Xavier Guimard
|
68707a0b36
|
Don't store request datas in $self (#1183)
|
2017-04-11 20:28:01 +00:00 |
|
Xavier Guimard
|
a83a707931
|
Add Ajax to SSL (closes #1212)
|
2017-04-11 19:19:59 +00:00 |
|
Xavier Guimard
|
eed489a557
|
Store CAS attributes for UserDB::CAS (#1183)
@coudot: can you validate this ?
|
2017-04-11 17:05:02 +00:00 |
|
Xavier Guimard
|
a44dd9b4f6
|
Optimize url building (#1183)
|
2017-04-11 17:05:00 +00:00 |
|
Xavier Guimard
|
acf9420c5f
|
Kerberos works !!! (#707)
|
2017-04-11 12:57:52 +00:00 |
|
Xavier Guimard
|
6cc554ac75
|
Optimization (#595)
|
2017-04-10 18:45:45 +00:00 |
|
Xavier Guimard
|
165c505ca5
|
Grant after 2F (#595)
|
2017-04-09 20:48:12 +00:00 |
|
Xavier Guimard
|
8e4dc89918
|
Some errors (#595)
|
2017-04-07 04:39:55 +00:00 |
|
Xavier Guimard
|
e7c3561451
|
Some errors (#595)
|
2017-04-07 04:39:53 +00:00 |
|
Xavier Guimard
|
fafb134e65
|
Add Kerberos test (#707)
|
2017-04-06 21:25:41 +00:00 |
|
Xavier Guimard
|
537d41a29b
|
Kerberos in progress (#707)
|
2017-04-06 20:37:38 +00:00 |
|
Xavier Guimard
|
5210a8edec
|
Add Krb JS (#707)
|
2017-04-06 20:37:36 +00:00 |
|
Xavier Guimard
|
73194ef2e3
|
More debug (#707)
|
2017-04-06 11:44:29 +00:00 |
|
Xavier Guimard
|
ddc1615546
|
Kerberos-by-Ajax skeleton (#707)
TODO: write javascript
|
2017-04-06 11:33:12 +00:00 |
|
Xavier Guimard
|
8582c8f7c0
|
Add "FILE:" to keyTab (#707)
|
2017-04-05 12:21:21 +00:00 |
|
Xavier Guimard
|
2cd1c1bf44
|
Init keyTab (#707)
|
2017-04-05 12:09:58 +00:00 |
|
Xavier Guimard
|
c4b27b9c24
|
Use PE_BADCREDENTIALS instead of 403 (#707)
|
2017-04-05 12:02:02 +00:00 |
|
Xavier Guimard
|
6943c49c05
|
More debug (#707)
|
2017-04-05 11:59:29 +00:00 |
|
Xavier Guimard
|
9ab046311c
|
Auth::Kerberos skeleton (#707)
|
2017-04-05 11:54:44 +00:00 |
|
Xavier Guimard
|
2580a21f7a
|
Remove old UA exported var (#1044)
|
2017-03-31 16:15:38 +00:00 |
|
Clément Oudot
|
24d28533ad
|
Fix LDAP test after session variable rewrite (#1169)
|
2017-03-30 08:50:13 +00:00 |
|
Clément Oudot
|
b175218d1d
|
Fix parsing CAS XML (#1183)
|
2017-03-29 19:43:10 +00:00 |
|
Clément Oudot
|
10cd479de4
|
Remove ticket from service URL when calling serviceValidate (#1183)
|
2017-03-29 19:43:10 +00:00 |
|
Xavier Guimard
|
9944115c8d
|
Fix CAS test (#1183)
|
2017-03-29 19:02:38 +00:00 |
|
Clément Oudot
|
75ffa010e7
|
Fix typo in CAS code (#1183)
|
2017-03-29 07:51:18 +00:00 |
|
Xavier Guimard
|
2e59ea441a
|
Replace request management in handler (#1044)
Note: this is a big change, more tests needed
|
2017-03-28 21:07:49 +00:00 |
|
Clément Oudot
|
552c432fef
|
Remove use of AuthCAS module (#1183)
|
2017-03-28 18:23:50 +00:00 |
|
Xavier Guimard
|
775f1da607
|
Reauth for OIDC (#1204)
|
2017-03-28 17:09:46 +00:00 |
|
Xavier Guimard
|
c49dc6f334
|
Missing "substitute" call (#595)
|
2017-03-27 20:45:17 +00:00 |
|
Xavier Guimard
|
c761cc5781
|
Mark some properties "lazy" to be sure conf is intialized (#595)
|
2017-03-27 16:51:18 +00:00 |
|
Xavier Guimard
|
6efec8525f
|
Install new SMTP options (#1206)
|
2017-03-27 07:02:19 +00:00 |
|
Xavier Guimard
|
6cb301c531
|
Replace MIME::Lite by Email::Sender/MIME::Entity (#1206)
|
2017-03-27 05:22:08 +00:00 |
|
Xavier Guimard
|
bd9e6f50bf
|
Start replacing MIME::Lite (#1206)
