Commit Graph

1599 Commits

Author SHA1 Message Date
Maxime Besson
c197bd95b5 Remove totp2fDisplayExistingSecret and totp2fUserCanChangeKey (#2541) 2021-06-15 14:54:32 +02:00
Maxime Besson
50225ce438 Add option to only allow declared oidc scopes (#2496) 2021-06-03 17:40:49 +02:00
Yadd
0f11d7c06e Finish BrowserID/Persona removal 2021-05-22 16:16:38 +02:00
Christophe Maudoux
c54204bd50 Reorder 2F options 2021-05-20 23:17:09 +02:00
Christophe Maudoux
630343bdbe Remove unused demoMode option (#2517) 2021-05-03 23:13:56 +02:00
Christophe Maudoux
6be4cfe035 Dismiss cache if cfgDate has changed (#2508) 2021-05-03 23:13:04 +02:00
Christophe Maudoux
8ae9985e7c Partial revert (#2508) 2021-05-02 22:09:46 +02:00
Christophe Maudoux
0f40e2d1bb Check conf. timestamp to reload (#2508) 2021-04-26 00:26:33 +02:00
Maxime Besson
6f6239b6c3 Add manager option for #2506 2021-04-09 18:09:28 +02:00
Christophe Maudoux
bcfb075f63 Be more consistent with REST params & Update doc (#1976) 2021-04-01 22:48:08 +02:00
Maxime Besson
824cd5fb89 Fix CLI for oidcOPMetaDataJSON (#2439)
and oidcOPMetaDataJWKS
2021-03-30 16:32:14 +02:00
Maxime Besson
dca8483ec5 Relax scope name constraints in manager (#2424) 2021-03-30 16:32:14 +02:00
Christophe Maudoux
098934682d Fix warning (#2486) 2021-03-26 21:54:21 +01:00
Christophe Maudoux
f7caff32c7 Move CrowdSec plugin to Security menu (#2451) 2021-02-20 19:18:25 +01:00
Maxime Besson
5ebc43deb2 Remove debug statement (#2469) 2021-02-19 17:28:08 +01:00
Maxime Besson
93d54458df Add oidcRPMetaDataScopeRules to list of hash params (#2424) 2021-02-19 17:26:23 +01:00
Xavier Guimard
b5c0ca94c4 CrowdSec plugin (#2451) 2021-02-19 07:40:36 +01:00
Maxime Besson
122512f01a Fix deserialization of array conf attributes (#2469) 2021-02-18 22:08:47 +01:00
Christophe Maudoux
5f7981e256 Improve error message & unit test (#2458) 2021-02-16 22:04:38 +01:00
Christophe Maudoux
1f66e03969 Append an option to download rules.json file from remote server (#2458) 2021-02-16 12:15:18 +01:00
Christophe Maudoux
3bee740125 display headers (#2458) 2021-02-12 19:25:55 +01:00
Christophe Maudoux
6e1efc8bb5 WIP: CheckDevOps plugin skeleton (#2458) 2021-02-12 18:11:37 +01:00
Christophe Maudoux
e9c3d39883 Re-order Portal servers options 2021-02-11 22:50:47 +01:00
Christophe Maudoux
4515768513 Display explicit error message (#2329) 2021-02-10 22:27:12 +01:00
Christophe Maudoux
3e02682635 Update version 2021-02-09 23:06:36 +01:00
Christophe Maudoux
e1e86a44af Improve conf test (#2329) 2021-02-09 22:40:47 +01:00
Christophe Maudoux
62ef90aef3 Update conf tree (#2456) 2021-02-05 19:57:19 +01:00
Christophe Maudoux
5e28f76a64 Restrict session data available for DevOps handler (#2456) 2021-02-05 19:55:22 +01:00
Maxime Besson
21098bcce5 Add array handling for additional audiences (#2453) 2021-02-03 09:43:35 +01:00
Maxime Besson
f92df554bd Add manager test for #2419 2021-02-01 18:15:55 +01:00
Maxime Besson
39a419c1b1 Manager options for JWT access tokens (#2419) 2021-02-01 18:15:55 +01:00
