Commit Graph

292 Commits

Author SHA1 Message Date
Maxime Besson
ef7f6b43e3 Fix space handling in status URI (#2787) 2022-08-26 16:13:13 +02:00
Maxime Besson
ec1a1c11b8 Fix skin translations overriding llng.ini messages (#2773) 2022-08-22 18:55:34 +02:00
Maxime Besson
84d3ca2b89 Use skin translation files when sending mail (#2772) 2022-08-22 18:55:34 +02:00
Christophe Maudoux
df6727ffbd Return ciphered id in JSON response if notif is pending 2022-07-18 23:36:22 +02:00
Maxime Besson
96ef83893d Update oidc tokens during sessions refresh (#2713) 2022-06-27 11:23:49 +02:00
Yadd
46d43e69d9 Use Perltidy 20220217 (Closes: #2765) 2022-06-23 12:12:25 +02:00
Christophe Maudoux
aedda63b3e Remove double entry (#2749) 2022-06-19 23:26:16 +02:00
Maxime Besson
4e29b8e61a Run forAuthUser when serving /ping 2022-06-19 15:24:59 +02:00
Christophe Maudoux
2f1d2a5e3b Code refactoring (#2749) 2022-06-18 18:53:57 +02:00
Christophe Maudoux
17328aa2aa Append favicon option (#2750) 2022-05-16 22:32:11 +02:00
Yadd
fd610864ea Don't export id in Ajax response for authenticated users (#2709) 2022-03-03 18:55:02 +01:00
Yadd
d3389a7370 Render getModule() usable with connected users (fixes: #2664) 2022-02-05 11:55:17 +01:00
Yadd
21f4ca1f35 [WAI] Add role for each message box (#2570) 2022-02-01 22:25:56 +01:00
Christophe Maudoux
18462d6113 Merge branch 'refresh_my_rights' into 'v2.0'
Refresh my rights

See merge request lemonldap-ng/lemonldap-ng!238
2022-01-05 18:10:32 +00:00
Maxime Besson
44cb0444fe Add field and accessor in portal for plugin session info (#2609) 2022-01-05 17:14:02 +01:00
Christophe Maudoux
f583d5944b Keep authenticationLevel (#2658) 2021-11-22 20:40:34 +01:00
Christophe Maudoux
4f2e337e66 Re-order refresh steps (#2658) 2021-11-17 10:03:45 +01:00
Christophe Maudoux
a7467b1d15 Fix version (#2605) 2021-09-23 21:27:05 +02:00
Maxime Besson
6302c957cc Add SAMESITE template param (#2605) 2021-09-23 17:44:52 +02:00
Christophe Maudoux
a4e15ad9a9 Set sameSite value for llnglanguage cookie (#2605) 2021-09-23 17:38:44 +02:00
Yadd
3ed77a01c2 Add buildurl method (#2594) 2021-08-27 14:35:07 +02:00
Christophe Maudoux
21ba445141 Fix unit test (#2564) & some warnings 2021-07-28 10:38:45 +02:00
Christophe Maudoux
a6ecbf1ec8 Fix version & comment 2021-07-26 22:55:27 +02:00
Maxime Besson
0d513ce5b7 Fix CORS on userinfo error response (#2567) 2021-07-26 15:44:20 +02:00
Maxime Besson
15054b9038 Extra precaution for #2539 2021-06-25 07:54:03 +02:00
Yadd
3732cdcc19 Better URL parsing (#2477) 2021-06-24 14:33:27 +02:00
Maxime Besson
63cd5ffb40 Revert 652d8ba9bc
See #2482
2021-06-11 08:53:26 +02:00
Maxime Besson
cd97d3b922 Refactor $req->{cspFormAction} (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
a876d978af Suggest improvement for next major version 2021-04-23 09:02:24 +02:00
Maxime Besson
913ebbd556 fix missing domain in child-src during SAML POST logout (#2513) 2021-04-23 09:02:24 +02:00
Maxime Besson
5ba0c11b58 Add helper to build CSP host list (#2513) 2021-04-23 09:02:24 +02:00
Christophe Maudoux
652d8ba9bc Prevent authentication on backend if account is locked (#2243) 2020-12-16 22:49:41 +01:00
Christophe Maudoux
c2266720f9 Unauthenticated logout request with route & improve unit test (#2342) 2020-12-06 11:21:11 +01:00
Christophe Maudoux
b2306cc8ad Unauthenticated logout (#2342) 2020-12-05 19:31:23 +01:00
Maxime Besson
0263865faa Add CORS headers to error pages (#2380) 2020-11-12 14:34:16 +01:00
Xavier Guimard
893385d007 Replace application/javascript by application/json (Fixes #2376) 2020-11-06 17:58:41 +01:00
Maxime Besson
1de41224f8 Avoid memory leaks in $req->steps (#2369) 2020-11-02 23:22:04 +01:00
Xavier Guimard
c8df084247 Update versions 2020-09-04 17:59:00 +02:00
Maxime Besson
f9cdb5497a Only clean _url part of pdata when redirecting to issuer (#1878,#2124) 2020-09-04 17:17:04 +02:00
Maxime Besson
4497f39efe Factor psession id calculation into Common 2020-08-17 18:43:29 +02:00
Maxime Besson
26cd1945fb Try to compute the correct value of SameSite by default (#2281) 2020-08-17 18:05:09 +02:00
Maxime Besson
7a02fdf8e5 rollback caa346d075 (#2179)
No longer needed since #2261
2020-08-12 09:49:14 +02:00
Maxime Besson
9d9e16e3f9 Remove setAuthSessionInfo from refresh process (#2261) 2020-08-12 09:49:14 +02:00
Maxime Besson
9aa3b9b03f Add correct secure flag to pdata cookie (#2272) 2020-08-10 12:10:33 +02:00
Maxime Besson
a96820d6f6 Set secure flag when removing cookie (#2272) 2020-08-10 12:10:33 +02:00
Maxime Besson
5df1850847 Add cache-control headers to sendJSONresponse (#2234) 2020-06-24 15:49:50 +02:00
Christophe Maudoux
caa346d075 Restore previous authentication level (#2179) 2020-04-27 18:20:23 +02:00
Xavier Guimard
1f80a0ab8c Avoid little warning in test 2020-04-22 15:37:19 +02:00
Maxime Besson
8c94bf0f13 Allow portal JSON responses to include a rendered HTML error block (#2110) 2020-04-15 18:42:31 +02:00
Maxime Besson
e1767abfda CORS: special handling for AJAX SSL (#2110) 2020-04-15 18:42:31 +02:00