Commit Graph

366 Commits

Author SHA1 Message Date
Paul Marillonnet 1fa1541c02 views: use MELLON_OPENED_SESSION to anchor local session to the global session (#66747)
If the MELLON_OPENED_SESSION cookie change or disappear during an opened
session, the user is automatically logged out. If it changes after a
previous passive login try, passive login is allowed again.
2022-06-29 11:14:05 +02:00
Paul Marillonnet 025cda4293 tox: test with (bullseye-backports') django3.2 (#64309) 2022-04-20 15:01:59 +02:00
Paul Marillonnet 088dc5eeef setup: allow for (bullseye-backports') django3.2 version (#64309) 2022-04-20 15:01:59 +02:00
Paul Marillonnet e27bafd8cb handle long attribute truncate variations between django2 & 3 (#64309) 2022-04-20 15:01:59 +02:00
Paul Marillonnet dedd924f99 use force_str only when necessary (#64309) 2022-04-20 09:54:54 +02:00
Paul Marillonnet b4704b16c9 use django3.2-compatible re_path urls util (#64309) 2022-04-20 09:54:05 +02:00
Paul Marillonnet 509beeb6c4 discard deprecated ugettext* i18n utils (#64309) 2022-04-20 09:52:47 +02:00
Benjamin Dauvergne 7c9ca09de7 misc: remove six module usage (#63688) 2022-04-08 10:14:54 +02:00
Thomas NOËL 29c3d7aeb0 trivial: bump black version to 22.3.0 2022-03-31 12:17:43 +02:00
Frédéric Péters 8f49eb59b5 translation update 2022-03-25 09:02:58 +01:00
Frédéric Péters ff98a87158 translations: close quotes around username (#63178) 2022-03-25 09:02:43 +01:00
Frédéric Péters 6b3537d083 trivial: bump black version to 22.1.0 (#62312) 2022-03-01 19:30:33 +01:00
Frédéric Péters 12b92b1a9f debian: update django dependency to 2.2 2022-02-18 10:08:04 +01:00
Benjamin Dauvergne fc4f78c039 translation update 2022-02-04 13:25:52 +01:00
Benjamin Dauvergne 104d57f753 views: do not logout in sp_response_logout (#61431)
It's already done in the initialization view, if a new session
has been open since we must keep it open.
2022-02-04 13:02:12 +01:00
Benjamin Dauvergne 947c355baf views: keep next_url trough sp logout (#61431)
* first, create relaystate before build logout.msgUrl
* second, retrieve it in sp_logout_response
2022-02-04 13:00:55 +01:00
Frédéric Péters a2019a930c properly close meta refresh tag (#61020) 2022-01-24 16:57:02 +01:00
Emmanuel Cazenave 8ec0ea8ff6 jenkins: show execution context in coverage reports (#60446) 2022-01-11 16:03:08 +01:00
Frédéric Péters 8ed4373cca build: update setup.py to require at least django 2.2 2021-12-19 16:38:42 +01:00
Frédéric Péters 70586ce95d jenkins: build packages for buster & bullseye 2021-12-12 11:23:53 +01:00
Benjamin Dauvergne be1e50e826 views: log SAML response and assertion in debug view (#58915) 2021-11-23 19:21:23 +01:00
Valentin Deniaud 50cb52b160 views: render debug login template at the last moment (#58906) 2021-11-23 14:41:34 +01:00
Frédéric Péters b80bc26d73 build: bump black version 2021-11-22 22:07:54 +01:00
Frédéric Péters d5579dc095 debian: switch to debhelper-compat 12 (#57538) 2021-10-10 12:11:46 +02:00
Frédéric Péters 090a133d85 translation update 2021-10-05 22:11:08 +02:00
Benjamin Dauvergne 4941fd7281 show an error page when create_server fails (#57176) 2021-09-23 10:39:04 +02:00
Thomas NOËL 3f32879520 translation update 2021-09-17 13:10:54 +02:00
Benjamin Dauvergne 73bfa476ef drop and rename issuer field (#56819) 2021-09-15 16:55:59 +02:00
Benjamin Dauvergne a851b5b2ca migrate issuer data (#56819) 2021-09-15 16:55:59 +02:00
Benjamin Dauvergne ba312afc3e add Issuer model (#56819) 2021-09-14 22:57:42 +02:00
Benjamin Dauvergne 2d1510aae1 adapters: truncate username to the field's max_length (#56482) 2021-08-30 15:29:37 +02:00
Frédéric Péters f6576ff4d7 debian: add back debhelper to build-depends (erroneously removed) (#56134) 2021-08-15 17:24:49 +02:00
Frédéric Péters 3186839774 debian: stop building a python2 package (#56134) 2021-08-13 08:13:25 +02:00
Benjamin Dauvergne fbc3588f1b add MELLON_ASSERTION_CONSUMER_BINDINGS (#52063)
The default value is ['post', 'artifact'].
2021-08-05 15:57:39 +02:00
Benjamin Dauvergne 734a7bb51b Jenkinsfile: run pylint (#51640) 2021-08-05 12:15:20 +02:00
Benjamin Dauvergne 10016d04ca hide "apply isort and pyupgrade" commit (#55990) 2021-08-05 11:13:51 +02:00
Benjamin Dauvergne 4729ef9a3b apply isort and pyupgrade (#55990) 2021-08-05 11:13:19 +02:00
Benjamin Dauvergne 2704f4feaa views: keep a nonce during a forceAuthn request (#55953)
Nonce value and forceAuthn is linked to the request id which is randomly
generated by lasso and returned by IdPs as part of a SAML SSO.
2021-08-03 17:20:49 +02:00
Valentin Deniaud dbdd6fd70b views: add debug login view (#55557) 2021-08-03 11:59:17 +02:00
Valentin Deniaud dde8fa5d02 views: move login code to separate method (#55557) 2021-08-03 11:12:18 +02:00
Valentin Deniaud e4bec98bbe tox: stop testing with python2, django 1.11 and sqlite (#55926) 2021-08-02 17:09:58 +02:00
Benjamin Dauvergne 74e6f5a93d middleware: disable automatic passive authentication if ?no-passive-auth (#55854)
You can add ?no-passive-auth to an URL do disable passive authentication based on
an IdP set common domain cookie.
2021-07-27 12:04:24 +02:00
Benjamin Dauvergne 472ce61844 adapters: improve log messages (#55544)
- add mellon: prefix to all messages
- log all failures at the warning or error level instead of debug
2021-07-13 12:09:12 +02:00
Thomas NOËL abe0328a22 fix typos in README 2021-06-23 10:52:28 +02:00
Frédéric Péters 8f374e5e0d tox: limit psycopg2 to < 2.9 (#54925) 2021-06-17 08:50:03 +02:00
Benjamin Dauvergne fe28a7938c misc: add black files/notes (#51575) 2021-03-02 15:50:59 +01:00
Benjamin Dauvergne 5b9bc1ff57 trivial: apply black (#51575) 2021-03-02 14:52:10 +01:00
Benjamin Dauvergne 672cfb90a4 adapters: report warning about TRANSIENT_FEDERATION_ATTRIBUTE to user (#51568) 2021-03-02 14:47:56 +01:00
Benjamin Dauvergne 3678c49fc0 misc: pass request to django.contrib.auth.authenticate() (#51566) 2021-03-02 12:05:30 +01:00
Benjamin Dauvergne d106f3da90 misc: pass the authentication request to the adapter object (#50833) 2021-02-03 21:21:35 +01:00