Commit Graph

1391 Commits

Author SHA1 Message Date
Benjamin Dauvergne f57fee8b15 [SAMLv2] fix logProfileError() when error is not from lasso 2010-06-18 12:44:45 +00:00
Benjamin Dauvergne 31d3b3c32d [SAMLv2] handle unknown provider on authn requests 2010-06-18 12:44:41 +00:00
Benjamin Dauvergne 60e925a36c [Liberty] Change session index generation method
The assertion id is now used as a session index. A new storable object
'SessionIndex' serves to keep the mapping from assertion ids to real
application session (authentic.sessions.BasicSession).
2010-06-18 12:44:37 +00:00
Benjamin Dauvergne e122504ea0 Handler errors occuring during identity creation, let Field object decide if a field is required 2010-06-10 10:46:12 +00:00
Benjamin Dauvergne fa7a41224e Import field class from ifef project 2010-06-10 10:46:08 +00:00
Benjamin Dauvergne 88daa14c81 Fix typo in last revision 2010-06-10 09:47:27 +00:00
Benjamin Dauvergne d51f078435 Hide import csv when store is LDAP 2010-06-10 09:37:03 +00:00
Benjamin Dauvergne 2e761ae38a Plug CAS setting page 2010-06-09 19:56:13 +00:00
Benjamin Dauvergne 3b3ac162c7 Update UI string for homepage 2010-06-09 12:34:14 +00:00
Benjamin Dauvergne 3dbb3a19f0 Update UI strings and translations 2010-06-09 12:17:27 +00:00
Benjamin Dauvergne 97537c049e Add a spawn cron command line option to start 2010-06-08 22:09:45 +00:00
Benjamin Dauvergne ad0984acb1 Handle already existing username in admin new user form 2010-06-08 17:03:20 +00:00
Benjamin Dauvergne a6112bf071 Configuration: remove welcome-email from configuration keys 2010-06-08 16:36:35 +00:00
Benjamin Dauvergne 3e5eff848e Schemas: add a method to append schema to a group 2010-06-08 16:36:31 +00:00
Benjamin Dauvergne 20fca52442 Add a host command line option to start 2010-06-07 12:06:30 +00:00
Benjamin Dauvergne 8fe398f125 Fix bad markup in UI strings 2010-06-07 11:41:29 +00:00
Benjamin Dauvergne 9ea0834b12 Root: missing import for redirect_with_return_url 2010-06-07 11:41:24 +00:00
Benjamin Dauvergne f085a47b90 Identities: fix hashed password equality checking
* comparing directly the hash is a security hole, do not do this ;-)
2010-05-28 09:52:12 +00:00
Benjamin Dauvergne e5ae0c4a2b SAMLv2: in SpUI.terminate remove inexistent identity argument to save_identity 2010-05-28 09:19:27 +00:00
Benjamin Dauvergne e8ac827a9f SAMLv2: make SpUI inherit from common.LassoDirectory to use soap_call 2010-05-28 09:19:24 +00:00
Benjamin Dauvergne aba9afd6a5 SAMLv2: in slo_idp_finish handle returnURL using methods from misc module 2010-05-28 09:19:21 +00:00
Benjamin Dauvergne 02b6e5e16e SAMLv2: in slo_idp_finish reset in_slo_sp to False 2010-05-28 09:19:18 +00:00
Benjamin Dauvergne 1b87d6234f SAMLv2: let slo_soap pass the session_index to slo_soap_one_provider 2010-05-28 09:19:15 +00:00
Benjamin Dauvergne 0e57c6df30 SAMLv2: many fixes in slo_idp
* only reload session for IdP initiated logout (no in_slo_sp in the session)
 * do not write the session, let the usual maintain_session do it
 * reset the provider index before calling the sub-methods
 * in slo_idp_multi_binding if there is nothing logout, exit early (do not emit any html code)
 * in slo_idp_multi_binding do not reset session.user, since it's already done
