dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
12,298 Commits 3 Branches 0 Tags 75 MiB
ccb898f24a
Commit Graph

3234 Commits

Author SHA1 Message Date
Clément Oudot
539f241725 Generate at_hash in ID Token for implicit flow (#184) 2015-03-19 17:04:13 +00:00
Clément Oudot
c3cb985323 Manage access token hash in RP (#183) 2015-03-19 15:28:58 +00:00
Clément Oudot
4e7f4eb85e Use nonce in Authentication Code Flow (#184) 2015-03-17 12:56:11 +00:00
Clément Oudot
89e3678bdf Manage OIDC Implicit Flow (#184) 2015-03-17 11:01:11 +00:00
Clément Oudot
33bc52b619 Skeleton to manage different OIDC response types (#184) 2015-03-16 17:00:56 +00:00
Clément Oudot
71bc645d51 Authentication Context in ID Token (#184) 2015-03-13 12:54:04 +00:00
Clément Oudot
23b2c6f996 Configure Access Token expiration (#184) 2015-03-13 11:09:39 +00:00
Clément Oudot
74958870bb Auth time and expiration in ID Token (#184) 2015-03-13 10:54:36 +00:00
Clément Oudot
6d6d7e6424 Fix typo on Relying Party (#184) 2015-03-11 16:24:10 +00:00
Clément Oudot
167fdb66c4 Possibility to configure attribute used to fill OIDC User ID (#184) 2015-03-11 16:16:37 +00:00
Clément Oudot
55fe1a5ec8 Refactor code that build authz response (#184) 2015-03-11 15:47:24 +00:00
Clément Oudot
ca146c7525 Remove unused imports (#184) 2015-03-11 15:07:00 +00:00
Clément Oudot
f3dcec7ad7 Display user friendly messages for scope consent (#184) 2015-03-11 14:34:31 +00:00
Clément Oudot
495da0dde5 Check accepted scope in consent step (#184) 2015-03-11 13:53:58 +00:00
Clément Oudot
2d015ebdcd Possibility to change backend for OIDC sessions (#184) 2015-03-11 11:39:20 +00:00
Clément Oudot
6f128235af Set version 2.00 in the trunk 2015-03-11 09:05:04 +00:00
Clément Oudot
7a7bb1fbda make tidy on all files 2015-03-10 15:07:33 +00:00
Clément Oudot
a31663cf38 Delete captcha session only when authentication process is finished (#788) 2015-03-09 16:44:19 +00:00
Xavier Guimard
53e41d145c Auth modules must be set 2015-03-09 15:55:46 +00:00
Clément Oudot
ef4af6b3f2 ID Token signature configuration (#184) 2015-02-19 18:04:29 +00:00
Clément Oudot
d1d97d16c3 Set _utime in OIDC sessions (#184) 2015-02-19 15:17:49 +00:00
Clément Oudot
68607ca947 Implement UserInfo endpoint (#184) 2015-02-04 13:25:13 +00:00
Clément Oudot
968f0e065a Check authentication on token endpoint (#184) 2015-02-02 09:44:33 +00:00
Clément Oudot
9f69f03b09 Store scope in access token session (#184) 2015-01-31 15:17:56 +00:00
Clément Oudot
31e0a1cfb5 Obtain user consent for OpenID Connect requested scope (#184) 2015-01-31 14:34:52 +00:00
Clément Oudot
3c3cc39d0c Check sub of UserInfo JSON (references #183) 2015-01-31 14:33:05 +00:00
Clément Oudot
e6ae3b9925 Restore hidden form values (#184) 2015-01-29 13:32:31 +00:00
Clément Oudot
0be124d3d7 Prevent reuse of authorization code (#184) 2015-01-28 16:53:06 +00:00
Clément Oudot
70281de82d Add some debug logs (#184) 2015-01-28 13:41:10 +00:00
Clément Oudot
39b83ae46a OpenIDConnect Service metadata parameters in Manager (#184) 2015-01-28 13:07:11 +00:00
Clément Oudot
2abb7fafde Check that RP is registered (#184) 2015-01-23 13:06:54 +00:00
Clément Oudot
b82153ab17 Start implementation of OpenID Connect provider (#184) 2015-01-20 10:04:44 +00:00
David COUTADEUR
a82d36a794 Fix LEMONLDAP-784: https://jira.ow2.org/browse/LEMONLDAP-784 
reset password in AD not working
 2015-01-08 17:05:40 +00:00
Clément Oudot
7e74e27a3b Autoselect OP if only one is configured (#183) 2014-12-15 14:58:42 +00:00
Clément Oudot
922b92bbbe Configuration of OpenID Connect auth module and OP in Manager (#183) 2014-12-15 13:55:23 +00:00
Clément Oudot
18072723de Compatibility with AuthChoice (#183) 2014-12-11 17:05:33 +00:00
Clément Oudot
8b7ad81ff5 Add first OpenID Connect RP parameters in Manager (#183) 2014-12-11 16:54:27 +00:00
Clément Oudot
0014e2cdaf Invalidate CAS Service Ticket when it is used (#775) 2014-12-05 09:21:07 +00:00
Clément Oudot
8b1ea19725 Possibility to define a background image for portal skin (#770) 2014-12-02 14:51:23 +00:00
Clément Oudot
eea1fedd3c Better look of OpenID Provider list (#183) 2014-12-01 17:07:55 +00:00
Clément Oudot
44c64ea606 Manage refresh of JWKS data (#183) 2014-12-01 10:27:47 +00:00
Clément Oudot
c5ad64e694 Try to fix build #491 (#183) 2014-11-24 08:39:16 +00:00
Clément Oudot
c09d2c4e00 Check ID Token validity (#183) 2014-11-22 08:53:17 +00:00
Clément Oudot
