Commit Graph

613 Commits

Author SHA1 Message Date
Yadd
26150b85bd Fix RDBI rollback 2021-06-29 19:30:44 +02:00
Yadd
83b45db614 Fix versions 2021-06-28 15:36:29 +02:00
Yadd
7a219e1a61 Fix RDBI when configuration is forced (Closes: #2493) 2021-06-27 19:13:37 +02:00
Christophe Maudoux
7f91820224 Display removed SF name (#1782) 2021-06-26 22:38:42 +02:00
David Coutadeur
2a8a2ac845 give more logs when prepare() or execute() fail (helps debugging #2455) 2021-06-25 19:41:36 +02:00
Maxime Besson
316c734bbc Merge branch 'fix-totp-options-2541' into v2.0 2021-06-25 13:55:53 +02:00
Yadd
822594d06e Better error report with conf-DBI* 2021-06-25 08:04:49 +02:00
Maxime Besson
4aa9edb2cc Add manager option for userinfo signature alg (#2547) 2021-06-17 18:56:40 +02:00
Maxime Besson
c197bd95b5 Remove totp2fDisplayExistingSecret and totp2fUserCanChangeKey (#2541) 2021-06-15 14:54:32 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Maxime Besson
6f6239b6c3 Add manager option for #2506 2021-04-09 18:09:28 +02:00
Christophe Maudoux
bcfb075f63 Be more consistent with REST params & Update doc (#1976) 2021-04-01 22:48:08 +02:00
Maxime Besson
824cd5fb89 Fix CLI for oidcOPMetaDataJSON (#2439)
and oidcOPMetaDataJWKS
2021-03-30 16:32:14 +02:00
Maxime Besson
93d54458df Add oidcRPMetaDataScopeRules to list of hash params (#2424) 2021-02-19 17:26:23 +01:00
Xavier Guimard
b5c0ca94c4 CrowdSec plugin (#2451) 2021-02-19 07:40:36 +01:00
Maxime Besson
122512f01a Fix deserialization of array conf attributes (#2469) 2021-02-18 22:08:47 +01:00
Christophe Maudoux
1f66e03969 Append an option to download rules.json file from remote server (#2458) 2021-02-16 12:15:18 +01:00
Christophe Maudoux
6e1efc8bb5 WIP: CheckDevOps plugin skeleton (#2458) 2021-02-12 18:11:37 +01:00
Maxime Besson
39a419c1b1 Manager options for JWT access tokens (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
88cc6004a4 Add manager option for dynamic scopes (#2424) 2021-02-01 16:25:36 +01:00
Christophe Maudoux
5d56a88ff3 Use strict & Typo 2021-01-23 18:57:24 +01:00
Maxime Besson
c783ebc6d0 Add option to enable client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Christophe Maudoux
cd37ccc35c Merge branch 'v2.0' into findUser 2021-01-14 22:39:02 +01:00
Christophe Maudoux
e4444c907f Append CheckUser normalized headers option & Improve unit test (#2436) 2021-01-08 18:38:05 +01:00
Maxime Besson
93988663b4 Add ldapGetUserBeforePasswordChange to manager (#714) 2021-01-08 15:09:19 +01:00
Christophe Maudoux
d14fae87ce Append conf test & REST init test & set default values (#2176) 2021-01-06 23:10:09 +01:00
Christophe Maudoux
846d6a3655 Allow wildcard with searching parameters (#1976) & Improve unit tests 2021-01-05 22:08:48 +01:00
Christophe Maudoux
fc6ea96954 FindUser with combination (#1976) 2021-01-03 19:00:20 +01:00
Christophe Maudoux
c0f71ee0f1 Fix FindUSer with Choice (#1976) 2020-12-27 13:29:10 +01:00
Christophe Maudoux
4d04672c20 WIP: FindUser skeleton (#1976) 2020-12-20 22:54:35 +01:00
Christophe Maudoux
7be0240389 Update default values & Tidy (#2243) 2020-12-16 22:58:01 +01:00
Christophe Maudoux
df82d9d185 Take useSafeJail option into account in Manager &
Append an option to skip assignment test & Improve unit test (#2414, #2360)
