Commit Graph

4550 Commits

Author SHA1 Message Date
Christophe Maudoux
b46259cae9 Enable upgradeSession only if required & Append unit test (#2480) 2021-03-02 19:20:15 +01:00
Yadd
a422af3038 Fix test 2021-03-02 07:58:25 +01:00
Yadd
3883c5abff Fix vhost regexp (#2477) 2021-03-02 07:57:21 +01:00
Maxime Besson
4841c7755e Fix OAuth2 error code when supplying invalid code 2021-02-24 17:48:12 +01:00
Maxime Besson
5a8c20584b Fix OIDC message when calling technical endpoints with cookies (#2475) 2021-02-24 17:48:12 +01:00
Maxime Besson
09d727410c Unit test for #2474 2021-02-24 17:48:12 +01:00
Maxime Besson
2d7f9e34a6 OIDC: Return error if multiple client auth used (#2474) 2021-02-24 17:48:12 +01:00
Maxime Besson
db8ea6f885 Extend GPG key expiration date, fixes GPG unit test 2021-02-20 20:31:21 +01:00
Christophe Maudoux
ba3cbfb33b Click to clear form (#1976) 2021-02-20 19:39:54 +01:00
Maxime Besson
861463f987 Update unit test for #2465 2021-02-19 17:39:45 +01:00
Christophe Maudoux
ff36b81e73 Append accessor to avoid modify conf (#2451) 2021-02-19 07:44:00 +01:00
Xavier Guimard
b5c0ca94c4 CrowdSec plugin (#2451) 2021-02-19 07:40:36 +01:00
Christophe Maudoux
057cfb29e8 Improve code (#2458) 2021-02-18 23:35:25 +01:00
Maxime Besson
cceb6f767e Use a dedicated function for OIDC error reporting (#2465) 2021-02-18 22:06:39 +01:00
Christophe Maudoux
482d1102be Improve modal (#1976) 2021-02-17 22:37:22 +01:00
Christophe Maudoux
5f7981e256 Improve error message & unit test (#2458) 2021-02-16 22:04:38 +01:00
Christophe Maudoux
1757cf5337 Merge branch 'CheckDevOps-plugin' into 'v2.0'
Check DevOps file plugin (#2458)

See merge request lemonldap-ng/lemonldap-ng!178
2021-02-16 18:46:19 +00:00
Christophe Maudoux
d9a0034e7c Fix warning 2021-02-16 19:07:30 +01:00
Christophe Maudoux
21ba54ca74 Fix warning 2021-02-16 18:49:37 +01:00
Christophe Maudoux
c1951ce3fe Fix warning 2021-02-16 18:30:41 +01:00
Christophe Maudoux
67d8dccf25 Fix warning 2021-02-16 17:04:41 +01:00
Christophe Maudoux
12565ec173 Fix warning 2021-02-16 17:03:34 +01:00
Christophe Maudoux
35385b803d Fix warning 2021-02-16 16:35:23 +01:00
Christophe Maudoux
edf7a88114 Update 29-AuthGPG.t 2021-02-16 15:29:27 +01:00
Christophe Maudoux
071cfe68e2 Fix test 2021-02-16 14:56:59 +01:00
Christophe Maudoux
4583108068 Append download unit test (#2458) 2021-02-16 14:21:10 +01:00
Christophe Maudoux
1f66e03969 Append an option to download rules.json file from remote server (#2458) 2021-02-16 12:15:18 +01:00
Maxime Besson
31d0f26174 Clear hook list on configuration reload (#2463) 2021-02-15 15:13:53 +01:00
Christophe Maudoux
e477a1cef8 Append unit test & Doc (#2458) 2021-02-15 11:40:46 +01:00
Christophe Maudoux
110974cce4 Display rules (#2458) 2021-02-12 22:39:34 +01:00
Christophe Maudoux
60cbb6d5f2 Improve code (#2458) 2021-02-12 19:31:11 +01:00
Christophe Maudoux
3bee740125 display headers (#2458) 2021-02-12 19:25:55 +01:00
Christophe Maudoux
6e1efc8bb5 WIP: CheckDevOps plugin skeleton (#2458) 2021-02-12 18:11:37 +01:00
Maxime Besson
4408852d33 tidy 2021-02-12 18:10:53 +01:00
