Commit Graph

171 Commits

Author SHA1 Message Date
Xavier Guimard
aaaf5cfed4 Restrict CSP form-action to URL scheme (#1384) 2018-03-21 14:52:22 +01:00
Xavier Guimard
33c764855d Don't encode + (may fix: #1385) 2018-03-10 09:33:14 +01:00
Xavier Guimard
5c5556a865 2F choice works (#1148)
TODO: logos
2018-03-09 13:29:39 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
7f0ff6d0d8 Replace Jira by GitLab 2017-11-11 14:06:23 +01:00
Clément Oudot
7b216e614b Allow 0 value in setHiddenFormValue (#1328) 2017-11-06 11:05:09 +00:00
Xavier Guimard
46364da414 Move some HTML fragments to templates (#1302) 2017-10-10 11:04:40 +00:00
Xavier Guimard
080f4670ec Return 200 for Ajax queries if error is PE_PASSWORD_OK (#1258) 2017-09-22 14:26:07 +00:00
Xavier Guimard
b15d82a12b Error in id detection (#595) 2017-09-19 08:08:51 +00:00
Xavier Guimard
fefd723226 Avoid some warnings 2017-07-11 11:50:21 +00:00
Xavier Guimard
d7240e038e Fix #852 2017-05-04 07:19:50 +00:00
Xavier Guimard
b4102acf45 May fix #852 2017-05-04 07:13:26 +00:00
Xavier Guimard
df3c1efb54 Handle 404 and 502 error codes (fixes: #1211) 2017-04-12 07:07:27 +00:00
Xavier Guimard
6cc554ac75 Optimization (#595) 2017-04-10 18:45:45 +00:00
Xavier Guimard
e7c3561451 Some errors (#595) 2017-04-07 04:39:53 +00:00
Xavier Guimard
537d41a29b Kerberos in progress (#707) 2017-04-06 20:37:38 +00:00
Xavier Guimard
2e59ea441a Replace request management in handler (#1044)
Note: this is a big change, more tests needed
2017-03-28 21:07:49 +00:00
Xavier Guimard
e8c2925a3f Typo 2017-03-22 18:11:44 +00:00
Xavier Guimard
ca2e9be0e5 Rename _loginHistory (#1169) 2017-03-21 21:00:37 +00:00
Xavier Guimard
99ddfbfe25 Rename _startTime and _updateTime (#1169) 2017-03-21 20:52:40 +00:00
Xavier Guimard
cdeec00972 Replace "?lmError=" by router path (#595) 2017-03-16 21:33:13 +00:00
Xavier Guimard
9a5ecdf1cb Repair activeTimer (#595) 2017-03-16 20:19:06 +00:00
Xavier Guimard
bf3c43aecd Replace inline css (#1137) 2017-03-16 11:38:52 +00:00
Xavier Guimard
0845237efe Import CSP in manager code (#1137) 2017-03-15 22:27:58 +00:00
Xavier Guimard
126fdb091c Manage cookie expiration (#1131) 2017-03-15 10:01:29 +00:00
Xavier Guimard
d70a5b005f Update handler internal cache on session update (#595) 2017-03-09 21:56:48 +00:00
Clément Oudot
c18533d447 Use getSkin to choose portal skin (#1177) 2017-02-28 18:39:56 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
8c3ff5fb0b Minimize Apache::Session tie/untie (closes: #1173) 2017-02-20 21:00:05 +00:00
Xavier Guimard
09f13b1b00 Notification server SOAP/REST (#595) 2017-02-19 17:04:49 +00:00
Xavier Guimard
2e680c2ff1 Enable history (#595) 2017-02-19 07:17:48 +00:00
Xavier Guimard
a70842603a Update portal status (#595) 2017-02-18 14:25:51 +00:00
Xavier Guimard
ca2c453e71 Add "public pages" concept to 2.0 (#1120) 2017-02-18 06:49:06 +00:00
Xavier Guimard
97b8b40cc5 Add grantSession test (#595) 2017-02-17 07:40:15 +00:00
Xavier Guimard
99aa48105a Add refresh session utility (#852)
TODO: link in menu
2017-02-16 16:11:12 +00:00
Xavier Guimard
b829b6c19b Replace userNotice/Error... by userLogger (#857) 2017-02-15 14:16:59 +00:00
Xavier Guimard
deb28bc9cb Replace lmLog by logger-> (#857) 2017-02-15 06:41:50 +00:00
Xavier Guimard
35f506bd60 Start rewrite Register::U2F using Ajax (#1148)
NB: broken for now
2017-02-08 13:01:02 +00:00
Xavier Guimard
a04f5acd1d U2F is ready for skin bootstrap (#1148) 2017-02-07 22:04:49 +00:00
Xavier Guimard
d74550384b U2F in progress (#1148) 2017-02-07 12:52:56 +00:00
Xavier Guimard
8a3bb7b0f9 Combination override conf (#1151)
TODO: lot of job in the manager...
