18 Commits

Author	SHA1	Message	Date
Dan Brown	6e325de226	Applied latest styles changes from style CI	2021-10-16 16:01:59 +01:00
Dan Brown	41438adbd1	Continued review of #2169 ... - Removed uneeded custom refresh or logout actions for OIDC. - Restructured how the services and guards are setup for external auth systems. SAML2 and OIDC now directly share a lot more logic. - Renamed any OpenId references to OIDC or OpenIdConnect - Removed non-required CSRF excemption for OIDC Not tested, Come to roadblock due to lack of PHP8 support in upstream dependancies. Certificate was deemed to be non-valid on every test attempt due to changes in PHP8.	2021-10-06 23:05:26 +01:00
Dan Brown	193d7fb3fe	Merge branch 'openid' of https://github.com/jasperweyne/BookStack into jasperweyne-openid	2021-10-06 13:18:21 +01:00
Dan Brown	05d99a312d	Applied styleci changes	2021-09-26 15:48:22 +01:00
Dan Brown	c32b315cd7	Standardised facade usage to use via their FQCN ... Done via Laravel Shift Workbench	2021-09-26 15:37:55 +01:00
Dan Brown	70f39757b1	Updated API auth handling of email confirmations ... Email confirmations are now done within the guard during auth checking instead of at the middleware layer.	2021-08-05 22:07:08 +01:00
Dan Brown	934a833818	Apply fixes from StyleCI	2021-06-26 15:23:15 +00:00
Jasper Weyne	75b4a05200	Add OpenIdService to OpenIdSessionGuard constructor call	2020-07-09 18:00:16 +02:00
Jasper Weyne	07a6d7655f	First basic OpenID Connect implementation	2020-07-01 23:27:50 +02:00
Dan Brown	3991fbe726	Checked over and aligned registration option behavior across all auth options ... - Added tests to cover	2020-02-02 17:31:00 +00:00
Dan Brown	e743cd3f60	Added files missed in previous commit	2020-02-02 10:59:03 +00:00
Dan Brown	575b85021d	Started alignment of auth services ... - Removed LDAP specific logic from login controller, placed in Guard. - Created safer base user provider for ldap login, to be used for SAML soon. - Moved LDAP auth work from user provider to guard.	2020-02-01 11:42:22 +00:00
Dan Brown	349b4629be	Extracted API auth into guard ... Also implemented more elegant solution to allowing session auth for API routes; A new 'StartSessionIfCookieExists' middleware, which wraps the default 'StartSession' middleware will run for API routes which only sets up the session if a session cookie is found on the request. Also decrypts only the session cookie. Also cleaned some TokenController codeclimate warnings.	2019-12-30 14:51:28 +00:00
Dan Brown	919660678b	Re-structured the app code to be feature based rather than code type based	2018-09-25 12:30:50 +01:00
Dan Brown	62342433f4	Set /app PHP code to PSR-2 standard ... Also adde draw.io to attribution list. Closes #649	2018-01-28 16:58:52 +00:00
Dan Brown	75a4fc905b	Major permission naming refactor and database migration cleanup	2016-05-01 22:33:56 +01:00
Dan Brown	1c8c9e65c5	Got LDAP auth working to a functional state	2016-01-11 22:41:05 +00:00
Dan Brown	14ca31768c	Updated laravel to 5.2 and started ldap implementation	2016-01-09 19:24:21 +00:00