Maxime Besson
39bc2525fe Add scopeRules to oidc providers api (#2424) 2021-02-01 16:25:36 +01:00
Maxime Besson
88cc6004a4 Add manager option for dynamic scopes (#2424) 2021-02-01 16:25:36 +01:00
Clément OUDOT
d4ae146fd6 Update version in main modules 2021-01-30 18:32:52 +01:00
Christophe Maudoux
c72a9d5228 Sort display options (#1658) 2021-01-30 18:20:54 +01:00
Christophe Maudoux
a60501b521 Update doc (#1976) 2021-01-28 09:49:48 +01:00
Christophe Maudoux
08b8705282 Fix regex to allow hash ref { key => val}->{key} 2021-01-26 19:05:39 +01:00
Christophe Maudoux
5f29cf10ff Test only if SAML service is enabled (#2341) 2021-01-23 18:58:34 +01:00
Christophe Maudoux
5d56a88ff3 Use strict & Typo 2021-01-23 18:57:24 +01:00
Maxime Besson
f0a6cf5b4f Auto generate key id when creating new oidc key (#2444) 2021-01-20 09:49:46 +01:00
Maxime Besson
c49c675ae0 Move oidc key id to key form (#2444) 2021-01-20 09:49:46 +01:00
Maxime Besson
c783ebc6d0 Add option to enable client credentials grant (#1987) 2021-01-19 17:06:21 +01:00
Christophe Maudoux
cd37ccc35c Merge branch 'v2.0' into findUser 2021-01-14 22:39:02 +01:00
Maxime Besson
05b04b0236 Fix redirectUri top level field in manager API (#2440) 2021-01-14 18:59:34 +01:00
Clément OUDOT
1dfbbe9fb3 Add addPostVars/delPostVars actions (#1978) 2021-01-10 17:46:03 +01:00
Clément OUDOT
0e40bab934 Do not sort array values (#1978) 2021-01-10 16:54:02 +01:00
Clément OUDOT
a281d78ba9 Display arrays hashref in CLI get command (#1978) 2021-01-10 16:46:17 +01:00
Christophe Maudoux
e4444c907f Append CheckUser normalized headers option & Improve unit test (#2436) 2021-01-08 18:38:05 +01:00
Maxime Besson
93988663b4 Add ldapGetUserBeforePasswordChange to manager (#714) 2021-01-08 15:09:19 +01:00
Christophe Maudoux
5d7675a5bd Update version (#1976) 2021-01-06 23:14:20 +01:00
Christophe Maudoux
dae9455a19 Merge branch 'v2.0' into findUser 2021-01-06 23:11:56 +01:00
Christophe Maudoux
d14fae87ce Append conf test & REST init test & set default values (#2176) 2021-01-06 23:10:09 +01:00
Christophe Maudoux
6af036b4f6 Fix regex & log (#2432) 2021-01-06 21:59:31 +01:00
Christophe Maudoux
39528ef1c3 Control parameters (#1976) & Improve unit tests 2021-01-05 22:46:35 +01:00
Christophe Maudoux
1c45e8a8c0 Merge branch 'v2.0' into findUser 2021-01-05 22:14:28 +01:00
Christophe Maudoux
846d6a3655 Allow wildcard with searching parameters (#1976) & Improve unit tests 2021-01-05 22:08:48 +01:00
Maxime Besson
127aa91a8f Merge branch 'feature-cas-service-url-2321' into 'v2.0'
Feature cas service url 2321

See merge request lemonldap-ng/lemonldap-ng!175
2021-01-05 18:49:24 +01:00
Maxime Besson
3c2ddd9029 Fix configuration test for #2321 2021-01-05 17:42:40 +01:00
Maxime Besson
1e1ab08d4c Add Password::Combination to manager (#714,#716) 2021-01-04 21:31:34 +01:00
Christophe Maudoux
fc6ea96954 FindUser with combination (#1976) 2021-01-03 19:00:20 +01:00
Christophe Maudoux
