Commit Graph

588 Commits

Author SHA1 Message Date
Christophe Maudoux
763eb04b4b Update tree (#2178) 2020-04-27 20:39:02 +02:00
Maxime Besson
7e502af391 Add option to remove "Refresh my rights" from menu 2020-04-27 17:19:41 +02:00
Maxime Besson
00e9e2ec57 Add manager option for additional audiences (#2177) 2020-04-24 11:10:44 +02:00
Christophe Maudoux
6018610196 Make checkUser option rules (#2173) 2020-04-24 00:25:10 +02:00
Maxime Besson
64d023b731 Add manager option for password grant (#2155) 2020-04-23 17:49:25 +02:00
Maxime Besson
42b650247b Change singleSession options to allow a rule (#2164) 2020-04-22 11:02:59 +02:00
Maxime Besson
51e1d3651e Remove unused singleSessionUserByIP option (#2159) 2020-04-21 10:17:44 +02:00
Clément OUDOT
8a5a93d6ac Fix GitHub parameters in Manager (#2154) 2020-04-18 00:26:24 +02:00
Clément OUDOT
a5eadc49d3 Add GitHub parameters in Manager (#2154) 2020-04-18 00:08:43 +02:00
Christophe Maudoux
c83f5c203f Make json 2020-04-15 23:25:57 +02:00
Maxime Besson
4bcb391121 Add an easy way to set level of additional second factors (#2149) 2020-04-15 17:20:27 +02:00
Christophe Maudoux
30f6a889de Append contextSwitching prefix parameter (#1783) 2020-04-03 23:09:55 +02:00
Christophe Maudoux
71ba189edc Append special characters password policy (#2130) 2020-04-02 12:14:05 +02:00
Christophe Maudoux
b924b96176 WIP - Append PP special characters options (#2130) 2020-04-02 01:03:42 +02:00
Christophe Maudoux
3ec85e6775 Re-order SAML options 2020-03-02 23:06:38 +01:00
Christophe Maudoux
8753cc4cf6 Option to hide empty headers with CheckUser (#2106) 2020-02-28 22:24:13 +01:00
Christophe Maudoux
e89c017ff6 Increase lock time after each failed login attempt (#2088) 2020-02-24 22:20:40 +01:00
Christophe Maudoux
53d7923cd4 WIP - Increase lock time after each failed login attempt (#2088) 2020-02-23 23:19:32 +01:00
Xavier Guimard
4459a47f76 Tidy 2020-02-20 23:37:05 +01:00
Xavier Guimard
a76cba3856 Update versions 2020-02-20 23:37:01 +01:00
Xavier Guimard
22c1f7270c Add feature to override SOAP Proxy URN (#2100) 2020-02-20 21:49:55 +01:00
Christophe Maudoux
15c12346ab Hide persistent session attributes & Improve unit tests (#2093) 2020-02-14 16:21:31 +01:00
Christophe Maudoux
73a0ec9dc6 Toggle buttons (#2071) 2020-02-09 21:55:52 +01:00
Christophe Maudoux
ef01060c54 Update langs (#2071) 2020-02-09 18:30:08 +01:00
Maxime Besson
68be974e51 Add option to compute userdb groups before macros (#1877) 2020-02-05 15:39:45 +01:00
Xavier Guimard
03a1c495e6 Change default SameSite value to "None" (#2070) 2020-01-20 13:17:10 +01:00
Xavier Guimard
f3f97ccb80 Add sameSite parameter (#2069) 2020-01-20 06:21:09 +01:00
Christophe Maudoux
