Paul Lettich

This required removing sqlsoup and thus changing the SQL-Resolver to use native SALAlchemy functionality.

Use chunksize for reading all entries with pi-manage rotate_audit

3

Currently the `chunksize` parameter is used only for deleting the audit entries. When specifying a config-file for fine-grained control, all entries in the audit log are read and then filtered....

Upgrade SQLAlchemy to v1.4

1

Currently SQLAlchemy v1.4 doesn't work out of the box, we need to check all the possible implications when switching. - find all ocurences where SQLAlchemy v1.4 does not work -...

When using a configuration file for audit rotation, not all audit entry keys work. i.e. filtering for `success` fails since this is an integer value and can not be used...

With #2810 the content parsing of requests was improved. Unfortunately now if for some reason a content-type header is set to "application/json" but the request does not contain any data...

2-step-enrollment and verify enrollment do not work together

2

In case the 2-step enrollment is activated together with verify enrollment, the `clientwait` `rollout_state` for 2-step will be overwritten with `verify` in the `check_verify_enrollment()` postpolicy: https://github.com/privacyidea/privacyidea/blob/2b075edc8ff0f4f481de4c36411dc648f114ce01/privacyidea/api/lib/postpolicy.py#L806 Thus the user never...

Improve privacyidea-diag script for use with nginx

1

Currently the `privacyidea-diag` script only gathers configuration and log file for the apache webserver. We should enable collecting data for nginx as well (and avoid sputtering out errors due to...

Check if we can remove Support for Python 2.7 and 3.5?

1

Keeping the support for Python 2.7 makes the code more and more unmaintainable. We need to jump through hoops to keep the requirements working, etc. We should check if and...

I think it would be beneficial if we add another test group to *api* and *lib* tests: Some testcases are over-complicated because we try to test several things at once....

During the WebUI login (`login_mode == privacyIDEA`) when the user has an out-of-band token and/or a WebAuthn/U2F token, the login flow differs. In case of an out-of-band token (Push) the...