Commit Graph

1445 Commits

Author SHA1 Message Date
Xavier Guimard
a1a96f68af Add 2F registration engine (#1148 #1359 #1391) 2018-03-15 07:04:52 +01:00
Xavier Guimard
b24503b636 Don't reuse Kerberos ticket (#1389) 2018-03-13 15:04:19 +01:00
Xavier Guimard
c833a18939 Destroy LDAP object (#595) 2018-03-13 14:43:12 +01:00
Xavier Guimard
3383a68a25 Tidy 2018-03-13 07:14:01 +01:00
Xavier Guimard
e0d83f5268 Fix some errors (#1395) 2018-03-12 06:43:47 +01:00
Xavier Guimard
2cce57991b Merge branch 'manager-u2f-module' into 'master'
Manager u2f module

See merge request lemonldap-ng/lemonldap-ng!17
2018-03-10 18:11:38 +01:00
Xavier Guimard
3356afdaa8 Little security (#1385) 2018-03-10 09:42:29 +01:00
Xavier Guimard
33c764855d Don't encode + (may fix: #1385) 2018-03-10 09:33:14 +01:00
Christophe Maudoux
3ec64aca1b Update icons 2018-03-09 23:40:22 +01:00
Christophe Maudoux
983400e0fa Fix some mistakes & Self unregistration both U2F key and TOTP without controle challenge 2018-03-09 22:32:42 +01:00
Xavier Guimard
ac0e35ca38 Update logos (#1148) 2018-03-09 16:51:15 +01:00
Xavier Guimard
8a434cc3f9 Type (#1390) 2018-03-09 16:50:44 +01:00
Xavier Guimard
6b9584989f Fix #1390 XSS for 2.0 2018-03-09 16:27:33 +01:00
Xavier Guimard
5c5556a865 2F choice works (#1148)
TODO: logos
2018-03-09 13:29:39 +01:00
Xavier Guimard
c0123b5a36 2F choice in progress (#1148) 2018-03-09 07:17:25 +01:00
Xavier Guimard
82299131be Typo 2018-03-08 22:25:56 +01:00
Xavier Guimard
d7ff6407a9 2F in progress (#1148) 2018-03-08 22:24:02 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
e9e820ecd1 2F manager in progress (#1148) 2018-03-08 18:51:01 +01:00
Xavier Guimard
67a530bc01 Second-Factor-Engine skeleton (#1148) 2018-03-08 16:33:34 +01:00
Christophe Maudoux
10f640753b Fix some mistakes & display sessions with U2F key registered only 2018-03-07 23:29:42 +01:00
Xavier Guimard
2c8c70470d Improve doc 2018-03-07 09:51:51 +01:00
Xavier Guimard
8de8846cec Update "unregistration" (#1348)
@maudoux: please verify this commit
2018-03-06 22:56:16 +01:00
Xavier Guimard
ca9a6ebb49 U2F is working now (#1148) 2018-03-06 22:50:40 +01:00
Xavier Guimard
a944faba47 Use new crypt object for each crypter operation (#1148) 2018-03-06 07:03:42 +01:00
Xavier Guimard
00d176627a Code was missing in REST call (#1379) 2018-02-23 09:51:14 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
f5ef05d320 REST external 2F skeleton (#1379) 2018-02-23 09:11:19 +01:00
Xavier Guimard
3d381edd6c Merge branch 'unregister-my-u2f-key' into 'master'
Add self unregistration for u2f key (#1148)

See merge request lemonldap-ng/lemonldap-ng!14
2018-02-22 06:41:01 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Christophe Maudoux
