Sync commits with original repository #2
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…d list (#53) Co-authored-by: Philipp Seßner <philipp.sessner@gmail.com>
Co-authored-by: Cyril Janody <cyril.janody@fsg.ulaval.ca>
* [FEATURE] Add PKCE Proof of Key for Code Exchange enableCodeVerifier switch in extension configuration is used to enable the PKCE flow. No further configuration is needed. Implemented for authentication without password only. * [FEATURE] Make redirect URI configurable You can now configure the URI that will be called back by the authorization server (oidcRedirectUri). If left blank the standard callback script is used.
Resolves #62
…rs (#64) * [FEATURE] Login plugin: Allow to configure authorization URL parameters Allow to add query parameters to the authorization redirect URL via TypoScript. * [TASK] Add authorizationUrlOptions sample
[BUGFIX] Respect usersStoragePid
[BUGFIX] Use makeInstance for creating hook objects
If the extbased version of felogin is used, this ViewHelper can be used to retrieve the link
[FEATURE] LinkViewHelper for felogin based on extbase
Replace PHP session with JWT
[TASK] Enhance event data
[BUGFIX] Cope with missing TSFE
The underlying provider may throw arbitrary errors. Make sure those do not propagate to Frontend.
[TASK] Catch any error that may occur during auth url generation
Instead of always generating an authentication url for every rendering of the oidc button, create a dedicated route, which will create the authentication URL on demand and redirect the user there. Related #158
[TASK] Use dedicated route for authorization url
* Add auth service instance * Align event class * Add CHANGELOG entry
[FEATURE] Add a custom user groups event
The frontend login process is protected against CSRF beginning with TYPO3 12. For now we fake the request token when the GET variable tx_oidc is set. I doubt connect action‘s redirect is still necessary. This should still be checked.
[FEATURE] Add event to modify where-conditions for fe_users
Ignore hash validation for authentication url if neither login nor redirect url are provided.
[BUGFIX] No hash validation for authentication url
If some weird arbitrary URLs are called for a website, the language may not be identified at all. Adjust the authentication request detection to cope with this situation.
[BUGFIX] Handle missing language request attribute
TYPO3 v12 support
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.