[package]]
name = "binstring"
version = "0.1.2"
version = "0.1.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ed79c2a8151273c70956b5e3cdfdc1ff6c1a8b9779ba59c6807d281b32ee2f86"
checksum = "0669d5a35b64fdb5ab7fb19cae13148b6b5cbdf4b8247faf54ece47f699c8cef"
[[package]]
name = "bitflags"
@@ -808,9 +808,9 @@ dependencies = [
[[package]]
name = "clap"
version = "4.5.50"
version = "4.5.53"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0c2cfd7bf8a6017ddaa4e32ffe7403d547790db06bd171c1c53926faab501623"
checksum = "c9e340e012a1bf4935f5282ed1436d1489548e8f72308207ea5df0e23d2d03f8"
dependencies = [
"clap_builder",
"clap_derive",
@@ -818,9 +818,9 @@ dependencies = [
[[package]]
name = "clap_builder"
version = "4.5.50"
version = "4.5.53"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0a4c05b9e80c5ccd3a7ef080ad7b6ba7d6fc00a985b8b157197075677c82c7a0"
checksum = "d76b5d13eaa18c901fd2f7fca939fefe3a0727a953561fefdf3b2922b8569d00"
dependencies = [
"anstream",
"anstyle",
@@ -973,9 +973,9 @@ dependencies = [
[[package]]
name = "ct-codecs"
version = "1.1.3"
version = "1.1.6"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b916ba8ce9e4182696896f015e8a5ae6081b305f74690baa8465e35f5a142ea4"
checksum = "9b10589d1a5e400d61f9f38f12f884cfd080ff345de8f17efda36fe0e4a02aa8"
[[package]]
name = "ctr"
@@ -1450,18 +1450,18 @@ checksum = "18492c9f6f9a560e0d346369b665ad2bdbc89fa9bceca75796584e79042694c3"
[[package]]
name = "hmac-sha256"
version = "1.1.8"
version = "1.1.12"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4a8575493d277c9092b988c780c94737fb9fd8651a1001e16bee3eccfc1baedb"
checksum = "ad6880c8d4a9ebf39c6e8b77007ce223f646a4d21ce29d99f70cb16420545425"
dependencies = [
"digest",
]
[[package]]
name = "hmac-sha512"
version = "1.1.6"
version = "1.1.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b0b3a0f572aa8389d325f5852b9e0a333a15b0f86ecccbb3fdb6e97cd86dc67c"
checksum = "e89e8d20b3799fa526152a5301a771eaaad80857f83e01b23216ceaafb2d9280"
dependencies = [
"digest",
]
@@ -1598,7 +1598,7 @@ dependencies = [
"http-body",
"hyper",
"pin-project-lite",
"socket2",
"socket2 0.5.8",
"tokio",
"tower-service",
"tracing",
@@ -1886,9 +1886,9 @@ dependencies = [
[[package]]
name = "jwt-simple"
version = "0.12.12"
version = "0.12.13"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "731011e9647a71ff4f8474176ff6ce6e0d2de87a0173f15613af3a84c3e3401a"
checksum = "6ad8761f175784dfbb83709f322fc4daf6b27afd5bf375492f2876f9e925ef5a"
dependencies = [
"anyhow",
"binstring",
@@ -1906,7 +1906,7 @@ dependencies = [
"serde",
"serde_json",
"superboring",
"thiserror 2.0.12",
"thiserror 2.0.17",
"zeroize",
]
@@ -1932,9 +1932,9 @@ checksum = "d4345964bb142484797b161f473a503a434de77149dd8c7427788c6e13379388"
[[package]]
name = "lazy-regex"
version = "3.4.1"
version = "3.4.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "60c7310b93682b36b98fa7ea4de998d3463ccbebd94d935d6b48ba5b6ffa7126"
checksum = "191898e17ddee19e60bccb3945aa02339e81edd4a8c50e21fd4d48cdecda7b29"
dependencies = [
"lazy-regex-proc_macros",
"once_cell",
@@ -1943,9 +1943,9 @@ dependencies = [
[[package]]
name = "lazy-regex-proc_macros"
version = "3.4.1"
version = "3.4.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4ba01db5ef81e17eb10a5e0f2109d1b3a3e29bac3070fdbd7d156bf7dbd206a1"
checksum = "c35dc8b0da83d1a9507e12122c80dea71a9c7c613014347392483a83ea593e04"
dependencies = [
"proc-macro2",
"quote",
@@ -1964,9 +1964,9 @@ dependencies = [
[[package]]
name = "libc"
version = "0.2.171"
version = "0.2.177"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "c19937216e9d3aa9956d9bb8dfc0b0c8beb6058fc4f7a4dc4d850edf86a237d6"
checksum = "2874a2af47a2325c2001a6e6fad9b16a53b802102b528163885171cf92b15976"
[[package]]
name = "libm"
@@ -2957,6 +2957,16 @@ dependencies = [
"windows-sys 0.52.0",
]
[[package]]
name = "socket2"
version = "0.6.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "17129e116933cf371d018bb80ae557e889637989d8638274fb25622827b03881"
dependencies = [
"libc",
"windows-sys 0.60.2",
]
[[package]]
name = "spin"
version = "0.9.8"
@@ -3080,11 +3090,11 @@ dependencies = [
[[package]]
name = "thiserror"
version = "2.0.12"
version = "2.0.17"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708"
checksum = "f63587ca0f12b72a0600bcba1d40081f830876000bb46dd2337a3051618f4fc8"
dependencies = [
"thiserror-impl 2.0.12",
"thiserror-impl 2.0.17",
]
[[package]]
@@ -3100,9 +3110,9 @@ dependencies = [
[[package]]
name = "thiserror-impl"
version = "2.0.12"
version = "2.0.17"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d"
checksum = "3ff15c8ecd7de3849db632e14d18d2571fa09dfc5ed93479bc4485c7a517c913"
dependencies = [
"proc-macro2",
"quote",
@@ -3163,7 +3173,7 @@ dependencies = [
"parking_lot",
"pin-project-lite",
"signal-hook-registry",
"socket2",
"socket2 0.5.8",
"windows-sys 0.52.0",
]
@@ -3611,7 +3621,7 @@ checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
dependencies = [
"windows-result",
"windows-strings",
"windows-targets 0.53.0",
"windows-targets 0.53.4",
]
[[package]]
@@ -3650,6 +3660,15 @@ dependencies = [
"windows-targets 0.52.6",
]
[[package]]
name = "windows-sys"
version = "0.60.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
dependencies = [
"windows-targets 0.53.4",
]
[[package]]
name = "windows-targets"
version = "0.52.6"
@@ -3668,10 +3687,11 @@ dependencies = [
[[package]]
name = "windows-targets"
version = "0.53.0"
version = "0.53.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
checksum = "2d42b7b7f66d2a06854650af09cfdf8713e427a439c97ad65a6375318033ac4b"
dependencies = [
"windows-link 0.2.0",
"windows_aarch64_gnullvm 0.53.0",
"windows_aarch64_msvc 0.53.0",
"windows_i686_gnu 0.53.0",
@@ -3892,9 +3912,9 @@ dependencies = [
[[package]]
name = "zeroize"
version = "1.8.1"
version = "1.8.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
[[package]]
name = "zerovec"

