Clément OUDOT
fce270408e
Improve log in plugin GrantSession ( #1739 )
2019-05-06 19:10:26 +02:00
Clément OUDOT
755b1ace78
Add some debug in Ext2F ( #1738 )
2019-05-06 14:28:28 +02:00
Clément OUDOT
a7c8b9d466
Fix error handling in Ext2F ( #1738 )
2019-05-06 14:07:42 +02:00
Christophe Maudoux
c8dd4554aa
Test if required secret elements are set to sign JWT
2019-05-02 14:33:56 +02:00
Christophe Maudoux
f4938f3489
Grant access only if required Impersonation succeeds ( #1664 )
2019-04-30 14:57:45 +02:00
Christophe Maudoux
321fe29c35
Update version
2019-04-29 22:33:11 +02:00
Christophe Maudoux
2e9092d2bd
Clean code
2019-04-29 22:33:11 +02:00
Christophe Maudoux
a89b92f265
Improve code ( #1386 )
2019-04-29 22:33:11 +02:00
Christophe Maudoux
2e3c2e1a16
Sort by spoofed and real attributes ( #1658 )
2019-04-29 22:33:11 +02:00
Clément OUDOT
926262170b
Implement PKCE in OIDC provider ( #1722 )
2019-04-29 17:18:16 +02:00
Clément OUDOT
8e6f678be7
Create a configuration option to allow a Relying Party to be a public client
...
Allow unauthenticated requests on OAuth2 token endoint
#1725
2019-04-29 10:02:16 +02:00
Maxime Besson
2f9e6aa623
Allow override of username attribute for CAS apps
...
Global CAS options allows the admistrator to set the session attribute
that gets exported to all CAS application as the main identifier
(cas:user)
This commit adds the ability to override this configuration for a
particular CAS application.
OIDC already allows this
Fixes #1713
2019-04-28 21:06:34 +02:00
Maxime Besson
62f16721ff
Send username when calling CAS1.0 validation
...
Fixes #1724
2019-04-28 19:29:54 +02:00
Maxime Besson
64cc4ea0e6
Do not sent Kerberos js twice when using Combination
...
Fixes #1720
2019-04-25 17:17:03 +02:00
Christophe Maudoux
c86b76cb9c
Init. rules by using accessors ( #1658 )
2019-04-21 11:56:29 +02:00
maudoux
9b711e6c81
Update version
2019-04-13 22:57:30 +02:00
maudoux
cfa98b2723
Fix logo display
2019-04-13 21:02:47 +02:00
Clément OUDOT
259f9d8d94
Use same JSON fields for failure and success ( #1711 )
2019-04-13 15:23:40 +02:00
Clément OUDOT
9256571f25
Return session id with successful REST authentication ( #1711 )
2019-04-12 16:57:22 +02:00
maudoux
026fcd9f76
Fix warnings ( #1704 )
2019-04-10 22:14:46 +02:00
maudoux
1d08372a8c
Sort CAS servers & update langs ( #1704 )
2019-04-10 21:58:37 +02:00
Xavier
4a21e96426
Fix warning
2019-04-10 21:54:03 +02:00
Xavier
1bcf828a89
Merge remote-tracking branch 'arosier/idpsort' into v2.0
2019-04-10 19:48:26 +02:00
Antoine ROSIER
8875a4e985
perltidy
2019-04-10 17:21:33 +02:00
Antoine ROSIER
f7b296b032
Sorting OIDc ( #1704 )
2019-04-10 17:06:41 +02:00
Antoine ROSIER
8636da45be
Sorting SAML idp ( #1704 )
2019-04-10 17:06:41 +02:00
Clément OUDOT
ae3a728378
Manage template inclusion when file is not in configured portal theme ( #1653 )
2019-04-10 15:42:58 +02:00
Christophe Maudoux
413cc98fba
perltidy
2019-04-10 09:21:55 +02:00
Antoine ROSIER
6352dc6ac8
Sort idp and op ( #1704 )
2019-04-10 09:01:55 +02:00
Xavier
af707c5b1f
Clear pdata on lmerror access
2019-04-10 07:14:36 +02:00
maudoux
4ff20f2d76
Fix Yubikey userLogger ( #1702 )
2019-04-09 23:40:16 +02:00
Xavier
a187e5c59b
Fix some userLogger message ( #1702 )
2019-04-09 21:48:59 +02:00
Christophe Maudoux
f1cb8d236e
Checkuser case unsensitive for URL only & Improve unit test (1667)
2019-04-09 16:56:00 +02:00
maudoux
1bc519d11d
Fix warning ( #1694 )
2019-04-06 14:09:58 +02:00
Maxime Besson
666e59ad6e
Fix #1698 by clearing saml request token on unauth issuer flow
...