ee43c5010f Check token response validity (references #183) 2014-11-22 08:46:41 +00:00
Clément Oudot
c0b7af29b8 Support client_secret_basic and client_secret_post for token endpoint authentication (references #183) 2014-11-21 17:15:47 +00:00
Clément Oudot
bc6920dd03 Check error in authn response (#183) 2014-11-21 10:32:35 +00:00
Clément Oudot
6ba3d9e44e Manage exported vars per OP (#183) 2014-11-20 15:53:26 +00:00
Clément Oudot
687f0ed094 Change configuration format to allow to define several OP (#183) 2014-11-20 14:03:32 +00:00
Clément Oudot
74a7770fa4 Use extractJWT method (#183) 2014-11-20 09:11:55 +00:00
Clément Oudot
53aab6d3c0 Verify JWT signature for RS256/RS384/RS512 alg (#183) 2014-11-19 14:17:39 +00:00
Clément Oudot
ab1e318149 Add support for HS368 and HS512 JWT signature alg (#183) 
Get OpenID configuration data from configuration URI (#183)
 2014-11-19 11:09:37 +00:00
Clément Oudot
5a09c04445 Add some log to JWT signature verification (#183) 2014-11-18 14:32:15 +00:00
Clément Oudot
27225cfe86 Option to check JWT Signature (#183) 2014-11-18 14:24:03 +00:00
Clément Oudot
2a33f67155 Verify JWT signature for HS256 alg (#183) 2014-11-17 18:09:55 +00:00
Clément Oudot
3cde211810 Save/restore state in OpenID Connect RP (#183) 2014-11-17 13:55:26 +00:00
Clément Oudot
c64f69a852 Use eval to decode JSON content (#183) 2014-11-14 16:53:56 +00:00
Clément Oudot
914fe20eb5 Create OpenIDConnect library (#183) 2014-11-14 16:18:50 +00:00
Clément Oudot
2ff2d0e01a First version of OpenIDConnect RP module (#183) 2014-11-14 14:29:55 +00:00
Clément Oudot
5bb0f01de4 Manage vhost aliases in portal menu (#755) 2014-11-03 17:07:47 +00:00
Clément Oudot
2af54acd97 Do not call data on undefined session object (#762) 2014-10-27 11:19:25 +00:00
Clément Oudot
2a343dff84 Fix TODO by using autoRedirect (#753) 2014-08-21 12:22:10 +00:00
Clément Oudot
7e517cbdd0 Do not hardcode OpenID server path (#753) 2014-08-21 12:19:12 +00:00
Clément Oudot
df926b3429 Fix OpenID Issuer with new Net::OpenID::Server version (#753) 2014-08-21 11:49:56 +00:00
Clément Oudot
3b947a0bb3 Add portal in trusted hosts (#752) 2014-08-19 10:05:15 +00:00
Clément Oudot
f97f5c72e0 make tidy 2014-07-24 15:48:32 +00:00
Clément Oudot
e011600113 Show error from Common::Session module in logs (#741) 2014-07-24 15:37:12 +00:00
Clément Oudot
ee1918fe21 Keep default value in condition if no notOnOrAfter timeout configured (#737) 2014-07-21 10:48:36 +00:00
Clément Oudot
15835e1e02 Possibility to configure conditions notOnOrAfter (#737) 2014-07-21 10:46:01 +00:00
Clément Oudot
b4bda626de Possibility to configure subjectConfirmation notOnOrAfter (#737) 2014-07-21 10:42:16 +00:00
Clément Oudot
757ac6f15d Possibility to configure sessionNotOnOrAfter (#737) 2014-07-21 09:44:28 +00:00
Clément Oudot
9bc097dd21 Compatibility of SSL modules with SOAP getCookies (#719) 2014-07-15 13:41:27 +00:00
Clément Oudot
93cc4a9f70 Rebind as manager after password change in order to read groups (#725) 2014-07-09 13:56:58 +00:00
Clément Oudot
f21184a59c Call authInit in MailReset to get the authentication choice (#664) 2014-06-25 12:58:15 +00:00
Clément Oudot
b72d79a30b Better connection management (#663, #LEMONLDAP-664): 
- Create userDBFinish, passwordDBFinish and registerDBFinish methods
- Call finish methods for each backend in process
- Call LDAP unbind only when necessary
- Unbind if error in RegisterDBLDAP
 2014-06-25 11:53:09 +00:00
François-Xavier Deltombe
70ec1d03cb Refactor LL::NG::Handler::Specific::AuthBasic (#630) 2014-06-25 10:01:17 +00:00
Clément Oudot
941c27631c Disconnect from LDAP when error occurs, and enable cache management even with Multi backend (#664) 2014-06-23 12:45:27 +00:00
Clément Oudot
1b6655a431 Delete captcha session when check is done, and add captcha backend in purgeCentralCache script (#703) 2014-06-11 10:22:34 +00:00
Clément Oudot
473cd6c9dc Use a session backend to manage captcha (#703) 2014-06-10 16:21:33 +00:00
Clément Oudot
dbfbde2e9f make tidy 2014-06-08 10:04:50 +00:00
Clément Oudot
50b80020da Port memory leak fix to 1.4 branch (#708) 2014-06-06 10:04:14 +00:00
Clément Oudot
d61cd6a6de Make Register work with AuthChoice (#26) 2014-06-06 09:54:48 +00:00
Xavier Guimard
c96e281fee Avoid potential circular references 2014-06-05 18:05:55 +00:00
Clément Oudot
f6cad5438c Test if password was auto generated before displaying it in the mail (#675) 2014-06-03 08:13:24 +00:00
