23 Commits

Author	SHA1	Message	Date
Dan Brown	8cbaa3e27c	SAML2: Fixed non-spec point of logout, Improved redirect location ... This changes the point-of-logout to be within the initial part of the SAML logout flow, as per 5.3.2 of the SAML spec, processing step 2. This also improves the logout redirect handling to use the global redirect suggestion so that auto-login handling is properly taken into account. Added tests to cover. Manual testing performed against keycloak. For #4713	2023-12-08 18:42:13 +00:00
Dan Brown	11853361b0	SAML2: Included parsed groups in dump data ... Updated code style of class while there. Removed redundant check and string translation used. For #4706	2023-12-03 19:36:03 +00:00
Dan Brown	295cd01605	Played around with a new app structure	2023-05-17 17:56:55 +01:00
Dan Brown	8c738aedee	Added sessionindex to SAML2 single logout request to idp ... related to #3936	2023-04-28 13:55:25 +01:00
Dan Brown	c724bfe4d3	Copied over work from user_permissions branch ... Only that relevant to the additional testing work.	2023-01-21 11:08:34 +00:00
Dan Brown	f0ac454be1	Prevented saml2 autodiscovery on metadata load ... Fixes issue where metadata cannot be viewed if autload is active and entityid url is not active. For #2480	2022-10-16 09:50:08 +01:00
Dan Brown	72c8b138e1	Updated tests to use ssddanbrown/asserthtml package ... Closes #3519	2022-07-23 15:10:18 +01:00
Dan Brown	f910738a80	Changed logout routes to POST instead of GET ... As per #3047. Also made some SAML specific fixes: - IDP initiated login was broken due to forced default session value. Double checked against OneLogin lib docs that this reverted logic was fine. - Changed how the saml login flow works to use 'withoutMiddleware' on the route instead of hacking out the session driver. This was due to the array driver (previously used for the hack) no longer being considered non-persistent.	2021-11-14 21:13:24 +00:00
Dan Brown	f139cded78	Laravel 8 shift squash & merge (#3029) ... * Temporarily moved back config path * Apply Laravel coding style * Shift exception handler * Shift HTTP kernel and middleware * Shift service providers * Convert options array to fluent methods * Shift to class based routes * Shift console routes * Ignore temporary framework files * Shift to class based factories * Namespace seeders * Shift PSR-4 autoloading * Shift config files * Default config files * Shift Laravel dependencies * Shift return type of base TestCase methods * Shift cleanup * Applied stylci style changes * Reverted config files location * Applied manual changes to Laravel 8 shift Co-authored-by: Shift <shift@laravelshift.com>	2021-10-30 21:29:59 +01:00
Dan Brown	f77236aa38	Laravel 7.x Shift (#3011) ... * Apply Laravel coding style * Shift bindings * Shift core files * Shift to Throwable * Add laravel/ui dependency * Shift Eloquent methods * Shift config files * Shift Laravel dependencies * Shift cleanup * Shift test config and references * Applied styleci changes * Applied fixes post shift to laravel 7 Co-authored-by: Shift <shift@laravelshift.com>	2021-10-26 22:04:18 +01:00
Dan Brown	cdef1b3ab0	Updated SAML ACS post to retain user session ... Session was being lost due to the callback POST request cookies not being provided due to samesite=lax. This instead adds an additional hop in the flow to route the request via a GET request so the session is retained. SAML POST data is stored encrypted in cache via a unique ID then pulled out straight afterwards, and restored into POST for the SAML toolkit to validate. Updated testing to cover.	2021-10-20 13:34:00 +01:00
Dan Brown	39a205ed28	Quick test of email confirmation routes and fix of tests	2021-08-07 21:18:59 +01:00
Dan Brown	934a833818	Apply fixes from StyleCI	2021-06-26 15:23:15 +00:00
Dan Brown	9cf4191079	Reviewed and updated SAML2 authncontext option ... Added tests to cover. Changed default to align with existing default. Added env option parsing. For #1998	2021-05-08 13:07:25 +01:00
Dan Brown	d48ac0a37d	Removed redundant test ... Now replaced in recent commit by one that checks actual message gets displayed on the redirect page. Redirect page changed to login page.	2020-09-26 18:24:05 +01:00
Dan Brown	53ec794e53	Fixed issue where SAML login not notifiy on existing user ... Added testing to cover Fixes #2263	2020-09-26 16:43:06 +01:00
Dan Brown	ff1ee2d71f	Updated flow to ensure /register/confirm route is used where needed ... Was accidentally skipped during previous updates. Will now be used on saml, ldap & standard registration where required. Uses session to know if the email was just sent and, if so, show the confirmation route.	2020-09-05 17:26:48 +01:00
Dan Brown	87a5340a05	Prevented email confirmation exception throw on registration ... Was preventing any other registration actions from taking place such as LDAP/SAML group sync. Email confirmation should be actioned by middleware on post-registration redirect. Added testing to cover. Tested for LDAP, SAML and normal registration with email confirmation required to ensure flows work as expected. Fixes #2082	2020-08-04 17:54:50 +01:00
Dan Brown	f84bf8e883	Updated test files to be PSR-4 compliant ... Closes #1924	2020-04-04 01:16:05 +01:00
Dan Brown	3991fbe726	Checked over and aligned registration option behavior across all auth options ... - Added tests to cover	2020-02-02 17:31:00 +00:00
Dan Brown	e6c6de0848	Simplified guard names and rolled out guard route checks ... - Included tests to cover for LDAP and SAML - Updated wording for external auth id option. - Updated 'assertPermissionError' test case to be usable in BrowserKitTests	2020-02-02 13:10:21 +00:00
Dan Brown	5d08ec3cef	Fixed failing tests caused by auth changes	2020-02-02 12:00:41 +00:00
Dan Brown	e06f9f7fe3	Removed setting override system due to confusing behaviour ... - Was only used to disable registration when LDAP was enabled. - Caused saved option not to show on settings page causing confusion. - Extended setting logic where used to take ldap into account instead of global override. - Added warning on setting page to show registration enable setting is not used while ldap is active. For #1541	2019-12-22 13:19:17 +00:00