hedgedoc - Hedgedoc with support for CindyScript

summary refs log tree commit diff

path: root/lib/web/auth/oauth2/index.js (follow)

	Commit message (Collapse)	Author	Age	Files	Lines
*	Linter: Fix all lint errors	Philip Molares	2021-02-15	1	-5/+5
\| \| \| \|	Signed-off-by: Philip Molares <philip.molares@udo.edu>
*	Fix crash when OAuth2 config parameters are missing	David Mehren	2020-11-30	1	-12/+19
\| \| \| \| \| \| \| \| \| \|	If the optional config options `config.oauth2.userProfileIdAttr` or `config.oauth2.rolesClaim` were not set, `String.split` was called on `undefined`, triggering a crash. This commit adds handling of these cases and improves error logging in `checkAuthorization`. Fixes #608 Signed-off-by: David Mehren <git@herrmehren.de>
*	Add oauth2 authorization	Joachim Mathes	2020-11-25	1	-1/+22
\| \| \| \|	Signed-off-by: Joachim Mathes <joachim_mathes@web.de>
*	Generic OAuth2: Set state: true	Dexter Chua	2020-10-22	1	-1/+2
\| \| \| \| \| \| \| \| \| \|	The OAuth2 specification RECOMMENDS setting the state to protect against CSRF attacks. Some OAuth2 providers (e.g. ORY Hydra) refuse to authenticate without the state set. This is a cherry-pick of 852868419dc03d5dec79e75a3d7692ab670c927f. Signed-off-by: haslersn <sebastian.hasler@gmx.net>
*	Backport of #278 for 1.6.1	Victor Berger	2020-06-20	1	-1/+2
\| \| \| \| \| \| \|	This is a backport of #278 with the default value of `scope` changed to `undefined`. This is thus a fully backward-compatible change. Signed-off-by: Victor Berger <victor.berger@m4x.org>
*	Removing returnTo setting from referer in all other authentication sources	Ralph Krimmel	2019-11-28	1	-2/+1
\| \| \| \|	Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
*	Fix eslint warnings	Sheogorath	2019-05-31	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	Since we are about to release it's time to finally fix our linting. This patch basically runs eslint --fix and does some further manual fixes. Also it sets up eslint to fail on every warning on order to make warnings visable in the CI process. There should no functional change be introduced. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
*	Fix typo	CloudYu	2018-11-27	1	-2/+2
\| \| \| \|	Signed-off-by: CloudYu <cloudyu322@gmail.com>
*	InternalOAuthError is not part of passport, but of passport-oauth2	Claudius Coenen	2018-11-14	1	-4/+4
\| \| \| \| \| \| \|	This fixes part of #1056: an error while obtaining the profile would have `502`-crashed the server. Signed-off-by: Claudius Coenen <opensource@amenthes.de>
*	Add support for generic OAuth2 providers	Pedro Ferreira	2018-03-26	1	-0/+106
	Signed-off-by: Pedro Ferreira <pedro.ferreira@cern.ch>