Skip to content

Add keycloak backend, better logout instructions & fixes
Compare
Choose a tag to compare
@vikoivun vikoivun released this 06 Nov 09:51
r200408
59ebcf7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Features:

  1. Added a generic OIDC backend. Named 'helusername' as it is targeted towards using Keycloak as an username/password backend.
  2. Add support for CSP (Content Security Policy)
  3. Add CORS policy support, with dynamic support for post_logout_uris and redirect_uri
  4. Add report view for displaying currently configured clients and when they have been used last
  5. Additional translations
  6. More logging for e-mail matching problems.

Fixes:

  1. Verify post logout uri, don't allow arbitrary redirect URIs in logout requests
  2. Explicitly specify encryption algorithms as a sanity checks, security
  3. Perform some digest comparisons using using specific functions, security
  4. Deny frame embeds (X-Frame-Options), security

Maintenance:

  1. Several dependencies have been updated
  2. Unused ADFS-integration code removed
Assets 2
Loading