cacert/oidc-idp
9
0
Fork 0
Code Issues Pull requests Projects Releases 8 Wiki Activity
56 commits 1 branch 8 tags 346 KiB
Commit graph

9 commits

Author SHA1 Message Date
Jan Dittberner
7ef12da4fa Fix subject handling for login requests 
This change implements handling for the case that a login request
retrieved from Hydra has a pre-defined subject. The login request is
rejected if the requested subject is not part of the presented client
certificate.
 2024-05-19 08:12:39 +02:00
Jan Dittberner
56ff01600f Improve consent handling 
- hide client logo if there is no logo URI
- hide client information link if there is no client URI
- use buttons instead of a checkbox for consent
- use Markdown for messages
 2023-08-07 17:54:54 +02:00
Jan Dittberner
44e18ca3a5 Implement consent management 
The primary change in this commit is the introduction of consent management.

A few minor improvements have been made:

- move common header to ui/templates/base.gohtml
- add an I18NService to unify localization
- add a handlers.getLocalizer function
- fix translation extraction and merging in Makefile
- add a new AuthMiddleware to centralize client certificate authentication
- move client certificate handling to internal/handlers/security.go
- improver error handling, allow localization of HTTP error messages
 2023-08-07 15:15:45 +02:00
Jan Dittberner
e2de4243a9 Enforce email address selection 
This commit makes sure that an email address is selected when the user
presents a client certificate with multiple email addresses.
 2023-08-03 10:45:21 +02:00
Jan Dittberner
55530d23e4 Improve login page 
- improve formatting of login page
- improve german translation of message that is shown if a certificate with multiple
  email addresses is used
 2023-08-03 10:43:37 +02:00
Jan Dittberner
79ab816489 Implement rendering of authorization server errors 2023-07-29 21:56:19 +02:00
Jan Dittberner
ab2e3c33b5 Implement logout-successful handler 2023-07-24 21:09:35 +02:00
Jan Dittberner
16a3dbedc8 Small IDP refactoring 
- move internal code to internal directory
- add translations for texts on missing email in client certificate page
- add error handling for missing login_challenge request parameter
- add Markdown support via goldmark
- use https:// URLs in Apache license headers
 2023-07-18 20:37:04 +02:00
Jan Dittberner
9fad7ef3a6 Embed translation bundle into binary 2023-05-15 16:47:37 +02:00
Renamed from active.de.toml (Browse further)