Commit Graph

24 Commits (1d39dc5a480160f2b6274f3af6c30217333ed6ee)

Author SHA1 Message Date
Dominik Frantisek Bucik 2c413d9916
feat: 🎸 Refactored userinfo serv., new SAML-based claim sources
Refactored userinfo to fetch attributes only when needed and requested.
Also added the possibility to extract attributes from the actual SAML
session

BREAKING CHANGE: 🧨 requires database update
2022-01-12 10:08:30 +01:00
Dominik Frantisek Bucik 1bf72b802a
fix: 🐛 Do not display remember me when prompt=consnet
Also updated text for checkbox
2022-01-10 08:47:48 +01:00
Dominik František Bučík 7877e18f6a
Merge pull request #115 from CESNET/merge_controllers
refactor: Merged some controllers
2022-01-06 08:07:01 +01:00
Dominik František Bučík cb00fee6f1
Merge pull request #108 from dBucik/einfra
draft: refactor: 💡 Update e-INFRA CZ footer
2022-01-06 08:06:05 +01:00
Dominik Frantisek Bucik e8b34f9079
refactor: 💡 refactored device code flow and filters 2022-01-06 07:55:06 +01:00
Pavel Břoušek 75a626f9da
fix: incorrect label on stay logged in button 2021-12-23 09:39:38 +01:00
Dominik Frantisek Bucik 8341c80094
refactor: 💡 Update CESNET favicon 2021-12-10 10:50:50 +01:00
Dominik Frantisek Bucik bf227df26e
feat: 🎸 Configurable favicons
use `favicon=URL_POINTING_TO_FAVICON_FILE` property to set it for the
MitreID gui
2021-12-10 08:16:29 +01:00
Dominik Frantisek Bucik e5b406e853
feat: 🎸 Configurable max pool size for JDBC data sources
use `jdbc.max_pool_size` for MitreID db pool size limitation. Use
`stats.jdbc.max_pool_size` for limiting the pool size for statistics
data source
2021-12-09 09:29:45 +01:00
Dominik Frantisek Bucik 3459ae469b
refactor: 💡 Update e-INFRA CZ footer 2021-12-08 11:08:08 +01:00
BaranekD 515f99b255 feat: Added configurable ipdIdColumnName and spIdColumnName in statistics 2021-12-07 07:28:39 +01:00
Dominik Frantisek Bucik a94fd992dd
refactor: 💡 Refactored GA4GH Passports and visas
Refactored the GA4GH claim source and related things to be extensible
for other implementations.
Configuration changes:
Elixir GA4GH claim source class needs to be updated to:`custom.claim.[claimName].source.class=cz.muni.ics.oidc.server.ga4gh.ElixirGa4ghClaimSource`
Elixir Access token modifier has been moved and has to be configured as: `accessTokenClaimsModifier=cz.muni.ics.oidc.server.ga4gh.Ga4ghAccessTokenModifier`

BREAKING CHANGE: 🧨 Ga4gh Claim source class for ELIXIR has been changed. Also, the
ElixirAccessTokenModifier class has been moved and renamed.
2021-12-06 11:27:48 +01:00
Dominik Frantisek Bucik 665b45fb41
refactor: 💡 Refactored how translations are loaded and used
Refactor how translations are used and loaded. Property `web.langs.customfiles.path` must point to the
RersourceBundle, without the `_lang.properties" extensions. An examle
location, if we have files `/etc/props_en.properties` and
`/etc/props_cs.properties`, the correct value for the configuration
option is `web.langs.customfiles.path=/etc/props`.

BREAKING CHANGE: Property `web.langs.customfiles.path` must point to the
RersourceBundle.
2021-11-30 13:38:11 +01:00
Dominik Frantisek Bucik 0586a777e7
refactor: 💡 Removed unused locales 2021-11-30 12:38:22 +01:00
Dominik Frantisek Bucik b8b81bb57a
refactor: Removed duplicate SQL files 2021-11-30 12:38:22 +01:00
Pavel Břoušek f7a81ede1f
Update psql_database_tables.sql 2021-11-19 16:35:45 +01:00
Dominik Frantisek Bucik ebd1459ba3
feat: 🎸 AARC_IDP_HINTING implemented 2021-11-16 07:22:38 +01:00
Dominik Frantisek Bucik 6a6d1e3ad9
feat: 🎸 Forward client_id in AuthenticationContextClass
Forward client_id in the AuthenticationContextClass element. This can be
used by the proxy to i.e. display name of the service on WAYF.
2021-11-12 13:28:38 +01:00
Dominik Frantisek Bucik 9aa16ffe5c
feat: 🎸 Extended list of internal referrers for sess. invalider
Via property _saml.internalReferrers_ it can be configured which
referrers are considered as internal and in such a cases session will
not be invalidated. The property has to be list of URLs, separated by a
comma, and the matching is done as a prefix of the current referrer
2021-11-11 10:23:20 +01:00
Dominik Frantisek Bucik 39498573c3
feat: 🎸 Make SAML identifier attribute configurable
Attribute is configured via property _saml.user.attrIdentifier_ and has
to be one of values eppn|epuid|eptid|uid|uniqueIdentifier
2021-11-11 10:22:56 +01:00
Dominik Frantisek Bucik 5eb50f6441
feat: 🎸 Adderd e-INFRA CZ template
Added e-INFRA CZ template for frontend pages. Enable it by using
web.theme=einfra in the config
2021-11-09 11:28:36 +01:00
Dominik Frantisek Bucik e15dadc95a
refactor: 💡 Update metadata refresh settings 2021-11-09 11:14:05 +01:00
Dominik Frantisek Bucik 371adc13fb
fix: 🐛 fix loading JWKS
Caused failures in validation of JWTs. We have exposed the default
bundled file instead of the correctly loaded one.
2021-11-05 11:36:06 +01:00
Dominik Frantisek Bucik 11fdf85d5f
feat: 🎸 Merge with perun-mitreid overlay, add SAML auth
Merge with overlay repository into one big repo. Added SAML
authentication

BREAKING CHANGE: 🧨 Merge and auth
2021-11-03 08:23:34 +01:00