202 Commits

Author SHA1 Message Date
Roobtyan
f7705931f7 fix: handle WeChat username conflicts (#771)
* handle username conflicts

* Update auth.go

Co-authored-by: roobtyan <roobtyan@qq.com>
Co-authored-by: Yang Luo <hsluoyz@qq.com>
2022-05-31 21:51:41 +08:00
Yixiang Zhao
42c2210178
fix: set phone prefix when disable verification code (#769)
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-05-30 18:26:42 +08:00
xiexianbin
b747f5e27c
fix: mistake GetApplicationLogin swagger router (casdoor#739) (#740)
Signed-off-by: xiexianbin <me@xiexianbin.cn>
2022-05-04 19:15:13 +08:00
akkuman
0bc8c2d15f
fix: recover when goroutine panic that will kill main program (#692)
* fix #684

recover when goroutine panic that will kill main program

* Update util.go

Co-authored-by: Yang Luo <hsluoyz@qq.com>
2022-04-22 21:59:06 +08:00
halozhy
287f60353c
feat: try to support custom OAuth provider (#667)
* feat: try to support private provider

* fix: modify code according to code review

* feat: set example values for custom params
2022-04-16 17:17:45 +08:00
Yi Zhan
15daf5dbfe
feat: add casdoor as saml idp support (#571)
* feat: add casdoor as saml idp support

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: merge code

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: modify response value

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: modify samlResponse generation method

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: generating a response using etree

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: change metadata url

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: modify front-end adaptation

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: recovering an incorrect override

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: change the samlResponse location

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: add relayState support

Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-04-08 23:06:48 +08:00
Товарищ программист
3cf1b990be
feat: support CAS with organizations and applications (#621) 2022-04-04 00:09:04 +08:00
Товарищ программист
5f8924ed4e
feat: support overriding configuration with env (#590) 2022-03-20 23:21:09 +08:00
Yixiang Zhao
9f7924a6e0
fix: mask email and phone number on the backend (#563)
* fix: mask email and phone number on the backend

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: login with masked email or phone

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: improve regex

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-03-15 12:54:57 +08:00
Gucheng Wang
3602d9b9a7 fix: improve error messages 2022-03-07 15:16:09 +08:00
Yang Luo
0e40a1d922 Check application existence in login(). 2022-03-06 00:09:57 +08:00
Yixiang Zhao
83a6b757a4
fix: password leakage vulnerability caused by pagination (#527)
* fix: password leakage vulnerability caused by pagination

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: unsafe get-app-login response fields

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-03-02 20:58:16 +08:00
Steve0x2a
697b3e4998
feat: add implicit flow support (#520)
* feat: add implicit flow support

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: idp support in implicit flow

Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-03-01 19:09:59 +08:00
Steve0x2a
a33076ada4
feat: add AD-FS support (#505)
Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-02-20 15:01:48 +08:00
Steve0x2a
274096fe9d
fix: empty iss return (#503)
Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-02-18 12:36:11 +08:00
Steve0x2a
661abd6b6e
feat: add steam support (#497)
* feat: add steam support

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: wrong name

Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-02-16 19:57:46 +08:00
Gucheng Wang
db37f53d6c Update license headers. 2022-02-13 23:39:27 +08:00
Steve0x2a
f85f4c0cf8
feat: add infoflow idp support (#472)
* feat: add infoflow internal backend support

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* feat: add infoflow idp support

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: copyright and comment

Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-02-05 21:54:38 +08:00
Steve0x2a
d943d5cc61
fix: oauth params null value error (#465)
Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-01-30 17:58:54 +08:00
Gucheng Wang
a8502d1173 Fix GetIdProvider() bug. 2022-01-29 09:52:48 +08:00
Steve0x2a
630b84f534
feat: add PKCE support (#434)
* feat: add PKCE support

Signed-off-by: Steve0x2a <stevesough@gmail.com>

* fix: error output when challenge is empty

Signed-off-by: Steve0x2a <stevesough@gmail.com>
2022-01-21 09:29:19 +08:00
Gucheng Wang
c22ab44894 Update import path. 2022-01-20 14:11:46 +08:00
Yang Luo
64d3b7e87f Add EnableSigninSession to app. 2021-12-28 17:15:47 +08:00
Yang Luo
7cfece3019 Add GetMaskedProvider() and GetMaskedProviders(). 2021-12-21 00:20:12 +08:00
Steve0x2a
98f6cc0085
feat: add OIDC feature support. (#373)
1. add nonce parameter.
2. add sub in userinfo endpoint.

