dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
12,315 Commits 3 Branches 0 Tags 75 MiB
v2.0
Commit Graph

5009 Commits

Author SHA1 Message Date
Christophe Maudoux
2d0ec20c18 Append information in doc about afterData entry point (#2598) 2021-10-01 23:04:43 +02:00
Christophe Maudoux
732c8631eb Append an option in Manager to define RULES_URL param (#2627) 2021-10-01 23:01:14 +02:00
Christophe Maudoux
ed56a171b9 Tidy (#2620) 2021-09-30 23:13:04 +02:00
Maxime Besson
24a989aa67 Remove unused method in Net::LDAP (#2620) 2021-09-29 11:43:19 +02:00
Maxime Besson
cc08c992c4 Merge branch '2620-ppolicy-binding-v2.0' into 'v2.0' 
add more logs for ldap binding (ppolicy extended response code) + remove loadPP (#2620)

See merge request lemonldap-ng/lemonldap-ng!227
 2021-09-29 09:36:58 +00:00
dcoutadeur dcoutadeur
ebb764a3c5 add more logs for ldap binding (ppolicy extended response code) + remove loadPP (#2620) 2021-09-29 09:36:58 +00:00
Christophe Maudoux
89b370df83 Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0 2021-09-24 21:34:36 +02:00
Christophe Maudoux
3243cb2aa1 Decrease logLevel (#1976) 2021-09-24 21:32:57 +02:00
Alexandre KARIM
bcb3d9ad26 Fix sorting for Finduser plugin 2021-09-24 16:27:19 +02:00
Maxime Besson
4e55a17791 Improve slapd shutdown during tests 2021-09-24 15:57:03 +02:00
Christophe Maudoux
9176237f05 Improve unit test (#2605) 2021-09-23 22:45:48 +02:00
Christophe Maudoux
a7467b1d15 Fix version (#2605) 2021-09-23 21:27:05 +02:00
Maxime Besson
6302c957cc Add SAMESITE template param (#2605) 2021-09-23 17:44:52 +02:00
Christophe Maudoux
a4e15ad9a9 Set sameSite value for llnglanguage cookie (#2605) 2021-09-23 17:38:44 +02:00
Yadd
80e37a41f2 Add pt_BR translation for portal, thanks to Guilherme Buonfiglio de Castro Monteiro! (#2619) 2021-09-21 06:35:41 +02:00
Guilherme Monteiro
946b2c2375 Brazilian flag for Brazilian Portuguese language 2021-09-21 00:07:32 +00:00
Christophe Maudoux
10126d76c8 Switch rules and headers (#2458) 2021-09-20 21:23:22 +02:00
Christophe Maudoux
9b50811f5e Test if Safe jail is enabled (#2617) 2021-09-19 23:24:36 +02:00
Yadd
8af91cfdbc Update tr translation from transiffex 2021-09-18 07:15:37 +02:00
Yadd
ff966c4ecd Update tr translation from transifex 2021-09-15 19:41:56 +02:00
Maxime Besson
da7e1ea4ea Error messages for #2558 2021-09-15 19:22:13 +02:00
Maxime Besson
35b3cb8c28 Use distinct error codes in Auth::OIDC (#2558) 2021-09-15 19:21:47 +02:00
Maxime Besson
d8eb44a5ab Add portal status codes for Auth::OIDC errors (#2558) 2021-09-15 19:21:47 +02:00
Maxime Besson
040117bd32 Unit test for #2616 2021-09-15 14:09:04 +02:00
Maxime Besson
dd6291643d Fix unit tests after #2616 2021-09-15 14:00:52 +02:00
Maxime Besson
8aa3e65137 Remember login across authentication attempts (#2616) 2021-09-15 14:00:31 +02:00
Christophe Maudoux
79d061eb3f Update manifest 2021-09-14 23:05:06 +02:00
Yadd
b6b3e6b805 Update translations from transifex 2021-09-14 05:46:03 +02:00
Christophe Maudoux
35e5128a5c Merge branch 'v2.0' into 'v2.0' 
Fix #2599

See merge request lemonldap-ng/lemonldap-ng!219
 2021-09-13 20:13:18 +00:00
Yadd
5b093ae59b Update translations from Transifex 2021-09-13 18:01:20 +02:00
Alexandre KARIM
34fb64fb1d Translation (Fix #2599) 2021-09-13 12:24:33 +02:00
Alexandre KARIM
0b61d976e9 Translation (Fix #2599) 2021-09-13 11:42:39 +02:00
Alexandre KARIM
21d617ac85 Translation (Fix #2599) 2021-09-13 11:17:05 +02:00
Alexandre KARIM
10846f7e84 Translation (Fix #2599) 2021-09-13 11:11:45 +02:00
David Coutadeur
2c62720c43 display precise error while sending direct SOAP SAML message (#2614) 2021-09-13 10:32:07 +02:00
Christophe Maudoux
d51877a40d Code refactoring 2021-09-10 22:40:33 +02:00
Christophe Maudoux
f378c86337 Fix warnings (#2611) 2021-09-10 22:40:23 +02:00
Christophe Maudoux
1901ef8232 Spit Remote and Proxy Auth cookie name parameter (#2613) 2021-09-10 22:40:11 +02:00
Maxime Besson
66946e8f75 Fix auth process in password-testing plugins (#2611) 2021-09-10 17:12:13 +02:00
Maxime Besson
83e95cd053 Update unit tests (#2611) 2021-09-10 17:12:13 +02:00
Maxime Besson
7dc4fc54e4 Unit test for failed password grant 2021-09-10 17:12:13 +02:00
Christophe Maudoux
7d40d917af Improve logout message (#2600) 2021-09-09 14:54:40 +02:00
Christophe Maudoux
b66798d159 Test cookieName & Improve code + unit test (#2600) 2021-09-09 14:28:06 +02:00
