Xavier Guimard
ece9b21219
Remove trailing whitespaces
2019-04-03 14:15:16 +02:00
Xavier Guimard
141ba96c92
Update version
2019-04-03 13:53:56 +02:00
Clément OUDOT
9a454fbb7a
Manage SLO termination if there is no RelayState ( #1671 )
2019-04-03 12:26:01 +02:00
Maxime Besson
d44a042fd5
Revert 8f5fbb077e
and change the way logout errors are handled
...
Relating to issue #1668 , the proposed fix works when there is only one
service provider to logout of.
Now that multiple service provider logout is starting to work again on
2.0, we cannot read the remote_ProviderID from the logout object because
it is only filled by lasso when actually building the response.
Instead, we ignore any error that could occur when building the
response, log a warning and show the portal instead. Still better than
an internal server error.
2019-04-03 11:20:24 +02:00
maudoux
ae28ea3169
Append Conf domain to url if missing - Fix port ( #1664 )
2019-04-02 22:08:15 +02:00
maudoux
ec214c75c2
Append Conf domain to url if missing ( #1664 )
2019-04-02 22:08:15 +02:00
Clément OUDOT
a805a5a00b
Manage SLO responses ( #1671 )
2019-04-02 17:27:47 +02:00
Clément OUDOT
4e76ee9582
Avoid warning during SAML SLO ( #1671 )
2019-04-02 16:13:45 +02:00
Clément OUDOT
bac2eb564c
Remove antiframe protection in portal javascript ( #1696 )
2019-04-02 15:05:41 +02:00
Clément OUDOT
c4b4e95e9d
Display password or login template after password modification ( #1654 )
2019-04-02 11:12:33 +02:00
Xavier
4798683129
Merge branch 'v2.0'
2019-04-02 06:56:45 +02:00
Clément OUDOT
4af47ad6a4
Allow iframe from portal to be able to load saml SLO return page ( #1671 )
2019-04-01 18:09:31 +02:00
Clément OUDOT
5a30a82fa6
Add SLO Termination endpoint ( #1671 )
2019-04-01 18:02:38 +02:00
Clément OUDOT
59bc0642fc
Always display info ( #1693 )
2019-04-01 17:18:28 +02:00
Clément OUDOT
502a32e257
Add unit test and fix code for ppolicy grace ( #1691 )
2019-04-01 09:58:56 +02:00
Xavier
01ab88ba57
Fix for #1691
2019-04-01 06:52:21 +02:00
Clément OUDOT
a1f5fb5170
Test return of getUser ( #1654 )
2019-03-29 11:53:52 +01:00
Xavier
906db8daa6
Merge branch 'antoinerosier/lemonldap-ng-logs' into v2.0
2019-03-27 21:44:25 +01:00
Antoine ROSIER
b79c9659cb
Add user logs informations ( #1687 )
2019-03-27 16:00:39 +01:00
Xavier Guimard
b40f292d8a
Merge branch 'v2.0'
2019-03-27 10:31:30 +01:00
Clément OUDOT
4bab684e2d
Refresh entry after password modification ( #1654 )
2019-03-27 09:59:22 +01:00
Xavier
5a5572ec1f
Fix WSDL generation ( Closes : #1686 )
2019-03-26 21:47:14 +01:00
Clément OUDOT
39020e003e
Fix server error on SAML SLO ( #1671 )
2019-03-26 17:15:01 +01:00
Clément OUDOT
aa139df89d
Change criticity of password must be reset message ( #1654 )
2019-03-26 16:45:19 +01:00
Xavier Guimard
af4f123916
Fix cspScrip ( Closes : #1683 )
2019-03-26 09:56:46 +01:00
Xavier Guimard
4cb497e5a2
Merge branch 'v2.0'
2019-03-26 08:09:56 +01:00
Xavier Guimard
99afd7243a
Fix #1675
2019-03-26 08:06:55 +01:00
Xavier
f226bded41
Partial fix for /logout ( #1675 )
2019-03-26 07:30:36 +01:00
Xavier
774707ad65
Add cache to avoid parsing and compiling JSON files at each request ( #1595 )
2019-03-26 06:49:39 +01:00
Xavier
3cea903c79
Merge branch 'v2.0'
2019-03-25 22:14:10 +01:00
Xavier Guimard
3c0a9d7ecc
Second fix for #1673
2019-03-25 19:34:29 +01:00
Xavier Guimard
4138b7edae
Fix menu app cache ( #1673 )
2019-03-25 16:48:57 +01:00
Maxime Besson
3575e0ef23
Clear url pdata on CDA redirection
...
