Commit Graph

1614 Commits

Author SHA1 Message Date
Xavier Guimard
6943c49c05 More debug (#707) 2017-04-05 11:59:29 +00:00
Xavier Guimard
9ab046311c Auth::Kerberos skeleton (#707) 2017-04-05 11:54:44 +00:00
Xavier Guimard
6b1d3471dc Update sb test with "purge" 2017-04-03 05:02:25 +00:00
Xavier Guimard
ec112017ff Purge can be deferred now (#1173) 2017-04-03 05:02:22 +00:00
Xavier Guimard
c4c38160cb Add LDAP in session-backend perf test 2017-04-01 12:32:10 +00:00
Xavier Guimard
2580a21f7a Remove old UA exported var (#1044) 2017-03-31 16:15:38 +00:00
Clément Oudot
24d28533ad Fix LDAP test after session variable rewrite (#1169) 2017-03-30 08:50:13 +00:00
Xavier Guimard
52cdeb409d Verify SP logout (#1183) 2017-03-29 19:54:54 +00:00
Xavier Guimard
80a1583f0e Remove "skip" (#1183) 2017-03-29 19:50:43 +00:00
Clément Oudot
b175218d1d Fix parsing CAS XML (#1183) 2017-03-29 19:43:10 +00:00
Clément Oudot
10cd479de4 Remove ticket from service URL when calling serviceValidate (#1183) 2017-03-29 19:43:10 +00:00
Xavier Guimard
9944115c8d Fix CAS test (#1183) 2017-03-29 19:02:38 +00:00
Xavier Guimard
22c7aeb6e8 More debug (#1044) 2017-03-29 10:05:34 +00:00
Clément Oudot
75ffa010e7 Fix typo in CAS code (#1183) 2017-03-29 07:51:18 +00:00
Xavier Guimard
2e59ea441a Replace request management in handler (#1044)
Note: this is a big change, more tests needed
2017-03-28 21:07:49 +00:00
Clément Oudot
cc1fc22dcb Remove dependency on AuthCAS (#1183) 2017-03-28 18:23:51 +00:00
Clément Oudot
552c432fef Remove use of AuthCAS module (#1183) 2017-03-28 18:23:50 +00:00
Xavier Guimard
775f1da607 Reauth for OIDC (#1204) 2017-03-28 17:09:46 +00:00
Xavier Guimard
c49dc6f334 Missing "substitute" call (#595) 2017-03-27 20:45:17 +00:00
Xavier Guimard
c761cc5781 Mark some properties "lazy" to be sure conf is intialized (#595) 2017-03-27 16:51:18 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
6cb301c531 Replace MIME::Lite by Email::Sender/MIME::Entity (#1206) 2017-03-27 05:22:08 +00:00
Xavier Guimard
bd9e6f50bf Start replacing MIME::Lite (#1206) 2017-03-26 05:26:28 +00:00
Xavier Guimard
20717fcce0 Verify SAML reauth (#595) 2017-03-26 05:26:25 +00:00
Xavier Guimard
e8e02ce055 Warn if PE85 is returned (#1204) 2017-03-24 18:11:32 +00:00
Xavier Guimard
d93130d168 Adapt SAML forceAuth to new portal (#595) 2017-03-24 18:04:46 +00:00
Clément Oudot
8f85f94e8d Minified js for portal (#1131) 2017-03-24 15:25:54 +00:00
Clément Oudot
964f652c41 Fix js for dropdown in portal menu (#1131) 2017-03-24 15:08:30 +00:00
Xavier Guimard
fc39f58f87 Typo 2017-03-24 15:03:31 +00:00
Xavier Guimard
7a60a8f1c1 Some WAI changes (#1111) 2017-03-24 06:11:55 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
581f0e4c93 Portal part of reauthentication (#1204) 2017-03-23 18:22:40 +00:00
Xavier Guimard
050cf20c72 Session upgrade skeleton (#1204) 2017-03-23 12:41:53 +00:00
Xavier Guimard
7b06532ee6 Comments 2017-03-23 12:41:52 +00:00