c5a3118541 U2F Self unregister key 2018-02-21 14:20:21 +01:00
Christophe Maudoux
fe28cbe7a0 Self unregister U2F key 2018-02-21 09:23:41 +01:00
Xavier Guimard
344b9db804 Manage rule (#1359) 2018-02-21 06:28:42 +01:00
Xavier Guimard
b9e2e91844 TOTP Portal part seems finished (#1359)
TODO: Manager attributes
2018-02-20 22:58:20 +01:00
Xavier Guimard
560341ea51 TOTP self registration in progress (#1359) 2018-02-20 18:36:34 +01:00
Xavier Guimard
09a47d72ba TOTP self registration skeleton (#1359) 2018-02-20 13:19:52 +01:00
Xavier Guimard
d37a384328 Move TOTP verification in Common (#1359)
This Common module will be used also in admin interface
2018-02-19 22:34:23 +01:00
Xavier Guimard
99dc9ed87b Bad 2F prefix (#1359) 2018-02-19 22:15:06 +01:00
Xavier Guimard
6a752a1a4b Move Auth::Base to Main::Auth 2018-02-19 22:11:43 +01:00
Xavier Guimard
c47a7c0d4f Update POD 2018-02-19 22:07:20 +01:00
Xavier Guimard
59cb7077fa TOTP verification skeleton (#1359) 2018-02-19 14:23:33 +01:00
Xavier Guimard
705be8f418 Move all second factor plugins in 2F directory 2018-02-19 14:15:29 +01:00
Xavier Guimard
dd87a2b3a7 Remove old menu methods in Lemonldap::NG::Portal::Main::Menu
Fixes: #1367
2018-02-12 18:55:42 +01:00
Xavier Guimard
d054288bc4 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-12 10:00:16 +01:00
Clément OUDOT
f95fab0408 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-08 22:40:12 +01:00
Clément OUDOT
a129f1e296 Allow CAS p3 URLs (#1362) 2018-02-08 22:40:06 +01:00
Xavier Guimard
584169d88c Set kerberos=0 in form when using Ajax (#1366) 2018-02-08 22:31:41 +01:00
Xavier Guimard
1251ae42e7 Typo 2018-02-08 15:20:51 +01:00
Xavier Guimard
252ac57692 Send dn when resetting LDAP password
Fixes: #1353
2018-01-25 15:53:52 +01:00
Xavier Guimard
057a8afcb2 #1353 in progress 2018-01-24 22:32:08 +01:00
Xavier Guimard
486b4b0cd9 Typo (#1346) 2018-01-24 22:29:09 +01:00
Xavier Guimard
6547aaa20c Rearrange doc 2018-01-23 23:08:22 +01:00
Xavier Guimard
be86baf4eb #1353 in progress 2018-01-23 23:01:17 +01:00
Xavier Guimard
b371a179b6 Use "useMail" in Demo (#1353) 2018-01-23 22:41:40 +01:00
Xavier Guimard
dfc28adcc3 Skeleton for "useMail" feature in getUser (#1353) 2018-01-22 21:57:48 +01:00
Clément OUDOT
63f820a7d9 Remember origin URL in register workflow (#1349) 2018-01-18 18:07:58 +01:00
Clément OUDOT
f202a7fdf6 Correct test on expiration time in processLogoutRequestMsg (#1357) 2018-01-15 15:08:44 +01:00
Clément OUDOT
2eb91fc0ea Prevent duplicate group search (#1356) 2018-01-15 12:27:10 +01:00
Clément OUDOT
88c47d95d0 Remember URL in password reset workflow (#1349) 2018-01-10 15:42:54 +01:00
Xavier Guimard
d3f65bbd7f Fix missing $_auth/_user in Choice (#1348) 2017-12-21 21:44:13 +01:00
