Xavier Guimard
92244ef45c
REST in progress ( #970 )
2017-01-08 12:13:29 +00:00
Xavier Guimard
d1646392a9
Split soap/rest server in config/sessions ( #970 )
2017-01-08 08:42:16 +00:00
Xavier Guimard
2118a4242b
Move read conf calls into Conf/RESTServer ( #970 )
2017-01-08 06:25:10 +00:00
Xavier Guimard
1983842f79
SOAP server ( #970 )
2017-01-07 20:37:07 +00:00
Xavier Guimard
b24343bd10
SOAP server ( #970 )
2017-01-07 18:04:20 +00:00
Xavier Guimard
99d294d7c4
Replace read_body by Plack::Request::content() ( #595 )
2017-01-07 07:45:36 +00:00
Xavier Guimard
41d47e8a74
Remove CGO SOAP calls
2017-01-07 07:45:33 +00:00
Xavier Guimard
00a27ff3e5
SOAP in progress ( #970 )
2017-01-06 16:18:57 +00:00
Xavier Guimard
c52bddd9ef
SOAP/REST server skeletons ( #970 )
2017-01-06 10:57:51 +00:00
Xavier Guimard
99932aa08c
OpenID-2 seems ready ( #595 )
2017-01-06 06:22:31 +00:00
Xavier Guimard
61eddee9f7
OpenID 2 in progress ( #595 )
2017-01-06 06:02:52 +00:00
Xavier Guimard
c834aa7c89
OpenID-2 in progress ( #595 )
2017-01-05 22:05:41 +00:00
Xavier Guimard
7805387aff
OpenID-2 in progress ( #595 )
2017-01-05 21:45:34 +00:00
Xavier Guimard
e4bf8ac619
OpenID2 in progress ( #595 )
2017-01-05 16:44:16 +00:00
Xavier Guimard
b3f1415626
Add UserDB/OpenID ( #595 )
2017-01-05 15:19:57 +00:00
Xavier Guimard
f1b6a6c1a8
Add Auth/OpenID.pm ( #595 )
2017-01-05 13:39:18 +00:00
Xavier Guimard
ef082de0a2
Remove old CAS files ( #595 )
2017-01-05 11:57:55 +00:00
Xavier Guimard
0ef263b33a
OpenID 2 in progress ( #595 )
2017-01-05 11:55:46 +00:00
Xavier Guimard
7e2b050fad
Prepare OpenID issuer ( #595 )
2017-01-05 08:59:05 +00:00
Xavier Guimard
f96998c99c
More POD ( #595 )
2017-01-05 07:41:29 +00:00
Xavier Guimard
a8d7a80c3b
More POD ( #595 )
2017-01-05 05:57:16 +00:00
Xavier Guimard
b94a337a05
Optimize checksession endpoint ( #595 )
2017-01-04 22:19:17 +00:00
Xavier Guimard
83c3b50355
Update POD ( #595 )
2017-01-04 20:51:46 +00:00
Xavier Guimard
a09d12031e
Some big changes ( #595 )
...
Replace uri_escape by WWW::Form::UrlEncoded
Replace PSGI:Request by inheritance from Plack::Request
2017-01-04 16:36:54 +00:00
Xavier Guimard
3146feeb3e
Tidy ( #595 )
2017-01-04 05:53:34 +00:00
Xavier Guimard
2028c88cc1
Rewrite _SMTP ( #595 )
2017-01-04 05:52:39 +00:00
Xavier Guimard
4a79812881
Register skeleton ( #595 )
2017-01-03 22:06:14 +00:00
Xavier Guimard
1d7d95941d
OIDC tests ( #595 )
2017-01-03 19:00:35 +00:00
Xavier Guimard
64776e24dd
Remove unusable text ( #595 )
2017-01-03 17:23:34 +00:00
Xavier Guimard
44954cd0f9
OIDC in progress ( #595 )
2017-01-03 13:44:40 +00:00
Xavier Guimard
b436379874
Revert "Update token reg ( #595 )"
...
This reverts commit 606b1ae453c04d2e413a4f13e1044444de0634dd.
2017-01-03 13:44:22 +00:00
Xavier Guimard
6053003576
Update token reg ( #595 )
2017-01-03 12:54:25 +00:00
Xavier Guimard
d35e24703e
Remove old Google auth ( #595 )
...
Google OpenId endpoints now points to OpenId-Connect configuration
2017-01-03 06:09:29 +00:00
Xavier Guimard
937a87c904
Update (c)
2017-01-02 22:21:40 +00:00
Xavier Guimard
ca6770831b
Rewrite CDC, not tested ( #595 )
2017-01-02 22:21:39 +00:00
Xavier Guimard
369069369e
Remove unused constants ( #595 )
2017-01-02 22:21:37 +00:00
Xavier Guimard
998d958e5e
HttpOnly ( #595 )
2017-01-02 22:21:36 +00:00
Xavier Guimard
3e81f56a0f
OIDC checksession ( #595 )
2017-01-02 20:20:42 +00:00
Xavier Guimard
31ac440377
OIDC in progress ( #595 )
2017-01-01 17:56:46 +00:00
Xavier Guimard
45e5f28808
Bug in confirm ( #595 )
2017-01-01 12:32:38 +00:00
Xavier Guimard
cdbe7d89e9
OIDC in progress ( #595 )
2017-01-01 09:43:48 +00:00
Xavier Guimard
5202cd6f7c
OIDC in progress ( #595 )
2016-12-31 14:40:26 +00:00
Xavier Guimard
4fc1f6afa2
OIDC metadata ( #595 )
2016-12-31 13:08:39 +00:00
Xavier Guimard
438289b4f4
OIDC written (not tested) ( #595 )
2016-12-31 07:57:24 +00:00
Xavier Guimard
ef8f8e59f7
OIDC in progress ( #595 )
2016-12-30 08:39:15 +00:00
Xavier Guimard
3c8e3fbe9d
OIDC in progress ( #595 )
2016-12-30 08:39:13 +00:00
Xavier Guimard
9373f3eaa7
OIDC issuer skeleton ( #595 )
2016-12-30 08:01:55 +00:00
Xavier Guimard
6461b92890
OIDC in progress ( #595 )
2016-12-30 07:03:48 +00:00
Xavier Guimard
3790836333
Start OIDC ( #595 )
2016-12-29 20:34:46 +00:00
Xavier Guimard
53a1830a69
Add authorization header ( #595 )
2016-12-29 10:12:08 +00:00
Xavier Guimard
c14bd95d92
Import some 1.9.7 changes
2016-12-29 06:25:07 +00:00
Xavier Guimard
936b6e5164
SAML matadata ( #595 )
2016-12-28 18:38:03 +00:00
Xavier Guimard
809ed66184
Disable unused methods ( #595 )
2016-12-28 16:50:39 +00:00
Xavier Guimard
10d4f39511
SAML OK with artifact + SOAP SLO ( #595 )
2016-12-27 11:17:25 +00:00
Xavier Guimard
e09eb9c237
SAML SLO in progress ( #595 )
2016-12-27 08:40:12 +00:00
Xavier Guimard
86b5d7a8db
SAML attribute server ( #595 )
...
Note: not fully tested
2016-12-26 14:35:30 +00:00
Xavier Guimard
0da228ff35
make tidy
2016-12-26 09:23:35 +00:00
Xavier Guimard
585bf4a235
Bug: double redirection ( #595 )
2016-12-26 09:23:31 +00:00
Xavier Guimard
17a336ee7c
Improve artifact test [SAML] ( #595 )
2016-12-26 07:34:13 +00:00
Xavier Guimard
41afc83760
SAML in progress ( #595 )
2016-12-25 15:41:28 +00:00
Xavier Guimard
aba27302f7
Split SLO from run [SAML] ( #595 )
2016-12-25 15:41:23 +00:00
Xavier Guimard
a2be61bbcd
SAML in progress ( #595 )
2016-12-24 08:47:39 +00:00
Xavier Guimard
565a61bc55
SAML in progress ( #595 )
2016-12-23 17:00:17 +00:00
Xavier Guimard
47f9865efb
SAML in progress ( #595 )
2016-12-23 16:03:36 +00:00
Xavier Guimard
207ab38839
Missing auth path ( #595 )
2016-12-23 10:02:11 +00:00
Xavier Guimard
3d23dc272d
CAS in progress ( #595 )
2016-12-22 22:06:13 +00:00
Xavier Guimard
7281481802
CAS in progress ( #595 )
2016-12-22 20:18:59 +00:00
Xavier Guimard
ad6b42e9f1
Propage portal logout to handler ( #595 )
2016-12-22 20:18:58 +00:00
Xavier Guimard
13514267e0
CAS in progress ( #595 )
...
