| d1826331 | 15-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
better translation handling on exceptions |
| 39730c7e | 15-Dec-2021 |
Anna Dabrowska <dabrowska@cosmocode.de> |
Fix check of valid email domains |
| 1a5ede3e | 15-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
improved user validation, added tests |
| c36447c6 | 15-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
custom services should be able set arbitrary scopes |
| 2a8b22d5 | 14-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
fall back to parent strings
this avoids empty messages when errors are displayed by the underlying authplain plugin |
| e261c7e8 | 13-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
lowercase mail |
| 28002081 | 13-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
drop concept of GUID and introduce storageID
Previously we created a new GUID for any user trying to login via oauth. That GUID was used to store the token states. This polluted the cache area but e
drop concept of GUID and introduce storageID
Previously we created a new GUID for any user trying to login via oauth. That GUID was used to store the token states. This polluted the cache area but even worse, it made it impossible to stay logged in on multiple devices when the IdP invalidated onld access tokens when issuing a new one (like google does).
Now a session storage is used for the initial login. Permanent storage is only initialized after a successful login (based on the user's email address).
show more ...
|
| 9cbef4d7 | 11-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
moved token refresh to adapter class
This also takes care of saving the refresh token for when it's not renewed on refresh (like Google doesn't). |
| eae50416 | 08-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
check for request token on login |
| c82ad624 | 06-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
use refresh token when AccessToken is about to expire |
| c7021104 | 05-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
make tests happy about our info config entry |
| f8792861 | 05-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
removed obsolete settings from language files |
| 3e5be593 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
Re-Added custom metadata class for redirect info
replaces #95 |
| 4928b245 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
use the correct group array when creating user.
replaces #101 |
| ef19de6c | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
fixed button styling |
| a9ed3890 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
added base service to make things easier for custom implementations |
| 04a78b87 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
renamed our Service to Adapter to avoid confusion
Also added a mechanism to register Services from an adapter |
| 8523e9d0 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
readd support for farmer setups
In a farm, the return from the IDP will land in the farmer and needs to be redirected to the proper animal. To do so the animal is stored in the state parameter which
readd support for farmer setups
In a farm, the return from the IDP will land in the farmer and needs to be redirected to the proper animal. To do so the animal is stored in the state parameter which all IDPs should pass back to us as is.
Previously this was hardcoded in the Google service only, now it should work for all services.
Untested though. Also previously the behavior was also loading the Farmer plugin even when disabled. I don't know why. I changed it.
show more ...
|
| 31039e80 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
restore proper ID context after login |
| e170f465 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
removed lots of now unused code |
| 6d9a8a49 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
make cookie login work, some more cleanup |
| b0c07e15 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
Use new form event for profile settings. fixes #109 |
| 74b4d4a4 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
another major refactoring
The new OAuthManager is now the main flow manager and should make it easier to follow the flow. The Session class encapsulates all session and cookie accesses. A new guid p
another major refactoring
The new OAuthManager is now the main flow manager and should make it easier to follow the flow. The Session class encapsulates all session and cookie accesses. A new guid paradigma should make invisible relogins possible when the session expired. Needs all major cleanup but a first login worked.
show more ...
|
| e4f55b9b | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
removed obsolete files |
| 1b3ed597 | 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
some type cleanup in Service |