Maxime Besson
424cf91e88 Fix error message on missing template dir (#2460) 2021-02-12 18:10:53 +01:00
Christophe Maudoux
4515768513 Display explicit error message (#2329) 2021-02-10 22:27:12 +01:00
Christophe Maudoux
3e02682635 Update version 2021-02-09 23:06:36 +01:00
Xavier Guimard
830954d9ab Update polish translation 2021-02-09 18:23:39 +01:00
Maxime Besson
7db988b5a1 Improve some SAML error messages (#2349) 2021-02-08 11:50:24 +01:00
Christophe Maudoux
55071d5210 Keep old behavior if no JS (#1976) 2021-02-05 18:05:59 +01:00
Christophe Maudoux
6428cd0a0a fa icon (#1976) 2021-02-03 23:41:24 +01:00
Christophe Maudoux
e409a1b297 Use modal (#1976) 2021-02-03 23:35:48 +01:00
Maxime Besson
a1ed57c035 Add typ header to access token jwt (#2419) 2021-02-03 09:43:35 +01:00
Christophe Maudoux
635e75c1b6 Perl critic 2021-02-01 22:30:37 +01:00
Christophe Maudoux
d21747cea1 Typo (#1976) 2021-02-01 22:00:17 +01:00
Maxime Besson
1cd7dd3d2c Add hook for access token JWT payload (#2419) 2021-02-01 18:20:32 +01:00
Maxime Besson
857a336da2 Unit tests for JWT access tokens (#2419) 2021-02-01 18:20:32 +01:00
Maxime Besson
420fc72d63 Remove useless vars from OIDC tests 2021-02-01 18:20:32 +01:00
Maxime Besson
3fcea7eb1d Refactor OIDC unit tests 2021-02-01 18:20:32 +01:00
Maxime Besson
d86e8ce0df Refactor: remove extractJWT 2021-02-01 18:20:32 +01:00
Maxime Besson
cb04670003 Refactor checksignature 2021-02-01 18:20:32 +01:00
Maxime Besson
09dda56cb8 Refactor: rename method in issuer 2021-02-01 18:20:32 +01:00
Maxime Besson
d63017cffc Refactor: use new functions in Auth 2021-02-01 18:20:32 +01:00
Maxime Besson
cd3c2678db Refactor: rename variable 2021-02-01 18:20:32 +01:00
Maxime Besson
435ba82144 Refactor: rename and move getJWTJSONData 2021-02-01 18:20:32 +01:00
Maxime Besson
6aef1a6317 Refactor: getUserInfo now returns a hash 2021-02-01 18:20:32 +01:00
Maxime Besson
f3c97c22dc Refactor access token id lookup into Common::JWT 2021-02-01 18:20:32 +01:00
Maxime Besson
aa877cf0a3 Let newAccessToken emit JWT (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dc0bacd6f0 Accept Access Tokens in JWT format (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
acaaf1c749 Refactor buildUserInfo (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
dbddddfba1 Refactor newAccessToken (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
5303b4fc3e Fix error format when sending an expired refresh token 2021-02-01 18:15:55 +01:00
Maxime Besson
090fad7475 Add warning when hook stack encounters error 2021-02-01 18:15:55 +01:00
Maxime Besson
4803024b3e Unit tests for #2424 2021-02-01 16:25:36 +01:00
Maxime Besson
4c1f49a90f Use dynamic scope in issuer (#2424) 2021-02-01 16:25:35 +01:00
Maxime Besson
5562d8b1dd Add a function to resolve allowed scopes from rules (#2424) 2021-02-01 16:25:35 +01:00
Maxime Besson
c30b452aa3 Load dynamic scopes from config (#2424) 2021-02-01 16:25:35 +01:00
Christophe Maudoux
8017725caa Code refactoring 2021-01-31 00:07:34 +01:00
Christophe Maudoux
ea80b4df0e Use Ajax request (#1976) 2021-01-30 23:22:03 +01:00
