mulk/mulkyid - Mulky IMAP BrowserID Primary Identity Provider.

	Commit message (Collapse)	Author	Age	Files	Lines
*	QT-1900 Add a CSRF token to the OIDC login flow.	Matthias Benkard	2015-04-23	1	-0/+8
\| \| \| \| \| \|	This improves security by generating a CSRF token, passing it to the OIDC IdP, and validating it afterwards. The token is stored in a cookie reverse-encrypted with MulkyID's private key.
*	Support Google OpenID Connect.	Matthias Benkard	2015-04-23	1	-10/+43
\|
*	Make reverse-proxyable.	Matthias Benkard	2015-04-23	1	-1/+1
\| \| \| \| \| \|	MulkyID used to be unable to run behind a reverse proxy. This is fixed by using the real_domain configuration value for redirects instead of the domain name sent by the client.
*	Make stateless.	Matthias Benkard	2015-04-23	1	-6/+18
\| \| \| \| \| \|	MulkyID does not use session state stored in /tmp anymore. Instead, it uses a cookie encrypted with the private part of the MulkyID instance's RSA key.
*	Fix bugs introduced by the previous patch.	Matthias Andreas Benkard	2014-05-13	1	-26/+10
\|
*	Support Google Apps authentication.	Matthias Andreas Benkard	2014-05-04	1	-10/+32
\|
*	Fix login.	Matthias Andreas Benkard	2012-10-03	1	-1/+1
\|
*	Fix session user matching.	Matthias Andreas Benkard	2012-10-03	1	-1/+1
\|
*	Make the configuration map a dynamic variable.	Matthias Andreas Benkard	2012-10-03	1	-8/+7
\|
*	Make /etc/aliases optional. Add configurability through setup.pl.	Matthias Andreas Benkard	2012-10-03	1	-13/+10
\|
*	Move public files to www/.	Matthias Andreas Benkard	2012-10-03	1	-0/+78