YunoHost/SSOwat
1
0
Fork 0
mirror of https://github.com/YunoHost/SSOwat.git synced 2024-09-03 20:06:27 +02:00
Code Issues Projects Releases Packages Wiki Activity
955 commits 8 branches 113 tags 3.6 MiB
Commit graph

955 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alexandre Aubin
b2fe0da547 Clarify code 400 return in edge case where there's no default portal redirection 2024-01-30 21:10:17 +01:00
Alexandre Aubin
e877b2ee85 Make some variables explicitly local 2024-01-30 20:55:16 +01:00
Alexandre Aubin
f6090f86d6 Have 'cookie_secret' as capslocked to make it ~obvious it's a global/constant 2024-01-30 20:52:23 +01:00
Alexandre Aubin
46d3b2420b zzzzz 2024-01-30 20:24:08 +01:00
Alexandre Aubin
447fc0d587 auth header: unfortunately some apps such as nextcloud do need the password to be sent, so let's add more semantic to enable password only for some apps.. 2024-01-30 19:40:28 +01:00
Alexandre Aubin
27f7faaf62 Replace the old perm_user_remote_user_var_in_nginx_conf with protect_against_basic_auth_spoofing such that every perm is protected against auth spoofing by default 2024-01-30 19:36:05 +01:00
Alexandre Aubin
d0683f01c4 Typo 2024-01-30 19:05:56 +01:00
Alexandre Aubin
0566f31c4b Auth header : apparently doesn't work as expect if password is emtpy, so let's add a dummy char 2024-01-30 17:44:26 +01:00
Alexandre Aubin
e9a335eaf7 Simplify/optimize url/acl matching algorithm : drop support for legacy lua regexes, only use regexes for actual regexes, otherwise use a simple 'startswith' check 2023-12-23 20:39:07 +01:00
Alexandre Aubin
493ba581bb Remove the part that injects the password inside the Authorization header ... in the vast majority of cases, only the username should be necessary and trusted by the app 2023-12-23 20:08:35 +01:00
Alexandre Aubin
f81ae9d5c5 Add a query string 'msg=access_denied' when denying access to a logged-in user, such that we may display it nicely on the frontend? 2023-11-28 19:59:13 +01:00
Alexandre Aubin
3336464481 auth: also confirm that the cookie was delivered for this domain (or parent) 2023-11-28 19:57:57 +01:00
Alexandre Aubin
6263195756 ew, /tabz/ 2023-11-28 19:26:03 +01:00
Alexandre Aubin
d6d775f0dc Uuuuh how was it even supposed to work eh 2023-11-28 19:14:19 +01:00
Alexandre Aubin
31a325dc8c Typoz 2023-11-28 19:14:19 +01:00
Alexandre Aubin
6223239e94 implement proper expiration/prolong mechanism for cookies 2023-11-28 19:14:19 +01:00
Alexandre Aubin
b0b128f53d Remove unused 'redirected_regex' mechanism, + we don't need the label and show_tile property on acls 2023-10-07 17:49:49 +02:00
Alexandre Aubin
8d2acdd174 Fix the boring case where the cookie secret doesnt exist yet 2023-10-06 14:44:05 +02:00
Alexandre Aubin
a3d54635e0 Prevent epic crash when domain_portal_urls or permissions are not defined in the conf 2023-10-03 19:58:55 +02:00
Alexandre Aubin
769f5f9cfa access.lua: add special 'default' key in 'domain_portal_urls' to handle case where we reach an unmanaged domain 2023-09-29 14:31:30 +02:00
Alexandre Aubin
cac360bee9 access.lua: move helper at the top with the other sugar stuff 2023-09-29 14:30:36 +02:00
Alexandre Aubin
99749decdc access.lua: rework again ACL check because the previous code sometimes ended up with error 500 because of permission = nil 2023-09-29 14:30:14 +02:00
Alexandre Aubin
12466db0d7 debian: we need lua-cjson, dependency for the jwt thing 2023-09-29 14:28:26 +02:00
Alexandre Aubin
aa7f607750 debian: we need lua-filesystem dependency 2023-09-28 19:31:13 +02:00
Alexandre Aubin
a2dc0bfb08 cleanup: remove dummy portal example 2023-09-27 20:35:57 +02:00
Alexandre Aubin
a130dec731 debian: propagate changes to install declarations 2023-09-27 20:35:35 +02:00
Alexandre Aubin
53700e72e9 Merge remote-tracking branch 'origin/dev' into bookworm 2023-09-27 20:34:04 +02:00
Alexandre Aubin
e6ffae75bd
Merge pull request #217 from YunoHost/portal-api 
SSOwat epic refactoring / Portal API
 2023-09-27 18:50:21 +02:00
Alexandre Aubin
e04e601455 Merge remote-tracking branch 'origin/bookworm' into portal-api 2023-09-27 18:49:28 +02:00
Alexandre Aubin
ea9e084688
Merge pull request #220 from selfhoster1312/lua-optimizations 
portal-api: Optimization by caching & no check on public routes
 2023-09-27 18:43:26 +02:00
Alexandre Aubin
46352e6a7f
fix cached_jwt_verify signature 2023-09-27 18:43:13 +02:00
Alexandre Aubin
809a2a93b6
Merge pull request #221 from orhtej2/pcre2 
Fix helper for bookworm.
 2023-09-08 19:59:28 +02:00
orhtej2
2880d1cfb9 Fix helper for bookworm. 2023-09-08 19:57:36 +02:00
selfhoster1312
5eff85928e Cache JWT crypto work, only check auth on non-public routes 2023-09-02 19:39:07 +02:00
Alexandre Aubin
38a6f23f38
Merge pull request #219 from yunohost-bot/weblate-yunohost-ssowat 
Translations update from Weblate
 2023-08-31 17:29:31 +02:00
ButterflyOfFire
79d0e7b497 Translated using Weblate (Kabyle) 
Currently translated at 31.9% (15 of 47 strings)

