Igor Kulikov
7 years ago
44 changed files with 973 additions and 60 deletions
@ -0,0 +1,37 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.exception; |
|||
|
|||
import org.springframework.http.HttpStatus; |
|||
import org.thingsboard.server.common.data.exception.ThingsboardErrorCode; |
|||
|
|||
public class ThingsboardCredentialsExpiredResponse extends ThingsboardErrorResponse { |
|||
|
|||
private final String resetToken; |
|||
|
|||
protected ThingsboardCredentialsExpiredResponse(String message, String resetToken) { |
|||
super(message, ThingsboardErrorCode.CREDENTIALS_EXPIRED, HttpStatus.UNAUTHORIZED); |
|||
this.resetToken = resetToken; |
|||
} |
|||
|
|||
public static ThingsboardCredentialsExpiredResponse of(final String message, final String resetToken) { |
|||
return new ThingsboardCredentialsExpiredResponse(message, resetToken); |
|||
} |
|||
|
|||
public String getResetToken() { |
|||
return resetToken; |
|||
} |
|||
} |
|||
@ -0,0 +1,54 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
|
|||
package org.thingsboard.server.service.security.auth.rest; |
|||
|
|||
import lombok.Data; |
|||
import ua_parser.Client; |
|||
import ua_parser.Parser; |
|||
|
|||
import javax.servlet.http.HttpServletRequest; |
|||
import java.io.IOException; |
|||
import java.io.Serializable; |
|||
|
|||
@Data |
|||
public class RestAuthenticationDetails implements Serializable { |
|||
|
|||
private final String clientAddress; |
|||
private final Client userAgent; |
|||
|
|||
public RestAuthenticationDetails(HttpServletRequest request) { |
|||
this.clientAddress = getClientIP(request); |
|||
this.userAgent = getUserAgent(request); |
|||
} |
|||
|
|||
private static String getClientIP(HttpServletRequest request) { |
|||
String xfHeader = request.getHeader("X-Forwarded-For"); |
|||
if (xfHeader == null) { |
|||
return request.getRemoteAddr(); |
|||
} |
|||
return xfHeader.split(",")[0]; |
|||
} |
|||
|
|||
private static Client getUserAgent(HttpServletRequest request) { |
|||
try { |
|||
Parser uaParser = new Parser(); |
|||
return uaParser.parse(request.getHeader("User-Agent")); |
|||
} catch (IOException e) { |
|||
return new Client(null, null, null); |
|||
} |
|||
} |
|||
} |
|||
@ -0,0 +1,29 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
|
|||
package org.thingsboard.server.service.security.auth.rest; |
|||
|
|||
import org.springframework.security.authentication.AuthenticationDetailsSource; |
|||
|
|||
import javax.servlet.http.HttpServletRequest; |
|||
|
|||
public class RestAuthenticationDetailsSource implements |
|||
AuthenticationDetailsSource<HttpServletRequest, RestAuthenticationDetails> { |
|||
|
|||
public RestAuthenticationDetails buildDetails(HttpServletRequest context) { |
|||
return new RestAuthenticationDetails(context); |
|||
} |
|||
} |
|||
@ -0,0 +1,33 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.service.security.exception; |
|||
|
|||
import org.springframework.security.authentication.CredentialsExpiredException; |
|||
|
|||
public class UserPasswordExpiredException extends CredentialsExpiredException { |
|||
|
|||
private final String resetToken; |
|||
|
|||
public UserPasswordExpiredException(String msg, String resetToken) { |
|||
super(msg); |
|||
this.resetToken = resetToken; |
|||
} |
|||
|
|||
public String getResetToken() { |
|||
return resetToken; |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,25 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.service.security.model; |
|||
|
|||
import lombok.Data; |
|||
|
|||
@Data |
|||
public class SecuritySettings { |
|||
|
|||
private UserPasswordPolicy passwordPolicy; |
|||
|
|||
} |
|||
@ -0,0 +1,31 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.service.security.model; |
