Jack Anderson
bab7d9a202
Add encoding to Totp Secret and Backup Codes
...
- Remove double call for backup codes
2025-01-20 14:45:32 +00:00
Jack Anderson
0911a1a7ee
Add check for saml on Login Listener
...
- Add Auth Type config mapper
2024-12-13 10:26:19 +00:00
Jack Anderson
ee06f05d83
Add check for exception message on AuthenticationFailure
2024-11-27 15:06:07 +00:00
Jack Anderson
152ac503d5
Add check for redirect on TwoFactor onAuthenticationSuccess
2024-11-27 15:06:05 +00:00
Jack Anderson
ed69c07b08
Update Login Listener and Success Handlers
2024-11-27 15:05:28 +00:00
Clemente Raposo
5f5ce6fcaa
Remove error_log calls
2024-11-27 14:56:28 +00:00
Jack Anderson
ff4ba2bdd2
Two Factor
2024-11-27 14:56:14 +00:00
Clemente Raposo
590441198b
Fix ldap native login fallback
2024-09-23 11:43:22 +01:00
Clemente Raposo
8f1ee999b9
Symfony 6.4 - Add AppSecretGenerator
2024-08-21 18:06:16 +01:00
Clemente Raposo
0816e9b3a9
Symfony 6.4 - Remove no longer used legacy session deny access listener
2024-08-21 18:06:15 +01:00
Clemente Raposo
a9052019cc
Symfony 6.4 - Update Session handling to use the same session in symfony and legacy
...
- Start Session using legacy
- Add LegacyBridgeSession handlers to have so that symfony uses the legacy session
2024-08-21 18:06:15 +01:00
Clemente Raposo
d50db39ba2
Symfony 6.4 - Remove deprecated LoginFormAuthenticator
2024-08-21 18:06:15 +01:00
Clemente Raposo
d244d0478d
Symfony 6.4 - Update AppSamlAuthenticator to use Nbgrp\OneloginSamlBundle
2024-08-21 18:06:15 +01:00
Clemente Raposo
9749583a26
Symfony 6.4 - Update AppSamlUserFactory
...
- Update implementation to use new Nbgrp\OneloginSamlBundle dependency, which replaces Hslavich\OneloginSamlBundle
2024-08-21 18:06:14 +01:00
Clemente Raposo
db754f7495
Symfony 6.4 - Update LegacySessionDenyAccessListener
...
- Update implementation to cope with new api platform version
2024-08-21 18:06:14 +01:00
Clemente Raposo
4b98970e30
Symfony 6.4 - Update AppCheckLdapCredentialsListener
...
- Update service configuration
- Update method signatures
2024-08-21 18:06:14 +01:00
Clemente Raposo
c026a74de3
Symfony 6.4 - Replace LegacySessionSecurityStage with LegacySessionAccessCheckerProvider
...
On new api-platform version, api_platform.graphql.resolver.stage.security is no longer public, so we cannot decorate it.
2024-08-21 18:06:14 +01:00
Clemente Raposo
8a0491a94c
Symfony 6.4 - Update AppLdapUserProvider method signatures
2024-08-21 18:06:14 +01:00
Clemente Raposo
f6d24a8014
Symfony 6.4 - Update AppJsonLoginAuthenticator authenticate signature
2024-08-21 18:06:14 +01:00
Jack Anderson
32ccadbd89
Symfony 5.4 - Update Deprecated Security Code
2024-08-21 18:06:13 +01:00
Jack Anderson
fee04d30f9
Symfony 5.3 - Update password_hashers
2024-08-21 18:06:13 +01:00
Jack Anderson
2a3f9b21e1
Symfony 5.3 - Add Legacy Password Hasher
2024-08-21 18:06:13 +01:00
Jack Anderson
324ce95f7d
Symfony 5.3 - Remove deprecated BasePasswordEncoder
2024-08-21 18:06:13 +01:00
Jack Anderson
dbf6b701de
Symfony 5.3 - Update loaduserbyusername to loaduserbyidentifier
2024-08-21 18:06:13 +01:00
Jack Anderson
9c9d6be4c6
Symfony 5.3 - Update MasterRequest to MainRequest
2024-08-21 18:06:13 +01:00
Jack Anderson
5a03eeaf38
Symfony 5.3 - Swap deprecated SessionInterface with RequestStack
2024-08-21 18:06:13 +01:00
Jack Anderson
117dd81727
SuiteCRM 8.4.2 Release
2023-11-09 14:27:09 +00:00
Jack Anderson
78285702d7
SuiteCRM 8.3.1 Release
2023-07-03 10:27:18 +01:00
Luciano Rossi
5fb1415624
Fix #202 - Fix php7.3 compatibility issues in CSRFCookieListener
...
