summary refs log tree commit diff
path: root/synapse/config/sso.py (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Clarify documentation about escaping URLs in templates. (#9310)Patrick Cloke2021-02-031-10/+4
|
* Collect terms consent from the user during SSO registration (#9276)Richard van der Hoff2021-02-011-0/+22
|
* Improve styling and wording of SSO UIA templates (#9286)Richard van der Hoff2021-02-011-0/+15
| | | fixes #9171
* Replace username picker with a template (#9275)Richard van der Hoff2021-02-011-2/+31
| | | | | There's some prelimiary work here to pull out the construction of a jinja environment to a separate function. I wanted to load the template at display time rather than load time, so that it's easy to update on the fly. Honestly, I think we should do this with all our templates: the risk of ending up with malformed templates is far outweighed by the improved turnaround time for an admin trying to update them.
* Improve styling and wording of SSO redirect confirm template (#9272)Richard van der Hoff2021-02-011-1/+13
|
* Give `public_baseurl` a default value (#9159)Richard van der Hoff2021-01-201-8/+5
|
* Give the user a better error when they present bad SSO credsRichard van der Hoff2021-01-131-0/+10
| | | | | | | | | If a user tries to do UI Auth via SSO, but uses the wrong account on the SSO IdP, try to give them a better error. Previously, the UIA would claim to be successful, but then the operation in question would simply fail with "auth fail". Instead, serve up an error page which explains the failure.
* Add initial support for a "pick your IdP" page (#9017)Richard van der Hoff2021-01-051-0/+27
| | | | | During login, if there are multiple IdPs enabled, offer the user a choice of IdPs.
* Clarify config template comments (#8891)Richard van der Hoff2020-12-081-5/+2
|
* Use the default templates when a custom template file cannot be found (#8037)Andrew Morgan2020-08-171-15/+22
| | | Fixes https://github.com/matrix-org/synapse/issues/6583
* Cleanups to the OpenID Connect integration (#7628)Richard van der Hoff2020-06-031-1/+2
| | | | docs, default configs, comments. Nothing very significant.
* Implement OpenID Connect-based login (#7256)Quentin Gliech2020-05-081-7/+10
|
* Add documentation to the sample config about the templates for SSO. (#7343)Patrick Cloke2020-04-241-0/+24
|
* Use a template for the SSO success page to allow for customization. (#7279)Patrick Cloke2020-04-171-0/+6
|
* Do not allow a deactivated user to login via SSO. (#7240)Patrick Cloke2020-04-091-0/+7
|
* Always whitelist the login fallback for SSO (#7153)Richard van der Hoff2020-03-271-0/+15
| | | | | | | That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's.
* Factor out complete_sso_login and expose it to the Module APIBrendan Abolivier2020-03-031-1/+1
|
* Add a whitelist for the SSO confirmation step.Richard van der Hoff2020-03-021-0/+18
|
* Add a confirmation step to the SSO login flowBrendan Abolivier2020-03-021-0/+74