Clément Oudot
066f52caba Fix use of ipAddr in Register (#26) 2014-06-02 13:56:20 +00:00
Clément Oudot
ba9fa72c1e AD register module (#26) 2014-06-02 10:24:05 +00:00
Clément Oudot
9629d3a500 Fix login generation (#26) 2014-06-02 10:12:05 +00:00
Clément Oudot
a5b7cd030c Register mail in LDAP (#26) 2014-06-02 10:08:32 +00:00
Clément Oudot
2e9033d28b Add a button on login page to register page (#26) 2014-05-30 12:21:53 +00:00
Clément Oudot
524fab0b3a RegisterDB LDAP is complete (#26) 2014-05-29 08:12:33 +00:00
Clément Oudot
9b10d96341 Fix unit tests after introducing RegisterDB (#26) 2014-05-29 07:38:50 +00:00
Clément Oudot
81dbe943c3 Introduce RegisterDB modules (#26) 2014-05-28 16:23:23 +00:00
Clément Oudot
2fe20b1248 Isolate register info in ->{registerInfo} (#26) 2014-05-28 15:41:32 +00:00
Clément Oudot
be04271809 Work on Register feature (#26) 2014-05-27 16:31:43 +00:00
Clément Oudot
66c93ec387 Manage already existing accounts in Register (#26) 2014-05-27 13:42:00 +00:00
Clément Oudot
57182767f4 Some error codes for Register (#26) 2014-05-26 16:25:33 +00:00
Clément Oudot
5ce762e9e3 Work on Register page (#26) 2014-05-23 18:47:36 +00:00
Clément Oudot
0f963e0b2a Remove default value from MailReset (LEMONLDAP-686) 2014-05-23 18:44:20 +00:00
Clément Oudot
233026eb6f Fix password change as user for AD (#704) 2014-05-21 12:43:04 +00:00
Clément Oudot
9d6a947499 Specific behaviour for AD password change if it's done as user (#407) 2014-05-14 09:43:10 +00:00
Clément Oudot
d28a7bb217 Update versions to 1.4.0 2014-04-17 15:20:28 +00:00
Clément Oudot
1cfdd9fb6e Use new Session module in SAML authentication (#671, #LEMONLDAP-700) 2014-04-17 10:24:31 +00:00
Clément Oudot
e056a0427a Use new Session module in SAML Issuer (#671, #LEMONLDAP-700) 2014-04-17 10:16:33 +00:00
Clément Oudot
929c704343 Use new Session module in CAS Issuer (#671) 2014-04-16 15:19:59 +00:00
Clément Oudot
76c1ba75b9 Use new Session module in Remote (#671) 2014-04-15 16:09:56 +00:00
Clément Oudot
00bf404a0a Use new Session module in AuthGoogle (#671) 2014-04-15 15:34:21 +00:00
Clément Oudot
a232f149fa Optimize session update in sub store (#671, #LEMONLDAP-673) 2014-02-26 17:10:39 +00:00
Clément Oudot
900008c942 Use the new Common::Session module in portal for SSO sessions (#671, #LEMONLDAP-673) 2014-02-26 10:57:49 +00:00
Clément Oudot
c1cb7316d1 Create a Store object for Common::Apache::Session in order to manage cache directly (#671) 2014-02-21 16:38:57 +00:00
Clément Oudot
ab4dfe1100 Manage exported variables for OpenID (#636) 2014-02-19 15:10:21 +00:00
Clément Oudot
68dda1b256 Manage exported variables for Facebook (#636) 2014-02-19 14:57:47 +00:00
Clément Oudot
9f170b9767 Manage exportedVars the same way in all modules (#636) 2014-02-19 14:35:59 +00:00
Clément Oudot
580d88cbc7 Manage exported variables for Google (#636) 2014-02-19 13:56:35 +00:00
Clément Oudot
49bae05c40 Manage exported variables for Slave (#636) 2014-02-18 16:52:31 +00:00
Clément Oudot
c4f277c8c8 Manage exported variables for WebID (#636) 2014-02-18 16:34:08 +00:00
Clément Oudot
7b9a5b1887 Use ldapExportedVars in AuthAD (#636) 2014-02-18 16:05:39 +00:00
Clément Oudot
cb67ac1e61 Manage exported variables for DBI (#636) 2014-02-18 15:17:09 +00:00
Clément Oudot
cb6df779be Manage exported variables for LDAP (#636) 2014-02-18 14:53:07 +00:00
Clément Oudot
18b337723d Default values for Portal all managed in Common (#686) 2014-02-14 09:00:12 +00:00
Clément Oudot
2630d09d72 Work on default values for Portal (#686) 2014-02-14 08:26:25 +00:00
Clément Oudot
f7bcf5b711 Manage exported variables for Demo backend (#636) 2014-02-11 17:15:05 +00:00
Clément Oudot
2ee3f6d5a6 Possibility to force session key use to fill NameID (#657) 2014-02-10 09:14:06 +00:00
Clément Oudot
40513f75d9 Add an option to enable IDP initiated SSO for a SP (#208) 2014-02-09 21:32:11 +00:00
Clément Oudot
3f7bb4b9d2 IDP Initiated (#208): 
* Fix IDP initiated workflow when the user is not connected
* Possibility to use spConfKey in URL
 2014-02-07 22:28:45 +00:00
Clément Oudot
c4b207b73a Possibility to set ping interval in portal (#658) 2014-02-07 10:17:45 +00:00
Clément Oudot
41b327e78a Bootstrap is now the default theme (#670) 2014-02-05 16:39:40 +00:00
François-Xavier Deltombe
45ef54dccc Get CDA working in http with "double cookie for single session" (Lemonldap-680) 2014-01-31 14:11:39 +00:00
