[PR #1757] [MERGED] Enforce org user compliance #1210

New Issue

2025-11-13T12:20:34-06:00

GiteaMirror commented

2025-11-13 12:20:34 -06:00

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/1757
Author: @oschwartz10612
Created: 10/27/2025
Status: ✅ Merged
Merged: 10/27/2025
Merged by: @oschwartz10612

Base: dev ← Head: user-compliance

📝 Commits (10+)

ddcf77a add basic org policy check in middleware
629f172 2fa policy check working
39d6b93 enforce max session length
1e70e42 add password expiry enforcement
460df46 update translation and send password reset email
9ce81b3 add confirm dialog to update security settings
8973726 add org policy check to verify session
1227b3c use alert instead of badge for unlock status
4431673 enforce resource session length
cbf9c53 redirect to org login via query param

📊 Changes

34 files changed (+2262 additions, -132 deletions)

View changed files

📝 cli/commands/setAdminCredentials.ts (+2 -1)
📝 messages/en-US.json (+67 -0)
📝 server/auth/sessions/app.ts (+2 -1)
📝 server/auth/sessions/resource.ts (+2 -1)
📝 server/db/pg/schema/schema.ts (+9 -3)
📝 server/db/queries/verifySessionQueries.ts (+8 -2)
📝 server/db/sqlite/schema/schema.ts (+9 -3)
➕ server/lib/checkOrgAccessPolicy.ts (+41 -0)
📝 server/license/license.ts (+4 -0)
📝 server/middlewares/verifyOrgAccess.ts (+26 -6)
➕ server/private/lib/checkOrgAccessPolicy.ts (+201 -0)
📝 server/private/routers/loginPage/loadLoginPage.ts (+3 -4)
📝 server/routers/auth/changePassword.ts (+60 -5)
📝 server/routers/auth/resetPassword.ts (+2 -5)
📝 server/routers/auth/setServerAdmin.ts (+2 -1)
📝 server/routers/auth/signup.ts (+3 -5)
📝 server/routers/badger/verifySession.ts (+42 -7)
📝 server/routers/external.ts (+6 -8)
➕ server/routers/org/checkOrgUserAccess.ts (+136 -0)
📝 server/routers/org/index.ts (+1 -0)

...and 14 more files

📄 Description

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

Enforce compliance at the org level with security policies. Included is:

Password rotation
MFA Enabled
Session Length

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/1757 **Author:** [@oschwartz10612](https://github.com/oschwartz10612) **Created:** 10/27/2025 **Status:** ✅ Merged **Merged:** 10/27/2025 **Merged by:** [@oschwartz10612](https://github.com/oschwartz10612) **Base:** `dev` ← **Head:** `user-compliance` --- ### 📝 Commits (10+) - [`ddcf77a`](https://github.com/fosrl/pangolin/commit/ddcf77a62d8a723c0a9122e9e3d84bec9c9d7b91) add basic org policy check in middleware - [`629f172`](https://github.com/fosrl/pangolin/commit/629f17294ab871562c864ab7a20e920eb8f3251b) 2fa policy check working - [`39d6b93`](https://github.com/fosrl/pangolin/commit/39d6b93d4231382d44ba645485079ef47283ed4e) enforce max session length - [`1e70e42`](https://github.com/fosrl/pangolin/commit/1e70e4289bf0b4e8d832714bc96adf470e95e1a4) add password expiry enforcement - [`460df46`](https://github.com/fosrl/pangolin/commit/460df46abcbdbd581267e0d4d7a728932ce394aa) update translation and send password reset email - [`9ce81b3`](https://github.com/fosrl/pangolin/commit/9ce81b34c91b9f4ce4c65ac9db6bb01be0ffe30f) add confirm dialog to update security settings - [`8973726`](https://github.com/fosrl/pangolin/commit/8973726f6331ef26feb02277d424e1c16b832df9) add org policy check to verify session - [`1227b3c`](https://github.com/fosrl/pangolin/commit/1227b3c11a4f74082fc6d78c1b40de7d0f4568ca) use alert instead of badge for unlock status - [`4431673`](https://github.com/fosrl/pangolin/commit/44316731c06e2e222ea008cef70659dab098f51e) enforce resource session length - [`cbf9c53`](https://github.com/fosrl/pangolin/commit/cbf9c5361e55defa38e7608be34e6851f0666c4d) redirect to org login via query param ### 📊 Changes **34 files changed** (+2262 additions, -132 deletions) <details> <summary>View changed files</summary> 📝 `cli/commands/setAdminCredentials.ts` (+2 -1) 📝 `messages/en-US.json` (+67 -0) 📝 `server/auth/sessions/app.ts` (+2 -1) 📝 `server/auth/sessions/resource.ts` (+2 -1) 📝 `server/db/pg/schema/schema.ts` (+9 -3) 📝 `server/db/queries/verifySessionQueries.ts` (+8 -2) 📝 `server/db/sqlite/schema/schema.ts` (+9 -3) ➕ `server/lib/checkOrgAccessPolicy.ts` (+41 -0) 📝 `server/license/license.ts` (+4 -0) 📝 `server/middlewares/verifyOrgAccess.ts` (+26 -6) ➕ `server/private/lib/checkOrgAccessPolicy.ts` (+201 -0) 📝 `server/private/routers/loginPage/loadLoginPage.ts` (+3 -4) 📝 `server/routers/auth/changePassword.ts` (+60 -5) 📝 `server/routers/auth/resetPassword.ts` (+2 -5) 📝 `server/routers/auth/setServerAdmin.ts` (+2 -1) 📝 `server/routers/auth/signup.ts` (+3 -5) 📝 `server/routers/badger/verifySession.ts` (+42 -7) 📝 `server/routers/external.ts` (+6 -8) ➕ `server/routers/org/checkOrgUserAccess.ts` (+136 -0) 📝 `server/routers/org/index.ts` (+1 -0) _...and 14 more files_ </details> ### 📄 Description ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description Enforce compliance at the org level with security policies. Included is: * Password rotation * MFA Enabled * Session Length --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2025-11-13 12:20:34 -06:00

GiteaMirror closed this issue