Fixes #1650
2019-03-19 19:15:47 +01:00
Clément OUDOT
8a9a5b0b3a
New method to override messages with JSON files ( #1595 )
2019-03-19 17:39:13 +01:00
Clément OUDOT
447c09c0a2
Remove old translation file ( #1595 )
2019-03-19 15:38:36 +01:00
Xavier
4fcf77e721
Merge branch 'v2.0'
2019-03-19 08:32:33 +01:00
Clément OUDOT
438d5bcbaf
Revert patch on GrantSession plugin ( #1666 )
2019-03-18 21:35:02 +01:00
Clément OUDOT
4166ae6d90
Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0
2019-03-18 21:29:31 +01:00
Clément OUDOT
9798c78068
Remove userData if authentication fails ( #1666 )
2019-03-18 21:29:15 +01:00
Christophe Maudoux
d412f3d807
Update version ( #1666 )
2019-03-18 17:14:22 +01:00
Clément OUDOT
4366488fb6
Adapt GrantSession plugin to display authentication error on login form ( #1666 )
2019-03-18 11:53:30 +01:00
Clément OUDOT
627548e95d
Display authentication error on login form ( #1666 )
2019-03-18 11:41:41 +01:00
Xavier Guimard
8941ee4dd5
Merge branch 'v2.0'
2019-03-14 14:57:39 +01:00
Clément OUDOT
d620ae2e8b
Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0
2019-03-13 10:30:16 +01:00
Clément OUDOT
dee4818f0c
Merge branch 'issue1543' into 'v2.0'
...
Save Urldc when using SAML Discovery
See merge request lemonldap-ng/lemonldap-ng!62
2019-03-13 10:19:14 +01:00
Maxime Besson
8f5fbb077e
When logout-initiating SP has no known SLO endpoint, fallback to portal
...
In some federations, SLO endpoints are not published, yet SP are still
able to initiate logouts.
This used to cause an error on the portal, this commit changes the error
into a warning in logs. The user remains on the portal and sees a normal
logout message.
2019-03-12 17:58:41 +01:00
Clément OUDOT
f6a3b527c8
Process SAML request to get current SP in env ( #1672 )
2019-03-12 16:52:01 +01:00
Christophe Maudoux
e1aa654bbb
Display session at first access ( #1658 )
2019-03-12 10:00:23 +01:00
Christophe Maudoux
d39078f29b
Fix specific use cases with rules ( #1664 )
2019-03-11 22:07:38 +01:00
Maxime Besson
257d329151
Fix display of ok/nok image during multi-sp saml logout
2019-03-11 18:13:06 +01:00
Clément OUDOT
8cd579f19f
Add a waiting message for Kerberos/SSL workflow ( #1670 )
2019-03-11 16:36:32 +01:00
Clément OUDOT
145db1cf60
Fix regexp for portal default condition ( #1669 )
2019-03-11 12:01:16 +01:00
Christophe Maudoux
30c0f2edf0
Improve code ( #1658 )
2019-03-10 22:01:55 +01:00
Christophe Maudoux
be28b60e66
Append identities rule ( #1658 )
2019-03-09 23:29:10 +01:00
Christophe Maudoux
7e1119a88d
Fix mistake & typo ( #1664 )
2019-03-09 23:27:54 +01:00
Christophe Maudoux
bf8040a78a
Fix empty submitted value ( #1664 )
2019-03-09 21:31:49 +01:00
Christophe Maudoux
049df70e53
Erase sessionInfo if spoofed identity is not allowed ( #1664 )
2019-03-09 13:18:39 +01:00
Christophe Maudoux
dfd286c9fa
Compute spoofed session with real and spoofed attributes ( #1664 )
2019-03-09 13:05:44 +01:00
Christophe Maudoux
09281f8d22
Append identities rule and fix error catching ( #1664 )
2019-03-08 11:39:19 +01:00
Christophe Maudoux
bea84c8847
Typo ( #1664 )
2019-03-07 23:39:50 +01:00
Christophe Maudoux
b368925323
Typo ( #1658 )
2019-03-07 23:39:37 +01:00
Xavier Guimard
77301e70ca
Merge branch 'v2.0'
2019-03-07 22:29:34 +01:00
Xavier Guimard
bc2bef4ff4
Please use our .perltidyrc
2019-03-07 18:22:58 +01:00
Xavier Guimard
c3f5960452
Improvements + API calls
...
