Commit Graph

26 Commits

Author SHA1 Message Date
Jarek Radosz e9981c8906
DEV: Update linting (#71) 2024-01-16 18:01:20 +01:00
Martin Brennan 0b70fc53b5
DEV: Metadata update for plugin.rb (#66)
* Update plugin.rb metadata

* Update plugin.rb

---------

Co-authored-by: AlexDev <104522507+alexdevlaeminck@users.noreply.github.com>
2023-11-08 11:15:49 -08:00
David Taylor 030f82f880
DEV: Introduce syntax_tree for ruby formatting (#51) 2022-12-29 13:33:26 +01:00
David Taylor 87c59fb03f
DEV: Correct `timeout` spelling (#39)
Followup to 13c74cdb83
2022-05-23 16:33:37 +01:00
David Taylor 8e4c5f7e61
DEV: Make request timeout configurable (#38) 2022-05-23 16:05:20 +01:00
Jarek Radosz e897702139
DEV: General cleanup (#34) 2022-04-06 12:19:39 +02:00
David Taylor 5e1f1a57db
FIX: Correctly handle end_session_endpoint with query parameters (#18) 2021-09-17 17:00:29 +01:00
David Taylor 4170927338 FEATURE: Support RP-initiated logout post_logout_redirect_uri 2020-11-12 17:16:11 +00:00
David Taylor a9dd528aea FIX: RP-initiated logout should pass id_token, not access_token 2020-11-12 17:16:11 +00:00
David Taylor 3ad22e0cef
FEATURE: Add support for OIDC RP-initiated logout (#5)
Based on the specification at https://openid.net/specs/openid-connect-rpinitiated-1_0.html

When logging out, this feature will redirect the user to the end_session_url from the discovery document. Their most recent id token will be included in the `id_token_hint` parameter.

To use this, the identity provider must include an end_session_url in the discovery document, and the openid_connect_rp_initiated_logout site setting must be enabled.
2020-11-12 15:21:43 +00:00
David Taylor 85abe67701
FIX: Gracefully handle errors while fetching the discovery document (#4)
Previously an error loading the discovery document would raise an exception. Now, it will display an error to the user, and log the error for site admins to view at `/logs`. Specs are updated and improved accordingly.

This moves the discovery document fetching out of OmniAuth and into Discourse. This makes it available for the upcoming rp-initiated-logout support.
2020-11-11 18:46:11 +00:00
David Taylor 109ec1a275
FEATURE: Add detailed OIDC request and response logs
This makes use of Faraday middleware to log precise details about all requests made by the OAuth2 gem. This should make it easier to debug configuration issues
2020-09-25 09:47:24 +01:00
David Taylor 20c835ea06
DEV: Remove deprecated full screen login parameter 2020-05-12 12:13:38 +01:00
David Taylor 3e83fa9c50 DEV: Refactor authenticator into its own file 2020-01-08 13:52:24 +00:00
Guo Xiang Tan 1f08770d1a Add frozen string literal comment to files. 2019-05-13 10:51:32 +08:00
David Taylor 94bba5f710 FEATURE: Option to enable verbose logging of authentication process 2019-01-04 15:08:35 +00:00
David Taylor d394c12078 FEATURE: Support latest version of `ruby-jwt` to support core changes
This change is not backwards compatible. If you install the plugin on
an earlier version of Discourse, the plugin will not initialize.
2019-01-02 10:42:28 +00:00
David Taylor 84085413d5 REFACTOR: user_associated_account and managed_authenticator moved to core 2018-11-30 11:20:28 +00:00
David Taylor f44a2cd7bb DEV: Refactor managed_authenticator into its own file 2018-11-26 14:54:20 +00:00
David Taylor adcc85dde3 FEATURE: Add enabled setting, and some refactoring 2018-11-22 14:49:49 +00:00
David Taylor 78a792b5b6 FIX: Improved 'discovery' error handling, with tests 2018-11-21 15:28:01 +00:00
David Taylor 0008d9bc6f FIX: Correct order of operations in `if` statement 2018-11-20 14:19:26 +00:00
David Taylor e9c86e6822 FEATURE: Optionally redirect on defined errors, and add site setting descriptions 2018-11-16 17:55:10 +00:00
David Taylor 1c56447c91 UX: Change callback URL to be shorter 2018-11-15 17:29:21 +00:00
David Taylor 5ce9aeb174 FEATURE: Match accounts using email by default 2018-11-09 13:13:26 +00:00
David Taylor 4425b8ae67 FEATURE: OpenID Connect support 2018-11-09 12:49:51 +00:00