Javi Martín
eba1c4443c
Merge pull request #6010 from Anamika1608/saml
...
Add support for SAML authentication
2025-07-23 15:02:28 +02:00
Anamika Aggarwal
c9bf7797a0
Add multi-tenancy support for SAML
2025-07-23 14:43:45 +02:00
Anamika Aggarwal
5726bcef07
Update the omniauth-saml to 2.2.4
2025-07-23 14:43:44 +02:00
Anamika Aggarwal
26df59af02
Add SAML Integration doc to setup secrets file
2025-07-23 14:43:44 +02:00
Javi Martín
b3737ae973
Adjust spacing in OAuth documentation
...
We're also fixing a missing "/" in one URL.
2025-07-23 14:43:44 +02:00
taitus
fcbace069e
Only load saml settings when we have related secrets
...
Without this change the IdpMetaParser would give an error
in the Devise initializer when starting the application.
I found it annoying to have to connect to the VPN so
I decided to add this condition.
Reviewer, feel free to consider this commit unnecessary
and ask to revert it.
2025-07-23 14:43:44 +02:00
Senén Rodero Rodríguez
5cb5f19e4f
Use IDPMetadataParse to set up the Idp SAML settings
...
Co-authored-by: Anamika Aggarwal <anamikaagg18@gmail.com >
2025-07-23 14:43:44 +02:00
Javi Martín
6190d808ba
Allow different times between IDP and SP machines
...
We were having an issue because there was a difference of about 11
seconds between the local times of our machines and the time of the IDP
server. Since right now we can't guarantee the time of these machines is
fully synchronized, for now we're adding a margin of error of one
minute.
2025-07-23 14:43:44 +02:00
taitus
a4709f9da0
Add omniauth saml section for sign in and sign up page
...
Co-authored-by: Anamika Aggarwal <anamikaagg18@gmail.com >
2025-07-23 14:43:44 +02:00
Sebastia
9d216084a7
Merge pull request #6044 from consuldemocracy/dependabot/bundler/thor-1.4.0
...
Bump thor from 1.3.2 to 1.4.0
2025-07-22 09:40:36 +02:00
Sebastia
22f2e4b5ca
Merge pull request #6045 from consuldemocracy/dependabot/bundler/nokogiri-1.18.9
...
Bump nokogiri from 1.18.8 to 1.18.9
2025-07-22 09:17:16 +02:00
dependabot[bot]
c3c7ba339e
Bump nokogiri from 1.18.8 to 1.18.9
...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri ) from 1.18.8 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases )
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.18.8...v1.18.9 )
---
updated-dependencies:
- dependency-name: nokogiri
dependency-version: 1.18.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-22 05:30:09 +00:00
dependabot[bot]
18f7e88524
Bump thor from 1.3.2 to 1.4.0
...
Bumps [thor](https://github.com/rails/thor ) from 1.3.2 to 1.4.0.
- [Release notes](https://github.com/rails/thor/releases )
- [Commits](https://github.com/rails/thor/compare/v1.3.2...v1.4.0 )
---
updated-dependencies:
- dependency-name: thor
dependency-version: 1.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-22 01:37:44 +00:00
Sebastia
f4189365ea
Merge pull request #5955 from cyrillefr/ReplaceLinkWithButtonInVariousComponentsPartI
...
Replace link with button in various components part i
2025-07-09 15:26:38 +02:00
cyrillefr
f0e696b972
Replace link with button in letter verification
2025-07-09 13:48:58 +02:00
cyrillefr
c989210e74
Replace link with button in finish signup in registrations
2025-07-09 13:48:58 +02:00
cyrillefr
3eba2d27a4
Replace link with button in Topics show
2025-07-09 13:48:58 +02:00
cyrillefr
50076504b5
Replace link with button in flag unflag actions
2025-07-09 13:48:58 +02:00
cyrillefr
a6046155a2
Replace link with button in relationable scores
2025-07-09 13:48:58 +02:00
cyrillefr
d4b7939d2c
Replace link with button in Proposal created
2025-07-09 13:48:58 +02:00
cyrillefr
ddd34d5cd0
Replace link with button in index notifications
2025-07-09 13:48:58 +02:00
cyrillefr
75ed7ae3ef
Replace link with button in nofications
2025-07-09 13:48:58 +02:00
cyrillefr
267dd931d8
Replace link with button in change user link
2025-07-09 13:48:58 +02:00
cyrillefr
e370a52650
Replace link with buttons in follow button
2025-07-09 13:48:58 +02:00
cyrillefr
ddfd1bedb3
Replace link with button in devise shared links
...