@maudoux: could you review this?
2019-03-07 18:15:48 +01:00
Christophe Maudoux
a9b0298624
Fix using attributes ( #1658 )
2019-03-07 17:15:03 +01:00
Christophe Maudoux
cc04740252
Fix userControl ( #1667 )
2019-03-07 15:19:04 +01:00
Christophe Maudoux
ef4f1fb0bf
Fix test submitted user param ( #1667 )
2019-03-07 10:47:14 +01:00
Christophe Maudoux
e0204c6a79
Test submitted user param ( #1667 )
2019-03-06 23:08:22 +01:00
Christophe Maudoux
9225d49216
Allow Impersonation with all auth modules ( #1664 )
2019-03-06 22:31:37 +01:00
Christophe Maudoux
6e50f41687
Fix session update ( #1664 )
2019-03-06 21:29:03 +01:00
Christophe Maudoux
e506c5cc58
Using current session if exists ( #1664 )
2019-03-06 19:26:32 +01:00
Christophe Maudoux
a05f71789e
WIP - Fix groups merging ( #1664 )
2019-03-06 17:59:09 +01:00
Christophe Maudoux
8bc9e50947
WIP - Fix groups merging ( #1664 )
2019-03-06 17:58:40 +01:00
Christophe Maudoux
a31d26c608
Spoof Authentication and userDB modules ( #1664 )
2019-03-06 16:30:56 +01:00
Christophe Maudoux
7b08a7c442
Rename idSpoofing plugin to Impersonation & all relative parameters ( #1664 )
2019-03-06 16:30:56 +01:00
Xavier Guimard
26b80873be
Modify Try.pm to handle authorizations ( #1658 )
2019-03-05 21:11:07 +01:00
Christophe Maudoux
4be42b06fe
Alow DNS or URL ( #1658 )
2019-03-05 19:36:38 +01:00
Christophe Maudoux
e7d1b065b7
Merge SSO groups ( #1664 )
2019-03-05 14:50:30 +01:00
Christophe Maudoux
ff05a8f797
Modify parameters ( #1664 )
2019-03-05 14:50:01 +01:00
Christophe Maudoux
c7ddae854c
Fix error & not found VH ( #1664 )
2019-03-04 20:53:39 +01:00
Maxime Besson
e290cd59d6
Fix undef warnings in metadata generation
...