Remove class RouteMatcherInterface type property
at CSRFCookieListener.
2023-02-23 17:37:46 +00:00
Clemente Raposo
20de647d5f
Fix #180 - Adjust XSRF token handling
...
- Do not generate a new token on api requests. Use an existing one
-- this was causing problems, as sometimes a new token was being generated, causing the next request to fail
- Add configuration to specify in which requests the new token cookie should be added
2023-01-24 10:10:05 +00:00
Clemente Raposo
040d2d5d67
Redirect to logged-out page when username attribute is misconfigured
...
- Extend SamlAuthenticator to catch RuntimeException and throw an Authentication exception
- Authentication exception should be caught and then redirected to failure_path
- Dynamically set 'app.saml.authenticator on the container
2022-12-21 11:41:39 +00:00
Clemente Raposo
7a612a0685
Add saml user auto-creation
...
- Add option to auto-create user upon login
- Add support for mapping fields from Idp to SuiteCRM
2022-10-04 13:13:19 +01:00
Clemente Raposo
8d310bf017
Fallback to native login when ldap user has missing fields
...
- Allow falling back to native login if the user does not have all extra_fields in ldap
- This is only allowed if user already exists in the crm
2022-09-09 15:15:51 +01:00
Clemente Raposo
8f5af3f610
Add ldap auto create user provider
...
- Add user provider that creates user if not yet created on the app
- Add proxy to re-use existing entity and ldap user providers
- Allow configuring mapping of ldap extra fields to user fields
- Add base mapping configuration in ldap.yaml
2022-09-09 12:46:22 +01:00
Clemente Raposo
8c669180c5
Add ldap login fallback to native login
...
- Allow falling back to native login if ldap fails
- Read configuration to enable / disable the fallback
2022-09-09 12:46:22 +01:00
Clemente Raposo
0c79491581
Use new symfony authenticator mechanism
...
- Add auth success listener to initialize legacy session
- Add password encoder to support legacy style encoding
- Add xsrf-token check to json_login
- enable authenticator_manager
2022-09-09 12:46:22 +01:00
Clemente Raposo
96803a827c
Enable CSRF token validation on api requests
...
- Do no check csrf token on get requests.
-- Angular does not send token on get or header requests
2022-09-09 12:46:20 +01:00
Clemente Raposo
84aa865a68
Update login to use only symfony
...
- Add Suite 8 side only login
- Do not login on legacy, only initialize session
- This enables the usage of other symfony login mechanisms
2022-09-09 12:46:20 +01:00
Clemente Raposo
72c6184fe6
Rename init new legacy session
2022-09-09 12:46:20 +01:00
Clemente Raposo
8ee2c7dee7
Fix #90 - Properly reset legacy session cookie after logout
2022-05-11 13:11:31 +01:00
Clemente Raposo
a12a1c0df0
Redirect user to set-timezone page after login if not set
2021-11-22 20:30:38 +00:00
Jack Anderson
8b27bf4857
Update Core Copyright
2021-03-30 19:22:43 +01:00
Dillon-Brown
3aed1df849
Move all entities to component folders
...
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00
Dillon-Brown
7044598f34
Move all legacy handlers to backend
...
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00
Dillon-Brown
1cab43c7d3
Rename src to backend
...
Signed-off-by: Dillon-Brown <dillon.brown@salesagility.com>
2021-03-30 19:22:41 +01:00