v4.36

Thanks to xet7 !

Fixes #1670

.devcontainer/Dockerfile

@@ -113,7 +113,22 @@ ENV \
     CORS_ALLOW_HEADERS="" \
     CORS_EXPOSE_HEADERS="" \
     DEFAULT_AUTHENTICATION_METHOD="" \
-    PASSWORD_LOGIN_ENABLED=true
+    PASSWORD_LOGIN_ENABLED=true \
+    CAS_ENABLED=false \
+    CAS_BASE_URL="" \
+    CAS_LOGIN_URL="" \
+    CAS_VALIDATE_URL="" \
+    SAML_ENABLED=false \
+    SAML_PROVIDER="" \
+    SAML_ENTRYPOINT="" \
+    SAML_ISSUER="" \
+    SAML_CERT="" \
+    SAML_IDPSLO_REDIRECTURL="" \
+    SAML_PRIVATE_KEYFILE="" \
+    SAML_PUBLIC_CERTFILE="" \
+    SAML_IDENTIFIER_FORMAT="" \
+    SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
+    SAML_ATTRIBUTES=""
 
 # Install OS
 RUN set -o xtrace \

.gitignore

@@ -5,6 +5,7 @@
 tmp/
 node_modules/
 npm-debug.log
+.gitmodules
 .vscode/
 .idea/
 .build/*

.meteor/packages

@@ -97,3 +97,52 @@ easylogic:summernote
 cfs:filesystem
 ostrio:cookies
 tmeasday:check-npm-versions
+steffo:meteor-accounts-saml
+rajit:bootstrap3-datepicker-fi
+rajit:bootstrap3-datepicker-ar
+rajit:bootstrap3-datepicker-bg
+rajit:bootstrap3-datepicker-br
+rajit:bootstrap3-datepicker-ca
+rajit:bootstrap3-datepicker-cs
+rajit:bootstrap3-datepicker-da
+rajit:bootstrap3-datepicker-de
+rajit:bootstrap3-datepicker-el
+rajit:bootstrap3-datepicker-en-gb
+rajit:bootstrap3-datepicker-eo
+rajit:bootstrap3-datepicker-es
+rajit:bootstrap3-datepicker-eu
+rajit:bootstrap3-datepicker-fa
+rajit:bootstrap3-datepicker-fr
+rajit:bootstrap3-datepicker-gl
+rajit:bootstrap3-datepicker-he
+rajit:bootstrap3-datepicker-hi
+rajit:bootstrap3-datepicker-hu
+rajit:bootstrap3-datepicker-hy
+rajit:bootstrap3-datepicker-id
+rajit:bootstrap3-datepicker-it
+rajit:bootstrap3-datepicker-ja
+rajit:bootstrap3-datepicker-ka
+rajit:bootstrap3-datepicker-km
+rajit:bootstrap3-datepicker-ko
+rajit:bootstrap3-datepicker-lv
+rajit:bootstrap3-datepicker-mk
+rajit:bootstrap3-datepicker-mn
+rajit:bootstrap3-datepicker-nb
+rajit:bootstrap3-datepicker-nl
+rajit:bootstrap3-datepicker-oc
+rajit:bootstrap3-datepicker-pl
+rajit:bootstrap3-datepicker-pt-br
+rajit:bootstrap3-datepicker-pt
+rajit:bootstrap3-datepicker-ro
+rajit:bootstrap3-datepicker-ru
+rajit:bootstrap3-datepicker-sl
+rajit:bootstrap3-datepicker-sr
+rajit:bootstrap3-datepicker-sv
+rajit:bootstrap3-datepicker-sw
+rajit:bootstrap3-datepicker-ta
+rajit:bootstrap3-datepicker-th
+rajit:bootstrap3-datepicker-tr
+rajit:bootstrap3-datepicker-uk
+rajit:bootstrap3-datepicker-vi
+rajit:bootstrap3-datepicker-zh-cn
+rajit:bootstrap3-datepicker-zh-tw

.meteor/versions

@@ -109,7 +109,7 @@ mobile-status-bar@1.1.0
 modern-browsers@0.1.5
 modules@0.15.0
 modules-runtime@0.12.0
-momentjs:moment@2.27.0
+momentjs:moment@2.28.0
 mongo@1.10.0
 mongo-decimal@0.1.1
 mongo-dev-server@1.1.0
@@ -143,6 +143,54 @@ promise@0.11.2
 raix:eventemitter@0.1.3
 raix:handlebar-helpers@0.2.5
 rajit:bootstrap3-datepicker@1.7.1_1
+rajit:bootstrap3-datepicker-ar@1.7.1
+rajit:bootstrap3-datepicker-bg@1.7.1
+rajit:bootstrap3-datepicker-br@1.7.1
+rajit:bootstrap3-datepicker-ca@1.7.1
+rajit:bootstrap3-datepicker-cs@1.7.1
+rajit:bootstrap3-datepicker-da@1.7.1
+rajit:bootstrap3-datepicker-de@1.7.1
+rajit:bootstrap3-datepicker-el@1.7.1
+rajit:bootstrap3-datepicker-en-gb@1.7.1
+rajit:bootstrap3-datepicker-eo@1.7.1
+rajit:bootstrap3-datepicker-es@1.7.1
+rajit:bootstrap3-datepicker-eu@1.7.1
+rajit:bootstrap3-datepicker-fa@1.7.1
+rajit:bootstrap3-datepicker-fi@1.7.1
+rajit:bootstrap3-datepicker-fr@1.7.1
+rajit:bootstrap3-datepicker-gl@1.7.1
+rajit:bootstrap3-datepicker-he@1.7.1
+rajit:bootstrap3-datepicker-hi@1.7.1
+rajit:bootstrap3-datepicker-hu@1.7.1
+rajit:bootstrap3-datepicker-hy@1.7.1
+rajit:bootstrap3-datepicker-id@1.7.1
+rajit:bootstrap3-datepicker-it@1.7.1
+rajit:bootstrap3-datepicker-ja@1.7.1
+rajit:bootstrap3-datepicker-ka@1.7.1
+rajit:bootstrap3-datepicker-km@1.7.1
+rajit:bootstrap3-datepicker-ko@1.7.1
+rajit:bootstrap3-datepicker-lv@1.7.1
+rajit:bootstrap3-datepicker-mk@1.7.1
+rajit:bootstrap3-datepicker-mn@1.7.1
+rajit:bootstrap3-datepicker-nb@1.7.1
+rajit:bootstrap3-datepicker-nl@1.7.1
+rajit:bootstrap3-datepicker-oc@1.7.1
+rajit:bootstrap3-datepicker-pl@1.7.1
+rajit:bootstrap3-datepicker-pt@1.7.1
+rajit:bootstrap3-datepicker-pt-br@1.7.1
+rajit:bootstrap3-datepicker-ro@1.7.1
+rajit:bootstrap3-datepicker-ru@1.7.1
+rajit:bootstrap3-datepicker-sl@1.7.1
+rajit:bootstrap3-datepicker-sr@1.7.1
+rajit:bootstrap3-datepicker-sv@1.7.1
+rajit:bootstrap3-datepicker-sw@1.7.1
+rajit:bootstrap3-datepicker-ta@1.7.1
+rajit:bootstrap3-datepicker-th@1.7.1
+rajit:bootstrap3-datepicker-tr@1.7.1
+rajit:bootstrap3-datepicker-uk@1.7.1
+rajit:bootstrap3-datepicker-vi@1.7.1
+rajit:bootstrap3-datepicker-zh-cn@1.7.1
+rajit:bootstrap3-datepicker-zh-tw@1.7.1
 random@1.2.0
 rate-limit@1.0.9
 reactive-dict@1.3.0
@@ -166,10 +214,11 @@ softwarerero:accounts-t9n@1.3.11
 spacebars@1.0.15
 spacebars-compiler@1.1.3
 srp@1.1.0
-standard-minifier-css@1.6.0
+standard-minifier-css@1.6.1
 standard-minifier-js@2.6.0
 staringatlights:fast-render@3.3.0
 staringatlights:inject-data@2.3.0
+steffo:meteor-accounts-saml@0.0.18
 tap:i18n@1.8.2
 templates:tabs@2.3.0
 templating@1.3.2

