Commit Graph

4500 Commits

Author SHA1 Message Date
Yadd
3b8222ae8a Fix trusted domains regex (#2535) 2021-06-25 08:59:52 +02:00
Maxime Besson
15054b9038 Extra precaution for #2539 2021-06-25 07:54:03 +02:00
Maxime Besson
cf70ebe293 Stop triggering XSS protection on escaped commas
Commas are safe in HTML and JS, so there is no risk of XSS
2021-06-24 20:16:20 +02:00
Maxime Besson
1d80c262ab Make unit test for #2539 less noisy 2021-06-24 19:05:11 +02:00
Maxime Besson
70bd06bc32 Fix unit test for #2534 2021-06-24 19:02:34 +02:00
Maxime Besson
4a2a786598 Fix CDA wildcard regexp (#2534) 2021-06-24 19:02:17 +02:00
Maxime Besson
3d1cc3f499 Unit test for #2534 2021-06-24 16:59:20 +02:00
Maxime Besson
dbd65d1b2b Handle wildcards in CDA check (#2534) 2021-06-24 16:59:20 +02:00
Christophe Maudoux
71fa5d09f7 Be more strict with URL (#2477) 2021-06-24 14:33:27 +02:00
Yadd
3732cdcc19 Better URL parsing (#2477) 2021-06-24 14:33:27 +02:00
Yadd
8a18543f55 Remove TODO loop 2021-06-24 14:04:31 +02:00
Maxime Besson
9a2dc48b56 Unit test for #2550 2021-06-21 09:38:03 +02:00
Maxime Besson
8db02a693f Only release IDtoken when scope contains openid (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
ee51e010dc Unit test for #2548 2021-06-21 09:38:03 +02:00
Maxime Besson
e1b7f61d13 Update ID token unit tests 2021-06-21 09:38:03 +02:00
Maxime Besson
beaacca9a0 Refactor _handleRefreshTokenGrant to use _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
c931b30263 Refactor _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Yadd
b6a1f946b2 Fix handler cache corruption (#2539) 2021-06-19 18:43:41 +02:00
Maxime Besson
2de2cbf454 Fix 2F unit test (#2539) 2021-06-19 18:25:07 +02:00
Clément OUDOT
bdeb1e70d9 Allow to display password value in login form (#2454) 2021-06-16 20:50:11 +02:00
Maxime Besson
dae4293ecf Unit test for #2518 2021-06-15 14:26:23 +02:00
Maxime Besson
77f5577dc4 Improve SAML test lib 2021-06-15 12:40:15 +02:00
Maxime Besson
cf59bb915e refactor expectAuthenticatedAs 2021-06-15 12:40:15 +02:00
Maxime Besson
6f5cd3b645 Fix some undef warnings 2021-06-15 12:40:15 +02:00
Maxime Besson
75b81fcb5a Fix NameID value when unspecified is requested by SP (#2518) 2021-06-15 11:27:37 +02:00
Maxime Besson
63cd5ffb40 Revert 652d8ba9bc
See #2482
2021-06-11 08:53:26 +02:00
Christophe Maudoux
469d2a40aa Fix warning (#2538) 2021-06-09 23:06:03 +02:00
Christophe Maudoux
86f46ebc5b Fix some warnings (#2538) 2021-06-08 23:03:54 +02:00
Yadd
5fc0b6f002 Update tr translation from transifex 2021-06-07 18:34:06 +02:00
Maxime Besson
87295178e0 optimize SingleSession to avoid unneeded session fetches (#2536) 2021-06-04 16:17:18 +02:00
Maxime Besson
275567436e Unit test for #2496 2021-06-03 18:31:38 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
2414fb4751 Unit tests for (#2510) 2021-06-02 11:08:07 +02:00
Maxime Besson
3b76479bda Add expectPdata function to test lib 2021-06-02 11:07:53 +02:00
Maxime Besson
fad337c58c Add hooks on password change (#2510) 2021-06-02 11:07:28 +02:00
Maxime Besson
d4aed0b332 Tidy test lib 2021-06-02 11:07:28 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
71a8fc6d16 Skip registration of CAS App when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
6ef522c193 Unit tests for #2533 2021-06-01 11:28:34 +02:00
Maxime Besson
cf3809a0de Add CAS hooks (#2533) 2021-06-01 11:27:45 +02:00
Maxime Besson
ec2b904f4f Unit test for #2532 2021-05-31 11:23:38 +02:00
Maxime Besson
e98aafd6f7 add oidcGenerateCode hook (#2532) 2021-05-31 11:16:28 +02:00
Maxime Besson
8992b3e789 Unit test for #2529 2021-05-31 09:52:26 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Yadd
0f11d7c06e Finish BrowserID/Persona removal 2021-05-22 16:16:38 +02:00
Christophe Maudoux
66f428b474 Improve notifications display (Thx @antoinerosier) 2021-05-20 19:22:18 +02:00
Christophe Maudoux
7860e18034 Append unit test (#1976) 2021-05-08 21:38:13 +02:00