Christophe Maudoux
258e4fe731 Test URIs (#2600) 2021-09-08 22:10:45 +02:00
Alexandre KARIM
aa0db663c6 Merge branch 'v2.0' into 2600 2021-09-08 17:26:09 +02:00
Alexandre KARIM
0c33da8cdc Lang, Doc, Sort Tree & Tests(#2600 #2601) 2021-09-08 16:41:53 +02:00
Christophe Maudoux
e018e679c3 Use property instead of attribute (#2606) 2021-09-06 19:56:16 +02:00
Maxime Besson
6806864872 Expose risk level to other plugins (#2593) 2021-09-06 17:50:10 +02:00
Maxime Besson
0bea770132 Update unit tests for new location plugin (#2325) 2021-09-06 17:40:04 +02:00
Maxime Besson
f297492703 Make new location plugin more generic (#2325) 2021-09-06 17:40:04 +02:00
Alexandre KARIM
d8c512547a Test & code refactoring(#2601) 2021-09-06 17:10:55 +02:00
Maxime Besson
321102e12c Make NewLocation tests locale independant (#2325) 2021-09-06 16:17:13 +02:00
Alexandre KARIM
ad1244f272 Append spoofId parameter (#2601) 2021-09-06 14:18:10 +02:00
Alexandre KARIM
6b85a85026 Append ChoiceParam & ChoiceValue (#2600) 2021-09-06 10:47:06 +02:00
Alexandre KARIM
977a185fcc Merge branch 'v2.0' into 2325 2021-09-02 12:05:19 +02:00
Christophe Maudoux
eab4d4a31e Append an option to normalize headers & Improve unit tests + doc (#2604) 2021-09-01 21:48:10 +02:00
Maxime Besson
128ab23246 Improve unit test to check that RP rule is working 2021-09-01 17:32:15 +02:00
Maxime Besson
7dabb0b896 Unit tests for #2602 2021-09-01 17:32:15 +02:00
Maxime Besson
5ea7a0916d Add _oidc_grant_type variable (#2602) 2021-09-01 17:32:15 +02:00
Alexandre KARIM
9bcdf37384 Merge branch 'v2.0' into 2325 2021-08-31 09:50:49 +02:00
Yadd
3ed77a01c2 Add buildurl method (#2594) 2021-08-27 14:35:07 +02:00
Maxime Besson
a489e4a76b Fix open redirection issue in CAS (#2596) 2021-08-26 18:03:35 +02:00
Maxime Besson
e041eb46bc Update unit tests for #2596 2021-08-26 18:03:35 +02:00
Maxime Besson
342520db98 Update default templates for #2597 2021-08-26 17:52:04 +02:00
Maxime Besson
cf3d884a77 Inform templates when mail/register URLs are external (#2597) 2021-08-26 17:50:37 +02:00
Alexandre KARIM
52ed859c4e Update version #2325 2021-08-25 14:37:23 +02:00
Alexandre KARIM
cd72d00ef8 Subject & deduplicate history IP #2325 2021-08-25 14:28:15 +02:00
Alexandre KARIM
f9c20e6072 Merge branch 'v2.0' into 2325 2021-08-23 16:13:50 +02:00
Maxime Besson
f0a5b75402 Handle Conf not loading during portal init (#2592) 2021-08-22 11:35:31 +02:00
Christophe Maudoux
017408d005 Merge branch 'v2.0' into 2589 2021-08-20 20:06:22 +02:00
Clément OUDOT
14848f9bf1 Set modules version to 2.0.13 2021-08-20 18:30:13 +02:00
Clément OUDOT
e26f39eb93 Merge branch '2564' into 'v2.0' 
2564

See merge request lemonldap-ng/lemonldap-ng!214
 2021-08-20 16:07:39 +00:00
Clément OUDOT
4b69efdcce Set on-time-code autocomplete (#2585) 2021-08-20 17:20:58 +02:00
Clément OUDOT
7ecc02d9ea Remove autocomplete on image (#2585) 2021-08-20 11:59:20 +02:00
Clément OUDOT
e5575f1c42 Keep autocomplete email for register form (#2585) 2021-08-20 11:42:08 +02:00
Alexandre KARIM
ffa804f6a3 Append unit test (#2325) 2021-08-19 10:55:17 +02:00
Alexandre KARIM
fa363b0bb1 Append unit test (#2325) 2021-08-19 10:55:17 +02:00
Alexandre KARIM
3ae759edd4 Date + tidy + langs (#2325) 2021-08-19 10:55:17 +02:00
Alexandre KARIM
e45c9a1c03 Langs (#2325) 2021-08-19 10:55:17 +02:00
Alexandre KARIM
13a7a81173 Mail template (#2325) 2021-08-19 10:55:17 +02:00
Alexandre KARIM
d0c6f7eec6 NewLocationWarning plugin skeleton (#2325) 2021-08-19 10:55:17 +02:00
Christophe Maudoux
351bd43f31 Improve unit test (#2589) 2021-08-18 23:59:51 +02:00
Christophe Maudoux
809faf68c1 Fix unit tests (#2589) 2021-08-13 12:24:40 +02:00
Christophe Maudoux
4a81c37adc Improve template (#2589) 2021-08-13 10:46:02 +02:00
Christophe Maudoux
df8fc578b4 Merge branch 'v2.0' into 2589 2021-08-12 23:47:10 +02:00
Christophe Maudoux
37363971f3 Merge branch 'v2.0' into 2564 2021-08-12 23:46:55 +02:00
Christophe Maudoux
a524e3cd7c Fix unit tests (#2589) 2021-08-12 23:32:04 +02:00
Christophe Maudoux
a68a0503da Improve template (#2589) 2021-08-12 22:58:47 +02:00
Christophe Maudoux
30fd065134 Fix unit tests (#2589) 2021-08-12 22:58:47 +02:00
Christophe Maudoux
b59ba39e05 Fill all spoofId fields & avoid duplicate Ids 2021-08-12 22:58:47 +02:00
Christophe Maudoux
b8cf97645b Be more consistent (#2589) 2021-08-12 22:57:59 +02:00