Add some unit tests to make sure relevant pdata is cleared after authentication
2019-04-05 23:27:21 +02:00
maudoux
c573ec9625
Typo & upadte version
2019-04-05 22:58:48 +02:00
maudoux
956d934a93
Append GPG authentication level ( #1699 )
2019-04-05 22:38:20 +02:00
maudoux
85551ba5e1
Append REST authentication level ( #1699 )
2019-04-05 22:38:01 +02:00
Christophe Maudoux
cf36b44162
Cleaning code ( #1664 )
2019-04-05 20:04:17 +02:00
Christophe Maudoux
dc1f36daf0
Use OTT rule ( #1664 )
2019-04-05 20:03:42 +02:00
Christophe Maudoux
f4801f3587
Use OTT rule ( #1664 )
2019-04-05 20:03:37 +02:00
Christophe Maudoux
01006fc984
Use OTT rule ( #1664 )
2019-04-05 20:03:25 +02:00
Christophe Maudoux
cb53973881
Use OTT rule ( #1694 )
2019-04-05 17:24:16 +02:00
Christophe Maudoux
5a8a7d483f
Use OTT rule ( #1694 )
2019-04-05 17:24:07 +02:00
Christophe Maudoux
2b818a9c02
Append specific ottRule dependency ( #1694 )
2019-04-05 17:23:09 +02:00
Xavier Guimard
10e8d51449
Fix Perl::Critic changes
2019-04-05 10:46:43 +02:00
Xavier Guimard
2159957c34
Update versions
2019-04-05 09:54:43 +02:00
maudoux
5b67f1f743
Use rule to enable OTT ( #1694 )
2019-04-03 23:28:45 +02:00
Clément OUDOT
8859fe342b
Fix setHiddenFormValue ( #1692 )
2019-04-03 17:54:58 +02:00
Clément OUDOT
8be0817363
Send optional SAML attributes if they have a value ( #1681 )
2019-04-03 16:40:41 +02:00
Xavier Guimard
ece9b21219
Remove trailing whitespaces
2019-04-03 14:15:16 +02:00
Xavier Guimard
141ba96c92
Update version
2019-04-03 13:53:56 +02:00
Clément OUDOT
9a454fbb7a
Manage SLO termination if there is no RelayState ( #1671 )
2019-04-03 12:26:01 +02:00
Maxime Besson
d44a042fd5
Revert 8f5fbb077e
and change the way logout errors are handled
...
Relating to issue #1668 , the proposed fix works when there is only one
service provider to logout of.
Now that multiple service provider logout is starting to work again on
2.0, we cannot read the remote_ProviderID from the logout object because
it is only filled by lasso when actually building the response.
Instead, we ignore any error that could occur when building the
response, log a warning and show the portal instead. Still better than
an internal server error.
2019-04-03 11:20:24 +02:00
maudoux
ae28ea3169
Append Conf domain to url if missing - Fix port ( #1664 )
2019-04-02 22:08:15 +02:00
maudoux
ec214c75c2
Append Conf domain to url if missing ( #1664 )
2019-04-02 22:08:15 +02:00
Clément OUDOT
a805a5a00b
Manage SLO responses ( #1671 )
2019-04-02 17:27:47 +02:00
Clément OUDOT
4e76ee9582
Avoid warning during SAML SLO ( #1671 )
2019-04-02 16:13:45 +02:00
Clément OUDOT
bac2eb564c
Remove antiframe protection in portal javascript ( #1696 )
2019-04-02 15:05:41 +02:00
Clément OUDOT
c4b4e95e9d
Display password or login template after password modification ( #1654 )
2019-04-02 11:12:33 +02:00
Clément OUDOT
4af47ad6a4
Allow iframe from portal to be able to load saml SLO return page ( #1671 )
2019-04-01 18:09:31 +02:00
Clément OUDOT
5a30a82fa6
Add SLO Termination endpoint ( #1671 )
2019-04-01 18:02:38 +02:00
Clément OUDOT
59bc0642fc
Always display info ( #1693 )
2019-04-01 17:18:28 +02:00
Clément OUDOT
502a32e257
Add unit test and fix code for ppolicy grace ( #1691 )
2019-04-01 09:58:56 +02:00
Xavier
01ab88ba57
Fix for #1691
2019-04-01 06:52:21 +02:00
Clément OUDOT
a1f5fb5170
Test return of getUser ( #1654 )
2019-03-29 11:53:52 +01:00
Xavier
906db8daa6
Merge branch 'antoinerosier/lemonldap-ng-logs' into v2.0
2019-03-27 21:44:25 +01:00
Antoine ROSIER
b79c9659cb
Add user logs informations ( #1687 )
2019-03-27 16:00:39 +01:00
Clément OUDOT
4bab684e2d
Refresh entry after password modification ( #1654 )
2019-03-27 09:59:22 +01:00
Xavier
5a5572ec1f
Fix WSDL generation ( Closes : #1686 )
2019-03-26 21:47:14 +01:00
Clément OUDOT
39020e003e
Fix server error on SAML SLO ( #1671 )
2019-03-26 17:15:01 +01:00
Clément OUDOT
aa139df89d
Change criticity of password must be reset message ( #1654 )
2019-03-26 16:45:19 +01:00
Xavier Guimard
af4f123916
Fix cspScrip ( Closes : #1683 )
2019-03-26 09:56:46 +01:00
Xavier Guimard
99afd7243a
Fix #1675
2019-03-26 08:06:55 +01:00
Xavier
f226bded41
Partial fix for /logout ( #1675 )
2019-03-26 07:30:36 +01:00
Xavier
774707ad65
Add cache to avoid parsing and compiling JSON files at each request ( #1595 )
2019-03-26 06:49:39 +01:00
Xavier Guimard
3c0a9d7ecc
Second fix for #1673
2019-03-25 19:34:29 +01:00
Xavier Guimard
4138b7edae
Fix menu app cache ( #1673 )
2019-03-25 16:48:57 +01:00
Maxime Besson
3575e0ef23
Clear url pdata on CDA redirection
...
Fixes #1650
2019-03-19 19:15:47 +01:00
Clément OUDOT
8a9a5b0b3a
New method to override messages with JSON files ( #1595 )
2019-03-19 17:39:13 +01:00
Clément OUDOT
447c09c0a2
Remove old translation file ( #1595 )
2019-03-19 15:38:36 +01:00
Clément OUDOT
438d5bcbaf
Revert patch on GrantSession plugin ( #1666 )
2019-03-18 21:35:02 +01:00
Clément OUDOT
4166ae6d90
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-03-18 21:29:31 +01:00
Clément OUDOT
9798c78068
Remove userData if authentication fails ( #1666 )
2019-03-18 21:29:15 +01:00
Christophe Maudoux
d412f3d807
Update version ( #1666 )
2019-03-18 17:14:22 +01:00
Clément OUDOT
4366488fb6
Adapt GrantSession plugin to display authentication error on login form ( #1666 )
2019-03-18 11:53:30 +01:00
Clément OUDOT
627548e95d
Display authentication error on login form ( #1666 )
2019-03-18 11:41:41 +01:00
Clément OUDOT
d620ae2e8b
Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0
2019-03-13 10:30:16 +01:00
Clément OUDOT
dee4818f0c
Merge branch 'issue1543' into 'v2.0'
...