2020-12-10 22:43:26 +01:00
Christophe Maudoux
32d52b96d8 Append an option to obfuscate some headers value (#2398) 2020-11-27 23:09:18 +01:00
Christophe Maudoux
a0feeae9a1 Append accessToTrace parameter (#2381) 2020-11-12 13:43:41 +01:00
Maxime Besson
5714a753be Add manager form for OIDC attribute (#2330) 2020-11-06 19:00:52 +01:00
Maxime Besson
8b9c6be6f6 Add krbAllowedDomains in manager (#2372) 2020-11-05 10:39:20 +01:00
Christophe Maudoux
602ccf91f6 Append parameters (#2368) 2020-11-04 13:49:51 +01:00
Christophe Maudoux
b869b59da7 Avoid assignment (#2360) 2020-10-30 12:55:39 +01:00
Christophe Maudoux
600569247f WIP: Hide _session_id with session & 2ndFA explorers (#2350) 2020-10-28 09:31:12 +01:00
Maxime Besson
1623c542a0 Add ldap IO timeout option to manager (#2267) 2020-10-27 16:01:36 +01:00
Christophe Maudoux
1c574f03da Rule is not parsed -> convert to bool & be more consistent (#1605) 2020-10-12 15:38:57 +02:00
Maxime Besson
fcb8e6b3c5 Use keepalive for LDAP connections (#2344) 2020-10-09 12:22:28 +02:00
Maxime Besson
f74787f81a Switch default SAML signature alg to SHA256 (#2341) 2020-10-07 15:35:37 +02:00
Maxime Besson
4d5de59735 Add manager option to override SAML signature method (#2319) 2020-10-07 15:31:27 +02:00
Christophe Maudoux
352b97f681 Append option to modify 2FA during context switching (#2338) 2020-10-04 21:18:09 +02:00
Clément OUDOT
9cec235472 Configuration of adaptative authentication level plugin in Manager (#2336) 2020-10-02 16:41:35 +02:00
Christophe Maudoux
1a73f7ab7f Append rule & fix userData (#2314 & #2315) 2020-09-15 14:13:34 +02:00
Christophe Maudoux
059b2b13f1 Merge branch 'v2.0' into 2266 2020-09-07 18:56:37 +02:00
Maxime Besson
c6358d7587 add ldapVerify option to ldap conf backend (#2250) 2020-09-05 12:21:37 +02:00
Maxime Besson
4e5578e32f New manager options for ldap certificate validation (#2250) 2020-09-05 12:21:34 +02:00
Xavier Guimard
c8df084247 Update versions 2020-09-04 17:59:00 +02:00
Maxime Besson
c183675651 Add option to skip session upgrade confirmation (#2124) 2020-09-04 17:16:09 +02:00
Maxime Besson
ab356f12fb Add manager option for delayed 2FA (#2124) 2020-09-04 17:15:29 +02:00
Maxime Besson
cb43b27904 Add manager options for authn level in issuer apps (#2124, #1848) 2020-09-04 17:14:04 +02:00
Christophe Maudoux
05096327c0 Re-order menu & Update langs (#2266) 2020-08-29 22:50:29 +02:00
Christophe Maudoux
0a4812203c Allowed all special chars and rule to disable local password policy (#2266) 2020-08-29 19:08:47 +02:00
Christophe Maudoux
4d52fedfe5 WIP - Incremental tempo 2020-08-25 22:58:47 +02:00
Maxime Besson
d5b47115ee Prettify json on manager conf export (#2292) 2020-08-25 18:27:25 +02:00
Maxime Besson
971f132b03 Add option to pretty print JSON config (#2292) 2020-08-25 15:01:04 +02:00
Christophe Maudoux
81a5d2552e Make json - Display oidc tab only if not empty 2020-08-25 11:12:48 +02:00
Maxime Besson
26cd1945fb Try to compute the correct value of SameSite by default (#2281) 2020-08-17 18:05:09 +02:00
Maxime Besson
2054799baf Move cache directory to /var/cache (#2254)
In order to avoid namespace issues, and for better compliance with the
FHS.

Only the default configs are changed.
