Gabriel Mowses (Mouse)
3173a87572
fix: use correct 10-arg verify callback signature for passport-openidconnect
2 weeks ago
Gabriel Mowses (Mouse)
ee5812c202
fix: manually fetch userinfo with access token, fallback to GitLab API
2 weeks ago
Gabriel Mowses (Mouse)
5300f3ce28
fix: add email fallbacks and logging to OIDC verify callback
2 weeks ago
Gabriel Mowses (Mouse)
c32ab31175
fix: proper custom state store for OIDC, catch errors on login route
2 weeks ago
Gabriel Mowses (Mouse)
85a92abfa3
fix: prevent crash on WIKI.Error undefined, bypass OIDC state verification
2 weeks ago
NGPixel
df91335f11
chore: update dependencies
1 year ago
NGPixel
2a3e1400a7
fix: add permissions to resolvers
3 years ago
NGPixel
c5a441c946
feat: login change password step
3 years ago
NGPixel
fe8066c8f4
feat: setup TFA
3 years ago
NGPixel
349f4e5730
feat: admin auth UI + refs
3 years ago
NGPixel
960a8a03b2
feat: update permission system + dark theme fixes + logout
3 years ago
NGPixel
8f94449426
refactor: convert to esm (wip)
3 years ago
Nicolas Giard
10cc2ef4b9
chore: DB ref refactor + add scheduler db model + remove search modules ( #5699 )
4 years ago
Nicolas Giard
097833d77a
feat: login page + auth panel + various improvements
4 years ago
Nicolas Giard
6625267bc9
feat: admin auth page (wip)
4 years ago
Nicolas Giard
5d0f882fed
fix(auth): handle null SAML authnContext context
4 years ago
Nicolas Giard
54c1946035
fix(auth): update SAML authnContext hint text for multiple values
4 years ago
Maximilian Bosch
9e57c12a60
fix(auth): SAML authnContext parameter should be an array ( #5290 )
...
* saml auth: `authnContext` must be a list now
This fixes
this.options.authnContext.forEach is not a function
when trying to login via SAML on wiki-js 2.5.281.
Reason for that is that `authnContext` must be a list now which is
apparently a breaking change that was missed while upgrading
passport-saml[1].
Resolves #5289
[1] https://github.com/node-saml/passport-saml/pull/615
* fix(auth): split authnContext for SAML authenticaiton module
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
Nicolas Giard
0385a9b647
fix: update to working twitch passport strategy ( #5279 )
4 years ago
Nicolas Giard
fdceb75c4d
fix: typo in saml auth module
4 years ago
Nicolas Giard
7715dc6f5e
fix: saml - set cert as required
4 years ago
Nicolas Giard
7bd527a654
fix: update saml strategy to use new config options
4 years ago
Trisztán Piller
64cdc9f953
feat(auth): OAuth2 access_token in GET query string in userInfoURL ( #5188 )
4 years ago
myml
f754619146
feat(auth): OAuth2 scope support ( #5181 )
4 years ago
Nicolas Giard
a652e43ab1
fix: handle multi social auth strategies
4 years ago
Manuel
1f489a3d8e
fix: handle multiple LDAP strategies ( #5116 )
4 years ago
Gabriel A. Devenyi
2c83472b63
fix(ldap): typo spelling of distinguished ( #5066 )
4 years ago
NGPixel
5911867b21
fix: various OAuth2 fixes
5 years ago
Artur Shaik
87084c66b0
feat: Generic OAuth2 authentication implementation ( #3094 )
...
* OAuth2 authentication implementation
This PR shoul fix #2392 . Used `passport-oauth2` strategy.
* indentations cleanup
* cleanup code
5 years ago
Beh
ed3925b1c5
fix: use first email address in Rocket.Chat auth response ( #3122 )
5 years ago
Étienne
9864be884d
fix: replace passport-slack implementation ( #4369 )
...
This commit replaces the observably defunct @aoberoi/passport-slack
implementation with that of nmaves's passport-slack-oauth2
5 years ago
Denis
ee8006892e
feat: add support of `hd` auth parameter to work with G Suite domains ( #4010 )
...
* Add support of hd google auth parameter - to work with G Suite domains
* Style-fix
* fix: google auth hostedDomain hint
Co-authored-by: Nicolas Giard <github@ngpixel.com>
5 years ago
Kevyn Bruyere
b106018029
fix: LDAP - avoid reading empty tls cert file ( #2980 )
...
Co-authored-by: Kevyn Bruyere <kevyn@inovasi.fr>
5 years ago
YAEGASHI Takeshi
a3513b1bdf
fix: enable passport-azure-ad workaround for SameSite cookies ( #2567 )
...
This adds cookieEncryptionKeyString configuration in the Azure AD
authentication module. It represents an array of cookie encryption
strings and enables workaround for SameSite cookies.
6 years ago
NGPixel
b0f61d6605
feat: rocket.chat auth module
6 years ago
NGPixel
f988c5f811
fix: logout URL endpoint option for oauth2 module
6 years ago
NGPixel
aa96e97028
fix: force lowercase for email on local auth
6 years ago
Rus
68d31af7af
fix: discord auth module new URL. ( #2390 )
...
Change "discordapp.com" to "discord.com"
6 years ago
NGPixel
78417524b3
feat: ldap avatar support
6 years ago
NGPixel
17f8071abe
fix: LDAP missing reqToCallback
6 years ago
NGPixel
062a0b7979
feat: logout by auth strategy + keycloak implementation
6 years ago
NGPixel
4dcf664040
fix: handle removed auth strategies
6 years ago
NGPixel
32d67adee1
feat: social login providers with dynamic instances
6 years ago
Dan Nicholson
d5d368cd33
feat: fix + enable OIDC auth method ( #2282 )
...
* fix: pass userinfo URL in oidc strategy
The userinfo URL from the definition was not being provided to the
passport strategy, which resulted in a type error trying to resolve the
user's profile. Furthermore, the name of the defined URL was
inconsistent with all other authentication method URLs.
* fix: pass all necessary scopes to oidc auth method
When no scopes are provided, passport-openidconnect uses only `openid`,
which does not contain the username or email address. Include `profile`
and `email` to ensure the necessary claims are included.
* fix: update oidc method to call processProfile correctly
Now the profile object and providerKey are passed to processProfile. The
usernameClaim no longer has any use as the email address is the
username.
* fix: mark oidc authentication method as available
6 years ago
NGPixel
26af63a80b
fix: login input hints
6 years ago
NGPixel
be499e5795
fix: auth strategy dependent username label
6 years ago
Nicolas Giard
c009cc1392
feat: new login experience ( #2139 )
...
* feat: multiple auth instances
* fix: auth setup + strategy initialization
* feat: admin auth - add strategy
* feat: redirect on login - group setting
* feat: oauth2 generic - props definitions
* feat: new login UI (wip)
* feat: new login UI (wip)
* feat: admin security login settings
* feat: tabset editor indicators + print view improvements
* fix: code styling
6 years ago
Maho Hiyajo
ea3962d143
fix: change discord module ‘discordapp.com’ to ‘discord.com’ ( #2117 )
6 years ago
jonasjoest
3b055f2ed5
fix: use first email address when retrieving multiple from LDAP ( #2051 )
...
Signed-off-by: Jonas Jöst <jonas@gpplanet.de>
6 years ago
NGPixel
f6bad765a2
feat: assets move + comments migration + admin users UI
6 years ago