|
2017-03-26 05:26:28 +00:00 |
|
Xavier Guimard
|
20717fcce0
|
Verify SAML reauth (#595)
|
2017-03-26 05:26:25 +00:00 |
|
Xavier Guimard
|
d93130d168
|
Adapt SAML forceAuth to new portal (#595)
|
2017-03-24 18:04:46 +00:00 |
|
Xavier Guimard
|
6a651b5bee
|
Try to implement SAML reauth (#595)
|
2017-03-23 20:49:52 +00:00 |
|
Xavier Guimard
|
581f0e4c93
|
Portal part of reauthentication (#1204)
|
2017-03-23 18:22:40 +00:00 |
|
Xavier Guimard
|
050cf20c72
|
Session upgrade skeleton (#1204)
|
2017-03-23 12:41:53 +00:00 |
|
Xavier Guimard
|
7b06532ee6
|
Comments
|
2017-03-23 12:41:52 +00:00 |
|
Xavier Guimard
|
3cde1d0a58
|
Add second factor doc
|
2017-03-23 12:14:09 +00:00 |
|
Xavier Guimard
|
9c9e48512f
|
Add second factor doc
|
2017-03-23 12:06:53 +00:00 |
|
Xavier Guimard
|
86d7a3a8c0
|
Add SecondFactor superclass (#1015)
|
2017-03-23 11:17:01 +00:00 |
|
Xavier Guimard
|
e33a741acf
|
Add rules for 2f (#1015)
|
2017-03-23 06:20:06 +00:00 |
|
Xavier Guimard
|
6a76cf1e17
|
Use system() for security in External2F plugin (#1015)
|
2017-03-22 22:46:49 +00:00 |
|
Xavier Guimard
|
0538ad1cee
|
Add External2F plugin (#1015)
|
2017-03-22 22:18:28 +00:00 |
|
Xavier Guimard
|
7e81e1b1e0
|
Add OIDC-RP rule (#1161)
|
2017-03-22 20:47:07 +00:00 |
|
Xavier Guimard
|
62528e8b6a
|
Add SAML-SP rule (#1161)
|
2017-03-22 20:20:30 +00:00 |
|
Xavier Guimard
|
830f15f71d
|
Bad safe usage (#595)
|
2017-03-22 19:03:49 +00:00 |
|
Xavier Guimard
|
e8c2925a3f
|
Typo
|
2017-03-22 18:11:44 +00:00 |
|
Xavier Guimard
|
54cab03e06
|
Avoid warning (#1151)
|
2017-03-22 18:11:40 +00:00 |
|
Xavier Guimard
|
95d2253bdc
|
Don't ask 2 token validations (Combination with token)
|
2017-03-22 18:11:36 +00:00 |
|
Xavier Guimard
|
077455e015
|
Update TODO list
|
2017-03-22 14:10:21 +00:00 |
|
Xavier Guimard
|
ca2e9be0e5
|
Rename _loginHistory (#1169)
|
2017-03-21 21:00:37 +00:00 |
|
Xavier Guimard
|
99ddfbfe25
|
Rename _startTime and _updateTime (#1169)
|
2017-03-21 20:52:40 +00:00 |
|
Xavier Guimard
|
51665b41f8
|
Validate OIDC-RP-to-SAML-IdP with POST (#1113)
|
2017-03-21 19:36:10 +00:00 |
|
Xavier Guimard
|
919a706efa
|
Restore OpenID-2 (#1113)
|
2017-03-21 16:06:44 +00:00 |
|
Xavier Guimard
|
5993757427
|
Little things (#1113)
|
2017-03-21 07:59:54 +00:00 |
|
Xavier Guimard
|
6dba4fd1c2
|
Better request management in issuers (#595)
|
2017-03-21 06:23:58 +00:00 |
|
Xavier Guimard
|
7aeef26a94
|
Add portal in trusted domains
|
2017-03-20 18:14:10 +00:00 |
|
Xavier Guimard
|
1c6d81e86c
|
Fix timeout
|
2017-03-20 18:14:08 +00:00 |
|
Xavier Guimard
|
d0467f0802
|
Restore relayState (#595)
|
2017-03-20 12:43:57 +00:00 |
|
Xavier Guimard
|
60796fa6a1
|
SAML in progress (#595)
|
2017-03-20 06:16:56 +00:00 |
|
Xavier Guimard
|
97fa806052
|
Adapt appsListOrder from 1.9 (#595)
|
2017-03-19 07:00:10 +00:00 |
|
Xavier Guimard
|
a6c2d72065
|
Update variable names (#LEMONDAP-1169)
|
2017-03-19 06:29:35 +00:00 |
|
Xavier Guimard
|
f1ac524c24
|
Use OTT for state token (#(595)
|
2017-03-18 19:51:00 +00:00 |
|
Xavier Guimard
|
1a65e9a0fe
|
Use OTT for nonce token (#(595)
|
2017-03-18 19:50:56 +00:00 |
|
Xavier Guimard
|
6cab5c0990
|
Try SAML-SP to OIDC-OP (#1113)
|
2017-03-18 12:08:24 +00:00 |
|