|||
|
|||
import lombok.Data; |
|||
|
|||
@Data |
|||
public class UserPasswordPolicy { |
|||
|
|||
private Integer minimumLength; |
|||
private Integer minimumUppercaseLetters; |
|||
private Integer minimumLowercaseLetters; |
|||
private Integer minimumDigits; |
|||
private Integer minimumSpecialCharacters; |
|||
|
|||
private Integer passwordExpirationPeriodDays; |
|||
|
|||
} |
|||
@ -0,0 +1,155 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.service.security.system; |
|||
|
|||
import com.fasterxml.jackson.databind.ObjectMapper; |
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.passay.*; |
|||
import org.springframework.beans.factory.annotation.Autowired; |
|||
import org.springframework.cache.annotation.CacheEvict; |
|||
import org.springframework.cache.annotation.Cacheable; |
|||
import org.springframework.security.authentication.BadCredentialsException; |
|||
import org.springframework.security.authentication.CredentialsExpiredException; |
|||
import org.springframework.security.authentication.DisabledException; |
|||
import org.springframework.security.core.AuthenticationException; |
|||
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
|||
import org.springframework.stereotype.Service; |
|||
import org.thingsboard.server.common.data.AdminSettings; |
|||
import org.thingsboard.server.common.data.id.TenantId; |
|||
import org.thingsboard.server.common.data.security.UserCredentials; |
|||
import org.thingsboard.server.dao.exception.DataValidationException; |
|||
import org.thingsboard.server.dao.settings.AdminSettingsService; |
|||
import org.thingsboard.server.dao.user.UserService; |
|||
import org.thingsboard.server.service.security.exception.UserPasswordExpiredException; |
|||
import org.thingsboard.server.service.security.model.SecuritySettings; |
|||
import org.thingsboard.server.service.security.model.UserPasswordPolicy; |
|||
|
|||
import javax.annotation.Resource; |
|||
import java.util.ArrayList; |
|||
import java.util.List; |
|||
import java.util.concurrent.TimeUnit; |
|||
|
|||
import static org.thingsboard.server.common.data.CacheConstants.DEVICE_CACHE; |
|||
import static org.thingsboard.server.common.data.CacheConstants.SECURITY_SETTINGS_CACHE; |
|||
|
|||
@Service |
|||
@Slf4j |
|||
public class DefaultSystemSecurityService implements SystemSecurityService { |
|||
|
|||
private static final ObjectMapper objectMapper = new ObjectMapper(); |
|||
|
|||
@Autowired |
|||
private AdminSettingsService adminSettingsService; |
|||
|
|||
@Autowired |
|||
private BCryptPasswordEncoder encoder; |
|||
|
|||
@Autowired |
|||
private UserService userService; |
|||
|
|||
@Resource |
|||
private SystemSecurityService self; |
|||
|
|||
@Cacheable(cacheNames = SECURITY_SETTINGS_CACHE, key = "'securitySettings'") |
|||
@Override |
|||
public SecuritySettings getSecuritySettings(TenantId tenantId) { |
|||
SecuritySettings securitySettings = null; |
|||
AdminSettings adminSettings = adminSettingsService.findAdminSettingsByKey(tenantId, "securitySettings"); |
|||
if (adminSettings != null) { |
|||
try { |
|||
securitySettings = objectMapper.treeToValue(adminSettings.getJsonValue(), SecuritySettings.class); |
|||
} catch (Exception e) { |
|||
throw new RuntimeException("Failed to load security settings!", e); |
|||
} |
|||
} else { |
|||
securitySettings = new SecuritySettings(); |
|||
securitySettings.setPasswordPolicy(new UserPasswordPolicy()); |
|||
securitySettings.getPasswordPolicy().setMinimumLength(6); |
|||
} |
|||
return securitySettings; |
|||
} |
|||
|
|||
@CacheEvict(cacheNames = SECURITY_SETTINGS_CACHE, key = "'securitySettings'") |
|||
@Override |
|||
public SecuritySettings saveSecuritySettings(TenantId tenantId, SecuritySettings securitySettings) { |
