Repository navigation

OIDC Integration - #330

Closed

dmitrizagidulin wants to merge 183 commits into

masterfrom

dz_oidc

Closed

OIDC Integration#330
dmitrizagidulin wants to merge 183 commits into
masterfrom
dz_oidc

Commits on Jun 30, 2017
- OIDC Integration - WIP
  dmitrizagidulin
  committed
  bbdc11d
- Extract /logout handler to LogoutRequest
  dmitrizagidulin
  committed
  7a0376f
- Move Provider initialization logic
  dmitrizagidulin
  committed
  3fb8047
- Handle user manually going to /login without app
  dmitrizagidulin
  committed
  935be63
- Extract auth api logic to oidc-auth-manager
  dmitrizagidulin
  committed
  e7b4d0f
- Add --db-path config option
  dmitrizagidulin
  committed
  2921a54
- Move oidc-manager test from unit to integration
  dmitrizagidulin
  committed
  2b77734
- Refactor config defaults. (webid: true by default)
  dmitrizagidulin
  committed
  5d1b3ae
- Move default-account-template/ to default-templates/new-account
  dmitrizagidulin
  committed
  6bb6f38
- Move default-email-templates/ to default-templates/emails
  dmitrizagidulin
  committed
  6614f23
- Add --config-path parameter (for default templates and apps)
  dmitrizagidulin
  committed
  89fe55e
- Serve public common/ dir (for shared CSS files, etc)
  dmitrizagidulin
  committed
  d608422
- Add boostrap.min.css v3.3.7 to common/css/
  dmitrizagidulin
  committed
  73d3c23
- Make views/ customizable like templates
  dmitrizagidulin
  committed
  4bbf131
- Rename DiscoverProviderRequest to SelectProviderRequest
  dmitrizagidulin
  committed
  fa2b96c
- Move goodbye.html to views
  dmitrizagidulin
  committed
  344511c
- Add a /login default view
  dmitrizagidulin
  committed
  dea5733
- Add db configs to speed up integration tests
  dmitrizagidulin
  committed
  df54a75
- Display errors on the login form
  dmitrizagidulin
  committed
  18d75da
- Pass returnToUrl to /register, refactor
  dmitrizagidulin
  committed
  9161d11
- Add /register view
  dmitrizagidulin
  committed
  fa20647
- Redirect to original url after account creation
  dmitrizagidulin
  committed
  4220d66
- Fix logout handler
  dmitrizagidulin
  committed
  b27244c
- Add a default index.html for server root
  dmitrizagidulin
  committed
  8eaf259
- Initialize a default index.html for new user accounts
  dmitrizagidulin
  committed
  e4d0b8d
- Bump oidc-auth-manager dep (moved from bcrypt to bcryptjs)
  dmitrizagidulin
  committed
  c6a683d
- Pre-populate provider on select-provider view
  dmitrizagidulin
  committed
  a5906b8
- Extract SelectProviderRequest and auth callback code to Auth Manager
  dmitrizagidulin
  committed
  478a354
- Add serverUri to startup debug, bump auth manager dep
  dmitrizagidulin
  committed
  d5f53f0
- Add tests
  dmitrizagidulin
  committed
  0012143
- Extract template init code to server-config.js
  dmitrizagidulin
  committed
  d47d160
- Refactor createApp()
  dmitrizagidulin
  committed
  b21ae11
- Move acl.js test and resources/ folder to acl-tls
  dmitrizagidulin
  committed
  04e6c9c
- Add acl-related OIDC integration tests
  dmitrizagidulin
  committed
  d935642
- Fix file browser redirect test
  dmitrizagidulin
  committed
  10dccdb
- Add tests for userIdFromRequest()
  dmitrizagidulin
  committed
  60792fb
- Add tests for TokenService
  dmitrizagidulin
  committed
  412f488
- Refactor TokenService and account manager, add tests
  dmitrizagidulin
  committed
  357da35
- Implement password reset request and tests
  dmitrizagidulin
  committed
  3b915ff
- Implement reset token validation and change password page
  dmitrizagidulin
  committed
  4ca105e
- Add support for --force-user flag for oidc auth
  dmitrizagidulin
  committed
  d170650
- Fix account creation welcome email logic
  dmitrizagidulin
  committed
  b49082a
- Remove broken /messages api code
  dmitrizagidulin
  committed
  182cde7
- Remove old account-recovery handler
  dmitrizagidulin
  committed
  477c0e0
- Remove WebID-TLS authentication code
  dmitrizagidulin
  committed
  b753954
- Clean up params integration tests
  dmitrizagidulin
  committed
  6b39dcf
- Add tests for PasswordChangeRequest handler
  dmitrizagidulin
  committed
  917cd29
- Add test for fullUrlForReq()
  dmitrizagidulin
  committed
  e2d68fe
- Add auth-related docstrings
  dmitrizagidulin
  committed
  fc0a7b3
- Add a fix for utils.debrack() and unit tests
  dmitrizagidulin
  committed
  97dac71
- Set User: response header if authenticated (for legacy compat)
  dmitrizagidulin
  committed
  e79f025
- Bump oidc-auth-manager dep to 0.7.1
  dmitrizagidulin
  committed
  9e71eb9
- Re-add WebID-TLS auth code
  dmitrizagidulin
  committed
  b5f3dc4
- Add a Login with Certificate button to login screen
  dmitrizagidulin
  committed
  0786e08
- Implement Login via WebID-TLS cert local auth strategy
  dmitrizagidulin
  committed
  9b19974
- Fix 401 error handling, add tests (#507)
  dmitrizagidulin
  committed
  eca2d4b
- Make ./data the default root folder (#510)
  dmitrizagidulin
  committed
  3659b65
- Move patch handlers to separate files.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  0b03de7
- Use same patch logic regardless of content type.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  a79d19d
- Use "415 Unsupported Media Type" for unsupported patches.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  acc7151
- Deduplicate graph reading code.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  f55a2a0
- Remove incomplete SPARQL PATCH handler.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  3d05378
- Move patch writing to generic PATCH handler.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  90c218a
- Delegate body parsing to middleware.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  fc42bbc
- Prettify patch code.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c92c6ad
Commits on Jul 1, 2017
- Refactor SPARQL update patcher with promises.
  RubenVerborgh
  committed
  a3f8a77
- Add preliminary N3 patch support.
  RubenVerborgh
  committed
  71c3101
- Construct the patch URI through a hash of its contents.
  RubenVerborgh
  committed
  aed5b6a
Commits on Jul 2, 2017
- Clean up SPARQL UPDATE PATCH tests.
  RubenVerborgh
  committed
  c44c9a1
- Set up new PATCH tests.
  RubenVerborgh
  committed
  4d1e746
- Syntactically and structurally validate patches.
  RubenVerborgh
  committed
  f04b5ef
- Enable and test PATCH appending.
  RubenVerborgh
  committed
  351463d
- Use single-user setup for PATCH tests.
  RubenVerborgh
  committed
  338795e
- Test PATCH deletion.
  RubenVerborgh
  committed
  4c6c275
- Test PATCH combined deletion and insertion.
  RubenVerborgh
  committed
  1d55d0e
- Add WHERE support to N3 patches.
  RubenVerborgh
  committed
  c463d73
- Refactor patch handler to perform everything but parsing.
  RubenVerborgh
  committed
  d4315b4
- Expose ACL and user ID on request.
  RubenVerborgh
  committed
  2a895f6
- Verify read and write permissions for patches.
  RubenVerborgh
  committed
  9a3597b
- Refactor PATCH tests with helper method.
  RubenVerborgh
  committed
  d108753
Commits on Jul 13, 2017
- Support client certificates via X-SSL-Cert header.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  180a114