CHANGELOG.md

@@ -1,3 +1,64 @@
+# v4.36 2020-09-15 Wekan release
+
+This release adds the following new features:
+
+- [Added translations for date selection popups](https://github.com/wekan/wekan/commit/f9b0da65f1de48a2af11aa7afbd767559ba95b79).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v4.35 2020-09-14 Wekan release
+
+This release tries to fix the following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/7173e293ef6b0d3c1fe82b5320340589c72c9326).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v4.34 2020-09-14 Wekan release
+
+This release tries to fix the following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/d2b84c7773f20b34bca8be23078469a8809005a6).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v4.33 2020-09-14 Wekan release
+
+This release adds the following login settings:
+
+- [Added some CAS and SAML settings](https://github.com/wekan/wekan/commit/214c86cc22f4c721a79ec0a4a4f3bbd90d673f93).
+  Not tested. Please test and send pull requests if it does not work.
+  See https://github.com/wekan/wekan/wiki/SAML and https://github.com/wekan/wekan/wiki/CAS .
+  Thanks to xet7.
+
+and updates some dependencies:
+
+- [Update dependencies](https://github.com/wekan/wekan/commit/cca041e21a66087ca4008a22cb0f5b4176801101).
+  Thanks to developers of dependencies.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v4.32 2020-09-13 Wekan release
+
+This release tried to fix the following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v4.31 2020-09-13 Wekan release
+
+This release tried to fix the following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/fe62e12ab46c41ea30ba79795b0dc39b3451d4a2).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
 # v4.30 2020-09-13 Wekan release
 
 This release adds the following new features and improvements:
@@ -23,7 +84,7 @@ and adds the following updates:
 
 Thanks to above GitHub users for their contributions and translators for their translations.
 
-# v4.29 2020-09-11
+# v4.29 2020-09-11 Wekan release
 
 This release adds the following new features:
 

Dockerfile

@@ -115,7 +115,22 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
     CORS_ALLOW_HEADERS="" \
     CORS_EXPOSE_HEADERS="" \
     DEFAULT_AUTHENTICATION_METHOD="" \
-    PASSWORD_LOGIN_ENABLED=true
+    PASSWORD_LOGIN_ENABLED=true \
+    CAS_ENABLED=false \
+    CAS_BASE_URL="" \
+    CAS_LOGIN_URL="" \
+    CAS_VALIDATE_URL="" \
+    SAML_ENABLED=false \
+    SAML_PROVIDER="" \
+    SAML_ENTRYPOINT="" \
+    SAML_ISSUER="" \
+    SAML_CERT="" \
+    SAML_IDPSLO_REDIRECTURL="" \
+    SAML_PRIVATE_KEYFILE="" \
+    SAML_PUBLIC_CERTFILE="" \
+    SAML_IDENTIFIER_FORMAT="" \
+    SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
+    SAML_ATTRIBUTES=""
 
 # Copy the app to the image
 COPY ${SRC_PATH} /home/wekan/app

Stackerfile.yml

@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v4.30.0"
+appVersion: "v4.36.0"
 files:
   userUploads:
     - README.md

client/components/main/layouts.js

@@ -169,6 +169,19 @@ async function authentication(event, templateInstance) {
         });
       });
 
+    case 'saml':
+      return new Promise(resolve => {
+        const provider = Meteor.settings.public.SAML_PROVIDER;
+        Meteor.loginWithSaml(
+          {
+            provider,
+          },
+          function() {
+            resolve(FlowRouter.go('/'));
+          },
+        );
+      });
+
     case 'cas':
       return new Promise(resolve => {
         Meteor.loginWithCas(match, password, function() {

docker-compose.yml

@@ -601,7 +601,24 @@ services:
       # Hide password login form
       # - PASSWORD_LOGIN_ENABLED=true
       #-------------------------------------------------------------------
-    depends_on:
+      #- CAS_ENABLED=true
+      #- CAS_BASE_URL=https://cas.example.com/cas
+      #- CAS_LOGIN_URL=https://cas.example.com/login
+      #- CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #- SAML_ENABLED=true
+      #- SAML_PROVIDER=
+      #- SAML_ENTRYPOINT=
+      #- SAML_ISSUER=
+      #- SAML_CERT=
+      #- SAML_IDPSLO_REDIRECTURL=
+      #- SAML_PRIVATE_KEYFILE=
+      #- SAML_PUBLIC_CERTFILE=
+      #- SAML_IDENTIFIER_FORMAT=
+      #- SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #- SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
+        depends_on:
       - wekandb
 
 #---------------------------------------------------------------------------------

i18n/eo.i18n.json

@@ -93,7 +93,7 @@
   "admin-announcement": "Announcement",
   "admin-announcement-active": "Active System-Wide Announcement",
   "admin-announcement-title": "Announcement from Administrator",
-  "all-boards": "All boards",
+  "all-boards": "Ĉiuj tabuloj",
   "and-n-other-card": "And __count__ other card",
   "and-n-other-card_plural": "And __count__ other cards",
   "apply": "Apliki",

