Alexandre Aubin
a13a2fee1e
More extensive check between allowed rules vs. protected rules
2019-10-03 23:11:52 +02:00
Alexandre Aubin
1eb322df17
Many tweaks in log system + implement many log messages in low-level functions
2019-10-03 20:42:01 +02:00
Alexandre Aubin
7cb61f1619
Merge branch 'logging' into logging-reloaded
2019-09-24 17:27:44 +02:00
Geoff Montel
1161367d0e
Fixed: bug serving files because of LUA exception
...
"Interrupted system call" during PWDIR change on "popen" function
Restored by removing FIND's wildcard which could yield fo emptiness
(example : `mydir/` is empty; making `cd mydir && find *` yielding
to non argumented FIND function.
Tested on Stretch with nginx (1.10.3-1+deb9u2) and lua5.1 (5.1.5-8.1+b2).
Note that this could lead to bugs, code refactor should enclose lua-filesystem (1.6.3-1),
but I'm a rookie in LUA.
2019-07-14 14:30:37 +02:00
Josué Tille
b0756e2494
Allow access in portail in other domain than main domain
2019-05-17 22:42:52 +02:00
chateau
13257e4de0
allow to redirect sso pages the same way than apps urls (from login page)
2019-03-20 03:17:17 +01:00
Alexandre Aubin
32a9229ef4
Enable cache for 1 hour for static assets
2019-03-19 16:52:43 +01:00
Alexandre Aubin
23e78c2c39
This TODO is done
2019-03-19 15:08:09 +01:00
Alexandre Aubin
0c377c3363
Rename css/js files for semantic + explain their purpose
2019-03-19 00:17:53 +01:00
Alexandre Aubin
67e253211c
This ynhpanel.json has never been used by anything ...
2019-03-18 18:24:49 +01:00
Alexandre Aubin
328c0b73f0
Misc fixes + note about stuff to fix
2019-03-14 17:41:31 +01:00
chateau
9845d99398
Make files in current theme's directory accessibles under " https://server.tld/ynhtheme/ ".
2019-03-09 11:21:12 +01:00
Alexandre Aubin
2f24e82f38
Add trick to access.lua to be able to inject custom/theme css and js when in apps as well
2019-02-23 04:20:01 +01:00
Alexandre Aubin
7dc84973df
Improve comment
2018-12-14 00:31:54 +01:00
ljf (zamentur)
c3a9380361
[fix] PCRE choice if no %. in url regex
2018-12-13 23:23:10 +01:00
ljf
b90153a5ca
[enh] Add comment about lua pattern deprecated
2018-06-24 20:44:28 +02:00
ljf
9cbe43862b
[enh] Add PCRE regex support
2018-06-24 16:04:26 +02:00
Alexandre Aubin
d38d5e3d29
[fix] Force back_url to use HTTPS ( #93 )
2017-10-12 22:06:30 +02:00
sidddy
fc52f05459
Quick fix for CDA security issue
2017-05-18 08:45:20 +02:00
sidddy
ad39e3ded5
Added access log, ignore IP, check acl for basic auth
2017-05-13 15:06:18 +02:00
Laurent Peuch
c019f9d208
[fix] check users ACL on http basic auth
2017-05-12 22:45:19 +02:00
JimboJoe
5228bf4f0c
[fix] Fix tile not displayed when app is installed on root (bug #285 ) ( #71 )
...
* Fix proposal for bug #285 (YunoHost tile is not displayed when the app is installed on root path)
* Fix access to administration page
2017-05-12 22:45:19 +02:00
opi
9956a7c1c1
[fix] Validate domain & url before redirection on login.
2017-03-08 11:08:33 +01:00
opi
0823062e30
[fix] Escape dash in domain before matching.
2017-02-23 23:14:03 +01:00
opi
af53f4d393
[fix] match protected URIs against URL arguments
2016-04-29 17:28:08 +02:00
Maniack Crudelis
3b2bc73df5
Regex non reconnues sur protected_regex
...
Les patterns sont interprétés correctement sur unprotected_regex, mais pas sur protected_regex.