Fix some undef warnings introduced in
12d2db35a9
2019-03-04 09:33:12 +01:00
Maxime Besson
25d1c45fd4
Add new option to override EntityID when acting as IDP
2019-03-04 09:33:10 +01:00
Christophe Maudoux
4e51cc342b
Append access rule ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
286f5b79e3
WIP - Append debug logs ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
228a37c0d2
WIP - Append parameters ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
f9db9a0258
WIP - Append conf. parameters ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
3bb7f6e664
WIP - Create session ( #1664 )
2019-03-03 21:27:27 +01:00
Christophe Maudoux
b18fd9c9fe
Fix OTT & minor improvements ( #1658 )
2019-03-03 09:20:12 +01:00
Christophe Maudoux
461120ad65
Typo ( #1658 )
2019-03-03 09:20:12 +01:00
Christophe Maudoux
2653cfdc9e
Fix error ( #1658 )
2019-03-03 09:20:12 +01:00
Christophe Maudoux
1f5c7a83a9
Dispatching attributes ( #1658 )
2019-03-03 09:20:12 +01:00
Christophe Maudoux
f857f1a8a7
Check access rules ( #1658 )
2019-03-03 09:20:12 +01:00
Clément OUDOT
6740269cce
Restore old login history ( #1656 )
2019-03-03 09:19:42 +01:00
Clément OUDOT
48b86bd224
Improve log in updateSession ( #1656 )
2019-03-03 09:19:42 +01:00
dcoutadeur
5324da2c15
fix id_token validity not correctly evaluated #1662
2019-03-03 09:19:42 +01:00
Christophe Maudoux
a41b5fb945
Fix OTT & minor improvements ( #1658 )
2019-03-02 11:45:59 +01:00
Christophe Maudoux
a4af486181
Typo ( #1658 )
2019-03-01 21:46:05 +01:00
Christophe Maudoux
0cd3c12503
Fix error ( #1658 )
2019-03-01 14:07:26 +01:00
Christophe Maudoux
81a37e5bcc
Dispatching attributes ( #1658 )
2019-03-01 12:36:37 +01:00
Christophe Maudoux
4fe1473f9a
Check access rules ( #1658 )
2019-02-28 21:59:59 +01:00
Maxime Besson
4a2fecaa7a
Save Urldc when using SAML Discovery
...
Fixes #1543
2019-02-28 17:51:50 +01:00
Clément OUDOT
d8a8832f4c
Restore old login history ( #1656 )
2019-02-28 17:40:15 +01:00
Clément OUDOT
b3f917ac5a
Improve log in updateSession ( #1656 )
2019-02-28 16:51:16 +01:00
dcoutadeur
3af15b139e
fix id_token validity not correctly evaluated #1662
2019-02-28 09:56:21 +01:00
Clément OUDOT
59d163c663
Merge branch 'v2.0'
2019-02-28 08:52:48 +01:00
Maxime Besson
12d2db35a9
Add new URLs for SP-only or IDP-only SAML metadata
...
This commit adds two new URLs:
/saml/metadata/idp : IDP-only metadata
/saml/metadata/sp : SP-only metadata
/saml/metadata keeps providing metadata for all SAML services
2019-02-27 18:14:30 +01:00
Christophe Maudoux
36200c32c5
Improve display ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
cc99cec73a
Improve code ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
212be23313
Improve checkUser display ( #1658 )
2019-02-26 20:05:44 +01:00
Christophe Maudoux
70a5c645d8
Improve checkUser display ( #1658 )
2019-02-25 23:34:58 +01:00
Christophe Maudoux
3f9957ee6c
Fix log msg ( #1658 )
2019-02-25 22:25:25 +01:00
Christophe Maudoux
f702664409
WIP - checkUser Improve code ( #1658 )
2019-02-25 20:11:32 +01:00
Christophe Maudoux
f0684f6c24
WIP - checkUser use OTT ( #1658 )
2019-02-25 10:58:06 +01:00
Christophe Maudoux
0f04629ed1
WIP - checkUser prepare conf ( #1658 )
2019-02-24 22:47:39 +01:00
Christophe Maudoux
e22a2835d1
WIP - checkUser replace 'each' loop ;-) ( #1658 )
2019-02-24 22:31:04 +01:00
Christophe Maudoux
ba2ab0c4a2
WIP - checkUser display transmitted headers ( #1658 )