Xavier Guimard
48d1ca3dee Proposed patch for #1338 2017-12-20 23:19:57 +01:00
Xavier Guimard
931188b15f More secure skin param check (#1346) 2017-12-20 22:52:52 +01:00
Xavier Guimard
35d7e7e2f5 Check that skin directory exists
Fixes: #1346
2017-12-20 22:48:12 +01:00
Xavier Guimard
1015e4467e Fix some little errors (#1338) 2017-12-19 09:29:35 +01:00
Xavier Guimard
fab1eaf815 Error in warn msg (#595) 2017-12-18 11:17:52 +01:00
Xavier Guimard
6106f37fac Fix "refresh" feature for Choice
Fixes: #1339
2017-12-18 10:40:07 +01:00
Xavier Guimard
55aaed7a8d Fix UTF-8 problems in mail
Fixes: #1338
2017-12-15 16:47:58 +01:00
Xavier Guimard
06ba9c2861 Fix tests (#1333) 2017-12-11 22:39:28 +01:00
Xavier Guimard
46a417fb83 More debug (#1333) 2017-12-11 19:36:55 +01:00
Xavier Guimard
7423217cea Use global cache for mail OTT (#1333) 2017-12-11 15:32:58 +01:00
Clément OUDOT
b7e967908d Fix construction of searched attributes for groups (#1332) 2017-12-04 14:21:17 +01:00
Clément OUDOT
222c58d37c Set hGroups in session for LDAP groups (#1332) 2017-11-30 22:25:00 +01:00
Clément OUDOT
341bbb22ee eval Lasso constants (#1312) 2017-11-17 07:26:44 +01:00
Xavier Guimard
47350c0da4 Reinitialize spRules on reload (#1330) 2017-11-12 07:41:42 +01:00
Xavier Guimard
e4ccd51282 Change prefix name for sp rules (#1330) 2017-11-12 07:34:45 +01:00
Xavier Guimard
b03558c504 Finish #1330 2017-11-11 21:16:52 +01:00
Xavier Guimard
7f1ba1f3c4 Skeleton for partner rules in Menu #1330
TODO: JS part
2017-11-11 17:39:24 +01:00
Xavier Guimard
7f0ff6d0d8 Replace Jira by GitLab 2017-11-11 14:06:23 +01:00
Xavier Guimard
0d491e96f4 Use same name for SP rules (#1330) 2017-11-11 13:51:48 +01:00
Clément Oudot
cddb4fc849 Change message log level from warn to debug (#1329) 2017-11-07 10:29:06 +00:00
Clément Oudot
c6137d12d8 Possibility to override SAML Issuer value with domain (#1324) 2017-11-06 16:36:45 +00:00
Clément Oudot
17fbd6370e Add some debug message (#707) 2017-11-06 15:19:08 +00:00
Clément Oudot
8a07f47e77 Add krbRemoveDomain parameter (#707) 2017-11-06 15:19:06 +00:00
Clément Oudot
fbc30e13d8 Set hidden form value at correct step to allow fail back (#707) 2017-11-06 11:25:55 +00:00
Clément Oudot
7b216e614b Allow 0 value in setHiddenFormValue (#1328) 2017-11-06 11:05:09 +00:00
Clément Oudot
251e78d5ab Allow SLO without SessionIndex (#1326) 2017-11-03 08:23:29 +00:00
Clément Oudot
9b7ef2d980 Some work on Facebook auth module (#595) 2017-11-02 18:09:31 +00:00
Clément Oudot
efb2fc2397 Fix Twitter auth code for 2.0 (#595) 2017-11-02 15:43:37 +00:00
Xavier Guimard
c22966a873 Cache for specific menu app rules (#595) 2017-11-01 08:03:03 +00:00
Xavier Guimard
e0bafc9651 Type (#1183) 2017-11-01 07:38:47 +00:00
Xavier Guimard