i18n/fa.i18n.json

@@ -4,10 +4,10 @@
   "act-addAttachment": "ضمیمه __attachment__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
   "act-deleteAttachment": "ضمیمه __attachment__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
   "act-addSubtask": "زیر وظیفه __subtask__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
-  "act-addLabel": "برچسب __label__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
-  "act-addedLabel": "برچسب __label__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
-  "act-removeLabel": "برچسب __label__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
-  "act-removedLabel": "برچسب __label__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
+  "act-addLabel": "لیبل __label__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
+  "act-addedLabel": "لیبل __label__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
+  "act-removeLabel": "لیبل __label__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
+  "act-removedLabel": "لیبل __label__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
   "act-addChecklist": "سیاهه __checklist__ را به کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
   "act-addChecklistItem": "چک لیست __checklistItem__ را به سیاهه __checklist__ در کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ اضافه کرد",
   "act-removeChecklist": "سیاهه __checklist__ را از کارت __card__ در لیست __list__ در مسیر شناور __swimlane__ در برد __board__ حذف کرد",
@@ -78,11 +78,11 @@
   "add-attachment": "افزودن ضمیمه",
   "add-board": "افزودن برد",
   "add-card": "افزودن کارت",
-  "add-swimlane": "اضافه کردن مسیر شناور",
+  "add-swimlane": "افزودن مسیر شنا",
   "add-subtask": "افزودن زیر وظیفه",
   "add-checklist": "افزودن چک لیست",
-  "add-checklist-item": "افزودن مورد به سیاهه",
-  "add-cover": "جلد کردن",
+  "add-checklist-item": "افزودن مورد به چک‌لیست",
+  "add-cover": "افزودن کاور",
   "add-label": "افزودن لیبل",
   "add-list": "افزودن لیست",
   "add-members": "افزودن اعضا",
@@ -91,7 +91,7 @@
   "admin": "مدیر",
   "admin-desc": "امکان دیدن و ویرایش کارت‌ها، پاک کردن کاربران و تغییر تنظیمات برای برد.",
   "admin-announcement": "اعلان",
-  "admin-announcement-active": "اعلان سراسری فعال",
+  "admin-announcement-active": "فعال کردن اعلان‌های سمت سیستم",
   "admin-announcement-title": "اعلان از سوی مدیر",
   "all-boards": "تمام بردها",
   "and-n-other-card": "و __count__ کارت دیگر",
@@ -105,15 +105,15 @@
   "archive-list": "انتقال لیست به آرشیو",
   "archive-swimlane": "انتقال مسیر به آرشیو",
   "archive-selection": "انتقال انتخاب شده ها به آرشیو",
-  "archiveBoardPopup-title": "انتقال برد به آرشیو؟",
-  "archived-items": "بایگانی",
-  "archived-boards": "برد های داخل آرشیو",
+  "archiveBoardPopup-title": "آیا برد به آرشیو منتقل شود؟",
+  "archived-items": "آرشیو",
+  "archived-boards": "بردهای داخل آرشیو",
   "restore-board": "بازیابی برد",
-  "no-archived-boards": "هیچ بردی داخل آرشیو نیست",
-  "archives": "بایگانی",
-  "template": "Template",
-  "templates": "Templates",
-  "assign-member": "تعیین عضو",
+  "no-archived-boards": "هیچ بردی داخل آرشیو نیست.",
+  "archives": "آرشیو",
+  "template": "قالب",
+  "templates": "قالب‌ها",
+  "assign-member": "انتصاب عضو",
   "attached": "ضمیمه شده",
   "attachment": "ضمیمه",
   "attachment-delete-pop": "حذف پیوست دایمی و بی بازگشت خواهد بود.",
@@ -130,37 +130,37 @@
   "boardChangeColorPopup-title": "تغییر پس زمینه برد",
   "boardChangeTitlePopup-title": "تغییر نام برد",
   "boardChangeVisibilityPopup-title": "تغییر وضعیت نمایش",
-  "boardChangeWatchPopup-title": "تغییر دیده بانی",
-  "boardMenuPopup-title": "Board Settings",
+  "boardChangeWatchPopup-title": "تغییر دیده‌بانی",
+  "boardMenuPopup-title": "تنظیمات برد",
   "boardChangeViewPopup-title": "نمایش برد",
   "boards": "بردها",
   "board-view": "نمایش برد",
   "board-view-cal": "تقویم",
-  "board-view-swimlanes": "Swimlanes",
-  "board-view-collapse": "بستن",
-  "board-view-lists": "فهرست‌ها",
-  "bucket-example": "برای مثال چیزی شبیه \"لیست سبدها\"",
+  "board-view-swimlanes": "مسیرها",
+  "board-view-collapse": "جمع کردن",
+  "board-view-lists": "لیست‌ها",
+  "bucket-example": "برای مثال چیزی شبیه \"لیست سطل\"",
   "cancel": "انصراف",
-  "card-archived": "این کارت به آرشیو انتقال داده شد",
-  "board-archived": "این برد به آرشیو انتقال یافت",
+  "card-archived": "این کارت به آرشیو انتقال داده‌شده‌است.",
+  "board-archived": "این برد به آرشیو انتقال داده‌شده‌است.",
   "card-comments-title": "این کارت دارای %s نظر است.",
   "card-delete-notice": "حذف دائمی. تمامی موارد مرتبط با این کارت از بین خواهند رفت.",
   "card-delete-pop": "همه اقدامات از این پردازه  حذف خواهد شد و امکان بازگرداندن کارت وجود نخواهد داشت.",
   "card-delete-suggest-archive": "شما می توانید کارت را به بایگانی منتقل کنید تا آن را از هیئت مدیره حذف کنید و فعالیت را حفظ کنید.",
-  "card-due": "تا",
-  "card-due-on": "تا",
+  "card-due": "موعد",
+  "card-due-on": "موعد تا",
   "card-spent": "زمان صرف شده",
   "card-edit-attachments": "ویرایش ضمائم",
-  "card-edit-custom-fields": "ویرایش فیلدهای شخصی",
-  "card-edit-labels": "ویرایش برچسب",
+  "card-edit-custom-fields": "ویرایش فیلدهای سفارشی",
+  "card-edit-labels": "ویرایش لیبل‌ها",
   "card-edit-members": "ویرایش اعضا",
-  "card-labels-title": "تغییر برچسب کارت",
-  "card-members-title": "افزودن یا حذف اعضا از کارت.",
+  "card-labels-title": "لیبل‌های کارت را تغییر بده.",
+  "card-members-title": "اعضا ی برد را از/به کارت حذف/اضافه کنید.",
   "card-start": "شروع",
   "card-start-on": "شروع از",
   "cardAttachmentsPopup-title": "ضمیمه از",
   "cardCustomField-datePopup-title": "تغییر تاریخ",
-  "cardCustomFieldsPopup-title": "ویرایش فیلدهای شخصی",
+  "cardCustomFieldsPopup-title": "ویرایش فیلدهای سفارشی",
   "cardStartVotingPopup-title": "شروع به رای",
   "positiveVoteMembersPopup-title": "طرفداران",
   "negativeVoteMembersPopup-title": "مخالفان",
@@ -175,7 +175,7 @@
   "vote-delete-pop": "حذف کردن به صورت دائمی هست و قابل برگشت نیست.",
   "cardDeletePopup-title": "آیا می خواهید کارت را حذف کنید؟",
   "cardDetailsActionsPopup-title": "اعمال کارت",
-  "cardLabelsPopup-title": "برچسب ها",
+  "cardLabelsPopup-title": "لیبل ها",
   "cardMembersPopup-title": "اعضا",
   "cardMorePopup-title": "بیشتر",
   "cardTemplatePopup-title": "Create template",
@@ -250,7 +250,7 @@
   "create": "ایجاد",
   "createBoardPopup-title": "ایجاد برد",
   "chooseBoardSourcePopup-title": "بارگذاری برد",
-  "createLabelPopup-title": "ایجاد برچسب",
+  "createLabelPopup-title": "ایجاد لیبل",
   "createCustomField": "ایجاد فیلد",
   "createCustomFieldPopup-title": "ایجاد فیلد",
   "current": "جاری",
@@ -272,9 +272,9 @@
   "default-avatar": "تصویر پیش فرض",
   "delete": "حذف",
   "deleteCustomFieldPopup-title": "آیا فیلدشخصی پاک شود؟",
-  "deleteLabelPopup-title": "آیا می خواهید برچسب را حذف کنید؟",
+  "deleteLabelPopup-title": "آیا می خواهید لیبل را حذف کنید؟",
   "description": "توضیحات",
-  "disambiguateMultiLabelPopup-title": "عمل ابهام زدایی از برچسب",
+  "disambiguateMultiLabelPopup-title": "عمل ابهام زدایی از لیبل",
   "disambiguateMultiMemberPopup-title": "عمل ابهام زدایی از کاربر",
   "discard": "لغو",
   "done": "انجام شده",
@@ -288,7 +288,7 @@
   "editCardDueDatePopup-title": "تغییر تاریخ پایان",
   "editCustomFieldPopup-title": "ویرایش فیلد",
   "editCardSpentTimePopup-title": "تغییر زمان صرف شده",
-  "editLabelPopup-title": "تغیر برچسب",
+  "editLabelPopup-title": "تغیر لیبل",
   "editNotificationPopup-title": "اصلاح اعلان",
   "editProfilePopup-title": "ویرایش پروفایل",
   "email": "پست الکترونیک",
@@ -337,7 +337,7 @@
   "filter-cards": "فیلتر کارت‌ها یا لیست‌ها",
   "list-filter-label": "فیلتر لیست بر اساس عنوان",
   "filter-clear": "حذف صافی ـ فیلتر ـ",
-  "filter-no-label": "بدون برچسب",
+  "filter-no-label": "بدون لیبل",
   "filter-no-member": "بدون عضو",
   "filter-no-assignee": "الحاق نشده",
   "filter-no-custom-fields": "هیچ فیلدشخصی ای وجود ندارد",
@@ -382,10 +382,10 @@
   "joined": "متصل",
   "just-invited": "هم اکنون، شما به این برد دعوت شده‌اید.",
   "keyboard-shortcuts": "میانبر کلیدها",
-  "label-create": "ایجاد برچسب",
-  "label-default": "%s برچسب(پیش فرض)",
-  "label-delete-pop": "این اقدام، برچسب را از همه کارت‌ها پاک خواهد کرد و تاریخچه آن را نیز از بین می‌برد.",
-  "labels": "برچسب ها",
+  "label-create": "ایجاد لیبل",
+  "label-default": "%s لیبل(پیش فرض)",
+  "label-delete-pop": "این اقدام، لیبل را از همه کارت‌ها پاک خواهد کرد و تاریخچه آن را نیز از بین می‌برد.",
+  "labels": "لیبل ها",
   "language": "زبان",
   "last-admin-desc": "شما نمی توانید نقش ـroleـ را تغییر دهید چراکه باید حداقل یک مدیری وجود داشته باشد.",
   "leave-board": "خروج از برد",
@@ -452,7 +452,7 @@
   "quick-access-description": "جهت افزودن یک برد به اینجا، آن را ستاره دار نمایید.",
   "remove-cover": "حذف کاور",
   "remove-from-board": "حذف از برد",
-  "remove-label": "حذف برچسب",
+  "remove-label": "حذف لیبل",
   "listDeletePopup-title": "حذف فهرست؟",
   "remove-member": "حذف عضو",
   "remove-member-from-card": "حذف از کارت",
@@ -465,7 +465,7 @@
   "search": "جستجو",
   "rules": "قوانین",
   "search-cards": "جستجو در عناوین، توضیحات و فیلدهای سفارشیِ کارت‌ها/لیست‌ها در این برد",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "کلمه مورد جستجو را وارد و اینتر را بزنید",
   "select-color": "انتخاب رنگ",
   "set-wip-limit-value": "تعیین بیشینه تعداد وظایف در این فهرست",
   "setWipLimitPopup-title": "Set WIP Limit",
@@ -600,7 +600,7 @@
   "assigned-by": "محول شده توسط",
   "requested-by": "تقاضا شده توسط",
   "board-delete-notice": "حذف دائمی است شما تمام لیست ها، کارت ها و اقدامات مرتبط با این برد را از دست خواهید داد.",
-  "delete-board-confirm-popup": "تمام لیست ها، کارت ها، برچسب ها و فعالیت ها حذف خواهند شد و شما نمی توانید محتوای برد را بازیابی کنید. هیچ واکنشی وجود ندارد",
+  "delete-board-confirm-popup": "تمام لیست ها، کارت ها، لیبل ها و فعالیت ها حذف خواهند شد و شما نمی توانید محتوای برد را بازیابی کنید. هیچ واکنشی وجود ندارد",
   "boardDeletePopup-title": "حذف برد؟",
   "delete-board": "حذف برد",
   "default-subtasks-board": "ریزکار برای __board__ برد",
@@ -677,7 +677,7 @@
   "r-card": "کارت",
   "r-add": "افزودن",
   "r-remove": "حذف",
-  "r-label": "برچسب",
+  "r-label": "لیبل",
   "r-member": "عضو",
   "r-remove-all": "حذف همه کاربران از کارت",
   "r-set-color": "انتخاب رنگ به",
@@ -704,8 +704,8 @@
   "r-d-send-email-message": "پیام",
   "r-d-archive": "انتقال کارت به آرشیو",
   "r-d-unarchive": "بازگردانی کارت از آرشیو",
-  "r-d-add-label": "افزودن برچسب",
-  "r-d-remove-label": "حذف برچسب",
+  "r-d-add-label": "افزودن لیبل",
+  "r-d-remove-label": "حذف لیبل",
   "r-create-card": "ساخت کارت جدید",
   "r-in-list": "در لیست",
   "r-in-swimlane": "در مسیرِ شناور",
@@ -778,7 +778,7 @@
   "act-atUserComment": "به شما در  [__board__] __list__/__card__ اشاره‌شده‌است.",
   "delete-user-confirm-popup": "از حذف این اکانت مطمئن هستید؟ این عملیات برگشت‌ناپذیر است.",
   "accounts-allowUserDelete": "به کاربران اجازه دهید خودشان اکانتشان را حذف کنند",
-  "hide-minicard-label-text": "مخفی کردن اسم برچسب مینی کارت",
+  "hide-minicard-label-text": "مخفی کردن اسم لیبل مینی کارت",
   "show-desktop-drag-handles": "نمایش دستگیره‌های درگ‌کردن دسکتاپ",
   "assignee": "الحاق شده",
   "cardAssigneesPopup-title": "الحاق شده",

