Commit Graph

85 Commits

Author SHA1 Message Date
Xavier Guimard
ece9b21219 Remove trailing whitespaces 2019-04-03 14:15:16 +02:00
Maxime Besson
d44a042fd5 Revert 8f5fbb077e and change the way logout errors are handled
Relating to issue #1668, the proposed fix works when there is only one
service provider to logout of.

Now that multiple service provider logout is starting to work again on
2.0, we cannot read the remote_ProviderID from the logout object because
it is only filled by lasso when actually building the response.

Instead, we ignore any error that could occur when building the
response, log a warning and show the portal instead. Still better than
an internal server error.
2019-04-03 11:20:24 +02:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Maxime Besson
8f5fbb077e When logout-initiating SP has no known SLO endpoint, fallback to portal
In some federations, SLO endpoints are not published, yet SP are still
able to initiate logouts.

This used to cause an error on the portal, this commit changes the error
into a warning in logs. The user remains on the portal and sees a normal
logout message.
2019-03-12 17:58:41 +01:00
Xavier Guimard
bc2bef4ff4 Please use our .perltidyrc 2019-03-07 18:22:58 +01:00
Maxime Besson
e290cd59d6 Fix undef warnings in metadata generation
Fix some undef warnings introduced in
12d2db35a9
2019-03-04 09:33:12 +01:00
Maxime Besson
12d2db35a9 Add new URLs for SP-only or IDP-only SAML metadata
This commit adds two new URLs:

/saml/metadata/idp : IDP-only metadata
/saml/metadata/sp : SP-only metadata

/saml/metadata keeps providing metadata for all SAML services
2019-02-27 18:14:30 +01:00
Xavier Guimard
c7b4eb5051 tidy with new conf 2019-02-07 09:27:56 +01:00
Xavier Guimard
5886cbe2a0 Tidy 2019-02-05 23:12:17 +01:00
Xavier Guimard
e2b026b7c8 Fix versions 2019-02-05 23:06:18 +01:00
Christophe Maudoux
21206099ce Append display options for SAML IDP (#1637) 2019-02-05 22:39:09 +01:00
Christophe Maudoux
b39e6ce99f WIP - Append relative parameters (#1637) 2019-02-04 23:13:54 +01:00
Clément OUDOT
b8e10222f4 Do not stop if one SP or IDP cannot be loaded (#1516) 2018-10-09 19:36:59 +02:00
Clément OUDOT
800f0bd96a Do not create server error on SAML error (#1502) 2018-09-11 11:07:23 +02:00
Xavier Guimard
b2620c2679 s/datas/data
datas => des données
data => les données
2018-07-05 22:56:16 +02:00
Xavier Guimard
33712dcf13 Set ignore system for issuers (#1468) 2018-06-29 14:31:43 +02:00
Xavier Guimard
e6ad687618 Change session key names between Auth and Issuer (SAML #1468) 2018-06-29 06:50:31 +02:00
Xavier Guimard
8596b339e8 Use build_urlencoded everywhere (#1461) 2018-06-26 19:13:06 +02:00
Clément OUDOT
28c4429b75 Configuration for SAML signature method (#1247) 2018-06-12 18:22:21 +02:00
Xavier Guimard
3356afdaa8 Little security (#1385) 2018-03-10 09:42:29 +01:00
Xavier Guimard
33c764855d Don't encode + (may fix: #1385) 2018-03-10 09:33:14 +01:00
Clément OUDOT
f202a7fdf6 Correct test on expiration time in processLogoutRequestMsg (#1357) 2018-01-15 15:08:44 +01:00
Clément OUDOT
341bbb22ee eval Lasso constants (#1312) 2017-11-17 07:26:44 +01:00
Xavier Guimard
7f0ff6d0d8 Replace Jira by GitLab 2017-11-11 14:06:23 +01:00
Clément Oudot
cddb4fc849 Change message log level from warn to debug (#1329) 2017-11-07 10:29:06 +00:00
Xavier Guimard
91af1f63ff Move SAML HTML fragments to tpl (#1302) 2017-10-11 11:35:56 +00:00
Xavier Guimard
fc582377ff Clean SAML storage code (#1305) 2017-09-27 05:00:00 +00:00
Xavier Guimard
10177b4bfd Default storage values (may fix #1305) 2017-09-26 20:15:50 +00:00
Clément Oudot
54972a9bc7 Define default SAML session storage (#1251) 2017-08-29 16:51:50 +00:00
Clément Oudot
ae4ef2e3e5 Set SAML server signature method (#1247) 2017-08-29 16:43:43 +00:00
Xavier Guimard
62528e8b6a Add SAML-SP rule (#1161) 2017-03-22 20:20:30 +00:00
Xavier Guimard
830f15f71d Bad safe usage (#595) 2017-03-22 19:03:49 +00:00
Xavier Guimard
6dba4fd1c2 Better request management in issuers (#595) 2017-03-21 06:23:58 +00:00
Clément Oudot
6b775be965 Apply patch in loadSP (#1193) 2017-03-11 10:02:50 +00:00
Xavier Guimard
f54dfe6276 More clean patch (#1193) 2017-03-11 07:27:52 +00:00
Xavier Guimard
8f4b4588c7 Fix LEMONLDAP-1193 2017-03-11 07:16:24 +00:00
Xavier Guimard
96263e0e65 Clean repo 2017-03-03 17:25:03 +00:00
Xavier Guimard
5d0a4bd96b UTF-8 for Artifacts (#1118) 2017-03-03 16:57:02 +00:00
Xavier Guimard
8c3ff5fb0b Minimize Apache::Session tie/untie (closes: #1173) 2017-02-20 21:00:05 +00:00
Xavier Guimard
e71d96a2e8 Clean checkLogin usage (#595) 2017-02-19 11:56:20 +00:00
Xavier Guimard
1e7b2c4a39 Add LWP options (closes: #1065) 2017-02-15 15:08:23 +00:00
Xavier Guimard
b829b6c19b Replace userNotice/Error... by userLogger (#857) 2017-02-15 14:16:59 +00:00
Xavier Guimard
deb28bc9cb Replace lmLog by logger-> (#857) 2017-02-15 06:41:50 +00:00
Xavier Guimard
8936677deb Avoid info() wrapper (#595) 2017-02-07 17:57:19 +00:00
Xavier Guimard
a865cea016 Little change (#595) 2017-01-24 05:10:57 +00:00
Xavier Guimard
64a6cb6dbc Remove inline CSS in perl (#1137) 2017-01-19 13:20:02 +00:00
Xavier Guimard
e923a87def Reject duplicate entityID (Fix: #1127) 2017-01-13 16:16:33 +00:00
Xavier Guimard
99d294d7c4 Replace read_body by Plack::Request::content() (#595) 2017-01-07 07:45:36 +00:00
Xavier Guimard
83c3b50355 Update POD (#595) 2017-01-04 20:51:46 +00:00
Xavier Guimard
a09d12031e Some big changes (#595)
Replace uri_escape by WWW::Form::UrlEncoded
Replace PSGI:Request by inheritance from Plack::Request
2017-01-04 16:36:54 +00:00