Commit Graph

20417 Commits

Author SHA1 Message Date
Javi Martín
eba1c4443c Merge pull request #6010 from Anamika1608/saml
Add support for SAML authentication
2025-07-23 15:02:28 +02:00
Anamika Aggarwal
c9bf7797a0 Add multi-tenancy support for SAML 2025-07-23 14:43:45 +02:00
Anamika Aggarwal
5726bcef07 Update the omniauth-saml to 2.2.4 2025-07-23 14:43:44 +02:00
Anamika Aggarwal
26df59af02 Add SAML Integration doc to setup secrets file 2025-07-23 14:43:44 +02:00
Javi Martín
b3737ae973 Adjust spacing in OAuth documentation
We're also fixing a missing "/" in one URL.
2025-07-23 14:43:44 +02:00
taitus
fcbace069e Only load saml settings when we have related secrets
Without this change the IdpMetaParser would give an error
in the Devise initializer when starting the application.

I found it annoying to have to connect to the VPN so
I decided to add this condition.

Reviewer, feel free to consider this commit unnecessary
and ask to revert it.
2025-07-23 14:43:44 +02:00
Senén Rodero Rodríguez
5cb5f19e4f Use IDPMetadataParse to set up the Idp SAML settings
Co-authored-by: Anamika Aggarwal <anamikaagg18@gmail.com>
2025-07-23 14:43:44 +02:00
Javi Martín
6190d808ba Allow different times between IDP and SP machines
We were having an issue because there was a difference of about 11
seconds between the local times of our machines and the time of the IDP
server. Since right now we can't guarantee the time of these machines is
fully synchronized, for now we're adding a margin of error of one
minute.
2025-07-23 14:43:44 +02:00
taitus
a4709f9da0 Add omniauth saml section for sign in and sign up page
Co-authored-by: Anamika Aggarwal <anamikaagg18@gmail.com>
2025-07-23 14:43:44 +02:00
Sebastia
9d216084a7 Merge pull request #6044 from consuldemocracy/dependabot/bundler/thor-1.4.0
Bump thor from 1.3.2 to 1.4.0
2025-07-22 09:40:36 +02:00
Sebastia
22f2e4b5ca Merge pull request #6045 from consuldemocracy/dependabot/bundler/nokogiri-1.18.9
Bump nokogiri from 1.18.8 to 1.18.9
2025-07-22 09:17:16 +02:00
dependabot[bot]
c3c7ba339e Bump nokogiri from 1.18.8 to 1.18.9
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.8 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.18.8...v1.18.9)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-22 05:30:09 +00:00
dependabot[bot]
18f7e88524 Bump thor from 1.3.2 to 1.4.0
Bumps [thor](https://github.com/rails/thor) from 1.3.2 to 1.4.0.
- [Release notes](https://github.com/rails/thor/releases)
- [Commits](https://github.com/rails/thor/compare/v1.3.2...v1.4.0)

---
updated-dependencies:
- dependency-name: thor
  dependency-version: 1.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-22 01:37:44 +00:00
Sebastia
f4189365ea Merge pull request #5955 from cyrillefr/ReplaceLinkWithButtonInVariousComponentsPartI
Replace link with button in various components part i
2025-07-09 15:26:38 +02:00
cyrillefr
f0e696b972 Replace link with button in letter verification 2025-07-09 13:48:58 +02:00
cyrillefr
c989210e74 Replace link with button in finish signup in registrations 2025-07-09 13:48:58 +02:00
cyrillefr
3eba2d27a4 Replace link with button in Topics show 2025-07-09 13:48:58 +02:00
cyrillefr
50076504b5 Replace link with button in flag unflag actions 2025-07-09 13:48:58 +02:00
cyrillefr
a6046155a2 Replace link with button in relationable scores 2025-07-09 13:48:58 +02:00
cyrillefr
d4b7939d2c Replace link with button in Proposal created 2025-07-09 13:48:58 +02:00
cyrillefr
ddd34d5cd0 Replace link with button in index notifications 2025-07-09 13:48:58 +02:00
cyrillefr
75ed7ae3ef Replace link with button in nofications 2025-07-09 13:48:58 +02:00
cyrillefr
267dd931d8 Replace link with button in change user link 2025-07-09 13:48:58 +02:00
cyrillefr
e370a52650 Replace link with buttons in follow button 2025-07-09 13:48:58 +02:00
cyrillefr
ddfd1bedb3 Replace link with button in devise shared links
Cf. conversation https://github.com/consuldemocracy/consuldemocracy/pull/5955#discussion_r2158715957
Need to get this i18n_spec.rb to run to delete the key
shared.links.signin_with_provider.
2025-07-09 13:48:47 +02:00
Sebastia
4eaf0c5a41 Merge pull request #6023 from consuldemocracy/dependabot/bundler/puma-6.6.0
Bump puma from 5.6.9 to 6.6.0
2025-07-08 11:31:04 +02:00
dependabot[bot]
65a9219d02 Bump puma from 5.6.9 to 6.6.0
Bumps [puma](https://github.com/puma/puma) from 5.6.9 to 6.6.0.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](https://github.com/puma/puma/compare/v5.6.9...v6.6.0)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-07 09:54:34 +02:00
cyrillefr
31ceb31256 Replace link with button in Dashboard show 2025-07-03 11:14:53 +02:00
Javi Martín
cc3f8d682d Merge pull request #6014 from consuldemocracy/stringio-3.1.1
Upgrade default gems included in Ruby 3.3.8
2025-06-30 15:20:01 +02:00
Javi Martín
11b0b8be44 Bump irb from 1.12.0 to 1.13.1
Version 1.13.1 is the default one in Ruby 3.3.8. The reason we're
updating it is that IRB improves in every version of Ruby, making
development a bit easier.