Christophe Maudoux
c61ac6353f Typos 2021-08-12 22:57:59 +02:00
Christophe Maudoux
4b592e1f48 Fix regex (#2589) 2021-08-12 22:57:59 +02:00
Maxime Besson
2fac0d9f47 Update LLNG download URL 2021-08-12 17:02:50 +02:00
Yadd
15e9cca977 Update translation from transifex 2021-08-10 10:39:42 +02:00
Maxime Besson
ac5ce7ed97 Try to get deleted session count from Session module (#2428) 2021-08-09 11:14:00 +02:00
Christophe Maudoux
081522ba63 Partial revert (#2585) 2021-08-06 21:50:15 +02:00
Christophe Maudoux
028e03d8b1 Be more consistent (#2585) 2021-08-05 22:59:33 +02:00
Christophe Maudoux
b4b19919a3 Append autocomplete attribute & fix unit tests (#2585) 2021-08-05 22:45:31 +02:00
Christophe Maudoux
084b9b26f1 Merge branch 'v2.0' into 2564 2021-08-02 10:10:25 +02:00
Yadd
9174a81d6c Add some mission Perl build dependencies 2021-08-01 08:31:37 +02:00
Christophe Maudoux
4f78b12d18 Fix warning 2021-07-28 12:45:53 +02:00
Christophe Maudoux
02b702b416 Fix unit test (#2564) 2021-07-28 12:28:47 +02:00
Christophe Maudoux
4d2dfe4abc Fix warnings 2021-07-28 12:10:55 +02:00
Christophe Maudoux
b2f3d00127 Increase ttl 2021-07-28 11:45:46 +02:00
Christophe Maudoux
d44d407bca Enable debug 2021-07-28 11:05:52 +02:00
Christophe Maudoux
21ba445141 Fix unit test (#2564) & some warnings 2021-07-28 10:38:45 +02:00
Christophe Maudoux
fbcaacbdf1 Langs (#2564) 2021-07-27 21:47:48 +02:00
Christophe Maudoux
152855bb84 Improve unit test (#2564) 2021-07-27 20:25:18 +02:00
Christophe Maudoux
13a62b4dde Append unit test (#2564) 2021-07-27 20:12:35 +02:00
Christophe Maudoux
e3674d7d1a Typos 2021-07-27 10:40:28 +02:00
Christophe Maudoux
984df5c0c8 Allow to configure mail body for account registration 2021-07-26 23:06:47 +02:00
Christophe Maudoux
a6ecbf1ec8 Fix version & comment 2021-07-26 22:55:27 +02:00
Maxime Besson
0aa78fead7 Unit tests for CORS on OIDC endpoints (#2567) 2021-07-26 15:44:20 +02:00
Maxime Besson
0d513ce5b7 Fix CORS on userinfo error response (#2567) 2021-07-26 15:44:20 +02:00
Clément OUDOT
a7809f10fe Update version in main modules 2021-07-22 17:53:50 +02:00
Clément OUDOT
b3aa5462e1 Do not use dashes in 'mot de passe' 2021-07-22 14:34:32 +02:00
Clément OUDOT
6a6a41b007 Use regexp to replace values in email only for text body (#2495) 2021-07-18 17:20:39 +02:00
David Coutadeur
53b459c136 fix RGAA : accessing logout menu with tab (#2561) 2021-07-16 17:27:11 +02:00
Yadd
fe6ad903f1 Update manifests 2021-07-12 19:00:03 +02:00
David Coutadeur
c6033a35dc test logout forward url pointing to a protected application (#2153) 2021-07-12 18:16:10 +02:00
Maxime Besson
71e4115875 Make sure empty referers are valid during logout 2021-07-09 15:02:46 +02:00
Yadd
e4bf28906f Update tr translation from Transifex 2021-07-09 13:48:57 +02:00
Maxime Besson
2816586afe Fix regression from 3732cdcc (#2477) 2021-07-09 11:49:29 +02:00
Yadd
959a4349a2 Merge branch '2328-propagate-logout-through-chaining' into 'v2.0' 
test chained SAML login with 2 IDP + logout in SOAP (#2328)

See merge request lemonldap-ng/lemonldap-ng!203
 2021-07-09 09:44:08 +00:00
David Coutadeur
70af572c4a test chained SAML login with 2 IDP + logout in SOAP (#2328) 2021-07-09 10:23:17 +02:00
Christophe Maudoux
a85e47ecca Allow to display password with dontStorePassword option & Update unit test (#2454) 2021-07-08 23:55:03 +02:00
Clément OUDOT
82dc1de87f Unit test for portalEnablePasswordDisplay (#2454) 2021-07-07 19:43:56 +02:00
David Coutadeur
5b59eeb2e5 remove useless test on saml signature for test logout through OIDC and SAML chaining (#2328) 2021-07-05 17:43:07 +02:00
David Coutadeur
98b05eb885 test logout through OIDC and SAML chaining (#2328) 2021-07-05 17:09:35 +02:00
Christophe Maudoux
1d2db0594f Tidy 2021-07-04 22:13:32 +02:00
Christophe Maudoux
466b6a3241 Avoid to store passwords (#2557) 2021-07-04 22:07:21 +02:00
Christophe Maudoux
c084cc28d9 Improve code (#2521) 2021-07-04 15:27:12 +02:00
Christophe Maudoux
547d809852 Display placeholder (#2521) 2021-07-04 14:38:31 +02:00
Christophe Maudoux
0634fcaf98 Typos & tidy 2021-07-01 22:50:32 +02:00
Marek Wójtowicz
80a364839a Fix yubikey from session. 2021-07-01 11:36:44 +00:00
Marek Wójtowicz
48f934045e Support for multiple yubikeys. 2021-06-30 20:33:50 +00:00
Yadd
4a61606ee8 typo 2021-06-29 16:55:29 +02:00
Yadd
b0e7ba5d8a Fix URIRE 2021-06-29 16:50:39 +02:00
