habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

providers/oauth2: Set CORS Headers for token endpoint, check Origin header against redirect URLs

Browse Source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer
2021-04-18 14:20:50 +02:00
parent 52abd959eb
commit f328b21e89
7 changed files with 170 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
authentik/providers/oauth2/utils.py
View File

@ -3,6 +3,7 @@ import re
from base64 import b64decode from base64 import b64decode
from binascii import Error from binascii import Error
from typing import Optional from typing import Optional
from urllib.parse import urlparse
from django.http import HttpRequest, HttpResponse, JsonResponse from django.http import HttpRequest, HttpResponse, JsonResponse
from django.utils.cache import patch_vary_headers from django.utils.cache import patch_vary_headers
@ -25,15 +26,34 @@ class TokenResponse(JsonResponse):
self["Pragma"] = "no-cache" self["Pragma"] = "no-cache"
def cors_allow_any(request, response): def cors_allow_any(request: HttpRequest, response: HttpResponse, *allowed_origins: str):
""" """Add headers to permit CORS requests from any origin, with or without credentials,
Add headers to permit CORS requests from any origin, with or without credentials, with any headers."""
with any headers.
"""
origin = request.META.get("HTTP_ORIGIN") origin = request.META.get("HTTP_ORIGIN")
if not origin: if not origin:
return response return response
# OPTIONS requests don't have an authorization header -> hence
# we can't extract the provider this request is for
# so for options requests we allow the calling origin without checking
allowed = request.method == "OPTIONS"
received_origin = urlparse(origin)
for allowed_origin in allowed_origins:
url = urlparse(allowed_origin)
if (
received_origin.scheme == url.scheme
and received_origin.hostname == url.hostname
and received_origin.port == url.port
):
allowed = True
if not allowed:
LOGGER.warning(
"CORS: Origin is not an allowed origin",
requested=origin,
allowed=allowed_origins,
)
return response
# From the CORS spec: The string "*" cannot be used for a resource that supports credentials. # From the CORS spec: The string "*" cannot be used for a resource that supports credentials.
response["Access-Control-Allow-Origin"] = origin response["Access-Control-Allow-Origin"] = origin
patch_vary_headers(response, ["Origin"]) patch_vary_headers(response, ["Origin"])

21
authentik/providers/oauth2/views/provider.py
View File

@ -30,6 +30,8 @@ PLAN_CONTEXT_SCOPES = "scopes"
class ProviderInfoView(View): class ProviderInfoView(View):
"""OpenID-compliant Provider Info""" """OpenID-compliant Provider Info"""
provider: OAuth2Provider
def get_info(self, provider: OAuth2Provider) -> dict[str, Any]: def get_info(self, provider: OAuth2Provider) -> dict[str, Any]:
"""Get dictionary for OpenID Connect information""" """Get dictionary for OpenID Connect information"""
scopes = list( scopes = list(
@ -95,19 +97,20 @@ class ProviderInfoView(View):
} }
# pylint: disable=unused-argument # pylint: disable=unused-argument
def get( def get(self, request: HttpRequest, *args, **kwargs) -> HttpResponse:
self, request: HttpRequest, application_slug: str, *args, **kwargs
) -> HttpResponse:
"""OpenID-compliant Provider Info""" """OpenID-compliant Provider Info"""
return JsonResponse(
self.get_info(self.provider), json_dumps_params={"indent": 2}
)
def dispatch(
self, request: HttpRequest, application_slug: str, *args: Any, **kwargs: Any
) -> HttpResponse:
# Since this view only supports get, we can statically set the CORS headers
application = get_object_or_404(Application, slug=application_slug) application = get_object_or_404(Application, slug=application_slug)
provider: OAuth2Provider = get_object_or_404( self.provider: OAuth2Provider = get_object_or_404(
OAuth2Provider, pk=application.provider_id OAuth2Provider, pk=application.provider_id
) )
return JsonResponse(self.get_info(provider), json_dumps_params={"indent": 2})
def dispatch(self, request: HttpRequest, *args: Any, **kwargs: Any) -> HttpResponse:
# Since this view only supports get, we can statically set the CORS headers
response = super().dispatch(request, *args, **kwargs) response = super().dispatch(request, *args, **kwargs)
cors_allow_any(request, response) cors_allow_any(request, response, *self.provider.redirect_uris.split("\n"))
return response return response

