Commit Graph

1967 Commits

Author SHA1 Message Date
Christophe Maudoux
d81ada7d91 Modify yubikey.png 2018-04-01 22:28:18 +02:00
Christophe Maudoux
275b8f2394 Fix translation mistake (#1386) 2018-04-01 22:27:50 +02:00
Christophe Maudoux
79674979c1 #1386 - Fix translation 2018-04-01 16:39:02 +02:00
Christophe Maudoux
0e84c1da3e #1386 - Add translation 2018-04-01 12:53:16 +02:00
Christophe Maudoux
835b4f80d1 #1386 - Add 2FDevices table and delete button at 2FRegister.tpl 2018-04-01 00:35:53 +02:00
Christophe Maudoux
b5fd14886d #1386 - Add tmpl loop and prevent that same key can be registered twice 2018-03-31 00:16:36 +02:00
Christophe Maudoux
53752276e4 #1386 - Fix warnings 2018-03-30 21:24:34 +02:00
Christophe Maudoux
869166cb31 #1386 - Add to list2FDevice name & epoch hash keys 2018-03-29 23:11:46 +02:00
Christophe Maudoux
961aea971a #1386 - Store 2ndF devices in list2FDevices (array of json) 2018-03-29 21:27:35 +02:00
Christophe Maudoux
b813698711 #1386 - Add yubikey .png 2018-03-29 21:27:07 +02:00
Xavier Guimard
244bd617ac Update Makefile.PL 2018-03-28 09:09:47 +02:00
Xavier Guimard
f42763c1de Typo 2018-03-26 10:33:04 +02:00
Xavier Guimard
a018a10fb1 Fix Yubikey errors (#1399) 2018-03-26 10:15:37 +02:00
Xavier Guimard
2d1795ccc6 Remove old files 2018-03-25 12:51:04 +02:00
Xavier Guimard
62767481e4 Remove old scripts 2018-03-25 12:18:49 +02:00
Xavier Guimard
74ee0c43fc Spelling errors 2018-03-23 07:10:19 +01:00
Xavier Guimard
52599c5eec Remove dev file 2018-03-23 06:45:23 +01:00
Xavier Guimard
57708a6b3e Add dysplay2fRegisters() (#1383) 2018-03-22 18:28:36 +01:00
Xavier Guimard
991b1b19b3 Rename private sub (#1383) 2018-03-22 17:23:48 +01:00
Xavier Guimard
3836391adc Fix history bugs (fixes: #1401) 2018-03-21 20:48:31 +01:00
Xavier Guimard
aaaf5cfed4 Restrict CSP form-action to URL scheme (#1384) 2018-03-21 14:52:22 +01:00
Xavier Guimard
b1f876f63e Verify CSP for POST forms (#1384) 2018-03-21 14:37:44 +01:00
Xavier Guimard
7fd9ef87d7 Remove duplicate lang entries (#595) 2018-03-21 07:23:13 +01:00
Christophe Maudoux
da926a8546 Merge branch 'master' into manager-SFA-module 2018-03-20 21:32:55 +01:00
Xavier Guimard
e89db33b5e Remove Auth::Yubikey (#1399) 2018-03-20 18:45:57 +01:00
Xavier Guimard
c6908b87a2 Yubikey 2nd factor (closes: #1399) 2018-03-20 18:19:53 +01:00
Xavier Guimard
396fc2362b Missing verification (#595) 2018-03-20 11:03:57 +01:00
Christophe Maudoux
b7642823dd Merge branch 'master' into manager-SFA-module 2018-03-19 23:19:48 +01:00
Xavier Guimard
99ce15626e Restore challenge in verification (#1148) 2018-03-19 22:35:39 +01:00
Christophe Maudoux
bfc0a4f102 Merge branch 'master' into manager-SFA-module 2018-03-19 22:05:45 +01:00
Xavier Guimard
90b2df9b0d Add REST test (#1398) 2018-03-19 17:51:52 +01:00
Xavier Guimard
1d02a9e443 Fix an error in REST2F (#1398) 2018-03-19 17:34:21 +01:00
Xavier Guimard
d88ef701a8 Fix post form target (#1398) 2018-03-19 17:21:50 +01:00