NB: I know that test is broken for now
2016-12-22 18:41:11 +00:00
Xavier Guimard
5ac69452df
CAS in progress ( #595 )
2016-12-22 08:40:50 +00:00
Xavier Guimard
d01e3472ff
CAS in progress ( #595 )
2016-12-22 06:05:14 +00:00
Xavier Guimard
de969f19c4
CAS in progress ( #595 )
2016-12-22 05:57:44 +00:00
Xavier Guimard
747cd86047
CAS in progress ( #595 )
2016-12-21 22:39:12 +00:00
Xavier Guimard
ffd9ca4387
CAS in progress ( #595 )
2016-12-21 18:06:23 +00:00
Xavier Guimard
b36d45cc55
CAS in progress ( #595 )
2016-12-21 06:19:41 +00:00
Xavier Guimard
036ef59256
CAS in progress ( #595 )
2016-12-21 05:32:38 +00:00
Xavier Guimard
51e7e6bc79
Starting CAS IdP ( #595 )
2016-12-20 12:19:26 +00:00
Xavier Guimard
31496271ba
CAS in progress ( #595 )
2016-12-20 11:53:33 +00:00
Xavier Guimard
f6ea9b5df3
Building Auth/CAS ( #595 )
2016-12-20 10:43:22 +00:00
Xavier Guimard
c7da9254a2
More pod ( #595 )
2016-12-20 09:39:06 +00:00
Xavier Guimard
32d09a2f0e
More pod ( #595 )
2016-12-19 21:40:24 +00:00
Xavier Guimard
36ae1b568b
Starting CAS ( #595 )
2016-12-19 21:34:52 +00:00
Xavier Guimard
3d599b0c55
Spelling error
2016-12-19 20:51:51 +00:00
Xavier Guimard
909391ffc7
Spelling errors
2016-12-19 20:47:44 +00:00
Xavier Guimard
dfcb0f8605
More doc ( #595 )
2016-12-19 16:15:31 +00:00
Xavier Guimard
871a41ddb9
Pod in progress ( #595 )
2016-12-19 12:41:52 +00:00
Xavier Guimard
056688cae9
Some doc ( #595 )
2016-12-19 12:18:26 +00:00
Xavier Guimard
1b03f1fba0
Use routes for SAML IdP ( #595 )
2016-12-19 06:14:46 +00:00
Xavier Guimard
f7003774ec
Typo ( #595 )
2016-12-19 06:14:44 +00:00
Xavier Guimard
7b36248c45
SAML tests ( #595 )
2016-12-19 05:31:51 +00:00
Xavier Guimard
439dc6dcfb
SOAP SLO response OK for Auth/SAML ( #595 )
2016-12-18 08:07:48 +00:00
Xavier Guimard
f1ef6e8938
Enable complex routes for plugins ( #595 )
2016-12-17 20:19:46 +00:00
Xavier Guimard
ec83414576
SAML in progress ( #595 )
...
To do: authSAML SOAP server
2016-12-17 07:58:53 +00:00
Xavier Guimard
b57d76c0ce
SAML in (big) progress ( #595 )
2016-12-15 21:22:15 +00:00
Xavier Guimard
a829958d3d
SAML in progress ( #595 )
2016-12-15 20:34:56 +00:00
Xavier Guimard
e259c534c2
SAML in progress ( #595 )
2016-12-15 05:55:09 +00:00
Xavier Guimard
6e29bbe2a4
More debug ( #595 )
2016-12-14 14:13:57 +00:00
Xavier Guimard
ba1d1e9720
SAML idp logout ( #595 )
2016-12-14 08:49:30 +00:00
Xavier Guimard
329993a40a
SLO Soap server in progress [SAML] ( #595 )
2016-12-14 05:51:45 +00:00
Xavier Guimard
0380452082
SLO Soap server [SAML] ( #595 )
2016-12-13 19:21:36 +00:00
Clément Oudot
b8997aa43d
Force UTF8 decoding of loginHistory values ( #1117 )
2016-12-12 14:32:00 +00:00
Xavier Guimard
b07ec51e0c
Test SAML SLO with Redirect ( #595 )
2016-12-11 16:45:56 +00:00
Xavier Guimard
1274d75a6a
Import 1.9 changes
2016-12-11 10:45:59 +00:00
Xavier Guimard
a959d77e1c
SAML SLO in progress ( #595 )
2016-12-09 10:25:05 +00:00
Xavier Guimard
26a4774240
SAML artifact is OK ( #595 )
2016-12-08 05:40:50 +00:00
Xavier Guimard
2a3001a97b
SAML Artifact in progress ( #595 )
2016-12-07 22:30:00 +00:00
Xavier Guimard
a8fd940407
SAML Redirect in progress ( #595 )
2016-12-05 21:34:06 +00:00
Xavier Guimard
3e0c1b5633
Store initial method in issuers ( #595 )
2016-12-05 20:53:34 +00:00
Clément Oudot
24e4827f40
Use PROFILE_SIGNATURE_VERIFY_HINT_MAYBE when forcing signature verification ( #1116 )
2016-12-05 11:19:29 +00:00
Xavier Guimard
b7c66b9427
Test skeleton for SAML Redirect ( #595 )
2016-12-04 21:57:25 +00:00
Xavier Guimard
6c7e797a3a
Avoid some warnings (#LEMONDAP-595)
2016-12-02 16:29:04 +00:00
Xavier Guimard
c8fe115650
Little things ( #595 )
2016-12-02 05:47:38 +00:00
Xavier Guimard
d097b4ec0a
Enable setAuthSessionInfo ( #595 )
2016-12-01 22:25:05 +00:00
Xavier Guimard
a1eab6cc87
SAML in progress ( #595 )
2016-11-30 12:44:12 +00:00
Xavier Guimard
dcaa312ba0
Little things ( #595 )
2016-11-29 21:58:28 +00:00
Xavier Guimard
ceae1dc7b8
SAML in progress ( #595 )
2016-11-29 21:44:33 +00:00
Xavier Guimard
c550606f50
SAML in progress ( #595 )
2016-11-29 21:10:00 +00:00
Xavier Guimard
abb61affe0
Bad \Q \E usage ( #595 )
2016-11-29 05:43:46 +00:00
Xavier Guimard
e5fdcbc3fd
SAML in progress ( #595 )
2016-11-28 21:15:57 +00:00
Xavier Guimard
17ef20008a
SAML in progress ( #595 )
2016-11-25 11:11:39 +00:00
Xavier Guimard
fb741f9bea
SAML in progress ( #595 )
2016-11-22 20:55:10 +00:00
Xavier Guimard
b1f2ac6a73
SAML in progress ( #595 )
2016-11-22 12:34:09 +00:00
Xavier Guimard
2ca207a60e
SAML in progress ( #595 )
2016-11-22 08:05:43 +00:00
Xavier Guimard
fc1b5a2f47
Little things ( #595 )
2016-11-22 07:48:02 +00:00
Xavier Guimard
13f1ef6aa1
Update SAML tests ( #595 )
2016-11-20 05:35:06 +00:00
Xavier Guimard
605514e7bc
Avoid some warnings ( #595 )
2016-11-20 05:35:03 +00:00
Xavier Guimard
b3e18e2f35
SAML in progress ( #595 )
2016-11-16 15:27:01 +00:00
Xavier Guimard
b69bf1109d
Use the same SAML service for UserDB and Auth ( #595 )
2016-11-16 10:30:32 +00:00
Xavier Guimard
7ed6682ce0
Store list of loaded modules ( #595 )
2016-11-16 10:30:27 +00:00
Xavier Guimard
3c04bed84d
Update SAML UserDB ( #595 )
2016-11-15 21:24:13 +00:00
Xavier Guimard
9f25c822c1
SAML UserDB skeleton
2016-11-15 21:00:29 +00:00
Xavier Guimard
f52c2e51ba
Optimize re ( #595 )
2016-11-15 21:00:27 +00:00
Clément Oudot
31cfbf8101
Apply CDA change to trunk ( #173 )
2016-11-15 13:33:39 +00:00
Xavier Guimard
46e7e36070
SAML test skeleton
2016-11-14 21:45:32 +00:00
Clément Oudot
eb127484d8
Return good status in JSON response ( #1106 )
2016-11-14 11:18:37 +00:00
Clément Oudot
d46c33fbf4
Check header before matching its value ( #1107 )
2016-11-14 10:27:18 +00:00
Clément Oudot
30aa96fc82
Prevent Lasso error in IDP initiated code ( #1101 )
2016-11-14 10:09:28 +00:00
Clément Oudot
860c32e2db
Allow caFile and caPath option for LDAPS ( #1108 )
2016-11-08 11:29:43 +00:00
Clément Oudot
14ac79ef48
