Commit graph

45 commits

Author SHA1 Message Date
Jack Anderson
bab7d9a202 Add encoding to Totp Secret and Backup Codes
- Remove double call for backup codes
2025-01-20 14:45:32 +00:00
Jack Anderson
0911a1a7ee Add check for saml on Login Listener
- Add Auth Type config mapper
2024-12-13 10:26:19 +00:00
Jack Anderson
ee06f05d83 Add check for exception message on AuthenticationFailure 2024-11-27 15:06:07 +00:00
Jack Anderson
152ac503d5 Add check for redirect on TwoFactor onAuthenticationSuccess 2024-11-27 15:06:05 +00:00
Jack Anderson
ed69c07b08 Update Login Listener and Success Handlers 2024-11-27 15:05:28 +00:00
Clemente Raposo
5f5ce6fcaa Remove error_log calls 2024-11-27 14:56:28 +00:00
Jack Anderson
ff4ba2bdd2 Two Factor 2024-11-27 14:56:14 +00:00
Clemente Raposo
590441198b Fix ldap native login fallback 2024-09-23 11:43:22 +01:00
Clemente Raposo
8f1ee999b9 Symfony 6.4 - Add AppSecretGenerator 2024-08-21 18:06:16 +01:00
Clemente Raposo
0816e9b3a9 Symfony 6.4 - Remove no longer used legacy session deny access listener 2024-08-21 18:06:15 +01:00
Clemente Raposo
a9052019cc Symfony 6.4 - Update Session handling to use the same session in symfony and legacy
- Start Session using legacy
- Add LegacyBridgeSession handlers to have so that symfony uses the legacy session
2024-08-21 18:06:15 +01:00
Clemente Raposo
d50db39ba2 Symfony 6.4 - Remove deprecated LoginFormAuthenticator 2024-08-21 18:06:15 +01:00
Clemente Raposo
d244d0478d Symfony 6.4 - Update AppSamlAuthenticator to use Nbgrp\OneloginSamlBundle 2024-08-21 18:06:15 +01:00
Clemente Raposo
9749583a26 Symfony 6.4 - Update AppSamlUserFactory
- Update implementation to use new Nbgrp\OneloginSamlBundle dependency, which replaces Hslavich\OneloginSamlBundle
2024-08-21 18:06:14 +01:00
Clemente Raposo
db754f7495 Symfony 6.4 - Update LegacySessionDenyAccessListener
- Update implementation to cope with new api platform version
2024-08-21 18:06:14 +01:00
Clemente Raposo
4b98970e30 Symfony 6.4 - Update AppCheckLdapCredentialsListener
- Update service configuration
- Update method signatures
2024-08-21 18:06:14 +01:00
Clemente Raposo
c026a74de3 Symfony 6.4 - Replace LegacySessionSecurityStage with LegacySessionAccessCheckerProvider
On new api-platform version, api_platform.graphql.resolver.stage.security is no longer public, so we cannot decorate it.
2024-08-21 18:06:14 +01:00
Clemente Raposo
8a0491a94c Symfony 6.4 - Update AppLdapUserProvider method signatures 2024-08-21 18:06:14 +01:00
Clemente Raposo
f6d24a8014 Symfony 6.4 - Update AppJsonLoginAuthenticator authenticate signature 2024-08-21 18:06:14 +01:00
Jack Anderson
32ccadbd89 Symfony 5.4 - Update Deprecated Security Code 2024-08-21 18:06:13 +01:00
Jack Anderson
fee04d30f9 Symfony 5.3 - Update password_hashers 2024-08-21 18:06:13 +01:00
Jack Anderson
2a3f9b21e1 Symfony 5.3 - Add Legacy Password Hasher 2024-08-21 18:06:13 +01:00
Jack Anderson
324ce95f7d Symfony 5.3 - Remove deprecated BasePasswordEncoder 2024-08-21 18:06:13 +01:00
Jack Anderson
dbf6b701de Symfony 5.3 - Update loaduserbyusername to loaduserbyidentifier 2024-08-21 18:06:13 +01:00
Jack Anderson
9c9d6be4c6 Symfony 5.3 - Update MasterRequest to MainRequest 2024-08-21 18:06:13 +01:00
Jack Anderson
5a03eeaf38 Symfony 5.3 - Swap deprecated SessionInterface with RequestStack 2024-08-21 18:06:13 +01:00
Jack Anderson
117dd81727 SuiteCRM 8.4.2 Release 2023-11-09 14:27:09 +00:00
Jack Anderson
78285702d7 SuiteCRM 8.3.1 Release 2023-07-03 10:27:18 +01:00
Luciano Rossi
5fb1415624 Fix #202 - Fix php7.3 compatibility issues in CSRFCookieListener
Remove class RouteMatcherInterface type property
at CSRFCookieListener.
