Commit Graph

3234 Commits

Author SHA1 Message Date
Christophe Maudoux
ab8cc97a52 Fix warning 2022-04-30 10:19:39 +02:00
Christophe Maudoux
96f6667f24 Propagate to MFA #1877 2022-04-30 10:19:39 +02:00
Maxime Besson
826308fbbf Fix check after saveConf (#2742) 2022-04-26 19:09:18 +02:00
David Coutadeur
901a6d3697 add RememberAuthChoice Plugin (references #2737) 2022-04-20 17:36:33 +00:00
David Coutadeur
e6cdeba1ef Fix init of ::Portal::Password::AD (#2735) 2022-03-31 09:51:17 +00:00
Maxime Besson
e1f6534bbe Add auth oidc hooks (#2730)
new hooks:
    oidcGenerateAuthenticationRequest
    oidcGenerateTokenRequest
    oidcGotIDToken
    oidcGotUserInfo
2022-03-18 11:59:10 +01:00
Maxime Besson
6d3f40b2fd add SAML Auth hook (#2730)
New hooks:
    samlGotAuthnResponse
    samlGenerateAuthnRequest
2022-03-18 11:58:28 +01:00
Maxime Besson
6ed0e9c1b4 Add session data to oidcGenerateUserInfoResponse (#2725) 2022-03-11 12:07:51 +01:00
Christophe Maudoux
c389c6d509 Update version & typos (#2714) 2022-03-06 11:45:36 +01:00
Christophe Maudoux
f6f9fe29cf Force reAuth from 2fManager (#2714) 2022-03-04 23:20:01 +01:00
Christophe Maudoux
50c312acc3 Avoid warning (#2716) 2022-03-04 23:15:09 +01:00
Christophe Maudoux
668b11b399 Typos 2022-03-03 23:29:48 +01:00
Christophe Maudoux
9c512f8e5b Test if a 2FA exists (#2716) 2022-03-03 23:05:19 +01:00
Yadd
fd610864ea Don't export id in Ajax response for authenticated users (#2709) 2022-03-03 18:55:02 +01:00
Christophe Maudoux
5c7a69e57b Fix warnings (#2704) 2022-02-19 11:30:45 +01:00
Christophe Maudoux
2d19df844f Doc typos & build tree 2022-02-16 22:03:56 +01:00
Yadd
b88a72c267 tidy 2022-02-16 17:43:29 +01:00
Yadd
c0472d41db Update version 2022-02-16 17:31:45 +01:00
Maxime Besson
af7abe8d19 Merge branch 'fix-webauthn-1411' into v2.0 2022-02-16 10:38:09 +01:00
Christophe Maudoux
5e285d5f60 Avoid useless warnings with OIDC 2022-02-12 22:42:03 +01:00
Christophe Maudoux
33d5c231b5 Typos & Doc 2022-02-12 22:18:32 +01:00
Christophe Maudoux
a1d3e159a3 Be more relevant (#2683) 2022-02-06 12:14:58 +01:00
Christophe Maudoux
5e3154b842 Merge branch 'v2.0' into 2683 2022-02-06 12:14:02 +01:00
Yadd
d3389a7370 Render getModule() usable with connected users (fixes: #2664) 2022-02-05 11:55:17 +01:00
Yadd
7b71a0c764 Always initialize groups and hGroups (Fixes: #2476) 2022-02-05 10:21:32 +01:00
Christophe Maudoux
67aaadf51b Merge branch 'v2.0' into 2683 2022-02-03 21:00:45 +01:00
Yadd
42f3697a06 Fix versions 2022-02-03 11:20:47 +01:00
Maxime Besson
e883860891 Add PE_PASSWORD_OK to stopping cases (#2660) 2022-02-03 11:13:25 +01:00
Yadd
bf463b82af Combination: clarify result values (#2660) 2022-02-03 11:13:25 +01:00
Yadd
27df15774d Fix stop() call (#2660) 2022-02-03 11:13:25 +01:00
Yadd
00bf4a0d1a Add default stop() method for all Auth modules 2022-02-03 11:13:25 +01:00
Yadd
0df2d6dd30 No more display stop() errors 2022-02-03 11:13:25 +01:00
Yadd
50f25a9116 Fix stop() debug (#2660) 2022-02-03 11:13:25 +01:00
Yadd
de79fc49b0 Reintroduce stop() method in LDAP/AD backends (#2660) 2022-02-03 11:13:25 +01:00
Yadd
efe0ad448f Combination: accept "stop()" from authentication backends (#2660) 2022-02-03 11:13:25 +01:00
Maxime Besson
bc684de4bb Improve LDAP error logs 2022-02-03 08:24:04 +01:00
Yadd
3f42113229 Remove double slashes in _pdata->{_url} + Don't overwrite $self-portal if already set (#2594) 2022-02-02 11:11:00 +01:00
Yadd
21f4ca1f35 [WAI] Add role for each message box (#2570) 2022-02-01 22:25:56 +01:00
Christophe Maudoux
ab512da539 Typos & #1877 2022-02-01 22:09:25 +01:00
Yadd
c3724a618f Fix versions 2022-02-01 17:09:31 +01:00
Christophe Maudoux
2ae9191e0a Fix DELETE session/my (#2689) & enable DELETE sessions/my only if globalLogout is on 2022-01-26 22:46:12 +01:00
Clément OUDOT
3c0f374c29 Merge branch 'v2.0' into issue-2673-CAS-multiple-service-URL 2022-01-23 16:41:18 +01:00
Christophe Maudoux
3ffb7aa607 Merge branch 'v2.0' into 2683 2022-01-22 21:19:42 +01:00
Clément OUDOT
e567eeb6db Allow mutliple URLs for CAS service (#2673) 2022-01-22 16:57:08 +01:00
Clément OUDOT
43d69aa3f0 Remove check on password hash in DBI (#2672) 2022-01-22 15:45:27 +01:00
Maxime Besson
fc2951a4b1 Fix U2F deletion (#1411) 2022-01-21 18:21:30 +01:00
Maxime Besson
825e213017 WebAuthn perl modules (#1411) 2022-01-21 18:10:57 +01:00
Maxime Besson
8cc84d9461 Missing openid scope should be an explicit error 2022-01-21 15:23:20 +01:00
Maxime Besson
09126d91fd Add optional encryption of new TOTP secret (#2625) 2022-01-20 15:39:13 +01:00
Maxime Besson
68a24ebb14 Merge branch 'fix-custom-2675' into 'v2.0'
Rework Custom plugins