Cf. conversation https://github.com/consuldemocracy/consuldemocracy/pull/5955#discussion_r2158715957
Need to get this i18n_spec.rb to run to delete the key
shared.links.signin_with_provider.
2025-07-09 13:48:47 +02:00
Sebastia
4eaf0c5a41
Merge pull request #6023 from consuldemocracy/dependabot/bundler/puma-6.6.0
...
Bump puma from 5.6.9 to 6.6.0
2025-07-08 11:31:04 +02:00
dependabot[bot]
65a9219d02
Bump puma from 5.6.9 to 6.6.0
...
Bumps [puma](https://github.com/puma/puma ) from 5.6.9 to 6.6.0.
- [Release notes](https://github.com/puma/puma/releases )
- [Changelog](https://github.com/puma/puma/blob/master/History.md )
- [Commits](https://github.com/puma/puma/compare/v5.6.9...v6.6.0 )
---
updated-dependencies:
- dependency-name: puma
dependency-version: 6.6.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-07 09:54:34 +02:00
cyrillefr
31ceb31256
Replace link with button in Dashboard show
2025-07-03 11:14:53 +02:00
Javi Martín
cc3f8d682d
Merge pull request #6014 from consuldemocracy/stringio-3.1.1
...
Upgrade default gems included in Ruby 3.3.8
2025-06-30 15:20:01 +02:00
Javi Martín
11b0b8be44
Bump irb from 1.12.0 to 1.13.1
...
Version 1.13.1 is the default one in Ruby 3.3.8. The reason we're
updating it is that IRB improves in every version of Ruby, making
development a bit easier.
We're also upgrading the reline gem (which IRB depends on) to the
version included in Ruby 3.3.8.
2025-06-30 14:58:02 +02:00
Javi Martín
847e8b28f5
Merge pull request #6018 from consuldemocracy/username_message
...
Avoid side-effects when removing username message
2025-06-27 16:08:48 +02:00
Javi Martín
9c13a331ec
Avoid side-effects when removing username message
...
In the registration form, after changing the username, we were removing
the message about whether a username was available. However, we were
also removing every `<small>` tag on the page. This affected the demo
branch, where we add a `<small>` tag on every page.
So we're now removing a specific element instead.
2025-06-27 15:52:33 +02:00
Sebastia
93396c676b
Merge pull request #5967 from consuldemocracy/update_readme
...
Update readme
2025-06-23 10:13:05 +02:00
Sebastia
b9fca0af98
Merge pull request #6011 from consuldemocracy/update-pr-template
...
Update Pull Request template
2025-06-23 10:12:19 +02:00
Lucía Luzuriaga
4ffae5a6fa
Add links to OS-specific installation guides in README
2025-06-20 16:58:50 +02:00
Lucía Luzuriaga
58b3f09595
Improve Pull Request template
2025-06-20 15:36:05 +02:00
Javi Martín
edf3821cbe
Bump stringio from 3.1.0 to 3.1.1
...
Version 3.1.1 is the one included by default in Ruby 3.3.8. We were
getting an error when running `rspec` without `bundle exec` because we
had an earlier version of that gem in our Gemfile.
2025-06-18 16:47:27 +02:00
Sebastia
1d12974a27
Merge pull request #6006 from consuldemocracy/dependabot/bundler/rubocop-1.75.8
...
Bump rubocop from 1.71.2 to 1.76.1
2025-06-16 17:22:00 +02:00
Sebastia
92cb0453cc
Merge pull request #6007 from consuldemocracy/dependabot/bundler/graphql-2.5.8
...