994ccfae30 Append REST findUser URL parameter (#1986) 2021-01-02 20:22:33 +01:00
Christophe Maudoux
a1700369c5 Merge branch 'v2.0' into findUser 2020-12-29 14:59:36 +01:00
Christophe Maudoux
fb525766f4 Improve conf test (#1976) 2020-12-29 00:37:01 +01:00
Maxime Besson
219aeb1547 tidy 2020-12-28 17:48:47 +01:00
Maxime Besson
099b1890bc call reloadUrls when saving config from the api (#2245) 2020-12-28 17:48:09 +01:00
Maxime Besson
279ea39e94 Move applyConf in Manager::Plugin (#2245) 2020-12-28 17:46:38 +01:00
Maxime Besson
13b1097304 Refactor SAML/CAS api to use value translation (#2318) 2020-12-28 15:47:20 +01:00
Maxime Besson
acef2ed5c6 Translate api option values from json bool to int (#2318) 2020-12-28 15:44:47 +01:00
Maxime Besson
ac4866f767 Fix error when updating saml sp via API (#2425) 2020-12-28 15:43:41 +01:00
Maxime Besson
b1545bce5b Revert "Translate incoming JSON bools (#2318)"
This reverts commit 85574cf97e.
2020-12-28 15:18:47 +01:00
Maxime Besson
82c696ea82 Handle postLogoutRedirectUris as array (#2347) 2020-12-28 15:10:35 +01:00
Maxime Besson
6f25d43bdf Refactor attribute handling in OIDC manager api (#2347) 2020-12-28 14:50:45 +01:00
Christophe Maudoux
c2342336c2 Merge branch 'v2.0' into findUser 2020-12-27 23:39:54 +01:00
Christophe Maudoux
c0f71ee0f1 Fix FindUSer with Choice (#1976) 2020-12-27 13:29:10 +01:00
Christophe Maudoux
406fdbc54b Append unit test if Impersonation is missing (#1976) 2020-12-26 15:27:25 +01:00
Christophe Maudoux
f30b3c4eb6 Conf test (#1976) 2020-12-23 23:07:22 +01:00
Christophe Maudoux
0236dc00d6 Removing workaround with MailPasswordReset 2020-12-23 14:57:55 +01:00
Maxime Besson
85574cf97e Translate incoming JSON bools (#2318) 2020-12-22 12:21:22 +01:00
Christophe Maudoux
e7baa348ba Update lang & conf test (#1976) 2020-12-21 22:31:29 +01:00
Christophe Maudoux
bfcdd370df Merge branch 'v2.0' into findUser 2020-12-21 21:11:55 +01:00
Christophe Maudoux
4d04672c20 WIP: FindUser skeleton (#1976) 2020-12-20 22:54:35 +01:00
Christophe Maudoux
512045c528 Fix conf test (#2243) 2020-12-20 17:29:13 +01:00
Christophe Maudoux
48df4a8807 Fix conf test & unit test (#2243) 2020-12-19 19:46:36 +01:00
Christophe Maudoux
7be0240389 Update default values & Tidy (#2243) 2020-12-16 22:58:01 +01:00
Christophe Maudoux
652d8ba9bc Prevent authentication on backend if account is locked (#2243) 2020-12-16 22:49:41 +01:00
Christophe Maudoux
df82d9d185 Take useSafeJail option into account in Manager &
Append an option to skip assignment test & Improve unit test (#2414, #2360)
2020-12-10 22:43:26 +01:00
Clément OUDOT
afe516c761 Mail 2F session key in Manager (#2406) 2020-12-03 20:53:57 +01:00
Christophe Maudoux
82187419a7 Warn if assignment & improve message (#2360) 2020-12-01 23:16:54 +01:00
Christophe Maudoux
ef0d10d91d Warn if assignment (#2360) 2020-12-01 22:58:14 +01:00
Christophe Maudoux
32d52b96d8 Append an option to obfuscate some headers value (#2398) 2020-11-27 23:09:18 +01:00
Christophe Maudoux
