studio/people
Archived
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,034 Commits 1 Branch 0 Tags
8b89a1112d458fb1f525c9fcb98c4024b8689497
Commit Graph

1034 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin BEY
0a241f0e03 🔧(sentry) add Celery beat task integration 
This should provide "cron" monitoring in Sentry.
 2025-04-28 15:51:34 +02:00
Laurent Bossavit
b389927653 📝(security) add a basic security disclosure policy 
This is copied from Docs with only minor changes.
 2025-04-24 14:05:22 +02:00
Marie PUPO JEAMMET
056a4bd7ac 🛂(dimail) simplify interop with dimail 
In this commit, we stop creating /users and /allows in dimail
for our dbs to be in sync. People with stop impersonating users
in dimail and will create mailboxes using its own credentials.
 2025-04-23 16:24:53 +02:00
Quentin BEY
6721328b2d ⬆️(django-lasuite) bump version to v0.0.7 
This fixes the userinfo OIDC endpoint format autodetection.
 2025-04-23 10:23:09 +02:00
Quentin BEY
ab5d8c74d8 ✅(e2e) fix keycloak user email address 
Django >= 5.2 add a verification on email address
 2025-04-22 17:59:55 +02:00
Quentin BEY
4c14f967b6 ✅(backend) fix test after dependencies update 
The queries needs update to manage save/release in database, this should
be improved, but considered ok for now.
 2025-04-22 17:59:55 +02:00
renovate[bot]
b42cd483c6 ⬆️(dependencies) update python dependencies 2025-04-22 17:59:55 +02:00
Marie PUPO JEAMMET
3735b699cc 🔧(renovate) add dimail-api to renovate scope 
Dimail-api is currently outside of renovate' scope, which resulted in us having
to check and update dimail's image manually or, if failing to, discovering new
behaviors by chance or by errors in production. This should fix it.
 2025-04-22 14:31:50 +02:00
Quentin BEY
0220875c70 ⬆️(django-lasuite) bump to version 0.0.5 
Bump the lib to the latest version:
- update the post_get_or_create_user method signature
- allow silent login for OIDC (will require frontend implementation)
 2025-04-10 15:00:03 +02:00
Sabrina Demagny
7a1fc6b626 ✨(mailbox) remove secondary email as required field 
The secondary email address is no longer required for all creation
processes and we should not force the user to provide and store an
insecure email address.
 2025-04-10 12:59:16 +02:00
Sabrina Demagny
99d7b23dc9 🐛(core) fix AccountService api_key field declaration 
Override save is a better way to auto generate api_key if
it is not set.
Default with random secret generate a new migration each time we
run `make makemigrations`.
 2025-04-10 10:24:08 +02:00
renovate[bot]
1a52cd63bf ⬆️(dependencies) update js dependencies 2025-04-09 12:12:01 +02:00
Sabrina Demagny
8691f1846d 📝(scripts) enhance release scripts instructions 
Add information about settings and helm chart to configure
Add more details about translations PR autogenerated
 2025-04-08 22:00:41 +02:00
Sabrina Demagny
edbf77c525 💄(domain) enhance admin action label to import mailboxes 
So far, "Synchronise from dimail" only import missing mailboxes
from dimail, so this label needs to be more explicit.
 2025-04-08 21:39:16 +02:00
Quentin BEY
140d099fce ⬆️(backend) bump django-lasuite to v0.0.2 
This will allow the introspected token to not contain the `iss` claim.
 2025-04-07 13:55:19 +02:00
sdemagny
133688324b 🌐(i18n) update translated strings 
Update translated files with new translations
 2025-04-04 17:46:21 +02:00
Sabrina Demagny
a7b3cd42bc 🔖(minor) release version 1.15.0 
Update all version files and changelog for minor release.
 2025-04-04 17:46:21 +02:00
Jacques ROUSSEL
ceebf8f7aa 🐛(ci) remove path to trigger relaese helm chart 
We had an issue with the automatic helm chart releaser so we decide to
trigger the job on every merge.
 2025-04-04 17:18:20 +02:00
Sabrina Demagny
8ef2cc9a37 🧱(helm) add la-suite ingress path 
The route was added but not declared in the ingress.
 2025-04-04 15:02:20 +02:00
Quentin BEY
e2d362bc77 ➕(backend) add django-lasuite dependency 
Use the OIDC backends from the new library.
 2025-04-04 09:57:12 +02:00
Sabrina Demagny
594d3af0d0 ✨(plugins) add endpoint to list SIRET of active organizations 
Allow access to AccountService with right scope to list
SIRET of active communes
 2025-04-04 08:47:24 +02:00
Sabrina Demagny
855e20d407 ✨(core) create AccountServiceAuthentication backend 
Backend authentication with API Key to AccountService
 2025-04-04 08:47:24 +02:00
Sabrina Demagny
f60bfc2676 ✨(core) create AccountService model 
Create new model to allow access of some API
endpoints with API Key authentification.
Scopes will allow to define permission access on those
endpoints.
 2025-04-04 08:47:24 +02:00
Marie PUPO JEAMMET
b4de7fda92 🔒️(users) restrict listable users to same organization 
This is a quick fix to a security issue. Previously, any user could
list all users. Now /users/ endpoint only lists users from same
organization.
 2025-04-03 16:18:25 +02:00
Quentin BEY
a009f3ccb7 🐛(plugin) allow simple application name 
This allows to use the application name, instead of the full path to the
application configuration in the INSTALLED_PLUGINS setting.
 2025-04-03 15:17:53 +02:00
Marie PUPO JEAMMET
2f1843e0e8 🐛(stats) rename stat for clarity 
Public statistics on domains was modified to count only enabled
domains. Modify stat name to reflect change.
 2025-04-03 14:58:07 +02:00
Quentin BEY
3a044e6b02 📝(helm) update missing documentation 
Seems like the readme was not updated after adding the celery beat
worker configuration.
 2025-04-03 10:33:47 +02:00
Quentin BEY
7c569a3ca3 🧱(helm) disable createsuperuser job by setting 
This provides the way to disable the admin user creation at each
deployment. In production we don't want to persist a generic admin user:
it should be created once, at first deployment then replaced by
nominative accounts.
 2025-04-03 10:33:23 +02:00
Quentin BEY
e23d236614 ✅(pytest) fail on tests external calls 
The backend tests must not try to call the real world.
 2025-04-03 09:39:15 +02:00
renovate[bot]
61c3b6ac6b ⬆️(dependencies) update django to v5.1.8 [SECURITY] 2025-04-03 07:47:33 +02:00
Quentin BEY
1eb9dffa48 🐛(contacts) add missing select_related 
The new DRF version (3.16.0) adds a check on unique together and needs
more fields to be loaded. To prevent an extra query, we select the owner
value in the DB query.
 2025-04-01 10:58:49 +02:00
renovate[bot]
d0854851a2 ⬆️(dependencies) update python dependencies 2025-04-01 10:58:49 +02:00
renovate[bot]
6eae92d9e5 ⬆️(dependencies) update js dependencies 2025-03-31 09:39:23 +02:00
Jacques ROUSSEL
b02146e4eb 🐛(ci) use github action for argocd webhook notification 
In order to refactor this notification between alls projetcs, we
chooseto use a custom github action
 2025-03-28 16:32:10 +01:00
Quentin BEY
dd43483ce6 🔒️(passwords) add validators for production 
This enabled various password validators to enforce password complexity.
 2025-03-28 15:43:45 +01:00
Sabrina Demagny
838d1267b2 ✨(domains) allow to re-run check on failed domain 
In use we realize that it is also necessary to be able
to re-run dimail check on domain failed
 2025-03-28 15:03:15 +01:00
Quentin BEY
fbe3aa54d0 🐛(ci) use sha256 to sign argocd webhook call 
The argocd webhook call needs now to use sha256 digest now to sign