L'ajout de ..hlp.uri_args_string() corrige ça et permet d'interpréter correctement les patterns
2016-04-29 17:28:08 +02:00
kload
0ebddc079a
[fix] Load libraries locally to avoid caching
2015-05-16 09:42:26 +02:00
kload
294b1d6058
[fix] Use 'cache' shared table to store CDA keys and avoid infinite redirections
2015-05-04 19:30:32 +02:00
kload
8953860017
[fix] Efficiently generate random strings
2015-04-30 15:16:51 +02:00
kload
32b730c11f
[fix] Load modules as proper modules + typo
2015-02-15 13:09:15 +01:00
kload
a0163f9f39
[enh] Finish documenting the code
2015-02-15 13:09:15 +01:00
kload
35e69a1bf2
[fix] Separate files properly
2015-02-12 12:08:52 +01:00
kload
84015149b9
[enh] Separate configuration file loading to a new file and document it
2015-02-02 00:05:09 +01:00
Alexis Gavoty
83718fd05e
Merge pull request #28 from opi/master
...
[fix] Do not limit amount of mail aliases & forward.
2014-12-08 20:44:50 +01:00
Alexis Gavoty
48983a6e68
[fix] Do match skipped/redirected/unprotected URIs against URL arguments
2014-12-07 19:40:03 +01:00
opi
b59376814e
[fix] Forget to reset count for maildrop.
2014-11-27 14:20:21 +01:00
opi
696f09c8c2
[fix] Clean cache update according to last commit.
2014-11-27 14:19:52 +01:00
opi
d809c8de6a
[fix] Do not limit amount of mail aliases & forward.
2014-11-27 13:56:34 +01:00
opi
edd3e030f4
[fix] Force portal scheme. Fix #25
2014-11-13 20:27:01 +01:00
opi
d361f0e6bb
[fix] Do not return formatted html in ynhpanel.json
2014-11-13 19:01:16 +01:00
kload
2e1117beff
[enh] Handle local domain (yunohost.local by default) as a main domain replacement
2014-09-13 23:21:21 +02:00
kload
f32f278105
[enh] Limit domains per user
2014-08-19 16:01:14 +02:00
Hnk Reno
8eba1864a6
[fix] Fix small grammatical error.
2014-06-21 12:31:02 +02:00
opi
ad63afbfad
Use proper ngx code for "access denied" page.
2014-06-02 18:09:43 +02:00
Alexis Gavoty
07fb6e5435
[fix] Force string in URI args
2014-05-30 11:58:55 +02:00
kload
27c40011b7
[fix] portal_url for ynhanel.json
2014-05-14 22:27:07 +00:00
kload
22f0d518ce
[enh] Fix SSO path
2014-05-14 15:27:34 +00:00
kload
87bd67547d
[fix] Check already used email addresses + saving fix
2014-05-14 10:05:49 +00:00
kload
83e3b3acb1
[enh] Integrarte courgette's theme + i18n
2014-05-13 23:42:31 +00:00
kload
2883cb8017
[fix] Translate missing strings
2014-05-12 12:39:35 +00:00
kload
82457d6437
[enh] i18n
2014-05-12 12:32:56 +00:00
Kload
bf14b2f17f
[fix] Correctly save & reload mail cache
2014-05-10 17:51:56 +02:00
Alexis Gavoty
e5e4f35223
[enh] Log authentication fails as ERROR
2014-04-25 16:15:32 +02:00
Alexis Gavoty
d5663e93b2
[enh] default_type text/html :)
2014-04-21 21:00:42 +02:00
Kload
baa62e1afe
[fix] Strange Raspi regex error + trailing spaces
2014-04-21 13:04:05 +02:00
Kload
ccafd26a00
[fix] additionnal_header default value
2014-04-18 13:09:15 +02:00
Kload
71c0903431
[fix] Add some default values
2014-04-17 16:27:42 +02:00
Kload
12f4861bce
[enh] Default configuration value table
2014-04-17 14:51:47 +02:00
Kload
ccf1453369
[enh] Allow modification of LDAP parameters
2014-04-17 14:40:52 +02:00
Kload
2f86621df6
[enh] Keep URI arguments at every redirection
2014-04-17 12:21:11 +02:00
Kload
68499e3171
[fix] Logout
2014-04-17 10:46:01 +02:00
Kload
790119235d
[enh] Renew session until session_max_timeout value + bugfixes + logging informations
2014-04-16 21:06:47 +02:00
Alexis Gavoty
0ff95a99dc
[enh] Custom session timeout ( closes #4 )
2014-04-15 16:30:43 +02:00
Alexis Gavoty
78828028d3
[enh] Force HTTPS when set authentication headers ( closes #3 )
2014-04-11 15:18:04 +02:00
Alexis Gavoty
9bd01e9fb9
Update access.lua
2014-04-10 22:12:14 +02:00
kload
8d53f1b366
[enh] Add persistent rules (as conf.json.persistent)
2014-04-10 18:42:43 +00:00
Alexis Gavoty
5c6c8fdf39
[enh] Add custom redirections (url & regex)
2014-04-10 17:35:28 +02:00
kload
f5d7d0b46c
Implement must_be_protected URL
2014-03-03 15:44:17 +01:00
kload
2c84098504
Implement regex check in urls/uris
2014-03-03 15:04:08 +01:00
kload
be878f7e74
Add mail authentication ability
2014-02-19 12:57:57 +01:00
opi
ce73333a2d
Display more user info on panel.