Yadd
83b45db614 Fix versions 2021-06-28 15:36:29 +02:00
Maxime Besson
6a70596ec0 Unit tests for #2544 2021-06-28 13:57:22 +02:00
Maxime Besson
7de1793386 Let users specify a longer timeout for totp reg (#2544) 2021-06-28 11:36:44 +02:00
Yadd
8b5638640c Fix translations 2021-06-26 23:00:22 +02:00
Yadd
f5b78e7e6a Restore lost translation 2021-06-26 22:49:21 +02:00
Christophe Maudoux
7f91820224 Display removed SF name (#1782) 2021-06-26 22:38:42 +02:00
Christophe Maudoux
71ed63a999 Fix unit tests (#2539) 2021-06-26 22:38:41 +02:00
Yadd
3d35c6454f Update manifests 2021-06-26 20:28:03 +02:00
Maxime Besson
316c734bbc Merge branch 'fix-totp-options-2541' into v2.0 2021-06-25 13:55:53 +02:00
Clément OUDOT
262210398d Remove OIDC check session iframe from metadata (#2554) 2021-06-25 12:49:51 +02:00
Maxime Besson
d287efb343 Unit test for #2535 2021-06-25 11:43:53 +02:00
Yadd
3b8222ae8a Fix trusted domains regex (#2535) 2021-06-25 08:59:52 +02:00
Maxime Besson
15054b9038 Extra precaution for #2539 2021-06-25 07:54:03 +02:00
Maxime Besson
cf70ebe293 Stop triggering XSS protection on escaped commas 
Commas are safe in HTML and JS, so there is no risk of XSS
 2021-06-24 20:16:20 +02:00
Maxime Besson
1d80c262ab Make unit test for #2539 less noisy 2021-06-24 19:05:11 +02:00
Maxime Besson
70bd06bc32 Fix unit test for #2534 2021-06-24 19:02:34 +02:00
Maxime Besson
4a2a786598 Fix CDA wildcard regexp (#2534) 2021-06-24 19:02:17 +02:00
Maxime Besson
3d1cc3f499 Unit test for #2534 2021-06-24 16:59:20 +02:00
Maxime Besson
dbd65d1b2b Handle wildcards in CDA check (#2534) 2021-06-24 16:59:20 +02:00
Christophe Maudoux
71fa5d09f7 Be more strict with URL (#2477) 2021-06-24 14:33:27 +02:00
Yadd
3732cdcc19 Better URL parsing (#2477) 2021-06-24 14:33:27 +02:00
Yadd
8a18543f55 Remove TODO loop 2021-06-24 14:04:31 +02:00
Maxime Besson
9a2dc48b56 Unit test for #2550 2021-06-21 09:38:03 +02:00
Maxime Besson
8db02a693f Only release IDtoken when scope contains openid (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
ee51e010dc Unit test for #2548 2021-06-21 09:38:03 +02:00
Maxime Besson
e1b7f61d13 Update ID token unit tests 2021-06-21 09:38:03 +02:00
Maxime Besson
beaacca9a0 Refactor _handleRefreshTokenGrant to use _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
c931b30263 Refactor _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Yadd
b6a1f946b2 Fix handler cache corruption (#2539) 2021-06-19 18:43:41 +02:00
Maxime Besson
2de2cbf454 Fix 2F unit test (#2539) 2021-06-19 18:25:07 +02:00
Clément OUDOT
bdeb1e70d9 Allow to display password value in login form (#2454) 2021-06-16 20:50:11 +02:00
Maxime Besson
b35bd70646 totp: add more instructions 2021-06-16 09:48:28 +02:00
Maxime Besson
3c37565eb9 Improve TOTP error reporting (#2541) 2021-06-15 18:07:03 +02:00
Maxime Besson
699943365b Improve messages on TOTP registration (#2541) 2021-06-15 15:56:18 +02:00
Maxime Besson
95fe0512c0 Display TOTP key in a readable form (#2541) 2021-06-15 15:48:10 +02:00
Maxime Besson
3ff680aceb Update templates for #2541 2021-06-15 14:54:33 +02:00
Maxime Besson
89b6215d9d Update translations for #2541 2021-06-15 14:54:33 +02:00
Maxime Besson
14548b9a1f Remove "new totp" from portal js 2021-06-15 14:54:33 +02:00
Maxime Besson
50ef67b678 Fix error display in 2F registration screens 2021-06-15 14:54:32 +02:00
Maxime Besson
7b0990addd Remove totp options from code (#2541) 2021-06-15 14:54:32 +02:00
Maxime Besson
dae4293ecf Unit test for #2518 2021-06-15 14:26:23 +02:00
Maxime Besson
77f5577dc4 Improve SAML test lib 2021-06-15 12:40:15 +02:00
Maxime Besson
cf59bb915e refactor expectAuthenticatedAs 2021-06-15 12:40:15 +02:00
Maxime Besson
6f5cd3b645 Fix some undef warnings 2021-06-15 12:40:15 +02:00
Maxime Besson
75b81fcb5a Fix NameID value when unspecified is requested by SP (#2518) 2021-06-15 11:27:37 +02:00
Maxime Besson
63cd5ffb40 Revert 652d8ba9bc 
See #2482
 2021-06-11 08:53:26 +02:00
Christophe Maudoux
469d2a40aa Fix warning (#2538) 2021-06-09 23:06:03 +02:00
Christophe Maudoux
86f46ebc5b Fix some warnings (#2538) 2021-06-08 23:03:54 +02:00
Yadd
5fc0b6f002 Update tr translation from transifex 2021-06-07 18:34:06 +02:00
Maxime Besson
87295178e0 optimize SingleSession to avoid unneeded session fetches (#2536) 2021-06-04 16:17:18 +02:00
Maxime Besson