i18n/fr.i18n.json

@@ -465,7 +465,7 @@
   "search": "Chercher",
   "rules": "Règles",
   "search-cards": "Rechercher parmi les titres, descriptions et champs personnalisés des cartes/listes de ce tableau",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Écrivez le texte que vous recherchez et appuyez sur Entrée",
   "select-color": "Sélectionner une couleur",
   "set-wip-limit-value": "Définit une limite maximale au nombre de cartes de cette liste",
   "setWipLimitPopup-title": "Définir la limite WIP",

i18n/he.i18n.json

@@ -465,7 +465,7 @@
   "search": "חיפוש",
   "rules": "כללים",
   "search-cards": "חיפוש מבין כותרות של כרטיסים/רשימות, תיאורים ושדות בהתאמה אישית בלוח זה",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "נא להקליד טקסט לחיפוש וללחוץ על Enter",
   "select-color": "בחירת צבע",
   "set-wip-limit-value": "הגדרת מגבלה למספר המרבי של משימות ברשימה זו",
   "setWipLimitPopup-title": "הגדרת מגבלת „בעבודה”",

i18n/it.i18n.json

@@ -465,7 +465,7 @@
   "search": "Cerca",
   "rules": "Regole",
   "search-cards": "Ricerca per titolo, descrizione scheda/lista e campi personalizzati su questa bacheca",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Scrivere il testo da ricercare e premere Invio",
   "select-color": "Seleziona Colore",
   "set-wip-limit-value": "Seleziona un limite per il massimo numero di attività in questa lista",
   "setWipLimitPopup-title": "Imposta limite di work in progress",

i18n/nl.i18n.json

@@ -465,7 +465,7 @@
   "search": "Zoek",
   "rules": "Regels",
   "search-cards": "Zoek in kaart/lijst, titels, beschrijvingen en maatwerkvelden op dit bord",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Schijf je zoektekst en toets Enter",
   "select-color": "Selecteer kleur",
   "set-wip-limit-value": "Zet een limiet voor het maximaal aantal taken in deze lijst",
   "setWipLimitPopup-title": "Zet een WIP limiet",

i18n/pl.i18n.json

@@ -2,7 +2,7 @@
   "accept": "Akceptuj",
   "act-activity-notify": "Powiadomienia aktywności",
   "act-addAttachment": "dodał załącznik __attachment__ do karty __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
-  "act-deleteAttachment": "usunął załącznik __attachment__ na karcie __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
+  "act-deleteAttachment": "usunął załącznik __attachment__ z karty __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
   "act-addSubtask": "dodał podzadanie __subtask__ na karcie __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
   "act-addLabel": "dodał etykietę __label__ do karty __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
   "act-addedLabel": "dodał etykietę __label__ do karty __card__ na liście __list__ na ścieżce __swimlane__ na tablicy __board__",
@@ -465,7 +465,7 @@
   "search": "Wyszukaj",
   "rules": "Reguły",
   "search-cards": "Szukaj w tytułach kart/list oraz opisach i niestandardowych polach na tej tablicy",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Wpisz tekst do wyszukania i wciśnij Enter",
   "select-color": "Wybierz kolor",
   "set-wip-limit-value": "Ustaw maksymalny limit kart na tej liście",
   "setWipLimitPopup-title": "Ustaw limit kart na liście",
@@ -638,8 +638,8 @@
   "r-delete-rule": "Usuń regułę",
   "r-new-rule-name": "Nowa nazwa reguły",
   "r-no-rules": "Brak regułę",
-  "r-trigger": "Trigger",
-  "r-action": "Action",
+  "r-trigger": "Zdarzenie",
+  "r-action": "Reakcja",
   "r-when-a-card": "Gdy karta",
   "r-is": "jest",
   "r-is-moved": "jest przenoszona",

