• last updated 20 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
remove encoding switching command

the command was there for the deactivated test "exec_binary_input".

The way, how encoding switching was performed, was unreliable,

since the nruns value of the proxy might expire between the

switching commands. If this is really necessary, a different solution

has to be designed

use "ns_set stats" when available in memory statistics of ::xo::stats

  1. … 1 more file in changeset.
Make URLs assumed to be hosted on openacs.org absolute

  1. … 3 more files in changeset.
Flushing the cache completely is actually the right thing to do if we want to be more robust to cache pollution: see e.g. executing acs-authentication and acs-tcl automated tests during the same request

For consistency with other apis, cache the updated parameter value immediately and return it

Flush the cache only

this will behave as before, because specifying -delete will supersede all other flags and -set would not be applied.

Improve test for singleton package parameters (aka instance parameters of singleton packages):

- do not choose a parameter at random, test them all instead

- do not test for global parameters. For those, the api will behave differently

- do not test for parameters coming from the configuration file. The parameter::* api does not allow to manipulate those

- do not check for packages that are not mounted. A value would not be found for those

    • -45
    • +73
    ./test/apm-parameter-test-procs.tcl
added standard parameterizations for Argon2 when supported.

  1. … 1 more file in changeset.
added support for icanuse "ns_crypto::scrypt"

it looks as if this was lost over time

add one more sample

fix typo

skip "-url" in "export_vars -url" since it is the default

  1. … 8 more files in changeset.
improve spelling

  1. … 2 more files in changeset.
reduce verbosity

Prefer ns_base64encode where we already require modern NaviServer

Disable tests to check for executables on the system

  1. … 6 more files in changeset.
improved documentation and whitespace changes

improve spelling

Document public api

refactor login cookie handling

The old code required repeated execption handlers.

Now, these exception handlers are on one place, and

users of sec_login_read_cookie can rely that a dict

is returned

added exception handler for sec_login_get_external_registry

This is necessary for cases, where no login cookie exists

call directly ns_getform

revert escaped changes

don't assume, the oauth package is installed

External identity provider reform (part 3)

- logout from external identity provider, if logged in via it

- extend default login page via ADP include, when external

identity providers are configured.

  1. … 5 more files in changeset.
External identity provider reform (part 2)

Use the external identity provider for refresh of logins. When a user

is logged in via an external identity provider, use the same identity

provider for a refresh when it expires. The expiration time is

controlled via the classical OpenACS parameters.

Note that in general, the same user might be authenticated via a

classical OpenACS authority (e.g. local authority) and/or via an

external one (e.g. Microsoft Identity Platform (Azure) or GitHub).

For single-sign-ons, when the token is still valid, the redirect to

the external identity provider does not mean necessarily that the use

is shown the external identity provider's login page.

  1. … 3 more files in changeset.
whitespace changes

Added preliminary support for secondary registries (e.g., MS Azure via oauth2)

- When login happened via external registry, the logout should happen

there as well.

- let "sec_login_read_cookie" return a dict instead of a list

(eases future extension)

- bump version number to 5.10.1d31

  1. … 1 more file in changeset.
improve spelling

Reintroduce exec-based approach for unzipping, as zipfile::decode will not handle files > 2GB well