See merge request lemonldap-ng/lemonldap-ng!239
2022-01-20 14:05:35 +00:00
Christophe Maudoux
344eae6f3e Merge branch 'v2.0' into 2683 2022-01-15 11:05:36 +01:00
Christophe Maudoux
0b5259ffad Improve code & append unit test (#2683) 2022-01-15 00:03:22 +01:00
Christophe Maudoux
bf5df4497f Merge branch '2686' into 'v2.0'
2686

See merge request lemonldap-ng/lemonldap-ng!242
2022-01-14 21:37:46 +00:00
Christophe Maudoux
a8f082120c Update version (#2686) 2022-01-14 22:21:57 +01:00
Christophe Maudoux
af683b6a7b Update doc (#2686) 2022-01-14 22:15:36 +01:00
Christophe Maudoux
e0be422cc6 Improve unit test (#2686) 2022-01-14 21:59:15 +01:00
Christophe Maudoux
322d0afc7a Cleaning code (#2686) 2022-01-14 21:17:57 +01:00
Maxime Besson
7b7fd1141d Fix SIGPIPE during LDAP validation (#2519) 2022-01-14 17:52:51 +01:00
Maxime Besson
8fc59823aa Merge branch 'fix-remember-login-2616' into 'v2.0'
Remember login when password fails

See merge request lemonldap-ng/lemonldap-ng!222
2022-01-14 16:42:17 +00:00
Maxime Besson
9e51f78089 Fix splitting CAS proxies (#2656) 2022-01-14 17:14:37 +01:00
Maxime Besson
d2a341191b Set lower TTL on CAS temporary tickets (#2654) 2022-01-14 17:14:37 +01:00
dcoutadeur dcoutadeur
b66613af31 Merge branch '2614-error-log-for-SOAP-SAML-message' into 'v2.0'
display precise error while sending direct SOAP SAML message (#2614)

