Commit Graph

133 Commits

Author SHA1 Message Date
Maxime Besson
424cf91e88 Fix error message on missing template dir (#2460) 2021-02-12 18:10:53 +01:00
Xavier Guimard
39518079d5 Clean "afterSub" and "aroundSub" during reload (#2448) 2021-01-27 17:30:54 +01:00
Xavier Guimard
4455f13976 Clean "afterSub" and "aroundSub" during init (#2448) 2021-01-27 15:28:34 +01:00
Maxime Besson
ed0be42c93 Merge branch 'WIP-plugin-hooks-2359' into 'v2.0'
Plugin hook system to extend issuers (and maybe more)

See merge request lemonldap-ng/lemonldap-ng!166
2020-12-21 16:35:03 +01:00
Maxime Besson
9ba6938e90 Show a friendlier error message when a module fails init (#2410) 2020-12-07 16:59:48 +01:00
Christophe Maudoux
c2266720f9 Unauthenticated logout request with route & improve unit test (#2342) 2020-12-06 11:21:11 +01:00
Maxime Besson
f0dbb28866 Add Hook system for plugins (#2359) 2020-11-27 14:00:58 +01:00
Christophe Maudoux
0a4fabb4e4 Use strict & fix warnings 2020-11-21 19:24:04 +01:00
Xavier Guimard
c8df084247 Update versions 2020-09-04 17:59:00 +02:00
Maxime Besson
26cd1945fb Try to compute the correct value of SameSite by default (#2281) 2020-08-17 18:05:09 +02:00
Xavier Guimard
6caf88a174 Better warning fix 2020-05-04 16:42:41 +02:00
Xavier Guimard
5d10695a79 Fix warning 2020-05-04 16:40:57 +02:00
Xavier Guimard
0baf014e6b Revert "Fix part of circular links (related to #1990)"
This reverts commit c9e7f3a1b0.
2020-04-23 12:00:51 +02:00
Xavier Guimard
24c1a2e90a Restore default route (#1990) 2020-04-22 22:09:15 +02:00
Xavier Guimard
d5da0362fd Fix #1990 2020-04-22 21:46:59 +02:00
Xavier Guimard
c9e7f3a1b0 Fix part of circular links (related to #1990) 2020-04-22 14:13:14 +02:00
Maxime Besson
0983c66139 Portal: add helper method to build a rule from a string 2020-04-22 11:02:59 +02:00
Christophe Maudoux
c9b2eff039 More explicit error message (#2108) 2020-03-05 22:14:02 +01:00
Xavier Guimard
4459a47f76 Tidy 2020-02-20 23:37:05 +01:00
Xavier Guimard
a76cba3856 Update versions 2020-02-20 23:37:01 +01:00
Maxime Besson
47068c51b8 Revert "Prevent portal from crashing when keepPdata=1 (#1893)"
This reverts commit 2b4defb2a9 and
implements a fix "at the source" instead. Should fix #2099.
2020-02-20 22:24:26 +01:00
Clément OUDOT
fb74d03a89 Use whatToTrace for logging messages (#1991) 2019-10-29 17:28:55 +01:00
Maxime Besson
2b4defb2a9 Prevent portal from crashing when keepPdata=1 (#1893)
Since the changes introduced to fix #1893, keepPdata is expected to
contain an array of values.

When migrating from previous LLNG versions, cookies may contain
keepPdata=1, which crashes the server because 1 isn't an arrayref

This change makes LLNG consider that keepPdata=1 is not a valid value,
and replaces it with an empty arrayref when starting the login or logout
flow.
2019-10-09 17:35:48 +02:00
Xavier
461cd51e45 Try to fix #1785 without breaking pdata 2019-09-29 23:04:17 +02:00
Maxime Besson
e281ad7cc3 Add support for CORS preflight (#1765) 2019-09-16 16:55:15 +02:00
Xavier
e50e7d09d1 Update version of (really) modified files 2019-09-12 21:56:49 +02:00
Maxime Besson
c1afdbefac Add labels and logos to all 2F providers (#1873) 2019-08-01 17:27:14 +02:00
Christophe Maudoux
6a579644f8 Fix warning (#1842) 2019-07-04 23:20:11 +02:00
Xavier
9cdfd4c9a6 Add notice when user is connected 2019-07-04 21:22:06 +02:00
Xavier Guimard
c1137edba8 make tidy with perltidy-20181120 2019-07-02 20:03:40 +02:00
Xavier Guimard
264410409d Move CAS service verification from main to Issuer::CAS (#1795) 2019-06-27 16:55:12 +02:00
Maxime Besson
e1f927a195 Check service= parameter on CAS logout (#1795)
service= redirect URL is not checked when logging out from CAS, to avoid
insecure redirect attacks. The verification is only made if CAS access
control is enabled.

In order for this to work in common cases (applications redirects to an
unprotected page after logout), we add CAS App domains to the list of
globally trusted domains.

If your application wants to redirect to a third-party domain, it needs
to be added to LLNG's trustedDomains
2019-06-27 12:40:40 +02:00
Christophe Maudoux
35f1677747 Append unit test and fix CORS headers (#1765) 2019-05-31 17:50:44 +02:00
Christophe Maudoux
132e57b4b3 Manage CORS headers (#1765) 2019-05-31 17:00:39 +02:00
Clément OUDOT
ae3a728378 Manage template inclusion when file is not in configured portal theme (#1653) 2019-04-10 15:42:58 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
Xavier Guimard
af4f123916 Fix cspScrip (Closes: #1683) 2019-03-26 09:56:46 +01:00
Clément OUDOT
447c09c0a2 Remove old translation file (#1595) 2019-03-19 15:38:36 +01:00
Clément OUDOT
145db1cf60 Fix regexp for portal default condition (#1669) 2019-03-11 12:01:16 +01:00
Xavier Guimard
bc2bef4ff4 Please use our .perltidyrc 2019-03-07 18:22:58 +01:00
Xavier Guimard
26b80873be Modify Try.pm to handle authorizations (#1658) 2019-03-05 21:11:07 +01:00
Christophe Maudoux
28caeea3c2 Partial revert (#1595) 2019-02-19 20:10:41 +01:00
Christophe Maudoux
62167a41f1 Load Portal despite translation file does not exist (#1595) 2019-02-19 17:27:28 +01:00
Christophe Maudoux
b777007ff6 Override msg by reading a file (#1595) 2019-02-09 22:38:13 +01:00
Christophe Maudoux
94574f2f19 Override msg by reading a file (#1595) 2019-02-09 20:48:46 +01:00
Xavier Guimard
c7b4eb5051 tidy with new conf 2019-02-07 09:27:56 +01:00
Xavier Guimard
2ab385e2df Update versions 2019-01-09 13:42:30 +01:00
Xavier Guimard
54539e97d9 Add aroundSub entrypoint 2018-12-21 16:07:28 +01:00
Xavier Guimard
06431d71f5 New endpoint: afterSub 2018-12-21 16:07:28 +01:00
Xavier Guimard
c6ff9dcf0b Display error if a plugin sets it (#595) 2018-12-21 11:26:11 +01:00