583bbbe285 Append CSP frame-ancestors option & Improve unit test (#2068) 2020-01-15 16:09:57 +01:00
Christophe Maudoux
27b0b7fde4 Append Custom backend & Improve unit test (#1605) 2020-01-10 17:48:49 +01:00
Christophe Maudoux
aa7df251b7 Remove useless parameters (#1605) 2020-01-04 22:19:21 +01:00
Maxime Besson
4c85903235 Fix manager display issue in SAML macros (#2051) 2019-12-27 13:12:55 +01:00
Christophe Maudoux
2954ea2abc Disable compactConf by default & Update unit tests (#2046) 2019-12-22 13:06:10 +01:00
Clément OUDOT
458d353af8 Merge branch 'v2.0' into dcoutadeur/lemonldap-ng-certificate-reset 2019-12-21 16:19:49 +01:00
Clément OUDOT
983af4dec1 make json (#1605) 2019-12-21 16:13:32 +01:00
Clément OUDOT
9a8789e86a Add new parameters in Manager (#2003) 2019-12-21 12:30:39 +01:00
Clément OUDOT
ace32efe4a Change defaut value for cspFormAction (#2024) 2019-12-20 16:07:52 +01:00
dcoutadeur
a465a5d768 Reset Certificate module for v2.0.7 (#1605) 2019-12-19 19:10:32 +01:00
Maxime Besson
bbef316754 Add manager UI for per-service macros (#2042) 2019-12-16 17:26:35 +01:00
Xavier
5bb6f2fd3b Refresh plugin (#2006) 2019-12-08 17:28:51 +01:00
Clément OUDOT
8f101361bc Custom plugins in Manager (#1590) 2019-12-07 21:30:56 +01:00
Christophe Maudoux
ef5d0cde48 Merge branch 'v2.0' into globalLogout 2019-11-18 22:15:54 +01:00
Christophe Maudoux
e20555623e Append defaulCondition option (#2012) 2019-11-18 17:34:56 +01:00
Christophe Maudoux
7ef9e132c9 Append GlobalLogout plugin (#1999) 2019-11-13 20:56:56 +01:00
Christophe Maudoux
80a1e4bf57 WIP - Append GlobalLogout plugin (#1999) 2019-11-11 22:33:30 +01:00
Christophe Maudoux
da3903ecd5 Don t remove issuer options when conf is compacted (#2002) 2019-11-08 21:50:23 +01:00
Maxime Besson
713737c11f Add an option to return claims in ID token 2019-11-04 18:27:28 +01:00
Maxime Besson
a386a7502a Allow refresh tokens to be emitted for regular sessions (#813) 2019-11-04 10:44:54 +01:00
Maxime Besson
ea2365cc98 Implement OIDC Offline sessions through refresh tokens (#813) 2019-11-04 10:44:54 +01:00
Christophe Maudoux
21b1e75a4d Merge branch 'v2.0' into 1988 2019-10-30 16:35:44 +01:00
Christophe Maudoux
009dcb35ae Fix regex order (#1988) 2019-10-27 21:05:35 +01:00
Christophe Maudoux
836add81c0 Parse conf (#1988) 2019-10-27 17:17:58 +01:00
Maxime Besson
4afecb4620 Remove IDP cookie (#1941) 2019-10-17 23:09:03 +02:00
Maxime Besson
914a760e25 Fix Choice parameter overload in manager (#1962) 2019-10-01 14:50:22 +02:00
Christophe Maudoux
138cfe6edb Append DecryptValue plugin (#1956) 2019-09-30 22:29:49 +02:00
Christophe Maudoux
a219a51e1c Revert "Make manifest"
This reverts commit c00110ed01.
2019-09-30 22:28:55 +02:00
