Closed
Milestone
Dec 22, 2019–May 5, 2020
2.0.8
Unstarted Issues (open and unassigned)
0
Ongoing Issues (open and assigned)
0
Completed Issues (closed)
115
- SingleSession plugin does not work if history is displayed
- refresh my rights downgrades authentication level set by 2FA
- Introspection endpoint does not recognize refreshed Access Tokens
- duplicates in _oidcConsents when scope is updated
- LLNG is too strict on OIDC scope syntax
- OAuth2 handler should return 401 when access token is missing or invalid
- Server error with rule on Combination
- Single session module configuration
- Nginx configuration files do not work with IPv6
- Session upgrade does not work with multiple second factors
- Bad request with Notification SPA
- OTT is not sent if SSL authentication fails with Choice
- Enable redirection on forbidden access with self protected Portal URLs leads to an endless loop
- OIDC consent validation fails after second factor form or redirection from external IDP
- Auth Combination SSL/LDAP + VHOSTTYPE AuthBasic broken
- logout forward doesn't work anymore
- Issues with removed second factors notification system
- Manager with CDA issue
- Cache reload throw an error if status enabled
- Rest2F does not transmit session attributes to Verify URL
- OIDC: hybrid flow does not issue ID token
- Multivalued attributes received from CAS server stored as string "ARRAY" in session
- Missing goToPortal translation for mails
- Password policy warning before password expiration is badly displayed
- Bad translation tag for password policy remaining grace message
- Using RS* ID Token signature algorithm without a RSA key causes ID Token to be returned as "null"
- Sessions are not well computed by CheckUser plugin
- Wildcard in virtualhost names : URL contains a non protected host
- Error 500 when SAML Session is expired
- Error after activating userLogger (Apache)
- Session creation mixup when supplying an existing _session_id
- Old format notifications with file backend don t work
- LDAP notifications backend does not work
- OIDC provider doesn't work when info is displayed during the login process
- SSLVarIf cannot be set in manager
- Parameter added to external redirect URL when info.tpl is used
- SAML POST to SP becomes GET when an info is displayed
- Portal menu : display condition with sp: does not work for SAML SP
- Configuration comparator error on application menu "order"
- Javascript error: window.datas is undefined
- pdata not cleaned with Kerberos authentication
- Error in Manager / CLI / Editor when an attribute is not defined
- Use of configuration cache can mix global and local configuration parameters
- Log in request without captcha returns an internal server error
- SAML Service Provider Macros are incorrectly displayed/saved by the manager
- Wrong message displayed by CheckUser plugin
- Unable to display notifications marked as done (DBI)
- t/32-OIDC-Refresh-Token.t fails randomly
- Memory leak issue on CentOS 7 / perl 5.16
- [warn] Route xxx redefined when using the fastCGI server
- expired issuer context is not reset when starting new authentication
- Manager breaks when moving a newly created category or application
- Workaround for memory Leak in perl-fcgi with Perl < 5.18
- Internal server error with last build
- Append a rule to display sfaManager link
- SAML logout request returns 400 error code if session is not found
- Append a Show/Hide password button into change password form
- Make require old password option configurable by a rule
- OIDC: Allow additional audiences for ID Token
- Reorganize OIDC RP options in manager
- Make CheckUser options configurable by a rule
- Configuration parser does not check validity of SAML/OIDC/CAS/vhost options
- Make SingleSession options configurable by a rule
- DBI should test that "table" is set
- "Require 2FA" should be renamed
- Implement Resource Owner Password Credentials Grant
- Add an easy way to set level of additional second factors
- Display a custom param with GlobalLogout plugin
- Append an option to define applications tooltip
- Remove 'underscore' in notification reference
- Application icons are displayed with real sizes by the Manager and It is not particularly convenient
- Make json does nothing if only a Portal constant is appended
- Append password policy options to define and require special characters
- AuthenticationLevel based macros and groups should be updated with second factor
- Prevent Portal to crash if a bad rule is used for enabling a plugin
- Internal Server Error when REST backend does not return a JSON Object
- Prevent Portal to crash if Custom Functions module is not found
- Rely on "isRequired" XML field in importMetadata script to mark SAML attributes as mandatory
- Remove warning messages "uninitialized value $encryption_mode"
- Possibility to select choice tab, as for menu tab
- Improve adaptive display and show instance name
- Securing the new API endpoints for 2.0.8 release
- "Underlying object can't load conf" is a bad error message
- CheckUser: Append an option to hide empty headers
- Add a rollback option to lemonldap-ng-cli
- Bad Autologin rule lead to error 500 and crash the portal
- Improve introspection endpoint
- CheckUser - Remove persistent session attributes if required
- Better look for buttons in 2FA choice screen
- BruteForce module: increase delay between each login attempt
- Make "error" the default log level for lasso
- Possibility to configure a custom CSS file
- Improve notifications SPA
- Allow users to see and display theirs accepted notifications
- LemonLDAP session cookie - SameSite attribute
- Append an option to set CSP frame ancestors header
- Improve diff.html templates to display Author, Date and Summary of both configurations
- Do not show action buttons on portal when displaying waiting message (Kerberos or SSL Ajax call)
- compactConf is confusing
- Provide packages for CentOS 8
- Configuration is saved even with errors with lemonldap-ng-cli
- Option to run setMacros after setGroups
- Github authentication backend
- Possibility to override language with a parameter in URL
- Manage Cookie SameSite value
- Manager API to manage SAML and OIDC clients
- Manager API to reset 2FA
- Macros are not well computed by Impersonation and ContextSwitching
- Session explorer should not translate attributes in the last paragraph
- Improve Notifications storage options documentation
- Documentation update on group separator
- Wrong parameter name for issuersTimeout test in Manager
- [CPAN RT n°131222] Image::Magick and GD::SecurityImage prereqs
- [CPAN RT n°131220] Missing recommended dependency to String::Random
- Document how to use LDAP groups