- Make x509 dependency optional.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  97322a0
- Add acceptCertificateHeader option.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c541a0a
- WebID through header doesn't require TLS.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  b0591af
Commits on Jul 19, 2017
- Make certificate header name customizable.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  de6012c
- Add reverse proxy documentation link.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  60a14ef
Commits on Jul 25, 2017
- Only set User header with WebID-TLS.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  95701d9
Commits on Jul 27, 2017
- Reject cookies from third-party applications.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  f853711
- Fix missing foaf: prefix in prefs.ttl
  dmitrizagidulin
  committed
  fc3ab8f
Commits on Aug 8, 2017
- Merge branch 'master' into oidc-dev
  dmitrizagidulin
  committed
  01261ea
- Fix merge oddness
  dmitrizagidulin
  committed
  c81b51d
- Add support for 'request' auth param
  dmitrizagidulin
  committed
  2b4bbe4
- Return scope='openid webid' in oidc WWW-Authenticate header response
  dmitrizagidulin
  committed
  775b46d
- Use http-proxy-middleware for CORS proxy.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  da8df9b
- Correct proxy error codes.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  1696e35
- Update IP packages.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  1afb00a
- Ensure the host is not a local IP.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  e61de87
- Pass the Host header.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  883373e
Commits on Aug 9, 2017
- Expose ACL and user ID on request.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  d7dfb16
- Test on Node 8.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  22b2f6c
- Allow additional HTTPS options.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  e785193
- Fix ACL TLS test.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  aa0b6b9
- Set NODE_TLS_REJECT_UNAUTHORIZED for tests (only).
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  5bb0672
- Update nock.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  d9b77a8
Commits on Aug 10, 2017
- Move OIDC-specific details out of createApp.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  01550b0
- Move TLS-specific details out of createApp.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  bde91b2
- Make forceUser a separate module.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  2e435ff
- Make create-app auth-agnostic.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  1f4fd48
- Remove redundant "identified" setting.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  47697ca
- Expose request.userId in OIDC handler.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  e9b5509
- Remove userId from allow handler.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c9467b0
- Only set User header for TLS.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  42011d6
- Rename proxy to corsProxy.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c2463bc
- Add Auth Proxy.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  bf3b95c
- Set User header on proxied requests.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  89b6133
- Set Host header on proxied requests.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  2a14bc7
- Set Forwarded header on proxied requests.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  70f8716
- Add authProxy option.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  822d58c
Commits on Aug 11, 2017
- Set default test timeout to 10 seconds.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  1e6ab20
- Rename main executable to solid.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  0b5a675
- Add solid-test script.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  ae946b0
- Document solid-test executable.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  66e8f8a
- Follow Mocha naming conventions.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  4cf7fd5
- Remove specific test commands.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  a1a36c7
- Remove clean scripts.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  ad09398
Commits on Aug 14, 2017
- Add a 'two pods plus external web app' integration test
  dmitrizagidulin
  committed
  e273032
- Add support for Proof of Possession tokens, update tests
  dmitrizagidulin
  committed
  f8db96b
- Add token reuse test
  dmitrizagidulin
  committed
  0ab52a8
Commits on Aug 15, 2017
- Merge branch 'master' into dz_oidc
  dmitrizagidulin
  committed
  bfcfeca
- Add package-lock.json
  dmitrizagidulin
  committed
  ff3d3be
- Switch to the official oidc issuer link rel value
  dmitrizagidulin
  committed
  9ba7cb3
- Verify webid provider when extracting webid from claim
  dmitrizagidulin
  committed
  dbffa3d
- Remove deprecated solid:inbox term from account template
  dmitrizagidulin
  committed
  9af2c51
Commits on Aug 16, 2017
- Cache APT packages on Travis CI.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  4bcd7fc
- Correct certificate-header flag name.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  bf83152
- Add --no-reject-unauthorized flag.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c734cf6
- Disable rejectUnauthorized on solid-test.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  b3b755b
Commits on Aug 17, 2017
- Display error messages on Select Provider page
  dmitrizagidulin
  committed
  5fe555d
- Allow login via TLS with externally hosted WebIDs
  dmitrizagidulin
  committed
  560c570
- TlsAuthenticator - minor refactor/cleanup
  dmitrizagidulin
  committed
  1782ba3
- Add link to issuer discovery spec on error
  dmitrizagidulin
  committed
  fb7235d
Commits on Aug 18, 2017
- Merge remote-tracking branch 'origin/master' into dz_oidc
  dmitrizagidulin
  committed
  b0d543f
- Convert checkAccess to promise.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  eed6c40
- Convert can to promise.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  27f6b88
- Move getNearestACL into separate method.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c7ca72b
- Move getPermissionSet into separate method.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  83da96b
- Change accessType into isContainer.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  554d198
- Pass permission set to checkAccess.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  c723009
- Move resource parameter to constructor.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  ab00c74
- Move all options to constructor.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  31d396a
- Cache the permission set.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  180de68
- Clean up ACLChecker.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  0a58ac5
- Simplify ACL path algorithm.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  d7a429f
- Indent then and catch.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  3161b68
- Expose the user's permissions through a header.
  