Clément Oudot
23627081c8 Specific query string method to be compatible with buggy ADFS URL encoding (#677) 2014-01-29 15:48:44 +00:00
Clément Oudot
c9c483b04b make tidy 2014-01-17 22:42:21 +00:00
Clément Oudot
71d9ad4f59 Use userControl and not XSS check to validate username (#666) 2014-01-17 22:32:18 +00:00
Clément Oudot
fc61240345 Display ppolicy info messsages only if authentication is valid (#669) 2014-01-17 22:24:11 +00:00
Clément Oudot
6fd8f5cb49 Manage encrypt scheme in DBI password backend (#654) 2013-12-20 16:46:09 +00:00
Clément Oudot
8ed6bdfdeb Fix use of check_password in DBI backend (#655) 2013-12-09 17:03:50 +00:00
Clément Oudot
122836e820 remote provider ID is available only after request parsing (#208) 2013-11-26 14:35:58 +00:00
Clément Oudot
db5b4e8a95 Possibility to use IDP initiated mode in SAML IDP module (#208) 2013-11-25 17:04:39 +00:00
Clément Oudot
7087b63614 Do not check captcha if mail session already exist (#644) 2013-11-07 14:02:06 +00:00
Clément Oudot
bf3cf444fb Special workaround in AuthChoice for captcha (#645) 2013-11-06 16:33:26 +00:00
Clément Oudot
fb82ce9522 Call initCaptcha at the right time (#643) 2013-11-06 15:56:52 +00:00
Clément Oudot
f38607a763 Allow to use idpName parameter to select IDP (#641) 2013-11-05 11:12:36 +00:00
Clément Oudot
9732aa4c24 Fix module version (failure in PAUSE indexer after 1.3.0 publication in CPAN) - origin commit: r2593 2013-11-02 18:12:02 +00:00
Clément Oudot
6649edf9a9 Fix some portal items after jQuery migration (#604) 2013-10-28 17:32:41 +00:00
Xavier Guimard
d45d26abad Very strange utf8 bug using FCGI solved by this hook 2013-10-24 19:06:47 +00:00
Clément Oudot
ce581e75e9 Add a specific timeout parameter for SAML RelayState sessions (#524) 2013-10-24 12:35:58 +00:00
Xavier Guimard
2e7fe44098 Some cosmetics changes 2013-10-22 16:48:02 +00:00
Clément Oudot
3106100c5d Possibility to autoconfigure LDAP notification backend from LDAP configuration backend (#457) 2013-10-22 16:26:20 +00:00
Xavier Guimard
fdb545ca69 Add "useLocalConf" parameter for the portal to increase performances 
Closes: #628
 2013-10-22 12:02:44 +00:00
Xavier Guimard
e174ff4732 FastCGI portal 2013-10-21 21:24:03 +00:00
Xavier Guimard
1fc09658d8 Missing constants in @EXPORT 2013-10-21 18:55:48 +00:00
Xavier Guimard
0829a57f2e Use UTF-8 encoding in all Perl files 2013-10-19 16:34:20 +00:00
Xavier Guimard
a9c201476f Correct bug introduced by r2981, authenticate() must not call AuthSSL::authenticate() 2013-10-18 04:44:11 +00:00
Xavier Guimard
2b5de50614 Modify r2981 changes: now authenticate() launch extractFormInfo() if auth isn't done 2013-10-18 04:42:56 +00:00
Xavier Guimard
f29d3b563e s/utf8/utf-8/ in HTTP headers 
Closes: #626
 2013-10-17 19:21:45 +00:00
Clément Oudot
b8d4429843 Sub getDisplayType must be in the module to work with AuthChoice (#623) 2013-10-14 13:10:22 +00:00
Xavier Guimard
954a9fe5d5 Modify authenticate() to be sure that SSL authentication has been done 
See: http://mail.ow2.org/wws/arc/lemonldap-ng-dev/2013-10/msg00018.html
 2013-10-14 09:46:07 +00:00
Xavier Guimard
316589f044 Remove "experimental module" comment 2013-10-13 13:48:44 +00:00
Xavier Guimard
61e68ae5d8 UserDBWebID seems to be finished 2013-10-13 12:33:24 +00:00
Xavier Guimard
d7b33f9e8f AuthWebID seems to be ready... 2013-10-13 12:15:54 +00:00
Xavier Guimard
ffda037c52 Use user* methods instead of lmLog for user actions (can be put in syslog) 2013-10-13 12:15:01 +00:00
Xavier Guimard
01ae2b697d Split tests: certificate can exist without having wanted attribute 2013-10-13 12:13:48 +00:00
Xavier Guimard
f349e998a0 Add POD 2013-10-13 06:44:56 +00:00
Xavier Guimard
8873d7ee23 WebID in progress (host white list, more checks,...) 2013-10-13 06:42:28 +00:00
Xavier Guimard
68ee3ec21a UserDBWebID skeleton 2013-10-13 06:40:45 +00:00
Xavier Guimard
5c1973d225 AuthWebID skeleton 2013-10-12 11:45:55 +00:00
Xavier Guimard
da41295b76 More comments 2013-10-11 18:59:18 +00:00
Clément Oudot
4d03b75951 Catch Facebook error_code to avoid infinite redirection loop (#619) 2013-10-11 12:21:18 +00:00
Clément Oudot
58912e335c Add URL in AuthChoice, to post form on another vhost (#291) 2013-10-11 09:01:54 +00:00
Xavier Guimard
e14824c57f make tidy 2013-10-09 19:37:51 +00:00
Clément Oudot
6b3ddd92ef TODO or not TODO, that's the question (#LEMONDAP-584) 2013-10-08 14:23:02 +00:00
