do not clear login data on every load

logoff is called a lot when a user is not authenticated yet. This can
interfere with the oauth login process when calls are made while the
user is at the IdP, f

do not clear login data on every load

logoff is called a lot when a user is not authenticated yet. This can
interfere with the oauth login process when calls are made while the
user is at the IdP, for example triggered by AJAX beacons like created
by the statistics plugin.
There is no real reason to delete the temporary session data. We can
simply keep it until it is used or replaced by new data.

show more ...

option to enforce oauth for some users

automatic style fixes and new workflows

disable plain auth login in singleService mode #118

do not call auth_login ourselves but signal it

By returning null, the normal auth_login is triggered including all the
needed events. This fixes the CAPTCHA integration.

Enable oauth service plugins to implement their own procedures on logout

Although some oauth services need their own procedures on logout
(e.g. Keycloak needs to access the logout endpoint), there i

Enable oauth service plugins to implement their own procedures on logout

Although some oauth services need their own procedures on logout
(e.g. Keycloak needs to access the logout endpoint), there is no way to
implement them. Fix it.

Signed-off-by: Naoto Kobayashi <naoto.kobayashi4c@gmail.com>

show more ...

fall back to parent strings

this avoids empty messages when errors are displayed by the underlying
authplain plugin

drop concept of GUID and introduce storageID

Previously we created a new GUID for any user trying to login via oauth.
That GUID was used to store the token states. This polluted the cache
area but e

drop concept of GUID and introduce storageID

Previously we created a new GUID for any user trying to login via oauth.
That GUID was used to store the token states. This polluted the cache
area but even worse, it made it impossible to stay logged in on multiple
devices when the IdP invalidated onld access tokens when issuing a new
one (like google does).

Now a session storage is used for the initial login. Permanent storage
is only initialized after a successful login (based on the user's email
address).

show more ...

use the correct group array when creating user.

replaces #101

readd support for farmer setups

In a farm, the return from the IDP will land in the farmer and needs to
be redirected to the proper animal. To do so the animal is stored in the
state parameter which

readd support for farmer setups

In a farm, the return from the IDP will land in the farmer and needs to
be redirected to the proper animal. To do so the animal is stored in the
state parameter which all IDPs should pass back to us as is.

Previously this was hardcoded in the Google service only, now it should
work for all services.

Untested though. Also previously the behavior was also loading the
Farmer plugin even when disabled. I don't know why. I changed it.

show more ...

removed lots of now unused code

another major refactoring

The new OAuthManager is now the main flow manager and should make it
easier to follow the flow. The Session class encapsulates all session
and cookie accesses. A new guid p

another major refactoring

The new OAuthManager is now the main flow manager and should make it
easier to follow the flow. The Session class encapsulates all session
and cookie accesses. A new guid paradigma should make invisible relogins
possible when the session expired. Needs all major cleanup but a first
login worked.

show more ...

Session manager

fix unfinished login

flag indicating that login is in progress was not cleared from session

adding comments and fixmes

Refactoring auth class

Reorder methods in auth class

more fixes and cleanup

somewhat works already

Merge pull request #87 from lindyblackburn/master

correct check for duplicate email

fix for renamed function. closes #91

correct check for duplicate email

Enable login when self-registration is disabled

Add slash in case animalURL() doesn't end with it

Support a farm-setup with google oauth

This assumes that the refactored farmer-plugin is used. (See
https://www.dokuwiki.org/plugin:farmer and
https://github.com/cosmocode/dokuwiki-plugin-farmer )

Support a farm-setup with google oauth

This assumes that the refactored farmer-plugin is used. (See
https://www.dokuwiki.org/plugin:farmer and
https://github.com/cosmocode/dokuwiki-plugin-farmer )

SPR-506

show more ...

Keep the get parameters except id

'id' is provided by the wl() function if needed. We should not duplicate
it.