Save Urldc when using SAML Discovery
See merge request lemonldap-ng/lemonldap-ng!62
2019-03-13 10:19:14 +01:00
Maxime Besson
8f5fbb077e
When logout-initiating SP has no known SLO endpoint, fallback to portal
...
In some federations, SLO endpoints are not published, yet SP are still
able to initiate logouts.
This used to cause an error on the portal, this commit changes the error
into a warning in logs. The user remains on the portal and sees a normal
logout message.
2019-03-12 17:58:41 +01:00
Clément OUDOT
f6a3b527c8
Process SAML request to get current SP in env ( #1672 )
2019-03-12 16:52:01 +01:00
Christophe Maudoux
e1aa654bbb
Display session at first access ( #1658 )
2019-03-12 10:00:23 +01:00
Christophe Maudoux
d39078f29b
Fix specific use cases with rules ( #1664 )
2019-03-11 22:07:38 +01:00
Maxime Besson
257d329151
Fix display of ok/nok image during multi-sp saml logout
2019-03-11 18:13:06 +01:00
Clément OUDOT
8cd579f19f
Add a waiting message for Kerberos/SSL workflow ( #1670 )
2019-03-11 16:36:32 +01:00
Clément OUDOT
145db1cf60
Fix regexp for portal default condition ( #1669 )
2019-03-11 12:01:16 +01:00
Christophe Maudoux
30c0f2edf0
Improve code ( #1658 )
2019-03-10 22:01:55 +01:00
Christophe Maudoux
be28b60e66
Append identities rule ( #1658 )
2019-03-09 23:29:10 +01:00
Christophe Maudoux
7e1119a88d
Fix mistake & typo ( #1664 )
2019-03-09 23:27:54 +01:00
Christophe Maudoux
bf8040a78a
Fix empty submitted value ( #1664 )
2019-03-09 21:31:49 +01:00
Christophe Maudoux
049df70e53
Erase sessionInfo if spoofed identity is not allowed ( #1664 )
2019-03-09 13:18:39 +01:00
Christophe Maudoux
dfd286c9fa
Compute spoofed session with real and spoofed attributes ( #1664 )
2019-03-09 13:05:44 +01:00
Christophe Maudoux
09281f8d22
Append identities rule and fix error catching ( #1664 )
2019-03-08 11:39:19 +01:00
Christophe Maudoux
bea84c8847
Typo ( #1664 )
2019-03-07 23:39:50 +01:00
Christophe Maudoux
b368925323
Typo ( #1658 )
2019-03-07 23:39:37 +01:00
Xavier Guimard
bc2bef4ff4
Please use our .perltidyrc
2019-03-07 18:22:58 +01:00
Xavier Guimard
c3f5960452
Improvements + API calls
...
@maudoux: could you review this?
2019-03-07 18:15:48 +01:00
Christophe Maudoux
a9b0298624
Fix using attributes ( #1658 )
2019-03-07 17:15:03 +01:00
Christophe Maudoux
cc04740252
Fix userControl ( #1667 )
2019-03-07 15:19:04 +01:00
Christophe Maudoux
ef4f1fb0bf
Fix test submitted user param ( #1667 )
2019-03-07 10:47:14 +01:00
Christophe Maudoux
e0204c6a79
Test submitted user param ( #1667 )
2019-03-06 23:08:22 +01:00
Christophe Maudoux
9225d49216
Allow Impersonation with all auth modules ( #1664 )
2019-03-06 22:31:37 +01:00
Christophe Maudoux
6e50f41687
Fix session update ( #1664 )
2019-03-06 21:29:03 +01:00
Christophe Maudoux
e506c5cc58
Using current session if exists ( #1664 )
2019-03-06 19:26:32 +01:00
Christophe Maudoux
a05f71789e
WIP - Fix groups merging ( #1664 )
2019-03-06 17:59:09 +01:00
Christophe Maudoux
8bc9e50947
WIP - Fix groups merging ( #1664 )
2019-03-06 17:58:40 +01:00
Christophe Maudoux
a31d26c608
Spoof Authentication and userDB modules ( #1664 )
2019-03-06 16:30:56 +01:00
Christophe Maudoux
7b08a7c442
Rename idSpoofing plugin to Impersonation & all relative parameters ( #1664 )
2019-03-06 16:30:56 +01:00
Xavier Guimard
26b80873be
Modify Try.pm to handle authorizations ( #1658 )
2019-03-05 21:11:07 +01:00
Christophe Maudoux
4be42b06fe
Alow DNS or URL ( #1658 )
2019-03-05 19:36:38 +01:00
Christophe Maudoux
e7d1b065b7
Merge SSO groups ( #1664 )
2019-03-05 14:50:30 +01:00
Christophe Maudoux
ff05a8f797
Modify parameters ( #1664 )
2019-03-05 14:50:01 +01:00
Christophe Maudoux
c7ddae854c
Fix error & not found VH ( #1664 )
2019-03-04 20:53:39 +01:00
Maxime Besson
e290cd59d6
Fix undef warnings in metadata generation
...