Xavier Guimard
3cde1d0a58 Add second factor doc 2017-03-23 12:14:09 +00:00
Xavier Guimard
9c9e48512f Add second factor doc 2017-03-23 12:06:53 +00:00
Xavier Guimard
bf8119e561 Typo 2017-03-23 11:21:53 +00:00
Xavier Guimard
86d7a3a8c0 Add SecondFactor superclass (#1015) 2017-03-23 11:17:01 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
6a76cf1e17 Use system() for security in External2F plugin (#1015) 2017-03-22 22:46:49 +00:00
Xavier Guimard
0538ad1cee Add External2F plugin (#1015) 2017-03-22 22:18:28 +00:00
Xavier Guimard
7e81e1b1e0 Add OIDC-RP rule (#1161) 2017-03-22 20:47:07 +00:00
Xavier Guimard
62528e8b6a Add SAML-SP rule (#1161) 2017-03-22 20:20:30 +00:00
Xavier Guimard
830f15f71d Bad safe usage (#595) 2017-03-22 19:03:49 +00:00
Xavier Guimard
5cd25e3df5 More tests on errors (#595) 2017-03-22 18:11:45 +00:00
Xavier Guimard
e8c2925a3f Typo 2017-03-22 18:11:44 +00:00
Xavier Guimard
d21b62b2aa Verify Combination with token (#1151) 2017-03-22 18:11:42 +00:00
Xavier Guimard
54cab03e06 Avoid warning (#1151) 2017-03-22 18:11:40 +00:00
Xavier Guimard
95d2253bdc Don't ask 2 token validations (Combination with token) 2017-03-22 18:11:36 +00:00
Xavier Guimard
077455e015 Update TODO list 2017-03-22 14:10:21 +00:00
Xavier Guimard
ca2e9be0e5 Rename _loginHistory (#1169) 2017-03-21 21:00:37 +00:00
Xavier Guimard
99ddfbfe25 Rename _startTime and _updateTime (#1169) 2017-03-21 20:52:40 +00:00
Xavier Guimard
1f24e2e6ac Validate SAML-SP-POST-to-OIDC-OP with POST (#1113) 2017-03-21 19:50:18 +00:00
Xavier Guimard
591669b79f Tidy 2017-03-21 19:50:17 +00:00
Xavier Guimard
51665b41f8 Validate OIDC-RP-to-SAML-IdP with POST (#1113) 2017-03-21 19:36:10 +00:00
Xavier Guimard
077713ed32 Typo 2017-03-21 16:06:50 +00:00
Xavier Guimard
919a706efa Restore OpenID-2 (#1113) 2017-03-21 16:06:44 +00:00
Xavier Guimard
997faab13a Finish logout SAML/OIDC (#1113) 2017-03-21 16:06:34 +00:00
Xavier Guimard
b90394dff1 OIDC-RP -> SAML-IdP SLO (#1113) 2017-03-21 13:09:33 +00:00
Xavier Guimard
941ee0d6e1 Try logout with OIDC-RP-to-SAML-IdP proxy (#1113) 2017-03-21 10:29:21 +00:00
Xavier Guimard
5993757427 Little things (#1113) 2017-03-21 07:59:54 +00:00
Xavier Guimard
d6c4b49b2a OIDC-RP to SAML-IdP works !!! (fixes: #1113) 2017-03-21 07:09:31 +00:00
Xavier Guimard
6dba4fd1c2 Better request management in issuers (#595) 2017-03-21 06:23:58 +00:00
Xavier Guimard
7aeef26a94 Add portal in trusted domains 2017-03-20 18:14:10 +00:00
Xavier Guimard
1c6d81e86c Fix timeout 2017-03-20 18:14:08 +00:00
Xavier Guimard
d0467f0802 Restore relayState (#595) 2017-03-20 12:43:57 +00:00
Xavier Guimard
60796fa6a1 SAML in progress (#595) 2017-03-20 06:16:56 +00:00
Xavier Guimard
97fa806052 Adapt appsListOrder from 1.9 (#595) 2017-03-19 07:00:10 +00:00
Xavier Guimard
a6c2d72065 Update variable names (#LEMONDAP-1169) 2017-03-19 06:29:35 +00:00
Xavier Guimard
4acbc59c46 Fix confirm timeout to 30s (#595) 2017-03-19 06:10:22 +00:00