2014-02-19 01:49:35 +01:00
opi
df60ba6ada
YNH Panel. 1st draft.
2014-02-17 13:07:28 +01:00
Kload
c70de6f594
Serve JSON with revelant informations for the panel
2014-02-04 21:41:53 +01:00
Kload
5e80f61b46
Serve ynhpanel.js on every domains
2014-02-04 16:28:54 +01:00
Kload
c9a6d16565
Improve cross-domain authentication
2014-01-31 21:25:46 +01:00
Kload
5fa1188fca
Remove empty spaces in access.lua
2013-12-03 19:46:48 +01:00
Kload
efbba747a1
ARM cache bugfix
2013-11-29 16:29:57 +01:00
Kload
48b76d1395
ARM cache bugfix
2013-11-29 13:22:36 +01:00
Jérôme Lebleu
ce819a24ac
Fix condition on optional Referer header
2013-11-27 03:51:12 +01:00
Alexis Gavoty
e55c63f28d
Redirect to portal instead of 403
2013-11-23 13:15:13 +01:00
kload
89be69b1e6
Don't regenerate srvkey at reloading
2013-10-30 16:29:19 +00:00
Alexis Gavoty
1788a72e88
Update access.lua
2013-10-30 11:13:31 +01:00
Kload
39032542d9
Bugfix
2013-10-29 14:17:49 +00:00
Kload
0f599dcba5
optionnal users conf
2013-10-29 11:54:45 +00:00
Kload
ec61f68df6
Allow URI without trailing /
2013-10-29 11:53:22 +00:00
Kload
4ee9f6df2a
User access
2013-10-29 10:48:56 +00:00
Kload
c881274512
Whoops
2013-10-29 09:25:44 +00:00
Kload
dc00adc86e
Iframe panel
2013-10-29 09:16:30 +00:00
Kload
3d966ce49a
Move cache to Nginx shared dict
2013-10-24 09:09:22 +00:00
Kload
f9547b6dc8
Panel bugfixes
2013-10-23 11:01:14 +00:00
Kload
418ae04571
Add YunoHost panel
2013-10-23 09:21:05 +00:00
Kload
098923c980
Cache fix
2013-10-21 22:53:42 +02:00
kload
d611d15ce2
User edition
2013-10-21 18:43:12 +00:00
Kload
92d2e8848f
User info view + password edition
2013-10-21 13:13:43 +02:00
Kload
b7743cbe45
Bugfixes + flash system
2013-10-20 22:07:26 +02:00
Kload
0ddd88c409
Forbid acces to directory root
2013-10-20 18:45:10 +02:00
Kload
b34c1fcc22
Fixes + login style
2013-10-20 18:25:24 +02:00
Kload
d0bd3f4d1b
Bugfixes
2013-10-20 17:24:44 +02:00
Kload
366294502c
Refactoring + serving file from lua
2013-10-20 16:38:49 +02:00
Kload
8aecbb9967
Logout redirect URL
2013-10-17 19:34:51 +02:00