24
authentik/providers/oauth2/views/userinfo.py
View File

@ -1,7 +1,8 @@
"""authentik OAuth2 OpenID Userinfo views""" """authentik OAuth2 OpenID Userinfo views"""
from typing import Any from typing import Any, Optional
from django.http import HttpRequest, HttpResponse from django.http import HttpRequest, HttpResponse
from django.http.response import HttpResponseBadRequest
from django.utils.translation import gettext_lazy as _ from django.utils.translation import gettext_lazy as _
from django.views import View from django.views import View
from structlog.stdlib import get_logger from structlog.stdlib import get_logger
@ -22,6 +23,8 @@ class UserInfoView(View):
"""Create a dictionary with all the requested claims about the End-User. """Create a dictionary with all the requested claims about the End-User.
See: http://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse""" See: http://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse"""
token: Optional[RefreshToken]
def get_scope_descriptions(self, scopes: list[str]) -> list[dict[str, str]]: def get_scope_descriptions(self, scopes: list[str]) -> list[dict[str, str]]:
"""Get a list of all Scopes's descriptions""" """Get a list of all Scopes's descriptions"""
scope_descriptions = [] scope_descriptions = []
@ -79,16 +82,25 @@ class UserInfoView(View):
final_claims.update(value) final_claims.update(value)
return final_claims return final_claims
def dispatch(self, request: HttpRequest, *args: Any, **kwargs: Any) -> HttpResponse:
self.token = kwargs.get("token", None)
response = super().dispatch(request, *args, **kwargs)
allowed_origins = []
if self.token:
allowed_origins = self.token.provider.redirect_uris.split("\n")
cors_allow_any(self.request, response, *allowed_origins)
return response
def options(self, request: HttpRequest) -> HttpResponse: def options(self, request: HttpRequest) -> HttpResponse:
return cors_allow_any(self.request, TokenResponse({})) return TokenResponse({})
def get(self, request: HttpRequest, **kwargs) -> HttpResponse: def get(self, request: HttpRequest, **kwargs) -> HttpResponse:
"""Handle GET Requests for UserInfo""" """Handle GET Requests for UserInfo"""
token: RefreshToken = kwargs["token"] if not self.token:
claims = self.get_claims(token) return HttpResponseBadRequest()
claims["sub"] = token.id_token.sub claims = self.get_claims(self.token)
claims["sub"] = self.token.id_token.sub
response = TokenResponse(claims) response = TokenResponse(claims)
cors_allow_any(self.request, response)
return response return response
def post(self, request: HttpRequest, **kwargs) -> HttpResponse: def post(self, request: HttpRequest, **kwargs) -> HttpResponse:

2
authentik/providers/proxy/managed.py
View File

@ -21,7 +21,7 @@ class ProxyScopeMappingManager(ObjectManager):
EnsureExists( EnsureExists(
ScopeMapping, ScopeMapping,
"goauthentik.io/providers/proxy/scope-proxy", "goauthentik.io/providers/proxy/scope-proxy",
name="authentik default OAuth Mapping: proxy outpost", name="authentik default OAuth Mapping: Proxy outpost",
scope_name=SCOPE_AK_PROXY, scope_name=SCOPE_AK_PROXY,
expression=SCOPE_AK_PROXY_EXPRESSION, expression=SCOPE_AK_PROXY_EXPRESSION,
), ),