See merge request lemonldap-ng/lemonldap-ng!220
2022-01-14 14:01:21 +00:00
Christophe Maudoux
987918b2ff Fix menu building (#2686) 2022-01-14 12:46:44 +01:00
Christophe Maudoux
87395937ab Append REST service for applications list (#2686) 2022-01-13 23:25:10 +01:00
Christophe Maudoux
31d3b93a7c Check rule at each step (#2683) 2022-01-12 22:42:46 +01:00
Christophe Maudoux
3b235dd082 Use rule to allow stayConnect plugin (#2683) 2022-01-12 22:19:28 +01:00
Christophe Maudoux
505f1a7527 Append LDAP exported vars & fix groups attribute (#2679) 2022-01-05 21:19:49 +01:00
Christophe Maudoux
18462d6113 Merge branch 'refresh_my_rights' into 'v2.0'
Refresh my rights

See merge request lemonldap-ng/lemonldap-ng!238
2022-01-05 18:10:32 +00:00
Maxime Besson
0b0bd5f183 Allow history fields to be hidden from display (#2609) 2022-01-05 17:14:02 +01:00
Maxime Besson
44cb0444fe Add field and accessor in portal for plugin session info (#2609) 2022-01-05 17:14:02 +01:00
Maxime Besson
85b12f7428 Fix module loading error reporting 2022-01-04 10:36:34 +01:00
Christophe Maudoux
78c4e2c412 Append Radius authentication unit test (#2663) 2022-01-02 22:56:46 +01:00
Christophe Maudoux
26b6feb39c Remove useless constant (#2458) 2022-01-02 22:55:55 +01:00
Christophe Maudoux
4dc12ccf7a Improve display (#2679) 2021-12-22 00:30:35 +01:00
Christophe Maudoux
d6f8f27d48 Append function to check attributes (#2679) 2021-12-22 00:22:23 +01:00
Christophe Maudoux
dcfcb9bc0a Parse rules to avoid bad expressions (#2668) 2021-12-21 19:27:40 +01:00
Maxime Besson
de1304b7fc Rework Custom plugins
See #2675, #2676 and #2677
2021-12-19 18:19:22 +01:00
Maxime Besson
0323813c38 Fix getDisplayType on choice + custom (#2678) 2021-12-19 18:19:22 +01:00
Maxime Besson
7048354cb6 Fix RelayState encoding in autoPost (#2671) 2021-12-15 17:24:22 +01:00
Christophe Maudoux
77e7575317 Discard maintenance mode with bad rules files & improve hidden attributes filtering (#2668) 2021-12-01 10:53:24 +01:00
Maxime Besson
bb380ee0e4 Add RP conf key to oidcGenerateUserInfoResponse hook (#2667) 2021-11-29 19:08:31 +01:00
Christophe Maudoux
0b12020d85 Update doc & regex (#1782) 2021-11-26 17:54:34 +01:00
Christophe Maudoux
33d28921d0 Fix init (#2663) 2021-11-24 14:12:48 +01:00
Christophe Maudoux
7d55202159 Append displayHiddenAttributes rule & update doc (#2662) 2021-11-24 14:00:46 +01:00
Maxime Besson
97328a85b2 Add version to CheckState plugin (#2661) 2021-11-23 12:01:06 +01:00
Christophe Maudoux
3959d4ae9d Merge branch 'v2.0' into refresh_my_rights 2021-11-22 21:26:30 +01:00
Christophe Maudoux
f583d5944b Keep authenticationLevel (#2658) 2021-11-22 20:40:34 +01:00
Christophe Maudoux
78e86497e8 Harmonize regex bis + doc & update unit tests (#2657) 2021-11-18 22:36:46 +01:00
Christophe Maudoux
4f2e337e66 Re-order refresh steps (#2658) 2021-11-17 10:03:45 +01:00
Christophe Maudoux
5ffd909d7d Harmonize regex (#2657) 2021-11-16 22:45:25 +01:00
Christophe Maudoux
213e58b572 Merge branch '2655' into 'v2.0'
Impersonation is the last loaded plugin (#2655)