0a4fabb4e4 Use strict & fix warnings 2020-11-21 19:24:04 +01:00
Christophe Maudoux
d356455ed8 Merge branch 'v2.0' into 2381 2020-11-15 16:31:49 +01:00
Christophe Maudoux
a0feeae9a1 Append accessToTrace parameter (#2381) 2020-11-12 13:43:41 +01:00
Maxime Besson
dcfd2a8968 Remove warning when using special session keys in whatToTrace #2232 2020-11-12 09:48:30 +01:00
Maxime Besson
5714a753be Add manager form for OIDC attribute (#2330) 2020-11-06 19:00:52 +01:00
Maxime Besson
8b9c6be6f6 Add krbAllowedDomains in manager (#2372) 2020-11-05 10:39:20 +01:00
Christophe Maudoux
602ccf91f6 Append parameters (#2368) 2020-11-04 13:49:51 +01:00
Maxime Besson
e505e0e7e5 Encrypt session IDs to avoid disclosing them to admins (#2350) 2020-10-30 16:45:58 +01:00
Christophe Maudoux
42871a73c5 Warn if assignment (#2360) 2020-10-30 13:08:20 +01:00
Christophe Maudoux
b869b59da7 Avoid assignment (#2360) 2020-10-30 12:55:39 +01:00
Christophe Maudoux
600569247f WIP: Hide _session_id with session & 2ndFA explorers (#2350) 2020-10-28 09:31:12 +01:00
Maxime Besson
dd199e32b8 Add manager test for LDAPS connect timeout support (#2267) 2020-10-27 16:01:39 +01:00
Maxime Besson
1623c542a0 Add ldap IO timeout option to manager (#2267) 2020-10-27 16:01:36 +01:00
Christophe Maudoux
b3ad81ec8c Display notification content (#2353) 2020-10-16 23:28:00 +02:00
Maxime Besson
ac3d521c5e API: remove confKey from PUT body 2020-10-14 14:18:17 +02:00
Maxime Besson
338958f269 API: add redirectUris to top level response 2020-10-14 11:37:13 +02:00
Maxime Besson
0ca8701ea7 Api: friendly error if confKey is empty during creation 2020-10-14 11:36:37 +02:00
Maxime Besson
2b4c76cf4d API: tidy CasApp.pm 2020-10-14 11:36:16 +02:00
Christophe Maudoux
bf9ecc35ad Re-order tree to be more consistent (#2336) 2020-10-12 16:59:14 +02:00
Christophe Maudoux
dd833c2843 Update doc (#1605) 2020-10-12 16:39:12 +02:00
Christophe Maudoux
1c574f03da Rule is not parsed -> convert to bool & be more consistent (#1605) 2020-10-12 15:38:57 +02:00
Christophe Maudoux
9f57ec474b Code refactoring (#2339) 2020-10-12 15:03:21 +02:00
Maxime Besson
3a4d2f1939 Add a manager test to warn user when Lasso is too old for SHA2 (#2341) 2020-10-07 19:13:15 +02:00
Maxime Besson
f74787f81a Switch default SAML signature alg to SHA256 (#2341) 2020-10-07 15:35:37 +02:00
Maxime Besson
5606d0ed6f Add support for SHA384 and SHA512 (#2322) 2020-10-07 15:31:57 +02:00
Maxime Besson
aec6f82ffd Add manager test for signature method override (#2319) 2020-10-07 15:31:27 +02:00
Maxime Besson
4d5de59735 Add manager option to override SAML signature method (#2319) 2020-10-07 15:31:27 +02:00
Maxime Besson
e72d7d7235 Update manager to generate saml certs by default (#2316) 2020-10-07 15:25:08 +02:00
Maxime Besson
2ba14db40e Add new route to generate a X509 self signed cert (#2316) 2020-10-07 15:24:44 +02:00
Maxime Besson
7a68c1e407 lemonldap-ng-cli: fix restore when config is empty (#2340) 2020-10-07 15:07:42 +02:00
Christophe Maudoux