View File

@@ -8,10 +8,10 @@ edition = "2024"
[dependencies]
actix = "0.13.5"
actix-identity = "0.9.0"
actix-web = "4.11.0"
actix-web = "4.12.0"
actix-session = { version = "0.11.0", features = ["cookie-session"] }
actix-remote-ip = "0.1.0"
clap = { version = "4.5.50", features = ["derive", "env"] }
clap = { version = "4.5.53", features = ["derive", "env"] }
include_dir = "0.7.4"
log = "0.4.28"
serde_json = "1.0.145"
@@ -25,10 +25,10 @@ askama = "0.14.0"
urlencoding = "2.1.3"
rand = "0.9.2"
base64 = "0.22.1"
jwt-simple = { version = "0.12.12", default-features = false, features = ["pure-rust"] }
jwt-simple = { version = "0.12.13", default-features = false, features = ["pure-rust"] }
digest = "0.10.7"
sha2 = "0.10.9"
lazy-regex = "3.4.1"
lazy-regex = "3.4.2"
totp_rfc6238 = "0.6.1"
base32 = "0.5.1"
qrcode-generator = "5.0.0"

View File

@@ -20,4 +20,8 @@ body {
.form-control::placeholder {
color: #555;
}
.table-break-works td {
word-break: break-all;
}

View File

@@ -35,6 +35,7 @@ services:
network_mode: host
environment:
- STORAGE_PATH=/storage
- DISABLE_LOCAL_LOGIN=true
#- RUST_LOG=debug
volumes:
- ../:/app