Translation: YunoHost/SSOwat
Translate-URL: https://translate.yunohost.org/projects/yunohost/ssowat/kab/
 2023-08-31 00:25:46 +02:00
Alexandre Aubin
5da36abb74
Merge pull request #215 from selfhoster1312/epic_refactoring 
Do not 500 when a requested domain is not configured for SSOWat
 2023-08-13 18:55:02 +02:00
selfhoster1312
5fcfd9ede6 Do not 500 when a requested domain is not configured for SSOWat 2023-08-13 18:17:52 +02:00
Tagada
1b44ec4898 Merge branch 'dev' into bookworm 2023-07-20 15:55:18 +02:00
Alexandre Aubin
1ac6388242 Misc fixes after tests on the battlefield 2023-07-18 01:26:56 +02:00
Alexandre Aubin
c68f90b83e Update changelog for 11.2 2023-07-17 16:34:57 +02:00
Alexandre Aubin
85591a5744
Merge pull request #214 from yunohost-bot/weblate-yunohost-ssowat 
Translations update from Weblate
 2023-07-17 15:48:29 +02:00
Alexandre Aubin
6044595ca1 Merge remote-tracking branch 'origin/dev' into epic_refactoring 2023-07-16 00:49:43 +02:00
Alexandre Aubin
24b7630d3c epic refactoring: refactor the 'portal url' logic, we shall now have a dict mapping domains to portal urls (which is anyway imposed by cookie management unless we reintroduce complex cross-domain authentication...) 2023-07-15 21:27:40 +02:00
Alexandre Aubin
93ee6371ae refactoring: drop the complex redirection check which was meant to check the callback URLs ... this is to be handled in the future new portal (or whatever is going to implement the callback redirection logic) 2023-07-15 21:22:27 +02:00
Alexandre Aubin
02952d0202 Moar epic refactoring ... merge 'helpers.lua' inside 'access.lua' to reduce complexity ... 2023-07-15 19:51:31 +02:00
Alexandre Aubin
df094ea0e3 Cleanup unused stuff 2023-07-13 16:41:17 +02:00
motcha
429db4e2d5 Translated using Weblate (Japanese) 
Currently translated at 100.0% (47 of 47 strings)

Translation: YunoHost/SSOwat
Translate-URL: https://translate.yunohost.org/projects/yunohost/ssowat/ja/
 2023-07-12 01:35:13 +02:00
Alexandre Aubin
ea0bc8a89c portalapi: propagate changes on the new API, decrypt the AES256-encrypted password found in user cookie to be able to construct the basic auth headers 2023-07-11 22:41:09 +02:00
Alexandre Aubin
40389a9aff
Merge pull request #213 from yunohost-bot/weblate-yunohost-ssowat 
Translations update from Weblate
 2023-07-11 16:34:00 +02:00