103
web/src/locales/en.po
View File

@ -105,7 +105,7 @@ msgstr "Additional group DN, prepended to the Base DN."
msgid "Additional user DN, prepended to the Base DN." msgid "Additional user DN, prepended to the Base DN."
msgstr "Additional user DN, prepended to the Base DN." msgstr "Additional user DN, prepended to the Base DN."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:128 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:131
#: src/pages/providers/proxy/ProxyProviderForm.ts:128 #: src/pages/providers/proxy/ProxyProviderForm.ts:128
#: src/pages/providers/saml/SAMLProviderForm.ts:117 #: src/pages/providers/saml/SAMLProviderForm.ts:117
#: src/pages/sources/saml/SAMLSourceForm.ts:134 #: src/pages/sources/saml/SAMLSourceForm.ts:134
@ -125,7 +125,7 @@ msgstr "Affected model:"
msgid "Alert" msgid "Alert"
msgstr "Alert" msgstr "Alert"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:149 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:152
msgid "Algorithm used to sign the JWT Tokens." msgid "Algorithm used to sign the JWT Tokens."
msgstr "Algorithm used to sign the JWT Tokens." msgstr "Algorithm used to sign the JWT Tokens."
@ -220,19 +220,19 @@ msgstr "Are you sure you want to delete {0} {objName} ?"
msgid "Are you sure you want to update {0} \"{1}\"?" msgid "Are you sure you want to update {0} \"{1}\"?"
msgstr "Are you sure you want to update {0} \"{1}\"?" msgstr "Are you sure you want to update {0} \"{1}\"?"
#: src/pages/providers/saml/SAMLProviderForm.ts:202 #: src/pages/providers/saml/SAMLProviderForm.ts:208
msgid "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgid "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
msgstr "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgstr "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
#: src/pages/providers/saml/SAMLProviderForm.ts:191 #: src/pages/providers/saml/SAMLProviderForm.ts:197
msgid "Assertion valid not before" msgid "Assertion valid not before"
msgstr "Assertion valid not before" msgstr "Assertion valid not before"
#: src/pages/providers/saml/SAMLProviderForm.ts:195 #: src/pages/providers/saml/SAMLProviderForm.ts:201
msgid "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)." msgid "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)."
msgstr "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)." msgstr "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)."
#: src/pages/providers/saml/SAMLProviderForm.ts:198 #: src/pages/providers/saml/SAMLProviderForm.ts:204
msgid "Assertion valid not on or after" msgid "Assertion valid not on or after"
msgstr "Assertion valid not on or after" msgstr "Assertion valid not on or after"
@ -342,19 +342,19 @@ msgstr "Backup status"
msgid "Base DN" msgid "Base DN"
msgstr "Base DN" msgstr "Base DN"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:195 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:204
msgid "Based on the Hashed User ID" msgid "Based on the Hashed User ID"
msgstr "Based on the Hashed User ID" msgstr "Based on the Hashed User ID"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:201 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:210
msgid "Based on the User's Email. This is recommended over the UPN method." msgid "Based on the User's Email. This is recommended over the UPN method."
msgstr "Based on the User's Email. This is recommended over the UPN method." msgstr "Based on the User's Email. This is recommended over the UPN method."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:204 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:213
msgid "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains." msgid "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains."
msgstr "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains." msgstr "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:198 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:207
msgid "Based on the username" msgid "Based on the username"
msgstr "Based on the username" msgstr "Based on the username"
@ -592,11 +592,11 @@ msgstr "Configuration flow"
msgid "Configure WebAuthn" msgid "Configure WebAuthn"
msgstr "Configure WebAuthn" msgstr "Configure WebAuthn"
#: src/pages/providers/saml/SAMLProviderForm.ts:187 #: src/pages/providers/saml/SAMLProviderForm.ts:193
msgid "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected." msgid "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected."
msgstr "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected." msgstr "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:233 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:242
msgid "Configure how the issuer field of the ID Token should be filled." msgid "Configure how the issuer field of the ID Token should be filled."
msgstr "Configure how the issuer field of the ID Token should be filled." msgstr "Configure how the issuer field of the ID Token should be filled."
@ -604,7 +604,7 @@ msgstr "Configure how the issuer field of the ID Token should be filled."
msgid "Configure settings relevant to your user profile." msgid "Configure settings relevant to your user profile."