  RubenVerborgh
  authored and
  dmitrizagidulin
  committed
  2b8f18b
- Migrate to Solid vocabulary.
  RubenVerborgh
  committed
  91c8106
- Merge branch 'rv/patch/n3' into dz_oidc
  RubenVerborgh
  committed
  30a57ed
- Merge branch 'master' into dz_oidc
  dmitrizagidulin
  committed
  e126aad
- Fix rename missed in merge
  dmitrizagidulin
  committed
  6c1938b
Commits on Aug 21, 2017
- Implement fetchDocument without async.
  RubenVerborgh
  committed
  82af9ec
- Implement globHandler without async.
  RubenVerborgh
  committed
  de7b93a
Commits on Aug 22, 2017
- Implement CORS proxy test without async.
  RubenVerborgh
  committed
  67a6b48
- Implement LDP without async.
  RubenVerborgh
  committed
  ace60c7
- Remove async dependency.
  RubenVerborgh
  committed
  d54f958
- Expose WAC-Allow to browser clients.
  RubenVerborgh
  committed
  5746766
Commits on Aug 25, 2017
- Verify presence of test DNS entries. (#549)
  RubenVerborgh
  authored
  41da733
Commits on Aug 28, 2017
- Bump oidc-auth-manager dep to 0.12.0
  dmitrizagidulin
  committed
  34ca3a6
- Expand error message for unverified web id
  dmitrizagidulin
  committed
  9a3022a
Commits on Aug 29, 2017
- Log whole error in error handler
  dmitrizagidulin
  committed
  a710be5
Commits on Aug 30, 2017
- Do not check for user header in oidc test
  dmitrizagidulin
  committed
  d0b4749
- Move RS options to oidc-auth-manager initialization
  dmitrizagidulin
  committed
  1c09007
- Add support for external WebIDs registering with username & password
  dmitrizagidulin
  committed
  c8e9109
- Remove solid:inbox from template
  dmitrizagidulin
  committed
  8b1dc11
- Tweak account index page phrasing
  dmitrizagidulin
  committed
  49fb741
- Serve static common/ dir relative to __dirname
  dmitrizagidulin
  committed
  c868ab1
- Disable rejectUnauthorized on the WebID-TLS endpoint. (#561)
  