Fix some undef warnings introduced in
12d2db35a9
2019-03-04 09:33:12 +01:00
Maxime Besson
25d1c45fd4
Add new option to override EntityID when acting as IDP
2019-03-04 09:33:10 +01:00
Christophe Maudoux
4e51cc342b
Append access rule ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
286f5b79e3
WIP - Append debug logs ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
228a37c0d2
WIP - Append parameters ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
f9db9a0258
WIP - Append conf. parameters ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
3bb7f6e664
WIP - Create session ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
a41b5fb945
Fix OTT & minor improvements ( #1658 )
2019-03-02 11:45:59 +01:00
Christophe Maudoux
a4af486181
Typo ( #1658 )
2019-03-01 21:46:05 +01:00
Christophe Maudoux
0cd3c12503
Fix error ( #1658 )
2019-03-01 14:07:26 +01:00
Christophe Maudoux
81a37e5bcc
Dispatching attributes ( #1658 )
2019-03-01 12:36:37 +01:00
Christophe Maudoux
4fe1473f9a
Check access rules ( #1658 )
2019-02-28 21:59:59 +01:00
Maxime Besson
4a2fecaa7a
Save Urldc when using SAML Discovery
...
Fixes #1543
2019-02-28 17:51:50 +01:00
Clément OUDOT
d8a8832f4c
Restore old login history ( #1656 )
2019-02-28 17:40:15 +01:00
Clément OUDOT
b3f917ac5a
Improve log in updateSession ( #1656 )
2019-02-28 16:51:16 +01:00
dcoutadeur
3af15b139e
fix id_token validity not correctly evaluated #1662
2019-02-28 09:56:21 +01:00
Maxime Besson
12d2db35a9
Add new URLs for SP-only or IDP-only SAML metadata
...
This commit adds two new URLs:
/saml/metadata/idp : IDP-only metadata
/saml/metadata/sp : SP-only metadata
/saml/metadata keeps providing metadata for all SAML services
2019-02-27 18:14:30 +01:00
Christophe Maudoux
36200c32c5
Improve display ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
cc99cec73a
Improve code ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
212be23313
Improve checkUser display ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
70a5c645d8
Improve checkUser display ( #1658 )
2019-02-25 23:34:58 +01:00
Christophe Maudoux
3f9957ee6c
Fix log msg ( #1658 )
2019-02-25 22:25:25 +01:00
Christophe Maudoux
f702664409
WIP - checkUser Improve code ( #1658 )
2019-02-25 20:11:32 +01:00
Christophe Maudoux
f0684f6c24
WIP - checkUser use OTT ( #1658 )
2019-02-25 10:58:06 +01:00
Christophe Maudoux
0f04629ed1
WIP - checkUser prepare conf ( #1658 )
2019-02-24 22:47:39 +01:00
Christophe Maudoux
e22a2835d1
WIP - checkUser replace 'each' loop ;-) ( #1658 )
2019-02-24 22:31:04 +01:00
Christophe Maudoux
ba2ab0c4a2
WIP - checkUser display transmitted headers ( #1658 )
2019-02-24 22:10:45 +01:00
Christophe Maudoux
557539805a
WIP - checkUser hide secret attributes ( #1658 )
2019-02-23 23:24:13 +01:00
Christophe Maudoux
30148caf2d
WIP - checkUser hide secret attributes ( #1658 )
2019-02-23 23:02:42 +01:00
Christophe Maudoux
c3255e1ed8
WIP - checkUser prepare loop ( #1658 )
2019-02-23 20:39:53 +01:00
Christophe Maudoux
0c0b3dd069
WIP - checkUser test access ( #1658 )
2019-02-23 11:19:40 +01:00
Christophe Maudoux
697882bd45
WIP - checkUser plugin skeleton ( #1658 )
2019-02-23 09:35:43 +01:00
Christophe Maudoux
00fae442e9
Update version ( #1595 )
2019-02-21 16:33:12 +01:00
Christophe Maudoux
b57a0788c2
Check JSON structure ( #1595 )
2019-02-21 16:25:02 +01:00
Christophe Maudoux
9fafa1d8d5
Override msg with local json files ( #1595 )
2019-02-20 23:22:56 +01:00
Christophe Maudoux
28caeea3c2
Partial revert ( #1595 )
2019-02-19 20:10:41 +01:00
Christophe Maudoux
62167a41f1
Load Portal despite translation file does not exist ( #1595 )
2019-02-19 17:27:28 +01:00
Christophe Maudoux
063c0f0d1b
Partial revert - Modify Portal side is more consistent ( #1653 )
2019-02-18 20:39:47 +01:00
Christophe Maudoux
9679a67163
Tidy ( #1632 )
2019-02-16 22:42:08 +01:00
Christophe Maudoux
7802cbcc71
Optionaly let Ext2F module handle code generation ( #1632 )
2019-02-16 21:59:53 +01:00
Christophe Maudoux
90ddec7ce0
WIP - Optionaly let Ext2F module handle code generation ( #1632 )
2019-02-14 22:43:38 +01:00
Christophe Maudoux
60e80fe1b1
Improve code ( #1629 )
2019-02-14 22:41:58 +01:00
Christophe Maudoux
0690a0c7ab
Improve code ( #1625 )
2019-02-14 22:12:40 +01:00
Christophe Maudoux
9274c54f20
Disable Portal cache ( #1651 )