Force NameID Format and AllowCreate in IDP initiated request ( #1101 )
2016-10-27 09:15:25 +00:00
Clément Oudot
33fe8f11dd
Allow access tokens to be gathered as parameters too ( #1098 )
2016-10-24 14:17:02 +00:00
Clément Oudot
89527b47f2
Use Base64 URL for JWKS data ( #1097 )
2016-10-24 13:50:31 +00:00
Xavier Guimard
4eb987e9f0
Typo ( #1094 )
2016-10-10 18:58:11 +00:00
Clément Oudot
95036d6acb
Apply patch on new Portal files in trunk ( #1088 )
2016-10-04 09:18:27 +00:00
Clément Oudot
72cc77aab4
Apply patch on old Portal files in trunk ( #1088 )
2016-10-04 09:18:26 +00:00
Clément Oudot
a646888eb7
Apply patch on new portal files in trunk ( #1087 )
2016-09-29 19:25:02 +00:00
Clément Oudot
68c074b291
Apply patch on old portal files in trunk ( #1087 )
2016-09-29 19:24:48 +00:00
Xavier Guimard
ec758e7696
Working on SAML ( #595 )
2016-09-27 19:43:38 +00:00
Clément Oudot
91b7ac93b1
Apply bypass consent option to trunk ( #1089 )
2016-09-27 13:23:29 +00:00
Xavier Guimard
29453547e6
Working on SAML ( #595 )
2016-09-26 19:12:40 +00:00
Xavier Guimard
59282e5a1a
Working on SAML ( #595 )
2016-09-25 16:44:48 +00:00
Xavier Guimard
9309fb3553
Working on SAML ( #595 )
2016-09-22 20:12:56 +00:00
Xavier Guimard
4102fb21bf
Working on SAML ( #595 )
2016-09-21 20:08:50 +00:00
Xavier Guimard
083db048d4
Working on SAML ( #595 )
2016-09-19 21:00:27 +00:00
Clément Oudot
47c227246b
Port option to store ID token in trunk ( #1083 )
2016-09-13 13:40:02 +00:00
Clément Oudot
5d2be9a418
Port SAML Token options in trunk ( #1083 )
2016-09-13 12:04:30 +00:00
Clément Oudot
24b509c05a
Skip SLO if no method found ( #1084 )
2016-09-13 10:16:02 +00:00
Clément Oudot
1eec474abd
Test token endpoint auth method ( #1082 )
2016-09-08 08:26:15 +00:00
Clément Oudot
d9a2070f2e
Prevent server error when mutli stack not initialized in logout process ( #1068 )
2016-09-07 17:46:46 +00:00
Clément Oudot
3e96a5fba9
Fix URL matching in OpenID auth module ( #1080 )
2016-09-06 10:00:47 +00:00
Clément Oudot
194d5e3404
Replace CryptoJS URL everywhere ( #1078 )
2016-09-06 07:36:03 +00:00
Clément Oudot
c3b3a7b512
Apply to trunk ( #1078 )
2016-09-05 10:31:51 +00:00
Xavier Guimard
0e629f8204
Remove old file
2016-08-31 10:20:56 +00:00
Xavier Guimard
1bd86a6a03
Compile skin rules at reload ( #595 )
2016-08-09 12:08:49 +00:00
Xavier Guimard
b2977eec95
Add Auth/SSL ( #595 )
2016-08-05 11:56:16 +00:00
Xavier Guimard
fd25a76cbe
#1044 in progress
2016-08-03 07:31:36 +00:00
Xavier Guimard
21d3efcc87
#1044 in progress
2016-08-02 13:52:29 +00:00
Xavier Guimard
af13f0ebf2
Fix #1064
2016-07-22 09:47:50 +00:00
Xavier Guimard
095ffcab48
Password in progress ( #595 )
2016-07-20 20:47:43 +00:00
Xavier Guimard
d34be2d07c
Verify that DBI connection is available before using it ( #595 )
2016-07-20 07:28:20 +00:00
Xavier Guimard
566f33a40f
Typo in ^
2016-07-18 19:45:05 +00:00
Xavier Guimard
519f0c2e82
Remove authForce ( #595 )
2016-07-18 19:42:53 +00:00
Xavier Guimard
844e5d3e88
Password in progress ( #595 )
2016-07-18 19:38:14 +00:00
Xavier Guimard
ac3b040223
Add ForceAuth plugin ( #595 )
2016-07-14 08:25:05 +00:00
Xavier Guimard
a802f60e6a
Update session with pwd db ( #595 )
2016-07-13 05:10:57 +00:00
Xavier Guimard
3e0d98c14f
Typo
2016-07-12 18:58:33 +00:00
Clément Oudot
e5f360ea43
Do not try to delete session with double cookie in single session ( #1059 )
2016-07-12 16:33:20 +00:00
Xavier Guimard
07c56321de
Password/DBI skeleton
2016-07-12 05:15:26 +00:00
Xavier Guimard
bb3a2e37bd
Add test for Password/Demo ( #595 )
2016-07-11 21:02:32 +00:00
Clément Oudot
532032173b
Always build request for SAML SLO relay ( #1028 )
2016-07-11 10:04:03 +00:00
Clément Oudot
745a8ffb81
Catch SAML SLO relay URLS ( #1056 )
2016-07-11 09:32:00 +00:00
Clément Oudot
3a6978dad8
Add option to decode UTF8 SAML attributes ( #1045 )
2016-07-08 14:14:37 +00:00
Clément Oudot
0f71f48278
Use Lasso thin-sessions flag ( #1052 )
2016-07-08 13:04:22 +00:00
Xavier Guimard
85ef45dfeb
Pwd change is for auth users ( #595 )
2016-07-08 04:22:04 +00:00
Xavier Guimard
caef405fa8
Clean repo ( #595 )
2016-07-07 21:56:26 +00:00
Xavier Guimard
806da327f2
Password system skeleton ( #595 )
2016-07-07 21:55:23 +00:00
Xavier Guimard
37ad0047d8
Add Choice test ( #595 )
2016-07-07 20:55:27 +00:00
Xavier Guimard
e8b70872c1
Clean od files ( #595 )
2016-07-04 18:44:34 +00:00
Xavier Guimard
d27de97454
Repair portal links (LEMONLDAP-960)
2016-07-03 07:28:08 +00:00
Xavier Guimard
ec46fe01e5
Working on Choice ( #595 )
2016-07-02 19:09:45 +00:00
Xavier Guimard
8307161f0c
Working on Choice ( #595 )
2016-07-02 08:51:00 +00:00
Xavier Guimard
1577400bf4
Working on Choice ( #595 )
2016-07-01 16:59:59 +00:00
Xavier Guimard
6627121200
Working on Choice ( #595 )
2016-07-01 15:56:16 +00:00
Xavier Guimard
d80f2741e7
Working on Choice ( #595 )
2016-06-30 20:42:50 +00:00
Xavier Guimard
32bf3fe483
Fix #1050
2016-06-29 19:40:42 +00:00
Xavier Guimard
5820e5bf36
Working on Choice ( #595 )
2016-06-29 19:34:36 +00:00
Xavier Guimard
daa100ca32
Wrap entry points ( #595 )
2016-06-28 21:27:57 +00:00
Xavier Guimard
72f486c1b6
Enable entry points for auth/userDB modules
2016-06-28 20:56:38 +00:00
Xavier Guimard
bbaaf081ae
Wrapper for Choice, Combine, Multi,... ( #595 )
2016-06-28 20:47:47 +00:00
Clément Oudot
35eb674b33
Manage values for samlIDPMetaDataOptionsSLOBinding ( #1046 )
2016-06-21 12:40:43 +00:00
Clément Oudot
fcaa2f4dbc
Manage empty value for samlIDPMetaDataOptionsSSOBinding ( #1046 )
2016-06-21 10:26:27 +00:00
Xavier Guimard
997440e037
More tests for IssuerGet ( #595 )
2016-06-12 19:38:02 +00:00
Xavier Guimard
f483500222
IssuerGet login is working ( #595 )
2016-06-12 19:26:14 +00:00
Xavier Guimard
ed5882bbe5
IssuerGet skeleton
2016-06-12 16:52:37 +00:00
Xavier Guimard
0eb634aced
Base module for simple issuers ( #595 )
2016-06-10 11:50:37 +00:00
Xavier Guimard
1cf2d8fd5c
Backport #1040
2016-06-10 11:08:09 +00:00
Xavier Guimard