a09af34412 Missing $req in updatePersistentSession calls (fixes: #1319) 2017-10-31 12:04:05 +00:00
Clément Oudot
f261c20520 Fix Twitter Auth module (#595) 2017-10-31 09:00:41 +00:00
Xavier Guimard
dd710c306c Use OIDC displayName in tab (closes: #826) 2017-10-31 06:11:32 +00:00
Xavier Guimard
7558413c88 Typo (#595) 2017-10-30 22:09:30 +00:00
Clément Oudot
80db34a4f2 Remove unused 'no strict subs' (#595) 2017-10-30 13:47:39 +00:00
Xavier Guimard
081699b29e AutoSignin works now (#1318)
TODO: doc
2017-10-27 13:11:30 +00:00
Xavier Guimard
6ce490c522 Rename (#1318) 2017-10-27 05:17:32 +00:00
Xavier Guimard
db37e98d24 AutlLogin plugin skeleton (#1318) 2017-10-27 05:17:30 +00:00
Xavier Guimard
ecf374ff53 Fix CAS "url" conflict (#595) 2017-10-26 20:21:15 +00:00
Xavier Guimard
9aac5433d4 Fix #1252 2017-10-26 20:13:10 +00:00
Xavier Guimard
38df1cff91 Better Lasso import (#595) 2017-10-26 09:16:44 +00:00
Xavier Guimard
2dbdf55404 Typo (#1302) 2017-10-26 08:14:58 +00:00
Xavier Guimard
ca399ab539 Menu didn't use resolveAlias() (#1317) 2017-10-24 10:56:21 +00:00
Xavier Guimard
17a3b5e976 Raise an error if notification connector fails (#595) 2017-10-19 14:59:19 +00:00
Xavier Guimard
b1c968209c Missing conversion (#595) 2017-10-19 07:01:19 +00:00
Clément Oudot
e49c691851 Fix call to conf parameter in log message (#595) 2017-10-18 15:37:59 +00:00
Xavier Guimard
1fb4c21af3 Move OI2-SREG HTML fragments to tpl (closes: #1302) 2017-10-11 12:21:40 +00:00
Xavier Guimard
6072a31152 Move OIDC HTML fragments to tpl (#1302) 2017-10-11 11:51:50 +00:00
Xavier Guimard
91af1f63ff Move SAML HTML fragments to tpl (#1302) 2017-10-11 11:35:56 +00:00
Xavier Guimard
7e29c51c61 Move menu HTML fragment to tpl (#1302) 2017-10-11 10:12:06 +00:00
Xavier Guimard
46364da414 Move some HTML fragments to templates (#1302) 2017-10-10 11:04:40 +00:00
Xavier Guimard
76769f8166 Move HTML::Template calls into Main::Plugin (prepare #1302) 2017-10-10 09:24:08 +00:00
Clément Oudot
a7401b72f6 Fix from_json methods (#1303) 2017-09-28 12:52:14 +00:00
Xavier Guimard
fc582377ff Clean SAML storage code (#1305) 2017-09-27 05:00:00 +00:00
Xavier Guimard
10177b4bfd Default storage values (may fix #1305) 2017-09-26 20:15:50 +00:00
Xavier Guimard
2787c33c01 Revert r6726 (#1305) 2017-09-26 19:54:45 +00:00
Xavier Guimard
69ece7740d Update debian/control 2017-09-26 19:11:04 +00:00
Xavier Guimard
89f5783d16 More tests (#1305) 2017-09-26 17:50:38 +00:00
Xavier Guimard
080f4670ec Return 200 for Ajax queries if error is PE_PASSWORD_OK (#1258) 2017-09-22 14:26:07 +00:00
Xavier Guimard
306af4fa36 Normalize URL to be tolerant to SAML Path (references #1304) 2017-09-22 14:20:55 +00:00
Clément Oudot