Clément Oudot
e0b2a25cab Hide some attributes in logs and in session explorer (#612) 2013-10-08 14:16:46 +00:00
Clément Oudot
812bd51554 Change bad credentials error (#LEMONDAP-584) 2013-10-08 14:15:17 +00:00
Xavier Guimard
d4210f0fe8 In french: "boulette"... 2013-10-08 10:30:14 +00:00
Xavier Guimard
092bed086e Clean ua() usage 2013-10-08 04:59:24 +00:00
Xavier Guimard
bb4e4668e5 Centralize LWP::UserAgent in one file. 2013-10-08 04:35:38 +00:00
Xavier Guimard
d83c429df1 Little cosmetic change 2013-10-05 16:05:37 +00:00
Xavier Guimard
f560331059 Facebook auth and userDB modules may work fine now 2013-10-05 16:00:10 +00:00
Xavier Guimard
be083d33e3 auth module may contains parameters 2013-10-05 15:59:18 +00:00
Xavier Guimard
1c35cedc0a Add inheritance comments for Doxygen doc 2013-10-05 15:55:06 +00:00
Xavier Guimard
065c34d609 Set user to Facebook username 2013-10-05 12:59:55 +00:00
Xavier Guimard
f5049773c7 AuthFacebook in progress: 
* works fine for authentication
 * TODO: build $self->{user} and get datas
 2013-10-05 05:54:07 +00:00
Xavier Guimard
5ca5345f6e Starting #619 2013-10-03 19:56:02 +00:00
Xavier Guimard
d29b24e589 Clean AuthGoogle 2013-10-03 19:55:14 +00:00
Clément Oudot
1935000579 Manage vhost aliases (#558) 2013-10-03 09:09:47 +00:00
Clément Oudot
cf2d6822c7 Change version of UserDBGoogle module (#615) 2013-10-03 08:28:41 +00:00
Xavier Guimard
0909f6cf2f Move regexps into Common 2013-10-03 04:18:16 +00:00
Xavier Guimard
ea6f91e656 Force redirection to avoid displaying OpenID datas 2013-10-02 19:45:33 +00:00
Xavier Guimard
8869b04cde May close the bug revealed in LEMONLDAP-615#comment-01-oct-13 2013-10-02 11:42:57 +00:00
Clément Oudot
b7af9ae92c Ignore error when loading SAML module in AuthChoice (#618) 2013-10-01 12:50:48 +00:00
Clément Oudot
9758223da8 For BrowserID (#584): 
* Add autologin parameter
* Add a form in standard mode (not Choice) for display type logo
* Use POST instead of REDIRECT to keep all hidden fields
* Fix warning in unit test
 2013-09-30 14:37:15 +00:00
Clément Oudot
699c858796 Change Google display type to logo (#615) 2013-09-30 14:33:38 +00:00
Clément Oudot
3d7d1bfae5 Specify getDisplayType subroutine in AuthAD to work with AuthChoice (#409) 2013-09-30 08:38:24 +00:00
Xavier Guimard
059641f7a8 Store session datas directly + comments 2013-09-29 18:09:38 +00:00
Xavier Guimard
ba6e7667da Remove Google form, automatic now 2013-09-29 18:08:21 +00:00
Xavier Guimard
106de86477 Just for aesthetical 2013-09-29 18:06:54 +00:00
Xavier Guimard
187bbe9efa Little regexp change 2013-09-29 16:43:15 +00:00
Xavier Guimard
41105ae772 Implement persistent cache for already shared datas (AuthGoogle) 2013-09-29 16:26:41 +00:00
Xavier Guimard
93e026b1ad Add UserDBGoogle 2013-09-29 07:09:32 +00:00
Xavier Guimard
bb3c9bfac1 Correct errors in Google form 2013-09-28 06:17:12 +00:00
Xavier Guimard
f1a1c5e036 Update $VERSION 2013-09-28 05:41:37 +00:00
Clément Oudot
a731fbf66c Manage reset at next logon message from AD (#513, #LEMONLDAP-409) 2013-09-27 22:22:27 +00:00
Xavier Guimard
5a6054c396 Starting LEMONLDAP-615: Add AuthGoogle module 2013-09-27 19:34:31 +00:00
Clément Oudot
dd0629f0a1 Load session content in error page to apply skin rules if needed (#605) 2013-08-23 13:34:37 +00:00
Clément Oudot
e628c703f5 Fix loading of alternate config file (#608) 2013-08-23 12:59:03 +00:00
Clément Oudot
e33ee53afc Create a getSkin() method to share skin rules in all portal pages (#605) 2013-08-20 13:36:06 +00:00
Clément Oudot
ec35b64736 Update ENV variable for each request in Safe jail (#597) 2013-07-25 13:13:48 +00:00
Xavier Guimard
6447bce9bd Missing space after ":" 2013-07-22 02:40:57 +00:00
Clément Oudot
37756c3be2 Store BrowserID verification answer in session (#584) 2013-07-21 18:53:02 +00:00
Clément Oudot
ec0d1a61f0 Give reason in log when assertion verification fails (#584) 2013-07-21 18:35:02 +00:00
Clément Oudot
d3a53e199a Possibility to customize BrowserID login window (#584) 2013-07-20 09:07:19 +00:00
Clément Oudot
5d6239587b Move assertion resolution in extractFormInfo to pass found user to a userDB module (#584) 2013-07-20 08:35:13 +00:00
Clément Oudot
d3c53c2235 First implementation of BrowserID authentication module (#584) 2013-07-17 13:46:59 +00:00
Xavier Guimard
53e8d74758 make tidy 2013-07-17 06:32:29 +00:00
Sandro Cazzaniga
201b609e7d make tidy 2013-06-28 09:13:00 +00:00
