Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Replace username picker with a template (#9275) | Richard van der Hoff | 2021-02-01 | 1 | -2/+31 |
| | | | | | There's some prelimiary work here to pull out the construction of a jinja environment to a separate function. I wanted to load the template at display time rather than load time, so that it's easy to update on the fly. Honestly, I think we should do this with all our templates: the risk of ending up with malformed templates is far outweighed by the improved turnaround time for an admin trying to update them. | ||||
* | Improve styling and wording of SSO redirect confirm template (#9272) | Richard van der Hoff | 2021-02-01 | 1 | -1/+13 |
| | |||||
* | Give `public_baseurl` a default value (#9159) | Richard van der Hoff | 2021-01-20 | 1 | -8/+5 |
| | |||||
* | Give the user a better error when they present bad SSO creds | Richard van der Hoff | 2021-01-13 | 1 | -0/+10 |
| | | | | | | | | | If a user tries to do UI Auth via SSO, but uses the wrong account on the SSO IdP, try to give them a better error. Previously, the UIA would claim to be successful, but then the operation in question would simply fail with "auth fail". Instead, serve up an error page which explains the failure. | ||||
* | Add initial support for a "pick your IdP" page (#9017) | Richard van der Hoff | 2021-01-05 | 1 | -0/+27 |
| | | | | | During login, if there are multiple IdPs enabled, offer the user a choice of IdPs. | ||||
* | Clarify config template comments (#8891) | Richard van der Hoff | 2020-12-08 | 1 | -5/+2 |
| | |||||
* | Use the default templates when a custom template file cannot be found (#8037) | Andrew Morgan | 2020-08-17 | 1 | -15/+22 |
| | | | Fixes https://github.com/matrix-org/synapse/issues/6583 | ||||
* | Cleanups to the OpenID Connect integration (#7628) | Richard van der Hoff | 2020-06-03 | 1 | -1/+2 |
| | | | | docs, default configs, comments. Nothing very significant. | ||||
* | Implement OpenID Connect-based login (#7256) | Quentin Gliech | 2020-05-08 | 1 | -7/+10 |
| | |||||
* | Add documentation to the sample config about the templates for SSO. (#7343) | Patrick Cloke | 2020-04-24 | 1 | -0/+24 |
| | |||||
* | Use a template for the SSO success page to allow for customization. (#7279) | Patrick Cloke | 2020-04-17 | 1 | -0/+6 |
| | |||||
* | Do not allow a deactivated user to login via SSO. (#7240) | Patrick Cloke | 2020-04-09 | 1 | -0/+7 |
| | |||||
* | Always whitelist the login fallback for SSO (#7153) | Richard van der Hoff | 2020-03-27 | 1 | -0/+15 |
| | | | | | | | That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's. | ||||
* | Factor out complete_sso_login and expose it to the Module API | Brendan Abolivier | 2020-03-03 | 1 | -1/+1 |
| | |||||
* | Add a whitelist for the SSO confirmation step. | Richard van der Hoff | 2020-03-02 | 1 | -0/+18 |
| | |||||
* | Add a confirmation step to the SSO login flow | Brendan Abolivier | 2020-03-02 | 1 | -0/+74 |