Commit Graph

4596 Commits

Author SHA1 Message Date
Maxime Besson
0aa78fead7 Unit tests for CORS on OIDC endpoints (#2567) 2021-07-26 15:44:20 +02:00
Maxime Besson
0d513ce5b7 Fix CORS on userinfo error response (#2567) 2021-07-26 15:44:20 +02:00
Clément OUDOT
a7809f10fe Update version in main modules 2021-07-22 17:53:50 +02:00
Clément OUDOT
b3aa5462e1 Do not use dashes in 'mot de passe' 2021-07-22 14:34:32 +02:00
Clément OUDOT
6a6a41b007 Use regexp to replace values in email only for text body (#2495) 2021-07-18 17:20:39 +02:00
David Coutadeur
53b459c136 fix RGAA : accessing logout menu with tab (#2561) 2021-07-16 17:27:11 +02:00
Yadd
fe6ad903f1 Update manifests 2021-07-12 19:00:03 +02:00
David Coutadeur
c6033a35dc test logout forward url pointing to a protected application (#2153) 2021-07-12 18:16:10 +02:00
Maxime Besson
71e4115875 Make sure empty referers are valid during logout 2021-07-09 15:02:46 +02:00
Yadd
e4bf28906f Update tr translation from Transifex 2021-07-09 13:48:57 +02:00
Maxime Besson
2816586afe Fix regression from 3732cdcc (#2477) 2021-07-09 11:49:29 +02:00
Yadd
959a4349a2 Merge branch '2328-propagate-logout-through-chaining' into 'v2.0'
test chained SAML login with 2 IDP + logout in SOAP (#2328)