2019-02-13 22:35:23 +01:00
Xavier Guimard
3069887a52
Call PasswordDB::LDAP if unauth user requests changing password ( #1639 )
2019-02-11 15:40:27 +01:00
Clément OUDOT
ad10dc539d
Use ldapAuthnLevel and dbiAuthnLevel in portal ( #1648 )
2019-02-11 11:55:51 +01:00
Christophe Maudoux
46f2beb10a
Typo & perltidy ( #1629 )
2019-02-10 22:47:56 +01:00
Christophe Maudoux
b777007ff6
Override msg by reading a file ( #1595 )
2019-02-09 22:38:13 +01:00
Christophe Maudoux
94574f2f19
Override msg by reading a file ( #1595 )
2019-02-09 20:48:46 +01:00
Clément OUDOT
5f800003fd
Add security token when forcing password reset ( #1639 )
2019-02-08 10:46:06 +01:00
Christophe Maudoux
29c4a44975
Update version ( #1625 )
2019-02-07 17:22:14 +01:00
Christophe Maudoux
8b995f55bf
Restore OpenID activation global rule & Improve unit test ( #1625 )
2019-02-07 17:21:14 +01:00
Christophe Maudoux
b1048043e9
Restore GET activation global rule & Improve unit test ( #1625 )
2019-02-07 17:16:29 +01:00
Xavier Guimard
c7b4eb5051
tidy with new conf
2019-02-07 09:27:56 +01:00
Christophe Maudoux
9cfef329ee
Append PE_ERROR constants ( #1625 )
2019-02-06 23:10:43 +01:00
Christophe Maudoux
5055b18087
Restore OIDC activation global rule ( #1625 ) & Improve unit test
2019-02-06 23:10:10 +01:00
Christophe Maudoux
b36db9706e
Restore SAML activation global rule ( #1625 )
2019-02-06 22:55:23 +01:00
Christophe Maudoux
f8144bc108
Typo ( #1625 )
2019-02-06 22:54:15 +01:00
Christophe Maudoux
007a5432f9
Restore CAS activation global rule ( #1625 )
2019-02-06 22:16:34 +01:00
Xavier Guimard
58fc9c2fad
Update versions
2019-02-06 19:30:57 +01:00
Clément OUDOT
0fe2fc1d37
Bypass error screen for LDAP password reset ( #1639 )
2019-02-06 18:33:42 +01:00
Clément OUDOT
121e2542ae
Do not disconnect from LDAP if password modification fails ( #1644 )
2019-02-06 18:00:59 +01:00
Xavier Guimard
747ee78dfd
Improve authenticate() rejection ( #1639 )
2019-02-06 15:36:45 +01:00
Christophe Maudoux
931458ad9b
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-02-06 13:20:41 +01:00
Christophe Maudoux
a994e71345
Update code ( #1628 )
2019-02-06 13:20:35 +01:00
Clément OUDOT
8b76218025
Fix error message for ppolicy ( #1639 )
2019-02-06 11:39:37 +01:00
Christophe Maudoux
70994bd7db
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-02-05 23:37:46 +01:00
Christophe Maudoux
24e58fafc9
Improve unit test ( #1637 )
2019-02-05 23:32:55 +01:00
Xavier Guimard
5886cbe2a0
Tidy
2019-02-05 23:12:17 +01:00
Xavier Guimard
e2b026b7c8
Fix versions
2019-02-05 23:06:18 +01:00
Christophe Maudoux
21206099ce
Append display options for SAML IDP ( #1637 )
2019-02-05 22:39:09 +01:00
Xavier Guimard
0528f78dad
Merge branch 'v2.0'
2019-02-05 19:09:42 +01:00
Xavier Guimard
f8942d156d
Override templateDir before calling sendHtml ( fixes : #1642 )
2019-02-05 19:04:06 +01:00
Xavier Guimard
24ef6d3905
Revert "Override templateDir before calling sendHtml ( #1642 )"
...
This reverts commit 0466bf2784
.
2019-02-05 19:00:01 +01:00
Clément OUDOT
c77783eb2f
Merge branch 'v2.0'
2019-02-05 18:46:40 +01:00
Clément OUDOT
0466bf2784
Override templateDir before calling sendHtml ( #1642 )
2019-02-05 18:46:14 +01:00
Xavier Guimard
0ddcaa5dc9
Update versions
2019-02-05 18:44:38 +01:00
Clément OUDOT
8ca60a9238
Do not set portal background in CSS if no value is configured ( #1643 )
2019-02-05 18:39:43 +01:00
Xavier Guimard
4934eb92f8
Merge branch 'v2.0'
2019-02-05 11:28:32 +01:00
Clément OUDOT
cb33dba014
Fix AD attributes read ( #1639 )
2019-02-05 10:43:17 +01:00
Clément OUDOT
93d52bce27
Update module version ( #1639 )
2019-02-05 10:42:48 +01:00
Clément OUDOT
3d5969f9d6
Fix AD attributes read ( #1639 )
2019-02-05 10:42:07 +01:00
Christophe Maudoux
b39e6ce99f
WIP - Append relative parameters ( #1637 )
2019-02-04 23:13:54 +01:00
Christophe Maudoux
37cb923422
Fix error msg ( #1628 )
2019-02-04 19:15:58 +01:00
Christophe Maudoux
5ccb86dc77
Tidy ( #1628 )
2019-02-04 19:15:21 +01:00
Christophe Maudoux
6a732ba2eb
Cleaning code ( #1628 )
2019-02-04 18:59:37 +01:00
Christophe Maudoux
8c409fc51d
Fix error msg & Improve unit test ( #1628 )
2019-02-04 17:40:18 +01:00
Christophe Maudoux
9fa7f58c76
Cleaning code ( #1636 )
2019-02-04 17:38:14 +01:00
Christophe Maudoux
b70d8ea673
Revert "Catch error msg if Id doesn t exist ( #1628 )"
...