Christophe Maudoux
c00110ed01 Make manifest 2019-09-30 22:26:55 +02:00
Clément OUDOT
b86a8102a1 Fix REST config call for a configuration key (#1960) 2019-09-30 17:33:06 +02:00
Christophe Maudoux
5615d5b2a3 Append display Slave logo option (#1936) 2019-09-14 22:07:44 +02:00
Christophe Maudoux
9784e75ead Check Slave credential headers (#1935) 2019-09-13 22:21:09 +02:00
Xavier
e50e7d09d1 Update version of (really) modified files 2019-09-12 21:56:49 +02:00
Clément OUDOT
84cea17ced Parameter in Manager (#1928) 2019-09-12 18:42:53 +02:00
Christophe Maudoux
86daaf54f6 Append parameter & update langs (#1925) 2019-09-10 10:15:17 +02:00
Christophe Maudoux
132f42d44c Forbid browsers to store users password & Improve unit tests (#1913) 2019-09-08 19:28:28 +02:00
Maxime Besson
94877793d4 increase clock tolerance during rest secret check (#1923) 2019-09-06 17:45:51 +02:00
Clément OUDOT
a0f9c85913 Define ldapITDS parameter in Manager (#1619) 2019-09-05 17:17:21 +02:00
Clément OUDOT
068ffbe604 Define portalDisplayPasswordPolicy parameter in Manager (#993) 2019-09-05 13:02:51 +02:00
Clément OUDOT
d7262767dc Add local password policy parameters in Manager (#993) 2019-09-05 10:55:08 +02:00
Christophe Maudoux
56ed8a5724 Append issuersTimeout option (#1916) 2019-09-03 22:52:07 +02:00
Christophe Maudoux
873e5084e0 Append "Don t compact conf" option (#1904) 2019-08-31 23:03:17 +02:00
Maxime Besson
d61935ab6e Implement introspection endpoint for access tokens (#1843) 2019-08-29 19:10:51 +02:00
Xavier Guimard
1660109e2f Security: use 3-form for open 2019-08-28 11:32:54 +02:00
Clément OUDOT
47dc4936ac Replace default LinkedIn scopes (#1890) 2019-08-22 15:08:45 +02:00
Christophe Maudoux
96c5006d9a Fix wrapper (#1885) 2019-08-20 22:36:51 +02:00
Christophe Maudoux
4d583ceb9c Append a custom param to log (#1885) 2019-08-20 22:04:05 +02:00
Christophe Maudoux
b1c637cfca Revert "Append a custom param to be logged (#1885)"
This reverts commit 1e838f0487
2019-08-16 15:28:47 +02:00
Christophe Maudoux
1e838f0487 Append a custom param to be logged (#1885) 2019-08-16 15:25:21 +02:00
Maxime Besson
2e9f57ab6f Better default behavior for oidcServiceMetaDataIssuer (#1882) 2019-08-13 18:09:59 +02:00
Maxime Besson
15c3b0bbf8 Add Radius second factor (#1847) 2019-08-02 18:03:10 +02:00
Maxime Besson
c1afdbefac Add labels and logos to all 2F providers (#1873) 2019-08-01 17:27:14 +02:00
Christophe Maudoux
ecb3204d38 Append conf parameters (#1851) 2019-07-25 11:59:00 +02:00
Maxime Besson
d82f776df8 Allow multi instanciation of 2F modules (#1860)
This commit adds a manager interface to declare multiple instances of a
single 2F module, in a manner similar to Combination.