See merge request lemonldap-ng/lemonldap-ng!203
2021-07-09 09:44:08 +00:00
David Coutadeur
70af572c4a test chained SAML login with 2 IDP + logout in SOAP (#2328) 2021-07-09 10:23:17 +02:00
Christophe Maudoux
a85e47ecca Allow to display password with dontStorePassword option & Update unit test (#2454) 2021-07-08 23:55:03 +02:00
Clément OUDOT
82dc1de87f Unit test for portalEnablePasswordDisplay (#2454) 2021-07-07 19:43:56 +02:00
David Coutadeur
5b59eeb2e5 remove useless test on saml signature for test logout through OIDC and SAML chaining (#2328) 2021-07-05 17:43:07 +02:00
David Coutadeur
98b05eb885 test logout through OIDC and SAML chaining (#2328) 2021-07-05 17:09:35 +02:00
Christophe Maudoux
1d2db0594f Tidy 2021-07-04 22:13:32 +02:00
Christophe Maudoux
466b6a3241 Avoid to store passwords (#2557) 2021-07-04 22:07:21 +02:00
Christophe Maudoux
c084cc28d9 Improve code (#2521) 2021-07-04 15:27:12 +02:00
Christophe Maudoux
547d809852 Display placeholder (#2521) 2021-07-04 14:38:31 +02:00
Christophe Maudoux
0634fcaf98 Typos & tidy 2021-07-01 22:50:32 +02:00
Marek Wójtowicz
80a364839a Fix yubikey from session. 2021-07-01 11:36:44 +00:00
Marek Wójtowicz
48f934045e Support for multiple yubikeys. 2021-06-30 20:33:50 +00:00
Yadd
4a61606ee8 typo 2021-06-29 16:55:29 +02:00
Yadd
b0e7ba5d8a Fix URIRE 2021-06-29 16:50:39 +02:00
Yadd
83b45db614 Fix versions 2021-06-28 15:36:29 +02:00
Maxime Besson
6a70596ec0 Unit tests for #2544 2021-06-28 13:57:22 +02:00
Maxime Besson
7de1793386 Let users specify a longer timeout for totp reg (#2544) 2021-06-28 11:36:44 +02:00
Yadd
8b5638640c Fix translations 2021-06-26 23:00:22 +02:00
Yadd
f5b78e7e6a Restore lost translation 2021-06-26 22:49:21 +02:00
Christophe Maudoux
7f91820224 Display removed SF name (#1782) 2021-06-26 22:38:42 +02:00
Christophe Maudoux
71ed63a999 Fix unit tests (#2539) 2021-06-26 22:38:41 +02:00
Yadd
3d35c6454f Update manifests 2021-06-26 20:28:03 +02:00
Maxime Besson
316c734bbc Merge branch 'fix-totp-options-2541' into v2.0 2021-06-25 13:55:53 +02:00
Clément OUDOT
262210398d Remove OIDC check session iframe from metadata (#2554) 2021-06-25 12:49:51 +02:00
Maxime Besson
d287efb343 Unit test for #2535 2021-06-25 11:43:53 +02:00
Yadd
3b8222ae8a Fix trusted domains regex (#2535) 2021-06-25 08:59:52 +02:00
Maxime Besson
15054b9038 Extra precaution for #2539 2021-06-25 07:54:03 +02:00
Maxime Besson
cf70ebe293 Stop triggering XSS protection on escaped commas
Commas are safe in HTML and JS, so there is no risk of XSS
2021-06-24 20:16:20 +02:00
Maxime Besson
1d80c262ab Make unit test for #2539 less noisy 2021-06-24 19:05:11 +02:00
Maxime Besson
70bd06bc32 Fix unit test for #2534 2021-06-24 19:02:34 +02:00
Maxime Besson
4a2a786598 Fix CDA wildcard regexp (#2534) 2021-06-24 19:02:17 +02:00
Maxime Besson
3d1cc3f499 Unit test for #2534 2021-06-24 16:59:20 +02:00
Maxime Besson
dbd65d1b2b Handle wildcards in CDA check (#2534) 2021-06-24 16:59:20 +02:00
Christophe Maudoux
71fa5d09f7 Be more strict with URL (#2477) 2021-06-24 14:33:27 +02:00
Yadd
3732cdcc19 Better URL parsing (#2477) 2021-06-24 14:33:27 +02:00
Yadd
8a18543f55 Remove TODO loop 2021-06-24 14:04:31 +02:00
Maxime Besson
9a2dc48b56 Unit test for #2550 2021-06-21 09:38:03 +02:00
Maxime Besson
8db02a693f Only release IDtoken when scope contains openid (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
ee51e010dc Unit test for #2548 2021-06-21 09:38:03 +02:00
Maxime Besson
e1b7f61d13 Update ID token unit tests 2021-06-21 09:38:03 +02:00
Maxime Besson
beaacca9a0 Refactor _handleRefreshTokenGrant to use _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
c931b30263 Refactor _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Yadd
b6a1f946b2 Fix handler cache corruption (#2539) 2021-06-19 18:43:41 +02:00
Maxime Besson
2de2cbf454 Fix 2F unit test (#2539) 2021-06-19 18:25:07 +02:00
Clément OUDOT
bdeb1e70d9 Allow to display password value in login form (#2454) 2021-06-16 20:50:11 +02:00
Maxime Besson
b35bd70646 totp: add more instructions 2021-06-16 09:48:28 +02:00
Maxime Besson
3c37565eb9 Improve TOTP error reporting (#2541) 2021-06-15 18:07:03 +02:00
Maxime Besson
699943365b Improve messages on TOTP registration (#2541) 2021-06-15 15:56:18 +02:00
Maxime Besson
95fe0512c0 Display TOTP key in a readable form (#2541) 2021-06-15 15:48:10 +02:00
Maxime Besson
3ff680aceb Update templates for #2541 2021-06-15 14:54:33 +02:00
Maxime Besson
89b6215d9d Update translations for #2541 2021-06-15 14:54:33 +02:00
Maxime Besson
14548b9a1f Remove "new totp" from portal js 2021-06-15 14:54:33 +02:00
Maxime Besson
50ef67b678 Fix error display in 2F registration screens 2021-06-15 14:54:32 +02:00
Maxime Besson
7b0990addd Remove totp options from code (#2541) 2021-06-15 14:54:32 +02:00
Maxime Besson
dae4293ecf Unit test for #2518 2021-06-15 14:26:23 +02:00
Maxime Besson
77f5577dc4 Improve SAML test lib 2021-06-15 12:40:15 +02:00
Maxime Besson
cf59bb915e refactor expectAuthenticatedAs 2021-06-15 12:40:15 +02:00
Maxime Besson
6f5cd3b645 Fix some undef warnings 2021-06-15 12:40:15 +02:00
Maxime Besson
75b81fcb5a Fix NameID value when unspecified is requested by SP (#2518) 2021-06-15 11:27:37 +02:00
Maxime Besson
63cd5ffb40 Revert 652d8ba9bc
See #2482
2021-06-11 08:53:26 +02:00
Christophe Maudoux
469d2a40aa Fix warning (#2538) 2021-06-09 23:06:03 +02:00
Christophe Maudoux
86f46ebc5b Fix some warnings (#2538) 2021-06-08 23:03:54 +02:00
Yadd
5fc0b6f002 Update tr translation from transifex 2021-06-07 18:34:06 +02:00
Maxime Besson
87295178e0 optimize SingleSession to avoid unneeded session fetches (#2536) 2021-06-04 16:17:18 +02:00
Maxime Besson
275567436e Unit test for #2496 2021-06-03 18:31:38 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
2414fb4751 Unit tests for (#2510) 2021-06-02 11:08:07 +02:00
Maxime Besson
3b76479bda Add expectPdata function to test lib 2021-06-02 11:07:53 +02:00
Maxime Besson
fad337c58c Add hooks on password change (#2510) 2021-06-02 11:07:28 +02:00
Maxime Besson
d4aed0b332 Tidy test lib 2021-06-02 11:07:28 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
71a8fc6d16 Skip registration of CAS App when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
6ef522c193 Unit tests for #2533 2021-06-01 11:28:34 +02:00
Maxime Besson
cf3809a0de Add CAS hooks (#2533) 2021-06-01 11:27:45 +02:00
Maxime Besson
ec2b904f4f Unit test for #2532 2021-05-31 11:23:38 +02:00
Maxime Besson
e98aafd6f7 add oidcGenerateCode hook (#2532) 2021-05-31 11:16:28 +02:00
Maxime Besson
8992b3e789 Unit test for #2529 2021-05-31 09:52:26 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Yadd
0f11d7c06e Finish BrowserID/Persona removal 2021-05-22 16:16:38 +02:00
Christophe Maudoux
66f428b474 Improve notifications display (Thx @antoinerosier) 2021-05-20 19:22:18 +02:00
Christophe Maudoux
7860e18034 Append unit test (#1976) 2021-05-08 21:38:13 +02:00
Christophe Maudoux
a3c48af972 Append unit test (#1976) 2021-05-07 08:15:32 +02:00
Christophe Maudoux
cf55716825 Allow findUser with UpgradeSession (#1976) 2021-05-06 23:16:26 +02:00
Yadd
a24ed7bc41 Fix GrantSession rules sort 2021-05-04 15:50:38 +02:00
Christophe Maudoux
de3164fea7 Fix button top margin (#1976) 2021-05-01 22:35:56 +02:00