Commit Graph

552 Commits

Author SHA1 Message Date
Clément Oudot
0be124d3d7 Prevent reuse of authorization code (#184) 2015-01-28 16:53:06 +00:00
Clément Oudot
70281de82d Add some debug logs (#184) 2015-01-28 13:41:10 +00:00
Clément Oudot
39b83ae46a OpenIDConnect Service metadata parameters in Manager (#184) 2015-01-28 13:07:11 +00:00
Clément Oudot
2abb7fafde Check that RP is registered (#184) 2015-01-23 13:06:54 +00:00
Clément Oudot
b82153ab17 Start implementation of OpenID Connect provider (#184) 2015-01-20 10:04:44 +00:00
Clément Oudot
433bd36415 Simple OIDC client page for testing (#184) 2015-01-19 13:19:57 +00:00
David COUTADEUR
a82d36a794 Fix LEMONLDAP-784: https://jira.ow2.org/browse/LEMONLDAP-784
reset password in AD not working
2015-01-08 17:05:40 +00:00
Clément Oudot
7e74e27a3b Autoselect OP if only one is configured (#183) 2014-12-15 14:58:42 +00:00
Clément Oudot
922b92bbbe Configuration of OpenID Connect auth module and OP in Manager (#183) 2014-12-15 13:55:23 +00:00
Clément Oudot
fc1e447aaf Fix button display for logo display type (#183) 2014-12-12 08:54:58 +00:00
Clément Oudot
845922c7f5 Add transparency to navbar (#770) 2014-12-12 08:50:58 +00:00
Clément Oudot
18072723de Compatibility with AuthChoice (#183) 2014-12-11 17:05:33 +00:00
Clément Oudot
8b7ad81ff5 Add first OpenID Connect RP parameters in Manager (#183) 2014-12-11 16:54:27 +00:00
Clément Oudot
0014e2cdaf Invalidate CAS Service Ticket when it is used (#775) 2014-12-05 09:21:07 +00:00
Clément Oudot
ddfd0c2b35 Remove .swp file from MANIFEST 2014-12-04 17:12:41 +00:00
Clément Oudot
78c64717f1 Use Bootstrap for CAS test page (#774) 2014-12-04 17:02:24 +00:00
Clément Oudot
d365547412 Menu collapse in mobile mode for Bootsrap skin (#772) 2014-12-03 14:55:22 +00:00
Clément Oudot
5008d1ce46 Fix footer display on mobile for Bootsrap skin (#771) 2014-12-03 14:40:40 +00:00
Clément Oudot
35bbc141ff Update skins to have little transparency on main divs (#770) 2014-12-03 14:25:51 +00:00
Clément Oudot
dbc825c6c3 Add OpenID logo file to MANIFEST (#183) 2014-12-02 15:10:05 +00:00
Clément Oudot
6cff9560da Update MANIFEST and add background.tpl file (#770) 2014-12-02 15:09:16 +00:00
Clément Oudot
8b1ea19725 Possibility to define a background image for portal skin (#770) 2014-12-02 14:51:23 +00:00
Clément Oudot
4fde727a93 Add OpenID logo (#183) 2014-12-02 09:03:53 +00:00
Clément Oudot
f44f8a0dfb A little update for bootstrap skin background (#770) 2014-12-02 08:52:50 +00:00
Clément Oudot
eea1fedd3c Better look of OpenID Provider list (#183) 2014-12-01 17:07:55 +00:00
Clément Oudot
44c64ea606 Manage refresh of JWKS data (#183) 2014-12-01 10:27:47 +00:00
Clément Oudot
c5ad64e694 Try to fix build #491 (#183) 2014-11-24 08:39:16 +00:00
Clément Oudot
c09d2c4e00 Check ID Token validity (#183) 2014-11-22 08:53:17 +00:00
Clément Oudot
ee43c5010f Check token response validity (references #183) 2014-11-22 08:46:41 +00:00
Clément Oudot
c0b7af29b8 Support client_secret_basic and client_secret_post for token endpoint authentication (references #183) 2014-11-21 17:15:47 +00:00