Xavier Guimard
b08eccc168 Missing make minify 2017-03-19 06:10:19 +00:00
Xavier Guimard
f1ac524c24 Use OTT for state token (#(595) 2017-03-18 19:51:00 +00:00
Xavier Guimard
1a65e9a0fe Use OTT for nonce token (#(595) 2017-03-18 19:50:56 +00:00
Xavier Guimard
6cab5c0990 Try SAML-SP to OIDC-OP (#1113) 2017-03-18 12:08:24 +00:00
Xavier Guimard
d6747ad356 Try logout ... failed (#1113) 2017-03-17 17:28:22 +00:00
Xavier Guimard
cdeec00972 Replace "?lmError=" by router path (#595) 2017-03-16 21:33:13 +00:00
Xavier Guimard
a8f7e689b4 30 s everywhere 2017-03-16 20:48:25 +00:00
Xavier Guimard
9a5ecdf1cb Repair activeTimer (#595) 2017-03-16 20:19:06 +00:00
Clément Oudot
272296841a Force AllowCreate in NameIDPolicy (#1200) 2017-03-16 18:39:00 +00:00
Xavier Guimard
bf3c43aecd Replace inline css (#1137) 2017-03-16 11:38:52 +00:00
Xavier Guimard
0845237efe Import CSP in manager code (#1137) 2017-03-15 22:27:58 +00:00
Xavier Guimard
9b9ecee8bb Replace inline script in history (#1137) 2017-03-15 21:20:10 +00:00
Clément Oudot
cfff41c3da Change style for checkboxes (#1184) 2017-03-15 19:32:42 +00:00
Clément Oudot
a8b201deca Translate noHistory message (#595) 2017-03-15 18:38:35 +00:00
Xavier Guimard
1c76c713e7 Remove persistent cookie on lougout (#1131) 2017-03-15 10:01:36 +00:00
Xavier Guimard
126fdb091c Manage cookie expiration (#1131) 2017-03-15 10:01:29 +00:00
Xavier Guimard
f6e5356178 Group SAML tests (#595) 2017-03-15 06:29:44 +00:00
Xavier Guimard
f7b130e956 Proves SAML-SP => OIDC-OP (#1113) 2017-03-14 21:55:47 +00:00
Clément Oudot
e8c3bdb9e2 Fix dropdown menu (#852) 2017-03-14 19:12:24 +00:00
Xavier Guimard
15cf1991bd Reinitialize token when login fails (#1140) 2017-03-14 17:38:50 +00:00
Xavier Guimard
ddad983778 Update languages (#852) 2017-03-14 17:28:36 +00:00
Xavier Guimard
43437a5244 Reinitialize token when login fails (#1140) 2017-03-14 17:26:07 +00:00
Clément Oudot
b3d15760d2 Create a dropdown menu for refresh rights feature (#852) 2017-03-14 17:13:26 +00:00
Xavier Guimard
2d7902421a Reinitialize token when login fails (#1140) 2017-03-14 16:52:11 +00:00
Clément Oudot
df41fc6aaf Icons used in mail templates should be in templates directory (#1184) 2017-03-14 16:28:13 +00:00
Clément Oudot
c71e88ae24 Update MANIFEST (#1184) 2017-03-14 15:54:39 +00:00
Clément Oudot
556b74ff23 Add a logo in custom header (#1184) 2017-03-14 15:54:38 +00:00
Xavier Guimard
a07e92759c Add Auth::PAM (#closes: #1196) 2017-03-14 15:34:10 +00:00
Clément Oudot
625ea22266 Move modules icons in modules directory (#1184) 2017-03-14 14:45:53 +00:00
Clément Oudot
4817ffbd08 Remove unused icons (#1184) 2017-03-14 14:41:23 +00:00
Clément Oudot
efb776a7bf Remove unused icons (#1184) 2017-03-14 14:40:09 +00:00
Clément Oudot
b9d3048600 Skin background can't be in external CSS as it depends on a template variable (#1184) 2017-03-14 11:18:06 +00:00
Clément Oudot