Xavier Guimard
ee736d0cba Just in case... (#1398) 2018-03-19 16:58:26 +01:00
Christophe Maudoux
8d6dedcb63 Add go to portal button 2018-03-18 23:42:58 +01:00
Xavier Guimard
42d53cec63 Typo (#1148 #1359) 2018-03-18 22:55:28 +01:00
Xavier Guimard
c14289bd72 Update 2F doc (#1148 #1359) 2018-03-18 22:53:41 +01:00
Xavier Guimard
e069f7c378 Skip test if U2F lib not available (#1391) 2018-03-18 22:41:55 +01:00
Xavier Guimard
8e1d55aaa9 Add test (#1391) 2018-03-18 22:32:42 +01:00
Xavier Guimard
05c77feebc Possibility to forbid U2F unregistration (#1148) 2018-03-18 22:20:05 +01:00
Christophe Maudoux
533df1ac1d Fix bug 2018-03-18 22:10:12 +01:00
Xavier Guimard
30e5d25ed0 No direct self-registration for UTOTP (#1391) 2018-03-18 21:22:19 +01:00
Xavier Guimard
e0b931191e Fix error on U2F (#1391) 2018-03-18 20:52:50 +01:00
Xavier Guimard
36e5f88316 Same policy change/unregister (#1359) 2018-03-18 14:55:56 +01:00
Xavier Guimard
9725a63396 More security options in TOTP (#1359) 2018-03-18 14:26:45 +01:00
Xavier Guimard
ffcc5dbd3e UTOTP auth part works (#1391) 2018-03-18 09:15:23 +01:00
Xavier Guimard
fc5f7f5a65 Revert U2F change included by error (#1386): work not finished 2018-03-17 20:37:31 +01:00
Xavier Guimard
c9616b6794 Typo (#1391) 2018-03-17 20:33:28 +01:00
Xavier Guimard
ee73029d2a UTOTP template (#1391) 2018-03-17 20:29:56 +01:00
Xavier Guimard
2e00bfe773 Partial revert (#1359) 2018-03-17 20:29:06 +01:00
Xavier Guimard
9ff9ea730b Adapt TOTP to new engine (#1359) 2018-03-17 20:19:56 +01:00
Xavier Guimard
090033e24b Mixed TOTP/U2F auth skeleton (#1391) 2018-03-17 13:34:42 +01:00
Christophe Maudoux
6a02f177e8 Merge branch 'master' into manager-SFA-module 2018-03-16 21:10:21 +01:00
Xavier Guimard
3f50519c7b Typo (#1148 #1359 #1391) 2018-03-15 22:45:03 +01:00
Xavier Guimard
f00be94f19 Add "alt" attribute for 2F choice (#1111) 2018-03-15 22:41:25 +01:00
Xavier Guimard
7b5650d5fb 2F registration menu (#1148 #1359 #1391) 2018-03-15 22:35:59 +01:00
Xavier Guimard
3dcc4af9e7 Add logo 2018-03-15 22:22:20 +01:00
Xavier Guimard
e4b995f6a9 Spelling errors 2018-03-15 21:20:03 +01:00
Christophe Maudoux
fbe3af9f64 Merge branch 'master' into manager-SFA-module 2018-03-15 20:42:12 +01:00
Xavier Guimard
eee9f60fcf Update manifests 2018-03-15 12:44:45 +01:00
Xavier Guimard
ab5f35bf8c Update TOTP test (#1359) 2018-03-15 07:14:47 +01:00
Xavier Guimard
a1a96f68af Add 2F registration engine (#1148 #1359 #1391) 2018-03-15 07:04:52 +01:00
Christophe Maudoux
e3b839ee95 Merge branch 'master' into manager-SFA-module 2018-03-14 22:09:45 +01:00
Xavier Guimard
b24503b636 Don't reuse Kerberos ticket (#1389) 2018-03-13 15:04:19 +01:00
Xavier Guimard
c833a18939 Destroy LDAP object (#595) 2018-03-13 14:43:12 +01:00
Xavier Guimard
3383a68a25 Tidy 2018-03-13 07:14:01 +01:00
Maudoux Christophe
6e27659c51 Revert "Update doc"
This reverts commit b77d45eca9
2018-03-12 16:45:22 +01:00
Christophe Maudoux
