BookStack/app/Auth/Access
Dan Brown cdef1b3ab0
Updated SAML ACS post to retain user session
Session was being lost due to the callback POST request cookies
not being provided due to samesite=lax. This instead adds an additional
hop in the flow to route the request via a GET request so the session is
retained. SAML POST data is stored encrypted in cache via a unique ID
then pulled out straight afterwards, and restored into POST for the SAML
toolkit to validate.

Updated testing to cover.
2021-10-20 13:34:00 +01:00
..
Guards Continued review of #2169 2021-10-06 23:05:26 +01:00
Mfa Fixed guest user email showing in TOTP setup url 2021-10-14 18:02:16 +01:00
Oidc Applied latest styles changes from style CI 2021-10-16 16:01:59 +01:00
EmailConfirmationService.php Apply fixes from StyleCI 2021-08-21 14:49:40 +00:00
ExternalBaseUserProvider.php Apply fixes from StyleCI 2021-06-26 15:23:15 +00:00
GroupSyncService.php Applied latest styles changes from style CI 2021-10-16 16:01:59 +01:00
Ldap.php Apply fixes from StyleCI 2021-06-26 15:23:15 +00:00
LdapService.php Applied latest styles changes from style CI 2021-10-16 16:01:59 +01:00
LoginService.php Added token and key handling elements for oidc jwt 2021-10-11 19:05:16 +01:00
RegistrationService.php Applied latest styles changes from style CI 2021-10-16 16:01:59 +01:00
Saml2Service.php Updated SAML ACS post to retain user session 2021-10-20 13:34:00 +01:00
SocialAuthService.php Fixed social auth login audit log messages 2021-09-15 20:55:10 +01:00
UserInviteService.php Apply fixes from StyleCI 2021-06-26 15:23:15 +00:00
UserTokenService.php Swapped injected db instance with facade 2021-08-31 21:50:23 +01:00