Clément Oudot
6bd108f780 Force password reset for AD (#513) 2013-06-02 22:00:33 +00:00
Clément Oudot
15d520c304 Manage default value for mailLDAPFilter (#513) 2013-06-02 21:53:11 +00:00
Clément Oudot
c8f8e78546 Modify password for Active Directory (#513) 2013-06-01 13:40:29 +00:00
Sandro Cazzaniga
da268cff7f make the error message in case of bad load of Lasso module a bit more readable 2013-05-31 06:16:26 +00:00
Sandro Cazzaniga
7462ff467d make tidy 2013-05-30 14:41:02 +00:00
François-Xavier Deltombe
063692540c Slight changes in captcha error messages (#217) 2013-05-23 19:33:07 +00:00
François-Xavier Deltombe
3c81802f3c Continuation of commit r2833 (#596) 
so that a group rule may involve another, previously computed group
 2013-05-21 09:34:01 +00:00
François-Xavier Deltombe
3909d708d1 Compute macros and local groups in alphabetical order (#596) 2013-05-21 08:18:03 +00:00
Clément Oudot
355dcff030 make tidy 2013-04-28 14:46:18 +00:00
Clément Oudot
a6f10e15eb First implementation of Active Directory module (#409 and #LEMONLDAP-513) 2013-04-28 14:44:03 +00:00
Clément Oudot
4ed5e151af Add missing encoding directive in POD (#592) 2013-04-19 11:39:33 +00:00
Clément Oudot
ca1b0db0d2 Fix getDisplayType call in Multi backend (#593) 2013-04-19 08:27:29 +00:00
Xavier Guimard
455ed3b4b4 Avoid Perl warning 2013-04-15 04:12:34 +00:00
Clément Oudot
3aaca2d291 Captcha for login form (#217) 2013-02-21 17:38:14 +00:00
Clément Oudot
c177cf702d Make captcha works for mail reset (#217) 2013-02-20 16:04:29 +00:00
Clément Oudot
4ff3bea859 Do not call captcha method in process (#217) 2013-02-20 14:52:08 +00:00
Clément Oudot
bbd05fdd88 Allow to search demo account from mail reset page (#586) 2013-02-20 14:51:09 +00:00
Clément Oudot
d67f01e1d8 Do not force captcha parameters in the code (#217) 2013-02-20 09:39:17 +00:00
Sandro Cazzaniga
ab662554b7 make tidy 2013-02-17 22:25:26 +00:00
François-Xavier Deltombe
7b02fea629 Clean regexp of previous commit (#467) 2013-02-08 13:32:22 +00:00
François-Xavier Deltombe
65252af36b Fix slight bug about trustedDomains regex: domains might be tampered (#467) 2013-02-08 10:58:35 +00:00
Xavier Guimard
fd09a8bafe Remove old warning in AuthCAS 2013-02-03 06:40:51 +00:00
Xavier Guimard
69ca1a1a38 Email change: Thomas Chemineau -> thomas.chemineau@gmail.com 2013-02-01 05:37:38 +00:00
Xavier Guimard
c132bc3e1d Update authors, bug-report, copyright and license 2013-01-31 05:33:10 +00:00
François-Xavier Deltombe
95c4523e58 Fix a perl var type error in Lemonldap::NG::Portal::Display 2013-01-30 16:08:44 +00:00
Clément Oudot
1cd36aa44b Fix transient NameID for SAML Issuer (#561) 2013-01-27 15:28:39 +00:00
Clément Oudot
e8778c5b7b Fix mail subject encoding (#580) 2013-01-25 11:05:34 +00:00
Clément Oudot
13446072d0 Skin rules in trunk (#578) 2013-01-16 15:43:24 +00:00
Clément Oudot
ae7ac2de48 Forward lmhidden fields in CAS authentication (#563) 2013-01-15 14:19:42 +00:00
Clément Oudot
98b2bbbe1e Use PE_PASSWORD_OK code in Menu (#577) 2013-01-14 11:32:51 +00:00
Clément Oudot
8feea1b3f4 Call authInit before authLogout in logout process (#562) 2013-01-11 17:11:37 +00:00
Clément Oudot
8269cfc208 Change SAML session ID key to allow index in SQL (#547) 2013-01-11 11:57:46 +00:00
François-Xavier Deltombe
27bbde63b6 Replace useXForwardedFor option with trustedProxies (#559) 2013-01-03 18:28:55 +00:00
François-Xavier Deltombe
87c7ea6a20 Remove remains of xForwardedFor in code (#486) 2013-01-03 18:14:34 +00:00
Clément Oudot
5f0b631e70 Fix SAML signature verification issue (#570) 2012-12-18 10:29:07 +00:00
Clément Oudot
4845aa4bd3 Categories in menu are now sortable (#566) 2012-12-04 16:31:12 +00:00
François-Xavier Deltombe
a265404969 Log when SAML authn response is built (#560) 2012-11-16 10:55:49 +00:00
Xavier Guimard
f6103b6884 Authen::Captcha must not be automaticaly loaded 2012-11-03 05:29:55 +00:00
Clément Oudot
54ed7e7ed5 Fix time displaying for password expiration (#412) 2012-10-30 13:55:19 +00:00
Clément Oudot
3489910d99 Fix call to msg and convertSec routines in _LDAP.pm (#548) 2012-10-16 12:34:57 +00:00
Xavier Guimard
b8bd611ccb Same files must not have different version number 2012-10-15 04:12:21 +00:00
Sandro Cazzaniga
5d2e36e8c4 *[LEMONLDAP-538] Fix loglevel 2012-09-25 17:04:57 +00:00
Clément Oudot
c8625a966d Fix password reset with DBI (#536) 2012-09-25 15:22:50 +00:00
Sandro Cazzaniga