An additional portal code reads the `sfExtra` variable to load the
declared modules.

An empty rules means the module will be always active.
2019-07-22 19:30:37 +02:00
Xavier Guimard
966eef33ee Fix df96168c error: _example/conf/lmConf-1.json is auto-generated (#1850) 2019-07-10 17:15:40 +02:00
Christophe Maudoux
36c806fa61 make json 2019-07-07 22:30:24 +02:00
Christophe Maudoux
2aee0467b0 Hide _session_id with CheckUser (#1658) 2019-07-06 22:55:31 +02:00
Xavier Guimard
c1137edba8 make tidy with perltidy-20181120 2019-07-02 20:03:40 +02:00
Christophe Maudoux
b94cbe0144 Fix default value (#1825) 2019-07-01 13:28:01 +02:00
Christophe Maudoux
1be79bce4b make json 2019-06-30 19:01:14 +02:00
Christophe Maudoux
a1f5791e06 Merge branch '1783' into v2.0 2019-06-30 19:00:41 +02:00
Christophe Maudoux
11d2909b0a WIP - Disable persistent sessions storage (#1825) 2019-06-29 21:10:16 +02:00
Christophe Maudoux
831a988516 Append conf test (#1783) 2019-06-23 22:55:10 +02:00
Christophe Maudoux
b69ffc0ff8 WIP - ContextSwitching (#1783) 2019-06-21 15:23:06 +02:00
Christophe Maudoux
a2ebaf31b1 WIP - AdminImpersonation skeleton (#1783) 2019-06-19 18:13:17 +02:00
Christophe Maudoux
9fa11709e6 Append options to use Notifications plugin & set notification reference (#1796) 2019-06-17 22:31:44 +02:00
Christophe Maudoux
c3b3c281ad Hide _2fDevices with REST services 2019-06-16 20:33:34 +02:00
Christophe Maudoux
d6f3dd459a Display message (#1796) 2019-06-16 16:02:48 +02:00
Christophe Maudoux
f514da3c3a Hide _2fDevices with REST services 2019-06-15 22:38:21 +02:00
Christophe Maudoux
fde6ff2cc8 WIP (#1796) 2019-06-14 23:09:32 +02:00
Xavier Guimard
e7bc7b3f4e Add restExportSecretKeys option (#1799) 2019-06-14 08:51:58 +02:00
Christophe Maudoux
b71f678f80 Filter SSO groups to merge (#1791) 2019-06-08 22:08:58 +02:00
Christophe Maudoux
3015faef0e Share functions with Safe (#1717) 2019-06-07 11:26:07 +02:00
Christophe Maudoux
132e57b4b3 Manage CORS headers (#1765) 2019-05-31 17:00:39 +02:00
Xavier Guimard
8fd3f6be90 Merge branch 'issue1521-appmenu' into 'v2.0'
Preserve applicationList key names (#1521)

See merge request lemonldap-ng/lemonldap-ng!76
2019-05-28 22:10:53 +02:00
Xavier
db2ee96bc8 Update versions (#1777) 2019-05-28 22:04:45 +02:00
Xavier
acd6ba50e8 Fix some missing $req (#1777) 2019-05-28 19:52:08 +02:00
Maxime Besson
b12992755f Preserve applicationList key names (#1521)
Previously, every configuration save from the manager would overwrite
applicationList key names to preserve their ordering.

This commit introduces a new "order" key in the JSON config instead.
2019-05-28 15:38:26 +02:00
Christophe Maudoux
535ae3f7be Append ServiceToken TTL option (#1773) 2019-05-26 21:43:13 +02:00
Christophe Maudoux
74c5f50e89 Append option to modify ServiceToken TTL (#1773) 2019-05-26 18:24:08 +02:00
Xavier
f3c4ea0afb Tydy 2019-05-11 20:18:43 +02:00
Xavier
4ed5c282a2 Fix syntax error 2019-05-10 06:19:54 +02:00
Clément OUDOT
d388461909 Add PKCE option in Manager (#1722) 2019-04-29 17:35:23 +02:00
Clément OUDOT
8e6f678be7 Create a configuration option to allow a Relying Party to be a public client
Allow unauthenticated requests on OAuth2 token endoint

#1725
2019-04-29 10:02:16 +02:00
Maxime Besson
2f9e6aa623 Allow override of username attribute for CAS apps
Global CAS options allows the admistrator to set the session attribute
that gets exported to all CAS application as the main identifier
(cas:user)

This commit adds the ability to override this configuration for a
particular CAS application.

