Commit graph

289 commits

Author SHA1 Message Date
Valentin Samir
6bdff5ac86 Correct some tests 2015-11-20 17:38:03 +01:00
Valentin Samir
7beefa537f Template factorisation 2015-11-20 16:00:26 +01:00
Valentin Samir
9df1cd2e31 Add javascript login function allow service A to log user to service B via javascript
CORS need to be correctly configured if not this can lead to security issues.
Please do not put Access-Control-Allow-Origin: "*".
You can use django-cors-headers to properly configure CORS
2015-11-17 14:50:16 +01:00
Valentin Samir
ee987f6d00 Remember up to 100 login ticket insted of 1 2015-11-14 01:05:53 +01:00
Valentin Samir
df9dd5364f On logout first invalidate all PGTs 2015-11-14 00:21:20 +01:00
Valentin Samir
0012a8f65d [logout] Clean sessions variables (actually logout) before sending SLO requests
Otherwise some backend may logout before we are actually logged out from the CAS
2015-11-13 23:47:06 +01:00
Valentin Samir
50781dba18 add some tests 2015-06-21 18:59:37 +02:00
Valentin Samir
c0d8550120 Add some tests using tox 2015-06-13 00:03:06 +02:00
Valentin Samir
39557d1942 PEP8 2015-06-12 18:12:35 +02:00
Valentin Samir
ba4af1372c squashmigrations 2015-06-12 16:46:50 +02:00
Valentin Samir
942f16a347 list_display for User admin model 2015-06-12 16:37:50 +02:00
Valentin Samir
365cfd4279 oops 2015-06-11 23:40:28 +02:00
Valentin Samir
77fc5b5988 Compatibility with different session backend + admin layout 2015-06-11 23:04:26 +02:00
Valentin Samir
245086f6ef By session logout 2015-06-09 22:04:41 +02:00
Valentin Samir
41fcc06200 MysqlAuthUser use return username for case 2015-06-09 16:42:28 +02:00
Valentin Samir
1ada840bdc Possibility to specify a single log out callback 2015-06-08 18:22:10 +02:00
Valentin Samir
a4ff5c3d64 Extended validity for PGT 2015-06-08 02:51:22 +02:00
Valentin Samir
8fe1738183 noop 2015-06-07 23:50:25 +02:00
Valentin Samir
277788e593 Generate new LT only then the previous has been used 2015-06-07 23:46:32 +02:00
Valentin Samir
fe8c74ba08 User attribut may not exist 2015-06-07 17:12:04 +02:00
Valentin Samir
aa5bb7ef72 Use url parameter on logout 2015-06-07 16:53:27 +02:00
Valentin Samir
5e54ffcc46 attributes joker 2015-06-07 14:41:27 +02:00
Valentin Samir
6185ec5216 Add Login Ticket to prevent login replay + by ticket len options 2015-06-05 15:44:17 +02:00
Valentin Samir
1695cd24ea filter attributs does not necessary exists 2015-06-05 00:14:56 +02:00
Valentin Samir
02fd557216 ProxyGrantingTicket are never validate bis 2015-06-04 16:48:11 +02:00
Valentin Samir
60013fbfff ProxyGrantingTicket are never validate 2015-06-04 16:45:47 +02:00
Valentin Samir
69935e9761 add restrict_users to service pattern list_display 2015-06-04 16:25:26 +02:00
Valentin Samir
cd79935435 so no xml/text header in SLO 2015-06-04 14:48:07 +02:00
Valentin Samir
f1fbdd3653 it seems that SLO requests need to be in logoutRequest POST params
cf phpCAS official implementation
2015-06-04 14:39:36 +02:00
Valentin Samir
603b4a8063 Protect the auth view with a shared secret 2015-06-03 18:32:15 +02:00
Valentin Samir
cb84936b6c an auth view to validate (username, password, service) by remote service 2015-06-03 18:15:37 +02:00
Valentin Samir
690c2c3b29 some encode stuff 2015-06-03 17:42:25 +02:00
Valentin Samir
f73e55b5ce Add a logout template and possibility to redirect to login on logout 2015-06-02 21:06:32 +02:00
Valentin Samir
54f9b7c50c compact xml suite 2015-06-02 00:03:57 +02:00
Valentin Samir
9f29d1ef20 xml compact suite 2015-06-01 23:59:49 +02:00
Valentin Samir
63f0719109 xml compact suite 2015-06-01 23:57:52 +02:00
Valentin Samir
152d43d5dc compact xml suite 2015-06-01 23:55:34 +02:00
Valentin Samir
4cfd29942b compact xml 2015-06-01 23:53:05 +02:00
Valentin Samir
44cbf0f2b8 migration for the previous commit 2015-05-30 19:47:47 +02:00
Valentin Samir
b4a5961886 Using fresh user attributs on ticket creation + auth class as string in config 2015-05-30 19:45:59 +02:00
Valentin Samir
443c7987a9 Update README, add information about internatinalization 2015-05-30 19:19:22 +02:00
Valentin Samir
b6e2a7320b Usage of namespace for / -> /login redirection 2015-05-30 18:58:58 +02:00
Valentin Samir
238d6da2a3 SamlValidation -> SamlValidate 2015-05-29 20:07:53 +02:00
Valentin Samir
1d84f2c86e Update README with namespace 2015-05-29 19:38:34 +02:00
Valentin Samir
5d1ce93e06 fix allow_proxy_ticket 2015-05-29 19:33:42 +02:00
Valentin Samir
ec85174fc4 forgotten self in super calls 2015-05-29 19:31:04 +02:00
Valentin Samir
ff74a07965 Use only classe view, put ticket prefix as config option 2015-05-29 19:27:54 +02:00
Valentin Samir
e1549dd6ff use a LogoutMixin 2015-05-29 16:14:27 +02:00
Valentin Samir
a0b1a095e4 Login/Logout view are now class views 2015-05-29 16:11:10 +02:00
Valentin Samir
02872d218f Django command to clean old tickets 2015-05-28 17:30:27 +02:00