f023778623 use splice() to have a clean code in methods 2012-09-21 07:56:47 +00:00
Sandro Cazzaniga
c7ce994d52 use splice() in Lemonldap::NG::Portal::Simple::loadModule 2012-09-15 09:50:46 +00:00
Clément Oudot
59c8adde04 Allow to get display type in Multi backend (#529) 2012-09-09 21:37:49 +00:00
Clément Oudot
2d7c4fd864 Allow getCookies webservice to be used with Multi backend (#519) 2012-09-08 17:20:08 +00:00
Sandro Cazzaniga
8e2a057193 Fix deleteNotification webservice in trunk 2012-09-08 10:55:55 +00:00
François-Xavier Deltombe
f4e90f866f Fix syntax error in LL::NG::Portal::Simple with CDA (Lemonldap-527) 2012-09-07 15:43:07 +00:00
François-Xavier Deltombe
29a97450d8 Do not set SAML relaystate if there are no data to store (Lemonldap-524) 2012-09-06 10:56:05 +00:00
François-Xavier Deltombe
495401756c Delete SAML relaystate data after it is read (Lemonldap-524) 2012-09-06 10:25:41 +00:00
François-Xavier Deltombe
8908cbbb4e Send RelayState in SAML logout requests by POST (Lemonldap-523) 2012-09-06 09:37:35 +00:00
Sandro Cazzaniga
457a9f9b0e - Revert this fix because of LEMONLDAP-515 fix.. 2012-08-31 13:05:24 +00:00
Sandro Cazzaniga
8224d225d4 - [LEMONLDAP-515] Parameter portalRequireOldPassword is now checked in DBI 2012-08-31 13:00:06 +00:00
Sandro Cazzaniga
6702a5068c add comments on initCaptcha method 2012-08-31 07:53:40 +00:00
Sandro Cazzaniga
98b0d9ad4f Fix typo which breaks notification's stuff 2012-08-29 13:43:43 +00:00
Sandro Cazzaniga
e778b9842f - Add a "else" block for the debug message, else it will be printed even in non multi mode. 2012-08-21 08:11:09 +00:00
Sandro Cazzaniga
6cd8b8c5f4 * [LEMONLDAP-506] Disable LDAP Cache in multi mode 2012-08-21 07:24:27 +00:00
Sandro Cazzaniga
e13c03de25 ship args with splice() 2012-08-16 10:12:00 +00:00
Sandro Cazzaniga
65fed1486b * [LEMONLDAP-504] Fix a regression introduced by LEMONLDAP-413 2012-08-16 07:26:53 +00:00
Sandro Cazzaniga
fc5e698dd2 * [LEMONLDAP-505] Make portal W3C compliant for html validation 2012-08-15 09:36:39 +00:00
François-Xavier Deltombe
ec67501c03 Update LL::NG::Portal::SharedConf $version (Lemonldap-500) 2012-08-13 12:39:46 +00:00
François-Xavier Deltombe
94ea52a4af Add data reVHost in config only for portal (Lemonldap-500) 2012-08-09 18:42:40 +00:00
François-Xavier Deltombe
95903a6a3c Do not load localStorage into LL::NG::Portal's config (Lemonldap-500) 2012-08-09 17:28:35 +00:00
François-Xavier Deltombe
26c3c5bdc2 Useless method 'LL::NG::Portal::SharedConf::getProtectedSites' removed 2012-08-09 17:13:51 +00:00
Sandro Cazzaniga
8758d6c5fb change format of remaining time (for printf) 2012-07-26 09:51:39 +00:00
Sandro Cazzaniga
3a80fab207 Fix version since we had modified it for captcha feature 2012-07-26 09:44:48 +00:00
Sandro Cazzaniga
1c408c9912 Fix version 2012-07-26 09:38:53 +00:00
Sandro Cazzaniga
3ee4e9765a - fix version 
- fix a typo
 2012-07-26 07:42:25 +00:00
Xavier Guimard
0d54c80fcc Make tidy 2012-07-26 02:47:27 +00:00
Sandro Cazzaniga
5ade3bf9b2 - Better indentation for _Webform 
- Better doc for initCaptcha()
 2012-07-25 08:57:53 +00:00
Sandro Cazzaniga
d83e1848da Fix a bug in code that breaks auth 2012-07-19 08:23:28 +00:00
Sandro Cazzaniga
6f2a798b0e Fix a dummy bug that breaks two test 2012-07-18 15:26:48 +00:00
Sandro Cazzaniga
43f6d3e701 * [LEMONLDAP-494] Fix wrong log type in Lemonldap::NG::Portal::_DBI 2012-07-17 08:02:33 +00:00
Sandro Cazzaniga
dd8d59c13b Update version (since we modify translations to resolve LEMONLDAP-412) 2012-07-17 07:35:28 +00:00
Sandro Cazzaniga
f66f57507d Update version (since we add new code it this module) 2012-07-17 07:31:15 +00:00
Sandro Cazzaniga
c7d7369215 * [LEMONLDAP-412] Make a pretty print for password expiration warning time 2012-07-16 13:06:16 +00:00
Sandro Cazzaniga
17d0f0a557 * [LEMONLDAP-412] Password policy expiration warning time is now friendly diplayed 2012-07-16 09:58:27 +00:00
Sandro Cazzaniga
213c80888a * [LEMONLDAP-366] Replace notifications in Common 2012-07-12 21:04:06 +00:00
Sandro Cazzaniga
8ecd768071 Open a dir, so close a dir not a filehandle 2012-07-12 12:10:44 +00:00
Sandro Cazzaniga
66d228d1da *[LEMONLDAP-491] Don't import all POSIX functions 2012-07-12 07:09:41 +00:00
Sandro Cazzaniga
b9a20c3995 * [LEMONLDAP-491] Don't import all POSIX functions 2012-07-10 13:36:10 +00:00
Sandro Cazzaniga
333f7d6750 update version 2012-07-10 08:42:40 +00:00
