Commit Graph

2326 Commits

Author SHA1 Message Date
Maxime Besson
57b28940fa Do not show password change prompt when AD password is incorrect (#2007) 2019-11-15 11:59:03 +01:00
Maxime Besson
258fba5eaa Do not store session key if attribute was missing from UserDB (#2004) 2019-11-15 11:29:46 +01:00
Maxime Besson
bedcf20806 Change portal error code on 2F failure (#2008) 2019-11-15 11:19:08 +01:00
Christophe Maudoux
75b37eadb2 Fix CheckUser search attributes 2019-11-12 22:16:05 +01:00
Christophe Maudoux
603293411b Use userData instead of sessionInfo to fix ContectSwitching debug log 2019-11-12 10:00:11 +01:00
Christophe Maudoux
7245e5349c Typo 2019-11-11 22:38:51 +01:00
Christophe Maudoux
0967a82e99 Check OTT (#1783) 2019-11-11 22:34:16 +01:00
Christophe Maudoux
2e0d2b7e14 Typo 2019-11-11 21:50:28 +01:00
Maxime Besson
2639c482b1 Fix cookie removal on SAML logout (#2001)
Since the fixes for #1863, calling p->do consumes the response headers
set by any previous code. So we must only call do() in a return statement.
2019-11-06 18:44:10 +01:00
Maxime Besson
7bdd33eb46 Fix token ID format (#1998) 2019-11-06 11:45:47 +01:00
Christophe Maudoux
32126c4aca Set ENV (#1996) 2019-11-05 11:03:10 +01:00
Maxime Besson
713737c11f Add an option to return claims in ID token 2019-11-04 18:27:28 +01:00
Maxime Besson
b34a229eda Add doc for buildUserInfoResponseFromId 2019-11-04 10:47:35 +01:00
Maxime Besson
68704955d2 Apply suggestion to lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm 2019-11-04 10:47:35 +01:00
Maxime Besson
a386a7502a Allow refresh tokens to be emitted for regular sessions (#813) 2019-11-04 10:44:54 +01:00
Maxime Besson
ea2365cc98 Implement OIDC Offline sessions through refresh tokens (#813) 2019-11-04 10:44:54 +01:00
Christophe Maudoux
c01c26af6a Append option to override Issuer OTT storage (#1993) 2019-10-31 11:40:33 +01:00
Maxime Besson
7d3b2a95a5 Avoid setting req->user to emtpy value in Demo module
This can cause issues when using Combination and password reset in
testing environments
2019-10-30 20:22:37 +01:00
Maxime Besson
5b2f3ca576 Merge branch 'remove-saml-idp-cookie-1941' into 'v2.0'
Remove SAML IDP cookie (#1941)

See merge request lemonldap-ng/lemonldap-ng!99
2019-10-30 16:01:11 +01:00
Clément OUDOT
fb74d03a89 Use whatToTrace for logging messages (#1991) 2019-10-29 17:28:55 +01:00
Christophe Maudoux
9892173cc3 Tidy & update version (#1989) 2019-10-27 21:15:48 +01:00
Christophe Maudoux
73d83dd7f0 Append missing parameters & improve unit test (#1989) 2019-10-27 21:13:25 +01:00
Maxime Besson
ed3e274ab1 Fix force password reset in Combination (#1984) 2019-10-24 08:58:04 +02:00
Maxime Besson
4afecb4620 Remove IDP cookie (#1941) 2019-10-17 23:09:03 +02:00
Christophe Maudoux
3c2ecfd04a Tidy (#1956) 2019-10-13 22:47:57 +02:00
Christophe Maudoux
f188426f8b Fix custom function parameter (#1956) 2019-10-13 22:29:12 +02:00
Christophe Maudoux
0ca649f106 Use custom decrypt functions (#1956) 2019-10-13 15:08:32 +02:00
Maxime Besson
2b4defb2a9 Prevent portal from crashing when keepPdata=1 (#1893)
Since the changes introduced to fix #1893, keepPdata is expected to
contain an array of values.

When migrating from previous LLNG versions, cookies may contain
keepPdata=1, which crashes the server because 1 isn't an arrayref

This change makes LLNG consider that keepPdata=1 is not a valid value,
and replaces it with an empty arrayref when starting the login or logout
flow.
2019-10-09 17:35:48 +02:00
Maxime Besson
ff9bb46301 Make notification system take pdata url into account (#1893) 2019-10-08 22:40:10 +02:00
Maxime Besson
2bce713f65 Set issuer urldc in pdata (#1893) 2019-10-08 22:40:10 +02:00
Maxime Besson
3ee708d8ff Delay cookie restore after hooks (#1965) 2019-10-07 17:26:40 +02:00
Maxime Besson
474bb48aa1 Make Password::LDAP/AD check connection before use (#1909)
Also remove a mostly redundant wrapper method in Auth::LDAP
2019-10-01 19:17:31 +02:00
Maxime Besson
fa49e77495 Better logs in case of a LDAP error 2019-10-01 15:14:51 +02:00
Clément OUDOT
a239091553 Load String::Random (#1963) 2019-10-01 14:49:41 +02:00
Christophe Maudoux
138cfe6edb Append DecryptValue plugin (#1956) 2019-09-30 22:29:49 +02:00
Christophe Maudoux
a219a51e1c Revert "Make manifest"
This reverts commit c00110ed01.
2019-09-30 22:28:55 +02:00
Christophe Maudoux
35de9fd3e8 Re-order 2019-09-30 22:27:03 +02:00
Christophe Maudoux
c00110ed01 Make manifest 2019-09-30 22:26:55 +02:00
Christophe Maudoux
b3791cc65b Typo 2019-09-30 19:10:05 +02:00
Christophe Maudoux
b505d3a475 Typo 2019-09-30 19:10:05 +02:00
Maxime Besson
e9153957da IDP selection phrasing 2019-09-30 18:55:09 +02:00
Maxime Besson
e693e5e649 Fix IDP selection rules (#1961) 2019-09-30 18:54:02 +02:00
Xavier
461cd51e45 Try to fix #1785 without breaking pdata 2019-09-29 23:04:17 +02:00
Christophe Maudoux
6df7412bcf Fix log with Impersonation plugin (#1664) 2019-09-26 20:24:12 +02:00
Maxime Besson
5d5ac66a6e Add Date: field to emails (#1953)
This adds a dependancy to Email::Date::Format, but it's already a
dependancy of Email::Sender::Simple (and probably more), so in practice
no new packages are going to be installed
2019-09-26 12:32:58 +02:00
Christophe Maudoux
5d9fc02205 Typo & logger 2019-09-20 22:47:48 +02:00
Christophe Maudoux
c34c6e646e Append search parameters & improve unit test (#1938) 2019-09-19 22:51:10 +02:00
Clément OUDOT
dc0a8f7848 Add some log when user is authorized to access to service (#1702) 2019-09-19 16:52:08 +02:00
Clément OUDOT
dd76c4f3db Improve log for CAS Issuer (#1702) 2019-09-19 16:18:51 +02:00
Clément OUDOT
e446e09a7f Improve log (#1702) 2019-09-19 16:07:10 +02:00