Diana Huang
6952aec870
Merge pull request #1941 from edx/diana/openid-fullname
...
Return the full name of the student as part of the OpenId response.
2013-12-13 07:32:34 -08:00
Diana Huang
0057f460ec
Return the full name of the student as part of the OpenId response.
...
LMS-750
2013-12-12 17:33:33 -05:00
Carson Gee
cec793680d
Add additional check signin to make sure an SSL certificate is passed
...
before redirecting to SSL authentication.
2013-12-12 11:26:57 -05:00
Carson Gee
93b0357978
Replaced retfun in ssl_login so that it properly redirect to dashboard
2013-12-12 10:49:20 -05:00
Carson Gee
caf44c3685
Added full test coverage for ssl login decorator
...
I also removed conflicting implementation of SSL_AUTH_IMMEDIATE_SIGNUP
and rebased on the current master.
2013-12-12 09:35:46 -05:00
ichuang
07e235a0c4
remove @cache_if_anonymous
2013-12-12 09:29:11 -05:00
ichuang
246fc030bd
add missing retfun
2013-12-12 09:29:10 -05:00
ichuang
e868759ceb
fix external_auth @ssl_login_shortcut decorator to properly use retfun
2013-12-12 09:29:10 -05:00
David Baumgold
e26fc08d2b
Update logging.getLogger() calls to use edx instead of mitx
2013-12-04 15:18:15 -05:00
David Baumgold
f3f4af8087
settings.MITX_FEATURES => settings.FEATURES
2013-12-03 15:34:55 -05:00
David Baumgold
69899e24df
Merge pull request #1823 from edx/db/mitxmako-edxmako
...
mitxmako => edxmako
2013-12-03 11:36:50 -08:00
David Baumgold
8eff442752
mitxmako => edxmako
2013-12-03 14:15:09 -05:00
brianhw
c8adbe3895
Merge pull request #1182 from carsongee/add_mitx_ssl_bypass_signup
...
Add feature to do auto signup with external auth
2013-12-03 07:03:43 -08:00
Jay Zoldak
341875bb18
Remove code related to Pearson Testing Centers
2013-11-26 17:04:19 -05:00
Carson Gee
bf9ac26a06
Corrected CMS tests so that one is passing, added external_auth to cms apps
...
Several pylint fixes and bad super call
2013-11-25 15:30:36 -05:00
Carson Gee
0f324baaca
Fixed PEP8 and indentation issues
2013-11-25 11:16:06 -05:00
Carson Gee
5d066db1bf
Add feature to do auto signup with external auth
...
This adds a feature flag: AUTH_USE_MIT_CERTIFICATES_IMMEDIATE_SIGNUP
that does an automatic signup of users if they are using external authentcation.
2013-11-25 11:16:06 -05:00
Brian Wilson
07f94d46a6
Move Pearson courseware imports to function level.
2013-09-27 12:43:27 -04:00
Jason Bau
b48e3a9661
fix some shib signup session related bugs
2013-09-20 11:53:32 -07:00
Jason Bau
11ecd162d4
fix _flatten_to_ascii for str inputs
2013-09-20 11:53:09 -07:00
Jason Bau
7b9c6fbe5f
remove spaces from usename suggestion
2013-09-10 10:42:19 -07:00
Jason Bau
9dac2eff90
actually flatten username suggestion to ascii
2013-09-08 20:26:21 -07:00
Jason Bau
6a850e27bb
Address @brianhw review comments
...
* Fix open redirect vulnerability
* Add Logging To AUDIT_LOG : Note I had to change existing tests
that mocked AUDIT_LOG with this
* Use external_auth.views.SHIBBOLETH_DOMAIN_PREFIX in student.views
* Add a bunch of documentation
* PEP8 / Pylint
2013-09-06 15:37:27 -07:00
Jason Bau
948c07c493
Revamped + Enhanced Shibboleth support
...
* If a shib users type in their email on the regular login page,
redirects them to /shib-login/
* Modify student.views.accounts_login to handle redirects
generated by @login_required for courses that use shib for
access control.
Redirect those logins to /shib-login/?next=
2013-09-06 15:36:22 -07:00
Don Mitchell
0848360436
Merge pull request #844 from edx/dhm/editable_metadata
...
refactoring of platform to xblock 0.3 w/ refactoring of inheritance in the platform to a consistent representation.
2013-09-06 11:58:36 -07:00
Calen Pennington
8201b1412e
Use XBlock 0.3
2013-09-06 09:45:59 -04:00
Chris Dodge
0847bc5e2b
pep8/pylint violations fixes
2013-09-04 11:34:35 -04:00
ichuang
00710f75d2
add CAS authentication via django_cas and mods to external_auth
2013-09-04 10:56:45 -04:00
Diana Huang
c867be7961
Limit the rate of logins.
2013-08-02 11:23:59 -04:00
Brian Wilson
635d36fcf9
Add audit log definition, and use for logging of logins in external_auth and student apps. Move test_login to student app. Improve conditional tests for Shibboleth login logic. (Does not include reconfiguring log settings.)