f1bbf4e181
Enable issuerDBGET ( #595 )
2016-06-10 11:03:13 +00:00
Xavier Guimard
ab24b36872
Update comments ( #595 )
2016-06-09 18:40:20 +00:00
Xavier Guimard
bf1fd28aff
Backport #1036
2016-06-09 11:45:10 +00:00
Xavier Guimard
00b90996e0
Little things ( #595 )
2016-06-09 11:45:06 +00:00
Xavier Guimard
d7fca6d396
AuthProxy seems OK ( #595 )
2016-06-07 21:04:24 +00:00
Clément Oudot
c5081effe7
Use directly sessionInfo for GET parameters values ( #1025 )
2016-06-07 13:46:51 +00:00
Clément Oudot
7ef66ae0fc
Apply patch for authForce in AuthMulti ( #985 )
2016-06-07 13:25:26 +00:00
Xavier Guimard
cefed6ffe5
Working on Auth/Proxy ( #595 )
2016-06-06 20:49:59 +00:00
Clément Oudot
7db6b51ece
Use Safe jail to manage GET parameters ( #1025 )
2016-06-06 13:14:03 +00:00
Clément Oudot
7be4088df1
Escape values in URI ( #1025 )
2016-06-06 09:51:12 +00:00
David COUTADEUR
c658710e64
first working version of IssuerDBGet (correct typo + add session variable substitution) (references #1025 )
2016-06-05 13:14:31 +00:00
David COUTADEUR
2d3c8d026b
Work on IssuerDBGet module backend part (references #1025 )
2016-06-04 13:35:53 +00:00
Clément Oudot
98139efb1e
Tolerate some differences in CAS service URI to behave like JASIG CAS ( #1031 )
2016-06-03 10:02:32 +00:00
Xavier Guimard
c1fb44a2b7
Many changes in notifications ( #595 )
2016-06-02 21:20:36 +00:00
Xavier Guimard
201913d603
Verify notification delete ( #595 )
2016-06-01 19:19:53 +00:00
Xavier Guimard
3d1f71fcfb
Add update session methods ( #595 )
2016-06-01 17:36:51 +00:00
Xavier Guimard
3a309684f4
Working on notifications ( #595 )
2016-06-01 05:20:55 +00:00
Xavier Guimard
3414f923f4
Working on notifications ( #595 )
2016-05-31 21:52:18 +00:00
Xavier Guimard
00a0fe7241
Working on notifications ( #595 )
2016-05-31 20:41:35 +00:00
Xavier Guimard
4a18a3f528
Set default values for request ( #595 )
2016-05-31 11:47:10 +00:00
Xavier Guimard
bdace9151f
Notification is displayed ( #595 )
2016-05-31 11:47:08 +00:00
Xavier Guimard
181461e2f7
Working on notifications ( #595 )
2016-05-30 20:20:53 +00:00
Xavier Guimard
c138514b34
Working on notifications ( #595 )
2016-05-30 11:32:21 +00:00
Xavier Guimard
12b23f18e6
Working on notifications ( #595 )
2016-05-30 05:15:57 +00:00
Xavier Guimard
205bf2e7ea
Working on notifications ( #595 )
2016-05-29 07:48:06 +00:00
Xavier Guimard
ad2f8b643f
Notifications skeleton ( #595 )
2016-05-28 08:33:39 +00:00
Xavier Guimard
cb91d97b2b
Remove cda code: already written in plugin ( #595 )
2016-05-27 05:00:50 +00:00
Xavier Guimard
70f4302984
Remove old file ( #595 )
2016-05-27 05:00:49 +00:00
Xavier Guimard
647ad67eeb
Translate Remote in new format + add test ( #595 )
2016-05-26 21:26:49 +00:00
Xavier Guimard
73e0199c8b
Enable jsRedirect ( #595 )
2016-05-26 21:26:47 +00:00
Xavier Guimard
4ee99bd0f9
Add slave auth ( #595 )
2016-05-25 19:30:43 +00:00
Xavier Guimard
408e19642a
Delete transformed files ( #595 )
2016-05-25 05:13:36 +00:00
Xavier Guimard
1eb433140d
Working on Facebook ( #595 )
...
Seems to work but not fully tested
2016-05-24 21:18:19 +00:00
Xavier Guimard
fa45062be5
Display errors in HTML ( #595 )
2016-05-24 20:50:22 +00:00
Xavier Guimard
d63fefe415
Working on Facebook ( #595 )
2016-05-24 16:53:43 +00:00
Xavier Guimard
baadb59f63
Working on Facebook ( #595 )
2016-05-24 16:53:41 +00:00
Xavier Guimard
6b2b7edd80
Remove already transformed files ( #595 )
2016-05-24 05:23:05 +00:00
Xavier Guimard
6e837af219
Working on BrowserID ( #595 )
2016-05-24 05:05:51 +00:00
Xavier Guimard
25365061de
In progress... ( #595 )
2016-05-23 21:52:32 +00:00
Xavier Guimard
c535422a98
customParameters for templates ( #595 )
2016-05-23 21:52:29 +00:00
Xavier Guimard
bb39433ad5
Avoid some warnings ( #595 )
2016-05-23 19:28:32 +00:00
Xavier Guimard
47de9275fa
Working on logout and XSS ( #595 )
2016-05-23 16:55:23 +00:00
Xavier Guimard
f5000726d5
Keep urldc after logout ( #595 )
2016-05-23 16:55:18 +00:00
Xavier Guimard
5a45bcf719
Avoid some warnings ( #595 )
2016-05-23 16:55:16 +00:00
Xavier Guimard
73a51bb4fb
Working on XSS detection ( #595 )
2016-05-23 11:53:09 +00:00
Xavier Guimard
159eb4a6ce
Enable logout (#LEMONDAP-595)
2016-05-22 17:06:55 +00:00
Xavier Guimard
258fcd7f13
Update doc ( #595 )
2016-05-22 12:23:04 +00:00
Xavier Guimard
232ab78860
Limit PE_* imports ( #595 )
2016-05-22 12:22:59 +00:00
Xavier Guimard
37ec0b0f9c
Apache auth ( #595 )
2016-05-22 11:27:37 +00:00
Xavier Guimard
1ed7473797
Null auth ( #595 )
2016-05-22 11:27:34 +00:00
Xavier Guimard
baa102a6c9
Documentation for authentication plugins ( #595 )
2016-05-22 08:59:49 +00:00
Xavier Guimard
bd7d6716aa
Load languages ( #595 )
2016-05-21 12:24:42 +00:00
Clément Oudot
a65e1f6f0a
Use REQUEST_URI to restore request path in Choice URL ( #1022 )
2016-05-20 08:47:39 +00:00
Xavier Guimard
3cca919cc8
Improve AD ( #595 )
2016-05-20 04:49:00 +00:00
Xavier Guimard
a00d0d2546
Add AD [Not tested !] ( #595 )
2016-05-19 21:00:58 +00:00
Xavier Guimard
e7a712c082
DBI auth works ( #595 )
2016-05-19 20:07:46 +00:00
Clément Oudot
0ca85d42bb
Fix redirection in Twitter ( #1012 )
2016-05-19 10:01:58 +00:00
Xavier Guimard
80434610c4
DBI in progress ( #595 )
2016-05-19 05:11:50 +00:00
Clément Oudot
b7668c890b
Evaluation of custom template parameters ( #1019 )
2016-05-18 08:13:35 +00:00
Xavier Guimard
b394ba2523
Import r5060 ( #1016 )
2016-05-17 20:06:49 +00:00
Clément Oudot
fc02bce9d0
Rewrite Twitter authentication module with Net::OAuth ( #1012 )
2016-05-15 14:43:48 +00:00
Xavier Guimard
2ebfc8b9b9
Transform old _DBI.pmin new format ( #595 )
2016-05-14 18:05:40 +00:00
Xavier Guimard
5dac8432b8
Remove old unused sub ( #595 )
2016-05-14 17:42:19 +00:00
Clément Oudot
59a377f29a
Export checkHeader method in _Slave ( #1018 )
2016-05-14 14:00:34 +00:00
Xavier Guimard
2eafb60240
LDAP auth works ( #595 )
2016-05-12 19:02:48 +00:00
Clément Oudot
6e1dc4b20b
