mulk/mulkyid - Mulky IMAP BrowserID Primary Identity Provider.

	Commit message (Collapse)	Author	Age	Files	Lines
*	QT-1900 Add a CSRF token to the OIDC login flow.	Matthias Benkard	2015-04-23	4	-13/+51
\| \| \| \| \| \|	This improves security by generating a CSRF token, passing it to the OIDC IdP, and validating it afterwards. The token is stored in a cookie reverse-encrypted with MulkyID's private key.
*	Support Google OpenID Connect.	Matthias Benkard	2015-04-23	3	-22/+64
\|
*	Make reverse-proxyable.	Matthias Benkard	2015-04-23	2	-6/+2
\| \| \| \| \| \|	MulkyID used to be unable to run behind a reverse proxy. This is fixed by using the real_domain configuration value for redirects instead of the domain name sent by the client.
*	Make stateless.	Matthias Benkard	2015-04-23	5	-61/+62
\| \| \| \| \| \|	MulkyID does not use session state stored in /tmp anymore. Instead, it uses a cookie encrypted with the private part of the MulkyID instance's RSA key.
*	sign.pl: Make $::MULKONF->{real_domain} the issuer.	Matthias Benkard	2015-04-23	1	-3/+1
\|
*	Fix bugs introduced by the previous patch.	Matthias Andreas Benkard	2014-05-13	7	-105/+136
\|
*	Support Google Apps authentication.	Matthias Andreas Benkard	2014-05-04	10	-16/+137
\|
*	Fix login.	Matthias Andreas Benkard	2012-10-03	1	-1/+1
\|
*	Update branding (BrowserID --> Persona).	Matthias Andreas Benkard	2012-10-03	2	-16/+6
\|
*	Fix session user matching.	Matthias Andreas Benkard	2012-10-03	3	-3/+3
\|
*	Make the configuration map a dynamic variable.	Matthias Andreas Benkard	2012-10-03	4	-18/+19
\|
*	Make /etc/aliases optional. Add configurability through setup.pl.	Matthias Andreas Benkard	2012-10-03	4	-35/+50
\|
*	Make PEM file location configurable.	Matthias Andreas Benkard	2012-10-03	1	-3/+7
\|
*	Move public files to www/.	Matthias Andreas Benkard	2012-10-03	7	-0/+385