i18n/pt-BR.i18n.json

@@ -465,7 +465,7 @@
   "search": "Buscar",
   "rules": "Regras",
   "search-cards": "Buscar por título, descrição e campos customizados de cartão/lista neste quadro",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Digite o que você procura e pressione Enter",
   "select-color": "Selecionar Cor",
   "set-wip-limit-value": "Defina um limite máximo para o número de tarefas nesta lista",
   "setWipLimitPopup-title": "Definir Limite WIP",

i18n/ru.i18n.json

@@ -465,7 +465,7 @@
   "search": "Поиск",
   "rules": "Правила",
   "search-cards": "Поиск в названиях карточек/списков, описаниях и пользовательских полях на этой доске",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "Введите текст, который ищете, и нажмите Ввод.",
   "select-color": "Выбрать цвет",
   "set-wip-limit-value": "Устанавливает ограничение на максимальное количество задач в этом списке",
   "setWipLimitPopup-title": "Задать лимит на кол-во задач",

i18n/zh-TW.i18n.json

@@ -256,8 +256,8 @@
   "current": "目前",
   "custom-field-delete-pop": "此操作將會從所有卡片中移除自訂欄位以及銷毀歷史紀錄，並且無法撤消。",
   "custom-field-checkbox": "複選框",
-  "custom-field-currency": "Currency",
-  "custom-field-currency-option": "Currency Code",
+  "custom-field-currency": "貨幣",
+  "custom-field-currency-option": "貨幣代碼",
   "custom-field-date": "日期",
   "custom-field-dropdown": "下拉式選單",
   "custom-field-dropdown-none": "(無)",
@@ -465,7 +465,7 @@
   "search": "搜尋",
   "rules": "規則",
   "search-cards": "搜尋看板內的卡片/清單標題、描述、自訂欄位",
-  "search-example": "Write text you search and press Enter",
+  "search-example": "輸入欲查尋的文件並按下 Enter 鍵",
   "select-color": "選擇顏色",
   "set-wip-limit-value": "設定此清單中的最大任務數",
   "setWipLimitPopup-title": "設定 WIP 限制",
@@ -638,8 +638,8 @@
   "r-delete-rule": "刪除規則",
   "r-new-rule-name": "新規則標題",
   "r-no-rules": "暫無規則",
-  "r-trigger": "Trigger",
-  "r-action": "Action",
+  "r-trigger": "觸發",
+  "r-action": "操作",
   "r-when-a-card": "當一張卡片",
   "r-is": "是",
   "r-is-moved": "已經移動",
@@ -795,21 +795,21 @@
   "allow-rename": "允許更名",
   "allowRenamePopup-title": "允許更名",
   "start-day-of-week": "一周的第一天",
-  "monday": "周一",
+  "monday": "週一",
   "tuesday": "週二",
   "wednesday": "週三",
   "thursday": "週四",
   "friday": "週五",
   "saturday": "週六",
   "sunday": "週日",
-  "status": "Status",
+  "status": "狀態",
   "swimlane": "Swimlane",
-  "owner": "Owner",
-  "last-modified-at": "Last modified at",
-  "last-activity": "Last activity",
-  "voting": "Voting",
+  "owner": "擁有者",
+  "last-modified-at": "最後修改時間",
+  "last-activity": "最後活動",
+  "voting": "投票",
   "archived": "Archived",
   "delete-linked-card-before-this-card": "You can not delete this card before first deleting linked card that has",
   "delete-linked-cards-before-this-list": "You can not delete this list before first deleting linked cards that are pointing to cards in this list",
-  "hide-checked-items": "Hide checked items"
+  "hide-checked-items": "隱藏已勾選項目"
 }

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "wekan",
-  "version": "v4.30.0",
+  "version": "v4.36.0",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "wekan",
-  "version": "v4.30.0",
+  "version": "v4.36.0",
   "description": "Open-Source kanban",
   "private": true,
   "scripts": {

public/api/wekan.html

@@ -1524,7 +1524,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
 	  	<ul class="toc-list-h1">
         
           <li>
-            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v4.30">Wekan REST API v4.30</a>
+            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v4.36">Wekan REST API v4.36</a>
             
           </li>
         
@@ -2027,7 +2027,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
     <div class="page-wrapper">
       <div class="dark-box"></div>
       <div class="content">
-        <h1 id="wekan-rest-api">Wekan REST API v4.30</h1>
+        <h1 id="wekan-rest-api">Wekan REST API v4.36</h1>
 <blockquote>
 <p>Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.</p>
 </blockquote>

public/api/wekan.yml

@@ -1,7 +1,7 @@
 swagger: '2.0'
 info:
   title: Wekan REST API
-  version: v4.30
+  version: v4.36
   description: |
     The REST API allows you to control and extend Wekan with ease.
 

releases/virtualbox/start-wekan.sh

@@ -361,6 +361,24 @@
       #---------------------------------------------------------------------
       # PASSWORD_LOGIN_ENABLED : Enable or not the password login form.
       #export PASSWORD_LOGIN_ENABLED=true
+      #---------------------------------------------------------------------
+      #export CAS_ENABLED=true
+      #export CAS_BASE_URL=https://cas.example.com/cas
+      #export CAS_LOGIN_URL=https://cas.example.com/login
+      #export CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #export SAML_ENABLED=true
+      #export SAML_PROVIDER=
+      #export SAML_ENTRYPOINT=
+      #export SAML_ISSUER=
+      #export SAML_CERT=
+      #export SAML_IDPSLO_REDIRECTURL=
+      #export SAML_PRIVATE_KEYFILE=
+      #export SAML_PUBLIC_CERTFILE=
+      #export SAML_IDENTIFIER_FORMAT=
+      #export SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #export SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
 
       node main.js & >> ~/repos/wekan.log
       cd ~/repos

sandstorm-pkgdef.capnp

@@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = (
     appTitle = (defaultText = "Wekan"),
     # The name of the app as it is displayed to the user.
 
-    appVersion = 430,
+    appVersion = 436,
     # Increment this for every release.
 
-    appMarketingVersion = (defaultText = "4.30.0~2020-09-13"),
+    appMarketingVersion = (defaultText = "4.36.0~2020-09-15"),
     # Human-readable presentation of the app version.
 