bdbe2dfb75 Fix <link> in <head> (#1184) 2017-03-14 11:18:04 +00:00
Clément Oudot
cffdb35e36 Remove unused CSS (#1184) 2017-03-14 11:18:01 +00:00
Xavier Guimard
5399b0f1d9 Translate trplaceholder (#595, #LEMONLDAP-1184) 2017-03-14 11:04:05 +00:00
Xavier Guimard
2810d6b83c Require cache 2017-03-13 09:16:34 +00:00
Xavier Guimard
05a856ebb1 FrontChannel frame for already logged out user (#1194) 2017-03-12 07:36:07 +00:00
Xavier Guimard
73b71e5587 Set timeout in local cache (#1140) 2017-03-12 07:11:52 +00:00
Xavier Guimard
ec211da331 OIDC RP logout skeleton 2017-03-11 18:12:03 +00:00
Xavier Guimard
a8f3eee74a Use global sessions only (#595) 2017-03-11 18:12:01 +00:00
Xavier Guimard
81d3729394 Use local cache by default for tokens (#1140) 2017-03-11 18:11:57 +00:00
Clément Oudot
6b775be965 Apply patch in loadSP (#1193) 2017-03-11 10:02:50 +00:00
Xavier Guimard
f54dfe6276 More clean patch (#1193) 2017-03-11 07:27:52 +00:00
Xavier Guimard
c73dce5c3f Typo (#1194) 2017-03-11 07:16:27 +00:00
Xavier Guimard
8f4b4588c7 Fix LEMONLDAP-1193 2017-03-11 07:16:24 +00:00
Xavier Guimard
7f460429e1 OIDC OP2RP logout in progress (#1194) 2017-03-10 11:39:19 +00:00
Xavier Guimard
516830c32f Start front channel logout (#1032) 2017-03-09 21:56:53 +00:00
Xavier Guimard
8a5f8d96ef Front-channel logout (#1032) 2017-03-09 21:56:51 +00:00
Xavier Guimard
2c5dddde8a Unused constant (#595) 2017-03-09 21:56:50 +00:00
Xavier Guimard
d70a5b005f Update handler internal cache on session update (#595) 2017-03-09 21:56:48 +00:00
Xavier Guimard
4d9a8da274 Register OIDC associations (#1032) 2017-03-09 21:56:47 +00:00
Xavier Guimard
179f6e0381 Follow OIDC spec: bad error codes (closes: #1191) 2017-03-09 21:56:43 +00:00
Xavier Guimard
4665c9d2ea Revert r6192 (#595) 2017-03-09 05:44:16 +00:00
Xavier Guimard
6028fb8670 Rename test (#1032) 2017-03-08 22:54:17 +00:00
Xavier Guimard
92637d7f0f Add OIDC->SAML cross logout (#1032) 2017-03-08 22:49:01 +00:00
Xavier Guimard
6c042c5660 Launch other logouts in OIDC (#1032) 2017-03-08 22:49:00 +00:00
Xavier Guimard
2e845b9a88 Update tests, see ^^ (#595) 2017-03-08 22:48:58 +00:00
Xavier Guimard
244fad96a0 no strict (#595) 2017-03-08 22:48:57 +00:00
Xavier Guimard
dec3eb4feb Error: IdP cookie was not read (#595) 2017-03-08 22:48:55 +00:00
Xavier Guimard
3926b9876a StayConnected checkbox (closes: #1131) 2017-03-08 21:09:21 +00:00
Xavier Guimard
109e584004 Add StayConnected test (#1131) 2017-03-08 20:56:49 +00:00
Xavier Guimard
ef444dab43 Verify fingerprint (#1131) 2017-03-08 20:56:48 +00:00
Xavier Guimard
6c0a0b6350 Keep combination state when used with StayConnected (#1131) 2017-03-08 20:56:47 +00:00
Xavier Guimard
3921f07349 Keep combination state with stay connected (#1131) 2017-03-08 20:56:45 +00:00
Xavier Guimard
9183935b26 Typo (#595) 2017-03-08 20:56:41 +00:00
Xavier Guimard
8a85dfe0c5 StayConnected plugin ready (#1131)
TODO: stayconnected parameter in login.tpl, that's all !
