summaryrefslogtreecommitdiff
path: root/lib/web/auth/oauth2/index.js (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-02-15Linter: Fix all lint errorsPhilip Molares1-5/+5
Signed-off-by: Philip Molares <philip.molares@udo.edu>
2020-11-30Fix crash when OAuth2 config parameters are missingDavid Mehren1-12/+19
If the optional config options `config.oauth2.userProfileIdAttr` or `config.oauth2.rolesClaim` were not set, `String.split` was called on `undefined`, triggering a crash. This commit adds handling of these cases and improves error logging in `checkAuthorization`. Fixes #608 Signed-off-by: David Mehren <git@herrmehren.de>
2020-11-25Add oauth2 authorizationJoachim Mathes1-1/+22
Signed-off-by: Joachim Mathes <joachim_mathes@web.de>
2020-10-22Generic OAuth2: Set state: trueDexter Chua1-1/+2
The OAuth2 specification RECOMMENDS setting the state to protect against CSRF attacks. Some OAuth2 providers (e.g. ORY Hydra) refuse to authenticate without the state set. This is a cherry-pick of 852868419dc03d5dec79e75a3d7692ab670c927f. Signed-off-by: haslersn <sebastian.hasler@gmx.net>
2020-06-20Backport of #278 for 1.6.1Victor Berger1-1/+2
This is a backport of #278 with the default value of `scope` changed to `undefined`. This is thus a fully backward-compatible change. Signed-off-by: Victor Berger <victor.berger@m4x.org>
2019-11-28Removing returnTo setting from referer in all other authentication sourcesRalph Krimmel1-2/+1
Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
2019-05-31Fix eslint warningsSheogorath1-1/+1
Since we are about to release it's time to finally fix our linting. This patch basically runs eslint --fix and does some further manual fixes. Also it sets up eslint to fail on every warning on order to make warnings visable in the CI process. There should no functional change be introduced. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-11-27Fix typoCloudYu1-2/+2
Signed-off-by: CloudYu <cloudyu322@gmail.com>
2018-11-14InternalOAuthError is not part of passport, but of passport-oauth2Claudius Coenen1-4/+4
This fixes part of #1056: an error while obtaining the profile would have `502`-crashed the server. Signed-off-by: Claudius Coenen <opensource@amenthes.de>
2018-03-26Add support for generic OAuth2 providersPedro Ferreira1-0/+106
Signed-off-by: Pedro Ferreira <pedro.ferreira@cern.ch>
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-01 15:34:54 +0000