msgstr "Configure settings relevant to your user profile." msgstr "Configure settings relevant to your user profile."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:208 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:217
msgid "Configure what data should be used as unique User Identifier. For most cases, the default should be fine." msgid "Configure what data should be used as unique User Identifier. For most cases, the default should be fine."
msgstr "Configure what data should be used as unique User Identifier. For most cases, the default should be fine." msgstr "Configure what data should be used as unique User Identifier. For most cases, the default should be fine."
@ -846,7 +846,7 @@ msgstr "Creation Date"
msgid "Customisation" msgid "Customisation"
msgstr "Customisation" msgstr "Customisation"
#: src/pages/providers/saml/SAMLProviderForm.ts:249 #: src/pages/providers/saml/SAMLProviderForm.ts:255
#: src/pages/sources/saml/SAMLSourceForm.ts:212 #: src/pages/sources/saml/SAMLSourceForm.ts:212
msgid "DSA-SHA1" msgid "DSA-SHA1"
msgstr "DSA-SHA1" msgstr "DSA-SHA1"
@ -967,7 +967,7 @@ msgstr "Device classes which can be used to authenticate."
msgid "Device name" msgid "Device name"
msgstr "Device name" msgstr "Device name"
#: src/pages/providers/saml/SAMLProviderForm.ts:213 #: src/pages/providers/saml/SAMLProviderForm.ts:219
#: src/pages/sources/saml/SAMLSourceForm.ts:176 #: src/pages/sources/saml/SAMLSourceForm.ts:176
msgid "Digest algorithm" msgid "Digest algorithm"
msgstr "Digest algorithm" msgstr "Digest algorithm"
@ -1010,7 +1010,7 @@ msgstr "Download"
msgid "Dummy stage used for testing. Shows a simple continue button and always passes." msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
msgstr "Dummy stage used for testing. Shows a simple continue button and always passes." msgstr "Dummy stage used for testing. Shows a simple continue button and always passes."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:226 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:235
msgid "Each provider has a different issuer, based on the application slug." msgid "Each provider has a different issuer, based on the application slug."
msgstr "Each provider has a different issuer, based on the application slug." msgstr "Each provider has a different issuer, based on the application slug."
@ -1451,7 +1451,7 @@ msgstr "Group {0}"
msgid "Groups" msgid "Groups"
msgstr "Groups" msgstr "Groups"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:146 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:149
msgid "HS256 (Symmetric Encryption)" msgid "HS256 (Symmetric Encryption)"
msgstr "HS256 (Symmetric Encryption)" msgstr "HS256 (Symmetric Encryption)"
@ -1478,8 +1478,8 @@ msgstr "Hide managed mappings"
#: src/pages/events/RuleForm.ts:93 #: src/pages/events/RuleForm.ts:93
#: src/pages/groups/GroupForm.ts:132 #: src/pages/groups/GroupForm.ts:132
#: src/pages/outposts/OutpostForm.ts:98 #: src/pages/outposts/OutpostForm.ts:98
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:169 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:178
#: src/pages/providers/saml/SAMLProviderForm.ts:171 #: src/pages/providers/saml/SAMLProviderForm.ts:177
#: src/pages/sources/ldap/LDAPSourceForm.ts:167 #: src/pages/sources/ldap/LDAPSourceForm.ts:167
#: src/pages/sources/ldap/LDAPSourceForm.ts:193 #: src/pages/sources/ldap/LDAPSourceForm.ts:193
#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114 #: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114
@ -1552,11 +1552,11 @@ msgstr "Import certificates of external providers or create certificates to sign
msgid "In case you can't access any other method." msgid "In case you can't access any other method."
msgstr "In case you can't access any other method." msgstr "In case you can't access any other method."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:218 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:227
msgid "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint." msgid "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint."
msgstr "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint." msgstr "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint."
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:215 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:224
msgid "Include claims in id_token" msgid "Include claims in id_token"
msgstr "Include claims in id_token" msgstr "Include claims in id_token"
@ -1600,15 +1600,15 @@ msgstr "Is superuser"
msgid "Issuer" msgid "Issuer"
msgstr "Issuer" msgstr "Issuer"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:221 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:230
msgid "Issuer mode" msgid "Issuer mode"
msgstr "Issuer mode" msgstr "Issuer mode"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:138 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:141
msgid "JWT Algorithm" msgid "JWT Algorithm"
msgstr "JWT Algorithm" msgstr "JWT Algorithm"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:187 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:196