b77d45eca9 Update doc 2018-03-12 16:34:04 +01:00
Xavier Guimard
e0d83f5268 Fix some errors (#1395) 2018-03-12 06:43:47 +01:00
Christophe Maudoux
395826f8b2 Rename U2F manager module to SFA 2018-03-10 23:30:36 +01:00
Xavier Guimard
f808292b84 Replace u2f.png and update (c) (#1148) 2018-03-10 18:24:34 +01:00
Xavier Guimard
2cce57991b Merge branch 'manager-u2f-module' into 'master'
Manager u2f module

See merge request lemonldap-ng/lemonldap-ng!17
2018-03-10 18:11:38 +01:00
Xavier Guimard
3356afdaa8 Little security (#1385) 2018-03-10 09:42:29 +01:00
Xavier Guimard
33c764855d Don't encode + (may fix: #1385) 2018-03-10 09:33:14 +01:00
Christophe Maudoux
3ec64aca1b Update icons 2018-03-09 23:40:22 +01:00
Christophe Maudoux
983400e0fa Fix some mistakes & Self unregistration both U2F key and TOTP without controle challenge 2018-03-09 22:32:42 +01:00
Christophe Maudoux
b7793ccb7d Fix somes mistakes 2018-03-09 20:56:17 +01:00
Xavier Guimard
b9d292a0e5 Defaut 2F logo (#1148) 2018-03-09 17:00:37 +01:00
Xavier Guimard
ac0e35ca38 Update logos (#1148) 2018-03-09 16:51:15 +01:00
Xavier Guimard
8a434cc3f9 Type (#1390) 2018-03-09 16:50:44 +01:00
Xavier Guimard
6b9584989f Fix #1390 XSS for 2.0 2018-03-09 16:27:33 +01:00
Xavier Guimard
8d4f617ecb Add U2F logo (#1148) 2018-03-09 13:44:52 +01:00
Xavier Guimard
5c5556a865 2F choice works (#1148)
TODO: logos
2018-03-09 13:29:39 +01:00
Xavier Guimard
dc23b5e85d Add choice2f (#1148) 2018-03-09 08:55:53 +01:00
Xavier Guimard
c0123b5a36 2F choice in progress (#1148) 2018-03-09 07:17:25 +01:00
Xavier Guimard
82299131be Typo 2018-03-08 22:25:56 +01:00
Xavier Guimard
d7ff6407a9 2F in progress (#1148) 2018-03-08 22:24:02 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
e9e820ecd1 2F manager in progress (#1148) 2018-03-08 18:51:01 +01:00
Xavier Guimard
67a530bc01 Second-Factor-Engine skeleton (#1148) 2018-03-08 16:33:34 +01:00
Xavier Guimard
9262a47f9c Update javascripts 2018-03-08 13:19:15 +01:00
Christophe Maudoux
575620d08c Update lang & hide U2F key attributs in sessions explorer 2018-03-07 23:43:26 +01:00
Christophe Maudoux
10f640753b Fix some mistakes & display sessions with U2F key registered only 2018-03-07 23:29:42 +01:00
Christophe Maudoux
c1e734e1ae Merge remote-tracking branch 'upstream/master' into manager-u2f-module_add-u2f-key 2018-03-07 20:18:36 +01:00
Xavier Guimard
2c8c70470d Improve doc 2018-03-07 09:51:51 +01:00
Xavier Guimard
f05f340f54 Update unregistration target (#1348) 2018-03-06 23:00:27 +01:00
Xavier Guimard
8de8846cec Update "unregistration" (#1348)
@maudoux: please verify this commit
2018-03-06 22:56:16 +01:00
Xavier Guimard
ca9a6ebb49 U2F is working now (#1148) 2018-03-06 22:50:40 +01:00
Xavier Guimard
a944faba47 Use new crypt object for each crypter operation (#1148) 2018-03-06 07:03:42 +01:00
Christophe Maudoux
d50775a5f2 Append add & verify button + update lang 2018-03-03 23:19:30 +01:00
Xavier Guimard
7a94f82102 Add test (#1359) 2018-02-25 09:49:54 +01:00