Apply patch on new trunk LDAP code ( #1011 )
2016-05-11 13:04:40 +00:00
Xavier Guimard
3bce0abda4
LDAP in progress ( #595 )
2016-05-11 11:42:37 +00:00
Clément Oudot
7db58e5b4b
Apply patch on old trunk LDAP code ( #1011 )
2016-05-11 09:39:57 +00:00
Clément Oudot
eb87ab449e
Use only specific Facebook variables, to prevent errors ( #1013 )
2016-05-10 14:49:48 +00:00
Clément Oudot
95c772bf38
Offline mode scope is no more available ( #1013 )
2016-05-10 14:49:47 +00:00
Clément Oudot
99dd68ec4f
Do not query username field, not available anymore ( #1013 )
2016-05-10 14:49:45 +00:00
Xavier Guimard
566dbcc9e2
LDAP in progress ( #595 )
2016-05-07 11:27:08 +00:00
Xavier Guimard
0aa2c4c76f
LDAP in progress ( #595 )
2016-05-05 20:26:41 +00:00
Xavier Guimard
20cf296e81
Typo ( #1004 )
2016-05-05 07:34:15 +00:00
Xavier Guimard
840ee06eab
Import es, it, pt, ne and de translation ( #1004 )
2016-05-05 07:21:51 +00:00
Xavier Guimard
0de8e5a534
#595 in progress
2016-05-04 11:38:49 +00:00
Xavier Guimard
00214387c9
LDAP in progress ( #595 )
2016-05-02 10:30:23 +00:00
Xavier Guimard
13f24796b8
LDAP in progress ( #595 )
2016-05-01 07:30:21 +00:00
Xavier Guimard
39c6713aea
Tidy
2016-04-29 07:27:26 +00:00
Xavier Guimard
6172c767d8
LDAP in progress ( #595 )
2016-04-28 20:07:35 +00:00
Clément Oudot
a35f694828
Do not use cache for persistent sessions ( #1000 )
2016-04-25 17:12:11 +00:00
Clément Oudot
12621981e0
Force UTF-8 decoding of menu categories and applications ( #995 )
2016-04-20 16:36:30 +00:00
Xavier Guimard
eebe2bbfab
Starting import LDAP in new portal ( #595 )
2016-04-20 05:09:23 +00:00
Clément Oudot
2e795e8ed1
Apply patch to 1.4 branch and trunk ( #991 )
2016-04-19 13:25:20 +00:00
Xavier Guimard
c0e0e32740
Reset groups ( Closes : #992 )
2016-04-18 20:23:41 +00:00
Xavier Guimard
b9cd5a89dd
Improve logout for plugins ( #595 )
2016-04-18 20:23:40 +00:00
Xavier Guimard
35d1ad0b3c
Simple logout works ( #595 )
2016-04-14 19:49:27 +00:00
Xavier Guimard
d32d9646f8
Menu seems to work ( #595 )
2016-04-14 18:42:59 +00:00
Xavier Guimard
05977bca3b
Fix replay list for Multi (may fix #992 )
2016-04-14 10:51:06 +00:00
Xavier Guimard
24d536b7d1
Menu in progress ( #595 )
2016-04-13 21:06:04 +00:00
Xavier Guimard
8cc77fc304
Menu in progress ( #595 )
2016-04-13 11:56:19 +00:00
Xavier Guimard
a1d177900f
Start menu rewriting ( #595 )
2016-04-13 05:32:10 +00:00
Xavier Guimard
2f19ccb169
prepare display() for later Ajax usage ( #595 )
2016-04-11 05:12:39 +00:00
Xavier Guimard
a3866bc1cc
Login template in progress ( #595 )
2016-04-11 05:00:34 +00:00
Xavier Guimard
6bd696aabd
Trying to display menu ( #595 )
2016-04-10 11:33:27 +00:00
Xavier Guimard
479a3fac28
Login form is displayed ( #595 )
2016-04-10 07:20:54 +00:00
Xavier Guimard
72a076d980
Adapt Display.pm
2016-04-07 21:31:56 +00:00
Xavier Guimard
12fbce8ac2
Get ini parameters before conf reload ( #595 )
2016-04-06 20:10:01 +00:00
Xavier Guimard
099e7e9ff4
Log users even on error ( #595 )
2016-04-06 12:01:53 +00:00
Xavier Guimard
2fb42670f8
Start templates ( #595 )
2016-04-06 05:16:47 +00:00
Xavier Guimard
4f8830fdf6
Macros are working now ( #595 )
2016-04-05 20:46:11 +00:00
Xavier Guimard
dc8ac8030c
autoRedirect works ( #595 )
...
but macros() doesn't
2016-04-05 11:12:53 +00:00
Xavier Guimard
b6f2946c22
Finish "onReload" call ( #595 )
2016-04-04 21:22:27 +00:00
Xavier Guimard
ca84a928db
"onReload" system: handler reload calls portal reload ( #595 )
2016-04-04 21:22:25 +00:00
Xavier Guimard
4fe318a5ea
Authentication succeeds ( #595 )
2016-04-04 20:39:22 +00:00
Xavier Guimard
33569f8c8c
Little bugs ( #595 )
2016-04-04 08:39:26 +00:00
Xavier Guimard
8d1c669a3b
#595 in progress...
2016-04-04 05:08:26 +00:00
Xavier Guimard
a16d452a62
AuthDemo asks for auth ( #595 )
2016-04-03 16:51:23 +00:00
Xavier Guimard
ca16584d8b
#595 in progress...
2016-04-03 16:27:22 +00:00
Xavier Guimard
80f17a91ea
Compile macros and groups ( #595 )
2016-04-03 16:27:19 +00:00
Xavier Guimard
41d487ee1f
Share sessionInfo with underlying handler ( #595 )
2016-04-03 16:27:17 +00:00
Xavier Guimard
1a16c2dbc8
First running test ( #595 )
2016-04-03 16:27:13 +00:00
Xavier Guimard
13051ce0af
#595 in progress
2016-04-03 08:44:58 +00:00
Xavier Guimard
d3d6410646
#595 in progress
2016-04-03 06:33:50 +00:00
Xavier Guimard
eb4b72168b
#595 in progress
2016-04-02 20:17:39 +00:00
Xavier Guimard
8af86353d7
#595 in progress
2016-04-01 10:46:12 +00:00
Xavier Guimard
78f074bd3d
#595 in progress...
2016-04-01 10:10:42 +00:00
Xavier Guimard
b1d6dcd041
Typo
2016-04-01 05:31:55 +00:00
Xavier Guimard
acb6071206
New portal in progress... ( #595 )
2016-04-01 05:24:27 +00:00
Xavier Guimard
055e4a7f0e
New process skeleton
2016-03-31 20:08:43 +00:00
Xavier Guimard
ce0f0d09c4
s/CAS_/CAS/
2016-03-31 20:08:40 +00:00
Xavier Guimard
928c669dc4
New portal in progress... ( #595 )
2016-03-31 05:27:59 +00:00
Xavier Guimard
165eed1234
New portal in progress... ( #595 )
2016-03-30 20:01:24 +00:00
Xavier Guimard
d58795456c
New portal in progress... ( #595 )
2016-03-30 19:51:15 +00:00
Xavier Guimard
a13e8870cd
New portal in progress ( #595 )
2016-03-30 19:51:12 +00:00
Xavier Guimard
fca652b75d
New portal in progress ( #595 )
2016-03-30 05:47:38 +00:00
Xavier Guimard
d6cd2512d8
New portal in progress ( #595 )
2016-03-29 21:09:55 +00:00
Xavier Guimard
a11a5565ca
Remove old unused module
2016-03-29 21:09:53 +00:00
Xavier Guimard
2244a8c208
Split PSGI
2016-03-28 07:46:05 +00:00
Xavier Guimard
6452347384
Portal PSGI in progress
2016-03-28 07:46:02 +00:00
Xavier Guimard
43cf53b2a2
Portal PSGI in progress ( #595 )
2016-03-27 18:17:01 +00:00
Xavier Guimard
9be52a6216
Portal PSGI in progress
2016-03-27 18:10:36 +00:00
Xavier Guimard
73f3fc0576
#595 in progress
2016-03-24 22:16:13 +00:00
Xavier Guimard
bd03549d88
PSGI portal skeleton ( #595 )
2016-03-24 06:23:40 +00:00
Xavier Guimard
2d2edb61ac
Merge experimental branch ( #960 )
...