Clément Oudot
bc6920dd03 Check error in authn response (#183) 2014-11-21 10:32:35 +00:00
Clément Oudot
6ba3d9e44e Manage exported vars per OP (#183) 2014-11-20 15:53:26 +00:00
Clément Oudot
687f0ed094 Change configuration format to allow to define several OP (#183) 2014-11-20 14:03:32 +00:00
Clément Oudot
74a7770fa4 Use extractJWT method (#183) 2014-11-20 09:11:55 +00:00
Clément Oudot
53aab6d3c0 Verify JWT signature for RS256/RS384/RS512 alg (#183) 2014-11-19 14:17:39 +00:00
Clément Oudot
ab1e318149 Add support for HS368 and HS512 JWT signature alg (#183)
Get OpenID configuration data from configuration URI (#183)
2014-11-19 11:09:37 +00:00
Clément Oudot
5a09c04445 Add some log to JWT signature verification (#183) 2014-11-18 14:32:15 +00:00
Clément Oudot
27225cfe86 Option to check JWT Signature (#183) 2014-11-18 14:24:03 +00:00
Clément Oudot
2a33f67155 Verify JWT signature for HS256 alg (#183) 2014-11-17 18:09:55 +00:00
Clément Oudot
ccafc776bd Put application boxes in a row (#768) 2014-11-17 15:02:47 +00:00
Clément Oudot
3cde211810 Save/restore state in OpenID Connect RP (#183) 2014-11-17 13:55:26 +00:00
Clément Oudot
c64f69a852 Use eval to decode JSON content (#183) 2014-11-14 16:53:56 +00:00
Clément Oudot
914fe20eb5 Create OpenIDConnect library (#183) 2014-11-14 16:18:50 +00:00
Clément Oudot
2ff2d0e01a First version of OpenIDConnect RP module (#183) 2014-11-14 14:29:55 +00:00
Clément Oudot
5bb0f01de4 Manage vhost aliases in portal menu (#755) 2014-11-03 17:07:47 +00:00
Clément Oudot
2af54acd97 Do not call data on undefined session object (#762) 2014-10-27 11:19:25 +00:00
Clément Oudot
be542af6dd Move NameIDFormat in metadata to match saml-schema-metadata-2.0.xsd (#758) 2014-10-07 12:36:25 +00:00
Clément Oudot
2a343dff84 Fix TODO by using autoRedirect (#753) 2014-08-21 12:22:10 +00:00
Clément Oudot
7e517cbdd0 Do not hardcode OpenID server path (#753) 2014-08-21 12:19:12 +00:00
Clément Oudot
df926b3429 Fix OpenID Issuer with new Net::OpenID::Server version (#753) 2014-08-21 11:49:56 +00:00
Clément Oudot
3b947a0bb3 Add portal in trusted hosts (#752) 2014-08-19 10:05:15 +00:00
Clément Oudot
95b6ccfb6f Fix input-group-addon use with glyphicons (#751) 2014-08-18 17:28:19 +00:00
Clément Oudot
f97f5c72e0 make tidy 2014-07-24 15:48:32 +00:00
Clément Oudot
e011600113 Show error from Common::Session module in logs (#741) 2014-07-24 15:37:12 +00:00
Clément Oudot
ee1918fe21 Keep default value in condition if no notOnOrAfter timeout configured (#737) 2014-07-21 10:48:36 +00:00
Clément Oudot
15835e1e02 Possibility to configure conditions notOnOrAfter (#737) 2014-07-21 10:46:01 +00:00
Clément Oudot
b4bda626de Possibility to configure subjectConfirmation notOnOrAfter (#737) 2014-07-21 10:42:16 +00:00
Clément Oudot
757ac6f15d Possibility to configure sessionNotOnOrAfter (#737) 2014-07-21 09:44:28 +00:00
Clément Oudot
9bc097dd21 Compatibility of SSL modules with SOAP getCookies (#719) 2014-07-15 13:41:27 +00:00
Clément Oudot
93cc4a9f70 Rebind as manager after password change in order to read groups (#725) 2014-07-09 13:56:58 +00:00
Clément Oudot