275567436e Unit test for #2496 2021-06-03 18:31:38 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
2414fb4751 Unit tests for (#2510) 2021-06-02 11:08:07 +02:00
Maxime Besson
3b76479bda Add expectPdata function to test lib 2021-06-02 11:07:53 +02:00
Maxime Besson
fad337c58c Add hooks on password change (#2510) 2021-06-02 11:07:28 +02:00
Maxime Besson
d4aed0b332 Tidy test lib 2021-06-02 11:07:28 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
71a8fc6d16 Skip registration of CAS App when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
6ef522c193 Unit tests for #2533 2021-06-01 11:28:34 +02:00
Maxime Besson
cf3809a0de Add CAS hooks (#2533) 2021-06-01 11:27:45 +02:00
Maxime Besson
ec2b904f4f Unit test for #2532 2021-05-31 11:23:38 +02:00
Maxime Besson
e98aafd6f7 add oidcGenerateCode hook (#2532) 2021-05-31 11:16:28 +02:00
Maxime Besson
8992b3e789 Unit test for #2529 2021-05-31 09:52:26 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Yadd
0f11d7c06e Finish BrowserID/Persona removal 2021-05-22 16:16:38 +02:00
Christophe Maudoux
66f428b474 Improve notifications display (Thx @antoinerosier) 2021-05-20 19:22:18 +02:00
Christophe Maudoux
7860e18034 Append unit test (#1976) 2021-05-08 21:38:13 +02:00
Christophe Maudoux
a3c48af972 Append unit test (#1976) 2021-05-07 08:15:32 +02:00
Christophe Maudoux
cf55716825 Allow findUser with UpgradeSession (#1976) 2021-05-06 23:16:26 +02:00
Yadd
a24ed7bc41 Fix GrantSession rules sort 2021-05-04 15:50:38 +02:00
Christophe Maudoux
de3164fea7 Fix button top margin (#1976) 2021-05-01 22:35:56 +02:00
Yadd
d1d3cfa3f2 Update tr translation from transifex 2021-05-01 07:57:04 +02:00
Christophe Maudoux
fc481d40d2 Rename param (#1976) 2021-04-30 22:36:31 +02:00
Maxime Besson
2142b90caa Unit test for #2513 2021-04-23 09:02:24 +02:00
Maxime Besson
16557f3965 Refactor child-src unit tests (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
cd97d3b922 Refactor $req->{cspFormAction} (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
a876d978af Suggest improvement for next major version 2021-04-23 09:02:24 +02:00
Maxime Besson
913ebbd556 fix missing domain in child-src during SAML POST logout (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
5ba0c11b58 Add helper to build CSP host list (#2513) 2021-04-23 09:02:24 +02:00
Christophe Maudoux
b54c95ccd2 Improve unit tests & Fix regex (#2509) 2021-04-21 22:14:47 +02:00
Maxime Besson
8695a633a7 Force type of JSON fields in token response (#2511) 2021-04-20 11:31:32 +02:00
Christophe Maudoux
21ced5dbad Fix speChars test, typos & display (#2509) 2021-04-14 13:28:12 +02:00
Maxime Besson
d4c1c3c7de Unit test for #2506 2021-04-09 17:52:24 +02:00
Maxime Besson
a94fb616bd Allow admin to disallow host-based match (#2506) 2021-04-09 17:51:54 +02:00
Maxime Besson
1253effa29 Unit test for #2502 2021-04-07 16:40:32 +02:00
Maxime Besson
c1e059eeb3 Use authChoiceAuthBasic to select Choice (#2502) 2021-04-07 16:40:32 +02:00
Yadd
e6a2706c85 Update languages from transifex 2021-04-07 14:36:25 +02:00
Yadd
f930e449ab Order language keys 2021-04-07 13:46:32 +02:00
Christophe Maudoux
64dffcf4d0 Send only technical and exported attributes (#2503) 2021-04-03 16:46:43 +02:00
Christophe Maudoux
9f77e89f96 Send exported attributes with REST session server & typos (#2503) 2021-04-02 23:57:30 +02:00
Christophe Maudoux
4751427105 Fix error level & Improve doc (#1976) 2021-04-01 23:31:48 +02:00
Christophe Maudoux
c0db322ef0 Perl critic 2021-04-01 23:07:58 +02:00
Christophe Maudoux
bcfb075f63 Be more consistent with REST params & Update doc (#1976) 2021-04-01 22:48:08 +02:00
Christophe Maudoux
6eda19c112 Fix test (#2501) 2021-04-01 19:02:46 +02:00
Christophe Maudoux
b67d11c58a Update manifest 2021-04-01 14:49:44 +02:00
Christophe Maudoux
654184dd66 Fix bad request (#2501) 2021-04-01 14:49:44 +02:00
Maxime Besson
297dc830af Update mail templates to no longer use string substitution (#2495) 2021-03-31 14:27:23 +02:00
Maxime Besson
d696853556 Factor MAIN_LOGO variable in loadMailTemplate (#2495) 2021-03-31 14:27:23 +02:00
Christophe Maudoux
89111859a0 Typos (#1976) 2021-03-30 23:54:06 +02:00
Maxime Besson
20e1f9ded0 Hash JWT to catch tampering (#2419) 
This mechanism's only purpose is to make the introsection endpoint fail
to verify the token when the JWT itself has been tampered with.