Clément OUDOT
d4ae146fd6 Update version in main modules 2021-01-30 18:32:52 +01:00
Christophe Maudoux
01721d5793 Append warning in log & code refactoring ("1976) 2021-01-30 18:22:13 +01:00
Maxime Besson
f8f892c741 Unit test for #2449 2021-01-29 09:45:50 +01:00
Maxime Besson
c844cc25b0 Fix SAML logout propagation with Redirect binding (#2449) 2021-01-29 09:45:50 +01:00
Xavier Guimard
7166a96c88 Add dependency to JSON::XS (Closes: #2442) 2021-01-29 06:31:23 +01:00
Maxime Besson
84684b3b5b Avoid loading plugins when their config is an empty hash (#2448) 2021-01-28 11:42:36 +01:00
Xavier Guimard
39518079d5 Clean "afterSub" and "aroundSub" during reload (#2448) 2021-01-27 17:30:54 +01:00
Xavier Guimard
4455f13976 Clean "afterSub" and "aroundSub" during init (#2448) 2021-01-27 15:28:34 +01:00
Maxime Besson
11a8615348 Fix unit test for #1987 2021-01-25 12:18:55 +01:00
Christophe Maudoux
d2e35df987 Test required select values & Append unit test (#1976) 2021-01-24 19:07:58 +01:00
Christophe Maudoux
54f41f10ea Test allowed select values (#19786) 2021-01-24 18:17:36 +01:00
Christophe Maudoux
3f1f5c880c Append bootstrap class (#1976) 2021-01-24 18:17:36 +01:00
Christophe Maudoux
24cec1e08f Fix warning 2021-01-23 23:27:46 +01:00
Christophe Maudoux
54b9e0d87b Sort values (#1976) 2021-01-23 23:20:50 +01:00
Christophe Maudoux
377fe4796c Update version (#1976) 2021-01-23 23:11:57 +01:00
Christophe Maudoux
1a3ea8685e Improve code (#1976) 2021-01-23 23:07:21 +01:00
Christophe Maudoux
7c3955b2aa Allow input type select with FindUser (#1976) 2021-01-23 23:00:23 +01:00
Christophe Maudoux
5d56a88ff3 Use strict & Typo 2021-01-23 18:57:24 +01:00
Christophe Maudoux
7d232b43fd Append unit Combination unit test (#1976) 2021-01-23 18:56:19 +01:00
Maxime Besson
ef3c0121e7 Fix random CI failures 2021-01-20 16:52:20 +01:00
Maxime Besson
0e5686a7db Unit test for #2445 2021-01-20 15:37:31 +01:00
Maxime Besson
51f3d66fee Fix extra lmAuth parameter with Choice+info (#2445) 2021-01-20 15:36:46 +01:00
Christophe Maudoux
d6e351ab90 Tidy 2021-01-19 22:45:05 +01:00
Christophe Maudoux
a8174d58a7 Typo 2021-01-19 22:24:17 +01:00
Maxime Besson
5b4e533f44 Add _scope and _clientID to portal (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
9463ad3fe5 Unit test for client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
25fb8ca0f0 Implement client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Maxime Besson
5e439b2f24 Advertise client credentials grant (#1987) 2021-01-19 16:47:21 +01:00
Maxime Besson
dd5e9ec156 Tidy 2021-01-19 16:44:06 +01:00
Christophe Maudoux
aad6244997 Merge branch 'v2.0' into findUser 2021-01-18 12:05:04 +01:00
Clément OUDOT
85e141b016 Upate MANIFEST 2021-01-17 16:57:56 +01:00
Clément OUDOT
8663c0104c Update version in main modules for 2.0.10 2021-01-17 16:56:51 +01:00
Maxime Besson
4ba56d1d41 Add translations for #2438 2021-01-15 16:05:46 +01:00
Maxime Besson
3b3b6a4b25 Add modal warning on 2f remove to default theme (#2438) 2021-01-15 16:05:43 +01:00
Maxime Besson
6eaf31a5e4 Trigger removal of 2f on a specific dom class (#2438) 2021-01-15 16:05:11 +01:00
