Commit Graph

11138 Commits

Author SHA1 Message Date
Maxime Besson
824cd5fb89 Fix CLI for oidcOPMetaDataJSON (#2439)
and oidcOPMetaDataJWKS
2021-03-30 16:32:14 +02:00
Maxime Besson
47a3a534a3 Doc for #2499 2021-03-30 16:32:14 +02:00
Maxime Besson
6f9734db92 convertSession: add option to rename fields (#2499) 2021-03-30 16:32:14 +02:00
Maxime Besson
b4f5ee58c3 Fix #2498 2021-03-30 16:32:14 +02:00
Maxime Besson
dca8483ec5 Relax scope name constraints in manager (#2424) 2021-03-30 16:32:14 +02:00
Maxime Besson
20e1f9ded0 Hash JWT to catch tampering (#2419)
This mechanism's only purpose is to make the introsection endpoint fail
to verify the token when the JWT itself has been tampered with.
2021-03-30 16:32:14 +02:00
Maxime Besson
2c8cbbefe6 "xxx is allowed to update 2FA" should be a debug message 2021-03-30 16:32:14 +02:00
Clément OUDOT
2d60af304f Fix notifications documentation (#2497) 2021-03-29 20:54:49 +02:00
Christophe Maudoux
c98e5ec763 Improve doc (#2381) 2021-03-26 22:10:46 +01:00
Christophe Maudoux
098934682d Fix warning (#2486) 2021-03-26 21:54:21 +01:00
Clément OUDOT
55ab4b5a5f Fix CAS log message on service ticket validation error (#2494) 2021-03-25 16:33:48 +01:00
Clément OUDOT
13e7804ea6 Documentation for i-Parapheur 2021-03-24 18:25:49 +01:00
Clément OUDOT
c3213425f9 Remove swap file 2021-03-24 16:36:31 +01:00
Maxime Besson
02b680df30 fix #2489 2021-03-19 16:45:37 +01:00
Clément OUDOT
59f05ed363 Merge branch 'BR_make' into 'v2.0'
BR: make

See merge request lemonldap-ng/lemonldap-ng!188
2021-03-17 16:32:08 +00:00
Xavier Bachelot
abee63b5b6 BR: make
make is not in the default buildroot anymore starting with Fedora 34.
2021-03-17 16:03:18 +01:00
Maxime Besson
96a667cf2e clarify REST log messages 2021-03-17 14:24:47 +01:00
Maxime Besson
19f9221707 Documentation for #2488 2021-03-17 14:24:47 +01:00
Maxime Besson
9fda75edc5 Unit test for #2488 2021-03-17 14:24:47 +01:00
Maxime Besson
ca6c98c26c Allow selection of saml ACS during idp initiated (#2488) 2021-03-17 14:24:47 +01:00
Maxime Besson
911fc46cba Fix convertSession doc 2021-03-15 22:45:19 +01:00
Maxime Besson
f98710bd34 Fix convertSession error reporting (#2487) 2021-03-15 21:18:08 +01:00
Maxime Besson
c0f8e8f46b Skip serializing psgi streams when saving request
It can interfere with unit tests in some cases, like #2000
2021-03-15 21:18:08 +01:00
Maxime Besson
b491ed6413 Retry CI jobs to avoid transient failures 2021-03-15 21:18:08 +01:00
Clément OUDOT
1d186df6c3 Merge branch 'doc-app_gerrit' into 'v2.0'
Give a location to get a prebuild OAuth plugin for Gerrit.

See merge request lemonldap-ng/lemonldap-ng!186
2021-03-14 17:37:48 +00:00
Yadd
45aa9a2a71 Fix debian update from Buster to Bullseye 2021-03-13 12:35:34 +01:00
atisne
82e7e84561 Give a location to get a prebuild OAuth plugin for Gerrit. 2021-03-12 17:59:37 +01:00
Maxime Besson
8cc326adf1 Fix doc 2021-03-10 15:55:13 +01:00
Maxime Besson
f260d941e3 Doc for #2484 2021-03-10 15:54:41 +01:00
Maxime Besson
fc693184dc Unit test for #2484 2021-03-10 15:47:46 +01:00
Maxime Besson
44abc1e889 Add hook for client credentials (#2484) 2021-03-10 15:47:19 +01:00
Maxime Besson
2c4d615c2f Fix 2F removal when session ids are hidden (#2483)
We don't need to hide persistent session IDs because they are not
security senstive (hash of login)
2021-03-10 14:02:52 +01:00
Maxime Besson
6a3479ea3c unit tests: Try to find templateDir in path
This change makes running the testsuite from an external directory
easier. Which is useful if you want to unit test a custom module
2021-03-08 18:45:13 +01:00
Clément OUDOT
f0e90213bb (doc) How to overwrite protocol in NextCloud 2021-03-04 15:13:30 +01:00
Maxime Besson
c7877f1415 Remediation doc for (#2481) 2021-03-03 16:47:09 +01:00
Maxime Besson
41c388b26b Fix error handling when OAuth2 session is not found (#2481) 2021-03-03 15:57:52 +01:00
Maxime Besson
0f626ad94c Add expiration time to Client Credential sessions (#2481) 2021-03-03 15:43:18 +01:00
Maxime Besson
a70051e3fe Remove deprecated base64url implementation
All our target distros now have base64url in Mime::Base64
2021-03-03 11:03:19 +01:00
Maxime Besson
e3ecddb8c9 Unit tests for #2424 2021-03-03 11:03:19 +01:00
Maxime Besson
bb95e681e6 Tidy 2021-03-03 11:03:19 +01:00
Maxime Besson
e10d1e291c Return granted scopes if different from requested scopes (#2424) 2021-03-03 11:03:19 +01:00
Maxime Besson
6b9670c29d Use computed scopes to fill claims in ID token (#2424) 2021-03-03 11:03:19 +01:00
Maxime Besson
534745e5a2 Use computer scopes in Implicit/Hybrid responses (#2424) 2021-03-03 11:03:18 +01:00
Christophe Maudoux
b46259cae9 Enable upgradeSession only if required & Append unit test (#2480) 2021-03-02 19:20:15 +01:00
Yadd
a422af3038 Fix test 2021-03-02 07:58:25 +01:00
Yadd
3883c5abff Fix vhost regexp (#2477) 2021-03-02 07:57:21 +01:00
Maxime Besson
fd3b2d25ef Do not remove sessions/oidc consents from Angular when the XHR fails 2021-02-24 17:48:12 +01:00
Maxime Besson
4f5998029d Fix typo 2021-02-24 17:48:12 +01:00
Maxime Besson
4841c7755e Fix OAuth2 error code when supplying invalid code 2021-02-24 17:48:12 +01:00
Maxime Besson
5a8c20584b Fix OIDC message when calling technical endpoints with cookies (#2475) 2021-02-24 17:48:12 +01:00