2023-02-23 17:37:46 +00:00
Clemente Raposo
20de647d5f Fix #180 - Adjust XSRF token handling
- Do not generate a new token on api requests. Use an existing one
-- this was causing problems, as sometimes a new token was being generated, causing the next request to fail
- Add configuration to specify in which requests the new token cookie should be added
2023-01-24 10:10:05 +00:00
Clemente Raposo
040d2d5d67 Redirect to logged-out page when username attribute is misconfigured
- Extend SamlAuthenticator to catch RuntimeException and throw an Authentication exception
- Authentication exception should be caught and then redirected to failure_path
- Dynamically set 'app.saml.authenticator on the container
2022-12-21 11:41:39 +00:00
Clemente Raposo
7a612a0685 Add saml user auto-creation
- Add option to auto-create user upon login
- Add support for mapping fields from Idp to SuiteCRM
2022-10-04 13:13:19 +01:00
Clemente Raposo
8d310bf017 Fallback to native login when ldap user has missing fields
- Allow falling back to native login if the user does not have all extra_fields in ldap
- This is only allowed if user already exists in the crm
2022-09-09 15:15:51 +01:00
Clemente Raposo
8f5af3f610 Add ldap auto create user provider
- Add user provider that creates user if not yet created on the app
- Add proxy to re-use existing entity and ldap user providers
- Allow configuring mapping of ldap extra fields to user fields
- Add base mapping configuration in ldap.yaml
2022-09-09 12:46:22 +01:00
Clemente Raposo
8c669180c5 Add ldap login fallback to native login
- Allow falling back to native login if ldap fails
- Read configuration to enable / disable the fallback
2022-09-09 12:46:22 +01:00
Clemente Raposo
0c79491581 Use new symfony authenticator mechanism
- Add auth success listener to initialize legacy session
- Add password encoder to support legacy style encoding
- Add xsrf-token check to json_login
- enable authenticator_manager
2022-09-09 12:46:22 +01:00
Clemente Raposo
96803a827c Enable CSRF token validation on api requests
- Do no check csrf token on get requests.
-- Angular does not send token on get or header requests
2022-09-09 12:46:20 +01:00
Clemente Raposo
84aa865a68 Update login to use only symfony
- Add Suite 8 side only login
- Do not login on legacy, only initialize session
- This enables the usage of other symfony login mechanisms
2022-09-09 12:46:20 +01:00
Clemente Raposo
72c6184fe6 Rename init new legacy session 2022-09-09 12:46:20 +01:00
Clemente Raposo
8ee2c7dee7 Fix #90 - Properly reset legacy session cookie after logout 2022-05-11 13:11:31 +01:00
Clemente Raposo
a12a1c0df0 Redirect user to set-timezone page after login if not set 2021-11-22 20:30:38 +00:00
Jack Anderson
8b27bf4857 Update Core Copyright 2021-03-30 19:22:43 +01:00
Dillon-Brown
3aed1df849 Move all entities to component folders
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00
Dillon-Brown
7044598f34 Move all legacy handlers to backend
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00
Dillon-Brown
1cab43c7d3 Rename src to backend
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00