13d0260cc9
Configurable OpenID Connect services
2020-07-09 16:27:45 +02:00
97cde9c56a
Generalize refresh failure handling
2020-07-08 17:02:52 +02:00
5df7db5105
Ignore ID token expiry if unavailable
2020-07-07 02:51:33 +02:00
10c890947f
Token expiration and refreshing using the refresh_token flow
2020-07-07 02:26:00 +02:00
25144a13c7
Deduplicated getOrRegisterUser method
2020-07-06 18:14:43 +02:00
07a6d7655f
First basic OpenID Connect implementation
2020-07-01 23:27:50 +02:00
d3ec38bee3
Removed unused function in registration service
2020-05-02 01:07:30 +01:00
8ce38d2158
Fixed not shown existing-email warning on new ldap user
...
- Reduced the amount of different exceptions from LDAP attempt so they
can be handled more consistently.
- Added test to cover.
- Also cleaned up LDAP tests to reduce boilterplate mocks.
Fixes #2048
2020-04-26 12:13:00 +01:00
30db8af460
Merge branch 'master' of git://github.com/ch0wm3in/BookStack into ch0wm3in-master
2020-03-06 20:10:57 +00:00
01b95d91ba
Fixed side-effect in binary LDAP handling
...
- Was not stripping prefix when sending value to LDAP server in search.
- Updated test to cover.
2020-02-15 22:35:15 +00:00
29cc35a304
Added dump_user_details option to LDAP and added binary attribute decode option
...
Related to #1872
2020-02-15 20:31:23 +00:00
14363edb73
Fixed LDAP error thrown by not found user details
...
- Added testing to cover.
Related to #1876
2020-02-15 14:44:36 +00:00
c1fe81466f
Fixed 'interaction_required' response for azure
...
Azure Conditional Access policy 2FA returns 'interaction_required' 400 response https://github.com/SocialiteProviders/Providers/issues/208
2020-02-12 15:03:55 +01:00
3991fbe726
Checked over and aligned registration option behavior across all auth options
...
- Added tests to cover
2020-02-02 17:31:00 +00:00
e743cd3f60
Added files missed in previous commit
2020-02-02 10:59:03 +00:00
3470a6a140
Aligned SAML2 system with LDAP implementation in terms of guards and UI
2020-02-01 16:11:56 +00:00
7728931f15
Set more appropriate login validation and broken up LDAP guide a bit
2020-02-01 14:30:23 +00:00
575b85021d
Started alignment of auth services
...
- Removed LDAP specific logic from login controller, placed in Guard.
- Created safer base user provider for ldap login, to be used for SAML
soon.
- Moved LDAP auth work from user provider to guard.
2020-02-01 11:42:22 +00:00
92690d1ae9
Moved socal auth routes to their own controller
...
Also cleaned some phpdocs and extracted register actions to their own
service.
2020-01-26 14:42:50 +00:00
e06f9f7fe3
Removed setting override system due to confusing behaviour
...
- Was only used to disable registration when LDAP was enabled.
- Caused saved option not to show on settings page causing confusion.
- Extended setting logic where used to take ldap into account instead of
global override.
- Added warning on setting page to show registration enable setting is
not used while ldap is active.
For #1541
2019-12-22 13:19:17 +00:00
f9fa6904b9
Made LDAP auth ID attribute configurable
...
- Allows the field that gets stored as the "External Authentication ID"
to be configurable. Defined as LDAP_ID_ATTRIBUTE=uid in .env.
- Added test to cover usage.
- Also now auto-lowercases when searching for attributes in LDAP
response since PHP always provides them as lower case.
Closes #592 .
2019-12-16 12:40:21 +00:00
ebb3724892
Added onelogin attribution and tweaks after testing saml with onelogin
2019-11-17 17:00:42 +00:00
aef6eb81e4
Added SAML singleLogoutService capabilities
2019-11-17 15:40:36 +00:00
488325f459
Added the ability to auto-load config from metadata url
2019-11-17 14:44:26 +00:00
3a17ba2cb9
Started using OneLogin SAML lib directly
...
