Clément Oudot
|
db97a79752
|
Refresh portal object in Safe (#284)
|
2011-03-16 13:58:17 +00:00 |
|
Clément Oudot
|
92fec3a326
|
Change the variable substitution to manage subroutine in Safe reval, and add more tests in Menu to always return good values for HTML::Template (#284)
|
2011-03-03 22:34:09 +00:00 |
|
Clément Oudot
|
7c635af782
|
Test for empty category was buggy (#280)
|
2011-02-10 10:29:08 +00:00 |
|
Clément Oudot
|
1e245d8c3a
|
Merge trunk modifications in 1.0 branch for #275
|
2011-02-07 16:42:02 +00:00 |
|
Clément Oudot
|
0865635a7b
|
Create a Common::Safe module, to be able to disable Safe jail with useSafeJail in Portal (#270)
|
2011-02-07 10:27:36 +00:00 |
|
Thomas CHEMINEAU
|
ddb84e6ef2
|
fixes #275 - use SCRIPT_FILENAME instead of DOCUMENT_ROOT to get htdocs portal path
|
2011-02-04 12:50:24 +00:00 |
|
Clément Oudot
|
1d17cb0f46
|
Fix a bug in portal configuration load (#271)
|
2011-02-03 14:49:12 +00:00 |
|
Clément Oudot
|
29a9af1c44
|
make tidy
|
2011-01-25 16:41:31 +00:00 |
|
Clément Oudot
|
83f2c04bae
|
Fix DBI authentication level problem, and clean LDAP authentication level code (#272)
|
2011-01-25 11:25:48 +00:00 |
|
Clément Oudot
|
5b1a1c73d0
|
Support AuthChoice for reset password feature (#269)
|
2011-01-25 10:57:45 +00:00 |
|
Clément Oudot
|
7901a2e894
|
Change the default value of portalAutocomplete, to have a correct value for authenticationLevel (#265)
|
2011-01-24 15:31:46 +00:00 |
|
Clément Oudot
|
7ed205a995
|
Upgrade main modules version to 1.1.0 in trunk
|
2011-01-21 16:35:28 +00:00 |
|
Clément Oudot
|
97bcb5ed71
|
Portal open in new window option was never used (#267)
|
2011-01-04 14:35:59 +00:00 |
|
Xavier Guimard
|
47ea58cc86
|
Upgrade to 1.1.0 slave mechanism
|
2010-12-15 21:10:42 +00:00 |
|
Xavier Guimard
|
2467ea5f90
|
Upgrade to 1.0.1 only changed modules
|
2010-12-15 21:04:17 +00:00 |
|
Xavier Guimard
|
3d5709cd0a
|
Slave in progress
|
2010-12-08 10:42:53 +00:00 |
|
Xavier Guimard
|
9969dd69e2
|
Add slave mechanism. Closes #222
|
2010-12-08 06:04:57 +00:00 |
|
Clément Oudot
|
f2b7f8cdfd
|
Hide authentication loop on reset password (#253)
|
2010-11-27 17:23:11 +00:00 |
|
Clément Oudot
|
05dbeca3e5
|
Upgrade versions for 1.0 release
|
2010-11-20 15:05:40 +00:00 |
|
Clément Oudot
|
0d5144bce8
|
Correct test for CAS proxy mode activation (#242)
|
2010-11-19 11:43:52 +00:00 |
|
Clément Oudot
|
458961c96b
|
Fix SAML SLO bug with AuthChoice (#237)
|
2010-11-15 15:15:56 +00:00 |
|
Xavier Guimard
|
090be1fb93
|
Typo
|
2010-11-14 07:18:45 +00:00 |
|
Clément Oudot
|
c800c90232
|
Fix SOAP configuration bug (#230), and add a test script
|
2010-11-04 14:52:17 +00:00 |
|
Xavier Guimard
|
d086366b2c
|
Missing "require _DBI"
|
2010-10-31 06:33:14 +00:00 |