04acb221d3 Fix JSON parsing for Debian 9 in OpenIDConnect code (#1303) 2017-09-21 13:35:26 +00:00
Xavier Guimard
4914585259 Good message is now displayed (#1258) 2017-09-19 20:59:29 +00:00
Xavier Guimard
facf676a4c Remove code duplication (#595) 2017-09-19 20:06:33 +00:00
Xavier Guimard
f6cbae3ae5 Little css improvment (#826) 2017-09-19 12:37:57 +00:00
Xavier Guimard
0c35144d82 #826 in progress 2017-09-19 08:08:53 +00:00
Xavier Guimard
b15d82a12b Error in id detection (#595) 2017-09-19 08:08:51 +00:00
Xavier Guimard
d54295fdb0 Fix error in menu tab checking (#595) 2017-09-19 07:24:43 +00:00
Xavier Guimard
c3b2dc878d Ajax to remove OIDC consent (#826) 2017-09-18 20:40:01 +00:00
Xavier Guimard
9b389d90eb OIDC Consents display (#826)
TODO: Ajax to remove a consent
2017-09-15 12:31:42 +00:00
Xavier Guimard
5b5e5db123 OpenID Connect consent skeleton (#826) 2017-09-15 10:32:15 +00:00
Clément Oudot
c5368caac2 Manage CAS logout service (#1298) 2017-09-11 15:26:44 +00:00
Xavier Guimard
ef1a396a21 Test backends before usage (#595) 2017-09-08 10:10:37 +00:00
Xavier Guimard
70a28a04f1 Fix route conflict (fixes: #1290) 2017-09-06 14:30:47 +00:00
Xavier Guimard
f7de7a2598 Same endpoint for SOAP and REST (#970) 2017-09-05 15:08:57 +00:00
Clément Oudot
1669a8cc60 Use the correct session parameter for appsListOrder (#1292) 2017-09-04 15:09:28 +00:00
Clément Oudot
54972a9bc7 Define default SAML session storage (#1251) 2017-08-29 16:51:50 +00:00
Clément Oudot
40af38f928 Define default CAS session storage (#1251) 2017-08-29 16:51:49 +00:00
Clément Oudot
ae4ef2e3e5 Set SAML server signature method (#1247) 2017-08-29 16:43:43 +00:00
Clément Oudot
fd6a88d88f Add init method in CDA plugin (#595) 2017-08-18 13:03:42 +00:00
Xavier Guimard
6827b4e485 Fix #1282: conf parser didn't check unopened combModules node 2017-07-30 08:20:15 +00:00
Xavier Guimard
a06f8c2480 Typo (fixes: #1273) 2017-07-17 19:19:39 +00:00
Xavier Guimard
5a6942c6ec Add "rule" for apps in menu (fixes: #1267) 2017-07-17 14:03:45 +00:00
Clément Oudot
aecc815e4e Do not use encrypt/decrypt for SAML session index (#1261) 2017-07-12 16:11:42 +00:00
Xavier Guimard
fefd723226 Avoid some warnings 2017-07-11 11:50:21 +00:00
Clément Oudot
ab3661fbf9 Fix translation of OIDC items in confirm.tpl (#1250) 2017-06-28 15:41:31 +00:00
David COUTADEUR
06691b85a2 fix remaining lmLog (references #1245) 2017-06-23 16:37:16 +00:00
David COUTADEUR
d8d296873f fix manager: ERROR, complex node inside. Don't use simpleInputContainer for dbiPassword (references #1245) 2017-06-23 14:54:35 +00:00
Clément Oudot
67a878653d LinkedIn authentication module for 2.0 (#1243) 2017-06-23 14:25:22 +00:00
David COUTADEUR
80f5d06e82 perl tidy 2017-06-23 09:57:07 +00:00
David COUTADEUR