OIDC already allows this

Fixes #1713
2019-04-28 21:06:34 +02:00
Clément OUDOT
06a7c97fd8 Add OAuth2 vhostType (#1146) 2019-04-22 19:10:50 +02:00
Christophe Maudoux
3491adbd3d Upgrade default authentication level (#1699) 2019-04-21 21:30:38 +02:00
Xavier Guimard
5fd9e9d422 Fix boolean values for YAML
Closes: #1684
2019-04-15 11:44:11 +02:00
maudoux
1d08372a8c Sort CAS servers & update langs (#1704) 2019-04-10 21:58:37 +02:00
Antoine ROSIER
f7b296b032 Sorting OIDc (#1704) 2019-04-10 17:06:41 +02:00
Antoine ROSIER
8636da45be Sorting SAML idp (#1704) 2019-04-10 17:06:41 +02:00
Xavier
804a996810 Update versions 2019-04-09 22:04:19 +02:00
Xavier
046585020f Allow hashes in Combination module overload (Closes: #1707) 2019-04-09 21:01:55 +02:00
maudoux
02c473c919 Update ConfTree (#1699) 2019-04-05 22:39:58 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
maudoux
5b67f1f743 Use rule to enable OTT (#1694) 2019-04-03 23:28:45 +02:00
Xavier Guimard
ece9b21219 Remove trailing whitespaces 2019-04-03 14:15:16 +02:00
maudoux
b7a826abfd Make json (#1661) 2019-04-01 14:57:41 +02:00
Xavier
8144ef9132 Fix boolean display with YAML backend (Fixes: #1684) 2019-03-26 22:55:52 +01:00
Clément OUDOT
93ee1bcfa3 Keep LDAP parameters for AD in Choice/Combination (#1676) 2019-03-21 20:02:21 +01:00
Christophe Maudoux
e7f21b2c73 Append Viewer SPA (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
71fc765d01 WIP - Inherits Conf.pm (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
bfa7482a1f WIP - Hidden ConfTree PK (#1661) 2019-03-15 15:40:08 +01:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Christophe Maudoux
be28b60e66 Append identities rule (#1658) 2019-03-09 23:29:10 +01:00
Christophe Maudoux
09281f8d22 Append identities rule and fix error catching (#1664) 2019-03-08 11:39:19 +01:00
Xavier Guimard
bc2bef4ff4 Please use our .perltidyrc 2019-03-07 18:22:58 +01:00
Christophe Maudoux
a9fbec3f84 Revert - Allow figures in login (#1667) 2019-03-07 10:39:08 +01:00
Christophe Maudoux
a076459bdd Allow figures in login (#1667) 2019-03-07 09:00:24 +01:00
Christophe Maudoux
7b08a7c442 Rename idSpoofing plugin to Impersonation & all relative parameters (#1664) 2019-03-06 16:30:56 +01:00
Christophe Maudoux
e09c136302 Change fa icon color (#1664) 2019-03-05 15:07:54 +01:00
Maxime Besson
25d1c45fd4 Add new option to override EntityID when acting as IDP 2019-03-04 09:33:10 +01:00
Christophe Maudoux
228a37c0d2 WIP - Append parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
f9db9a0258 WIP - Append conf. parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
3bb7f6e664 WIP - Create session (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
81a37e5bcc Dispatching attributes (#1658) 2019-03-01 12:36:37 +01:00
Clément OUDOT
7ad2e0e694 Remove warning in unit tests (\!61) 2019-02-28 08:47:33 +01:00
Maxime Besson
12d2db35a9 Add new URLs for SP-only or IDP-only SAML metadata
This commit adds two new URLs:

/saml/metadata/idp : IDP-only metadata
/saml/metadata/sp : SP-only metadata

/saml/metadata keeps providing metadata for all SAML services
2019-02-27 18:14:30 +01:00
Christophe Maudoux
1ea6e92533 WIP - checkUser append translations and parameters (#1658) 2019-02-25 20:10:57 +01:00
Christophe Maudoux
557539805a WIP - checkUser hide secret attributes (#1658) 2019-02-23 23:24:13 +01:00
Christophe Maudoux
30148caf2d WIP - checkUser hide secret attributes (#1658) 2019-02-23 23:02:42 +01:00
Christophe Maudoux
697882bd45 WIP - checkUser plugin skeleton (#1658) 2019-02-23 09:35:43 +01:00
Christophe Maudoux
a0c49a8905 Append parameter (#1632) 2019-02-14 22:10:48 +01:00