     minUpgradableAppVersion = 0,

server/authentication.js

@@ -63,7 +63,10 @@ Meteor.startup(() => {
   };
 
   if (Meteor.isServer) {
-    if (process.env.OAUTH2_CLIENT_ID !== '') {
+    if (
+      process.env.OAUTH2_ENABLED === 'true' ||
+      process.env.OAUTH2_ENABLED === true
+    ) {
       ServiceConfiguration.configurations.upsert(
         // eslint-disable-line no-undef
         { service: 'oidc' },
@@ -85,5 +88,72 @@ Meteor.startup(() => {
         },
       );
     }
+  } else if (
+    process.env.CAS_ENABLED === 'true' ||
+    process.env.CAS_ENABLED === true
+  ) {
+    ServiceConfiguration.configurations.upsert(
+      // eslint-disable-line no-undef
+      { service: 'cas' },
+      {
+        $set: {
+          baseUrl: process.env.CAS_BASE_URL,
+          loginUrl: process.env.CAS_LOGIN_URL,
+          serviceParam: 'service',
+          popupWidth: 810,
+          popupHeight: 610,
+          popup: true,
+          autoClose: true,
+          validateUrl: process.env.CASE_VALIDATE_URL,
+          casVersion: 3.0,
+          attributes: {
+            debug: process.env.DEBUG,
+          },
+        },
+      },
+    );
+  } else if (
+    process.env.SAML_ENABLED === 'true' ||
+    process.env.SAML_ENABLED === true
+  ) {
+    ServiceConfiguration.configurations.upsert(
+      // eslint-disable-line no-undef
+      { service: 'saml' },
+      {
+        $set: {
+          provider: process.env.SAML_PROVIDER,
+          entryPoint: process.env.SAML_ENTRYPOINT,
+          issuer: process.env.SAML_ISSUER,
+          cert: process.env.SAML_CERT,
+          idpSLORedirectURL: process.env.SAML_IDPSLO_REDIRECTURL,
+          privateKeyFile: process.env.SAML_PRIVATE_KEYFILE,
+          publicCertFile: process.env.SAML_PUBLIC_CERTFILE,
+          identifierFormat: process.env.SAML_IDENTIFIER_FORMAT,
+          localProfileMatchAttribute:
+            process.env.SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE,
+          attributesSAML: process.env.SAML_ATTRIBUTES || [
+            'sn',
+            'givenName',
+            'mail',
+          ],
+
+          /*
+          settings = {"saml":[{
+            "provider":"openam",
+            "entryPoint":"https://openam.idp.io/openam/SSORedirect/metaAlias/zimt/idp",
+            "issuer": "https://sp.zimt.io/", //replace with url of your app
+            "cert":"MIICizCCAfQCCQCY8tKaMc0 LOTS OF FUNNY CHARS ==",
+            "idpSLORedirectURL": "http://openam.idp.io/openam/IDPSloRedirect/metaAlias/zimt/idp",
+             "privateKeyFile": "certs/mykey.pem",  // path is relative to $METEOR-PROJECT/private
+             "publicCertFile": "certs/mycert.pem",  // eg $METEOR-PROJECT/private/certs/mycert.pem
+             "dynamicProfile": true // set to true if we want to create a user in Meteor.users dynamically if SAML assertion is valid
+             "identifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", // Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
+             "localProfileMatchAttribute": "telephoneNumber" // CAUTION: this will be mapped to profile.<localProfileMatchAttribute> attribute in Mongo if identifierFormat (see above) differs from urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress,
+             "attributesSAML": [telephoneNumber, sn, givenName, mail], // attrs from SAML attr statement, which will be used for local Meteor profile creation. Currently no real attribute mapping. If required use mapping on IdP side.
+          }]}
+          */
+        },
+      },
+    );
   }
 });

server/saml.js

@@ -0,0 +1,5 @@
+Meteor.startup(() => {
+  if (process.env.SAML_PROVIDER !== '') {
+    Meteor.settings.public.SAML_PROVIDER = process.env.SAML_PROVIDER;
+  }
+});

snap-src/bin/config

@@ -3,7 +3,7 @@
 # All supported keys are defined here together with descriptions and default values
 
 # list of supported keys
-keys="DEBUG MONGO_URL MONGODB_BIND_UNIX_SOCKET MONGO_URL MONGODB_BIND_IP MONGODB_PORT MAIL_URL MAIL_FROM ROOT_URL PORT DISABLE_MONGODB CADDY_ENABLED CADDY_BIND_PORT WITH_API RICHER_CARD_COMMENT_EDITOR CARD_OPENED_WEBHOOK_ENABLED ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW  MAX_IMAGE_PIXEL IMAGE_COMPRESS_RATIO BIGEVENTS_PATTERN NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE NOTIFY_DUE_DAYS_BEFORE_AND_AFTER NOTIFY_DUE_AT_HOUR_OF_DAY EMAIL_NOTIFICATION_TIMEOUT CORS CORS_ALLOW_HEADERS CORS_EXPOSE_HEADERS MATOMO_ADDRESS MATOMO_SITE_ID MATOMO_DO_NOT_TRACK MATOMO_WITH_USERNAME BROWSER_POLICY_ENABLED TRUSTED_URL WEBHOOKS_ATTRIBUTES OAUTH2_ENABLED OAUTH2_LOGIN_STYLE OAUTH2_CLIENT_ID OAUTH2_SECRET OAUTH2_SERVER_URL OAUTH2_AUTH_ENDPOINT OAUTH2_USERINFO_ENDPOINT OAUTH2_TOKEN_ENDPOINT OAUTH2_ID_MAP OAUTH2_USERNAME_MAP OAUTH2_FULLNAME_MAP OAUTH2_ID_TOKEN_WHITELIST_FIELDS OAUTH2_EMAIL_MAP OAUTH2_REQUEST_PERMISSIONS OAUTH2_ADFS_ENABLED LDAP_ENABLE LDAP_PORT LDAP_HOST LDAP_BASEDN LDAP_LOGIN_FALLBACK LDAP_RECONNECT LDAP_TIMEOUT LDAP_IDLE_TIMEOUT LDAP_CONNECT_TIMEOUT LDAP_AUTHENTIFICATION LDAP_AUTHENTIFICATION_USERDN LDAP_AUTHENTIFICATION_PASSWORD LDAP_LOG_ENABLED LDAP_BACKGROUND_SYNC LDAP_BACKGROUND_SYNC_INTERVAL LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS LDAP_ENCRYPTION LDAP_CA_CERT LDAP_REJECT_UNAUTHORIZED LDAP_USER_AUTHENTICATION LDAP_USER_AUTHENTICATION_FIELD LDAP_USER_SEARCH_FILTER LDAP_USER_SEARCH_SCOPE LDAP_USER_SEARCH_FIELD LDAP_SEARCH_PAGE_SIZE LDAP_SEARCH_SIZE_LIMIT LDAP_GROUP_FILTER_ENABLE LDAP_GROUP_FILTER_OBJECTCLASS LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT LDAP_GROUP_FILTER_GROUP_NAME LDAP_UNIQUE_IDENTIFIER_FIELD LDAP_UTF8_NAMES_SLUGIFY LDAP_USERNAME_FIELD LDAP_FULLNAME_FIELD LDAP_MERGE_EXISTING_USERS LDAP_SYNC_USER_DATA LDAP_SYNC_USER_DATA_FIELDMAP LDAP_SYNC_GROUP_ROLES LDAP_DEFAULT_DOMAIN LDAP_EMAIL_MATCH_ENABLE LDAP_EMAIL_MATCH_REQUIRE LDAP_EMAIL_MATCH_VERIFIED LDAP_EMAIL_FIELD LDAP_SYNC_ADMIN_STATUS LDAP_SYNC_ADMIN_GROUPS HEADER_LOGIN_ID HEADER_LOGIN_FIRSTNAME HEADER_LOGIN_LASTNAME HEADER_LOGIN_EMAIL LOGOUT_WITH_TIMER LOGOUT_IN LOGOUT_ON_HOURS LOGOUT_ON_MINUTES DEFAULT_AUTHENTICATION_METHOD ATTACHMENTS_STORE_PATH PASSWORD_LOGIN_ENABLED"
+keys="DEBUG MONGO_URL MONGODB_BIND_UNIX_SOCKET MONGO_URL MONGODB_BIND_IP MONGODB_PORT MAIL_URL MAIL_FROM ROOT_URL PORT DISABLE_MONGODB CADDY_ENABLED CADDY_BIND_PORT WITH_API RICHER_CARD_COMMENT_EDITOR CARD_OPENED_WEBHOOK_ENABLED ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW  MAX_IMAGE_PIXEL IMAGE_COMPRESS_RATIO BIGEVENTS_PATTERN NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE NOTIFY_DUE_DAYS_BEFORE_AND_AFTER NOTIFY_DUE_AT_HOUR_OF_DAY EMAIL_NOTIFICATION_TIMEOUT CORS CORS_ALLOW_HEADERS CORS_EXPOSE_HEADERS MATOMO_ADDRESS MATOMO_SITE_ID MATOMO_DO_NOT_TRACK MATOMO_WITH_USERNAME BROWSER_POLICY_ENABLED TRUSTED_URL WEBHOOKS_ATTRIBUTES OAUTH2_ENABLED OAUTH2_LOGIN_STYLE OAUTH2_CLIENT_ID OAUTH2_SECRET OAUTH2_SERVER_URL OAUTH2_AUTH_ENDPOINT OAUTH2_USERINFO_ENDPOINT OAUTH2_TOKEN_ENDPOINT OAUTH2_ID_MAP OAUTH2_USERNAME_MAP OAUTH2_FULLNAME_MAP OAUTH2_ID_TOKEN_WHITELIST_FIELDS OAUTH2_EMAIL_MAP OAUTH2_REQUEST_PERMISSIONS OAUTH2_ADFS_ENABLED LDAP_ENABLE LDAP_PORT LDAP_HOST LDAP_BASEDN LDAP_LOGIN_FALLBACK LDAP_RECONNECT LDAP_TIMEOUT LDAP_IDLE_TIMEOUT LDAP_CONNECT_TIMEOUT LDAP_AUTHENTIFICATION LDAP_AUTHENTIFICATION_USERDN LDAP_AUTHENTIFICATION_PASSWORD LDAP_LOG_ENABLED LDAP_BACKGROUND_SYNC LDAP_BACKGROUND_SYNC_INTERVAL LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS LDAP_ENCRYPTION LDAP_CA_CERT LDAP_REJECT_UNAUTHORIZED LDAP_USER_AUTHENTICATION LDAP_USER_AUTHENTICATION_FIELD LDAP_USER_SEARCH_FILTER LDAP_USER_SEARCH_SCOPE LDAP_USER_SEARCH_FIELD LDAP_SEARCH_PAGE_SIZE LDAP_SEARCH_SIZE_LIMIT LDAP_GROUP_FILTER_ENABLE LDAP_GROUP_FILTER_OBJECTCLASS LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT LDAP_GROUP_FILTER_GROUP_NAME LDAP_UNIQUE_IDENTIFIER_FIELD LDAP_UTF8_NAMES_SLUGIFY LDAP_USERNAME_FIELD LDAP_FULLNAME_FIELD LDAP_MERGE_EXISTING_USERS LDAP_SYNC_USER_DATA LDAP_SYNC_USER_DATA_FIELDMAP LDAP_SYNC_GROUP_ROLES LDAP_DEFAULT_DOMAIN LDAP_EMAIL_MATCH_ENABLE LDAP_EMAIL_MATCH_REQUIRE LDAP_EMAIL_MATCH_VERIFIED LDAP_EMAIL_FIELD LDAP_SYNC_ADMIN_STATUS LDAP_SYNC_ADMIN_GROUPS HEADER_LOGIN_ID HEADER_LOGIN_FIRSTNAME HEADER_LOGIN_LASTNAME HEADER_LOGIN_EMAIL LOGOUT_WITH_TIMER LOGOUT_IN LOGOUT_ON_HOURS LOGOUT_ON_MINUTES DEFAULT_AUTHENTICATION_METHOD ATTACHMENTS_STORE_PATH PASSWORD_LOGIN_ENABLED CAS_ENABLED CAS_BASE_URL CAS_LOGIN_URL CAS_VALIDATE_URL SAML_ENABLED SAML_PROVIDER SAML_ENTRYPOINT SAML_ISSUER SAML_CERT SAML_IDPSLO_REDIRECTURL SAML_PRIVATE_KEYFILE SAML_PUBLIC_CERTFILE SAML_IDENTIFIER_FORMAT SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE SAML_ATTRIBUTES"
 