This reverts commit 8b9c47d6eb
2019-02-04 13:02:29 +01:00
Christophe Maudoux
8b9c47d6eb
Catch error msg if Id doesn t exist ( #1628 )
2019-02-04 12:58:30 +01:00
Xavier Guimard
c5a3687040
Merge remote-tracking branch 'max/fix-redir' into v2.0
2019-02-03 22:48:43 +01:00
Christophe Maudoux
fcac69fe7a
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-02-03 20:05:40 +01:00
Christophe Maudoux
153084118f
Fix SSL/Kerberos Auth with Choice & Improve unit tests ( #1636 )
2019-02-03 20:05:28 +01:00
Christophe Maudoux
d70d7e11a9
Fix warning mgs
2019-02-03 20:05:14 +01:00
Maxime Besson
f35a7c305a
Add Mail second factor plugin
2019-02-03 14:46:40 +01:00
Maxime Besson
faa748f68f
Add Mail second factor plugin
2019-02-03 14:43:44 +01:00
Christophe Maudoux
3021e998a7
Fix SSL/Kerberos Auth with Choice ( #1636 )
2019-02-03 00:17:53 +01:00
Christophe Maudoux
9987d28ac3
Fix SSL/Kerberos Auth with Choice & Improve unit tests ( #1636 )
2019-02-02 21:31:37 +01:00
Christophe Maudoux
dba550b6a9
Fix SSL/Kerberos Auth with Choice ( #1636 )
2019-02-02 19:06:18 +01:00
Christophe Maudoux
7fb6923fda
Delete unused constant
2019-02-02 19:04:59 +01:00
Christophe Maudoux
f648bddcc6
Improve code ( #1636 )
2019-02-02 17:34:44 +01:00
Clément OUDOT
ed7eeeba88
Use an option to decode group searched value ( #1601 )
2019-02-02 15:54:30 +01:00
Clément OUDOT
0fc2e92136
Use an option to decode group searched value ( #1601 )
2019-02-02 10:48:55 +01:00
Christophe Maudoux
e7a9bd0652
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-02-02 00:00:53 +01:00
Christophe Maudoux
832d7d87c8
Fix AuthSSL with Choice ( #1636 )
2019-02-01 23:54:20 +01:00
Christophe Maudoux
30200f130d
Fix AuthSSL with Choice ( #1636 )
2019-02-01 23:41:58 +01:00
Xavier Guimard
22a54210dd
Merge branch 'fix-plaintext-email' into 'master'
...
Fix plaintext email
See merge request lemonldap-ng/lemonldap-ng!53
2019-02-01 15:37:00 +01:00
Xavier Guimard
c77317fef7
Update versions
2019-01-31 23:20:57 +01:00
Xavier Guimard
c60ba130b8
Replace rand() by Crypt::URandom::urandom()
2019-01-31 23:16:52 +01:00
Clément OUDOT
b63dd14746
Update module version ( #1634 )
2019-01-31 15:40:54 +01:00
Clément OUDOT
059d5320cb
Clean code that manages templates parameters ( #1634 , #1631 )
2019-01-31 15:38:58 +01:00
Clément OUDOT
d7c252d554
Allow to display env in password reset and register templates ( #1631 )
2019-01-31 14:22:15 +01:00
Clément OUDOT
efb7f667c4
Allow to display env in main templates ( #1631 )
2019-01-31 14:05:24 +01:00
Maxime Besson
6890b290b1
Fix plaintext email
...
For the few of us who like plain text email better.
Before this commit, the mail body would not be correctly pulled from
config, and then the portal would error 500 due to MIME::Entity objects
not having an "attr" accessor, unlike the previously used MIME::Lite
objects
2019-01-30 12:06:05 +01:00
Christophe Maudoux
96b93a56c1
Partial revert rename parameters ( #1605 )
2019-01-24 19:45:43 +01:00
Christophe Maudoux
a69d19c2c0
Cleaning useless code
2019-01-23 22:47:42 +01:00
Christophe Maudoux
4ec3255989
Fix version
2019-01-22 22:08:43 +01:00
Christophe Maudoux
7b14c74077
perltidy ( #1622 )
2019-01-22 20:57:22 +01:00
Christophe Maudoux
6f7defef18
Display delete button only if allowed ( #1622 )
2019-01-22 20:55:57 +01:00
Christophe Maudoux
1de19778fe
Display delete button only if allowed ( #1622 )
2019-01-22 19:31:37 +01:00
Christophe Maudoux
f2e481d693
Display delete button only if allowed ( #1622 )
2019-01-21 21:31:41 +01:00
Christophe Maudoux
33ebe9178b
Split mailReset plugin and SMTP parameters ( #1616 )
2019-01-19 17:08:15 +01:00
Christophe Maudoux
ce809fc80c
Improve manager tree ( #1616 )
2019-01-19 14:27:00 +01:00
Christophe Maudoux
8029357dd3
WIP - Split mailReset plugin and SMTP parameters ( #1605 )
2019-01-17 19:40:31 +01:00
Christophe Maudoux
b486735d46
WIP - Split mailReset plugin and SMTP parameters ( #1616 )
2019-01-16 22:57:35 +01:00
Clément OUDOT
3c3b8eccb7
Remove utf8 decode for menu ( #1614 )
2019-01-15 22:42:42 +01:00
Xavier Guimard
2ab385e2df
Update versions
2019-01-09 13:42:30 +01:00
Christophe Maudoux
0a906243e5
Improve code
2019-01-06 22:28:25 +01:00
Christophe Maudoux
49655091a6
Fix lang for Ubuntu
2018-12-30 16:47:59 +01:00
Christophe Maudoux
c3bc80688e
Revert "Fix AuthGPG for frenchies ;-)"
...
This reverts commit 245913da50
2018-12-26 23:22:25 +01:00
Christophe Maudoux
245913da50
Fix AuthGPG for frenchies ;-)
2018-12-26 23:16:14 +01:00
Christophe Maudoux
e2ff00bbad
MISTAKE - Partial revert - Restore v2.0 version
2018-12-26 22:12:25 +01:00
Christophe Maudoux
840c2f259b
Improve Protractor e2e tests ( #1600 )
2018-12-26 21:01:53 +01:00
Xavier Guimard
54539e97d9
Add aroundSub entrypoint
2018-12-21 16:07:28 +01:00
Xavier Guimard
06431d71f5
New endpoint: afterSub
2018-12-21 16:07:28 +01:00
Xavier Guimard
1e3ab69be3
Add minimal Auth::GPG
2018-12-21 16:07:28 +01:00
Clément OUDOT
7c236be247
Refresh security token when mail is not found ( #1589 )
2018-12-21 15:02:55 +01:00
Clément OUDOT
7d290a562d
Require captcha in resend mail screen ( #1589 )
2018-12-21 14:59:34 +01:00
Clément OUDOT
1a2de167d1
Reject invalid OIDC scopes ( #1599 )
2018-12-21 14:32:01 +01:00
Xavier Guimard
c6ff9dcf0b
Display error if a plugin sets it ( #595 )
2018-12-21 11:26:11 +01:00
Xavier Guimard
eb1f94bcba
Fix version
2018-12-21 08:17:20 +01:00
Clément OUDOT
2a138ced29
Downgrade DN when searching groups ( #1573 )
2018-12-20 17:56:10 +01:00
Christophe Maudoux
d3be4b00c4
Revert "Fix resendconfirmation ( #1589 )"
...