|
Xavier Guimard
|
652468a290
|
Share global variables
|
2010-10-30 19:25:38 +00:00 |
|
Xavier Guimard
|
8d1df60bee
|
Warn if cookie name has changed + little things
|
2010-10-30 09:03:52 +00:00 |
|
Xavier Guimard
|
2b1f9f1501
|
Avoid some test warn
|
2010-10-26 11:36:57 +00:00 |
|
Xavier Guimard
|
f2674105f0
|
Some links missing in pod
|
2010-10-26 10:59:22 +00:00 |
|
Xavier Guimard
|
b5600bc3bc
|
POD errors + replace lemonldap.ow2.org by lemonldap-ng.org
|
2010-10-26 09:34:00 +00:00 |
|
Xavier Guimard
|
47d58814c8
|
Upgrade POD URL
|
2010-10-26 06:08:16 +00:00 |
|
Clément Oudot
|
a00ba782c7
|
Do not hash password before prepared statement (fix #215)
|
2010-10-25 12:59:46 +00:00 |
|
Xavier Guimard
|
e39381a11b
|
Closes #210 "Ajax request in menu to check if session is always available"
|
2010-10-25 06:25:20 +00:00 |
|
Xavier Guimard
|
480f365983
|
Use draggable popup instead of $(#help_content) to display errors
|
2010-10-24 09:04:12 +00:00 |
|
Xavier Guimard
|
c539a91696
|
Update copyright
|
2010-10-24 07:25:44 +00:00 |
|
Xavier Guimard
|
ec9a6bb887
|
Avoid failed cpan tests
|
2010-10-24 06:26:56 +00:00 |
|
Xavier Guimard
|
fb5a09d172
|
Update copyright year (#209)
|
2010-10-23 08:35:38 +00:00 |
|
Xavier Guimard
|
1923085f6c
|
#16 "Use parameterized statements in DBI to prevent SQL injection" : finish work
NOT TESTED
|
2010-10-23 08:09:41 +00:00 |
|
Clément Oudot
|
8b7cc1e225
|
Add an anti frame protection (#195)
|
2010-10-22 10:03:42 +00:00 |
|
Clément Oudot
|
2683fce3d1
|
Manage OpenID errors in Display (#190)
|
2010-10-22 09:03:10 +00:00 |
|
Clément Oudot
|
14f1e9b67e
|
Control if xxxStorageOptions is empty in setDefaultValues (#202)
|
2010-10-21 14:23:53 +00:00 |
|
Clément Oudot
|
e759219371
|
Control confirm stamp before decrypting it (#207)
|
2010-10-21 13:41:26 +00:00 |
|
Clément Oudot
|
2f4b218488
|
Require Lasso 2.3.0 (#199)
|
2010-10-21 11:46:46 +00:00 |
|
Clément Oudot
|
24a9971297
|
Add setPersistentSessionInfo step in authentication process (closes #200)
|
2010-10-21 10:28:47 +00:00 |
|
Xavier Guimard
|
3e0ff9322e
|
Closes #202 "searchOn no working with SAML and Apache::Session::File"
|
2010-10-20 05:47:10 +00:00 |
|
Clément Oudot
|
c8a3b80055
|
Load CAS Storage if different from globalStorage
|
2010-10-18 15:33:21 +00:00 |
|
Clément Oudot
|
01d4f364ef
|
Remove AuthLA (#194)
|
2010-10-18 08:59:20 +00:00 |
|
Xavier Guimard
|
038c312200
|
Tests
|
2010-10-14 10:25:50 +00:00 |
|
Xavier Guimard
|
51d4c67f11
|
* OpenID: more tests for SREG
* OpenID: delete trust persistent datas when confirm=-1
* make tidy
|
2010-10-14 09:50:23 +00:00 |
|
Xavier Guimard
|
01bf8253f0
|
Typo
|
2010-10-14 07:59:15 +00:00 |
|
Xavier Guimard
|
cb267983dc
|
- update Debian control file