View File

@@ -0,0 +1 @@
users.json

View File

@@ -0,0 +1,11 @@
- id: testclient1
name: Client 1
description: client1
secret: secretone
redirect_uri: http://127.0.0.1:8011/
granted_to_all_users: true
- id: testclient2
name: Client 2
description: client2
secret: secrettwo
redirect_uri: http://127.0.0.1:8012/

View File

@@ -0,0 +1,7 @@
- id: upstream
name: Upstream
logo: openid
client_id: foo
client_secret: bar
configuration_url: http://127.0.0.1:9001/dex/.well-known/openid-configuration
allow_auto_account_creation: true

View File

@@ -49,6 +49,7 @@ impl Default for BaseLoginPage {
struct LoginTemplate {
p: BaseLoginPage,
login: String,
show_local_login: bool,
providers: Vec<Provider>,
}
@@ -156,8 +157,10 @@ pub async fn login_route(
"Given login could not be processed, because it has an invalid format!".to_string(),
);
}
// Try to authenticate user
else if let Some(req) = &req {
// Try to authenticate user (local login)
else if let Some(req) = &req
&& !AppConfig::get().disable_local_login
{
login.clone_from(&req.login);
let response: LoginResult = users
.send(users_actor::LocalLoginRequest {
@@ -224,6 +227,10 @@ pub async fn login_route(
}
}
}
// If there is only a single provider, trigger auto-login
else if AppConfig::get().disable_local_login && providers.len() == 1 {
return redirect_user(&providers.cloned()[0].login_url(&query.redirect));
}
HttpResponse::Ok().content_type("text/html").body(
LoginTemplate {
@@ -235,6 +242,7 @@ pub async fn login_route(
..Default::default()
},
login,
show_local_login: !AppConfig::get().disable_local_login,
providers: providers.cloned(),
}
.render()

View File

@@ -18,6 +18,7 @@ pub(crate) struct BaseSettingsPage<'a> {
pub success_message: Option<String>,
pub page_title: &'static str,
pub app_name: &'static str,
pub local_login_enabled: bool,
pub user: &'a User,
pub version: &'static str,
pub ip_location_api: Option<&'static str>,
@@ -37,6 +38,7 @@ impl<'a> BaseSettingsPage<'a> {
app_name: APP_NAME,
user,
version: env!("CARGO_PKG_VERSION"),
local_login_enabled: !AppConfig::get().disable_local_login,
ip_location_api: AppConfig::get().ip_location_service.as_deref(),
}
}

View File

@@ -62,6 +62,11 @@ pub struct AppConfig {
/// Login background image
#[arg(long, env, default_value = "/assets/img/forest.jpg")]
pub login_background_image: String,
/// Disable local login. If this option is set without any upstream providers set, it will be impossible
/// to authenticate
#[arg(long, env)]
pub disable_local_login: bool,
}
lazy_static::lazy_static! {

View File

@@ -5,20 +5,15 @@ use serde::{Deserialize, Serialize};
use crate::data::user::{User, UserID};
use crate::utils::time::time;
#[derive(Debug, Serialize, Deserialize, Eq, PartialEq)]
#[derive(Debug, Serialize, Deserialize, Eq, PartialEq, Default)]
pub enum SessionStatus {
#[default]
Invalid,
SignedIn,
NeedNewPassword,
Need2FA,
}
impl Default for SessionStatus {
fn default() -> Self {
Self::Invalid
}
}
#[derive(Debug, Serialize, Deserialize, Default)]
pub struct SessionIdentityData {
pub id: Option<UserID>,

View File

@@ -18,6 +18,8 @@
</style>
<!-- Local login -->
{% if show_local_login %}
<form action="/login?redirect={{ p.redirect_uri.get_encoded() }}" method="post">
<div>
<div class="form-floating">
@@ -36,6 +38,7 @@
<button class="w-100 btn btn-lg btn-primary" type="submit">Sign in</button>
</form>
{% endif %}
<!-- Upstream providers -->
{% if !providers.is_empty() %}

View File

@@ -24,7 +24,7 @@
Account details
</a>
</li>
{% if p.user.allow_local_login %}
{% if p.user.allow_local_login && p.local_login_enabled %}
<li>
<a href="/settings/change_password" class="nav-link link-dark">
Change password

View File

@@ -1,7 +1,7 @@
{% extends "base_settings_page.html" %}
{% block content %}
<table class="table table-hover" style="max-width: 800px;" aria-describedby="Clients list">
<table class="table table-hover table-break-works" style="max-width: 800px;" aria-describedby="Clients list">
<thead>
<tr>
<th scope="col">ID</th>