2019-02-24 22:10:45 +01:00
Christophe Maudoux
557539805a
WIP - checkUser hide secret attributes ( #1658 )
2019-02-23 23:24:13 +01:00
Christophe Maudoux
30148caf2d
WIP - checkUser hide secret attributes ( #1658 )
2019-02-23 23:02:42 +01:00
Christophe Maudoux
c3255e1ed8
WIP - checkUser prepare loop ( #1658 )
2019-02-23 20:39:53 +01:00
Christophe Maudoux
0c0b3dd069
WIP - checkUser test access ( #1658 )
2019-02-23 11:19:40 +01:00
Christophe Maudoux
697882bd45
WIP - checkUser plugin skeleton ( #1658 )
2019-02-23 09:35:43 +01:00
Christophe Maudoux
00fae442e9
Update version ( #1595 )
2019-02-21 16:33:12 +01:00
Christophe Maudoux
b57a0788c2
Check JSON structure ( #1595 )
2019-02-21 16:25:02 +01:00
Christophe Maudoux
9fafa1d8d5
Override msg with local json files ( #1595 )
2019-02-20 23:22:56 +01:00
Christophe Maudoux
28caeea3c2
Partial revert ( #1595 )
2019-02-19 20:10:41 +01:00
Christophe Maudoux
62167a41f1
Load Portal despite translation file does not exist ( #1595 )
2019-02-19 17:27:28 +01:00
Christophe Maudoux
063c0f0d1b
Partial revert - Modify Portal side is more consistent ( #1653 )
2019-02-18 20:39:47 +01:00
Christophe Maudoux
9679a67163
Tidy ( #1632 )
2019-02-16 22:42:08 +01:00
Christophe Maudoux
7802cbcc71
Optionaly let Ext2F module handle code generation ( #1632 )
2019-02-16 21:59:53 +01:00
Christophe Maudoux
90ddec7ce0
WIP - Optionaly let Ext2F module handle code generation ( #1632 )
2019-02-14 22:43:38 +01:00
Christophe Maudoux
60e80fe1b1
Improve code ( #1629 )
2019-02-14 22:41:58 +01:00
Christophe Maudoux
0690a0c7ab
Improve code ( #1625 )
2019-02-14 22:12:40 +01:00
Xavier Guimard
4e0113ddd6
Merge branch 'v2.0'
2019-02-13 22:36:01 +01:00
Christophe Maudoux
9274c54f20
Disable Portal cache ( #1651 )
2019-02-13 22:35:23 +01:00
Xavier Guimard
5862481956
Set master version to 2.1.0
2019-02-12 18:21:38 +01:00
Xavier Guimard
3069887a52
Call PasswordDB::LDAP if unauth user requests changing password ( #1639 )
2019-02-11 15:40:27 +01:00
Clément OUDOT
ad10dc539d
Use ldapAuthnLevel and dbiAuthnLevel in portal ( #1648 )
2019-02-11 11:55:51 +01:00
Christophe Maudoux
46f2beb10a
Typo & perltidy ( #1629 )
2019-02-10 22:47:56 +01:00
Christophe Maudoux
b777007ff6
Override msg by reading a file ( #1595 )
2019-02-09 22:38:13 +01:00
Christophe Maudoux
94574f2f19
Override msg by reading a file ( #1595 )
2019-02-09 20:48:46 +01:00
Clément OUDOT
5f800003fd
Add security token when forcing password reset ( #1639 )
2019-02-08 10:46:06 +01:00
Christophe Maudoux
29c4a44975
Update version ( #1625 )
2019-02-07 17:22:14 +01:00
Christophe Maudoux
8b995f55bf
Restore OpenID activation global rule & Improve unit test ( #1625 )
2019-02-07 17:21:14 +01:00
Christophe Maudoux
b1048043e9
Restore GET activation global rule & Improve unit test ( #1625 )
2019-02-07 17:16:29 +01:00
Xavier Guimard
c7b4eb5051
tidy with new conf
2019-02-07 09:27:56 +01:00
Christophe Maudoux
9cfef329ee
Append PE_ERROR constants ( #1625 )
2019-02-06 23:10:43 +01:00
Christophe Maudoux
5055b18087
Restore OIDC activation global rule ( #1625 ) & Improve unit test
2019-02-06 23:10:10 +01:00
Christophe Maudoux
b36db9706e
Restore SAML activation global rule ( #1625 )
2019-02-06 22:55:23 +01:00
Christophe Maudoux
f8144bc108
Typo ( #1625 )
2019-02-06 22:54:15 +01:00
Christophe Maudoux
007a5432f9
Restore CAS activation global rule ( #1625 )
2019-02-06 22:16:34 +01:00