Signed-off-by: 0x2a <stevesough@gmail.com>
2021-12-15 21:42:16 +08:00
Yixiang Zhao
370e835499
feat: support AuthnRequest in SAML (#372)
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-15 21:38:00 +08:00
Yixiang Zhao
4ca5f4b196
feat: add Keycloak idp support (#356)
* feat: add Keycloak idp support

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: fix the profile UI

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-13 19:49:30 +08:00
Gucheng Wang
94c78593fc Fix bug in Login(). 2021-12-12 20:07:51 +08:00
Gucheng Wang
f4265d015a Improve user error handling. 2021-12-12 19:59:55 +08:00
Yixiang Zhao
b73b9a65b6
feat: support third-party application to login with SAML rather than only Casdoor itself (#350)
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-10 00:23:04 +08:00
Bingchang Chen
70a550d8bc
feat: login by code (#344)
Signed-off-by: abingcbc <abingcbc626@gmail.com>
2021-12-07 00:05:53 +08:00
Yixiang Zhao
113398c36b
feat: support SAML and test with aliyun IDaaS (#346)
* feat: support SAML and test with aliyun IDaaS

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* refactor: refactor saml.go and router

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: add param to getSamlLogin()

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* feat: add inputs to parse metadata automatically and show sp-acs-url, sp-entity-id

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-06 21:46:50 +08:00
Товарищ программист
07fa438348
feat: update swagger api json with tags (#347)
Signed-off-by: Товарищ программист <2962928213@qq.com>
2021-12-03 20:42:36 +08:00
Gucheng Wang
30a2fdef37 Make webhook work. 2021-11-07 23:53:17 +08:00
Gucheng Wang
5ec678fa28 Improve record's User field. 2021-11-07 17:20:15 +08:00
Gucheng Wang
77fffcacac Refactor the record code. 2021-11-07 16:51:16 +08:00
Gucheng Wang
9e920181d2 Add user soft deletion. 2021-11-06 15:52:03 +08:00
Yang Luo
568372d077 Support quick sign-in. 2021-10-09 21:17:03 +08:00
Yang Luo
b3eec024b8 Add getInitScore(). 2021-08-30 01:06:05 +08:00
Yang Luo
eefcfd8440 Fix address null bug. 2021-08-27 23:43:43 +08:00
Yang Luo
4ca307564c Add proxy pkg. 2021-08-21 22:16:25 +08:00
Yang Luo
398ba19fa5 Add CheckUserPassword() API. 2021-08-15 21:57:36 +08:00
Yang Luo
40fbca7db4 Remove UploadAvatarToStorage(). 2021-08-14 14:20:24 +08:00
Yang Luo
9feefc31f9 Use c.ResponseOk() for all places. 2021-08-14 14:19:50 +08:00
Yang Luo
d16569d461 Use c.ResponseError() for all places. 2021-08-14 14:19:33 +08:00
Yang Luo
6aeadfa3bd Improve provider check. 2021-08-14 14:19:23 +08:00
sh1luo
8c66ef6860 fix: improve code specification (#231) 2021-08-14 14:18:08 +08:00
Kininaru
c0ab24205d
feat: add user initScore in app.conf (#220)
Signed-off-by: Kininaru <shiftregister233@outlook.com>

-> 2000
2021-08-03 23:28:02 +08:00
Yang Luo
1a2d85102c Support defaultHttpClient. 2021-08-01 17:36:03 +08:00
Kininaru
3d493b8d8f
feat: integrate Storage config into providers (#198)
Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-07-26 11:39:49 +08:00