Commit Graph

3106 Commits

Author SHA1 Message Date
Yadd
a3b24418c6 Merge branch 'v2.0' 2021-06-07 18:36:32 +02:00
Maxime Besson
87295178e0 optimize SingleSession to avoid unneeded session fetches (#2536) 2021-06-04 16:17:18 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
fad337c58c Add hooks on password change (#2510) 2021-06-02 11:07:28 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
71a8fc6d16 Skip registration of CAS App when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
cf3809a0de Add CAS hooks (#2533) 2021-06-01 11:27:45 +02:00
Maxime Besson
e98aafd6f7 add oidcGenerateCode hook (#2532) 2021-05-31 11:16:28 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Yadd
ecebe2a349 Merge branch 'v2.0' 2021-05-13 10:37:41 +02:00
Christophe Maudoux
cf55716825 Allow findUser with UpgradeSession (#1976) 2021-05-06 23:16:26 +02:00
Yadd
a24ed7bc41 Fix GrantSession rules sort 2021-05-04 15:50:38 +02:00
Christophe Maudoux
de3164fea7 Fix button top margin (#1976) 2021-05-01 22:35:56 +02:00
Christophe Maudoux
cb28b7cb1e Fix LDAP unit tests & merge 2021-05-01 12:35:33 +02:00
Yadd
a282a37b66 Merge branch 'v2.0': findUser may be broken 2021-05-01 07:49:05 +02:00
Christophe Maudoux
0cf1dbd37d WIP: Fix unit tests ;-) (#1976) 2021-05-01 00:20:09 +02:00
Christophe Maudoux
fc481d40d2 Rename param (#1976) 2021-04-30 22:36:31 +02:00
Yadd
8653dde5b5 Merge branch 'v2.0' 2021-04-23 21:44:48 +02:00
Maxime Besson
cd97d3b922 Refactor $req->{cspFormAction} (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
a876d978af Suggest improvement for next major version 2021-04-23 09:02:24 +02:00
Maxime Besson
913ebbd556 fix missing domain in child-src during SAML POST logout (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
5ba0c11b58 Add helper to build CSP host list (#2513) 2021-04-23 09:02:24 +02:00
Christophe Maudoux
b54c95ccd2 Improve unit tests & Fix regex (#2509) 2021-04-21 22:14:47 +02:00
Yadd
0ae606c02b Merge branch 'v2.0' 2021-04-21 15:54:04 +02:00
Maxime Besson
8695a633a7 Force type of JSON fields in token response (#2511) 2021-04-20 11:31:32 +02:00
Yadd
a36a4912b0 Fix merge 2021-04-19 21:06:19 +02:00
Yadd
76ec67be69 Merge branch 'v2.0' 2021-04-18 12:58:45 +02:00
Christophe Maudoux
21ced5dbad Fix speChars test, typos & display (#2509) 2021-04-14 13:28:12 +02:00
Yadd
30b5b93adc Merge branch 'v2.0' 2021-04-09 18:15:50 +02:00
Maxime Besson
a94fb616bd Allow admin to disallow host-based match (#2506) 2021-04-09 17:51:54 +02:00
Yadd
95e53e0a5f Merge branch 'v2.0' 2021-04-07 18:44:45 +02:00
Maxime Besson
c1e059eeb3 Use authChoiceAuthBasic to select Choice (#2502) 2021-04-07 16:40:32 +02:00
Yadd
4bc3933b7e Merge branch 'v2.0' 2021-04-04 17:27:53 +02:00
Christophe Maudoux
64dffcf4d0 Send only technical and exported attributes (#2503) 2021-04-03 16:46:43 +02:00
Christophe Maudoux
9f77e89f96 Send exported attributes with REST session server & typos (#2503) 2021-04-02 23:57:30 +02:00
Yadd
4d79969a0e Merge branch 'v2.0' 2021-04-02 16:09:50 +02:00
Christophe Maudoux
4751427105 Fix error level & Improve doc (#1976) 2021-04-01 23:31:48 +02:00
Christophe Maudoux
c0db322ef0 Perl critic 2021-04-01 23:07:58 +02:00
Christophe Maudoux
bcfb075f63 Be more consistent with REST params & Update doc (#1976) 2021-04-01 22:48:08 +02:00
Christophe Maudoux
654184dd66 Fix bad request (#2501) 2021-04-01 14:49:44 +02:00
Maxime Besson
297dc830af Update mail templates to no longer use string substitution (#2495) 2021-03-31 14:27:23 +02:00
Maxime Besson
d696853556 Factor MAIN_LOGO variable in loadMailTemplate (#2495) 2021-03-31 14:27:23 +02:00
Christophe Maudoux
89111859a0 Typos (#1976) 2021-03-30 23:54:06 +02:00
Christophe Maudoux
0e77c835b3 Fix bad merge 2021-03-30 23:36:20 +02:00
Yadd
8f8399ec99 Fix versions 2021-03-30 21:43:25 +02:00
Yadd
ed84fdd771 Merge remote-tracking branch 'origin/v2.0' 2021-03-30 21:41:31 +02:00
Maxime Besson
20e1f9ded0 Hash JWT to catch tampering (#2419)
This mechanism's only purpose is to make the introsection endpoint fail
to verify the token when the JWT itself has been tampered with.
2021-03-30 16:32:14 +02:00
Maxime Besson
2c8cbbefe6 "xxx is allowed to update 2FA" should be a debug message 2021-03-30 16:32:14 +02:00