- more tests for OpenID
- Romanian missing translation
|
2010-10-14 05:55:28 +00:00 |
|
Clément Oudot
|
7f8e7084c7
|
Correct persistent session typo and add possibility to delete a session value in updateSession
|
2010-10-13 08:32:27 +00:00 |
|
Xavier Guimard
|
813288bfe3
|
Typo
|
2010-10-12 18:12:13 +00:00 |
|
Clément Oudot
|
56049b9827
|
Use persistent storage for SAML identity (#191)
|
2010-10-12 13:32:18 +00:00 |
|
Clément Oudot
|
876317ed4c
|
Add missing romanian translation
|
2010-10-12 08:24:45 +00:00 |
|
Xavier Guimard
|
c1d218947f
|
Bug in OpenID white/black lists
|
2010-10-11 12:36:09 +00:00 |
|
Xavier Guimard
|
cdcb7ab31c
|
Use PE_BADPARTNER instead of PE_BADURL
|
2010-10-11 12:27:03 +00:00 |
|
Xavier Guimard
|
6155d579f7
|
Better display for federation errors
|
2010-10-11 12:22:51 +00:00 |
|
Xavier Guimard
|
f95acaa007
|
Closes #182 "portal return a 500 error under cgi-script
|
2010-10-11 11:45:37 +00:00 |
|
Xavier Guimard
|
cb717868de
|
#164 in progress: need to manage list parameters
|
2010-10-10 13:32:01 +00:00 |
|
Xavier Guimard
|
7fd3964c9a
|
#166 fixed but not yet tested
|
2010-10-08 16:14:06 +00:00 |
|
Xavier Guimard
|
05e1d01fdc
|
#166 in progress
- persistent datats restored
|
2010-10-08 16:02:43 +00:00 |
|
Xavier Guimard
|
51e7ff2a02
|
#166 in progress
- new updatePersistentSession sub
|
2010-10-08 15:35:40 +00:00 |
|
Xavier Guimard
|
1588463687
|
#166 in progress:
- Lemonldap::NG::Common::Apache::Session is used as Apache::Session module and provides a way to choose _session_id
|
2010-10-08 14:21:49 +00:00 |
|
Clément Oudot
|
43d5c921a8
|
Add CAS Issuer parameters in Manager (#186)
|
2010-10-07 14:30:58 +00:00 |
|
Xavier Guimard
|
0ee20f3d0e
|
Attributes management
|
2010-10-07 11:05:36 +00:00 |
|
Xavier Guimard
|
cc2fbdf7d1
|
make tidy
|
2010-10-04 17:27:32 +00:00 |
|
Clément Oudot
|
030da0ee57
|
Manage encoding for displayed connected user in Menu
|
2010-10-04 14:50:33 +00:00 |
|
Clément Oudot
|
24df2548ac
|
Use correct values to display SREG confirmation
|
2010-10-04 13:53:44 +00:00 |
|
Clément Oudot
|
0bfe3b95df
|
Use a table to display SREG parameters confirmation
|
2010-10-04 13:04:38 +00:00 |
|
Clément Oudot
|
3b0ea0dd30
|
Bad OpenID SREG attribute in authentication is not a blocking error -> use warn instead of error log level
|
2010-10-04 12:29:18 +00:00 |
|
Clément Oudot
|
f204750f0a
|
Correct a little bug in OpenID Issuer SREG attributes filtering (it was only returning the first attribute)
|
2010-10-04 12:06:15 +00:00 |
|
Clément Oudot
|
b146969947
|
OpenID Issuer parameters in Manager (#175)
|
2010-10-04 09:55:50 +00:00 |
|
Xavier Guimard
|
84a56ef1d8
|
- make tidy
- OpenID log levels
- DIFFPREFIX in Makefile (for vservers,...)
