Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/user_saml.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2020-02-14Add setting to specify a different signature algorithmJulius Härtl
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2020-01-29don't expose method for no reasonArthur Schiwon
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2020-01-29decode objectGUID to their ASCII representation ifArthur Schiwon
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2020-01-29Add counting to the user backendRoeland Jago Douma
This will allow reporting to also list the number of SAML users on the instance. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2020-01-29fixed login with chrome browserFrank Tröger
- fix 'environment-variable' login problem with chrome browser - problem: using nextcloud behind apache2 mod_auth_mellon, chrome browser gets too many redirects - description: nc_sameSiteCookiestrict is not sent by chrome, because of the origin POST request by idp and the 3xx redirects on nextcloud side
2019-06-28prevent confirmation dialogs for passwordless usersArthur Schiwon
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-06-17Handle SLO logout requests from IdP via POSTFrieder Schrempf
Some IdPs send their SLO logout requests via POST. To handle them we need to add an entry in the routing table. Further, we need to hack around the issue, that php-saml only handles GET by copying the request from $_POST to $_GET. This solves #82. Signed-off-by: Frieder Schrempf <frieder.schrempf@online.de>
2019-06-07fix IDP-initiated Logout #334Dylann Cordel
Signed-off-by: Dylann Cordel <d.cordel@webu.coop>
2019-05-29Use a prefix to obtain the nameid formatRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-29Make NameIDFormat configurableRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-27Load a timezone file if no timezone is setRoeland Jago Douma
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-06Merge pull request #319 from nextcloud/fix/noid/user-search-parityblizzz
user search parity as with local users
2019-04-25add additional debug output when reading attributes from the IDPBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2019-04-12user search parity as with local usersArthur Schiwon
* also take displayname and email into account Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-24Merge pull request #286 from nextcloud/fix-268Björn Schießle
always create user in the SAML back-end and update the attributes
2019-01-22user might be already known, but was not mapped yet. init on first login.Arthur Schiwon
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2019-01-20Fixed typo.rakekniven
Reported at Transifex. Signed-off-by: Mark Ziegler <mark.ziegler@rakekniven.de>
2018-12-18create user in the SAML back-end and update the attributes whenBjoern Schiessle
the user was found on another back-end during login Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-12-12sort idps alphabeticallyBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-11-27Merge pull request #279 from klada/userhome_sanity_checkBjörn Schießle
Add sanity checks for user home directory
2018-11-27Merge pull request #188 from nextcloud/dav_samlBjörn Schießle
Add sabredav plugin to register environment auth for dav requests
2018-11-26Add sanity checks for user home directoryDaniel Klaffenbach
When the mapped user home is not a fully qualified path name we'll fall back to setting the mapped home below the server's datadirectory. This provides consistent behavior with the "user_ldap" app which uses the same fallback/safety mechanism. Signed-off-by: Daniel Klaffenbach <daniel.klaffenbach@hrz.tu-chemnitz.de>
2018-11-22Implement mapping of user's home directoryDaniel Klaffenbach
Signed-off-by: Daniel Klaffenbach <daniel.klaffenbach@hrz.tu-chemnitz.de>
2018-11-21Merge pull request #271 from nextcloud/better-error-messagesBjörn Schießle
improve error messages in case SAML is not configured properly
2018-11-20improve error messages in case SAML is not configured properlyBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-11-20remove anonymous option handlingRobin Appelman
this was moved to core Signed-off-by: Robin Appelman <robin@icewind.nl>
2018-11-20set saml user as dav authenticatedRobin Appelman
Signed-off-by: Robin Appelman <robin@icewind.nl>
2018-11-20allow anonymous options requestRobin Appelman
Signed-off-by: Robin Appelman <robin@icewind.nl>
2018-11-20Add sabredav plugin to register environment auth for dav requestsRobin Appelman
Signed-off-by: Robin Appelman <robin@icewind.nl>
2018-11-19content doesn't have to be a array, e.g. for category=type, content is 'saml'Bjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-11-19first check if it is an array and that the key exists, to avoid error ↵Bjoern Schiessle
messages in the log file Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-11-16log IDP parameters in debug modeBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-11-14log provisioning errors during sso environment loginRobin Appelman
Signed-off-by: Robin Appelman <robin@icewind.nl>
2018-11-09add a combobox instead of buttons to select the login method if more then 4 ↵Bjoern Schiessle
different IDPs are configured Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-24make global scale setup more robustBjoern Schiessle
If this server acts as a global scale master and the user is not a local admin of the server we just create the user and continue no need to update additional attributes. But for local users, e.g. the admins of the global scale master we should complete the user setup with all attributes Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-11Actually add error pageRoeland Jago Douma
* The base route now has a function as well so it is not just some empty route * We now actually have an error page Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2018-10-09set base url to 'http://domain/nextcloud/index.php/apps/user_saml/saml'Bjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-09adjust Nextcloud app to php-saml 3.0Bjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-09we need to store some basic user information, even in the global scale scenarioBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-04add missing use clauseBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25fix error messageBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25get both the raw data from the IDP and the formated ones according to the ↵Bjoern Schiessle
configured parameter mapping Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25allow redirect to the logout if it comes from the same serverBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25format user data before sending it to the client nodeBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25add method to get the user data from the idpBjoern Schiessle
This is needed in the global scale setup to forward the user data from the master node (where the login happens) to the client node Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-09-25don't auto provision the user on a global scale setupBjoern Schiessle
with global scale the authentication happens on the master node and then the user is forward to the node they are located. Therefore no user should be created on the master node after the authentication at the idp was successful Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-17added redirection to originalUrl when using SSOredirectJean-Baptiste PIN
Signed-off-by: Jean-Baptiste PIN <jeanbaptiste@idruide.com>
2018-08-17Added copyrightJean-Baptiste
Signed-off-by: Jean-Baptiste <jibet.pin@gmail.com>
2018-08-15make sure that we don't show the "select user back-end login screen if ↵Bjoern Schiessle
authentication over environment variables has been chosen Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-13add missing parameter to function callBjoern Schiessle
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-26 05:09:54 +0300