Une MAJ de sécurité est nécessaire sur notre version actuelle. Elle sera effectuée lundi 02/08 entre 12h30 et 13h. L'interruption de service devrait durer quelques minutes (probablement moins de 5 minutes).

  1. 25 Mar, 2014 1 commit
  2. 24 Mar, 2014 4 commits
  3. 23 Mar, 2014 6 commits
  4. 22 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Restructure Registration · 0544f53e
      Stephane Glondu authored
       - define Registration.Site of type SITE_SERVICES
       - split election initialization in two parts:
         1. (inside Site) define a generic register_election
            function supposed to be callable from a running server
         2. (outside Site) register all elections that have
            been declared in the configuration file
       - main_election and featured election are no longer computed, but
         mutated dynamically
       - less things exported in WEB_SERVICES
      0544f53e
  5. 21 Mar, 2014 7 commits
  6. 20 Mar, 2014 2 commits
  7. 19 Mar, 2014 6 commits
  8. 18 Mar, 2014 3 commits
  9. 17 Mar, 2014 2 commits
  10. 14 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Split MAIN_SERVICES · 1b56c42b
      Stephane Glondu authored
      The signature is split into:
       - SITE_SERVICES: site-wide services, with single instances
       - ELECTION_SERVICES: per-unarchived-election services
       - VOTING_SERVICES: per-open-election services
      
      For the moment, per-election services are still site-wide with single
      instances.
      
      Other changes:
       - the "global continuation" getter is renamed to "cont", so that its
         container module can be directly cast into CONT_SERVICE
       - move remaining service declarations out of Services
       - move service registration code close to service declarations,
         following the same Services/Register pattern as in Auth_common
       - various simplifications in Registration
      1b56c42b
  11. 11 Mar, 2014 1 commit
  12. 10 Mar, 2014 1 commit
  13. 07 Mar, 2014 2 commits
    • Stephane Glondu's avatar
      Handle configuration locally in each auth system · 05bc228a
      Stephane Glondu authored
      Summary:
       - move rewrite_prefix to Web_common
       - each auth system now has an $init function that registers its
         configuration spec and an $exec function to Auth_common
       - an auth system may support multiple instances via configuration;
         user_type is specific to each instance
       - when parsing is done, each $exec is called with an $instantiate
         callback; $exec is supposed to call $instantiate for each instance
      
      TODO:
       - default fallback when there are several instances
       - generic login should do security_log
       - auth system instances should not set user_type themselves
       - it should not be possible to login twice
       - admin login
       - update doc
      05bc228a
    • Stephane Glondu's avatar
      Change of topology in Auth_common · d4b71428
      Stephane Glondu authored
      We want to be able to share private variables between service
      definition time and registration time, so we put both as submodules of
      the Make functor.
      d4b71428
  14. 06 Mar, 2014 2 commits
  15. 05 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Generic authentication · b0e97728
      Stephane Glondu authored
      This revision should be bisimilar to the previous one.
      
      Summary:
       - each auth system registers $name and $service
       - $service stores a logout handler in Auth_common.user
       - the generic login service redirects to $service if its parameter
         matches $name
       - the generic logout service clears out Auth_common.user and invokes
         the stored logout handler
       - the default auth system is the one registered last
       - Templates directly query Auth_common for available auth systems
      
      TODO:
       - enforce user_type = $name (currently not the case for CAS)
       - export Auth_common.register_auth_system
       - move existing auth systems out of Auth_common
       - integrate with config parsing
       - rework CAS
       - generic login should do security_log
       - do admin login
      b0e97728