This reverts commit d576702e78
2018-12-20 09:19:27 +01:00
Xavier Guimard
76927ef053
Move TROVER into sendHtml() ( #1586 )
2018-12-19 23:28:40 +01:00
Christophe Maudoux
0d5287cfdc
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-12-19 22:22:53 +01:00
Christophe Maudoux
d576702e78
Fix resendconfirmation ( #1589 )
2018-12-19 22:22:40 +01:00
Christophe Maudoux
633db01d3a
Typo ( #1589 )
2018-12-18 22:38:58 +01:00
Xavier Guimard
9ebc18ca5d
Update version
2018-12-18 13:13:15 +01:00
Christophe Maudoux
607442a2cd
Cleaning code #1587
2018-12-17 23:04:24 +01:00
Christophe Maudoux
4af167ff9b
WIP - Display error if mail already exists ( #1587 )
2018-12-17 22:45:37 +01:00
Christophe Maudoux
e15631e32c
Fix warning msg ( #1587 )
2018-12-17 22:01:54 +01:00
Christophe Maudoux
8da5cd17c7
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-12-17 21:31:45 +01:00
Christophe Maudoux
9f6a992390
Fix staticPrefix param
2018-12-17 21:31:38 +01:00
Xavier Guimard
3cd14656f5
Add "all" trOver in mails ( Fixes : #1586 )
2018-12-17 21:09:24 +01:00
Xavier Guimard
dc0e173cf2
Fix #1588
2018-12-17 19:34:28 +01:00
Xavier Guimard
bda42738ee
Fix warning
2018-12-17 19:34:06 +01:00
Xavier Guimard
843e18c64e
Initialize user() in $req ( #1591 )
2018-12-17 18:44:12 +01:00
Clément OUDOT
5aad03fdb9
New custom parameter (customMenuTabs) to allow display of custom tab ( #1596 )
2018-12-17 18:27:31 +01:00
Clément OUDOT
a3c982f470
Add oidcConsents in menu tabs list ( #1593 )
2018-12-17 15:16:01 +01:00
Clément OUDOT
124169fc66
Fix code to select tab in menu ( #1592 )
2018-12-17 15:09:01 +01:00
Clément OUDOT
28208a5f2d
Allow mail template message override ( #1586 )
2018-12-17 11:50:40 +01:00
Christophe Maudoux
658a7a88c0
Append show_lang and main_logo parameters & Fix URL typo ( #1585 )
2018-12-15 16:05:48 +01:00
Christophe Maudoux
aa45cf148a
Append bruteForce Protection number of allowed failed Login parameter ( #1506 )
2018-12-12 23:51:33 +01:00
Christophe Maudoux
caa408b424
Typo
2018-12-11 22:51:39 +01:00
Christophe Maudoux
185b3114a3
Append authLogout function to Auth::SSL.pm ( #1564 )
2018-12-01 16:05:29 +01:00
Xavier Guimard
f6f1072ef6
Fix double init ( #1550 )
2018-11-29 21:19:39 +01:00
Clément OUDOT
f41d92ac5e
Remove choice data in logout ( #1555 )
2018-11-28 11:37:21 +01:00
Xavier Guimard
11857d9f8a
make tidy
2018-11-26 14:40:21 +01:00
Xavier Guimard
81a364cc70
May solve #1555
2018-11-26 14:34:43 +01:00
Christophe Maudoux
ef5b4bcc36
Improve code ;-) ( #1550 )
2018-11-25 20:50:12 +01:00
Clément OUDOT
9861799814
Restore portalRequireOldPassword value ( #1554 )
2018-11-24 12:01:31 +01:00
Clément OUDOT
8552c9c5f2
tidy code ( #1554 )
2018-11-24 12:00:41 +01:00
Christophe Maudoux
3167aaeeb0
Avoid warning msg
2018-11-23 23:10:01 +01:00
Christophe Maudoux
217e4c43f3
Fix display ( #1550 )
2018-11-23 22:08:06 +01:00
Christophe Maudoux
e62597546e
WIP - Fix call Custom with Choice ( #1550 )
2018-11-22 19:59:43 +01:00
Christophe Maudoux
448f39ff1c
Fix return value ( #1550 )
2018-11-21 20:58:42 +01:00
Xavier Guimard
685426348a
Check pwdnew=pwdconfirm even if old pwd is not required
...