|||
AdminSettings adminSettings = adminSettingsService.findAdminSettingsByKey(tenantId, "securitySettings"); |
|||
if (adminSettings == null) { |
|||
adminSettings = new AdminSettings(); |
|||
adminSettings.setKey("securitySettings"); |
|||
} |
|||
adminSettings.setJsonValue(objectMapper.valueToTree(securitySettings)); |
|||
AdminSettings savedAdminSettings = adminSettingsService.saveAdminSettings(tenantId, adminSettings); |
|||
try { |
|||
return objectMapper.treeToValue(savedAdminSettings.getJsonValue(), SecuritySettings.class); |
|||
} catch (Exception e) { |
|||
throw new RuntimeException("Failed to load security settings!", e); |
|||
} |
|||
} |
|||
|
|||
@Override |
|||
public void validateUserCredentials(TenantId tenantId, UserCredentials userCredentials, String password) throws AuthenticationException { |
|||
|
|||
if (!encoder.matches(password, userCredentials.getPassword())) { |
|||
throw new BadCredentialsException("Authentication Failed. Username or Password not valid."); |
|||
} |
|||
|
|||
if (!userCredentials.isEnabled()) { |
|||
throw new DisabledException("User is not active"); |
|||
} |
|||
|
|||
SecuritySettings securitySettings = self.getSecuritySettings(tenantId); |
|||
if (isPositiveInteger(securitySettings.getPasswordPolicy().getPasswordExpirationPeriodDays())) { |
|||
if ((userCredentials.getCreatedTime() |
|||
+ TimeUnit.DAYS.toMillis(securitySettings.getPasswordPolicy().getPasswordExpirationPeriodDays())) |
|||
< System.currentTimeMillis()) { |
|||
userCredentials = userService.requestExpiredPasswordReset(tenantId, userCredentials.getId()); |
|||
throw new UserPasswordExpiredException("User password expired!", userCredentials.getResetToken()); |
|||
} |
|||
} |
|||
} |
|||
|
|||
@Override |
|||
public void validatePassword(TenantId tenantId, String password) throws DataValidationException { |
|||
SecuritySettings securitySettings = self.getSecuritySettings(tenantId); |
|||
UserPasswordPolicy passwordPolicy = securitySettings.getPasswordPolicy(); |
|||
|
|||
List<Rule> passwordRules = new ArrayList<>(); |
|||
passwordRules.add(new LengthRule(passwordPolicy.getMinimumLength(), Integer.MAX_VALUE)); |
|||
if (isPositiveInteger(passwordPolicy.getMinimumUppercaseLetters())) { |
|||
passwordRules.add(new CharacterRule(EnglishCharacterData.UpperCase, passwordPolicy.getMinimumUppercaseLetters())); |
|||
} |
|||
if (isPositiveInteger(passwordPolicy.getMinimumLowercaseLetters())) { |
|||
passwordRules.add(new CharacterRule(EnglishCharacterData.LowerCase, passwordPolicy.getMinimumLowercaseLetters())); |
|||
} |
|||
if (isPositiveInteger(passwordPolicy.getMinimumDigits())) { |
|||
passwordRules.add(new CharacterRule(EnglishCharacterData.Digit, passwordPolicy.getMinimumDigits())); |
|||
} |
|||
if (isPositiveInteger(passwordPolicy.getMinimumSpecialCharacters())) { |
|||
passwordRules.add(new CharacterRule(EnglishCharacterData.Special, passwordPolicy.getMinimumSpecialCharacters())); |
|||
} |
|||
PasswordValidator validator = new PasswordValidator(passwordRules); |
|||
PasswordData passwordData = new PasswordData(password); |
|||
RuleResult result = validator.validate(passwordData); |
|||
if (!result.isValid()) { |
|||
String message = String.join("\n", validator.getMessages(result)); |
|||
throw new DataValidationException(message); |
|||
} |
|||
} |
|||
|
|||
private static boolean isPositiveInteger(Integer val) { |
|||
return val != null && val.intValue() > 0; |
|||
} |
|||
} |
|||
@ -0,0 +1,34 @@ |
|||
/** |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
package org.thingsboard.server.service.security.system; |
|||
|
|||
import org.springframework.security.core.AuthenticationException; |
|||
import org.thingsboard.server.common.data.id.TenantId; |
