Commit Graph

18 Commits

Author SHA1 Message Date
Arthur Schiwon 6548abb0f9 makes sloWebServerDecode IdP-sensitive as it should be
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2022-04-07 20:29:04 +00:00
Carl Schwan c51048b566 Minor fixes
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2022-04-07 20:29:03 +00:00
John Molakvoæ 24a632588c Add regex routes requirement to providerId
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
2022-04-07 20:29:03 +00:00
Arthur Schiwon be6a8e97fe Move SAML configurations to a table of their own
- adds user_saml_configurations table and migrates existing configuration
- Controller methods are added since appconfig endpoints cannot be used
  anymore. THIS IS A BREAKING CHANGE.
- Frontend code is adjusted to use new endpoints.
- security-sloWebServerDecode was changed from global to provider specific
  setting. It being global seemed to be unintended. A migration path is yet
  missing.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2022-04-07 20:29:03 +00:00
John Molakvoæ 4510f70ff7
cs:fix
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
2021-12-10 09:28:16 +01:00
Lukas Reschke 8afcb434dc Allow setting of "retrieveParametersFromServer"
Some SAML servers require this type of decoding, otherwise the SLO request fails. Ideally the library would perform both verifications (https://github.com/onelogin/php-saml/issues/466), but it seems upstream doesn't want to perform this change.

Until we have considered a better solution for this, this adds a new checkbox that one can configure.

Ref https://github.com/nextcloud/user_saml/issues/403

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-05-04 17:28:58 +02:00
Arthur Schiwon 2a614e0337
optional possibility to provide a URL for SLO Response
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2020-09-10 10:14:53 +02:00
Julius Härtl e75809a5f7
Add setting to specify a different signature algorithm
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2020-02-13 16:01:03 +01:00
Roeland Jago Douma 1c8b32c841
Use a prefix to obtain the nameid format
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-29 09:53:52 +02:00
Roeland Jago Douma 4e8ee3ae0a
Make NameIDFormat configurable
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2019-05-28 23:00:34 +02:00
Björn Schiessle e9f58dae96
sort idps alphabetically
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-12-12 20:22:03 +01:00
Björn Schiessle 6d02ab0717
set base url to 'http://domain/nextcloud/index.php/apps/user_saml/saml'
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-10-09 22:08:33 +02:00
Björn Schiessle 630765f9b4
make sure that we don't show the "select user back-end login screen if authentication over environment variables has been chosen
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-15 12:52:17 +02:00
Björn Schiessle 20757e9f0e
make sure to always use the right idp config
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-03 12:43:19 +02:00
Björn Schiessle 39b3d52746
make sure to redirect to correct idp
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-03 12:43:19 +02:00
Björn Schiessle afeee8beaa
show all configured IdP's on the login screen
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2018-08-03 12:43:19 +02:00
Lukas Reschke 69a6484257
baseurl is expected to be the host name and protocol without path
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-08-01 17:17:32 +02:00
Lukas Reschke 2a3e46dc2f
Proper casing of file
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-08-01 11:30:15 +02:00
Renamed from lib/samlsettings.php (Browse further)