Add single sign-on support via SSPI on Windows#8463

Merged

lafriks merged 41 commits intogo-gitea:masterfrom quasoft:sspi

Nov 22, 2019

+6,362-1,305

Commits on Nov 22, 2019

Add single sign-on support via SSPI on Windows
quasoft
committed
Ensure plugins implement interface
quasoft
committed
Ensure plugins implement interface
quasoft
committed
Move functions used only by the SSPI auth method to sspi_windows.go
quasoft
committed
Field SSPISeparatorReplacement of AuthenticationForm should not be required via binding, as binding will insist the field is non-empty even if another login type is selected
quasoft
committed
Fix breaking of oauth authentication on download links. Do not create new session with SSPI authentication on download links.
quasoft
committed
Update documentation for the new 'SPNEGO with SSPI' login source
quasoft
committed
Mention in documentation that ROOT_URL should contain the FQDN of the server
quasoft
committed
Make sure that Contexter is not checking for active login sources when the ORM engine is not initialized (eg. when installing)
quasoft
committed
Always initialize and free SSO methods, even if they are not enabled, as a method can be activated while the app is running (from Authentication sources)
quasoft
committed
Add option in SSPIConfig for removing of domains from logon names
quasoft
committed
Update helper text for StripDomainNames option
quasoft
committed
Make sure handleSignIn() is called after a new user object is created by SSPI auth method
quasoft
committed
Remove default value from text of form field helper

quasoft
and
lafriks
committed
Remove default value from text of form field helper

quasoft
and
lafriks
committed
Remove default value from text of form field helper

quasoft
and
lafriks
committed
Only make a query to the DB to check if SSPI is enabled on handlers that need that information for templates
quasoft
committed
Remove code duplication
quasoft
committed
Log errors in ActiveLoginSources

quasoft
and
lafriks
committed
Revert suffix of randomly generated E-mails for Reverse proxy authentication

quasoft
and
lafriks
committed
Revert unneeded white-space change in template

quasoft
and
lafriks
committed
Add copyright comments at the top of new files
quasoft
committed
Use loopback name for randomly generated emails
quasoft
committed
Add locale tag for the SSPISeparatorReplacement field with proper casing
quasoft
committed
Revert casing of SSPISeparatorReplacement field in locale file, moving it up, next to other form fields
quasoft
committed
Update docs/content/doc/features/authentication.en-us.md

quasoft
and
guillep2k
committed
Remove Priority() method and define the order in which SSO auth methods should be executed in one place
quasoft
committed
Log authenticated username only if it's not empty
quasoft
committed
Rephrase helper text for automatic creation of users
quasoft
committed
Return error if more than one active SSPI auth source is found
quasoft
committed
Change newUser() function to return error, letting caller log/handle the error
quasoft
committed
Move isPublicResource, isPublicPage and handleSignIn functions outside SSPI auth method to allow other SSO methods to reuse them if needed
quasoft
committed
Refactor initialization of the list containing SSO auth methods
quasoft
committed
Validate SSPI settings on POST
quasoft
committed
Change SSPI to only perform authentication on its own login page, API paths and download links. Leave Toggle middleware to redirect non authenticated users to login page
quasoft
committed
Make 'Default language' in SSPI config empty, unless changed by admin
quasoft
committed
Show error if admin tries to add a second authentication source of type SSPI
quasoft
committed
Simplify declaration of global variable
quasoft
committed
Rebuild gitgraph.js on Linux
quasoft
committed
Make sure config values containing only whitespace are not accepted
quasoft
committed
Merge branch 'master' into sspi
lafriks
authored