352b97f681 Append option to modify 2FA during context switching (#2338) 2020-10-04 21:18:09 +02:00
Christophe Maudoux
bd1b153561 Re-order and update lang to be more consistent 2020-10-02 20:42:46 +02:00
Clément OUDOT
9cec235472 Configuration of adaptative authentication level plugin in Manager (#2336) 2020-10-02 16:41:35 +02:00
Christophe Maudoux
8a4903abd8 Typo 2020-09-30 21:41:27 +02:00
Christophe Maudoux
3ca6a04ec9 Append manager test (#2329) 2020-09-26 22:30:30 +02:00
Maxime Besson
c7d878f893 Implement a new config test for #2293 2020-09-16 17:29:49 +02:00
Maxime Besson
afb62cb1a6 Add test mail server endpoint (#2293) 2020-09-16 17:29:49 +02:00
Maxime Besson
022ecdf6f7 Add button in manager to send a test mail (#2293) 2020-09-16 17:29:48 +02:00
Maxime Besson
99dc799534 Remove SMTP config test (#2293) 2020-09-16 17:27:00 +02:00
Christophe Maudoux
1a73f7ab7f Append rule & fix userData (#2314 & #2315) 2020-09-15 14:13:34 +02:00
Christophe Maudoux
059b2b13f1 Merge branch 'v2.0' into 2266 2020-09-07 18:56:37 +02:00
Clément OUDOT
f835f3d36f Update version in modules 2020-09-06 19:58:58 +02:00
Maxime Besson
4e5578e32f New manager options for ldap certificate validation (#2250) 2020-09-05 12:21:34 +02:00
Xavier Guimard
c8df084247 Update versions 2020-09-04 17:59:00 +02:00
Maxime Besson
66c68f6056 Merge branch 'feature-delayed-2fa-2124' into 'v2.0'
Delay 2FA until required by an application

See merge request lemonldap-ng/lemonldap-ng!147
2020-09-04 17:40:46 +02:00
Maxime Besson
eb191be72e Add error message when no sf available during upgrade (#2124) 2020-09-04 17:17:02 +02:00
Maxime Besson
c183675651 Add option to skip session upgrade confirmation (#2124) 2020-09-04 17:16:09 +02:00
Maxime Besson
1cf1990fe2 Add portal code for session upgrade 2020-09-04 17:15:34 +02:00
Maxime Besson
ab356f12fb Add manager option for delayed 2FA (#2124) 2020-09-04 17:15:29 +02:00
Maxime Besson
cb43b27904 Add manager options for authn level in issuer apps (#2124, #1848) 2020-09-04 17:14:04 +02:00
Xavier Guimard
b9e9ff1f3f Make autopkgtest happy 2020-09-04 06:23:35 +02:00
Christophe Maudoux
2cf9af77d5 Merge branch 'v2.0' into 2266 2020-09-02 18:54:29 +02:00
Christophe Maudoux
c5f9514d11 Update warn message 2020-09-02 18:49:46 +02:00
Clément OUDOT
2ca72e5613 Add del method in CLI (#2303) 2020-09-01 18:14:00 +02:00
Clément OUDOT
c2bc521938 Replace messages keyin CLI output by default translation (#2233) 2020-08-31 22:03:55 +02:00
Christophe Maudoux
05096327c0 Re-order menu & Update langs (#2266) 2020-08-29 22:50:29 +02:00
Christophe Maudoux
7a9020ff25 Modify type (#2266) 2020-08-29 20:13:11 +02:00
Christophe Maudoux
0a4812203c Allowed all special chars and rule to disable local password policy (#2266) 2020-08-29 19:08:47 +02:00
Maxime Besson
07828a9a85 Add healthcheck endpoint to manager API (#2299) 2020-08-28 17:00:48 +02:00
Christophe Maudoux
5d056699c4 Merge branch '2276' into 'v2.0'
2276

See merge request lemonldap-ng/lemonldap-ng!159
2020-08-28 15:06:01 +02:00