ac7a5ef969 Upgrade to Bootstrap 3.2.0 (#670) 2014-06-27 13:27:08 +00:00
Clément Oudot
f21184a59c Call authInit in MailReset to get the authentication choice (#664) 2014-06-25 12:58:15 +00:00
Clément Oudot
b72d79a30b Better connection management (#663, #LEMONLDAP-664):
- Create userDBFinish, passwordDBFinish and registerDBFinish methods
- Call finish methods for each backend in process
- Call LDAP unbind only when necessary
- Unbind if error in RegisterDBLDAP
2014-06-25 11:53:09 +00:00
François-Xavier Deltombe
70ec1d03cb Refactor LL::NG::Handler::Specific::AuthBasic (#630) 2014-06-25 10:01:17 +00:00
Clément Oudot
941c27631c Disconnect from LDAP when error occurs, and enable cache management even with Multi backend (#664) 2014-06-23 12:45:27 +00:00
Clément Oudot
1b6655a431 Delete captcha session when check is done, and add captcha backend in purgeCentralCache script (#703) 2014-06-11 10:22:34 +00:00
Clément Oudot
473cd6c9dc Use a session backend to manage captcha (#703) 2014-06-10 16:21:33 +00:00
Clément Oudot
eb1da00cb0 Move hidden field outside form-group for better display of captcha field in bootstrap theme (#670) 2014-06-10 12:22:18 +00:00
Clément Oudot
dbfbde2e9f make tidy 2014-06-08 10:04:50 +00:00
Clément Oudot
50b80020da Port memory leak fix to 1.4 branch (#708) 2014-06-06 10:04:14 +00:00
Clément Oudot
6c1ba246eb Fix register.pl script (#26) 2014-06-06 09:55:12 +00:00
Clément Oudot
d61cd6a6de Make Register work with AuthChoice (#26) 2014-06-06 09:54:48 +00:00
Xavier Guimard
c96e281fee Avoid potential circular references 2014-06-05 18:05:55 +00:00
Clément Oudot
cdeb812b43 Better display of notifications in bootstrap theme (#670) 2014-06-05 16:16:58 +00:00
Clément Oudot
2be04f483d Work on bootstrap theme (#670) 2014-06-05 13:49:44 +00:00
Clément Oudot
f6cad5438c Test if password was auto generated before displaying it in the mail (#675) 2014-06-03 08:13:24 +00:00
Clément Oudot
066f52caba Fix use of ipAddr in Register (#26) 2014-06-02 13:56:20 +00:00
Clément Oudot
626404b17d Keep register values in hidden inputs (#26) 2014-06-02 13:48:04 +00:00
Clément Oudot
914dbd8548 Register page for skin impact (#26) 2014-06-02 13:21:05 +00:00
Clément Oudot
2d416eb97b Register page for skins pastel and dark (#26) 2014-06-02 13:05:53 +00:00
Clément Oudot
ba9fa72c1e AD register module (#26) 2014-06-02 10:24:05 +00:00
Clément Oudot
9629d3a500 Fix login generation (#26) 2014-06-02 10:12:05 +00:00
Clément Oudot
a5b7cd030c Register mail in LDAP (#26) 2014-06-02 10:08:32 +00:00
Clément Oudot
534801ca79 Some adpatations on bootstrap skin (#26) 2014-06-02 10:01:59 +00:00
Clément Oudot
2e9033d28b Add a button on login page to register page (#26) 2014-05-30 12:21:53 +00:00
Clément Oudot
524fab0b3a RegisterDB LDAP is complete (#26) 2014-05-29 08:12:33 +00:00
Clément Oudot
9b10d96341 Fix unit tests after introducing RegisterDB (#26) 2014-05-29 07:38:50 +00:00
Clément Oudot
81dbe943c3 Introduce RegisterDB modules (#26) 2014-05-28 16:23:23 +00:00
Clément Oudot
2fe20b1248 Isolate register info in ->{registerInfo} (#26) 2014-05-28 15:41:32 +00:00