Christophe Maudoux
cd37ccc35c Merge branch 'v2.0' into findUser 2021-01-14 22:39:02 +01:00
Christophe Maudoux
f426064093 Comment no strict refs pragma (#2436) 2021-01-14 22:37:17 +01:00
Christophe Maudoux
f4ea214056 No strict refs (#2436) 2021-01-08 20:31:33 +01:00
Christophe Maudoux
7ebca3633c No strict refs (#2436) 2021-01-08 20:09:00 +01:00
Christophe Maudoux
e4444c907f Append CheckUser normalized headers option & Improve unit test (#2436) 2021-01-08 18:38:05 +01:00
Maxime Besson
6517718f26 Add an option to force getUser before LDAP password change (#714) 2021-01-08 15:09:19 +01:00
Maxime Besson
9d24e5f0d5 Fix logging (#714) 2021-01-07 18:49:58 +01:00
Christophe Maudoux
a93a85435d Improve debug msg 2021-01-07 10:04:15 +01:00
Christophe Maudoux
bd1a0bf6da Fix regex (#1976) 2021-01-07 09:54:00 +01:00
Christophe Maudoux
dae9455a19 Merge branch 'v2.0' into findUser 2021-01-06 23:11:56 +01:00
Christophe Maudoux
d14fae87ce Append conf test & REST init test & set default values (#2176) 2021-01-06 23:10:09 +01:00
Christophe Maudoux
a76bf37c29 Tidy (#1976) 2021-01-05 22:52:21 +01:00
Christophe Maudoux
39528ef1c3 Control parameters (#1976) & Improve unit tests 2021-01-05 22:46:35 +01:00
Christophe Maudoux
1c45e8a8c0 Merge branch 'v2.0' into findUser 2021-01-05 22:14:28 +01:00
Christophe Maudoux
846d6a3655 Allow wildcard with searching parameters (#1976) & Improve unit tests 2021-01-05 22:08:48 +01:00
Maxime Besson
127aa91a8f Merge branch 'feature-cas-service-url-2321' into 'v2.0'
Feature cas service url 2321

See merge request lemonldap-ng/lemonldap-ng!175
2021-01-05 18:49:24 +01:00
Maxime Besson
402a39a176 Merge branch 'feature-password-change-combination-714' into 'v2.0'
Add Password::Combination

See merge request lemonldap-ng/lemonldap-ng!174
2021-01-05 18:35:57 +01:00
Maxime Besson
7ffaa3f9ff Fix Twitter authentication when coming from Issuers (#2426) 2021-01-05 18:33:09 +01:00
Maxime Besson
723dcce62f Unit test for #2321 2021-01-05 17:42:40 +01:00
Maxime Besson
2a805e06b9 Match CAS service via prefix (#2331) 2021-01-05 17:34:57 +01:00
Maxime Besson
e78f8a2270 Refactor CAS code (#2321) 2021-01-05 17:34:57 +01:00
Maxime Besson
6b24492e33 Allow override of userDB in Password::Combination (#714,#716) 2021-01-04 21:31:34 +01:00
Maxime Besson
65939365a8 Unit test for #716 2021-01-04 21:31:34 +01:00
Maxime Besson
971dbf231e Unit test for #714 2021-01-04 21:31:34 +01:00
Maxime Besson
fa3129465b New Password::Combination module (#714,#716) 2021-01-04 21:31:34 +01:00
Maxime Besson
fdbe713e1f Unit test for #2430 2021-01-04 21:16:52 +01:00
Maxime Besson
5ed0677d35 Fix password update in session (#2430) 2021-01-04 21:16:52 +01:00
Christophe Maudoux
554daba5fe Allow multi-valued excluding parameters (#1976) 2021-01-04 20:23:42 +01:00
Christophe Maudoux
fc6ea96954 FindUser with combination (#1976) 2021-01-03 19:00:20 +01:00
Clément OUDOT
33a3a965c0 Force deletion of corrupted sessions in LDAP backends (#2404) 2021-01-03 18:50:50 +01:00
Clément OUDOT