6533b0a36b first working version of dynamic hash passwords in trunk (LEMONLDAP-1245) 2017-06-23 09:23:29 +00:00
Xavier Guimard
5e4ef360e0 Use globalStorage unless oidcStorage is defined (may fix #1251) 2017-06-22 09:12:28 +00:00
Clément Oudot
01b55fde2c Set _lastAuthnUTime in session (#1248) 2017-06-13 13:03:13 +00:00
Xavier Guimard
012cb3c23e May fix #1236 2017-06-12 19:10:37 +00:00
Xavier Guimard
c706880d54 Revert r6566 + adapt U2F to Main::SecondFactor (#1148) 2017-06-01 07:18:42 +00:00
Xavier Guimard
8dcfbd7a08 Accept unregistered users (fixes: #1148) 2017-05-27 07:15:27 +00:00
Clément Oudot
5f0e997024 Display old password input in password menu tab (#1227) 2017-05-24 17:45:42 +00:00
Clément Oudot
318d43e07f Check logout redirect URI (#1233) 2017-05-18 14:52:38 +00:00
Clément Oudot
851311ffe0 Prevent redirect before verifying authorized URI (#1233) 2017-05-16 15:26:28 +00:00
Clément Oudot
b001965707 Create an option to display error on mail not found (#1225) 2017-05-11 13:48:50 +00:00
Clément Oudot
eb681b57fd Display date in MailReset even if user is not found (#1225) 2017-05-11 12:45:31 +00:00
Xavier Guimard
d7240e038e Fix #852 2017-05-04 07:19:50 +00:00
Xavier Guimard
b4102acf45 May fix #852 2017-05-04 07:13:26 +00:00
Clément Oudot
56254f1d4f Apply commit 6513 to trunk (#1218) 2017-04-27 10:21:46 +00:00
Xavier Guimard
d9dcc98f11 Fix Choice (fixes: #1217) 2017-04-25 08:11:16 +00:00
Xavier Guimard
c5dbed80b7 Add Password::Null (fixes: #1216) 2017-04-25 07:28:33 +00:00
Xavier Guimard
fc2d796ba3 Fix #1213 2017-04-19 08:32:42 +00:00
Xavier Guimard
ef8ff0f4cb Remember $urldc in 2F (fixes: #1015) 2017-04-17 10:57:35 +00:00
Xavier Guimard
3203c82ccf Verify CAS with multiple app (#1183) 2017-04-16 09:47:32 +00:00
Xavier Guimard
00423fc223 Fix proxied services in CAS (#1183) 2017-04-15 13:21:33 +00:00
Xavier Guimard
74f780733d Use App ExportedVars if defined (#1183) 2017-04-14 07:40:01 +00:00
Xavier Guimard
22d921698a Add UserDB::CAS (#1183) 2017-04-13 19:36:25 +00:00
Xavier Guimard
b83374b274 New Issuer::CAS (#1183) 2017-04-13 19:17:29 +00:00
Xavier Guimard
d1d57fae22 Adapt CAS "proxy" to new arch (#1183) 2017-04-13 18:54:06 +00:00
Xavier Guimard
1b0d1dbb55 Auth::CAS works (#1183) 2017-04-13 07:28:15 +00:00
Xavier Guimard
7499d1198b Auth::CAS rebuild in progress (#1183) 2017-04-12 21:11:11 +00:00
Xavier Guimard
df3c1efb54 Handle 404 and 502 error codes (fixes: #1211) 2017-04-12 07:07:27 +00:00
Xavier Guimard
68707a0b36 Don't store request datas in $self (#1183) 2017-04-11 20:28:01 +00:00
Xavier Guimard
a83a707931 Add Ajax to SSL (closes #1212) 2017-04-11 19:19:59 +00:00
Xavier Guimard
eed489a557 Store CAS attributes for UserDB::CAS (#1183)
@coudot: can you validate this ?