|
2010-10-03 18:32:53 +00:00 |
|
Xavier Guimard
|
2ae2c53868
|
Doxygen comments
|
2010-10-03 10:26:50 +00:00 |
|
Xavier Guimard
|
5dd15f78f3
|
- Doxygen doc in progress
- lmLog display caller in case of level != debug
|
2010-10-03 08:25:40 +00:00 |
|
Xavier Guimard
|
ad0ebc182e
|
Doxygen comments
|
2010-10-02 15:45:10 +00:00 |
|
Clément Oudot
|
7a84710467
|
Close bug #179
|
2010-10-01 15:05:06 +00:00 |
|
Clément Oudot
|
24dc3d54e9
|
Use get_module for check in AuthOpenID
|
2010-10-01 14:21:46 +00:00 |
|
Clément Oudot
|
a346e07f1d
|
Do not abort on unknow attribute, as OpenID can be used with Multi or Choice authentication
|
2010-10-01 13:21:25 +00:00 |
|
Clément Oudot
|
a81c8c7f52
|
Use get_module for check in UserDBOpenID init
|
2010-10-01 13:04:13 +00:00 |
|
Clément Oudot
|
82feff1eb7
|
OpenID: prefill user login with submitted OpenID identity
|
2010-10-01 12:36:45 +00:00 |
|
Clément Oudot
|
4a181801e5
|
Correct previous commit
|
2010-10-01 09:47:06 +00:00 |
|
Clément Oudot
|
8cc808f1de
|
IssuerOpenID: store only OpenID params in hidden fields (#177)
|
2010-10-01 09:34:42 +00:00 |
|
Clément Oudot
|
52e8221608
|
Correct code of updateSession
|
2010-10-01 09:06:32 +00:00 |
|
Clément Oudot
|
42e19787f1
|
Use standard header for OpenID Issuer template
|
2010-10-01 07:48:50 +00:00 |
|
Xavier Guimard
|
f804756fad
|
Debian install: links in /etc/apache2/sites-available
|
2010-09-30 20:20:12 +00:00 |
|
Xavier Guimard
|
a406d79d2f
|
updateSession + checkboxes checked
|
2010-09-29 10:09:04 +00:00 |
|
Xavier Guimard
|
431a809a90
|
Messages update
|
2010-09-29 07:24:56 +00:00 |
|
Xavier Guimard
|
aa39949546
|
OpenID SREG works !!!
|
2010-09-29 06:42:48 +00:00 |
|
Xavier Guimard
|
b48232068e
|
OpenID SREG in progress
|
2010-09-28 16:26:35 +00:00 |
|
Clément Oudot
|
6147019e90
|
* Portal error page merged with main portal script
* Option to use Redirect instead of Forbidden in Handler (#6)
|
2010-09-28 14:40:50 +00:00 |
|
Clément Oudot
|
7f3b69b8c9
|
Create Display module to clean portal index.pl (#160)
|
2010-09-28 10:30:57 +00:00 |
|
Xavier Guimard
|
ed4de56194
|
Doxygen comments for inheritance
|
2010-09-28 05:47:47 +00:00 |
|
Clément Oudot
|
6ddf9774c5
|
Menu applications can now be requested trought SOAP (#25)
|
2010-09-27 14:18:48 +00:00 |
|
Clément Oudot
|
aeae8ce1d8
|
Typo in CDC writer URL call (#18)
|
2010-09-27 09:11:37 +00:00 |
|
Clément Oudot
|
6697e4a221
|
forcedSAML must not be shown in authentication choices
|
2010-09-27 08:53:16 +00:00 |
|
Clément Oudot
|
c546d7c9a9
|
Update Common Domain Cookie before IDP redirects to SP (#18)
|
2010-09-27 08:40:18 +00:00 |
|
Xavier Guimard
|
c57087d696
|
OpenID SREG in progress...