Xavier Guimard
|
cdeec00972
|
Replace "?lmError=" by router path (#595)
|
2017-03-16 21:33:13 +00:00 |
|
Xavier Guimard
|
9a5ecdf1cb
|
Repair activeTimer (#595)
|
2017-03-16 20:19:06 +00:00 |
|
Clément Oudot
|
272296841a
|
Force AllowCreate in NameIDPolicy (#1200)
|
2017-03-16 18:39:00 +00:00 |
|
Xavier Guimard
|
bf3c43aecd
|
Replace inline css (#1137)
|
2017-03-16 11:38:52 +00:00 |
|
Xavier Guimard
|
0845237efe
|
Import CSP in manager code (#1137)
|
2017-03-15 22:27:58 +00:00 |
|
Xavier Guimard
|
9b9ecee8bb
|
Replace inline script in history (#1137)
|
2017-03-15 21:20:10 +00:00 |
|
Xavier Guimard
|
1c76c713e7
|
Remove persistent cookie on lougout (#1131)
|
2017-03-15 10:01:36 +00:00 |
|
Xavier Guimard
|
126fdb091c
|
Manage cookie expiration (#1131)
|
2017-03-15 10:01:29 +00:00 |
|
Xavier Guimard
|
15cf1991bd
|
Reinitialize token when login fails (#1140)
|
2017-03-14 17:38:50 +00:00 |
|
Xavier Guimard
|
43437a5244
|
Reinitialize token when login fails (#1140)
|
2017-03-14 17:26:07 +00:00 |
|
Xavier Guimard
|
2d7902421a
|
Reinitialize token when login fails (#1140)
|
2017-03-14 16:52:11 +00:00 |
|
Xavier Guimard
|
a07e92759c
|
Add Auth::PAM (#closes: #1196)
|
2017-03-14 15:34:10 +00:00 |
|
Clément Oudot
|
efb776a7bf
|
Remove unused icons (#1184)
|
2017-03-14 14:40:09 +00:00 |
|
Xavier Guimard
|
05a856ebb1
|
FrontChannel frame for already logged out user (#1194)
|
2017-03-12 07:36:07 +00:00 |
|
Xavier Guimard
|
73b71e5587
|
Set timeout in local cache (#1140)
|
2017-03-12 07:11:52 +00:00 |
|
Xavier Guimard
|
ec211da331
|
OIDC RP logout skeleton
|
2017-03-11 18:12:03 +00:00 |
|
Xavier Guimard
|
a8f3eee74a
|
Use global sessions only (#595)
|
2017-03-11 18:12:01 +00:00 |
|
Xavier Guimard
|
81d3729394
|
Use local cache by default for tokens (#1140)
|
2017-03-11 18:11:57 +00:00 |
|
Clément Oudot
|
6b775be965
|
Apply patch in loadSP (#1193)
|
2017-03-11 10:02:50 +00:00 |
|
Xavier Guimard
|
f54dfe6276
|
More clean patch (#1193)
|
2017-03-11 07:27:52 +00:00 |
|
Xavier Guimard
|
c73dce5c3f
|
Typo (#1194)
|
2017-03-11 07:16:27 +00:00 |
|
Xavier Guimard
|
8f4b4588c7
|
Fix LEMONLDAP-1193
|
2017-03-11 07:16:24 +00:00 |
|
Xavier Guimard
|
7f460429e1
|
OIDC OP2RP logout in progress (#1194)
|
2017-03-10 11:39:19 +00:00 |
|
Xavier Guimard
|
8a5f8d96ef
|
Front-channel logout (#1032)
|
2017-03-09 21:56:51 +00:00 |
|
Xavier Guimard
|
2c5dddde8a
|
Unused constant (#595)
|
2017-03-09 21:56:50 +00:00 |
|
Xavier Guimard
|
d70a5b005f
|
Update handler internal cache on session update (#595)
|
2017-03-09 21:56:48 +00:00 |
|
Xavier Guimard
|
4d9a8da274
|
Register OIDC associations (#1032)
|
2017-03-09 21:56:47 +00:00 |
|
Xavier Guimard
|
179f6e0381
|
Follow OIDC spec: bad error codes (closes: #1191)
|
2017-03-09 21:56:43 +00:00 |
|
Xavier Guimard
|
4665c9d2ea
|
Revert r6192 (#595)
|
2017-03-09 05:44:16 +00:00 |
|
Xavier Guimard
|
6c042c5660
|
Launch other logouts in OIDC (#1032)
|
2017-03-08 22:49:00 +00:00 |
|
Xavier Guimard
|
244fad96a0
|
no strict (#595)
|
2017-03-08 22:48:57 +00:00 |
|
Xavier Guimard
|
dec3eb4feb
|
Error: IdP cookie was not read (#595)
|
2017-03-08 22:48:55 +00:00 |
|
Xavier Guimard
|
3926b9876a
|
StayConnected checkbox (closes: #1131)
|
2017-03-08 21:09:21 +00:00 |
|