2017-04-11 17:05:02 +00:00
Xavier Guimard
a44dd9b4f6 Optimize url building (#1183) 2017-04-11 17:05:00 +00:00
Xavier Guimard
acf9420c5f Kerberos works !!! (#707) 2017-04-11 12:57:52 +00:00
Xavier Guimard
6cc554ac75 Optimization (#595) 2017-04-10 18:45:45 +00:00
Xavier Guimard
165c505ca5 Grant after 2F (#595) 2017-04-09 20:48:12 +00:00
Xavier Guimard
8e4dc89918 Some errors (#595) 2017-04-07 04:39:55 +00:00
Xavier Guimard
e7c3561451 Some errors (#595) 2017-04-07 04:39:53 +00:00
Xavier Guimard
fafb134e65 Add Kerberos test (#707) 2017-04-06 21:25:41 +00:00
Xavier Guimard
537d41a29b Kerberos in progress (#707) 2017-04-06 20:37:38 +00:00
Xavier Guimard
5210a8edec Add Krb JS (#707) 2017-04-06 20:37:36 +00:00
Xavier Guimard
73194ef2e3 More debug (#707) 2017-04-06 11:44:29 +00:00
Xavier Guimard
ddc1615546 Kerberos-by-Ajax skeleton (#707)
TODO: write javascript
2017-04-06 11:33:12 +00:00
Xavier Guimard
8582c8f7c0 Add "FILE:" to keyTab (#707) 2017-04-05 12:21:21 +00:00
Xavier Guimard
2cd1c1bf44 Init keyTab (#707) 2017-04-05 12:09:58 +00:00
Xavier Guimard
c4b27b9c24 Use PE_BADCREDENTIALS instead of 403 (#707) 2017-04-05 12:02:02 +00:00
Xavier Guimard
6943c49c05 More debug (#707) 2017-04-05 11:59:29 +00:00
Xavier Guimard
9ab046311c Auth::Kerberos skeleton (#707) 2017-04-05 11:54:44 +00:00
Xavier Guimard
2580a21f7a Remove old UA exported var (#1044) 2017-03-31 16:15:38 +00:00
Clément Oudot
24d28533ad Fix LDAP test after session variable rewrite (#1169) 2017-03-30 08:50:13 +00:00
Clément Oudot
b175218d1d Fix parsing CAS XML (#1183) 2017-03-29 19:43:10 +00:00
Clément Oudot
10cd479de4 Remove ticket from service URL when calling serviceValidate (#1183) 2017-03-29 19:43:10 +00:00
Xavier Guimard
9944115c8d Fix CAS test (#1183) 2017-03-29 19:02:38 +00:00
Clément Oudot
75ffa010e7 Fix typo in CAS code (#1183) 2017-03-29 07:51:18 +00:00
Xavier Guimard
2e59ea441a Replace request management in handler (#1044)
Note: this is a big change, more tests needed
2017-03-28 21:07:49 +00:00
Clément Oudot
552c432fef Remove use of AuthCAS module (#1183) 2017-03-28 18:23:50 +00:00
Xavier Guimard
775f1da607 Reauth for OIDC (#1204) 2017-03-28 17:09:46 +00:00
Xavier Guimard
c49dc6f334 Missing "substitute" call (#595) 2017-03-27 20:45:17 +00:00
Xavier Guimard
c761cc5781 Mark some properties "lazy" to be sure conf is intialized (#595) 2017-03-27 16:51:18 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
6cb301c531 Replace MIME::Lite by Email::Sender/MIME::Entity (#1206) 2017-03-27 05:22:08 +00:00
Xavier Guimard
bd9e6f50bf Start replacing MIME::Lite (#1206) 2017-03-26 05:26:28 +00:00
Xavier Guimard
20717fcce0 Verify SAML reauth (#595) 2017-03-26 05:26:25 +00:00
Xavier Guimard
d93130d168 Adapt SAML forceAuth to new portal (#595) 2017-03-24 18:04:46 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
581f0e4c93 Portal part of reauthentication (#1204) 2017-03-23 18:22:40 +00:00
Xavier Guimard
050cf20c72 Session upgrade skeleton (#1204) 2017-03-23 12:41:53 +00:00