- Aligned and formatted config options.
- Provided way to override onelogin lib options if required.
- Added endpoints in core bookstack routes.
- Provided way to debug details provided by idp and formatted by
bookstack.
- Started on test work
- Handled case of email address already in use.
2019-11-17 13:26:43 +00:00
9bba84684f
Appeased codeclimate by extracting out external_auth_id group matching
2019-11-16 15:24:09 +00:00
8169c725d5
Started review of SAML implementation
...
- Updated PHPdoc of SAML service to use type hinting instead.
- Updated groups to only sync if enabled.
- Updated names of some config props.
- Removed a couple of unused config props.
- Added exception to handle no email on SAML response.
2019-11-16 14:42:51 +00:00
bb1f43cbd8
Merge branch 'feature/saml' of git://github.com/Xiphoseer/BookStack into Xiphoseer-feature/saml
2019-11-16 12:42:45 +00:00
be08dc1588
Ran phpcbf and updated helpers typehinting
2019-09-15 18:29:51 +01:00
140298bd96
Updated to Laravel 5.8
2019-09-13 23:58:40 +01:00
eab0ca9648
Covered new invite system with testing
...
Closes #316
2019-08-18 13:55:28 +01:00
e5155a5dcb
Refactored confirm actions to their own controller
2019-08-18 10:47:59 +01:00
44330bdd24
Start user invite system
2019-08-17 15:52:33 +01:00
8e723f10dc
Add error messages, fix LDAP error
2019-08-07 15:31:10 +02:00
03dbe32f99
Refactor for codestyle
2019-08-07 12:07:21 +02:00
bda0082461
Add login and automatic registration; Prepare Group sync
2019-08-06 23:42:46 +02:00
c24764018a
Updated ldap server option parsing to work with protocol and port
...
- Aligns with PHP behaviour where ports is ignore for full LDAP URI.
- Added tests to check format being passed to LDAP is as expected.
- May be related to #1220
- Related to #1386 and #1278
2019-04-16 22:47:53 +01:00
44c537de1a
Performed some LDAP service/test cleanup
2019-03-10 10:54:19 +00:00
502ea608bf
Issue #1306 - Unit Tests for LdapService Changes
2019-03-09 01:08:49 -05:00
55b07c7076
Issue #1306 - Specify display name attribute from LDAP
2019-03-08 23:55:11 -05:00
5ef0992d5b
PHPCS related fixes.
2019-01-27 15:59:23 +05:30
7c8edf5673
Merge pull request #1096 from christophert/add-ldaptlsinsecure
...
Add option to disable LDAPS Certificate Validation
2018-12-22 16:38:50 +00:00
26ec1cc3dc
Added proper escaping to LDAP filter operations
...
To cover #1163
2018-12-20 20:04:09 +00:00
178b5af83a
Added google select_account test
...
Also cleaned the function naming a little to be more descriptive of the
work they do.
2018-11-10 14:52:43 +00:00
2ca8038df2
Removed return from documentation for function redirectToSocialProvider
2018-11-04 11:07:04 -08:00
c37e73b626
Moved redirect functionality back to start register and log in functions
2018-11-04 10:48:55 -08:00
0283ab11b5
Added function for redirect with parameters for Socialite
2018-11-04 10:40:06 -08:00
8e7f703af7
fix how the option is set, change handle to NULL
2018-10-27 16:58:10 -04:00
6c14c09880
Add ability to disable LDAP certificate validation
2018-10-27 16:14:19 -04:00
216358c6e4
Added Google select account functionality to login
2018-10-13 15:14:06 -07:00
Jasper Weyne
Dan Brown
ch0wm3in
Daniel Seiler
Daniel Fanara
abijeet
Justin Stein
Christopher Tran