Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

A few usability changes and security fixes #4

Merged
merged 8 commits into from
Mar 20, 2015
Merged

A few usability changes and security fixes #4

merged 8 commits into from
Mar 20, 2015

Commits on Jan 28, 2015

  1. Allowed the use of either cjson or th-LuaJSON (the default Lua JSON m… 

    …odule under Redhat/Centos)
    @eschwim
    eschwim committed Jan 28, 2015
    Configuration menu
    Copy the full SHA
    106f14c View commit details
    Browse the repository at this point in the history

  2. Fixed https module abiguity in Ubuntu

    @eschwim
    eschwim committed Jan 28, 2015
    Configuration menu
    Copy the full SHA
    3983b0e View commit details
    Browse the repository at this point in the history

  3. Fixed bug requiring user to set domain if neither whitelist nor black… 

    …list were set
    @eschwim
    eschwim committed Jan 28, 2015
    Configuration menu
    Copy the full SHA
    a0e8561 View commit details
    Browse the repository at this point in the history

  4. Created locally scoped copies of ngx variables referenced more than o… 

    …nce, to avoid memory leaks (see http://wiki.nginx.org/HttpLuaModule#ngx.var.VARIABLE)
    @eschwim
    eschwim committed Jan 28, 2015
    Configuration menu
    Copy the full SHA
    4dcc1c9 View commit details
    Browse the repository at this point in the history

  5. Changed logout and post-auth redirect to respect cb_scheme variable (… 

    …fixes HTTP servers running behind an HTTPS proxy)
    @eschwim
    eschwim committed Jan 28, 2015
    Configuration menu
    Copy the full SHA
    50c56b0 View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2015

  1. Implemented secure token storage & enforced token timeouts

    @eschwim
    eschwim committed Jan 29, 2015
    Configuration menu
    Copy the full SHA
    0a98b9c View commit details
    Browse the repository at this point in the history

  2. Fixed bug where substring match could lead to accidentally triggering… 

    … whitelist or blacklist (i.e. whitelist for "c@a.org" matches "abc@a.org")
    @eschwim
    eschwim committed Jan 29, 2015
    Configuration menu
    Copy the full SHA
    380ddd0 View commit details
    Browse the repository at this point in the history

  3. Populate $ngo_user variable with Oauth username; useful for faking HT… 

    …TP Basic auth
    @eschwim
    eschwim committed Jan 29, 2015
    Configuration menu
    Copy the full SHA
    c4ef146 View commit details
    Browse the repository at this point in the history