Also update version to 2.0
2016-03-17 22:19:44 +00:00
Clément Oudot
175367f96c
Do not check pwdLastSet if user not found in AD ( #980 )
2016-03-16 12:48:08 +00:00
Xavier Guimard
49743e06fc
Keep _session_id in SOAP requests ( #977 )
2016-03-14 06:22:00 +00:00
Xavier Guimard
ef48301771
Spelling errors
2016-03-05 08:42:06 +00:00
Xavier Guimard
7ac07074ae
Update versions
2016-03-03 20:25:16 +00:00
Xavier Guimard
9d779015c0
Set pivotal variables (needed for status)
2016-03-01 14:26:37 +00:00
Clément Oudot
fff8ba5baa
Block redirection when error must be displayed ( #958 )
2016-03-01 10:40:45 +00:00
Xavier Guimard
8134295c05
Clean strange hook (probably added for experimental Perl Nginx ( #583 )
2016-02-29 21:10:47 +00:00
Xavier Guimard
8c1bd8efeb
Avoid using each(): it tries to delete key
2016-02-13 10:06:48 +00:00
Xavier Guimard
584de6373b
Update portal to use modified status ( #897 )
2016-02-12 17:08:09 +00:00
Clément Oudot
59a262aa00
Force decoding of LDAP Manager password ( #827 )
2016-02-10 15:38:40 +00:00
Clément Oudot
e19bb1e192
Do not import encode_base64url and decode_base64url from MIME::Base64 ( #932 )
2016-02-09 11:13:25 +00:00
Xavier Guimard
9097135ecd
Spelling errors
2016-02-06 18:41:21 +00:00
Clément Oudot
1843fe7434
Create stop method for AD backend ( #914 )
2016-02-02 14:57:49 +00:00
Clément Oudot
cd56a89b9e
Create a stop method to know if the Multi process should stop ( #914 )
2016-02-02 13:58:54 +00:00
Clément Oudot
333403dfd0
Possibility to override Portal standard messages ( #915 )
2016-02-02 11:24:44 +00:00
Clément Oudot
607641dcfd
Possibility to use certificate in SAML response ( #836 )
2016-02-01 16:42:15 +00:00
Clément Oudot
7d7e5a6717
Decode internal perl encoding for SAML attribute ( #864 )
2016-01-29 17:21:23 +00:00
Xavier Guimard
b6f7b2a96a
Move Ajax hook from handler to portal ( Closes : #790 )
2016-01-28 22:25:46 +00:00
Clément Oudot
ce188e628e
Manage logo customization in Choice ( #911 )
2016-01-22 13:09:05 +00:00
Xavier Guimard
5bef7284b3
Update copyright years
2016-01-21 21:15:19 +00:00
Clément Oudot
fd11f7f814
Import forgotten sha functions ( #184 )
2016-01-21 13:10:08 +00:00
Clément Oudot
6165ac1e59
Add _utime in persistent session ( #495 )
2016-01-20 09:33:27 +00:00
Clément Oudot
412420267d
Remove back to SP link ( #891 )
2016-01-14 15:55:34 +00:00
Xavier Guimard
d2fcb5083a
Back from JSON::MaybeXS to JSON ( #877 )
2016-01-13 19:47:56 +00:00
Xavier Guimard
6eaea5081a
Avoid double utf8 management ( #827 )
2016-01-11 20:32:44 +00:00
Clément Oudot
c90e91b9d5
Set main identifier in persistent session ( #495 )
2016-01-07 13:46:15 +00:00
Xavier Guimard
c0e5e0010e
utf8 anywhere in conf
2016-01-07 12:34:34 +00:00
Xavier Guimard
eb6bfa7107
Insert 'remoteCookieName' as known exception
2016-01-06 06:02:51 +00:00
Clément Oudot
196c59c027
Update session activity when receiving IssuerDB request ( #870 )
2016-01-05 16:44:59 +00:00
Xavier Guimard
103e3da144
make tidy
2016-01-02 09:35:40 +00:00
Xavier Guimard
e8dac0fe6b
Replace 'splice' by copy ( Closes : #534 )
2016-01-02 09:29:05 +00:00
Xavier Guimard
0b52c97cfe
Use JSON::MaybeXS instead of JSON
...
JSON::Any used before as been deprecated
2015-12-28 16:35:32 +00:00
Xavier Guimard
ae675692c4
+Attribute to change LDAP alias dereference ( Closes : #787 )
2015-12-28 11:58:53 +00:00
Xavier Guimard
10323d6b76
Check conditions in AuthSlave and UserDBSlave
...
Closes : #865
2015-12-27 12:29:32 +00:00
Xavier Guimard
8f78863dcf
Change OIDC(JSON|JWKS) key storage
...
Due to old manager behavior, they were stored as key->partner->key. Now
it's simply key->partner
2015-12-20 07:04:38 +00:00
Xavier Guimard
355b298a3a
Better regexp
2015-12-19 06:56:59 +00:00
Clément Oudot
c257baddd9
Fix session management (bug introduced in r4024)
2015-12-18 18:01:15 +00:00
Clément Oudot
4a1f957fdd
Set trunk version to 1.9.0
2015-12-18 09:31:36 +00:00
Xavier Guimard
2df6075dfa
Persistent sessions explorer in progress
2015-12-18 06:17:30 +00:00
Xavier Guimard
6daa0bc77b
Strange bug
...
It happends when serveur is restarted and the first call to portal uses
"?logout=1" with a valid session
2015-12-16 20:44:27 +00:00
Xavier Guimard
3372341fec
Start authChoice management
2015-12-12 13:18:48 +00:00
Xavier Guimard
5a3fc1bfed
Adapt "multi" system to the new manager
...
IMPORTANT: auth and userDB stacks are now in distinct keys
2015-12-10 20:05:29 +00:00
Clément Oudot
8c109061a9
Return error if no OpenID Provider configured ( #183 )
2015-10-22 13:40:11 +00:00
Clément Oudot
a6821a7fca
Fix trailing slash in post logout URL ( #183 )
2015-10-22 09:24:18 +00:00
Clément Oudot
df59540d22
make tidy
2015-10-22 08:40:12 +00:00
David COUTADEUR
7fd8390c85
correcting typo for #822 feature (checking pwdLastSet in AD is not sufficient)
2015-10-08 12:49:32 +00:00
Clément Oudot
d1540c280f
Move AD specific code in AuthAD and check userAccountControl before displaying expiration warning ( #822 )
2015-10-06 09:39:23 +00:00
Clément Oudot
ad0c56cb84
Manage password expiration for AD authentication backend ( #822 )
2015-10-05 14:07:24 +00:00
Clément Oudot
b05fab6eac
Dump variables stored in session in debug mode ( #792 )
2015-09-25 15:29:57 +00:00
Clément Oudot
b8d8b01ea4
Create hGroups to store groups as an HashRef:
...
* Allows to store multivaluated attributes of groups (#792 )
* Remove duplicate groups when using recursive groups (#823 )
2015-09-25 09:43:04 +00:00
Clément Oudot
f8d9274a2c
Store multi full module name in another session variable ( #715 )
2015-09-24 06:58:21 +00:00
Clément Oudot
62a8fb17ac
Fix SOAP data formatting ( #850 )
2015-09-23 09:02:47 +00:00
Clément Oudot
99953c14eb
Add _lastSeen to default exported attributes with SOAP ( #845 )
2015-09-23 08:31:46 +00:00
Xavier Guimard
9298c07510
Typo
2015-09-22 05:38:23 +00:00
Clément Oudot
fa95ab2ee7
Possibility to define extra claims ( #184 )
2015-06-19 09:06:13 +00:00
Clément Oudot
c5a6d3f31c
Force Base64 URL for JWT signature ( #184 )
2015-06-18 12:47:35 +00:00
Xavier Guimard
87fd52a0ab
Update copyrights
2015-06-18 11:00:24 +00:00
Clément Oudot
13dc6d5755
Fix 'exp' field in ID Token ( #184 )
2015-06-18 10:20:15 +00:00
Clément Oudot
96207ab19d
Support URL for application logo ( #183 )
2015-06-16 15:43:07 +00:00
Clément Oudot
15cfb0ed43
Support URL for application logo ( #184 )
2015-06-16 15:34:11 +00:00
Clément Oudot
ef43679ce1
Manage session not found in portal ( #825 )
2015-06-12 10:56:38 +00:00
Clément Oudot
12890c4512
Fix oidcStorageOptions initialization ( #184 )
2015-06-12 07:51:37 +00:00
Clément Oudot
e3af829e5a
Remove portalAutocomplete configuration ( #824 )
2015-06-11 12:59:20 +00:00
Clément Oudot
b81aea14b4
Define an ID for public key ( #184 )
2015-06-05 12:55:06 +00:00
Clément Oudot
fe77ab4dbb
CHeck session iframe with CORS for session management ( #184 )
2015-06-01 18:22:36 +00:00
Clément Oudot
05ecd34598
Parameter to define allowed flows ( #184 )
2015-05-29 16:49:32 +00:00
Clément Oudot
121e578b7e
Parameter to allow dynamic client registration ( #184 )
2015-05-29 10:07:54 +00:00
Clément Oudot
b66a90e197
Register dynamic client in configuration ( #184 )
2015-05-29 08:50:51 +00:00
Clément Oudot
ab0b6e7190
Display correct skin in register page ( #818 )
2015-05-11 14:06:20 +00:00
Clément Oudot
f82a7319be
Display correct skin in mail reset page ( #818 )
2015-05-11 13:50:55 +00:00
