Commit Graph

49 Commits

Author SHA1 Message Date
Raccoon 075a8f9bae
lib/auth/oauth2/strategy.ts
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:38 +08:00
Raccoon d19908d46f
lint lib/auth/index.ts
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:36 +08:00
Raccoon c7f712d035
lint: lib/auth/oauth2/strategy.ts
- add typing annotate

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:36 +08:00
Raccoon a5376a472a
lint: lib/auth/utils.ts
- install @types/express-session for req.session
- add returnTo into sessionData
- add typing annotate in passportGeneralCallback and remove unused var

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:35 +08:00
Raccoon a965ba8336
lint: lib/auth/saml/index.ts
remove unused vars

lib/auth/saml

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:34 +08:00
Raccoon 08fb6855f9
lint: lib/auth/openid/index.ts
unused vars

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:34 +08:00
Raccoon 8f0337af7d
lint: lib/auth/ldap.index.ts
remove unused vars

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:34 +08:00
Raccoon adc0a62acd
lint: lib/auth/email/index.ts
remove unused vars

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:34 +08:00
Raccoon cb1f263780
format
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:33 +08:00
Raccoon 6e8ff98039
remove * as models
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:33 +08:00
Raccoon db55d00823
refactor: use config insted of * as config
config

Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:33 +08:00
Raccoon d1a440e7bd
refactor logger export
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:32 +08:00
Raccoon aaf019e2b4
enable esModuleInterop
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:32 +08:00
Raccoon a10263b13e
upgrade sequelize
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:31 +08:00
Raccoon 5128815543
fix all eslint error
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:31 +08:00
Raccoon 1af9e912c6
ts: lib/auth/dropbox/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:29 +08:00
Raccoon a4c8a26ae9
ts: lib/auth/mattermost/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:29 +08:00
Raccoon 30c5197794
ts: lib/auth/twitter/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon 9a8d0391fc
ts: lib/auth/twitter/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon ebd815662f
ts: lib/auth/facebook/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon 4b311b6ab2
ts: lib/auth/auth/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon 937b75db85
ts: lib/auth/oauth2/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon ce5800b533
ts: lib/auth/oauth2/strategy.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon 8facb03745
ts: lib/auth/openid/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:28 +08:00
Raccoon 436a603d08
ts: lib/auth/saml/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon b94c13059e
ts: lib/auth/twitter/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon 0faebff221
ts: lib/auth/mattermost/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon 6d920c0e4a
ts: lib/auth/ldap/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon edc1a9d800
ts: lib/auth/google/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon ce7319661a
ts: lib/auth/gitlab/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon 83098002d3
ts: lib/auth/github/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon 4c157d7cfe
ts: lib/auth/facebook/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:27 +08:00
Raccoon 89e01907eb
ts: lib/auth/email/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:26 +08:00
Raccoon 1ec3c0d3e9
ts: lib/auth/dropbox/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:26 +08:00
Raccoon d17c550002
ts: lib/auth/bitbucket/index.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:26 +08:00
Raccoon b4f59ed9bc
ts: lib/auth/utils.js
Signed-off-by: Raccoon <raccoon@hackmd.io>
2021-06-16 18:35:26 +08:00
Max Wu 5e709653ab fix: handle when request url has no valid referer
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2021-05-13 11:53:03 +08:00
Michal Kolodziejski 7d815cc90c Better redirection after a successful login
Signed-off-by: Michal Kolodziejski <michal.kolodziejski@cern.ch>
2020-10-17 12:57:23 +02:00
James Tsai 07f32f5bbf Fix standard
Signed-off-by: James Tsai <jamesscamel@gmail.com>
2020-07-01 11:42:28 +08:00
Samuel Trégouët 6ff6d215ab fix: add state parameter for oauth2
state parameter is recommended with oauth2 authentification
to mitigate CSRF attacks (see [1]).
hydra [2] will throw the following error message if state is
missing:

  description="The state is missing or has less than 8 characters and is therefore considered too weak" error=invalid_state hint="Request
 parameter \"state\" must be at least be 8 characters long to ensure sufficient entropy."

[1]: https://auth0.com/docs/protocols/oauth2/oauth-state
[2]: https://www.ory.sh/hydra/

Signed-off-by: Samuel Trégouët <samuel.tregouet@gmail.com>
2020-05-11 15:59:49 +02:00
BinotaLIU d4d0120ab7
prevert directly call of User.hashPassword()
this preverted changes made in 7b8576d. now we use hooks to hash password.
no need to call User.hashPassword() manually.

Signed-off-by: BinotaLIU <me@binota.org>
2020-04-20 00:04:13 +08:00
BinotaLIU f618576193
use async hashPassword/verifyPassword
Signed-off-by: BinotaLIU <me@binota.org>
2020-04-20 00:04:12 +08:00
moycat 46fdb6a6f0
Support avatar for OAuth users
Signed-off-by: Moycat <i@moy.cat>
2020-03-12 13:48:18 +08:00
BoHong Li b9f0e37eee
feat: support hostedName in google OAuth 2.0 provider
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 17:53:04 +08:00
BoHong Li 72c5b0d14e
feat: support customize scope in OAuth2 provider
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 02:13:58 +08:00
BoHong Li d5d0f3d820
fix: extractProfileAttribute not working correctly
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 01:53:25 +08:00
BoHong Li 13ed2e6b44
refactor: change errorInternalError function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:26:01 +08:00
BoHong Li 35a2135b36
refactor: change errorBadRequest function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:22:59 +08:00
BoHong Li b4ec353fcd
refactor: remove web folder
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-01-06 14:19:02 +08:00