|
2010-09-26 13:09:46 +00:00 |
|
Xavier Guimard
|
657238d8d8
|
OpenID SREG in progress
|
2010-09-26 08:16:56 +00:00 |
|
Xavier Guimard
|
075767dacc
|
OpenID SREG in progress
|
2010-09-25 14:40:38 +00:00 |
|
Xavier Guimard
|
545c05ca60
|
OpenID SREG in progress
|
2010-09-25 14:15:53 +00:00 |
|
Xavier Guimard
|
23f22817b0
|
OpenID SREG in progress
|
2010-09-25 12:55:29 +00:00 |
|
Clément Oudot
|
537fcbdf26
|
Use Common Domain Cookie in AuthSAML (#18)
|
2010-09-24 15:27:40 +00:00 |
|
Clément Oudot
|
c3e9fbba7e
|
Module to manage SAML Common Domain Cookie (#18)
|
2010-09-24 14:23:27 +00:00 |
|
Xavier Guimard
|
e7fdfb79ed
|
OpenID SREG in progress
|
2010-09-24 14:21:19 +00:00 |
|
Xavier Guimard
|
dab3aaa07f
|
Closes #156 : "Confirm parameter is not secured"
|
2010-09-24 12:02:57 +00:00 |
|
Xavier Guimard
|
bcc84f0ceb
|
make tidy
|
2010-09-23 16:41:39 +00:00 |
|
Clément Oudot
|
c5fefefe81
|
Use eval in _SAML BEGIN block to get Lasso constants values
|
2010-09-23 15:47:17 +00:00 |
|
Clément Oudot
|
8f7a94c1fb
|
Add artifact resolution URL in authForce (fixes #170)
|
2010-09-23 15:29:48 +00:00 |
|
Xavier Guimard
|
fb88b25e10
|
Optimization to increase performances
|
2010-09-23 15:09:27 +00:00 |
|
Clément Oudot
|
a51202cd65
|
Correct a bug in CAS login return URL (#169)
|
2010-09-23 13:19:25 +00:00 |
|
Clément Oudot
|
890daaf5a5
|
'on' and 'off' are also valid values fo display mode (#29)
|
2010-09-22 14:26:28 +00:00 |
|
Clément Oudot
|
ff58e89b0a
|
Categories and applications sorted by alphabetical order of their id (#29)
|
2010-09-20 14:04:33 +00:00 |
|
Clément Oudot
|
fd114a0345
|
New application list for dark theme (#29)
|
2010-09-20 13:07:28 +00:00 |
|
Clément Oudot
|
36a1674c09
|
Use template loops to display categories and applications - work in progress (#29)
|
2010-09-20 10:39:23 +00:00 |
|
Clément Oudot
|
59c17a6604
|
Build applications list as a perl struct (#29)
|
2010-09-20 08:31:09 +00:00 |
|
Xavier Guimard
|
eae0070d8e
|
Doxygen doc
|
2010-09-19 12:23:46 +00:00 |
|
Xavier Guimard
|
a28a147674
|
Little error
|
2010-09-19 09:47:38 +00:00 |
|
Xavier Guimard
|
df0c8004c0
|
New feature : configuration is cached in portal memory
|
2010-09-19 09:25:47 +00:00 |
|
Xavier Guimard
|
85d384bac1
|
#28 in progress
|
2010-09-18 06:41:48 +00:00 |
|
Xavier Guimard
|
c80795805a
|
#28 in progress
|
2010-09-18 06:23:34 +00:00 |
|
Xavier Guimard
|
305113c53f
|
#28 in progress :
- Extension to Net::OpenID::Server to manage extensions (and sign them)
|
2010-09-17 15:32:43 +00:00 |
|
Xavier Guimard
|
09b6f037df
|
_SOAP.pm and Menu.pm provide both _compileRules => moved to _LibAccess.pm
|
2010-09-17 10:23:49 +00:00 |
|
Clément Oudot
|
d7fb73b2e2
|
Rewrite Menu module, to integrate it in Portal (#29)
|
2010-09-16 15:10:00 +00:00 |
|
Clément Oudot
|
b658c3df43
|
SAFEWRAP test was not good