2017-02-05 23:04:28 +00:00
Xavier Guimard
b78022558d More combination tests (#1151) 2017-02-05 21:12:06 +00:00
Xavier Guimard
ebf077f7f5 U2F in progress (#1148) 2017-02-04 07:55:47 +00:00
Xavier Guimard
a865cea016 Little change (#595) 2017-01-24 05:10:57 +00:00
Xavier Guimard
a09c5a3d69 Typo (#1138) 2017-01-21 09:50:59 +00:00
Xavier Guimard
93e02e1400 Error in CSP (#1138) 2017-01-21 09:17:24 +00:00
Xavier Guimard
1491ad4515 Disable CSP for frames (#1138) 2017-01-20 06:19:54 +00:00
Xavier Guimard
2dd22811a0 Finish portal CSP (#1138) 2017-01-19 22:04:33 +00:00
Xavier Guimard
04585cf188 Prepare Content-Security-Policy for portal (#1138) 2017-01-18 22:36:03 +00:00
Xavier Guimard
4aea2760b6 Hide some warnings (#1135) 2017-01-17 20:38:22 +00:00
Xavier Guimard
880be4f6bd Rearrange cookie management (#595) 2017-01-13 14:35:02 +00:00
Xavier Guimard
7234f907aa More tests for REST API (#970) 2017-01-10 21:43:34 +00:00
Xavier Guimard
293f0eea71 Replace build_urlencode to manage old Plack (#595) 2017-01-09 12:55:04 +00:00
Xavier Guimard
1983842f79 SOAP server (#970) 2017-01-07 20:37:07 +00:00
Xavier Guimard
b94a337a05 Optimize checksession endpoint (#595) 2017-01-04 22:19:17 +00:00
Xavier Guimard
a09d12031e Some big changes (#595)
Replace uri_escape by WWW::Form::UrlEncoded
Replace PSGI:Request by inheritance from Plack::Request
2017-01-04 16:36:54 +00:00
Xavier Guimard
585bf4a235 Bug: double redirection (#595) 2016-12-26 09:23:31 +00:00
Xavier Guimard
47f9865efb SAML in progress (#595) 2016-12-23 16:03:36 +00:00
Xavier Guimard
ad6b42e9f1 Propage portal logout to handler (#595) 2016-12-22 20:18:58 +00:00
Xavier Guimard
5ac69452df CAS in progress (#595) 2016-12-22 08:40:50 +00:00
Xavier Guimard
439dc6dcfb SOAP SLO response OK for Auth/SAML (#595) 2016-12-18 08:07:48 +00:00
Xavier Guimard
ec83414576 SAML in progress (#595)
To do: authSAML SOAP server
2016-12-17 07:58:53 +00:00
Xavier Guimard
b57d76c0ce SAML in (big) progress (#595) 2016-12-15 21:22:15 +00:00
Xavier Guimard
c8fe115650 Little things (#595) 2016-12-02 05:47:38 +00:00
Xavier Guimard
d097b4ec0a Enable setAuthSessionInfo (#595) 2016-12-01 22:25:05 +00:00
Xavier Guimard
e5fdcbc3fd SAML in progress (#595) 2016-11-28 21:15:57 +00:00
Xavier Guimard
fb741f9bea SAML in progress (#595) 2016-11-22 20:55:10 +00:00
Xavier Guimard
b1f2ac6a73 SAML in progress (#595) 2016-11-22 12:34:09 +00:00
Xavier Guimard
b3e18e2f35 SAML in progress (#595) 2016-11-16 15:27:01 +00:00
Clément Oudot
31cfbf8101 Apply CDA change to trunk (#173) 2016-11-15 13:33:39 +00:00