We're also upgrading the reline gem (which IRB depends on) to the
version included in Ruby 3.3.8.
2025-06-30 14:58:02 +02:00
Javi Martín
847e8b28f5 Merge pull request #6018 from consuldemocracy/username_message
Avoid side-effects when removing username message
2025-06-27 16:08:48 +02:00
Javi Martín
9c13a331ec Avoid side-effects when removing username message
In the registration form, after changing the username, we were removing
the message about whether a username was available. However, we were
also removing every `<small>` tag on the page. This affected the demo
branch, where we add a `<small>` tag on every page.

So we're now removing a specific element instead.
2025-06-27 15:52:33 +02:00
Sebastia
93396c676b Merge pull request #5967 from consuldemocracy/update_readme
Update readme
2025-06-23 10:13:05 +02:00
Sebastia
b9fca0af98 Merge pull request #6011 from consuldemocracy/update-pr-template
Update Pull Request template
2025-06-23 10:12:19 +02:00
Lucía Luzuriaga
4ffae5a6fa Add links to OS-specific installation guides in README 2025-06-20 16:58:50 +02:00
Lucía Luzuriaga
58b3f09595 Improve Pull Request template 2025-06-20 15:36:05 +02:00
Javi Martín
edf3821cbe Bump stringio from 3.1.0 to 3.1.1
Version 3.1.1 is the one included by default in Ruby 3.3.8. We were
getting an error when running `rspec` without `bundle  exec` because we
had an earlier version of that gem in our Gemfile.
2025-06-18 16:47:27 +02:00
Sebastia
1d12974a27 Merge pull request #6006 from consuldemocracy/dependabot/bundler/rubocop-1.75.8
Bump rubocop from 1.71.2 to 1.76.1
2025-06-16 17:22:00 +02:00
Sebastia
92cb0453cc Merge pull request #6007 from consuldemocracy/dependabot/bundler/graphql-2.5.8
Bump graphql from 2.4.13 to 2.5.8
2025-06-16 16:50:12 +02:00
taitus
13dbead27d Add Style/RedundantArrayFlatten Rubocop 1.76 rule
This rule was introduced in RuboCop 1.76.0 to avoid flattening arrays
when it has no effect.
2025-06-16 16:22:43 +02:00
taitus
9763799a8c Add Style/EmptyStringInsideInterpolation Rubocop 1.76 rule
This rule was introduced in RuboCop 1.76.0 to avoid unnecessary interpolation
of empty strings.
2025-06-16 16:07:35 +02:00
taitus
b9bffeb321 Add and apply Naming/PredicateMethod RuboCop 1.76 rule
This rule was introduced in RuboCop 1.76.0 to ensure methods ending
in '?' return boolean.

This commit applies suggested renames and code cleanup:
- Renames 'is_active?' to 'active_class' since it returns a string
- Renames 'parsed_value' to 'in_favor?' and 'is_request_active' to end with '?'
  for boolean semantics
- Skips false positives like 'save', 'auto_labels' or 'save_requiring_finish_signup',
  which are not predicate methods.
2025-06-16 16:07:35 +02:00
taitus
d123297ba6 Add and apply Style/ComparableBetween RuboCop rule
This rule was introduced in RuboCop 1.74 to prefer using between?
over chained comparison operators.
2025-06-16 16:07:35 +02:00
dependabot[bot]
123c97771a Bump rubocop from 1.71.2 to 1.75.8
Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.71.2 to 1.75.8.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.71.2...v1.75.8)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.75.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Notes:

This commit also includes several style and lint fixes required after
updating RuboCop:

- Removed redundant parentheses now detected by improved
  'Style/RedundantParentheses' (1.72 and 1.75.3).
- Replaced ternary expressions with logical OR when the ternary was
  returning 'true', as flagged by 'Style/RedundantCondition' (1.73).
- Adjusted block variables to resolve new 'Lint/ShadowingOuterLocalVariable'
  offenses (1.75), helping avoid future conflicts during upgrades with
  'rails app:updates'

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 16:07:32 +02:00
Sebastia
6225f01710 Merge pull request #6012 from consuldemocracy/dependabot/npm_and_yarn/brace-expansion-1.1.12
Bump brace-expansion from 1.1.11 to 1.1.12
2025-06-16 15:59:16 +02:00
Sebastia
c9b9544880 Merge pull request #6005 from consuldemocracy/dependabot/bundler/pronto-0.11.4
Bump pronto from 0.11.3 to 0.11.4
2025-06-16 15:44:57 +02:00
dependabot[bot]
ec81a397be Bump pronto from 0.11.3 to 0.11.4
Bumps [pronto](https://github.com/prontolabs/pronto) from 0.11.3 to 0.11.4.
- [Release notes](https://github.com/prontolabs/pronto/releases)
- [Changelog](https://github.com/prontolabs/pronto/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prontolabs/pronto/compare/v0.11.3...v0.11.4)

---
updated-dependencies:
- dependency-name: pronto
  dependency-version: 0.11.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 15:23:11 +02:00
Sebastia
82bc9e016e Merge pull request #5976 from consuldemocracy/dependabot/bundler/sprockets-4.2.2
Bump sprockets from 4.2.1 to 4.2.2
2025-06-16 13:12:42 +02:00
dependabot[bot]
15616758b1 Bump brace-expansion from 1.1.11 to 1.1.12
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-12 09:11:01 +00:00
Sebastia
ef732732b7 Merge pull request #6004 from consuldemocracy/dependabot/bundler/knapsack_pro-8.3.0
Bump knapsack_pro from 7.8.0 to 8.3.0
2025-06-12 11:09:54 +02:00