Commit Graph

299 Commits

Author SHA1 Message Date
Clément Oudot
18072723de Compatibility with AuthChoice (#183) 2014-12-11 17:05:33 +00:00
Clément Oudot
8b7ad81ff5 Add first OpenID Connect RP parameters in Manager (#183) 2014-12-11 16:54:27 +00:00
Clément Oudot
0014e2cdaf Invalidate CAS Service Ticket when it is used (#775) 2014-12-05 09:21:07 +00:00
Clément Oudot
8b1ea19725 Possibility to define a background image for portal skin (#770) 2014-12-02 14:51:23 +00:00
Clément Oudot
eea1fedd3c Better look of OpenID Provider list (#183) 2014-12-01 17:07:55 +00:00
Clément Oudot
44c64ea606 Manage refresh of JWKS data (#183) 2014-12-01 10:27:47 +00:00
Clément Oudot
c5ad64e694 Try to fix build #491 (#183) 2014-11-24 08:39:16 +00:00
Clément Oudot
c09d2c4e00 Check ID Token validity (#183) 2014-11-22 08:53:17 +00:00
Clément Oudot
ee43c5010f Check token response validity (references #183) 2014-11-22 08:46:41 +00:00
Clément Oudot
c0b7af29b8 Support client_secret_basic and client_secret_post for token endpoint authentication (references #183) 2014-11-21 17:15:47 +00:00
Clément Oudot
bc6920dd03 Check error in authn response (#183) 2014-11-21 10:32:35 +00:00
Clément Oudot
6ba3d9e44e Manage exported vars per OP (#183) 2014-11-20 15:53:26 +00:00
Clément Oudot
687f0ed094 Change configuration format to allow to define several OP (#183) 2014-11-20 14:03:32 +00:00
Clément Oudot
74a7770fa4 Use extractJWT method (#183) 2014-11-20 09:11:55 +00:00
Clément Oudot
53aab6d3c0 Verify JWT signature for RS256/RS384/RS512 alg (#183) 2014-11-19 14:17:39 +00:00
Clément Oudot
ab1e318149 Add support for HS368 and HS512 JWT signature alg (#183)
Get OpenID configuration data from configuration URI (#183)
2014-11-19 11:09:37 +00:00
Clément Oudot
5a09c04445 Add some log to JWT signature verification (#183) 2014-11-18 14:32:15 +00:00
Clément Oudot
27225cfe86 Option to check JWT Signature (#183) 2014-11-18 14:24:03 +00:00
Clément Oudot
2a33f67155 Verify JWT signature for HS256 alg (#183) 2014-11-17 18:09:55 +00:00
Clément Oudot
3cde211810 Save/restore state in OpenID Connect RP (#183) 2014-11-17 13:55:26 +00:00
Clément Oudot
c64f69a852 Use eval to decode JSON content (#183) 2014-11-14 16:53:56 +00:00
Clément Oudot
914fe20eb5 Create OpenIDConnect library (#183) 2014-11-14 16:18:50 +00:00
Clément Oudot
2ff2d0e01a First version of OpenIDConnect RP module (#183) 2014-11-14 14:29:55 +00:00
Clément Oudot
5bb0f01de4 Manage vhost aliases in portal menu (#755) 2014-11-03 17:07:47 +00:00
Clément Oudot
2af54acd97 Do not call data on undefined session object (#762) 2014-10-27 11:19:25 +00:00
Clément Oudot
2a343dff84 Fix TODO by using autoRedirect (#753) 2014-08-21 12:22:10 +00:00
Clément Oudot
7e517cbdd0 Do not hardcode OpenID server path (#753) 2014-08-21 12:19:12 +00:00
Clément Oudot
df926b3429 Fix OpenID Issuer with new Net::OpenID::Server version (#753) 2014-08-21 11:49:56 +00:00
Clément Oudot
3b947a0bb3 Add portal in trusted hosts (#752) 2014-08-19 10:05:15 +00:00
Clément Oudot
f97f5c72e0 make tidy 2014-07-24 15:48:32 +00:00
Clément Oudot
e011600113 Show error from Common::Session module in logs (#741) 2014-07-24 15:37:12 +00:00
Clément Oudot
ee1918fe21 Keep default value in condition if no notOnOrAfter timeout configured (#737) 2014-07-21 10:48:36 +00:00
Clément Oudot
15835e1e02 Possibility to configure conditions notOnOrAfter (#737) 2014-07-21 10:46:01 +00:00
Clément Oudot
b4bda626de Possibility to configure subjectConfirmation notOnOrAfter (#737) 2014-07-21 10:42:16 +00:00
Clément Oudot
757ac6f15d Possibility to configure sessionNotOnOrAfter (#737) 2014-07-21 09:44:28 +00:00
Clément Oudot
9bc097dd21 Compatibility of SSL modules with SOAP getCookies (#719) 2014-07-15 13:41:27 +00:00
Clément Oudot
93cc4a9f70 Rebind as manager after password change in order to read groups (#725) 2014-07-09 13:56:58 +00:00
Clément Oudot
f21184a59c Call authInit in MailReset to get the authentication choice (#664) 2014-06-25 12:58:15 +00:00
Clément Oudot
b72d79a30b Better connection management (#663, #LEMONLDAP-664):
- Create userDBFinish, passwordDBFinish and registerDBFinish methods
- Call finish methods for each backend in process
- Call LDAP unbind only when necessary
- Unbind if error in RegisterDBLDAP
2014-06-25 11:53:09 +00:00
François-Xavier Deltombe
70ec1d03cb Refactor LL::NG::Handler::Specific::AuthBasic (#630) 2014-06-25 10:01:17 +00:00
Clément Oudot
941c27631c Disconnect from LDAP when error occurs, and enable cache management even with Multi backend (#664) 2014-06-23 12:45:27 +00:00
Clément Oudot
1b6655a431 Delete captcha session when check is done, and add captcha backend in purgeCentralCache script (#703) 2014-06-11 10:22:34 +00:00
Clément Oudot
473cd6c9dc Use a session backend to manage captcha (#703) 2014-06-10 16:21:33 +00:00
Clément Oudot
dbfbde2e9f make tidy 2014-06-08 10:04:50 +00:00
Clément Oudot
50b80020da Port memory leak fix to 1.4 branch (#708) 2014-06-06 10:04:14 +00:00
Clément Oudot
d61cd6a6de Make Register work with AuthChoice (#26) 2014-06-06 09:54:48 +00:00
Xavier Guimard
c96e281fee Avoid potential circular references 2014-06-05 18:05:55 +00:00
Clément Oudot
f6cad5438c Test if password was auto generated before displaying it in the mail (#675) 2014-06-03 08:13:24 +00:00
Clément Oudot
066f52caba Fix use of ipAddr in Register (#26) 2014-06-02 13:56:20 +00:00
Clément Oudot
ba9fa72c1e AD register module (#26) 2014-06-02 10:24:05 +00:00