Xavier Guimard
af13f0ebf2 Fix #1064 2016-07-22 09:47:50 +00:00
Xavier Guimard
ac3b040223 Add ForceAuth plugin (#595) 2016-07-14 08:25:05 +00:00
Xavier Guimard
a802f60e6a Update session with pwd db (#595) 2016-07-13 05:10:57 +00:00
Xavier Guimard
3e0d98c14f Typo 2016-07-12 18:58:33 +00:00
Clément Oudot
e5f360ea43 Do not try to delete session with double cookie in single session (#1059) 2016-07-12 16:33:20 +00:00
Xavier Guimard
bb3a2e37bd Add test for Password/Demo (#595) 2016-07-11 21:02:32 +00:00
Xavier Guimard
8307161f0c Working on Choice (#595) 2016-07-02 08:51:00 +00:00
Xavier Guimard
1577400bf4 Working on Choice (#595) 2016-07-01 16:59:59 +00:00
Xavier Guimard
ed5882bbe5 IssuerGet skeleton 2016-06-12 16:52:37 +00:00
Xavier Guimard
bf1fd28aff Backport #1036 2016-06-09 11:45:10 +00:00
Xavier Guimard
201913d603 Verify notification delete (#595) 2016-06-01 19:19:53 +00:00
Xavier Guimard
3d1f71fcfb Add update session methods (#595) 2016-06-01 17:36:51 +00:00
Xavier Guimard
4a18a3f528 Set default values for request (#595) 2016-05-31 11:47:10 +00:00
Xavier Guimard
cb91d97b2b Remove cda code: already written in plugin (#595) 2016-05-27 05:00:50 +00:00
Xavier Guimard
647ad67eeb Translate Remote in new format + add test (#595) 2016-05-26 21:26:49 +00:00
Xavier Guimard
73e0199c8b Enable jsRedirect (#595) 2016-05-26 21:26:47 +00:00
Xavier Guimard
6e837af219 Working on BrowserID (#595) 2016-05-24 05:05:51 +00:00
Xavier Guimard
bb39433ad5 Avoid some warnings (#595) 2016-05-23 19:28:32 +00:00
Xavier Guimard
47de9275fa Working on logout and XSS (#595) 2016-05-23 16:55:23 +00:00
Xavier Guimard
f5000726d5 Keep urldc after logout (#595) 2016-05-23 16:55:18 +00:00
Xavier Guimard
73a51bb4fb Working on XSS detection (#595) 2016-05-23 11:53:09 +00:00
Xavier Guimard
159eb4a6ce Enable logout (#LEMONDAP-595) 2016-05-22 17:06:55 +00:00
Xavier Guimard
13f24796b8 LDAP in progress (#595) 2016-05-01 07:30:21 +00:00
Clément Oudot
a35f694828 Do not use cache for persistent sessions (#1000) 2016-04-25 17:12:11 +00:00
Xavier Guimard
b9cd5a89dd Improve logout for plugins (#595) 2016-04-18 20:23:40 +00:00
Xavier Guimard
35d1ad0b3c Simple logout works (#595) 2016-04-14 19:49:27 +00:00
Xavier Guimard
d32d9646f8 Menu seems to work (#595) 2016-04-14 18:42:59 +00:00
Xavier Guimard
a1d177900f Start menu rewriting (#595) 2016-04-13 05:32:10 +00:00
Xavier Guimard
2f19ccb169 prepare display() for later Ajax usage (#595) 2016-04-11 05:12:39 +00:00
Xavier Guimard
a3866bc1cc Login template in progress (#595) 2016-04-11 05:00:34 +00:00