  RubenVerborgh
  authored and
  timbl
  committed
  0dfc619
- Add current hash to redirect. (#562)
  
  RubenVerborgh
  authored and
  timbl
  committed
  bc58c7d
- Add bootstrap.min.css.map to common/css/
  dmitrizagidulin
  committed
  cc569a8
Commits on Aug 31, 2017
- Fix requirement for additional verification logging in with WebID-TLS
  dmitrizagidulin
  committed
  0d9a472
- Remove debug overhead on ACL (#566)
  RubenVerborgh
  authored
  e7d7ec3
Commits on Sep 1, 2017
- Update Data Browser html file
  dmitrizagidulin
  committed
  928ff50
- Add a /public folder in new accounts (#569)
  RubenVerborgh
  authored
  d45d65d
Commits on Sep 3, 2017
- Rename the idp option into multiuser (#570)
  RubenVerborgh
  authored
  bae020f

Commits

Commits on Jun 30, 2017

Commits on Jul 1, 2017

Commits on Jul 2, 2017

Commits on Jul 13, 2017

Commits on Jul 19, 2017

Commits on Jul 25, 2017

Commits on Jul 27, 2017

Commits on Aug 8, 2017

Commits on Aug 9, 2017

Commits on Aug 10, 2017

Commits on Aug 11, 2017

Commits on Aug 14, 2017

Commits on Aug 15, 2017