 2021-03-30 16:32:14 +02:00
Maxime Besson
2c8cbbefe6 "xxx is allowed to update 2FA" should be a debug message 2021-03-30 16:32:14 +02:00
Clément OUDOT
55ab4b5a5f Fix CAS log message on service ticket validation error (#2494) 2021-03-25 16:33:48 +01:00
Maxime Besson
02b680df30 fix #2489 2021-03-19 16:45:37 +01:00
Maxime Besson
96a667cf2e clarify REST log messages 2021-03-17 14:24:47 +01:00
Maxime Besson
9fda75edc5 Unit test for #2488 2021-03-17 14:24:47 +01:00
Maxime Besson
ca6c98c26c Allow selection of saml ACS during idp initiated (#2488) 2021-03-17 14:24:47 +01:00
Maxime Besson
c0f8e8f46b Skip serializing psgi streams when saving request 
It can interfere with unit tests in some cases, like #2000
 2021-03-15 21:18:08 +01:00
Maxime Besson
fc693184dc Unit test for #2484 2021-03-10 15:47:46 +01:00
Maxime Besson
44abc1e889 Add hook for client credentials (#2484) 2021-03-10 15:47:19 +01:00
Maxime Besson
6a3479ea3c unit tests: Try to find templateDir in path 
This change makes running the testsuite from an external directory
easier. Which is useful if you want to unit test a custom module
 2021-03-08 18:45:13 +01:00
Maxime Besson
0f626ad94c Add expiration time to Client Credential sessions (#2481) 2021-03-03 15:43:18 +01:00
Maxime Besson
a70051e3fe Remove deprecated base64url implementation 
All our target distros now have base64url in Mime::Base64
 2021-03-03 11:03:19 +01:00
Maxime Besson
e3ecddb8c9 Unit tests for #2424 2021-03-03 11:03:19 +01:00
Maxime Besson
bb95e681e6 Tidy 2021-03-03 11:03:19 +01:00
Maxime Besson
e10d1e291c Return granted scopes if different from requested scopes (#2424) 2021-03-03 11:03:19 +01:00
Maxime Besson
6b9670c29d Use computed scopes to fill claims in ID token (#2424) 2021-03-03 11:03:19 +01:00
Maxime Besson
534745e5a2 Use computer scopes in Implicit/Hybrid responses (#2424) 2021-03-03 11:03:18 +01:00
Christophe Maudoux
b46259cae9 Enable upgradeSession only if required & Append unit test (#2480) 2021-03-02 19:20:15 +01:00
Yadd
a422af3038 Fix test 2021-03-02 07:58:25 +01:00
Yadd
3883c5abff Fix vhost regexp (#2477) 2021-03-02 07:57:21 +01:00
Maxime Besson
4841c7755e Fix OAuth2 error code when supplying invalid code 2021-02-24 17:48:12 +01:00
Maxime Besson
5a8c20584b Fix OIDC message when calling technical endpoints with cookies (#2475) 2021-02-24 17:48:12 +01:00
Maxime Besson
09d727410c Unit test for #2474 2021-02-24 17:48:12 +01:00
Maxime Besson
2d7f9e34a6 OIDC: Return error if multiple client auth used (#2474) 2021-02-24 17:48:12 +01:00
Maxime Besson
db8ea6f885 Extend GPG key expiration date, fixes GPG unit test 2021-02-20 20:31:21 +01:00
Christophe Maudoux
ba3cbfb33b Click to clear form (#1976) 2021-02-20 19:39:54 +01:00
Maxime Besson
861463f987 Update unit test for #2465 2021-02-19 17:39:45 +01:00
Christophe Maudoux
ff36b81e73 Append accessor to avoid modify conf (#2451) 2021-02-19 07:44:00 +01:00
Xavier Guimard
b5c0ca94c4 CrowdSec plugin (#2451) 2021-02-19 07:40:36 +01:00
Christophe Maudoux
057cfb29e8 Improve code (#2458) 2021-02-18 23:35:25 +01:00
Maxime Besson
cceb6f767e Use a dedicated function for OIDC error reporting (#2465) 2021-02-18 22:06:39 +01:00
Christophe Maudoux
482d1102be Improve modal (#1976) 2021-02-17 22:37:22 +01:00
Christophe Maudoux
5f7981e256 Improve error message & unit test (#2458) 2021-02-16 22:04:38 +01:00
Christophe Maudoux
1757cf5337 Merge branch 'CheckDevOps-plugin' into 'v2.0' 
Check DevOps file plugin (#2458)

See merge request lemonldap-ng/lemonldap-ng!178
 2021-02-16 18:46:19 +00:00
Christophe Maudoux
d9a0034e7c Fix warning 2021-02-16 19:07:30 +01:00
Christophe Maudoux
21ba54ca74 Fix warning 2021-02-16 18:49:37 +01:00
Christophe Maudoux
c1951ce3fe Fix warning 2021-02-16 18:30:41 +01:00
Christophe Maudoux
67d8dccf25 Fix warning 2021-02-16 17:04:41 +01:00
Christophe Maudoux
12565ec173 Fix warning 2021-02-16 17:03:34 +01:00
Christophe Maudoux
35385b803d Fix warning 2021-02-16 16:35:23 +01:00
Christophe Maudoux
edf7a88114 Update 29-AuthGPG.t 2021-02-16 15:29:27 +01:00
Christophe Maudoux
071cfe68e2 Fix test 2021-02-16 14:56:59 +01:00
Christophe Maudoux
4583108068 Append download unit test (#2458) 2021-02-16 14:21:10 +01:00
Christophe Maudoux
1f66e03969 Append an option to download rules.json file from remote server (#2458) 2021-02-16 12:15:18 +01:00
Maxime Besson
31d0f26174 Clear hook list on configuration reload (#2463) 2021-02-15 15:13:53 +01:00
Christophe Maudoux
e477a1cef8 Append unit test & Doc (#2458) 2021-02-15 11:40:46 +01:00
Christophe Maudoux
110974cce4 Display rules (#2458) 2021-02-12 22:39:34 +01:00
Christophe Maudoux
60cbb6d5f2 Improve code (#2458) 2021-02-12 19:31:11 +01:00
Christophe Maudoux
3bee740125 display headers (#2458) 2021-02-12 19:25:55 +01:00
Christophe Maudoux
6e1efc8bb5 WIP: CheckDevOps plugin skeleton (#2458) 2021-02-12 18:11:37 +01:00
Maxime Besson
4408852d33 tidy 2021-02-12 18:10:53 +01:00
Maxime Besson