2013-07-31 13:32:21 -04:00
Jason Bau
e7bb85dee1
Merge pull request #259 from edx/features/jbau/stanford-shib
...
Bugfix for stanford shib
2013-07-12 10:19:58 -07:00
Diana Huang
f33bfd1c6c
Address code review feedback
2013-06-28 15:03:44 -04:00
Diana Huang
c98651fadb
Add in the ability to handle malformed return urls.
2013-06-27 18:02:23 -04:00
Diana Huang
c6fa4873b1
Handle issues decoding requests more gracefully
...
Clean up some pep8/pylint violations as well
2013-06-27 18:02:23 -04:00
Jason Bau
3e38327f7f
External_auth.views.login_or_signup fix codepath that didn't set uname
...
which caused UnboundLocalError. Added tests for this case
2013-06-24 17:55:33 -07:00
Ned Batchelder
e045860cb6
Pylint complains if you use string, even if you use it for what its still meant to be used for.
2013-06-21 16:35:47 -04:00
Jason Bau
aa4e27f775
Shib PR responses to @cpennington and @ormsbee comments
...
* Changed unicode test cases to ascii encoding
* Removed 'stanford' hardcoding in TOS logic in lieu of
'SHIB_DISABLE_TOS' MIT_FEATURES flag
* made 'external_auth' always an installed_app in lms
* log.exception changd to log.error where appropriate
But: did not change skipping tests to changing settings, for
reasons stated here:
https://github.com/edx/edx-platform/pull/67#issuecomment-19790330
2013-06-20 18:12:20 -07:00
Jason Bau
084160c1c9
Finishing up tests/modifications per @ormsbee feedback
2013-06-19 00:48:18 -07:00
Jason Bau
ca649d3c33
Turn off Agreement to Terms of Service for Stanford shib
...
As stipulated by Stanford's office of general counsel
2013-06-19 00:48:18 -07:00
Jason Bau
a39a384ed2
Handle the case where an existing user has email returned by shib
...
By linking the users
2013-06-19 00:48:18 -07:00
Jason Bau
824fb9a311
The bulk of Shibboleth authentication for Stanford
...
Highlights:
* The url '/shib-login/' interfaces with apache/mod_shib via
request.META to handle shibboleth login and registrations
* Courses can designate 'enrollment_domains' to limit enrollment
to users with a linked ExternalAuthMap verified by a particular
identity provider
* Tests
* Logging
Changes to be committed:
new file: common/djangoapps/external_auth/migrations/0001_initial.py
new file: common/djangoapps/external_auth/migrations/__init__.py
new file: common/djangoapps/external_auth/tests/test_shib.py
modified: common/djangoapps/external_auth/views.py
modified: common/djangoapps/student/views.py
modified: common/lib/xmodule/xmodule/course_module.py
modified: lms/djangoapps/courseware/access.py
modified: lms/djangoapps/courseware/tests/test_access.py
modified: lms/envs/common.py
modified: lms/envs/dev.py
modified: lms/envs/test.py
modified: lms/templates/courseware/course_about.html
modified: lms/templates/dashboard.html
modified: lms/templates/extauth_failure.html
modified: lms/templates/navigation.html
modified: lms/templates/register.html
modified: lms/templates/signup_modal.html
modified: lms/urls.py
renamed: lms/wsgi_apache.py -> lms/wsgi_apache_lms.py
2013-06-19 00:48:18 -07:00
Diana Huang
886e74342d
Move the testcenter login to external_auth
...
* hide the login behind a setting that is turned off by default
* clean out some of the outdated settings and hardcoded test strings
2013-04-25 11:12:19 -04:00
Calen Pennington
cfae1cdf62
Pep8 autofixes
2013-02-06 11:13:50 -05:00
Brian Wilson
ba62a657bf
Merge remote-tracking branch 'origin/master' into bugfix/brian/openid_provider_post
2013-01-22 23:50:38 -05:00
Brian Wilson
6da9c7bd9a
get (openId) provider_login to work with POST requests
2013-01-18 18:37:24 -05:00
Calen Pennington
b52ed48221
Merge remote-tracking branch 'origin/master' into feature/cale/cms-master
...
Conflicts:
common/lib/capa/capa/responsetypes.py
common/lib/xmodule/xmodule/js/src/html/display.coffee
lms/envs/common.py
2012-10-23 13:38:11 -04:00
Carlos Andrés Rocha
f495f219cf
Update common/djangoapps/external_auth/views.py
...
Corrected comments on OpenID temporal fix
2012-10-15 13:28:54 -03:00
John Hess
a88a857723
Adjusted to return email address
...
Per update from CS50 team, their client will break if not given addresses.
2012-10-15 12:55:39 -03:00
Carlos Andrés Rocha
0f16e8a358
Return only username on OpenID provider requests.
...
Temporarily return username also as the email and fullname fields of
the response using OpenID's simple registration extension.
2012-10-14 19:45:22 -04:00
ichuang
09d7d6d688
add AUTH_USE_MIT_CERTIFICATES feature flag to CMS, and @ssl_login_shortcut
2012-10-14 16:40:04 -04:00