Bump graphql from 2.4.13 to 2.5.8
2025-06-16 16:50:12 +02:00
taitus
13dbead27d
Add Style/RedundantArrayFlatten Rubocop 1.76 rule
...
This rule was introduced in RuboCop 1.76.0 to avoid flattening arrays
when it has no effect.
2025-06-16 16:22:43 +02:00
taitus
9763799a8c
Add Style/EmptyStringInsideInterpolation Rubocop 1.76 rule
...
This rule was introduced in RuboCop 1.76.0 to avoid unnecessary interpolation
of empty strings.
2025-06-16 16:07:35 +02:00
taitus
b9bffeb321
Add and apply Naming/PredicateMethod RuboCop 1.76 rule
...
This rule was introduced in RuboCop 1.76.0 to ensure methods ending
in '?' return boolean.
This commit applies suggested renames and code cleanup:
- Renames 'is_active?' to 'active_class' since it returns a string
- Renames 'parsed_value' to 'in_favor?' and 'is_request_active' to end with '?'
for boolean semantics
- Skips false positives like 'save', 'auto_labels' or 'save_requiring_finish_signup',
which are not predicate methods.
2025-06-16 16:07:35 +02:00
taitus
d123297ba6
Add and apply Style/ComparableBetween RuboCop rule
...
This rule was introduced in RuboCop 1.74 to prefer using between?
over chained comparison operators.
2025-06-16 16:07:35 +02:00
dependabot[bot]
123c97771a
Bump rubocop from 1.71.2 to 1.75.8
...
Bumps [rubocop](https://github.com/rubocop/rubocop ) from 1.71.2 to 1.75.8.
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.71.2...v1.75.8 )
---
updated-dependencies:
- dependency-name: rubocop
dependency-version: 1.75.8
dependency-type: direct:development
update-type: version-update:semver-minor
...
Notes:
This commit also includes several style and lint fixes required after
updating RuboCop:
- Removed redundant parentheses now detected by improved
'Style/RedundantParentheses' (1.72 and 1.75.3).
- Replaced ternary expressions with logical OR when the ternary was
returning 'true', as flagged by 'Style/RedundantCondition' (1.73).
- Adjusted block variables to resolve new 'Lint/ShadowingOuterLocalVariable'
offenses (1.75), helping avoid future conflicts during upgrades with
'rails app:updates'
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-16 16:07:32 +02:00
Sebastia
6225f01710
Merge pull request #6012 from consuldemocracy/dependabot/npm_and_yarn/brace-expansion-1.1.12
...
Bump brace-expansion from 1.1.11 to 1.1.12
2025-06-16 15:59:16 +02:00
Sebastia
c9b9544880
Merge pull request #6005 from consuldemocracy/dependabot/bundler/pronto-0.11.4
...
Bump pronto from 0.11.3 to 0.11.4
2025-06-16 15:44:57 +02:00
dependabot[bot]
ec81a397be
Bump pronto from 0.11.3 to 0.11.4
...
Bumps [pronto](https://github.com/prontolabs/pronto ) from 0.11.3 to 0.11.4.
- [Release notes](https://github.com/prontolabs/pronto/releases )
- [Changelog](https://github.com/prontolabs/pronto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/prontolabs/pronto/compare/v0.11.3...v0.11.4 )
---
updated-dependencies:
- dependency-name: pronto
dependency-version: 0.11.4
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-16 15:23:11 +02:00
Sebastia
82bc9e016e
Merge pull request #5976 from consuldemocracy/dependabot/bundler/sprockets-4.2.2
...
Bump sprockets from 4.2.1 to 4.2.2
2025-06-16 13:12:42 +02:00
dependabot[bot]
15616758b1
Bump brace-expansion from 1.1.11 to 1.1.12
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.12 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-12 09:11:01 +00:00
Sebastia
ef732732b7
Merge pull request #6004 from consuldemocracy/dependabot/bundler/knapsack_pro-8.3.0
...
Bump knapsack_pro from 7.8.0 to 8.3.0
2025-06-12 11:09:54 +02:00