Commit Graph

4498 Commits

Author SHA1 Message Date
Maxime Besson
cf70ebe293 Stop triggering XSS protection on escaped commas
Commas are safe in HTML and JS, so there is no risk of XSS
2021-06-24 20:16:20 +02:00
Maxime Besson
1d80c262ab Make unit test for #2539 less noisy 2021-06-24 19:05:11 +02:00
Maxime Besson
70bd06bc32 Fix unit test for #2534 2021-06-24 19:02:34 +02:00
Maxime Besson
4a2a786598 Fix CDA wildcard regexp (#2534) 2021-06-24 19:02:17 +02:00
Maxime Besson
3d1cc3f499 Unit test for #2534 2021-06-24 16:59:20 +02:00
Maxime Besson
dbd65d1b2b Handle wildcards in CDA check (#2534) 2021-06-24 16:59:20 +02:00
Christophe Maudoux
71fa5d09f7 Be more strict with URL (#2477) 2021-06-24 14:33:27 +02:00
Yadd
3732cdcc19 Better URL parsing (#2477) 2021-06-24 14:33:27 +02:00
Yadd
8a18543f55 Remove TODO loop 2021-06-24 14:04:31 +02:00
Maxime Besson
9a2dc48b56 Unit test for #2550 2021-06-21 09:38:03 +02:00
Maxime Besson
8db02a693f Only release IDtoken when scope contains openid (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
ee51e010dc Unit test for #2548 2021-06-21 09:38:03 +02:00
Maxime Besson
e1b7f61d13 Update ID token unit tests 2021-06-21 09:38:03 +02:00
Maxime Besson
beaacca9a0 Refactor _handleRefreshTokenGrant to use _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Maxime Besson
c931b30263 Refactor _generateIDToken (#2550) 2021-06-21 09:38:03 +02:00
Yadd
b6a1f946b2 Fix handler cache corruption (#2539) 2021-06-19 18:43:41 +02:00
Maxime Besson
2de2cbf454 Fix 2F unit test (#2539) 2021-06-19 18:25:07 +02:00
Clément OUDOT
bdeb1e70d9 Allow to display password value in login form (#2454) 2021-06-16 20:50:11 +02:00
Maxime Besson
dae4293ecf Unit test for #2518 2021-06-15 14:26:23 +02:00
Maxime Besson
77f5577dc4 Improve SAML test lib 2021-06-15 12:40:15 +02:00
Maxime Besson
cf59bb915e refactor expectAuthenticatedAs 2021-06-15 12:40:15 +02:00
Maxime Besson
6f5cd3b645 Fix some undef warnings 2021-06-15 12:40:15 +02:00
Maxime Besson
75b81fcb5a Fix NameID value when unspecified is requested by SP (#2518) 2021-06-15 11:27:37 +02:00
Maxime Besson
63cd5ffb40 Revert 652d8ba9bc
See #2482
2021-06-11 08:53:26 +02:00
Christophe Maudoux
469d2a40aa Fix warning (#2538) 2021-06-09 23:06:03 +02:00
Christophe Maudoux
86f46ebc5b Fix some warnings (#2538) 2021-06-08 23:03:54 +02:00
Yadd
5fc0b6f002 Update tr translation from transifex 2021-06-07 18:34:06 +02:00
Maxime Besson
87295178e0 optimize SingleSession to avoid unneeded session fetches (#2536) 2021-06-04 16:17:18 +02:00
Maxime Besson
275567436e Unit test for #2496 2021-06-03 18:31:38 +02:00
Maxime Besson
b8e8bbcedd Ignore unknown scopes (#2496) 2021-06-03 18:24:55 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Maxime Besson
55cdfefd7b Workaround for #2472 2021-06-02 15:36:05 +02:00
Maxime Besson
2414fb4751 Unit tests for (#2510) 2021-06-02 11:08:07 +02:00
Maxime Besson
3b76479bda Add expectPdata function to test lib 2021-06-02 11:07:53 +02:00
Maxime Besson
fad337c58c Add hooks on password change (#2510) 2021-06-02 11:07:28 +02:00
Maxime Besson
d4aed0b332 Tidy test lib 2021-06-02 11:07:28 +02:00
Maxime Besson
91cfba275a Skip registration of SAML SP when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
71a8fc6d16 Skip registration of CAS App when config has errors (#2525) 2021-06-02 08:34:02 +02:00
Maxime Besson
e50db3f083 Skip registration of OIDC RP when config has errors (#2525) 2021-06-02 08:34:01 +02:00
Maxime Besson
6ef522c193 Unit tests for #2533 2021-06-01 11:28:34 +02:00
Maxime Besson
cf3809a0de Add CAS hooks (#2533) 2021-06-01 11:27:45 +02:00
Maxime Besson
ec2b904f4f Unit test for #2532 2021-05-31 11:23:38 +02:00
Maxime Besson
e98aafd6f7 add oidcGenerateCode hook (#2532) 2021-05-31 11:16:28 +02:00
Maxime Besson
8992b3e789 Unit test for #2529 2021-05-31 09:52:26 +02:00
Maxime Besson
15298466ea Fix JWT userinfo in Auth::OpenIDConnect (#2529) 2021-05-31 09:52:02 +02:00
Yadd
0f11d7c06e Finish BrowserID/Persona removal 2021-05-22 16:16:38 +02:00
Christophe Maudoux
66f428b474 Improve notifications display (Thx @antoinerosier) 2021-05-20 19:22:18 +02:00
Christophe Maudoux
7860e18034 Append unit test (#1976) 2021-05-08 21:38:13 +02:00
Christophe Maudoux
a3c48af972 Append unit test (#1976) 2021-05-07 08:15:32 +02:00
Christophe Maudoux
cf55716825 Allow findUser with UpgradeSession (#1976) 2021-05-06 23:16:26 +02:00