 # default values
 DESCRIPTION_DEBUG="Debug OIDC OAuth2 etc. Example: sudo snap set wekan debug='true'"
@@ -464,3 +464,70 @@ DESCRIPTION_PASSWORD_LOGIN_ENABLED="To hide the password login form"
 DEFAULT_PASSWORD_LOGIN_ENABLED="true"
 KEY_PASSWORD_LOGIN_ENABLED="password-login-enabled"
 
+DESCRIPTION_CAS_ENABLED="CAS Enabled"
+DEFAULT_CAS_ENABLED="false"
+KEY_CAS_ENABLED="cas-enabled"
+
+DESCRIPTION_CAS_BASE_URL="CAS Base URL"
+DEFAULT_CAS_BASE_URL=""
+KEY_CAS_BASE_URL="cas-base-url"
+
+DESCRIPTION_CAS_LOGIN_URL="CAS Login URL"
+DEFAULT_CAS_LOGIN_URL=""
+KEY_CAS_LOGIN_URL="cas-login-url"
+
+DESCRIPTION_CAS_VALIDATE_URL="CAS Validate URL"
+DEFAULT_CAS_VALIDATE_URL=""
+KEY_CAS_VALIDATE_URL="cas-validate-url"
+
+DESCRIPTION_SAML_ENABLED="SAML Enabled. Default: false"
+DEFAULT_SAML_ENABLED="false"
+KEY_SAML_ENABLED="saml-enabled"
+
+DESCRIPTION_SAML_PROVIDER="SAML Provider"
+DEFAULT_SAML_PROVIDER=""
+KEY_SAML_PROVIDER="saml-provider"
+
+DESCRIPTION_SAML_ENTRYPOINT="SAML Entrypoint"
+DEFAULT_SAML_ENTRYPOINT=""
+KEY_SAML_ENTRYPOINT="saml-entrypoint"
+
+DESCRIPTION_SAML_ISSUER="SAML Issuer"
+DEFAULT_SAML_ISSUER=""
+KEY_SAML_ISSUER="saml-issuer"
+
+DESCRIPTION_SAML_CERT="SAML Cert"
+DEFAULT_SAML_CERT=""
+KEY_SAML_CERT="saml-cert"
+
+DESCRIPTION_SAML_IDPSLO_REDIRECTURL="SAML IDPSLO Redirect URL"
+DEFAULT_SAML_IDPSLO_REDIRECTURL=""
+KEY_SAML_IDPSLO_REDIRECTURL="saml-idpslo-redirecturl"
+
+DESCRIPTION_SAML_PRIVATE_KEYFILE="SAML Private Keyfile"
+DEFAULT_SAML_PRIVATE_KEYFILE=""
+KEY_SAML_PRIVATE_KEYFILE="saml-private-keyfile"
+
+DESCRIPTION_SAML_PUBLIC_CERTFILE="SAML Public Certfile"
+DEFAULT_SAML_PUBLIC_CERTFILE=""
+KEY_SAML_PUBLIC_CERTFILE="saml-public-certfile"
+
+DESCRIPTION_SAML_PUBLIC_CERTFILE="SAML Public Certfile"
+DEFAULT_SAML_PUBLIC_CERTFILE=""
+KEY_SAML_PUBLIC_CERTFILE="saml-public-certfile"
+
+DESCRIPTION_SAML_IDENTIFIER_FORMAT="SAML Identifier Format"
+DEFAULT_SAML_IDENTIFIER_FORMAT=""
+KEY_SAML_IDENTIFIER_FORMAT="saml-identifier-format"
+
+DESCRIPTION_SAML_IDENTIFIER_FORMAT="SAML Identifier Format"
+DEFAULT_SAML_IDENTIFIER_FORMAT=""
+KEY_SAML_IDENTIFIER_FORMAT="saml-identifier-format"
+
+DESCRIPTION_SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="SAML Local Profile Match Attribute"
+DEFAULT_SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=""
+KEY_SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="saml-local-profile-match-attribute"
+
+DESCRIPTION_SAML_ATTRIBUTES="SAML Attributes"
+DEFAULT_SAML_ATTRIBUTES=""
+KEY_SAML_ATTRIBUTES="saml-attributes"