Xavier Guimard
7b06532ee6 Comments 2017-03-23 12:41:52 +00:00
Xavier Guimard
9c9e48512f Add second factor doc 2017-03-23 12:06:53 +00:00
Xavier Guimard
86d7a3a8c0 Add SecondFactor superclass (#1015) 2017-03-23 11:17:01 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
6a76cf1e17 Use system() for security in External2F plugin (#1015) 2017-03-22 22:46:49 +00:00
Xavier Guimard
0538ad1cee Add External2F plugin (#1015) 2017-03-22 22:18:28 +00:00
Xavier Guimard
7e81e1b1e0 Add OIDC-RP rule (#1161) 2017-03-22 20:47:07 +00:00
Xavier Guimard
62528e8b6a Add SAML-SP rule (#1161) 2017-03-22 20:20:30 +00:00
Xavier Guimard
830f15f71d Bad safe usage (#595) 2017-03-22 19:03:49 +00:00
Xavier Guimard
e8c2925a3f Typo 2017-03-22 18:11:44 +00:00
Xavier Guimard
54cab03e06 Avoid warning (#1151) 2017-03-22 18:11:40 +00:00
Xavier Guimard
95d2253bdc Don't ask 2 token validations (Combination with token) 2017-03-22 18:11:36 +00:00
Xavier Guimard
077455e015 Update TODO list 2017-03-22 14:10:21 +00:00
Xavier Guimard
ca2e9be0e5 Rename _loginHistory (#1169) 2017-03-21 21:00:37 +00:00
Xavier Guimard
99ddfbfe25 Rename _startTime and _updateTime (#1169) 2017-03-21 20:52:40 +00:00
Xavier Guimard
51665b41f8 Validate OIDC-RP-to-SAML-IdP with POST (#1113) 2017-03-21 19:36:10 +00:00
Xavier Guimard
919a706efa Restore OpenID-2 (#1113) 2017-03-21 16:06:44 +00:00
Xavier Guimard
5993757427 Little things (#1113) 2017-03-21 07:59:54 +00:00
Xavier Guimard
6dba4fd1c2 Better request management in issuers (#595) 2017-03-21 06:23:58 +00:00
Xavier Guimard
7aeef26a94 Add portal in trusted domains 2017-03-20 18:14:10 +00:00
Xavier Guimard
1c6d81e86c Fix timeout 2017-03-20 18:14:08 +00:00
Xavier Guimard
d0467f0802 Restore relayState (#595) 2017-03-20 12:43:57 +00:00
Xavier Guimard
60796fa6a1 SAML in progress (#595) 2017-03-20 06:16:56 +00:00
Xavier Guimard
97fa806052 Adapt appsListOrder from 1.9 (#595) 2017-03-19 07:00:10 +00:00
Xavier Guimard
a6c2d72065 Update variable names (#LEMONDAP-1169) 2017-03-19 06:29:35 +00:00
Xavier Guimard
f1ac524c24 Use OTT for state token (#(595) 2017-03-18 19:51:00 +00:00
Xavier Guimard
1a65e9a0fe Use OTT for nonce token (#(595) 2017-03-18 19:50:56 +00:00
Xavier Guimard
6cab5c0990 Try SAML-SP to OIDC-OP (#1113) 2017-03-18 12:08:24 +00:00
Xavier Guimard
cdeec00972 Replace "?lmError=" by router path (#595) 2017-03-16 21:33:13 +00:00
Xavier Guimard
9a5ecdf1cb Repair activeTimer (#595) 2017-03-16 20:19:06 +00:00
Clément Oudot
272296841a Force AllowCreate in NameIDPolicy (#1200) 2017-03-16 18:39:00 +00:00
Xavier Guimard
bf3c43aecd Replace inline css (#1137) 2017-03-16 11:38:52 +00:00
Xavier Guimard
0845237efe Import CSP in manager code (#1137) 2017-03-15 22:27:58 +00:00
Xavier Guimard
9b9ecee8bb Replace inline script in history (#1137) 2017-03-15 21:20:10 +00:00
Xavier Guimard
1c76c713e7 Remove persistent cookie on lougout (#1131) 2017-03-15 10:01:36 +00:00
Xavier Guimard
126fdb091c Manage cookie expiration (#1131) 2017-03-15 10:01:29 +00:00