Commit Graph

130 Commits

Author SHA1 Message Date
Yadd
a8254dec1c Update versions 2022-07-28 12:42:15 +02:00
alc
6433a0e75b #2746 do not proceed to logout if no logoutService is defined into SAML MD 2022-06-24 18:40:50 +02:00
Maxime Besson
6d3f40b2fd add SAML Auth hook (#2730)
New hooks:
    samlGotAuthnResponse
    samlGenerateAuthnRequest
2022-03-18 11:58:28 +01:00
Yadd
fd610864ea Don't export id in Ajax response for authenticated users (#2709) 2022-03-03 18:55:02 +01:00
Yadd
b88a72c267 tidy 2022-02-16 17:43:29 +01:00
Yadd
c3724a618f Fix versions 2022-02-01 17:09:31 +01:00
dcoutadeur dcoutadeur
b66613af31 Merge branch '2614-error-log-for-SOAP-SAML-message' into 'v2.0'
display precise error while sending direct SOAP SAML message (#2614)

See merge request lemonldap-ng/lemonldap-ng!220
2022-01-14 14:01:21 +00:00
Maxime Besson
7048354cb6 Fix RelayState encoding in autoPost (#2671) 2021-12-15 17:24:22 +01:00
Maxime Besson
8cfab558c7 Improve detection of SAML Artifact response type (#2648) 2021-10-26 11:44:26 +02:00
Yadd
b5b8f3203c Spelling errors reported by lintian 2021-10-09 09:13:35 +02:00
David Coutadeur
2c62720c43 display precise error while sending direct SOAP SAML message (#2614) 2021-09-13 10:32:07 +02:00
Maxime Besson
2fac0d9f47 Update LLNG download URL 2021-08-12 17:02:50 +02:00
Yadd
83b45db614 Fix versions 2021-06-28 15:36:29 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
913ebbd556 fix missing domain in child-src during SAML POST logout (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
c844cc25b0 Fix SAML logout propagation with Redirect binding (#2449) 2021-01-29 09:45:50 +01:00
Maxime Besson
5606d0ed6f Add support for SHA384 and SHA512 (#2322) 2020-10-07 15:31:57 +02:00
Maxime Besson
1234d5294f Let users override default SAML signature method (#2319) 2020-10-07 15:31:27 +02:00
Maxime Besson
d31a14c303 Avoid accidentally creating an empty session (#2262) 2020-09-09 12:05:09 +02:00
Maxime Besson
683b5a7861 Resume logout when returning from Auth::SAML IDP (#2262) 2020-09-08 15:47:58 +02:00
Xavier Guimard
c8df084247 Update versions 2020-09-04 17:59:00 +02:00
Christophe Maudoux
779fd983e5 Typo (#2302) 2020-08-28 21:56:54 +02:00
Maxime Besson
b2a2575896 Fix incorrect SOAP content type in SAML issuer (#2263) 2020-08-10 15:06:00 +02:00
Christophe Maudoux
bb9e03d1e5 Tidy 2020-05-24 00:04:33 +02:00
Maxime Besson
55f3ca0e77 Improve error reporting for SAML replay protection 2020-04-18 19:54:02 +02:00
Clément OUDOT
4c36c77452 Set default value for encryption_mode (#2117) 2020-03-12 17:00:50 +01:00
Maxime Besson
3b48746948 SAML: Hide error in storeEnv (#2084) 2020-02-03 17:08:18 +01:00
Maxime Besson
e52f6d3ba7 Increase visibility of Lasso errors (#2084) 2020-02-03 17:08:18 +01:00
Clément OUDOT
681452524d Associate SAML access rule to SP conf key and not SP entityID (#2074) 2020-01-24 09:01:56 +01:00
Maxime Besson
2a15bb0523 SAML per-service macros portal code (#2042) 2019-12-16 17:26:34 +01:00
Maxime Besson
2639c482b1 Fix cookie removal on SAML logout (#2001)
Since the fixes for #1863, calling p->do consumes the response headers
set by any previous code. So we must only call do() in a return statement.
2019-11-06 18:44:10 +01:00
Christophe Maudoux
146aca7c82 Remove trailing whitespaces 2019-09-16 20:30:35 +02:00
Christophe Maudoux
fcf05c5602 Avoid warning 2019-09-16 17:22:35 +02:00
Xavier
e50e7d09d1 Update version of (really) modified files 2019-09-12 21:56:49 +02:00
Maxime Besson
ff3d4e218c doc: suggest a better fix for #1864
We can't do it yet because the issue isn't fixed in versions of Lasso
found in the wild. But someday it will be.
2019-09-03 18:13:13 +02:00
Maxime Besson
c9dba5212e HTML-decode entityID from metadata (#1864) 2019-07-25 18:29:46 +02:00
Xavier Guimard
c1137edba8 make tidy with perltidy-20181120 2019-07-02 20:03:40 +02:00
Xavier
c921c295ed Use user skin in loadTemplate (Fixes: #1828) 2019-06-28 13:40:56 +02:00
Xavier Guimard
44a6e25851 Improve cryptographic functions (#1823) 2019-06-28 10:30:37 +02:00
Christophe Maudoux
3dd4c52c65 Update version (#1766) 2019-05-26 10:33:39 +02:00
Christophe Maudoux
0e47cb4f5b Fix warning message 2019-05-23 15:52:11 +02:00
Antoine ROSIER
8875a4e985 perltidy 2019-04-10 17:21:33 +02:00
Antoine ROSIER
8636da45be Sorting SAML idp (#1704) 2019-04-10 17:06:41 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
Xavier Guimard
ece9b21219 Remove trailing whitespaces 2019-04-03 14:15:16 +02:00
Maxime Besson
d44a042fd5 Revert 8f5fbb077e and change the way logout errors are handled
Relating to issue #1668, the proposed fix works when there is only one
service provider to logout of.

Now that multiple service provider logout is starting to work again on
2.0, we cannot read the remote_ProviderID from the logout object because
it is only filled by lasso when actually building the response.

Instead, we ignore any error that could occur when building the
response, log a warning and show the portal instead. Still better than
an internal server error.
2019-04-03 11:20:24 +02:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Maxime Besson
8f5fbb077e When logout-initiating SP has no known SLO endpoint, fallback to portal
In some federations, SLO endpoints are not published, yet SP are still
able to initiate logouts.

This used to cause an error on the portal, this commit changes the error
into a warning in logs. The user remains on the portal and sees a normal
logout message.
2019-03-12 17:58:41 +01:00
Xavier Guimard
bc2bef4ff4 Please use our .perltidyrc 2019-03-07 18:22:58 +01:00