f021df37e4 Force deletion of corrupted sessions in DBI backends (#2404) 2021-01-03 18:17:46 +01:00
Christophe Maudoux
50a35e7588 Improve unit test (#1976) 2021-01-02 23:08:56 +01:00
Christophe Maudoux
e1de8e34c2 Merge branch 'v2.0' into findUser 2021-01-02 22:55:45 +01:00
Christophe Maudoux
c2c02b4c86 Append REST UserDB unit test (#1976) 2021-01-02 22:50:56 +01:00
Christophe Maudoux
994ccfae30 Append REST findUser URL parameter (#1986) 2021-01-02 20:22:33 +01:00
Christophe Maudoux
de1be30176 Fix other Backend (#1976) 2021-01-02 19:21:16 +01:00
Christophe Maudoux
b075082970 REST Backend (#1976) 2021-01-02 18:59:30 +01:00
Christophe Maudoux
5e8effcddd Test token (#1976) 2021-01-02 17:46:16 +01:00
Maxime Besson
49905d4759 Remove debug log 2020-12-30 16:34:40 +01:00
Christophe Maudoux
a1700369c5 Merge branch 'v2.0' into findUser 2020-12-29 14:59:36 +01:00
Maxime Besson
4eeef91588 Add SAML ACS to environment (#2427) 2020-12-29 14:17:06 +01:00
Maxime Besson
7e48ec702e Improve js syntax (#2399) 2020-12-28 10:35:40 +01:00
Maxime Besson
0c246a7613 Disable password policy check when generating new pw (#2399) 2020-12-28 10:35:40 +01:00
Christophe Maudoux
c2342336c2 Merge branch 'v2.0' into findUser 2020-12-27 23:39:54 +01:00
Christophe Maudoux
597455dfcf FindUser with LDAP & AD & Append unit test (#1976) 2020-12-27 23:37:40 +01:00
Christophe Maudoux
072f68004a Improve debug log & unit tests (#1976) 2020-12-27 18:03:08 +01:00
Christophe Maudoux
0b750fb6cc Append Choice unit tests (#1976) 2020-12-27 14:24:15 +01:00
Christophe Maudoux
c0f71ee0f1 Fix FindUSer with Choice (#1976) 2020-12-27 13:29:10 +01:00
Christophe Maudoux
406fdbc54b Append unit test if Impersonation is missing (#1976) 2020-12-26 15:27:25 +01:00
Christophe Maudoux
3219673375 Append unit test with token & Fix error code (#1976) 2020-12-26 14:30:38 +01:00
Christophe Maudoux
23e52fcec2 Append Demo UserDB unit test & Fix code (#1976) 2020-12-26 14:30:38 +01:00
Christophe Maudoux
f956810e48 Redirect to Portal (#1976) 2020-12-23 22:47:08 +01:00
Christophe Maudoux
c3d2b2b463 Fix warnings 2020-12-23 16:23:28 +01:00
Christophe Maudoux
0236dc00d6 Removing workaround with MailPasswordReset 2020-12-23 14:57:55 +01:00
Christophe Maudoux
60ce68ce23 Use OTT (#1976) 2020-12-23 14:50:36 +01:00
Christophe Maudoux
02aafdeddd Improve unit test DBI (#1976) 2020-12-22 23:04:47 +01:00
Christophe Maudoux
ed8ed39c4f Make manifest 2020-12-22 22:53:04 +01:00
Christophe Maudoux
076a84764e Make manifest 2020-12-22 22:52:41 +01:00
Christophe Maudoux
77c25b98cf FindUser DBI & Append unit test (#1976) 2020-12-22 22:51:37 +01:00
Christophe Maudoux
510a1dc1c2 WIP: UserDB findUser (#1976) 2020-12-22 17:02:51 +01:00
Christophe Maudoux
9dcf70a5ef Code cleaning 2020-12-22 14:05:22 +01:00
Christophe Maudoux
e7baa348ba Update lang & conf test (#1976) 2020-12-21 22:31:29 +01:00
Christophe Maudoux
fc4024f024 Return parameters (#1976) 2020-12-21 21:35:44 +01:00
Maxime Besson
860545dd27 Deprecate llngDeleteSession (#2351) 2020-12-21 21:33:51 +01:00
Christophe Maudoux
bfcdd370df Merge branch 'v2.0' into findUser 2020-12-21 21:11:55 +01:00
