Commit Graph

112 Commits

Author SHA1 Message Date
Yadd
a8254dec1c Update versions 2022-07-28 12:42:15 +02:00
Maxime Besson
6e7fd58113 Include extra keys in oidcGenerateUserInfoResponse (#2725) 2022-07-18 17:59:18 +02:00
Maxime Besson
f8d1d0fc5f OIDC: make getUser optionally use Refresh Tokens (#2713) 2022-06-27 11:23:49 +02:00
Yadd
46d43e69d9 Use Perltidy 20220217 (Closes: #2765) 2022-06-23 12:12:25 +02:00
Maxime Besson
3ef3aac9c7 Refactor newAccessToken 2022-06-19 15:24:59 +02:00
Maxime Besson
818143311c Refactor call to token endpoint 2022-06-19 15:24:59 +02:00
Maxime Besson
fd8c3b1b61 Fix #2708 2022-06-14 14:48:46 +02:00
Maxime Besson
e27f0b6b10 Fix #2760 2022-06-03 17:42:29 +02:00
Maxime Besson
d7ed5c9e35 Relax detection of client authentication type (#2757) 2022-05-25 15:32:32 +02:00
Maxime Besson
3428cb981f Add OP resolution rules (#2753) 2022-05-18 11:32:04 +02:00
Maxime Besson
e1f6534bbe Add auth oidc hooks (#2730)
new hooks:
    oidcGenerateAuthenticationRequest
    oidcGenerateTokenRequest
    oidcGotIDToken
    oidcGotUserInfo
2022-03-18 11:59:10 +01:00
Maxime Besson
6ed0e9c1b4 Add session data to oidcGenerateUserInfoResponse (#2725) 2022-03-11 12:07:51 +01:00
Yadd
b88a72c267 tidy 2022-02-16 17:43:29 +01:00
Christophe Maudoux
5e285d5f60 Avoid useless warnings with OIDC 2022-02-12 22:42:03 +01:00
Yadd
c3724a618f Fix versions 2022-02-01 17:09:31 +01:00
Maxime Besson
bb380ee0e4 Add RP conf key to oidcGenerateUserInfoResponse hook (#2667) 2021-11-29 19:08:31 +01:00
Maxime Besson
b21500122d Fix #2622 2021-10-26 16:53:24 +02:00
Maxime Besson
2fac0d9f47 Update LLNG download URL 2021-08-12 17:02:50 +02:00
Christophe Maudoux
a6ecbf1ec8 Fix version & comment 2021-07-26 22:55:27 +02:00
Maxime Besson
0d513ce5b7 Fix CORS on userinfo error response (#2567) 2021-07-26 15:44:20 +02:00
Yadd
83b45db614 Fix versions 2021-06-28 15:36:29 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Maxime Besson
20e1f9ded0 Hash JWT to catch tampering (#2419)
This mechanism's only purpose is to make the introsection endpoint fail
to verify the token when the JWT itself has been tampered with.
2021-03-30 16:32:14 +02:00
Maxime Besson
a70051e3fe Remove deprecated base64url implementation
All our target distros now have base64url in Mime::Base64
2021-03-03 11:03:19 +01:00
Maxime Besson
bb95e681e6 Tidy 2021-03-03 11:03:19 +01:00
Maxime Besson
e10d1e291c Return granted scopes if different from requested scopes (#2424) 2021-03-03 11:03:19 +01:00
Maxime Besson
2d7f9e34a6 OIDC: Return error if multiple client auth used (#2474) 2021-02-24 17:48:12 +01:00
Maxime Besson
cceb6f767e Use a dedicated function for OIDC error reporting (#2465) 2021-02-18 22:06:39 +01:00
Maxime Besson
a1ed57c035 Add typ header to access token jwt (#2419) 2021-02-03 09:43:35 +01:00
Maxime Besson
1cd7dd3d2c Add hook for access token JWT payload (#2419) 2021-02-01 18:20:32 +01:00
Maxime Besson
d86e8ce0df Refactor: remove extractJWT 2021-02-01 18:20:32 +01:00
Maxime Besson
cb04670003 Refactor checksignature 2021-02-01 18:20:32 +01:00
Maxime Besson
435ba82144 Refactor: rename and move getJWTJSONData 2021-02-01 18:20:32 +01:00
Maxime Besson
6aef1a6317 Refactor: getUserInfo now returns a hash 2021-02-01 18:20:32 +01:00
Maxime Besson
f3c97c22dc Refactor access token id lookup into Common::JWT 2021-02-01 18:20:32 +01:00
Maxime Besson
aa877cf0a3 Let newAccessToken emit JWT (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dc0bacd6f0 Accept Access Tokens in JWT format (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
acaaf1c749 Refactor buildUserInfo (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dbddddfba1 Refactor newAccessToken (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
5562d8b1dd Add a function to resolve allowed scopes from rules (#2424) 2021-02-01 16:25:35 +01:00
Maxime Besson
c30b452aa3 Load dynamic scopes from config (#2424) 2021-02-01 16:25:35 +01:00
Christophe Maudoux
d6e351ab90 Tidy 2021-01-19 22:45:05 +01:00
Maxime Besson
5b4e533f44 Add _scope and _clientID to portal (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
dd5e9ec156 Tidy 2021-01-19 16:44:06 +01:00
Maxime Besson
f49c1adf17 add oidcGenerateIDToken hook (#2359) 2020-11-27 14:00:58 +01:00
Maxime Besson
daef0cf776 add oidcGenerateUserInfoResponse hook (#2359) 2020-11-27 14:00:58 +01:00
Maxime Besson
fa2301ab0e Force OIDC claim types according to config (#2330) 2020-11-06 19:00:52 +01:00
Maxime Besson
52c6edb453 Lookup oidcRPMetaDataOptionsUserIDAttr in per-RP macros (#2280) 2020-08-17 22:06:09 +02:00