msgid "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256." msgid "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256."
msgstr "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256." msgstr "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256."
@ -1706,15 +1706,15 @@ msgstr "Loading"
#: src/pages/policies/event_matcher/EventMatcherPolicyForm.ts:108 #: src/pages/policies/event_matcher/EventMatcherPolicyForm.ts:108
#: src/pages/property-mappings/PropertyMappingTestForm.ts:59 #: src/pages/property-mappings/PropertyMappingTestForm.ts:59
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:74 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:74
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:166 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:175
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:185 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:194
#: src/pages/providers/proxy/ProxyProviderForm.ts:92 #: src/pages/providers/proxy/ProxyProviderForm.ts:92
#: src/pages/providers/proxy/ProxyProviderForm.ts:143 #: src/pages/providers/proxy/ProxyProviderForm.ts:143
#: src/pages/providers/saml/SAMLProviderForm.ts:71 #: src/pages/providers/saml/SAMLProviderForm.ts:71
#: src/pages/providers/saml/SAMLProviderForm.ts:133 #: src/pages/providers/saml/SAMLProviderForm.ts:133
#: src/pages/providers/saml/SAMLProviderForm.ts:149 #: src/pages/providers/saml/SAMLProviderForm.ts:149
#: src/pages/providers/saml/SAMLProviderForm.ts:169 #: src/pages/providers/saml/SAMLProviderForm.ts:175
#: src/pages/providers/saml/SAMLProviderForm.ts:185 #: src/pages/providers/saml/SAMLProviderForm.ts:191
#: src/pages/providers/saml/SAMLProviderImportForm.ts:55 #: src/pages/providers/saml/SAMLProviderImportForm.ts:55
#: src/pages/sources/ldap/LDAPSourceForm.ts:164 #: src/pages/sources/ldap/LDAPSourceForm.ts:164
#: src/pages/sources/ldap/LDAPSourceForm.ts:190 #: src/pages/sources/ldap/LDAPSourceForm.ts:190
@ -1924,7 +1924,7 @@ msgstr "Name of the form field, also used to store the value."
msgid "NameID Policy" msgid "NameID Policy"
msgstr "NameID Policy" msgstr "NameID Policy"
#: src/pages/providers/saml/SAMLProviderForm.ts:174 #: src/pages/providers/saml/SAMLProviderForm.ts:180
msgid "NameID Property Mapping" msgid "NameID Property Mapping"
msgstr "NameID Property Mapping" msgstr "NameID Property Mapping"
@ -2434,30 +2434,30 @@ msgstr "Public key, acquired from https://www.google.com/recaptcha/intro/v3.html
msgid "Publisher" msgid "Publisher"
msgstr "Publisher" msgstr "Publisher"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:143 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:146
msgid "RS256 (Asymmetric Encryption)" msgid "RS256 (Asymmetric Encryption)"
msgstr "RS256 (Asymmetric Encryption)" msgstr "RS256 (Asymmetric Encryption)"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:172 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:181
msgid "RSA Key" msgid "RSA Key"
msgstr "RSA Key" msgstr "RSA Key"
#: src/pages/providers/saml/SAMLProviderForm.ts:237 #: src/pages/providers/saml/SAMLProviderForm.ts:243
#: src/pages/sources/saml/SAMLSourceForm.ts:200 #: src/pages/sources/saml/SAMLSourceForm.ts:200
msgid "RSA-SHA1" msgid "RSA-SHA1"
msgstr "RSA-SHA1" msgstr "RSA-SHA1"
#: src/pages/providers/saml/SAMLProviderForm.ts:240 #: src/pages/providers/saml/SAMLProviderForm.ts:246
#: src/pages/sources/saml/SAMLSourceForm.ts:203 #: src/pages/sources/saml/SAMLSourceForm.ts:203
msgid "RSA-SHA256" msgid "RSA-SHA256"
msgstr "RSA-SHA256" msgstr "RSA-SHA256"
#: src/pages/providers/saml/SAMLProviderForm.ts:243 #: src/pages/providers/saml/SAMLProviderForm.ts:249
#: src/pages/sources/saml/SAMLSourceForm.ts:206 #: src/pages/sources/saml/SAMLSourceForm.ts:206
msgid "RSA-SHA384" msgid "RSA-SHA384"
msgstr "RSA-SHA384" msgstr "RSA-SHA384"
#: src/pages/providers/saml/SAMLProviderForm.ts:246 #: src/pages/providers/saml/SAMLProviderForm.ts:252
#: src/pages/sources/saml/SAMLSourceForm.ts:209 #: src/pages/sources/saml/SAMLSourceForm.ts:209
msgid "RSA-SHA512" msgid "RSA-SHA512"
msgstr "RSA-SHA512" msgstr "RSA-SHA512"
@ -2482,11 +2482,14 @@ msgstr "Recovery keys"
msgid "Redirect" msgid "Redirect"
msgstr "Redirect" msgstr "Redirect"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:119
#: src/pages/providers/oauth2/OAuth2ProviderViewPage.ts:107 #: src/pages/providers/oauth2/OAuth2ProviderViewPage.ts:107
msgid "Redirect URIs" msgid "Redirect URIs"
msgstr "Redirect URIs" msgstr "Redirect URIs"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:119
msgid "Redirect URIs/Origins"
msgstr "Redirect URIs/Origins"
#: src/pages/sources/saml/SAMLSourceForm.ts:104 #: src/pages/sources/saml/SAMLSourceForm.ts:104
msgid "Redirect binding" msgid "Redirect binding"
msgstr "Redirect binding" msgstr "Redirect binding"
@ -2582,22 +2585,22 @@ msgstr "Return to device picker"
msgid "SAML Attribute Name" msgid "SAML Attribute Name"
msgstr "SAML Attribute Name" msgstr "SAML Attribute Name"
#: src/pages/providers/saml/SAMLProviderForm.ts:218 #: src/pages/providers/saml/SAMLProviderForm.ts:224
#: src/pages/sources/saml/SAMLSourceForm.ts:181 #: src/pages/sources/saml/SAMLSourceForm.ts:181