424cf91e88 Fix error message on missing template dir (#2460) 2021-02-12 18:10:53 +01:00
Christophe Maudoux
4515768513 Display explicit error message (#2329) 2021-02-10 22:27:12 +01:00
Christophe Maudoux
3e02682635 Update version 2021-02-09 23:06:36 +01:00
Xavier Guimard
830954d9ab Update polish translation 2021-02-09 18:23:39 +01:00
Maxime Besson
7db988b5a1 Improve some SAML error messages (#2349) 2021-02-08 11:50:24 +01:00
Christophe Maudoux
55071d5210 Keep old behavior if no JS (#1976) 2021-02-05 18:05:59 +01:00
Christophe Maudoux
6428cd0a0a fa icon (#1976) 2021-02-03 23:41:24 +01:00
Christophe Maudoux
e409a1b297 Use modal (#1976) 2021-02-03 23:35:48 +01:00
Maxime Besson
a1ed57c035 Add typ header to access token jwt (#2419) 2021-02-03 09:43:35 +01:00
Christophe Maudoux
635e75c1b6 Perl critic 2021-02-01 22:30:37 +01:00
Christophe Maudoux
d21747cea1 Typo (#1976) 2021-02-01 22:00:17 +01:00
Maxime Besson
1cd7dd3d2c Add hook for access token JWT payload (#2419) 2021-02-01 18:20:32 +01:00
Maxime Besson
857a336da2 Unit tests for JWT access tokens (#2419) 2021-02-01 18:20:32 +01:00
Maxime Besson
420fc72d63 Remove useless vars from OIDC tests 2021-02-01 18:20:32 +01:00
Maxime Besson
3fcea7eb1d Refactor OIDC unit tests 2021-02-01 18:20:32 +01:00
Maxime Besson
d86e8ce0df Refactor: remove extractJWT 2021-02-01 18:20:32 +01:00
Maxime Besson
cb04670003 Refactor checksignature 2021-02-01 18:20:32 +01:00
Maxime Besson
09dda56cb8 Refactor: rename method in issuer 2021-02-01 18:20:32 +01:00
Maxime Besson
d63017cffc Refactor: use new functions in Auth 2021-02-01 18:20:32 +01:00
Maxime Besson
cd3c2678db Refactor: rename variable 2021-02-01 18:20:32 +01:00
Maxime Besson
435ba82144 Refactor: rename and move getJWTJSONData 2021-02-01 18:20:32 +01:00
Maxime Besson
6aef1a6317 Refactor: getUserInfo now returns a hash 2021-02-01 18:20:32 +01:00
Maxime Besson
f3c97c22dc Refactor access token id lookup into Common::JWT 2021-02-01 18:20:32 +01:00
Maxime Besson
aa877cf0a3 Let newAccessToken emit JWT (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dc0bacd6f0 Accept Access Tokens in JWT format (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
acaaf1c749 Refactor buildUserInfo (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dbddddfba1 Refactor newAccessToken (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
5303b4fc3e Fix error format when sending an expired refresh token 2021-02-01 18:15:55 +01:00
Maxime Besson
090fad7475 Add warning when hook stack encounters error 2021-02-01 18:15:55 +01:00
Maxime Besson
4803024b3e Unit tests for #2424 2021-02-01 16:25:36 +01:00
Maxime Besson
4c1f49a90f Use dynamic scope in issuer (#2424) 2021-02-01 16:25:35 +01:00
Maxime Besson
5562d8b1dd Add a function to resolve allowed scopes from rules (#2424) 2021-02-01 16:25:35 +01:00
Maxime Besson
c30b452aa3 Load dynamic scopes from config (#2424) 2021-02-01 16:25:35 +01:00
Christophe Maudoux
8017725caa Code refactoring 2021-01-31 00:07:34 +01:00
Christophe Maudoux
ea80b4df0e Use Ajax request (#1976) 2021-01-30 23:22:03 +01:00
Clément OUDOT
d4ae146fd6 Update version in main modules 2021-01-30 18:32:52 +01:00
Christophe Maudoux
01721d5793 Append warning in log & code refactoring ("1976) 2021-01-30 18:22:13 +01:00
Maxime Besson
f8f892c741 Unit test for #2449 2021-01-29 09:45:50 +01:00
Maxime Besson
c844cc25b0 Fix SAML logout propagation with Redirect binding (#2449) 2021-01-29 09:45:50 +01:00
Xavier Guimard
7166a96c88 Add dependency to JSON::XS (Closes: #2442) 2021-01-29 06:31:23 +01:00
Maxime Besson
84684b3b5b Avoid loading plugins when their config is an empty hash (#2448) 2021-01-28 11:42:36 +01:00
Xavier Guimard
39518079d5 Clean "afterSub" and "aroundSub" during reload (#2448) 2021-01-27 17:30:54 +01:00
Xavier Guimard
4455f13976 Clean "afterSub" and "aroundSub" during init (#2448) 2021-01-27 15:28:34 +01:00
Maxime Besson
11a8615348 Fix unit test for #1987 2021-01-25 12:18:55 +01:00
Christophe Maudoux
d2e35df987 Test required select values & Append unit test (#1976) 2021-01-24 19:07:58 +01:00
Christophe Maudoux
54f41f10ea Test allowed select values (#19786) 2021-01-24 18:17:36 +01:00
Christophe Maudoux
3f1f5c880c Append bootstrap class (#1976) 2021-01-24 18:17:36 +01:00
Christophe Maudoux
24cec1e08f Fix warning 2021-01-23 23:27:46 +01:00
Christophe Maudoux
54b9e0d87b Sort values (#1976) 2021-01-23 23:20:50 +01:00
Christophe Maudoux
377fe4796c Update version (#1976) 2021-01-23 23:11:57 +01:00
Christophe Maudoux
1a3ea8685e Improve code (#1976) 2021-01-23 23:07:21 +01:00
Christophe Maudoux
7c3955b2aa Allow input type select with FindUser (#1976) 2021-01-23 23:00:23 +01:00
Christophe Maudoux
5d56a88ff3 Use strict & Typo 2021-01-23 18:57:24 +01:00
Christophe Maudoux
7d232b43fd Append unit Combination unit test (#1976) 2021-01-23 18:56:19 +01:00
Maxime Besson
ef3c0121e7 Fix random CI failures 2021-01-20 16:52:20 +01:00