2010-05-28 09:19:11 +00:00
Benjamin Dauvergne b343fbc0ea SAMLv2: remove bogus assertion in slo_sp_finish (method can be None) 2010-05-28 09:19:08 +00:00
Benjamin Dauvergne 0f8c61bdb3 SAMLv2: in single_logout_sp, remove useless code already present in slo_idp 2010-05-28 09:19:05 +00:00
Benjamin Dauvergne 3207f5e69e SAMLv2: fix typo get_session/get_session_manager 2010-05-28 09:19:03 +00:00
Benjamin Dauvergne 21300a8b91 SAMLv2: in single_logout_sp do not accept logout requests without a session index (follow the spec) 2010-05-28 09:19:00 +00:00
Benjamin Dauvergne e75cdf2e1d SAMLv2: in singleLogoutFinish only expire current session if there is one 2010-05-28 09:18:57 +00:00
Benjamin Dauvergne ee6d448719 SAMLv2: fix typo in ECP endpoint 2010-05-28 09:18:53 +00:00
Benjamin Dauvergne 8394dff483 SAMLv2: use common.LassoDirectory.postTo instead of local method 2010-05-28 09:18:50 +00:00
Benjamin Dauvergne e8db3ed71f SAMLv2: use get_identity() in load_identity() and save_identity() 2010-05-28 09:18:47 +00:00
Benjamin Dauvergne a0e01236e5 SAMLv2: make error_them_home method user returnURL parameter for the Continue link 2010-05-28 09:18:44 +00:00
Benjamin Dauvergne ac2a1cd185 SAMLv2: factorize identity retrieving into method get_identity 2010-05-28 09:18:41 +00:00
Benjamin Dauvergne 3fe7ce9c11 Conformance: adapt conformance module to new SAMLv2 directory methods 2010-05-28 09:18:38 +00:00
Benjamin Dauvergne d0e56a903e Misc: do not raise if no session in redirect_to_after_url 2010-05-28 09:18:34 +00:00
Benjamin Dauvergne d3a9e9fa13 ID-FFv1.2: use factorized postTo method from common module 2010-05-28 09:18:31 +00:00
Benjamin Dauvergne a11c43b62a Liberty common: factorize postTo and fix soap_call missing return 2010-05-28 09:18:28 +00:00
Benjamin Dauvergne d01d93d45e remove debugging print 2010-05-28 09:18:25 +00:00
Benjamin Dauvergne eb98279b5b Configuration: add HTTP to possible language values 2010-05-28 09:18:19 +00:00
Benjamin Dauvergne e03c102d9d SAMLv2 & ID-WSF 2.0: use SOAPException and soapCall from qommon.soap 2010-05-27 12:06:03 +00:00
Benjamin Dauvergne 742d8dc207 Configuration: add the crypt password hashing scheme 2010-05-27 12:05:59 +00:00
Benjamin Dauvergne 6ae429a988 Identities: fix hashed password equality checks
* For salted scheme, I forgot to re-user the previous salt to check a
   clear passsword against the hash.
2010-05-27 12:05:55 +00:00
Benjamin Dauvergne bf75f4c61b ID-FFv1.2: inherit from LassoDirectory, factorize get_soap_message 2010-05-27 12:05:52 +00:00
Benjamin Dauvergne 60de355c77 SAMLv2: use simple inheritance 2010-05-27 12:05:49 +00:00
Benjamin Dauvergne fb7e574940 Liberty: add caching directives for all liberty endpoints 2010-05-27 12:05:45 +00:00
Benjamin Dauvergne 347cfa27c9 Identities LDAP: escape chars used for filtering by prefix 2010-05-26 12:19:01 +00:00
Benjamin Dauvergne 6d8d0a95a5 Fix apache2.conf to add qo to unhandled URLs 2010-05-26 12:18:56 +00:00
Benjamin Dauvergne 49d4d777fe Misc: add work around for python 2.5 as parse_qsl is not in module urlparse 2010-05-21 15:27:55 +00:00
Benjamin Dauvergne c768589fa6 Misc: add support for form stored referer to misc.redirect_to_referer 2010-05-21 12:01:22 +00:00