Sandro Cazzaniga
189880d3ac * [LEMONLDAP-490] - fix bad error log 2012-07-10 08:32:40 +00:00
Sandro Cazzaniga
99cb8d75cb Add comments 2012-07-04 14:22:30 +00:00
Sandro Cazzaniga
5264202231 [LEMONLDAP-217] add a captcha feature to the portal 2012-07-04 12:33:03 +00:00
Clément Oudot
b01dc2865b Change the way X Forwarded For adress is stored in session (#486) 2012-06-26 16:05:27 +00:00
Clément Oudot
6feccd0fc3 Fix skin path for HTML mails (#485) 2012-06-26 11:55:13 +00:00
Clément Oudot
3660dc24e2 Fix LDAP groups session store (#479) 2012-06-20 08:41:31 +00:00
Clément Oudot
96a605b286 Set version 1.3.0 in trunk 2012-06-20 07:54:00 +00:00
Clément Oudot
eb9175d681 Fix CAS 1.0 validate method (#478) 2012-06-16 20:52:56 +00:00
Clément Oudot
e470818653 Check that only one entry is returned by LDAP directory (#477) 2012-06-16 08:52:19 +00:00
François-Xavier Deltombe
64f26a226a Portal's and manager's CGI scripts runnable in shell (Lemonldap-476) 2012-06-13 18:43:27 +00:00
François-Xavier Deltombe
21617d55e6 Changes in script buildPortalWSDL (Lemonldap-473) 2012-06-12 15:46:18 +00:00
François-Xavier Deltombe
9c026d3574 SOAP related bugs fixed (Lemonldap-473) 2012-06-11 13:11:25 +00:00
François-Xavier Deltombe
5bb8dbd64c Few portal text items changes (Lemonldap-475) 2012-06-06 16:55:37 +00:00
François-Xavier Deltombe
39bfd92a73 Repair SOAP service for error requests (Lemonldap-465) 2012-05-24 16:10:15 +00:00
François-Xavier Deltombe
df7a9e2e47 Change order of conditions in notification requests (Lemonldap-468) 2012-05-24 15:18:50 +00:00
François-Xavier Deltombe
b5c4b346f9 Cookie value sent in query string only to trusted domain (LEMONLDAP-467) 2012-05-23 18:46:38 +00:00
François-Xavier Deltombe
1caf988880 Prevent autoRedirect to be run several times in SAML logout 2012-05-22 16:23:40 +00:00
François-Xavier Deltombe
7cc2bdddc9 Revert SVN commit r2266 (LEMONLDAP-450) 2012-05-21 14:06:15 +00:00
Clément Oudot
5cdfae5c86 Require SetPassword extension instead of use (#460) 2012-04-24 15:01:28 +00:00
Clément Oudot
722efce84a Use userControl regexp to validate mail reset input (#461) 2012-04-24 13:22:05 +00:00
Clément Oudot
2e8d9b7ad4 Fix bug on password form display (#251) 2012-04-12 12:41:51 +00:00
Clément Oudot
724cb7bb8d Allow false value for customized error message (#456) 2012-03-27 20:28:03 +00:00
Clément Oudot
5e9f1e33f1 Do not double decode UTF8 in DBI Notification module (#455) 2012-03-27 20:16:31 +00:00
Clément Oudot
f9426e59e9 Display Bad URL error without any forms (#392, #LEMONLDAP-251) 2012-03-25 14:42:46 +00:00
Clément Oudot
c860549f27 Add a display type for each authentication module to know how to display errors (#251) 2012-03-24 14:47:47 +00:00
François-Xavier Deltombe
b1582ff44b Add authentication mode in auth log (Lemonldap-453) 2012-03-21 15:35:43 +00:00
François-Xavier Deltombe
5ddf0a7b43 Fill form method in redirect.tpl (bug linked to LEMONLDAP-422) 2012-03-14 19:14:17 +00:00
François-Xavier Deltombe
691636efdf Remove AuthLDAP dependency in AuthSSL (LEMONLDAP-376) 2012-03-14 11:18:58 +00:00
François-Xavier Deltombe
d1650ff960 IssuerDBSAML: Forward RelayState with AuthnResponse (LEMONLDAP-394) 2012-03-13 19:10:09 +00:00
Clément Oudot
d0036913ea Check if request is defined before calling ID (#397) 2012-03-12 22:30:51 +00:00
Clément Oudot
ff86ca2a1a Possibility to set custom template parameters (#449) 2012-03-09 12:41:17 +00:00
Clément Oudot
f9af7ffe69 Check maintenance mode to remove applications from menu (#342) 2012-03-07 10:04:23 +00:00
François-Xavier Deltombe
7081992f45 Fixbug in portal due to changes in autoRedirect - continuation of commit r2264 (Lemonldap-422) 2012-03-02 18:23:25 +00:00
Clément Oudot
3552b4d70c Manage maintenance mode in Handler (#342) 2012-03-01 11:04:49 +00:00
François-Xavier Deltombe
bb653b4e2a Harmonize id in portal logs (#447) 2012-02-29 16:01:13 +00:00
Clément Oudot
979d1abe62 Tidy all the code (make tidy) 2012-02-29 13:19:57 +00:00
Clément Oudot
8f576d09c2 Fix error when mail token do not exist (#446) 2012-02-29 13:15:43 +00:00
François-Xavier Deltombe
3ae01e424b Refer to <myskin>/redirect.tpl instead of ../common/redirect.tpl (Lemonldap-422) 2012-02-29 11:37:09 +00:00
Clément Oudot
42557e45a6 Fix UTF-8 for personalized messages (#445) 2012-02-29 09:36:16 +00:00
Clément Oudot
56581a13fc Reorganize files - work in progress (#444) 2012-02-28 22:52:36 +00:00