Releases · linuxmuster/linuxmuster-api

@TomlDev

[linbo] Open /linbo/changes, /linbo/hosts/query, /linbo/grub-configs,
/linbo/dhcp/export/isc-dhcp, /linbo/hosts/scan and
/linbo/dhcp/export/dnsmasq-proxy to school-administrators, scoped to
their own school. startconfs/configs/images/boot-logs/wol stay
global-admin-only until linuxmusterTools.linbo has real per-school
ownership (documented as TODOs in linbo.py).
[devices] Add GET /v1/devices/roles, listing the computer roles
configured in sophomorix.ini's [computerrole.*] sections (until now
hardcoded client-side). Merge pull request #34 from
edulution-io/add-computer-roles-endpoint (@TomlDev).

[security] check_user_header(), check_host_header() and
BasicAuthChecker (GET /v1/auth/) now catch
linuxmusterTools.common.LdapNotProvisionedError and return a 503
"linuxmuster is not provisioned yet" instead of a raw 500 (header.py)
or a misleading 400 "Malformated username" (basic_auth.py) on a fresh
install where Samba hasn't been provisioned yet.
[tests] Add pytests/test_header.py and pytests/test_basic_auth.py,
mocking the LDAP layer directly (no TestClient needed).

[sophomorix] sophomorix-check now runs as a background job like
sophomorix-apply already did, polled via GET
/listmanagement/sophomorix-jobs/status/{pid}. Fixes -jj's JSON output
being written to stderr and never captured by the job's own output
redirection.
[managementgroups] Add/remove members through
linuxmuster-tools' GroupManager (batch, proper errors) instead of
LMNMgmtGroup (per-member loop, silently warning instead of failing on
an unknown user). Scope group/member changes to a given school via
@require_school, like the rest of the API.

@amolani

[passwords] Use LMNUser.set_actual_password() instead of the removed
samba_util.UserManager for setting the account's current password.
Fix authentication broken by the linuxmuster-tools
test_password()/check_password() rename (JWT issuance via Basic Auth
was failing).
[security] Exempt local requests (127.0.0.1/::1, e.g.
linuxmuster-webui7 on the same host) from the rate limiter.
[linbo] Add LINBO Windows driver API endpoints. (@amolani)
[tests] Add/update tests for the password endpoints, policy
constraints, and the rate limiter's loopback exemption.

[passwords] Return a clear 404 instead of silently no-op'ing when a
school-administrator tries to write password constraints before a
global-administrator has created the config file.
Fix school scoping across several endpoints: enforce a required
school parameter for global-administrators, restrict
school-administrators to their own school, fix decorator order and a
dict-assignment bug found along the way. Fixes #22, #23, #24, #26.
List routers explicitly instead of relying on a private FastAPI method.
Fix #25.
[groups] Add custom fields handling to lmngroups.

@hermanntoast

Releases: linuxmuster/linuxmuster-api