Xavier Guimard
00d176627a Code was missing in REST call (#1379) 2018-02-23 09:51:14 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
f5ef05d320 REST external 2F skeleton (#1379) 2018-02-23 09:11:19 +01:00
Xavier Guimard
3d381edd6c Merge branch 'unregister-my-u2f-key' into 'master'
Add self unregistration for u2f key (#1148)

See merge request lemonldap-ng/lemonldap-ng!14
2018-02-22 06:41:01 +01:00
Christophe Maudoux
a19d077ca8 U2F js generated from coffeescript files 2018-02-21 23:27:01 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Christophe Maudoux
e30654c39d Update langs 2018-02-21 14:42:04 +01:00
Christophe Maudoux
c5a3118541 U2F Self unregister key 2018-02-21 14:20:21 +01:00
Christophe Maudoux
fe28cbe7a0 Self unregister U2F key 2018-02-21 09:23:41 +01:00
Xavier Guimard
71f14332fa Update manifest (#1359) 2018-02-21 06:53:24 +01:00
Xavier Guimard
344b9db804 Manage rule (#1359) 2018-02-21 06:28:42 +01:00
Xavier Guimard
b9e2e91844 TOTP Portal part seems finished (#1359)
TODO: Manager attributes
2018-02-20 22:58:20 +01:00
Xavier Guimard
afa0f1d6df Update langs (#1359) 2018-02-20 18:55:45 +01:00
Xavier Guimard
560341ea51 TOTP self registration in progress (#1359) 2018-02-20 18:36:34 +01:00
Xavier Guimard
d8dbf1a615 Import Qrious library (#1359)
QRcode generator inside browser
2018-02-20 16:06:33 +01:00
Xavier Guimard
09a47d72ba TOTP self registration skeleton (#1359) 2018-02-20 13:19:52 +01:00
Xavier Guimard
79aad61a6b Update dependencies (#1359) 2018-02-19 22:47:10 +01:00
Xavier Guimard
d37a384328 Move TOTP verification in Common (#1359)
This Common module will be used also in admin interface
2018-02-19 22:34:23 +01:00
Xavier Guimard
99dc9ed87b Bad 2F prefix (#1359) 2018-02-19 22:15:06 +01:00
Xavier Guimard
6a752a1a4b Move Auth::Base to Main::Auth 2018-02-19 22:11:43 +01:00
Xavier Guimard
c47a7c0d4f Update POD 2018-02-19 22:07:20 +01:00
Xavier Guimard
59cb7077fa TOTP verification skeleton (#1359) 2018-02-19 14:23:33 +01:00
Xavier Guimard
705be8f418 Move all second factor plugins in 2F directory 2018-02-19 14:15:29 +01:00
Xavier Guimard
dd87a2b3a7 Remove old menu methods in Lemonldap::NG::Portal::Main::Menu
Fixes: #1367
2018-02-12 18:55:42 +01:00
Xavier Guimard
d054288bc4 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-12 10:00:16 +01:00
Clément OUDOT
f95fab0408 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-08 22:40:12 +01:00
Clément OUDOT
a129f1e296 Allow CAS p3 URLs (#1362) 2018-02-08 22:40:06 +01:00
Xavier Guimard
584169d88c Set kerberos=0 in form when using Ajax (#1366) 2018-02-08 22:31:41 +01:00
Xavier Guimard
204d851792 Use "$maintests" everywhere 2018-02-08 21:55:21 +01:00
Xavier Guimard
1251ae42e7 Typo 2018-02-08 15:20:51 +01:00
Xavier Guimard
252ac57692 Send dn when resetting LDAP password
Fixes: #1353
2018-01-25 15:53:52 +01:00
Xavier Guimard
057a8afcb2 #1353 in progress 2018-01-24 22:32:08 +01:00
Xavier Guimard