|
2010-09-16 08:44:56 +00:00 |
|
Clément Oudot
|
dda83a3e67
|
Store authChoice in session, and load it for existing sessions
|
2010-09-13 15:14:19 +00:00 |
|
Clément Oudot
|
07c1c59d0e
|
Load IDPs in SAML userDBInit to manage SLO in SAML proxy mode
|
2010-09-13 15:10:39 +00:00 |
|
Clément Oudot
|
657c39d563
|
Use subProcess to change password in Menu
|
2010-09-13 15:08:29 +00:00 |
|
Clément Oudot
|
3304885bf0
|
Register dn in session even if no UserDBLDAP selected
|
2010-09-13 14:09:07 +00:00 |
|
Clément Oudot
|
c004e6363d
|
Load correct authentication module on issuer logout process
|
2010-09-10 20:27:14 +00:00 |
|
Clément Oudot
|
0fb130e29e
|
Correct UserDBSAML init test
|
2010-09-10 20:17:08 +00:00 |
|
Clément Oudot
|
17b3c15466
|
Code authentication choice like multiple authentication (#19)
|
2010-09-10 19:52:44 +00:00 |
|
Clément Oudot
|
61a73e59dd
|
Work on authentication choice (#19)
|
2010-09-08 20:16:32 +00:00 |
|
Clément Oudot
|
1f4a6e6450
|
#19:
* Dedicated AuthChoice.pm
* Authentication choice parameters in Manager
|
2010-09-06 15:05:54 +00:00 |
|
Clément Oudot
|
d2549c2fbe
|
Always display authentication choices if any (#19)
|
2010-09-06 09:35:05 +00:00 |
|
Xavier Guimard
|
c8a2b8c5e0
|
"_safe" instead of "safe" in Menu
|
2010-09-06 09:23:23 +00:00 |
|
Xavier Guimard
|
29640f3829
|
test wrapper for Safe
|
2010-09-04 11:49:03 +00:00 |
|
Clément Oudot
|
09b06fecbf
|
Add SSL and Apache in authentication choices (#19)
|
2010-09-03 16:02:10 +00:00 |
|
Xavier Guimard
|
d00f68a54b
|
Try to close LEMONLDAP-117
|
2010-09-03 15:58:57 +00:00 |
|
Clément Oudot
|
82b4ea080e
|
Load correct authentication module for authLogout (#LEMONDLAP-19)
|
2010-09-03 15:23:08 +00:00 |
|
Clément Oudot
|
615f0ba259
|
Transport authChoice in OpenID workflow
|
2010-09-03 14:58:25 +00:00 |
|
Clément Oudot
|
a8cc940774
|
Manage authChoice in CAS proxy callback
|
2010-09-03 14:53:31 +00:00 |
|
Clément Oudot
|
9e38c5ea2a
|
Transport authChoice in CAS authentication
|
2010-09-03 14:24:19 +00:00 |
|
Clément Oudot
|
41151228ff
|
Typo in checkXSSAttack call
|
2010-09-03 14:23:54 +00:00 |
|
Clément Oudot
|
ec8eb57b1f
|
* Common XSS attack check method
* Check XSS attack on authChoice parameter
|
2010-09-03 14:15:44 +00:00 |
|
Xavier Guimard
|
eacdc8e2dd
|
Typo
|
2010-09-03 13:37:49 +00:00 |
|
Xavier Guimard
|
47cb5c1a59
|
OpenID consumer now supports "OpenID Simple Registration Extension"
|
2010-09-03 13:34:35 +00:00 |
|
Clément Oudot
|
c10f1a96db
|
Authentication choice in progress (#19)
|
2010-09-03 13:21:03 +00:00 |
|
Clément Oudot
|
0f4212abc2
|
URL param to choose authentication module (#LEMONLDAP19)
|
2010-09-02 15:32:40 +00:00 |
|
Xavier Guimard
|
0e1f5f4217
|
According to OpenID-2.0 specs, HTML field should be called "openid_identifier"
|
2010-09-02 10:38:28 +00:00 |
|