Tommie Gannert
210ab1eef6
Add SSO tests.
...
Renames cookie oidc_nonce to sso_nonce, since it's defined in a file
that doesn't know about OIDC specifically.
2022-06-08 09:14:11 +02:00
Tommie Gannert
b8844fb1e2
Fix a lint warning.
2022-05-27 23:08:53 +02:00
Tommie Gannert
ffa527340a
Fix a lint error.
2022-05-27 23:00:44 +02:00
Tommie Gannert
09f0dca6aa
Refactor SSO configuration.
...
It makes more sense to base provider defaults on brand. Type is not
1:1 to brand.
Splits apart OIDC and OAuth2 to match actual specs.
2022-05-27 22:15:52 +02:00
Tommie Gannert
6de730b2ee
Fixes for SSO.
...
* Verbose logging.
* Cookie needs a path.
* Configurable callback URL.
* Various sanity checks.
2022-05-25 18:33:11 +02:00
Tommie Gannert
58233c790a
Split SSO into OAuth2 and OIDC. Add OIDC discovery.
...
GitHub implements OAuth2, but not OpenID Connect.
This means it needs more magic constants than those that can do OIDC
discovery (and where Userinfo is in OIDC-compatible.)
Fixes the HTTP client to have a timeout.
2022-05-25 01:17:08 +02:00
Tommie Gannert
03cf5a5c08
Replace ThreePID lookups with the new SSO lookups.
2022-05-23 17:55:38 +02:00
Tommie Gannert
43989aa017
Support for m.login.sso.
...
This is forked from @anandv96's #1374 . Closes #1297 .
2022-05-23 16:25:29 +02:00