Copy from docs project commit by @lunika
 2025-03-28 11:09:04 +01:00
Sabrina Demagny
e4e9a121a4 ✨(organization) add is_active field 
Add flag to indicate whether the organization is active.
Prepare organizations provisioning. The organization
will be created with this flag set to False and will
become active when the first user is associated with it.
 2025-03-27 18:34:09 +01:00
Sabrina Demagny
3173e096d9 🐛(dimail) enhance sentry log for dimail error 
Remove duplicate sentry log and fix failure if response content
has an unexpected format
 2025-03-27 18:25:24 +01:00
Marie PUPO JEAMMET
4420bab073 🐛(demo) fix missing support_email field 
"support_email" field was missing for all domains created in demo.
this lead to "make demo" and "setup_dimail_db" commands to fail.
 2025-03-27 18:06:36 +01:00
Marie PUPO JEAMMET
8cbedeb76e ♻️(dimail) refacto setup_dimail_db to call dimail client 
Management command "setup_dimail_db" called dimail directly, thus
creating duplicated code. It now calls "create_domain" and "create_allow"
methods from DimailAPIClient (create_user is left unchanged to create
special users such as dimail admin or people)
 2025-03-27 18:06:36 +01:00
Quentin BEY
28fdee868d ♻️(plugins) rewrite plugin system as django app 
This allow more flexibility around the installed plugins, this will
allow to add models in plugins if needed.
 2025-03-26 19:56:23 +01:00
Quentin BEY
4ced342062 ♻️(core) move app ready code to functions 
For readability, we move the code block from the `ready` method to a
dedicated function.

This will allow to add more things to do in the `ready` with more focus.
 2025-03-26 19:56:23 +01:00
Laurent Bossavit
2502ff0c99 🔧(dns) make target zone for communes domains configurable 
Add a configuration setting tied to an env var, so we can have
a separate zone for staging/preprod.
 2025-03-25 19:48:43 +01:00
Laurent Bossavit
dc33493739 Revert "➖(dimail) remove ci-time dependency on dimail to improve CI times" 
This reverts commit 81030004e9.
 2025-03-25 18:36:17 +01:00
Laurent Bossavit
81030004e9 ➖(dimail) remove ci-time dependency on dimail to improve CI times 
The Gitlab instance hosting dimail images has become unstable
resulting in excessive CI failures, and we don't actually depend
on dimail for CI.
 2025-03-25 18:10:34 +01:00
Sabrina Demagny
339831f090 🌐(i18n) update translations 
Run i18n-download-and-compile to download translations from
Crowdin and compile them
 2025-03-25 13:45:24 +01:00
Sabrina Demagny
5178e460c4 ✨(domains) notify support when domain status changes 
During the scheduled task to check domains,
send an email notification to domain support if a
status has changed.
 2025-03-25 08:44:35 +01:00
Sabrina Demagny
feb5d7154b ✨(domains) define domain check interval as a settings 
For now, to avoid overloading dimail, we have defined a
time interval between each check request to dimail.
This interval should be configurable for testing and
different environments.
 2025-03-25 08:44:35 +01:00
renovate[bot]
7dac39034a ⬆️(dependencies) update js dependencies 2025-03-24 10:55:35 +01:00