2020-08-10 15:15:32 +02:00
Maxime Besson
d1cbb7263f Remove default value of ldapPort 2020-06-23 17:42:00 +02:00
Maxime Besson
914251d163 Update Build.pm for #2214 2020-06-23 11:29:58 +02:00
Christophe Maudoux
b04b2076de Preserve real_hGroups (#2229) 2020-06-06 23:27:37 +02:00
Maxime Besson
4d04d6fde0 File conf backend: fix available regexp
This avoids matching *.rpmnew and so on
2020-05-26 18:37:17 +02:00
Maxime Besson
29c8faeded Add constant for default conf storage (#2214) 2020-05-26 18:15:30 +02:00
Maxime Besson
0757f0af28 Add manager option for external yubikey ID provisionning (#2189) 2020-05-25 18:57:07 +02:00
Christophe Maudoux
bb9e03d1e5 Tidy 2020-05-24 00:04:33 +02:00
Maxime Besson
db9e862843 Merge branch 'feature-userdb-password-restserver' into v2.0 2020-05-09 20:07:24 +02:00
Christophe Maudoux
9bf915b5dc Fix unit tests & Version 2020-05-08 23:03:16 +02:00
Christophe Maudoux
097ddc4251 Fix OIDC default value 2020-05-08 22:06:25 +02:00
Maxime Besson
c687bb63ec Add manager option for password reset REST endpoint (/#1598) 2020-05-01 13:44:23 +02:00
Maxime Besson
444cacf2de Add option to enable REST auth/userdb server (#1659) 2020-05-01 13:44:00 +02:00
Christophe Maudoux
7014327232 Append an option to display sfManager link (#2185) 2020-04-30 20:50:10 +02:00
Christophe Maudoux
763eb04b4b Update tree (#2178) 2020-04-27 20:39:02 +02:00
Maxime Besson
7e502af391 Add option to remove "Refresh my rights" from menu 2020-04-27 17:19:41 +02:00
Maxime Besson
00e9e2ec57 Add manager option for additional audiences (#2177) 2020-04-24 11:10:44 +02:00
Christophe Maudoux
6018610196 Make checkUser option rules (#2173) 2020-04-24 00:25:10 +02:00
Maxime Besson
64d023b731 Add manager option for password grant (#2155) 2020-04-23 17:49:25 +02:00
Maxime Besson
42b650247b Change singleSession options to allow a rule (#2164) 2020-04-22 11:02:59 +02:00
Maxime Besson
51e1d3651e Remove unused singleSessionUserByIP option (#2159) 2020-04-21 10:17:44 +02:00
Clément OUDOT
8a5a93d6ac Fix GitHub parameters in Manager (#2154) 2020-04-18 00:26:24 +02:00
Clément OUDOT
a5eadc49d3 Add GitHub parameters in Manager (#2154) 2020-04-18 00:08:43 +02:00
Christophe Maudoux
c83f5c203f Make json 2020-04-15 23:25:57 +02:00
Maxime Besson
4bcb391121 Add an easy way to set level of additional second factors (#2149) 2020-04-15 17:20:27 +02:00
Christophe Maudoux
30f6a889de Append contextSwitching prefix parameter (#1783) 2020-04-03 23:09:55 +02:00
Christophe Maudoux
71ba189edc Append special characters password policy (#2130) 2020-04-02 12:14:05 +02:00
Christophe Maudoux
b924b96176 WIP - Append PP special characters options (#2130) 2020-04-02 01:03:42 +02:00
Christophe Maudoux
3ec85e6775 Re-order SAML options 2020-03-02 23:06:38 +01:00
Christophe Maudoux
8753cc4cf6 Option to hide empty headers with CheckUser (#2106) 2020-02-28 22:24:13 +01:00
Christophe Maudoux
e89c017ff6 Increase lock time after each failed login attempt (#2088) 2020-02-24 22:20:40 +01:00
Christophe Maudoux
53d7923cd4 WIP - Increase lock time after each failed login attempt (#2088) 2020-02-23 23:19:32 +01:00
Xavier Guimard
4459a47f76 Tidy 2020-02-20 23:37:05 +01:00
Xavier Guimard
a76cba3856 Update versions 2020-02-20 23:37:01 +01:00
Xavier Guimard
22c1f7270c Add feature to override SOAP Proxy URN (#2100) 2020-02-20 21:49:55 +01:00
Christophe Maudoux
15c12346ab Hide persistent session attributes & Improve unit tests (#2093) 2020-02-14 16:21:31 +01:00
Christophe Maudoux
73a0ec9dc6 Toggle buttons (#2071) 2020-02-09 21:55:52 +01:00
Christophe Maudoux
ef01060c54 Update langs (#2071) 2020-02-09 18:30:08 +01:00
Maxime Besson
68be974e51 Add option to compute userdb groups before macros (#1877) 2020-02-05 15:39:45 +01:00