aboutsummaryrefslogtreecommitdiff
path: root/www/common.pl
Commit message (Collapse)AuthorAgeFilesLines
* QT-1900 Add a CSRF token to the OIDC login flow.Matthias Benkard2015-04-231-0/+27
| | | | | | This improves security by generating a CSRF token, passing it to the OIDC IdP, and validating it afterwards. The token is stored in a cookie reverse-encrypted with MulkyID's private key.
* Make reverse-proxyable.Matthias Benkard2015-04-231-5/+1
| | | | | | MulkyID used to be unable to run behind a reverse proxy. This is fixed by using the real_domain configuration value for redirects instead of the domain name sent by the client.
* Make stateless.Matthias Benkard2015-04-231-0/+17
| | | | | | MulkyID does not use session state stored in /tmp anymore. Instead, it uses a cookie encrypted with the private part of the MulkyID instance's RSA key.
* Fix bugs introduced by the previous patch.Matthias Andreas Benkard2014-05-131-2/+5
|
* Support Google Apps authentication.Matthias Andreas Benkard2014-05-041-0/+13
|
* Make the configuration map a dynamic variable.Matthias Andreas Benkard2012-10-031-4/+7
|
* Make /etc/aliases optional. Add configurability through setup.pl.Matthias Andreas Benkard2012-10-031-0/+24