1. 23 May, 2018 1 commit
  2. 12 May, 2018 1 commit
  3. 06 Sep, 2017 1 commit
  4. 27 Jun, 2017 1 commit
  5. 12 Apr, 2017 1 commit
  6. 10 Aug, 2016 2 commits
  7. 19 Jul, 2016 1 commit
  8. 11 Jul, 2016 1 commit
  9. 24 Mar, 2016 2 commits
  10. 02 Mar, 2016 1 commit
  11. 25 Nov, 2015 1 commit
  12. 09 Oct, 2015 1 commit
  13. 17 Jul, 2015 2 commits
  14. 16 Apr, 2015 1 commit
  15. 03 Apr, 2014 1 commit
  16. 24 Mar, 2014 3 commits
  17. 19 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Require explicit listing of published elections in data dirs · 9d1316b6
      Stephane Glondu authored
      Do no longer rely on the presence of result.json to decide whether an
      election should be imported or not. Now, directories listed in <data>
      tags must contain an "index.json" file that lists sub-directories that
      should be imported by the web server.
      
      Additional changes:
       - allow several <data> tags
       - small memory optimization in election.json parsing
      9d1316b6
  18. 18 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Changes in metadata handling · 789b20c1
      Stephane Glondu authored
       - metadata is specific to web, move it there
       - create Web_serializable, and also move randomness there
       - metadata is not optional (but its components can be)
       - rename user_type into user_domain
       - serializable version of ACLs
      789b20c1
  19. 11 Mar, 2014 1 commit
  20. 07 Mar, 2014 2 commits
    • Stephane Glondu's avatar
      Handle configuration locally in each auth system · 05bc228a
      Stephane Glondu authored
      Summary:
       - move rewrite_prefix to Web_common
       - each auth system now has an $init function that registers its
         configuration spec and an $exec function to Auth_common
       - an auth system may support multiple instances via configuration;
         user_type is specific to each instance
       - when parsing is done, each $exec is called with an $instantiate
         callback; $exec is supposed to call $instantiate for each instance
      
      TODO:
       - default fallback when there are several instances
       - generic login should do security_log
       - auth system instances should not set user_type themselves
       - it should not be possible to login twice
       - admin login
       - update doc
      05bc228a
    • Stephane Glondu's avatar
      Change of topology in Auth_common · d4b71428
      Stephane Glondu authored
      We want to be able to share private variables between service
      definition time and registration time, so we put both as submodules of
      the Make functor.
      d4b71428
  21. 06 Mar, 2014 3 commits
  22. 05 Mar, 2014 2 commits
    • Stephane Glondu's avatar
      Generic authentication · b0e97728
      Stephane Glondu authored
      This revision should be bisimilar to the previous one.
      
      Summary:
       - each auth system registers $name and $service
       - $service stores a logout handler in Auth_common.user
       - the generic login service redirects to $service if its parameter
         matches $name
       - the generic logout service clears out Auth_common.user and invokes
         the stored logout handler
       - the default auth system is the one registered last
       - Templates directly query Auth_common for available auth systems
      
      TODO:
       - enforce user_type = $name (currently not the case for CAS)
       - export Auth_common.register_auth_system
       - move existing auth systems out of Auth_common
       - integrate with config parsing
       - rework CAS
       - generic login should do security_log
       - do admin login
      b0e97728
    • Stephane Glondu's avatar
      Add login dispatch service · ac1999b9
      Stephane Glondu authored
      Currently, it takes the auth_system name as an optional parameter, and
      redirects to the existing services. This revision should have the same
      behaviour as the previous one, except for login links and the
      associated additional redirections.
      
      Summary:
       - Auth_common.Make is now split in two functors: one for declaring
         services (Make) and one for registering them (Register)
       - auth_systems moved to its own signature
       - login and logout are in their own signature
       - new signature ALL_SERVICES
      ac1999b9
  23. 04 Mar, 2014 1 commit
    • Stephane Glondu's avatar
      Move authentication-related stuff to its own module · 07dbc36d
      Stephane Glondu authored
      This is preliminary work to make the authentication system more
      flexible. This big refactoring should be semantically equivalent to
      the previous commit.
      
      Summary:
       - create Auth_common and Web_signatures
       - split Web_election out of Web_common (to cut dep cycle)
       - move service definitions out of Services
       - functorize Templates
      07dbc36d
  24. 30 Jan, 2014 1 commit
  25. 10 Jan, 2014 1 commit
  26. 07 Jan, 2014 2 commits
  27. 08 Nov, 2013 1 commit
  28. 29 Oct, 2013 1 commit