2017-03-08 19:37:31 +00:00
Xavier Guimard
cad016c4dd Update manifests (#1131) 2017-03-08 17:47:38 +00:00
Xavier Guimard
57189c1fb6 StayConnected plugin (#1131)
TODO: - check fingerprint back
      - insert "stayconnected" param in login.tpl
2017-03-07 22:20:51 +00:00
Xavier Guimard
f63e5eaca1 Add version in conf (to be used later with #797) 2017-03-07 17:49:46 +00:00
Xavier Guimard
2fb085b2a6 New "Custom" modules family (closes: #1188) 2017-03-07 17:28:09 +00:00
Xavier Guimard
d7340203a5 Manage internal dependency versions 2017-03-07 10:03:29 +00:00
Xavier Guimard
21856ea330 Update dependecies (#595) 2017-03-07 10:03:23 +00:00
Xavier Guimard
56337e602e Remove some dependencies (#595) 2017-03-07 06:30:57 +00:00
Xavier Guimard
6344051c75 Update some versions 2017-03-07 06:05:08 +00:00
Xavier Guimard
fa42d390d0 Update minimum version in deps 2017-03-07 06:05:06 +00:00
Xavier Guimard
a9c36da63d Check if vhostOptions is defined (#1185) 2017-03-06 20:26:22 +00:00
Xavier Guimard
82d39edc42 Verify "mysession" (#970) 2017-03-06 16:43:06 +00:00
Xavier Guimard
3b44c4924f Normalize test names (#595) 2017-03-06 15:56:47 +00:00
Xavier Guimard
906f081b31 Verify REST backend config (#970) 2017-03-06 15:06:49 +00:00
Xavier Guimard
8497574a31 Add SOAP backend test (#595) 2017-03-06 12:18:09 +00:00
Xavier Guimard
4c878bc09e Bad test count (#595) 2017-03-06 12:18:07 +00:00
Xavier Guimard
64e5b3c53c Import local configuration for conf access (#595) 2017-03-06 12:18:06 +00:00
Xavier Guimard
d5484c28a7 Add u2fAuthnLevel (#1148) 2017-03-06 12:18:04 +00:00
Clément Oudot
e7266121bb Remove old skins - static files (#1184) 2017-03-04 19:37:27 +00:00
Clément Oudot
80ff8eaad9 Put lang selection in footer (#587) 2017-03-04 19:35:10 +00:00
Clément Oudot
7c69a50bd3 Remove old skins (#1184) 2017-03-04 19:03:09 +00:00
Xavier Guimard
a065f941ed Security: verify that method is POST for main forms (#595) 2017-03-04 08:36:26 +00:00
Xavier Guimard
e6e0571c6a Add handler test lib 2017-03-04 08:07:41 +00:00
Xavier Guimard
96263e0e65 Clean repo 2017-03-03 17:25:03 +00:00
Xavier Guimard
d82f02ea49 Remove ldapjs try 2017-03-03 17:06:02 +00:00
Xavier Guimard
055893e701 More tests for SAML / utf8 (may close #1118) 2017-03-03 16:57:04 +00:00
Xavier Guimard
5d0a4bd96b UTF-8 for Artifacts (#1118) 2017-03-03 16:57:02 +00:00
Xavier Guimard
d83cd6d584 Remove portal part of #971 2017-03-03 12:29:47 +00:00
Xavier Guimard
59970dd3d6 Typo (#595) 2017-03-03 12:17:15 +00:00
Clément Oudot
996c858a23 Restore default log level in LDAP test 2017-03-03 07:41:59 +00:00
Xavier Guimard
8c4367fd3f Service token in progress (#971) 2017-03-03 06:29:50 +00:00
Xavier Guimard
0b25e306d6 Update LDAP tests (see r6129) + fix bad log (#595) 2017-03-02 21:25:03 +00:00
Xavier Guimard