486b4b0cd9 Typo (#1346) 2018-01-24 22:29:09 +01:00
Xavier Guimard
6547aaa20c Rearrange doc 2018-01-23 23:08:22 +01:00
Xavier Guimard
be86baf4eb #1353 in progress 2018-01-23 23:01:17 +01:00
Xavier Guimard
b371a179b6 Use "useMail" in Demo (#1353) 2018-01-23 22:41:40 +01:00
Xavier Guimard
7e2c0cbcdc Remove debug 2018-01-23 14:59:37 +01:00
Xavier Guimard
dfc28adcc3 Skeleton for "useMail" feature in getUser (#1353) 2018-01-22 21:57:48 +01:00
Clément OUDOT
63f820a7d9 Remember origin URL in register workflow (#1349) 2018-01-18 18:07:58 +01:00
Clément OUDOT
f202a7fdf6 Correct test on expiration time in processLogoutRequestMsg (#1357) 2018-01-15 15:08:44 +01:00
Clément OUDOT
2eb91fc0ea Prevent duplicate group search (#1356) 2018-01-15 12:27:10 +01:00
Clément OUDOT
7da4d0cbf2 Fix typo (#1349) 2018-01-11 15:44:38 +01:00
Clément OUDOT
88c47d95d0 Remember URL in password reset workflow (#1349) 2018-01-10 15:42:54 +01:00
Clément OUDOT
b1e2749231 Set AUTH_URL in portal link if available (#1345) 2018-01-10 11:50:22 +01:00
Xavier Guimard
d3f65bbd7f Fix missing $_auth/_user in Choice (#1348) 2017-12-21 21:44:13 +01:00
Xavier Guimard
e8475a7db8 Update Choice test (#1348) 2017-12-21 21:38:54 +01:00
Xavier Guimard
98124a2703 Add tbody (#1111) 2017-12-21 16:37:43 +01:00
Xavier Guimard
48d1ca3dee Proposed patch for #1338 2017-12-20 23:19:57 +01:00
Xavier Guimard
931188b15f More secure skin param check (#1346) 2017-12-20 22:52:52 +01:00
Xavier Guimard
35d7e7e2f5 Check that skin directory exists
Fixes: #1346
2017-12-20 22:48:12 +01:00
Xavier Guimard
92113fb6e3 Clean sessions (#1338) 2017-12-20 06:42:27 +01:00
Xavier Guimard
1015e4467e Fix some little errors (#1338) 2017-12-19 09:29:35 +01:00
Clément OUDOT
ca61f22254 Adapt unit test for Register LDAP (#1338) 2017-12-18 18:50:10 +01:00
Xavier Guimard
3cca027a40 Add LDAP test for register (#1338) 2017-12-18 11:20:21 +01:00
Xavier Guimard
fab1eaf815 Error in warn msg (#595) 2017-12-18 11:17:52 +01:00
Xavier Guimard
6106f37fac Fix "refresh" feature for Choice
Fixes: #1339
2017-12-18 10:40:07 +01:00
Xavier Guimard
55aaed7a8d Fix UTF-8 problems in mail
Fixes: #1338
2017-12-15 16:47:58 +01:00
Xavier Guimard
06ba9c2861 Fix tests (#1333) 2017-12-11 22:39:28 +01:00
Xavier Guimard
46a417fb83 More debug (#1333) 2017-12-11 19:36:55 +01:00
Xavier Guimard
7423217cea Use global cache for mail OTT (#1333) 2017-12-11 15:32:58 +01:00
Clément OUDOT
b7e967908d Fix construction of searched attributes for groups (#1332) 2017-12-04 14:21:17 +01:00
Xavier Guimard
b3ff6e2666 Clean shellbangs (Debian 4.1.2 policy compliance) 2017-12-01 06:42:02 +01:00
Clément OUDOT
222c58d37c Set hGroups in session for LDAP groups (#1332) 2017-11-30 22:25:00 +01:00
Clément OUDOT
341bbb22ee eval Lasso constants (#1312) 2017-11-17 07:26:44 +01:00
Xavier Guimard
47350c0da4 Reinitialize spRules on reload (#1330) 2017-11-12 07:41:42 +01:00
Xavier Guimard
e4ccd51282 Change prefix name for sp rules (#1330) 2017-11-12 07:34:45 +01:00
