• last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Improve test for singleton package parameters (aka instance parameters of singleton packages):

- do not choose a parameter at random, test them all instead

- do not test for global parameters. For those, the api will behave differently

- do not test for parameters coming from the configuration file. The parameter::* api does not allow to manipulate those

- do not check for packages that are not mounted. A value would not be found for those

    • -45
    • +73
    ./tcl/test/apm-parameter-test-procs.tcl
added standard parameterizations for Argon2 when supported.

  1. … 1 more file in changeset.
added support for icanuse "ns_crypto::scrypt"

it looks as if this was lost over time

add one more sample

fix typo

skip "-url" in "export_vars -url" since it is the default

  1. … 8 more files in changeset.
bumped version numbers to 5.10.1b1

  1. … 85 more files in changeset.
improve spelling

  1. … 2 more files in changeset.
reduce verbosity

Prefer ns_base64encode where we already require modern NaviServer

Disable tests to check for executables on the system

    • -31
    • +35
    ./tcl/test/acs-tcl-test-procs.tcl
  1. … 6 more files in changeset.
improved documentation and whitespace changes

improve spelling

    • -3
    • +3
    ./tcl/site-node-apm-integration-procs.tcl
Document public api

refactor login cookie handling

The old code required repeated execption handlers.

Now, these exception handlers are on one place, and

users of sec_login_read_cookie can rely that a dict

is returned

added exception handler for sec_login_get_external_registry

This is necessary for cases, where no login cookie exists

call directly ns_getform

revert escaped changes

don't assume, the oauth package is installed

External identity provider reform (part 3)

- logout from external identity provider, if logged in via it

- extend default login page via ADP include, when external

identity providers are configured.

  1. … 4 more files in changeset.
External identity provider reform (part 2)

Use the external identity provider for refresh of logins. When a user

is logged in via an external identity provider, use the same identity

provider for a refresh when it expires. The expiration time is

controlled via the classical OpenACS parameters.

Note that in general, the same user might be authenticated via a

classical OpenACS authority (e.g. local authority) and/or via an

external one (e.g. Microsoft Identity Platform (Azure) or GitHub).

For single-sign-ons, when the token is still valid, the redirect to

the external identity provider does not mean necessarily that the use

is shown the external identity provider's login page.

  1. … 2 more files in changeset.
whitespace changes

Added preliminary support for secondary registries (e.g., MS Azure via oauth2)

- When login happened via external registry, the logout should happen

there as well.

- let "sec_login_read_cookie" return a dict instead of a list

(eases future extension)

- bump version number to 5.10.1d31

improve spelling

Reintroduce exec-based approach for unzipping, as zipfile::decode will not handle files > 2GB well

Re-introduce the exec and document why

Close channel

Provide exec-free implementation of tarball extraction

Deprecate apm_file_type_keys, which can be inlined by a simple dict idiom

Avoid dubious catches, collect more logics in the proc