Commit Graph

2053 Commits

Author SHA1 Message Date
Xavier Guimard
5a1c090a18 Merge branch 'v2.0' 2019-05-17 10:26:19 +02:00
Xavier
b91d1d4b87 Tidy 2019-05-16 20:45:14 +02:00
Xavier
a2e78c88c3 Set versions 2019-05-16 20:42:31 +02:00
Xavier
1186aba52b lmError(): return JSON if wanted (#1745) 2019-05-16 06:50:13 +02:00
Christophe Maudoux
e46fac82b2 CheckUser with tokenGlobalStorage & Warn if SSO groups are merged 2019-05-15 23:45:06 +02:00
Xavier Guimard
bdc68d5833 Merge branch 'v2.0' 2019-05-15 14:25:57 +02:00
Maxime Besson
1f1eeab9c8 Do not log a warning when displaying form with Combination
When form-based authentication methods return PE_FIRSTLOGIN, do not log
a warning because it's normal behavior to show the form.
2019-05-14 19:47:28 +02:00
Christophe Maudoux
fc034ad4bf Impersonation with doubleCookie (#1746) 2019-05-12 22:59:21 +02:00
Clément OUDOT
05cd4d4a58 Fix update token with global storage (#1742) 2019-05-12 20:39:25 +02:00
Clément OUDOT
682b193477 Use TOKEN kind for mail password reset sessions (#1743) 2019-05-12 20:04:38 +02:00
Clément OUDOT
07de622e83 Fix getRegisterSession and getMailSession (#1743) 2019-05-12 17:36:14 +02:00
Xavier
9a71709f44 Tidy 2019-05-11 23:03:48 +02:00
Christophe Maudoux
8737fc0808 Impersonation with doubleCookie & Append unit test (#1746) 2019-05-11 22:57:52 +02:00
Xavier
224307515f Merge branch 'v2.0' 2019-05-11 20:25:11 +02:00
Xavier
f3c4ea0afb Tydy 2019-05-11 20:18:43 +02:00
Christophe Maudoux
aeead582d8 Restore _httpSession (#1746) 2019-05-11 19:07:07 +02:00
Xavier
2ce7396bf2 Don't filter on session_kind with SOAP (#1742) 2019-05-11 15:41:14 +02:00
Xavier
6235b303b3 #1742 in progress... 2019-05-11 09:31:17 +02:00
Xavier Guimard
1cd50bb353 Fix Auth::Remote session kind (#1742) 2019-05-10 18:02:56 +02:00
Xavier Guimard
638a0de81a Don't use SSO session type for tokens (Fixes security part of #1742) 2019-05-10 17:35:10 +02:00
Xavier Guimard
db4b46c487 Merge branch 'v2.0' 2019-05-07 09:36:19 +02:00
Clément OUDOT
fce270408e Improve log in plugin GrantSession (#1739) 2019-05-06 19:10:26 +02:00
Clément OUDOT
755b1ace78 Add some debug in Ext2F (#1738) 2019-05-06 14:28:28 +02:00
Clément OUDOT
a7c8b9d466 Fix error handling in Ext2F (#1738) 2019-05-06 14:07:42 +02:00
Xavier
f1f3929cf1 Merge branch 'v2.0' 2019-05-02 14:49:35 +02:00
Christophe Maudoux
c8dd4554aa Test if required secret elements are set to sign JWT 2019-05-02 14:33:56 +02:00
Christophe Maudoux
cb9add6eac Fix warning message 2019-05-01 13:09:26 +02:00
Christophe Maudoux
e9b26bb79a Merge remote-tracking branch 'origin/master' into favapps 2019-04-30 21:57:46 +02:00
Xavier
29b71569de Merge branch 'v2.0' 2019-04-30 21:03:14 +02:00
Christophe Maudoux
14ae7ea1a2 Append reset button (#1689) 2019-04-30 19:20:42 +02:00
Christophe Maudoux
f4938f3489 Grant access only if required Impersonation succeeds (#1664) 2019-04-30 14:57:45 +02:00
Christophe Maudoux
321fe29c35 Update version 2019-04-29 22:33:11 +02:00
Christophe Maudoux
2e9092d2bd Clean code 2019-04-29 22:33:11 +02:00
Christophe Maudoux
a89b92f265 Improve code (#1386) 2019-04-29 22:33:11 +02:00
Christophe Maudoux
2e3c2e1a16 Sort by spoofed and real attributes (#1658) 2019-04-29 22:33:11 +02:00
Christophe Maudoux
6e2e3456fe Clean code 2019-04-29 21:56:18 +02:00
Christophe Maudoux
f1c82e52cd Sort by spoofed and real attributes (#1658) 2019-04-29 21:48:52 +02:00
Clément OUDOT
926262170b Implement PKCE in OIDC provider (#1722) 2019-04-29 17:18:16 +02:00
Clément OUDOT
8e6f678be7 Create a configuration option to allow a Relying Party to be a public client
Allow unauthenticated requests on OAuth2 token endoint

#1725
2019-04-29 10:02:16 +02:00
Maxime Besson
2f9e6aa623 Allow override of username attribute for CAS apps
Global CAS options allows the admistrator to set the session attribute
that gets exported to all CAS application as the main identifier
(cas:user)

This commit adds the ability to override this configuration for a
particular CAS application.

OIDC already allows this

Fixes #1713
2019-04-28 21:06:34 +02:00
Christophe Maudoux
e9fd5815c9 Display FavApps tab by default if required (#1689) 2019-04-28 20:39:05 +02:00
Maxime Besson
62f16721ff Send username when calling CAS1.0 validation
Fixes #1724
2019-04-28 19:29:54 +02:00
Christophe Maudoux
12e96a3056 Display menu module only if at least one FavApp is registered (#1689) 2019-04-28 19:04:29 +02:00
Christophe Maudoux
ce4135c4b9 Display star for favorite applications (#1689) 2019-04-27 17:46:59 +02:00
Christophe Maudoux
548032fbe0 Improve code (#1386) 2019-04-26 23:00:17 +02:00
Christophe Maudoux
441df6e7ea WIP - Prepare template loop (#1689) 2019-04-26 22:58:53 +02:00
Christophe Maudoux
6011eaf7b7 Typo 2019-04-25 23:03:15 +02:00
Christophe Maudoux
aea313e2e6 Use activation rule (#1689) 2019-04-25 23:02:37 +02:00
Maxime Besson
64cc4ea0e6 Do not sent Kerberos js twice when using Combination
Fixes #1720
2019-04-25 17:17:03 +02:00
Christophe Maudoux
140d697cfa Improve code (#1689) 2019-04-25 11:02:06 +02:00