|||
import org.thingsboard.server.common.data.security.UserCredentials; |
|||
import org.thingsboard.server.dao.exception.DataValidationException; |
|||
import org.thingsboard.server.service.security.model.SecuritySettings; |
|||
|
|||
public interface SystemSecurityService { |
|||
|
|||
SecuritySettings getSecuritySettings(TenantId tenantId); |
|||
|
|||
SecuritySettings saveSecuritySettings(TenantId tenantId, SecuritySettings securitySettings); |
|||
|
|||
void validateUserCredentials(TenantId tenantId, UserCredentials userCredentials, String password) throws AuthenticationException; |
|||
|
|||
void validatePassword(TenantId tenantId, String password) throws DataValidationException; |
|||
|
|||
} |
|||
@ -0,0 +1,42 @@ |
|||
/* |
|||
* Copyright © 2016-2019 The Thingsboard Authors |
|||
* |
|||
* Licensed under the Apache License, Version 2.0 (the "License"); |
|||
* you may not use this file except in compliance with the License. |
|||
* You may obtain a copy of the License at |
|||
* |
|||
* http://www.apache.org/licenses/LICENSE-2.0
|
|||
* |
|||
* Unless required by applicable law or agreed to in writing, software |
|||
* distributed under the License is distributed on an "AS IS" BASIS, |
|||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
* See the License for the specific language governing permissions and |
|||
* limitations under the License. |
|||
*/ |
|||
|
|||
import './settings-card.scss'; |
|||
|
|||
/*@ngInject*/ |
|||
export default function SecuritySettingsController(adminService, $mdExpansionPanel) { |
|||
|
|||
var vm = this; |
|||
vm.$mdExpansionPanel = $mdExpansionPanel; |
|||
|
|||
vm.save = save; |
|||
|
|||
loadSettings(); |
|||
|
|||
function loadSettings() { |
|||
adminService.getSecuritySettings().then(function success(securitySettings) { |
|||
vm.securitySettings = securitySettings; |
|||
}); |
|||
} |
|||
|
|||
function save() { |
|||
adminService.saveSecuritySettings(vm.securitySettings).then(function success(securitySettings) { |
|||
vm.securitySettings = securitySettings; |
|||
vm.settingsForm.$setPristine(); |
|||
}); |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,125 @@ |
|||
<!-- |
|||
|
|||
Copyright © 2016-2019 The Thingsboard Authors |
|||
|
|||
Licensed under the Apache License, Version 2.0 (the "License"); |
|||
you may not use this file except in compliance with the License. |
|||
You may obtain a copy of the License at |
|||
|
|||
http://www.apache.org/licenses/LICENSE-2.0 |
|||
|
|||
Unless required by applicable law or agreed to in writing, software |
|||
distributed under the License is distributed on an "AS IS" BASIS, |
|||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|||
See the License for the specific language governing permissions and |
|||
limitations under the License. |
|||
|
|||
--> |
|||
<div tb-help="'securitySettings'" help-container-id="help-container"> |
|||
<md-card class="settings-card"> |
|||
<md-card-title> |
|||
<md-card-title-text layout="row"> |
|||
<span translate class="md-headline">admin.security-settings</span> |
|||
<span flex></span> |
|||
<div id="help-container"></div> |
|||
</md-card-title-text> |
|||
</md-card-title> |
|||
<md-progress-linear md-mode="indeterminate" ng-disabled="!$root.loading" ng-show="$root.loading"></md-progress-linear> |
|||
<span style="min-height: 5px;" flex="" ng-show="!$root.loading"></span> |
|||
<md-card-content> |
|||
<form name="vm.settingsForm" ng-submit="vm.save()" tb-confirm-on-exit confirm-form="vm.settingsForm"> |
|||
<fieldset ng-disabled="$root.loading"> |
|||
<md-expansion-panel-group md-component-id="securitySettingsPanelGroup" auto-expand="true" multiple> |
|||
<md-expansion-panel md-component-id="passwordPolicyPanel" id="passwordPolicyPanel"> |