Closes : #1547
2018-11-19 18:50:35 +01:00
Christophe Maudoux
8217c4c567
Display form again when an error occures ( #1508 )
2018-11-16 22:03:06 +01:00
Xavier Guimard
642e98e180
Fix some missing "lazy" ( #1545 )
2018-11-16 17:30:57 +01:00
Xavier Guimard
69cdd66444
Password::Choice wasn't called ( #1508 #1517 )
2018-11-16 15:08:27 +01:00
Christophe Maudoux
0f4046ce26
perltidy ( #1508 )
2018-11-15 21:20:06 +01:00
Christophe Maudoux
72b42a516f
Append reset password retries number parameter ( #1508 )
2018-11-15 21:16:46 +01:00
Christophe Maudoux
b1747a95df
Display form again when an error occures ( #1508 )
2018-11-15 19:26:16 +01:00
Christophe Maudoux
e9c2ade53c
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-11-15 19:20:20 +01:00
Christophe Maudoux
c319ce47c3
Display form again when an error occures ( #1508 )
2018-11-15 19:19:20 +01:00
Clément OUDOT
e62d865a28
Put session data in templates ( #1542 )
2018-11-15 11:41:06 +01:00
Clément OUDOT
584b79f30c
Avoid warning if user not defined in log message ( #1508 )
2018-11-14 11:05:05 +01:00
Clément OUDOT
356a588a92
Fix DN encoding issue in LDAP password modification ( #1540 )
2018-11-14 10:15:28 +01:00
Christophe Maudoux
c0a9a726f3
WIP - Display form again when an error occures ( #1508 )
2018-11-13 23:29:28 +01:00
Xavier Guimard
e317d180b9
Fix MailReset for DBI ( #1508 )
...
Same todo with other Password::* backends
2018-11-13 11:30:45 +01:00
Xavier Guimard
e966399cc0
Typo ( #1508 )
2018-11-13 08:27:53 +01:00
Xavier Guimard
61eb91b7aa
Store pdata in mailToken ( #1508 )
2018-11-13 06:53:21 +01:00
Christophe Maudoux
16fd5c53a7
Append manager option to enable langs display ( #1539 )
2018-11-07 20:50:33 +01:00
Christophe Maudoux
87c85c5b01
Append manager option to enable langs display ( #1539 )
2018-11-07 20:10:31 +01:00
Christophe Maudoux
6d7c50ce6d
Improve Login History display ( #1501 )
2018-11-06 21:34:48 +01:00
Christophe Maudoux
4e53ee31c0
Fix badcredentials display - Improve code ( #1536 )
2018-11-06 19:49:57 +01:00
Christophe Maudoux
ee40242039
Fix badcredentials display ( #1536 )
2018-11-06 13:43:07 +01:00
Christophe Maudoux
824ab9a70f
Return PE_OK to process $req next step ( #1536 )
2018-11-06 09:37:40 +01:00
Christophe Maudoux
490d3eb180
Revert "Fix badcredentials display ( #1536 )"
...
This reverts commit 48c5ccc34f
2018-11-06 09:15:59 +01:00
Christophe Maudoux
48c5ccc34f
Fix badcredentials display ( #1536 )
2018-11-05 22:41:17 +01:00
Christophe Maudoux
29dec806c0
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-10-31 22:46:09 +01:00
Christophe Maudoux
1e17506ee1
Fix warning msg ( #1532 )
2018-10-31 22:46:03 +01:00
Clément OUDOT
d577fb8ede
Store ipAddr in env ( #1534 )
2018-10-31 17:58:46 +01:00
Christophe Maudoux
61a12a149f
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-10-30 20:32:29 +01:00
Christophe Maudoux
3211236904
Set default formAction CSP ( #1499 )
2018-10-30 20:32:20 +01:00
Christophe Maudoux
304216bd52
Improve code ( #1533 )
2018-10-30 19:42:54 +01:00
Christophe Maudoux
3ac5f0f02b
Update Choice.pm
2018-10-30 07:44:04 +01:00
Christophe Maudoux
93d16407e6
Fix debug messages ( #1533 )
2018-10-29 23:25:19 +01:00
Christophe Maudoux
78423bf151
Update persistent session only if oidcConsents are converted ( #1533 )
2018-10-29 23:10:34 +01:00
Christophe Maudoux
37c6498e3c
Avoid append same URL ( #1532 )
2018-10-29 22:14:51 +01:00
Christophe Maudoux
52a7f884f6
Append URL test ( #1532 )
2018-10-29 22:10:49 +01:00
Clément OUDOT
badc7a0cad
Add AD password module ( #1530 )
2018-10-29 18:35:25 +01:00
Clément OUDOT
4038bbb798
Fix call to returnCasServiceValidateError
2018-10-29 08:10:01 +01:00
Clément OUDOT
0839c9e3fd
Clear pdata when redirecting in CAS gateway mode ( #1528 )
2018-10-29 07:45:57 +01:00
Clément OUDOT
9f4311105f
Force continue to replay SAML authentication ( #1513 )
2018-10-28 13:26:50 +01:00
Christophe Maudoux
aaaa8f54f5
Append debug messages & Fix issue ( #1509 )
2018-10-23 21:35:44 +02:00
Christophe Maudoux
8ba4d112cc
Append debug messages ( #1509 )
2018-10-22 22:40:20 +02:00
Christophe Maudoux
14391d07d1
Append debug messages ( #1509 )
2018-10-22 22:28:37 +02:00
Clément OUDOT
7690a56843
Put simple values in buil_urlencoded args ( #1527 )
2018-10-19 11:29:11 +02:00
Christophe Maudoux
4df8ce2c0e
Set formAction CSP from Manager ( #1499 )
2018-10-18 19:51:50 +02:00
Xavier Guimard
f92a925fee
Restore custom messages ( #1518 )
2018-10-17 10:49:30 +02:00
Clément OUDOT
30b7ce6396
Use main logo in mails ( #1515 )
2018-10-17 10:43:41 +02:00
Clément OUDOT
3445b697c0
Set authChoice in request data ( #1524 )
2018-10-16 17:25:43 +02:00
Clément OUDOT
ce24a05168
Test if Choice condition is not empty ( #1500 )
2018-10-16 15:10:30 +02:00
Clément OUDOT
ba630d5117
Test if Choice condition is not empty ( #1500 )
2018-10-16 15:07:56 +02:00
Christophe Maudoux
c031e63f5e
Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng
2018-10-15 21:14:33 +02:00
Christophe Maudoux
05f207927f
Fix syntax error ( #1522 )
2018-10-15 21:06:08 +02:00