See merge request lemonldap-ng/lemonldap-ng!236
2021-11-11 08:53:54 +00:00
Christophe Maudoux
4d7b11c812 Syntax 2021-11-10 23:09:28 +01:00
Christophe Maudoux
f03ef36fd6 Impersonation is the last loaded plugin (#2655) 2021-11-10 22:37:52 +01:00
Christophe Maudoux
0181f9374f Update doc & typos (#2591) 2021-10-30 10:56:04 +02:00
Christophe Maudoux
692b550e19 Append an option to disable fingerprint checking (#2591) 2021-10-30 00:21:48 +02:00
Christophe Maudoux
d54c897580 Syntax 2021-10-29 23:03:45 +02:00
Christophe Maudoux
c8464136d7 Syntax & tidy 2021-10-29 23:00:34 +02:00
Christophe Maudoux
773364d279 Remove useless init method (#2649) 2021-10-29 23:00:05 +02:00
Christophe Maudoux
01ef4c98d8 Merge branch 'v2.0' into CheckUser_history 2021-10-29 16:28:25 +02:00
Maxime Besson
beb2fa69df Only run init method when it exists for portal plugins (#2649) 2021-10-28 17:09:25 +02:00
Maxime Besson
fe4172a50a Change invalid_scope http code to 400 (#2622) 2021-10-27 00:17:28 +02:00
Christophe Maudoux
91854b09d4 Merge branch 'v2.0' into CheckUser_history 2021-10-26 23:48:35 +02:00
Christophe Maudoux
64e13cd532 Syntax 2021-10-26 23:47:49 +02:00
Maxime Besson
a0af787c97 Tidy Portal::Init 2021-10-26 23:17:27 +02:00
Maxime Besson
b21500122d Fix #2622 2021-10-26 16:53:24 +02:00
Maxime Besson
8cfab558c7 Improve detection of SAML Artifact response type (#2648) 2021-10-26 11:44:26 +02:00
Christophe Maudoux
297b6fa5b7 Display logins history with CheckUser plugin 2021-10-24 23:13:24 +02:00
Christophe Maudoux
c14b5c6219 Append all BruteForce parameters into Manager (#2646) 2021-10-23 22:27:25 +02:00
Yadd
b5b8f3203c Spelling errors reported by lintian 2021-10-09 09:13:35 +02:00
Christophe Maudoux
dea7b235b1 Tidy & update version 2021-10-07 22:38:23 +02:00
Maxime Besson
22a0f1c013 Initialize PATCH routes (#2626)
This prevents the following message from appearing when the portal fails
to initialize

Conflict detected between 2 extensions, aborting 1 route
2021-10-07 08:50:47 +02:00
Maxime Besson
806ef6c1ed add warning when SAML user attribute was not found 2021-10-07 08:50:47 +02:00
Christophe Maudoux
64d55b6a93 Mark mandatory fields & Improve unit test (#1976) 2021-10-02 22:35:14 +02:00
Christophe Maudoux
2d0ec20c18 Append information in doc about afterData entry point (#2598) 2021-10-01 23:04:43 +02:00
Christophe Maudoux
ed56a171b9 Tidy (#2620) 2021-09-30 23:13:04 +02:00
Maxime Besson
24a989aa67 Remove unused method in Net::LDAP (#2620) 2021-09-29 11:43:19 +02:00
Maxime Besson
cc08c992c4 Merge branch '2620-ppolicy-binding-v2.0' into 'v2.0'
add more logs for ldap binding (ppolicy extended response code) + remove loadPP (#2620)