Clément Oudot
be04271809 Work on Register feature (#26) 2014-05-27 16:31:43 +00:00
Clément Oudot
66c93ec387 Manage already existing accounts in Register (#26) 2014-05-27 13:42:00 +00:00
Clément Oudot
c3030c6244 New files for Register module in MANIFEST (#26) 2014-05-27 13:41:09 +00:00
Clément Oudot
57182767f4 Some error codes for Register (#26) 2014-05-26 16:25:33 +00:00
Clément Oudot
5ce762e9e3 Work on Register page (#26) 2014-05-23 18:47:36 +00:00
Clément Oudot
0f963e0b2a Remove default value from MailReset (LEMONLDAP-686) 2014-05-23 18:44:20 +00:00
Clément Oudot
233026eb6f Fix password change as user for AD (#704) 2014-05-21 12:43:04 +00:00
Clément Oudot
9d6a947499 Specific behaviour for AD password change if it's done as user (#407) 2014-05-14 09:43:10 +00:00
Xavier Guimard
1deaaff758 Corrects errors in extra tests (missing DB in conf) 2014-05-11 12:21:19 +00:00
Clément Oudot
25930249f8 Update cronjob to use Common::Session module (#671) 2014-04-25 08:20:00 +00:00
Clément Oudot
d28a7bb217 Update versions to 1.4.0 2014-04-17 15:20:28 +00:00
Clément Oudot
1cfdd9fb6e Use new Session module in SAML authentication (#671, #LEMONLDAP-700) 2014-04-17 10:24:31 +00:00
Clément Oudot
e056a0427a Use new Session module in SAML Issuer (#671, #LEMONLDAP-700) 2014-04-17 10:16:33 +00:00
Clément Oudot
929c704343 Use new Session module in CAS Issuer (#671) 2014-04-16 15:19:59 +00:00
Clément Oudot
76c1ba75b9 Use new Session module in Remote (#671) 2014-04-15 16:09:56 +00:00
Clément Oudot
00bf404a0a Use new Session module in AuthGoogle (#671) 2014-04-15 15:34:21 +00:00
Clément Oudot
a232f149fa Optimize session update in sub store (#671, #LEMONLDAP-673) 2014-02-26 17:10:39 +00:00
Clément Oudot
900008c942 Use the new Common::Session module in portal for SSO sessions (#671, #LEMONLDAP-673) 2014-02-26 10:57:49 +00:00
Clément Oudot
a24fef3a29 Remove minified js and css files (#689) 2014-02-24 10:10:11 +00:00
Clément Oudot
c1cb7316d1 Create a Store object for Common::Apache::Session in order to manage cache directly (#671) 2014-02-21 16:38:57 +00:00
Clément Oudot
3a86fcfbfb Add jQuery map (#687) 2014-02-21 09:05:16 +00:00
Clément Oudot
ab4dfe1100 Manage exported variables for OpenID (#636) 2014-02-19 15:10:21 +00:00
Clément Oudot
68dda1b256 Manage exported variables for Facebook (#636) 2014-02-19 14:57:47 +00:00
Clément Oudot
9f170b9767 Manage exportedVars the same way in all modules (#636) 2014-02-19 14:35:59 +00:00
Clément Oudot
580d88cbc7 Manage exported variables for Google (#636) 2014-02-19 13:56:35 +00:00
Clément Oudot
49bae05c40 Manage exported variables for Slave (#636) 2014-02-18 16:52:31 +00:00
Clément Oudot
c4f277c8c8 Manage exported variables for WebID (#636) 2014-02-18 16:34:08 +00:00
Clément Oudot
7b9a5b1887 Use ldapExportedVars in AuthAD (#636) 2014-02-18 16:05:39 +00:00
Clément Oudot
cb67ac1e61 Manage exported variables for DBI (#636) 2014-02-18 15:17:09 +00:00
Clément Oudot
cb6df779be Manage exported variables for LDAP (#636) 2014-02-18 14:53:07 +00:00
Clément Oudot
b691acdff8 Update META.yml 2014-02-18 13:57:21 +00:00