snap-src/bin/wekan-help

@@ -478,6 +478,51 @@ echo -e "\n"
 echo -e "Enable or not password login Form"
 echo -e "\t$ snap set $SNAP_NAME password-login-enabled='false'"
 echo -e "\n"
+echo -e "CAS Enabled. Default: false"
+echo -e "\t$ snap set $SNAP_NAME cas-enabled='true'"
+echo -e "\n"
+echo -e "CAS Base URL."
+echo -e "\t$ snap set $SNAP_NAME cas-base-url='https://cas.example.com/cas'"
+echo -e "\n"
+echo -e "CAS Login URL."
+echo -e "\t$ snap set $SNAP_NAME cas-login-url='https://cas.example.com/login'"
+echo -e "\n"
+echo -e "CAS Validate URL."
+echo -e "\t$ snap set $SNAP_NAME cas-validate-url='https://cas.example.com/cas/p3/serviceValidate'"
+echo -e "\n"
+echo -e "SAML Enabled. Default: false"
+echo -e "\t$ snap set $SNAP_NAME saml-enabled='true'"
+echo -e "\n"
+echo -e "SAML Provider. openam or openidp."
+echo -e "\t$ snap set $SNAP_NAME saml-provider='openam'"
+echo -e "\n"
+echo -e "SAML Entrypoint."
+echo -e "\t$ snap set $SNAP_NAME saml-entrypoint=''"
+echo -e "\n"
+echo -e "SAML Issuer."
+echo -e "\t$ snap set $SNAP_NAME saml-issuer=''"
+echo -e "\n"
+echo -e "SAML Cert."
+echo -e "\t$ snap set $SNAP_NAME saml-cert=''"
+echo -e "\n"
+echo -e "SAML IDPS LO Redirect URL."
+echo -e "\t$ snap set $SNAP_NAME saml-ispslo-redirecturl=''"
+echo -e "\n"
+echo -e "SAML Private Keyfile."
+echo -e "\t$ snap set $SNAP_NAME saml-private-keyfile=''"
+echo -e "\n"
+echo -e "SAML Public Certfile."
+echo -e "\t$ snap set $SNAP_NAME saml-public-certfile=''"
+echo -e "\n"
+echo -e "SAML Identifier Format."
+echo -e "\t$ snap set $SNAP_NAME saml-identifier-format=''"
+echo -e "\n"
+echo -e "SAML Local Profile Match Attribute."
+echo -e "\t$ snap set $SNAP_NAME saml-local-profile-match-attribute=''"
+echo -e "\n"
+echo -e "SAML Attributes."
+echo -e "\t$ snap set $SNAP_NAME saml-attributes=''"
+echo -e "\n"
 # parse config file for supported settings keys
 echo -e "wekan supports settings keys"
 echo -e "values can be changed by calling\n$ snap set $SNAP_NAME <key name>='<key value>'"

snapcraft.yaml

@@ -229,11 +229,16 @@ parts:
             cp .build/bundle/.node_version.txt $SNAPCRAFT_PART_INSTALL/
             rm -f $SNAPCRAFT_PART_INSTALL/lib/node_modules/wekan
             rm -f $SNAPCRAFT_PART_INSTALL/programs/server/npm/node_modules/meteor/rajit_bootstrap3-datepicker/lib/bootstrap-datepicker/node_modules/phantomjs-prebuilt/lib/phantom/bin/phantomjs
+            # Delete phantomjs that is in accounts-lockout
+            rm -rf $SNAPCRAFT_PART_INSTALL/programs/server/npm/node_modules/meteor/lucasantoniassi_accounts-lockout/node_modules/phantomjs-prebuilt
+            # Delete temporary files
             rm -f $SNAPCRAFT_PART_INSTALL/programs/server/npm/node_modules/tar/lib/.mkdir.js.swp
             rm -f $SNAPCRAFT_PART_INSTALL/lib/node_modules/node-pre-gyp/node_modules/tar/lib/.mkdir.js.swp
             rm -f $SNAPCRAFT_PART_INSTALL/lib/node_modules/node-gyp/node_modules/tar/lib/.mkdir.js.swp
             # Meteor 1.8.x additional .swp remove
             rm -f $SNAPCRAFT_PART_INSTALL/programs/server/node_modules/node-pre-gyp/node_modules/tar/lib/.mkdir.js.swp
+            # Delete fibers for other archs
+            rm -rf $SNAPCRAFT_PART_INSTALL/programs/server/node_modules/fibers/bin/linux-ia32*
             # ostrio tmp remove
             rm -rf $SNAPCRAFT_PART_INSTALL/programs/server/npm/node_modules/meteor/ostrio_files/node_modules/request-libcurl/.node_modules-garbage*
 

start-wekan.bat

@@ -390,4 +390,21 @@ REM # LOGOUT_ON_MINUTES : The number of minutes
 REM # example : LOGOUT_ON_MINUTES=55
 REM SET LOGOUT_ON_MINUTES=
 
+REM SET CAS_ENABLED=true
+REM SET CAS_BASE_URL=https://cas.example.com/cas
+REM SET CAS_LOGIN_URL=https://cas.example.com/login
+REM SET CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+
+REM SET SAML_ENABLED=true
+REM SET SAML_PROVIDER=
+REM SET SAML_ENTRYPOINT=
+REM SET SAML_ISSUER=
+REM SET SAML_CERT=
+REM SET SAML_IDPSLO_REDIRECTURL=
+REM SET SAML_PRIVATE_KEYFILE=
+REM SET SAML_PUBLIC_CERTFILE=
+REM SET SAML_IDENTIFIER_FORMAT=
+REM SET SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+REM SET SAML_ATTRIBUTES=
+
 node main.js

start-wekan.sh

@@ -362,7 +362,24 @@
       #---------------------------------------------------------------------
       # PASSWORD_LOGIN_ENABLED : Enable or not the password login form.
       #export PASSWORD_LOGIN_ENABLED=true
-
+      #---------------------------------------------------------------------
+      #export CAS_ENABLED=true
+      #export CAS_BASE_URL=https://cas.example.com/cas
+      #export CAS_LOGIN_URL=https://cas.example.com/login
+      #export CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #export SAML_ENABLED=true
+      #export SAML_PROVIDER=
+      #export SAML_ENTRYPOINT=
+      #export SAML_ISSUER=
+      #export SAML_CERT=
+      #export SAML_IDPSLO_REDIRECTURL=
+      #export SAML_PRIVATE_KEYFILE=
+      #export SAML_PUBLIC_CERTFILE=
+      #export SAML_IDENTIFIER_FORMAT=
+      #export SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #export SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
       node main.js
       # & >> ../../wekan.log
       cd ../..

torodb-postgresql/docker-compose.yml

@@ -529,7 +529,23 @@ services:
       # example: PASSWORD_LOGIN_ENABLED=false
       # - PASSWORD_LOGIN_ENABLED
       #-------------------------------------------------------------------
-
+      #- CAS_ENABLED=true
+      #- CAS_BASE_URL=https://cas.example.com/cas
+      #- CAS_LOGIN_URL=https://cas.example.com/login
+      #- CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #- SAML_ENABLED=true
+      #- SAML_PROVIDER=
+      #- SAML_ENTRYPOINT=
+      #- SAML_ISSUER=
+      #- SAML_CERT=
+      #- SAML_IDPSLO_REDIRECTURL=
+      #- SAML_PRIVATE_KEYFILE=
+      #- SAML_PUBLIC_CERTFILE=
+      #- SAML_IDENTIFIER_FORMAT=
+      #- SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #- SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
 
     depends_on:
       - mongodb