msgid "SHA1" msgid "SHA1"
msgstr "SHA1" msgstr "SHA1"
#: src/pages/providers/saml/SAMLProviderForm.ts:221 #: src/pages/providers/saml/SAMLProviderForm.ts:227
#: src/pages/sources/saml/SAMLSourceForm.ts:184 #: src/pages/sources/saml/SAMLSourceForm.ts:184
msgid "SHA256" msgid "SHA256"
msgstr "SHA256" msgstr "SHA256"
#: src/pages/providers/saml/SAMLProviderForm.ts:224 #: src/pages/providers/saml/SAMLProviderForm.ts:230
#: src/pages/sources/saml/SAMLSourceForm.ts:187 #: src/pages/sources/saml/SAMLSourceForm.ts:187
msgid "SHA384" msgid "SHA384"
msgstr "SHA384" msgstr "SHA384"
#: src/pages/providers/saml/SAMLProviderForm.ts:227 #: src/pages/providers/saml/SAMLProviderForm.ts:233
#: src/pages/sources/saml/SAMLSourceForm.ts:190 #: src/pages/sources/saml/SAMLSourceForm.ts:190
msgid "SHA512" msgid "SHA512"
msgstr "SHA512" msgstr "SHA512"
@ -2628,7 +2631,7 @@ msgstr "SMTP Username"
msgid "SSO URL" msgid "SSO URL"
msgstr "SSO URL" msgstr "SSO URL"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:229 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:238
msgid "Same identifier is used for all providers" msgid "Same identifier is used for all providers"
msgstr "Same identifier is used for all providers" msgstr "Same identifier is used for all providers"
@ -2642,7 +2645,7 @@ msgstr "Scope which the client can specify to access these properties."
#: src/elements/oauth/UserCodeList.ts:31 #: src/elements/oauth/UserCodeList.ts:31
#: src/elements/oauth/UserRefreshList.ts:31 #: src/elements/oauth/UserRefreshList.ts:31
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:152 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:155
msgid "Scopes" msgid "Scopes"
msgstr "Scopes" msgstr "Scopes"
@ -2677,7 +2680,7 @@ msgstr "Select an identification method."
msgid "Select users to add" msgid "Select users to add"
msgstr "Select users to add" msgstr "Select users to add"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:168 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:177
msgid "Select which scopes can be used by the client. The client stil has to specify the scope to access the data." msgid "Select which scopes can be used by the client. The client stil has to specify the scope to access the data."
msgstr "Select which scopes can be used by the client. The client stil has to specify the scope to access the data." msgstr "Select which scopes can be used by the client. The client stil has to specify the scope to access the data."
@ -2738,11 +2741,11 @@ msgstr "Service connection"
msgid "Session duration" msgid "Session duration"
msgstr "Session duration" msgstr "Session duration"
#: src/pages/providers/saml/SAMLProviderForm.ts:209 #: src/pages/providers/saml/SAMLProviderForm.ts:215
msgid "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgid "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
msgstr "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgstr "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
#: src/pages/providers/saml/SAMLProviderForm.ts:205 #: src/pages/providers/saml/SAMLProviderForm.ts:211
msgid "Session valid not on or after" msgid "Session valid not on or after"
msgstr "Session valid not on or after" msgstr "Session valid not on or after"
@ -2783,7 +2786,7 @@ msgstr "Shown as the Title in Flow pages."
msgid "Sign up." msgid "Sign up."
msgstr "Sign up." msgstr "Sign up."
#: src/pages/providers/saml/SAMLProviderForm.ts:232 #: src/pages/providers/saml/SAMLProviderForm.ts:238
#: src/pages/sources/saml/SAMLSourceForm.ts:195 #: src/pages/sources/saml/SAMLSourceForm.ts:195
msgid "Signature algorithm" msgid "Signature algorithm"
msgstr "Signature algorithm" msgstr "Signature algorithm"
@ -2938,7 +2941,7 @@ msgstr "Stop impersonation"
msgid "Subject" msgid "Subject"
msgstr "Subject" msgstr "Subject"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:190 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:199
msgid "Subject mode" msgid "Subject mode"
msgstr "Subject mode" msgstr "Subject mode"
@ -3378,7 +3381,7 @@ msgstr "Token count"
msgid "Token expiry" msgid "Token expiry"
msgstr "Token expiry" msgstr "Token expiry"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:132 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:135
msgid "Token validity" msgid "Token validity"
msgstr "Token validity" msgstr "Token validity"
@ -3718,6 +3721,10 @@ msgstr "Using flow"
msgid "Using source" msgid "Using source"
msgstr "Using source" msgstr "Using source"
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:123
msgid "Valid redirect URLs after a successful authorization flow. Also specify any origins here for Implicit flows."
msgstr "Valid redirect URLs after a successful authorization flow. Also specify any origins here for Implicit flows."
#: src/pages/providers/proxy/ProxyProviderForm.ts:115 #: src/pages/providers/proxy/ProxyProviderForm.ts:115
msgid "Validate SSL Certificates of upstream servers." msgid "Validate SSL Certificates of upstream servers."
msgstr "Validate SSL Certificates of upstream servers." msgstr "Validate SSL Certificates of upstream servers."