Xavier Guimard
b03558c504 Finish #1330 2017-11-11 21:16:52 +01:00
Xavier Guimard
7f1ba1f3c4 Skeleton for partner rules in Menu #1330
TODO: JS part
2017-11-11 17:39:24 +01:00
Xavier Guimard
7f0ff6d0d8 Replace Jira by GitLab 2017-11-11 14:06:23 +01:00
Xavier Guimard
0d491e96f4 Use same name for SP rules (#1330) 2017-11-11 13:51:48 +01:00
Clément Oudot
cddb4fc849 Change message log level from warn to debug (#1329) 2017-11-07 10:29:06 +00:00
Xavier Guimard
e9d97ea010 Disable kerberos field test (#707) 2017-11-07 06:08:14 +00:00
Clément Oudot
c6137d12d8 Possibility to override SAML Issuer value with domain (#1324) 2017-11-06 16:36:45 +00:00
Clément Oudot
17fbd6370e Add some debug message (#707) 2017-11-06 15:19:08 +00:00
Clément Oudot
8a07f47e77 Add krbRemoveDomain parameter (#707) 2017-11-06 15:19:06 +00:00
Clément Oudot
fbc30e13d8 Set hidden form value at correct step to allow fail back (#707) 2017-11-06 11:25:55 +00:00
Clément Oudot
7b216e614b Allow 0 value in setHiddenFormValue (#1328) 2017-11-06 11:05:09 +00:00
David COUTADEUR
9c541b5acd perltidy for #1245 tests 2017-11-03 16:13:52 +00:00
David COUTADEUR
8786c6ba58 Adding more tests for #1245 (adding salt feature for database backend) 2017-11-03 16:11:27 +00:00
Clément Oudot
251e78d5ab Allow SLO without SessionIndex (#1326) 2017-11-03 08:23:29 +00:00
Clément Oudot
9b7ef2d980 Some work on Facebook auth module (#595) 2017-11-02 18:09:31 +00:00
Xavier Guimard
9738b3dbb9 perltidy 2017-11-02 17:59:08 +00:00
David COUTADEUR
b726407532 adding tests for salt feature for database backend (#1245) 2017-11-02 16:42:01 +00:00
Clément Oudot
efb2fc2397 Fix Twitter auth code for 2.0 (#595) 2017-11-02 15:43:37 +00:00
Xavier Guimard
c22966a873 Cache for specific menu app rules (#595) 2017-11-01 08:03:03 +00:00
Xavier Guimard
e0bafc9651 Type (#1183) 2017-11-01 07:38:47 +00:00
Xavier Guimard
f12709d544 make manifest (#1183) 2017-10-31 20:22:28 +00:00
Xavier Guimard
3246aecacb Verify CAS + Choice (#1183) 2017-10-31 20:18:38 +00:00
Xavier Guimard
e2691e1c17 Update manifests (#595) 2017-10-31 20:05:54 +00:00
Xavier Guimard
a09af34412 Missing $req in updatePersistentSession calls (fixes: #1319) 2017-10-31 12:04:05 +00:00
Xavier Guimard
42148200b7 Fix test (#1321) 2017-10-31 09:51:48 +00:00
Clément Oudot
f261c20520 Fix Twitter Auth module (#595) 2017-10-31 09:00:41 +00:00
Xavier Guimard
0225abd4ab Add SAML/Choice/renew test 2017-10-31 08:53:33 +00:00
Xavier Guimard
dd710c306c Use OIDC displayName in tab (closes: #826) 2017-10-31 06:11:32 +00:00
Xavier Guimard
7558413c88 Typo (#595) 2017-10-30 22:09:30 +00:00
Xavier Guimard
dd51dbd1ed Clean test conf #1323 2017-10-30 21:59:43 +00:00
Xavier Guimard
6da0f69b27 Fix #1323 2017-10-30 20:24:59 +00:00
Xavier Guimard
8e458c6a0d Add OIDC/Choice test (#595) 2017-10-30 19:06:57 +00:00
Clément Oudot
80db34a4f2 Remove unused 'no strict subs' (#595) 2017-10-30 13:47:39 +00:00