Clément Oudot
fe2ad66a29
Add attributes in CAS serviceValidate response ( #773 )
2015-05-09 17:49:56 +00:00
Clément Oudot
ad2c67c2ba
Support Request URI ( #184 )
2015-04-30 06:09:51 +00:00
Clément Oudot
159f71fd25
Verify Request JWT signature ( #184 )
2015-04-25 15:19:12 +00:00
Clément Oudot
94f1065e5d
Accept 'request' parameter in authorization requests ( #184 )
2015-04-22 17:16:32 +00:00
Clément Oudot
0b3f9a78ff
Parse UserInfo response as JWT ( #183 )
2015-04-18 08:36:42 +00:00
Clément Oudot
1c0df34268
Replace version 2.00 by 2.0.0
2015-04-15 14:18:38 +00:00
Clément Oudot
9520bef489
Manager UserInfo signature (JWT response) ( #184 )
2015-04-14 18:42:02 +00:00
Clément Oudot
572636ead1
Use Base64 URL to decode JWT ( #184 )
2015-04-11 11:15:01 +00:00
Clément Oudot
a63918d28f
Return session state for session management ( #184 )
2015-04-07 09:04:17 +00:00
Clément Oudot
ac5f76f898
Option to deactivate nonce ( #183 )
2015-04-03 13:45:38 +00:00
Clément Oudot
a17159f105
Don't send max_age if value is 0 ( #183 )
2015-04-03 13:23:52 +00:00
Clément Oudot
3ad495f824
Call endsession point in authLogout ( #183 )
2015-04-03 13:00:30 +00:00
Clément Oudot
328a280601
Work on implementation of OIDC logout ( #184 )
2015-04-03 09:05:36 +00:00
Clément Oudot
841f057c25
Work on implementation of OIDC logout ( #184 )
2015-04-02 16:54:00 +00:00
Clément Oudot
85650ae3be
Start implementation of OIDC logout ( #184 )
2015-04-02 07:02:21 +00:00
Clément Oudot
72aecd6cf1
Configuration of Authentication Class Ref ( #184 )
2015-04-01 15:45:08 +00:00
Clément Oudot
b9494d1b0a
Check iat ( #183 )
2015-04-01 15:10:08 +00:00
Clément Oudot
0fa5cf2614
Use max_age, ui_locales and acr_values ( #183 )
2015-04-01 14:51:49 +00:00
Clément Oudot
01aec28467
Use prompt ( #183 )
2015-04-01 13:00:31 +00:00
Clément Oudot
865551989b
Use display ( #183 )
2015-04-01 12:53:18 +00:00
Clément Oudot
9936ade26b
Use nonce ( #183 )
2015-03-31 16:07:50 +00:00
Clément Oudot
2e0f1b7088
Start of registration endpoint implementation ( #184 )
2015-03-30 15:57:23 +00:00
Clément Oudot
b14ec43a88
Check redirect_uri ( #184 )
2015-03-30 12:58:56 +00:00
Clément Oudot
da31a15cb9
Add support for RS256/RS384/RS512 to sign ID Tokens ( #184 )
2015-03-27 15:13:00 +00:00
Clément Oudot
895d7f3ef1
Display pretty JSON ( #184 )
2015-03-27 14:33:13 +00:00
Clément Oudot
d22853d775
Support for JWKS URI and signing public key ( #184 )
2015-03-27 14:21:43 +00:00
Clément Oudot
f8e37c0c8b
Use SAML message creation time to set netBefore and notOnOrAfter ( #799 )
2015-03-27 08:29:12 +00:00
Clément Oudot
6c5487ab0e
Check prompt parameter when displaying consent ( #184 )
2015-03-27 08:25:36 +00:00
Clément Oudot
9f06668eef
Check id_token_hint request parameter for authenticated user ( #184 )
2015-03-25 16:13:09 +00:00
Clément Oudot
46e3b460c1
Check max_age request parameter for authenticated user ( #184 )
2015-03-25 16:11:45 +00:00
Clément Oudot
e1794d1be7
Check prompt request parameter for authenticated user ( #184 )
2015-03-25 14:55:46 +00:00
Clément Oudot
80480e302c
Prompt parameter is a space delimited value ( #184 )
2015-03-25 13:48:36 +00:00
Clément Oudot
1937448419
Check hidden fields in issuerForUnAuthUser ( #184 )
2015-03-25 11:53:03 +00:00
Clément Oudot
158c097e66
Manage login_hint request parameter ( #184 )
2015-03-25 11:40:58 +00:00
Clément Oudot
70bcd003f6
Manage ui_locales request parameter ( #184 )
2015-03-25 11:15:31 +00:00
Clément Oudot
c6589a7f7b
Check display and prompt request parameters for unauthenticated user ( #184 )
2015-03-25 10:54:00 +00:00
Clément Oudot
c07f698bdb
Manage consent refuse and server_error errors ( #184 )
2015-03-25 09:11:46 +00:00
Clément Oudot
8e06ec1bd1
Get all OIDC parameters on authorization endpoint and check required ones ( #184 )
2015-03-24 17:01:15 +00:00
Clément Oudot
699303cf47
Use redirection for errors on authorization endpoint ( #184 )
2015-03-24 16:40:00 +00:00
Clément Oudot
45ed174666
Generate at_hash at token endpoint ( #184 )
2015-03-23 17:04:00 +00:00
Clément Oudot
2ff0b7277a
Add hybrid flow support ( #184 )
2015-03-23 11:54:22 +00:00
Clément Oudot
539f241725
Generate at_hash in ID Token for implicit flow ( #184 )
2015-03-19 17:04:13 +00:00
Clément Oudot
c3cb985323
Manage access token hash in RP ( #183 )
2015-03-19 15:28:58 +00:00
Clément Oudot
4e7f4eb85e
Use nonce in Authentication Code Flow ( #184 )
2015-03-17 12:56:11 +00:00
Clément Oudot
89e3678bdf
Manage OIDC Implicit Flow ( #184 )
2015-03-17 11:01:11 +00:00
Clément Oudot
33bc52b619
Skeleton to manage different OIDC response types ( #184 )
2015-03-16 17:00:56 +00:00
Clément Oudot
71bc645d51
Authentication Context in ID Token ( #184 )
2015-03-13 12:54:04 +00:00
Clément Oudot
23b2c6f996
Configure Access Token expiration ( #184 )
2015-03-13 11:09:39 +00:00
Clément Oudot
74958870bb
Auth time and expiration in ID Token ( #184 )
2015-03-13 10:54:36 +00:00
Clément Oudot
6d6d7e6424
Fix typo on Relying Party ( #184 )
2015-03-11 16:24:10 +00:00
Clément Oudot
167fdb66c4
Possibility to configure attribute used to fill OIDC User ID ( #184 )
2015-03-11 16:16:37 +00:00
Clément Oudot
55fe1a5ec8
Refactor code that build authz response ( #184 )
2015-03-11 15:47:24 +00:00
Clément Oudot
ca146c7525
Remove unused imports ( #184 )
2015-03-11 15:07:00 +00:00
Clément Oudot
f3dcec7ad7
Display user friendly messages for scope consent ( #184 )
2015-03-11 14:34:31 +00:00
Clément Oudot
495da0dde5
Check accepted scope in consent step ( #184 )
2015-03-11 13:53:58 +00:00
Clément Oudot
2d015ebdcd
Possibility to change backend for OIDC sessions ( #184 )
2015-03-11 11:39:20 +00:00
Clément Oudot
6f128235af
Set version 2.00 in the trunk
2015-03-11 09:05:04 +00:00
Clément Oudot
7a7bb1fbda
make tidy on all files
2015-03-10 15:07:33 +00:00
Clément Oudot
a31663cf38
Delete captcha session only when authentication process is finished ( #788 )
2015-03-09 16:44:19 +00:00
Xavier Guimard
53e41d145c
Auth modules must be set
2015-03-09 15:55:46 +00:00
Clément Oudot
ef4af6b3f2
ID Token signature configuration ( #184 )
2015-02-19 18:04:29 +00:00
Clément Oudot
d1d97d16c3
Set _utime in OIDC sessions ( #184 )
2015-02-19 15:17:49 +00:00
Clément Oudot
68607ca947
Implement UserInfo endpoint ( #184 )
2015-02-04 13:25:13 +00:00
Clément Oudot
968f0e065a
Check authentication on token endpoint ( #184 )
2015-02-02 09:44:33 +00:00
Clément Oudot
9f69f03b09
Store scope in access token session ( #184 )
2015-01-31 15:17:56 +00:00
Clément Oudot
31e0a1cfb5
Obtain user consent for OpenID Connect requested scope ( #184 )
2015-01-31 14:34:52 +00:00
Clément Oudot
3c3cc39d0c
Check sub of UserInfo JSON (references #183 )
2015-01-31 14:33:05 +00:00
Clément Oudot
e6ae3b9925
Restore hidden form values ( #184 )
2015-01-29 13:32:31 +00:00
Clément Oudot
0be124d3d7
Prevent reuse of authorization code ( #184 )
2015-01-28 16:53:06 +00:00
Clément Oudot
70281de82d
Add some debug logs ( #184 )
2015-01-28 13:41:10 +00:00
Clément Oudot
39b83ae46a
OpenIDConnect Service metadata parameters in Manager ( #184 )
2015-01-28 13:07:11 +00:00
Clément Oudot
2abb7fafde
Check that RP is registered ( #184 )
2015-01-23 13:06:54 +00:00
Clément Oudot
b82153ab17
Start implementation of OpenID Connect provider ( #184 )
2015-01-20 10:04:44 +00:00
David COUTADEUR
a82d36a794
Fix LEMONLDAP-784: https://jira.ow2.org/browse/LEMONLDAP-784
...
