Commit Graph

452 Commits

Author SHA1 Message Date
Valentin Samir 87672dda05 Allow patch release of Django 3.0 in requirements.txt 2020-07-05 14:52:55 +02:00
Théophile Bastian b7c7c0f0ba Service URL: keep blank GET arguments
When a service URL contains GET arguments with no associated value, eg
  http://example.com/?foo=a&bar
only the arguments with value are kept, yielding
  http://example.com/?foo=a&ticket=<TICKET>
losing `bar` in the process
2020-07-05 14:52:01 +02:00
Yohann D'ANELLO 9cd44aa8aa Code quality 2020-07-05 14:52:01 +02:00
Yohann D'ANELLO 4129687e41 Support Django 2.2 and 3.0 2020-07-05 14:52:01 +02:00
Ken Whitesell 5f30d614e5 General editing of README.rst 2020-07-05 14:52:01 +02:00
Théophile Bastian f4b4428b94 Fix CRYPT-DES hash method for LDAP
The LDAP-formatted passwords using
[Crypt encoding](https://en.wikipedia.org/wiki/Crypt_(C))
can be hashed in many ways, inlcuding the old and deprecated DES and
BSDi methods.

The usual formatting for Crypt method consists in
  $method$salt$pass_hash
but those two deprecated methods are not encoded this way, and
`get_salt` would fail on those, yielding Error 500.
2020-07-05 14:52:01 +02:00
erdnaxe aa88bf7a67 Bootstrap 4 templates (#47) 2020-07-05 14:52:01 +02:00
Valentin Samir 781e516769 Update .travis.yml to use python3 for flake8, check_rst and coverage 2020-07-05 14:52:01 +02:00
Valentin Samir 4aba254975 Update tox.ini to use python3 for flake8, check_rst and coverage 2020-07-05 14:52:01 +02:00
William Blough 6ee703847f [docs] Replace calls to add_description_unit
As of Sphinx 2.4, the deprecated add_description_unit function has been
removed. As a result, the docs no longer build when using Sphinx 2.4.
Replacing add_description_unit with add_object_type corrects this.
2020-07-05 14:44:05 +02:00
Valentin Samir d106181b94
Merge pull request #44 from nitmir/dev
Update to version 1.0.0

v1.1.0 - 2019-03-02
===================

Added
-----

* Support for Django 2.1

Fixes
-----

* Checkbox position on the login page
* Set ldap3 client_strategy from sync to sync-restartable
* Deprecation warning for {% load staticfiles %} and django.contrib.staticfiles
2019-03-02 11:45:41 +01:00
Valentin Samir bd9aedd1b4 Update to version 1.1.0 2019-03-02 11:37:11 +01:00
Valentin Samir 378f70fac9 Fix deprecation warning for {% load staticfiles %} and django.contrib.staticfiles 2019-03-02 11:31:18 +01:00
Valentin Samir 4025fcbf11 Add support for Django 2.1 2019-03-02 11:23:30 +01:00
Valentin Samir 9ee95f0bec Fix checkbox position on the login page 2019-03-02 11:23:16 +01:00
Valentin Samir 1bdfd2d0db Edit changelog for pull request bf44b4f305 2019-03-02 11:22:43 +01:00
Valentin Samir bf44b4f305
Merge pull request #43 from AIJIJI/master
set ldap3 client_strategy from sync to sync-restartable. fix #42
2019-01-26 13:59:36 +01:00
钟雪松 f4ece7f1f2 set ldap3 client_strategy from sync to sync-restartable; in order to avoid error 32 broken pipe caused by time out 2019-01-25 15:28:07 +08:00
Valentin Samir 7e0bf93505
Merge pull request #41 from nitmir/dev
Update version to 1.0.0
2019-01-12 12:09:11 +01:00
Valentin Samir edf4871b4a
Update to version 1.0.0 2019-01-12 12:01:48 +01:00
Valentin Samir a6cf8aaa20
Fix invalid escape sequence \. in regular expression \\. 2019-01-12 12:01:12 +01:00
Valentin Samir 248658b52d Fix squashed migrations, the app name should be 'cas_server' and not b'cas_server' 2018-05-21 13:25:36 +02:00
Valentin Samir 5bd06d47c5 Keep query string then redirecting from / to /login 2018-05-21 13:10:33 +02:00
Valentin Samir 797b6c6e61 Updates dependancies to Django>=1.11 2018-04-30 22:31:10 +02:00
Valentin Samir dc5f59ea46 Update PyPi url from https://pypi.python.org to https://pypi.org 2018-04-30 18:31:54 +02:00
Valentin Samir ca41c067b9 Wrap some long lines 2018-04-29 20:13:51 +02:00
Valentin Samir 290701e07f Changes for Django 2.0 support 2018-04-29 20:10:19 +02:00
Valentin Samir fcafc77b98 Update .travis.yml and setup.py to drop Django <1.11 and python 3.4 support 2018-04-29 19:21:54 +02:00
Valentin Samir b207cee8ee Update changelog 2018-04-29 19:16:24 +02:00
Valentin Samir 81d7c7c9c6 Drop support of Django <1.11 and python 3.4 2018-04-29 19:16:02 +02:00
Valentin Samir 753e3b5625 Fix #38 calling django.contrib.staticfiles.templatetags.staticfiles.static before collectstatic raise a ValueError.
In debug bug, it actually works and do not raise an exception, but in
non-debug mode, it tries to search the staticfiles manifest for the file.
If there is no manifest because collectstatic has not been run before, this fails.
2018-04-29 19:04:59 +02:00
Valentin Samir ee69b04b53 Fix code style of previous commit 2018-04-29 19:04:44 +02:00
Valentin Samir ff8373ee6a Always return authenticationDate, longTermAuthenticationRequestTokenUsed and isFromNewLogin attributes
As specified in the CAS response XML schema (see Appendix A).
Fix #37 as returned attributes are now never empty.
2018-04-29 18:48:41 +02:00
Valentin Samir 4123450e9f Add support for Django 2.0, fix #33 2018-01-27 10:44:34 +01:00
Valentin Samir 4de2e2c1c6 Add support for python 3.6 and Django 1.11 2017-11-17 16:56:44 +01:00
Valentin Samir 4229f871c5
Merge pull request #34 from nitmir/dev
Update version to 0.9.0