Clément OUDOT
fc16426ca9 Add alt attribute to images (#2422) 2020-12-21 16:46:03 +01:00
Maxime Besson
ed0be42c93 Merge branch 'WIP-plugin-hooks-2359' into 'v2.0'
Plugin hook system to extend issuers (and maybe more)

See merge request lemonldap-ng/lemonldap-ng!166
2020-12-21 16:35:03 +01:00
Maxime Besson
e05a167937 Handle missing nameid (#2420) 2020-12-21 11:05:00 +01:00
Christophe Maudoux
a259566eb1 Excluding parameters (#1976) 2020-12-20 23:49:46 +01:00
Christophe Maudoux
86bbb70b89 Skip empty values (#1976) 2020-12-20 23:04:07 +01:00
Christophe Maudoux
4d04672c20 WIP: FindUser skeleton (#1976) 2020-12-20 22:54:35 +01:00
Christophe Maudoux
512045c528 Fix conf test (#2243) 2020-12-20 17:29:13 +01:00
Christophe Maudoux
48df4a8807 Fix conf test & unit test (#2243) 2020-12-19 19:46:36 +01:00
Christophe Maudoux
56243712ff Update unit tests (#2243) 2020-12-17 22:55:12 +01:00
Christophe Maudoux
ef8aa7cee9 Update unit test (#2243) 2020-12-16 23:35:53 +01:00
Christophe Maudoux
7be0240389 Update default values & Tidy (#2243) 2020-12-16 22:58:01 +01:00
Christophe Maudoux
652d8ba9bc Prevent authentication on backend if account is locked (#2243) 2020-12-16 22:49:41 +01:00
Christophe Maudoux
2dde8672d5 Fix unit tests warning (#2406) 2020-12-11 00:10:22 +01:00
Christophe Maudoux
90d2dc58b7 Decrease log level 2020-12-10 23:56:12 +01:00
Maxime Besson
c57c72ae1e Unit test for #2413 2020-12-09 18:01:44 +01:00
Maxime Besson
442203685f checkState: fix perl error when testing a user account (#2413) 2020-12-09 18:01:02 +01:00
Maxime Besson
d7d1473ad5 Unit tests for #2403 2020-12-07 17:49:22 +01:00
Maxime Besson
8793a5b6a1 Fix storage of LDAP attributes with a value of 0 (#2403) 2020-12-07 17:49:21 +01:00
Clément OUDOT
185c3f690c Only run checkpassword javascript if a newpassword field is present (#2411) 2020-12-07 17:40:46 +01:00
Maxime Besson
c6d20ca8b3 Fix init of ::Portal::Password::LDAP (#2410) 2020-12-07 16:59:48 +01:00
Maxime Besson
9ba6938e90 Show a friendlier error message when a module fails init (#2410) 2020-12-07 16:59:48 +01:00
Christophe Maudoux
c2266720f9 Unauthenticated logout request with route & improve unit test (#2342) 2020-12-06 11:21:11 +01:00
Christophe Maudoux
41889e5ee2 Append unit test (#2342) 2020-12-05 20:37:50 +01:00
Christophe Maudoux
b2306cc8ad Unauthenticated logout (#2342) 2020-12-05 19:31:23 +01:00
Christophe Maudoux
f2960f706e TOTP tolerates both backward and forward clock drift & Append unit test (#2394) 2020-12-04 23:05:11 +01:00
Xavier Guimard
b5aec37089 Add Spanish translation (not finished but usable) 2020-12-04 13:11:01 +01:00
Clément OUDOT
db8e8be2ad Reduce loglevel in unit test (#2406) 2020-12-03 20:55:43 +01:00
Clément OUDOT
6b1da39581 Unit test for mail 2F session key (#2406) 2020-12-03 20:00:51 +01:00
Clément OUDOT
426555effe Use a specific parameter for mail 2F session key (#2406) 2020-12-03 19:59:36 +01:00
Christophe Maudoux
40113b6829 Improve unit test (#2398) 2020-12-01 22:49:17 +01:00
Christophe Maudoux
421929d081 Hide valued headers only (#2398) 2020-12-01 20:49:42 +01:00