aboutsummaryrefslogtreecommitdiff
path: root/www/authenticate.pl
Commit message (Collapse)AuthorAgeFilesLines
* QT-1900 Add a CSRF token to the OIDC login flow.Matthias Benkard2015-04-231-12/+16
| | | | | | This improves security by generating a CSRF token, passing it to the OIDC IdP, and validating it afterwards. The token is stored in a cookie reverse-encrypted with MulkyID's private key.
* Support Google OpenID Connect.Matthias Benkard2015-04-231-11/+20
|
* Make stateless.Matthias Benkard2015-04-231-25/+4
| | | | | | MulkyID does not use session state stored in /tmp anymore. Instead, it uses a cookie encrypted with the private part of the MulkyID instance's RSA key.
* Fix bugs introduced by the previous patch.Matthias Andreas Benkard2014-05-131-21/+40
|
* Support Google Apps authentication.Matthias Andreas Benkard2014-05-041-0/+48