26adc9ce87 Test for CAS IdP (#1118) 2017-03-02 21:05:59 +00:00
Xavier Guimard
b31afabc5d Fix UTF for OIDC (#1118) 2017-03-02 20:52:12 +00:00
Xavier Guimard
3492ec60f7 Add utf8 test is SAML (#1118) 2017-03-02 20:29:54 +00:00
Xavier Guimard
1f06d872be Add utf8 test is SAML (#1118) 2017-03-02 20:15:53 +00:00
Clément Oudot
fcd76f42a1 Fix LDAP password change code 2017-03-02 17:21:15 +00:00
Clément Oudot
02aa10bdc3 Some changes in LDAP tests to allow custom OpenLDAP installation 2017-03-02 16:50:13 +00:00
Xavier Guimard
7a67d7bb69 Typo 2017-03-02 15:56:24 +00:00
Xavier Guimard
cd3ce4c55c LDAP tests in progress (#1118) 2017-03-02 06:35:15 +00:00
Xavier Guimard
587277e621 Change password test (#595) 2017-03-02 06:13:52 +00:00
Xavier Guimard
656d631482 Prepare own slapd server (#1118)
Insert "export LLNGTESTLDAP=1" in your .bashrc to enable LDAP tests
2017-03-01 22:18:00 +00:00
Xavier Guimard
83ab7d59bc Remove ldapjs: unable to bind (#1118) 2017-03-01 22:17:58 +00:00
Xavier Guimard
63e2b66674 Prepare LDAP server for tests (#1118) 2017-03-01 18:14:50 +00:00
Xavier Guimard
d29fef91f6 UTF8 tests for DBI backend (#1118) 2017-03-01 17:35:15 +00:00
Xavier Guimard
cc18d7f050 First UTF-8 tests (#1118) 2017-03-01 17:35:12 +00:00
Xavier Guimard
64756142e1 Service token server (#971) 2017-03-01 06:41:42 +00:00
Xavier Guimard
e2f4de3f9d Missing versions (#595) 2017-02-28 20:53:19 +00:00
Xavier Guimard
4964b5a5d5 Update examples (#595) 2017-02-28 20:21:59 +00:00
Clément Oudot
fcd3691205 Restore div hierarchy in boostrap skin 2017-02-28 19:37:33 +00:00
Clément Oudot
ffa83eb6b0 Use getSkin to choose portal skin in Register and MailReset (#1177) 2017-02-28 18:43:27 +00:00
Clément Oudot
c18533d447 Use getSkin to choose portal skin (#1177) 2017-02-28 18:39:56 +00:00
Clément Oudot
27b25a7922 Add hidden field for skin in login template (#1177) 2017-02-28 18:32:29 +00:00
Xavier Guimard
b0f0e1004b Replace SOAP by REST for AuthBasic (#970) 2017-02-28 09:49:37 +00:00
Xavier Guimard
4102180eff Typo 2017-02-28 06:34:52 +00:00
Xavier Guimard
7da90a8850 Add ~getCookie (#970) 2017-02-28 06:34:51 +00:00
Xavier Guimard
c773150d86 Security error 2017-02-28 06:34:49 +00:00
Xavier Guimard
b132e83530 Better token for REST session creation (#970) 2017-02-28 05:30:47 +00:00
Xavier Guimard
bb67c25d75 Decrease user errors to "warn" in tests (#595) 2017-02-27 21:04:35 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
babb7f9230 Little things (#595) 2017-02-27 19:30:43 +00:00
Xavier Guimard
be414bcfaf Update (c) + paths (#595) 2017-02-27 06:08:22 +00:00
Xavier Guimard
e90e232b36 Update manifest (#595) 2017-02-26 18:08:30 +00:00
Xavier Guimard
e8340646b8 bower update 2017-02-26 18:07:39 +00:00
Xavier Guimard
9ae8fd9f83 Working on install (#595) 2017-02-24 12:28:55 +00:00