Maxime Besson
0e5686a7db Unit test for #2445 2021-01-20 15:37:31 +01:00
Maxime Besson
51f3d66fee Fix extra lmAuth parameter with Choice+info (#2445) 2021-01-20 15:36:46 +01:00
Christophe Maudoux
d6e351ab90 Tidy 2021-01-19 22:45:05 +01:00
Christophe Maudoux
a8174d58a7 Typo 2021-01-19 22:24:17 +01:00
Maxime Besson
5b4e533f44 Add _scope and _clientID to portal (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
9463ad3fe5 Unit test for client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
25fb8ca0f0 Implement client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
5e439b2f24 Advertise client credentials grant (#1987) 2021-01-19 16:47:21 +01:00
Maxime Besson
dd5e9ec156 Tidy 2021-01-19 16:44:06 +01:00
Christophe Maudoux
aad6244997 Merge branch 'v2.0' into findUser 2021-01-18 12:05:04 +01:00
Clément OUDOT
85e141b016 Upate MANIFEST 2021-01-17 16:57:56 +01:00
Clément OUDOT
8663c0104c Update version in main modules for 2.0.10 2021-01-17 16:56:51 +01:00
Maxime Besson
4ba56d1d41 Add translations for #2438 2021-01-15 16:05:46 +01:00
Maxime Besson
3b3b6a4b25 Add modal warning on 2f remove to default theme (#2438) 2021-01-15 16:05:43 +01:00
Maxime Besson
6eaf31a5e4 Trigger removal of 2f on a specific dom class (#2438) 2021-01-15 16:05:11 +01:00
Christophe Maudoux
cd37ccc35c Merge branch 'v2.0' into findUser 2021-01-14 22:39:02 +01:00
Christophe Maudoux
f426064093 Comment no strict refs pragma (#2436) 2021-01-14 22:37:17 +01:00
Christophe Maudoux
f4ea214056 No strict refs (#2436) 2021-01-08 20:31:33 +01:00
Christophe Maudoux
7ebca3633c No strict refs (#2436) 2021-01-08 20:09:00 +01:00
Christophe Maudoux
e4444c907f Append CheckUser normalized headers option & Improve unit test (#2436) 2021-01-08 18:38:05 +01:00
Maxime Besson
6517718f26 Add an option to force getUser before LDAP password change (#714) 2021-01-08 15:09:19 +01:00
Maxime Besson
9d24e5f0d5 Fix logging (#714) 2021-01-07 18:49:58 +01:00
Christophe Maudoux
a93a85435d Improve debug msg 2021-01-07 10:04:15 +01:00
Christophe Maudoux
bd1a0bf6da Fix regex (#1976) 2021-01-07 09:54:00 +01:00
Christophe Maudoux
dae9455a19 Merge branch 'v2.0' into findUser 2021-01-06 23:11:56 +01:00
Christophe Maudoux
d14fae87ce Append conf test & REST init test & set default values (#2176) 2021-01-06 23:10:09 +01:00
Christophe Maudoux
a76bf37c29 Tidy (#1976) 2021-01-05 22:52:21 +01:00
Christophe Maudoux
39528ef1c3 Control parameters (#1976) & Improve unit tests 2021-01-05 22:46:35 +01:00
Christophe Maudoux
1c45e8a8c0 Merge branch 'v2.0' into findUser 2021-01-05 22:14:28 +01:00
Christophe Maudoux
846d6a3655 Allow wildcard with searching parameters (#1976) & Improve unit tests 2021-01-05 22:08:48 +01:00
Maxime Besson
127aa91a8f Merge branch 'feature-cas-service-url-2321' into 'v2.0' 
Feature cas service url 2321

See merge request lemonldap-ng/lemonldap-ng!175
 2021-01-05 18:49:24 +01:00
Maxime Besson
402a39a176 Merge branch 'feature-password-change-combination-714' into 'v2.0' 
Add Password::Combination

See merge request lemonldap-ng/lemonldap-ng!174
 2021-01-05 18:35:57 +01:00
Maxime Besson
7ffaa3f9ff Fix Twitter authentication when coming from Issuers (#2426) 2021-01-05 18:33:09 +01:00
Maxime Besson
723dcce62f Unit test for #2321 2021-01-05 17:42:40 +01:00
Maxime Besson
2a805e06b9 Match CAS service via prefix (#2331) 2021-01-05 17:34:57 +01:00
Maxime Besson
e78f8a2270 Refactor CAS code (#2321) 2021-01-05 17:34:57 +01:00
Maxime Besson
6b24492e33 Allow override of userDB in Password::Combination (#714,#716) 2021-01-04 21:31:34 +01:00
Maxime Besson
65939365a8 Unit test for #716 2021-01-04 21:31:34 +01:00
Maxime Besson
971dbf231e Unit test for #714 2021-01-04 21:31:34 +01:00
Maxime Besson
fa3129465b New Password::Combination module (#714,#716) 2021-01-04 21:31:34 +01:00
Maxime Besson
fdbe713e1f Unit test for #2430 2021-01-04 21:16:52 +01:00
Maxime Besson
5ed0677d35 Fix password update in session (#2430) 2021-01-04 21:16:52 +01:00
Christophe Maudoux
554daba5fe Allow multi-valued excluding parameters (#1976) 2021-01-04 20:23:42 +01:00
Christophe Maudoux
fc6ea96954 FindUser with combination (#1976) 2021-01-03 19:00:20 +01:00
Clément OUDOT
33a3a965c0 Force deletion of corrupted sessions in LDAP backends (#2404) 2021-01-03 18:50:50 +01:00
Clément OUDOT
f021df37e4 Force deletion of corrupted sessions in DBI backends (#2404) 2021-01-03 18:17:46 +01:00
Christophe Maudoux
50a35e7588 Improve unit test (#1976) 2021-01-02 23:08:56 +01:00
Christophe Maudoux
e1de8e34c2 Merge branch 'v2.0' into findUser 2021-01-02 22:55:45 +01:00
Christophe Maudoux
c2c02b4c86 Append REST UserDB unit test (#1976) 2021-01-02 22:50:56 +01:00
Christophe Maudoux
994ccfae30 Append REST findUser URL parameter (#1986) 2021-01-02 20:22:33 +01:00
Christophe Maudoux
de1be30176 Fix other Backend (#1976) 2021-01-02 19:21:16 +01:00
Christophe Maudoux
b075082970 REST Backend (#1976) 2021-01-02 18:59:30 +01:00