reset password in AD not working
2015-01-08 17:05:40 +00:00
Clément Oudot
7e74e27a3b
Autoselect OP if only one is configured ( #183 )
2014-12-15 14:58:42 +00:00
Clément Oudot
922b92bbbe
Configuration of OpenID Connect auth module and OP in Manager ( #183 )
2014-12-15 13:55:23 +00:00
Clément Oudot
18072723de
Compatibility with AuthChoice ( #183 )
2014-12-11 17:05:33 +00:00
Clément Oudot
8b7ad81ff5
Add first OpenID Connect RP parameters in Manager ( #183 )
2014-12-11 16:54:27 +00:00
Clément Oudot
0014e2cdaf
Invalidate CAS Service Ticket when it is used ( #775 )
2014-12-05 09:21:07 +00:00
Clément Oudot
8b1ea19725
Possibility to define a background image for portal skin ( #770 )
2014-12-02 14:51:23 +00:00
Clément Oudot
eea1fedd3c
Better look of OpenID Provider list ( #183 )
2014-12-01 17:07:55 +00:00
Clément Oudot
44c64ea606
Manage refresh of JWKS data ( #183 )
2014-12-01 10:27:47 +00:00
Clément Oudot
c5ad64e694
Try to fix build #491 ( #183 )
2014-11-24 08:39:16 +00:00
Clément Oudot
c09d2c4e00
Check ID Token validity ( #183 )
2014-11-22 08:53:17 +00:00
Clément Oudot
ee43c5010f
Check token response validity (references #183 )
2014-11-22 08:46:41 +00:00
Clément Oudot
c0b7af29b8
Support client_secret_basic and client_secret_post for token endpoint authentication (references #183 )
2014-11-21 17:15:47 +00:00
Clément Oudot
bc6920dd03
Check error in authn response ( #183 )
2014-11-21 10:32:35 +00:00
Clément Oudot
6ba3d9e44e
Manage exported vars per OP ( #183 )
2014-11-20 15:53:26 +00:00
Clément Oudot
687f0ed094
Change configuration format to allow to define several OP ( #183 )
2014-11-20 14:03:32 +00:00
Clément Oudot
74a7770fa4
Use extractJWT method ( #183 )
2014-11-20 09:11:55 +00:00
Clément Oudot
53aab6d3c0
Verify JWT signature for RS256/RS384/RS512 alg ( #183 )
2014-11-19 14:17:39 +00:00
Clément Oudot
ab1e318149
Add support for HS368 and HS512 JWT signature alg ( #183 )
...
Get OpenID configuration data from configuration URI (#183 )
2014-11-19 11:09:37 +00:00
Clément Oudot
5a09c04445
Add some log to JWT signature verification ( #183 )
2014-11-18 14:32:15 +00:00
Clément Oudot
27225cfe86
Option to check JWT Signature ( #183 )
2014-11-18 14:24:03 +00:00
Clément Oudot
2a33f67155
Verify JWT signature for HS256 alg ( #183 )
2014-11-17 18:09:55 +00:00
Clément Oudot
3cde211810
Save/restore state in OpenID Connect RP ( #183 )
2014-11-17 13:55:26 +00:00
Clément Oudot
c64f69a852
Use eval to decode JSON content ( #183 )
2014-11-14 16:53:56 +00:00
Clément Oudot
914fe20eb5
Create OpenIDConnect library ( #183 )
2014-11-14 16:18:50 +00:00
Clément Oudot
2ff2d0e01a
First version of OpenIDConnect RP module ( #183 )
2014-11-14 14:29:55 +00:00
Clément Oudot
5bb0f01de4
Manage vhost aliases in portal menu ( #755 )
2014-11-03 17:07:47 +00:00
Clément Oudot
2af54acd97
Do not call data on undefined session object ( #762 )
2014-10-27 11:19:25 +00:00
Clément Oudot
2a343dff84
Fix TODO by using autoRedirect ( #753 )
2014-08-21 12:22:10 +00:00
Clément Oudot
7e517cbdd0
Do not hardcode OpenID server path ( #753 )
2014-08-21 12:19:12 +00:00
Clément Oudot
df926b3429
Fix OpenID Issuer with new Net::OpenID::Server version ( #753 )
2014-08-21 11:49:56 +00:00
Clément Oudot
3b947a0bb3
Add portal in trusted hosts ( #752 )
2014-08-19 10:05:15 +00:00
Clément Oudot
f97f5c72e0
make tidy
2014-07-24 15:48:32 +00:00
Clément Oudot
e011600113
Show error from Common::Session module in logs ( #741 )
2014-07-24 15:37:12 +00:00
Clément Oudot
ee1918fe21
Keep default value in condition if no notOnOrAfter timeout configured ( #737 )
2014-07-21 10:48:36 +00:00
Clément Oudot
15835e1e02
Possibility to configure conditions notOnOrAfter ( #737 )
2014-07-21 10:46:01 +00:00
Clément Oudot
b4bda626de
Possibility to configure subjectConfirmation notOnOrAfter ( #737 )
2014-07-21 10:42:16 +00:00
Clément Oudot
757ac6f15d
Possibility to configure sessionNotOnOrAfter ( #737 )
2014-07-21 09:44:28 +00:00
Clément Oudot
9bc097dd21
Compatibility of SSL modules with SOAP getCookies ( #719 )
2014-07-15 13:41:27 +00:00
Clément Oudot
93cc4a9f70
Rebind as manager after password change in order to read groups ( #725 )
2014-07-09 13:56:58 +00:00
Clément Oudot
f21184a59c
Call authInit in MailReset to get the authentication choice ( #664 )
2014-06-25 12:58:15 +00:00
Clément Oudot
b72d79a30b
Better connection management ( #663 , #LEMONLDAP-664):
...
- Create userDBFinish, passwordDBFinish and registerDBFinish methods
- Call finish methods for each backend in process
- Call LDAP unbind only when necessary
- Unbind if error in RegisterDBLDAP
2014-06-25 11:53:09 +00:00
François-Xavier Deltombe
70ec1d03cb
Refactor LL::NG::Handler::Specific::AuthBasic ( #630 )
2014-06-25 10:01:17 +00:00
Clément Oudot
941c27631c
Disconnect from LDAP when error occurs, and enable cache management even with Multi backend ( #664 )
2014-06-23 12:45:27 +00:00
Clément Oudot
1b6655a431
Delete captcha session when check is done, and add captcha backend in purgeCentralCache script ( #703 )
2014-06-11 10:22:34 +00:00
Clément Oudot
473cd6c9dc
Use a session backend to manage captcha ( #703 )
2014-06-10 16:21:33 +00:00
Clément Oudot
dbfbde2e9f
make tidy
2014-06-08 10:04:50 +00:00
Clément Oudot
50b80020da
Port memory leak fix to 1.4 branch ( #708 )
2014-06-06 10:04:14 +00:00
Clément Oudot
d61cd6a6de
Make Register work with AuthChoice ( #26 )
2014-06-06 09:54:48 +00:00
Xavier Guimard
c96e281fee
Avoid potential circular references
2014-06-05 18:05:55 +00:00
Clément Oudot
f6cad5438c
Test if password was auto generated before displaying it in the mail ( #675 )
2014-06-03 08:13:24 +00:00
Clément Oudot
066f52caba
Fix use of ipAddr in Register ( #26 )
2014-06-02 13:56:20 +00:00
Clément Oudot
ba9fa72c1e
AD register module ( #26 )
2014-06-02 10:24:05 +00:00
Clément Oudot
9629d3a500
Fix login generation ( #26 )
2014-06-02 10:12:05 +00:00
Clément Oudot
a5b7cd030c
Register mail in LDAP ( #26 )
2014-06-02 10:08:32 +00:00
Clément Oudot
2e9033d28b
Add a button on login page to register page ( #26 )
2014-05-30 12:21:53 +00:00
Clément Oudot
524fab0b3a
RegisterDB LDAP is complete ( #26 )
2014-05-29 08:12:33 +00:00
Clément Oudot
9b10d96341
Fix unit tests after introducing RegisterDB ( #26 )
2014-05-29 07:38:50 +00:00
Clément Oudot
81dbe943c3
Introduce RegisterDB modules ( #26 )
2014-05-28 16:23:23 +00:00
Clément Oudot
2fe20b1248
Isolate register info in ->{registerInfo} ( #26 )
2014-05-28 15:41:32 +00:00
Clément Oudot
be04271809
Work on Register feature ( #26 )
2014-05-27 16:31:43 +00:00
Clément Oudot
66c93ec387
Manage already existing accounts in Register ( #26 )
2014-05-27 13:42:00 +00:00
Clément Oudot
57182767f4
Some error codes for Register ( #26 )
2014-05-26 16:25:33 +00:00
Clément Oudot
5ce762e9e3
Work on Register page ( #26 )
2014-05-23 18:47:36 +00:00
Clément Oudot
0f963e0b2a
Remove default value from MailReset (LEMONLDAP-686)
2014-05-23 18:44:20 +00:00
Clément Oudot
233026eb6f
Fix password change as user for AD ( #704 )
2014-05-21 12:43:04 +00:00
Clément Oudot
9d6a947499
Specific behaviour for AD password change if it's done as user ( #407 )
2014-05-14 09:43:10 +00:00