|||
<md-expansion-panel-collapsed> |
|||
<div class="tb-panel-title" translate>admin.password-policy</div> |
|||
<md-expansion-panel-icon></md-expansion-panel-icon> |
|||
</md-expansion-panel-collapsed> |
|||
<md-expansion-panel-expanded> |
|||
<md-expansion-panel-header ng-click="vm.$mdExpansionPanel('passwordPolicyPanel').collapse()"> |
|||
<div class="tb-panel-title" translate>admin.password-policy</div> |
|||
<md-expansion-panel-icon></md-expansion-panel-icon> |
|||
</md-expansion-panel-header> |
|||
<md-expansion-panel-content> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.minimum-password-length</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="5" |
|||
max="50" |
|||
required |
|||
name="minimumPasswordLength" |
|||
ng-model="vm.securitySettings.passwordPolicy.minimumLength"> |
|||
<div ng-messages="vm.settingsForm.minimumPasswordLength.$error"> |
|||
<div translate ng-message="required">admin.minimum-password-length-required</div> |
|||
<div translate ng-message="min">admin.minimum-password-length-range</div> |
|||
<div translate ng-message="max">admin.minimum-password-length-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.minimum-uppercase-letters</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="0" |
|||
name="minimumUppercaseLetters" |
|||
ng-model="vm.securitySettings.passwordPolicy.minimumUppercaseLetters"> |
|||
<div ng-messages="vm.settingsForm.minimumUppercaseLetters.$error"> |
|||
<div translate ng-message="min">admin.minimum-uppercase-letters-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.minimum-lowercase-letters</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="0" |
|||
name="minimumLowercaseLetters" |
|||
ng-model="vm.securitySettings.passwordPolicy.minimumLowercaseLetters"> |
|||
<div ng-messages="vm.settingsForm.minimumLowercaseLetters.$error"> |
|||
<div translate ng-message="min">admin.minimum-lowercase-letters-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.minimum-digits</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="0" |
|||
name="minimumDigits" |
|||
ng-model="vm.securitySettings.passwordPolicy.minimumDigits"> |
|||
<div ng-messages="vm.settingsForm.minimumDigits.$error"> |
|||
<div translate ng-message="min">admin.minimum-digits-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.minimum-special-characters</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="0" |
|||
name="minimumSpecialCharacters" |
|||
ng-model="vm.securitySettings.passwordPolicy.minimumSpecialCharacters"> |
|||
<div ng-messages="vm.settingsForm.minimumSpecialCharacters.$error"> |
|||
<div translate ng-message="min">admin.minimum-special-characters-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
<md-input-container class="md-block"> |
|||
<label translate>admin.password-expiration-period-days</label> |
|||
<input type="number" |
|||
step="1" |
|||
min="0" |
|||
name="passwordExpirationPeriodDays" |
|||
ng-model="vm.securitySettings.passwordPolicy.passwordExpirationPeriodDays"> |
|||
<div ng-messages="vm.settingsForm.passwordExpirationPeriodDays.$error"> |
|||
<div translate ng-message="min">admin.password-expiration-period-days-range</div> |
|||
</div> |
|||
</md-input-container> |
|||
</md-expansion-panel-content> |
|||
</md-expansion-panel-expanded> |
|||
</md-expansion-panel> |
|||
</md-expansion-panel-group> |
|||
<div layout="row" layout-align="end center" width="100%" layout-wrap> |
|||
<md-button ng-disabled="$root.loading || vm.settingsForm.$invalid || !vm.settingsForm.$dirty" type="submit" class="md-raised md-primary">{{'action.save' | translate}}</md-button> |
|||
</div> |
|||
</fieldset> |
|||
</form> |
|||
</md-card-content> |
|||
</md-card> |
|||
</div> |
|||
Loading…
Reference in new issue