Clément Oudot
18b337723d Default values for Portal all managed in Common (#686) 2014-02-14 09:00:12 +00:00
Clément Oudot
2630d09d72 Work on default values for Portal (#686) 2014-02-14 08:26:25 +00:00
Clément Oudot
f7bcf5b711 Manage exported variables for Demo backend (#636) 2014-02-11 17:15:05 +00:00
Clément Oudot
2ee3f6d5a6 Possibility to force session key use to fill NameID (#657) 2014-02-10 09:14:06 +00:00
Clément Oudot
40513f75d9 Add an option to enable IDP initiated SSO for a SP (#208) 2014-02-09 21:32:11 +00:00
Clément Oudot
3f7bb4b9d2 IDP Initiated (#208):
* Fix IDP initiated workflow when the user is not connected
* Possibility to use spConfKey in URL
2014-02-07 22:28:45 +00:00
Clément Oudot
c4b207b73a Possibility to set ping interval in portal (#658) 2014-02-07 10:17:45 +00:00
Clément Oudot
9b64ec836b Update MANIFEST (#683) 2014-02-06 17:03:54 +00:00
Clément Oudot
300e1e2a1a Use a common template to load javascripts common code (#683) 2014-02-06 17:00:34 +00:00
Clément Oudot
ef3663cb00 Move info and confirm timer javascript code out of HTML templates (#683) 2014-02-06 16:48:02 +00:00
Clément Oudot
f887220ec8 Rewrite call to ping() (#683) 2014-02-06 15:55:27 +00:00
Clément Oudot
5d22c0bfbf Tidy common/ portal skin directory (#683) 2014-02-06 13:42:45 +00:00
Clément Oudot
0f711a3e1b Upgrade to bootstrap 3.1 (#670) 2014-02-06 11:13:58 +00:00
Clément Oudot
2d0301433e Make the entire application area clickable (#670) 2014-02-05 17:22:23 +00:00
Clément Oudot
1cda26ba53 Hide application description with small screen (#670) 2014-02-05 17:06:33 +00:00
Clément Oudot
41b327e78a Bootstrap is now the default theme (#670) 2014-02-05 16:39:40 +00:00
Clément Oudot
d18840122f make tidy-js (#683) 2014-02-05 16:30:30 +00:00
Clément Oudot
dc2a512616 Provide non minified versions of javascript libraries (#678) 2014-02-04 16:43:15 +00:00
François-Xavier Deltombe
45ef54dccc Get CDA working in http with "double cookie for single session" (Lemonldap-680) 2014-01-31 14:11:39 +00:00
Clément Oudot
23627081c8 Specific query string method to be compatible with buggy ADFS URL encoding (#677) 2014-01-29 15:48:44 +00:00
Clément Oudot
dc9b0b35c6 Bootstrap: end of first version of the skin (#670) 2014-01-27 21:25:39 +00:00
Clément Oudot
77d200dfd9 Bootstrap: password and logout tab (#670) 2014-01-24 22:55:33 +00:00
Clément Oudot
23d0380f08 Bootstrap: login history (#670) 2014-01-24 17:16:41 +00:00
Clément Oudot
934f96e62f Bootstrap: application list (#670) 2014-01-24 17:07:04 +00:00
Clément Oudot
e10445b27c Bootstrap: better display on mobile (#670) 2014-01-24 15:42:40 +00:00
Clément Oudot
5208f3e19d Bootstrap: mail reset page (#670) 2014-01-24 15:02:38 +00:00
Clément Oudot
8cd7401c29 Import of bootstrap framework and customization of login page (#670) 2014-01-24 14:01:33 +00:00
Xavier Guimard
22a01f7e69 Remove unused and non-free image 2014-01-22 05:45:20 +00:00
Clément Oudot
c9c483b04b make tidy 2014-01-17 22:42:21 +00:00
Clément Oudot
59a833cb62 Avoid javascript error if some parameter value contains a simple quote (#666) 2014-01-17 22:35:25 +00:00