v0.9.0 - 2017-11-17
===================

Added
-----
* Dutch translation
* Protuguese translation (brazilian variant)
* Support for ldap3 version 2 or more (changes in the API)
  All exception are now in ldap3.core.exceptions, methodes for fetching attritutes and
  dn are renamed.
* Possibility to disable service message boxes on the login pages

Fixed
-----
* Then using the LDAP auth backend with ``bind`` method for password check, do not try to bind
  if the user dn was not found. This was causing the exception
  ``'NoneType' object has no attribute 'getitem'`` describe in #21
* Increase the max size of usernames (30 chars to 250)
* Fix XSS js injection
2017-11-17 15:47:00 +01:00
Valentin Samir 5811d6435c Update version to 0.9.0 2017-11-17 15:32:42 +01:00
Valentin Samir 971cde093c Fix XSS js injection 2017-11-17 15:28:12 +01:00
Roberto Morati f1a47e7766 Added protuguese translation (brazilian variant) 2017-08-29 18:14:00 +02:00
Valentin Samir 60ae92cc5a Add changelog for merges 03a069268a and 253b431194 2017-04-25 16:26:39 +02:00
Valentin Samir 253b431194 Merge pull request #26 from JostCrow/master
Added a way to disable the service messages on the login page
2017-04-25 16:21:05 +02:00
Valentin Samir 03a069268a Merge pull request #27 from JostCrow/bigger_usernames
The username was really small
2017-04-25 16:20:50 +02:00
Valentin Samir 9e1fd9962d Merge branch 'master' into bigger_usernames 2017-04-07 16:07:08 +02:00
Jorik Kraaikamp 92bba0da49 added the missing migration 2017-03-30 15:25:49 +02:00
Jorik Kraaikamp 13af3ccd1d added the bigger username migration and change 2017-03-29 17:52:12 +02:00
Jorik Kraaikamp 951dc60e99 Fixed some major mistyping and added the default setting. 2017-03-29 16:57:27 +02:00
Jorik Kraaikamp 81ebc74ecd updated the readme 2017-03-29 15:38:21 +02:00
Jorik Kraaikamp 224202c5c2 Added a setting to turn of the messages about the service 2017-03-29 15:36:12 +02:00
Valentin Samir 1dba4fea95 Support for ldap3 version 2 or more (changes in the API)
All exception are now in ldap3.core.exceptions, methodes for fetching
attritutes and dn are renamed.
2017-03-29 14:34:58 +02:00
Valentin Samir 443c87fa40 Do not try to bind if the user dn was not found with LDAP auth backend
Then using the LDAP auth backend with ``bind`` method for password check, do not try to bind
if the user dn was not found. This was causing the exception
``'NoneType' object has no attribute 'getitem'`` describe in #21
2017-03-29 14:28:36 +02:00