lemonldap-ng/lemonldap-ng-portal
Maxime Besson e1f927a195 Check service= parameter on CAS logout (#1795)
service= redirect URL is not checked when logging out from CAS, to avoid
insecure redirect attacks. The verification is only made if CAS access
control is enabled.

In order for this to work in common cases (applications redirects to an
unprotected page after logout), we add CAS App domains to the list of
globally trusted domains.

If your application wants to redirect to a third-party domain, it needs
to be added to LLNG's trustedDomains
2019-06-27 12:40:40 +02:00
..
eg Revert "Update doc" 2018-03-12 16:45:22 +01:00
inc/LWP/Protocol Tidy 2018-06-21 21:35:16 +02:00
lib/Lemonldap/NG Check service= parameter on CAS logout (#1795) 2019-06-27 12:40:40 +02:00
scripts Add script to delete session (#1697) 2019-04-03 09:51:32 +02:00
site Update lang 2019-06-25 19:03:04 +02:00
t Check service= parameter on CAS logout (#1795) 2019-06-27 12:40:40 +02:00
.bowerrc Revert "Update doc" 2018-03-12 16:45:22 +01:00
.proverc Provide configuration for manual launching of unit tests 2019-03-14 16:38:40 +01:00
bower.json Switch to jQuery 3.4 (#1716) 2019-04-19 14:50:44 +02:00
Changes Revert "Update doc" 2018-03-12 16:45:22 +01:00
Makefile.PL Update version in module dependencies 2019-05-12 16:22:50 +02:00
MANIFEST Add #1799 test 2019-06-15 08:29:36 +02:00
META.json Update version in module dependencies 2019-05-12 16:22:50 +02:00
META.yml Update version in module dependencies 2019-05-12 16:22:50 +02:00
README Revert "Update doc" 2018-03-12 16:45:22 +01:00

LemonLDAP::NG
====================

LemonLDAP::NG is a modular Web-SSO based on Apache::Session modules.
This is the portal part of it. You can find documentation here:
 * for administrators: http://lemonldap-ng.org/
 * for developers: see embedded perldoc

LemonLDAP::NG is a free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2, or (at your option)
any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see L<http://www.gnu.org/licenses/>.

Copyright:
 * 2005-2015 by Xavier Guimard and Clément Oudot
 * 2008-2011 by Thomas Chemineau
 * 2012-2015 by François-Xavier Deltombe and Sandro Cazzaniga