See merge request lemonldap-ng/lemonldap-ng!227
2021-09-29 09:36:58 +00:00
dcoutadeur dcoutadeur
ebb764a3c5 add more logs for ldap binding (ppolicy extended response code) + remove loadPP (#2620) 2021-09-29 09:36:58 +00:00
Alexandre KARIM
bcb3d9ad26 Fix sorting for Finduser plugin 2021-09-24 16:27:19 +02:00
Christophe Maudoux
a7467b1d15 Fix version (#2605) 2021-09-23 21:27:05 +02:00
Maxime Besson
6302c957cc Add SAMESITE template param (#2605) 2021-09-23 17:44:52 +02:00
Christophe Maudoux
a4e15ad9a9 Set sameSite value for llnglanguage cookie (#2605) 2021-09-23 17:38:44 +02:00
Christophe Maudoux
9b50811f5e Test if Safe jail is enabled (#2617) 2021-09-19 23:24:36 +02:00
Maxime Besson
35b3cb8c28 Use distinct error codes in Auth::OIDC (#2558) 2021-09-15 19:21:47 +02:00
Maxime Besson
d8eb44a5ab Add portal status codes for Auth::OIDC errors (#2558) 2021-09-15 19:21:47 +02:00
Maxime Besson
8aa3e65137 Remember login across authentication attempts (#2616) 2021-09-15 14:00:31 +02:00
David Coutadeur
2c62720c43 display precise error while sending direct SOAP SAML message (#2614) 2021-09-13 10:32:07 +02:00
Christophe Maudoux
d51877a40d Code refactoring 2021-09-10 22:40:33 +02:00
Christophe Maudoux
1901ef8232 Spit Remote and Proxy Auth cookie name parameter (#2613) 2021-09-10 22:40:11 +02:00
Maxime Besson
66946e8f75 Fix auth process in password-testing plugins (#2611) 2021-09-10 17:12:13 +02:00
Maxime Besson
83e95cd053 Update unit tests (#2611) 2021-09-10 17:12:13 +02:00
Christophe Maudoux
7d40d917af Improve logout message (#2600) 2021-09-09 14:54:40 +02:00
Christophe Maudoux
b66798d159 Test cookieName & Improve code + unit test (#2600) 2021-09-09 14:28:06 +02:00
Christophe Maudoux
258e4fe731 Test URIs (#2600) 2021-09-08 22:10:45 +02:00
Alexandre KARIM
aa0db663c6 Merge branch 'v2.0' into 2600 2021-09-08 17:26:09 +02:00
Alexandre KARIM
0c33da8cdc Lang, Doc, Sort Tree & Tests(#2600 #2601) 2021-09-08 16:41:53 +02:00
Maxime Besson
6806864872 Expose risk level to other plugins (#2593) 2021-09-06 17:50:10 +02:00
Maxime Besson
f297492703 Make new location plugin more generic (#2325) 2021-09-06 17:40:04 +02:00
Alexandre KARIM
d8c512547a Test & code refactoring(#2601) 2021-09-06 17:10:55 +02:00
Alexandre KARIM
ad1244f272 Append spoofId parameter (#2601) 2021-09-06 14:18:10 +02:00
Alexandre KARIM
6b85a85026 Append ChoiceParam & ChoiceValue (#2600) 2021-09-06 10:47:06 +02:00
Alexandre KARIM
977a185fcc Merge branch 'v2.0' into 2325 2021-09-02 12:05:19 +02:00
Christophe Maudoux
eab4d4a31e Append an option to normalize headers & Improve unit tests + doc (#2604) 2021-09-01 21:48:10 +02:00
Maxime Besson
5ea7a0916d Add _oidc_grant_type variable (#2602) 2021-09-01 17:32:15 +02:00
Alexandre KARIM
9bcdf37384 Merge branch 'v2.0' into 2325 2021-08-31 09:50:49 +02:00
Yadd
3ed77a01c2 Add buildurl method (#2594) 2021-08-27 14:35:07 +02:00
Maxime Besson
a489e4a76b Fix open redirection issue in CAS (#2596) 2021-08-26 18:03:35 +02:00
Maxime Besson
cf3d884a77 Inform templates when mail/register URLs are external (#2597) 2021-08-26 17:50:37 +02:00
Alexandre KARIM
52ed859c4e Update version #2325 2021-08-25 14:37:23 +02:00
Alexandre KARIM
cd72d00ef8 Subject & deduplicate history IP #2325 2021-08-25 14:28:15 +02:00