103
web/src/locales/pseudo-LOCALE.po
View File

@ -105,7 +105,7 @@ msgstr ""
msgid "Additional user DN, prepended to the Base DN." msgid "Additional user DN, prepended to the Base DN."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:128 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:131
#: src/pages/providers/proxy/ProxyProviderForm.ts:128 #: src/pages/providers/proxy/ProxyProviderForm.ts:128
#: src/pages/providers/saml/SAMLProviderForm.ts:117 #: src/pages/providers/saml/SAMLProviderForm.ts:117
#: src/pages/sources/saml/SAMLSourceForm.ts:134 #: src/pages/sources/saml/SAMLSourceForm.ts:134
@ -125,7 +125,7 @@ msgstr ""
msgid "Alert" msgid "Alert"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:149 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:152
msgid "Algorithm used to sign the JWT Tokens." msgid "Algorithm used to sign the JWT Tokens."
msgstr "" msgstr ""
@ -216,19 +216,19 @@ msgstr ""
msgid "Are you sure you want to update {0} \"{1}\"?" msgid "Are you sure you want to update {0} \"{1}\"?"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:202 #: src/pages/providers/saml/SAMLProviderForm.ts:208
msgid "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgid "Assertion not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:191 #: src/pages/providers/saml/SAMLProviderForm.ts:197
msgid "Assertion valid not before" msgid "Assertion valid not before"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:195 #: src/pages/providers/saml/SAMLProviderForm.ts:201
msgid "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)." msgid "Assertion valid not before current time + this value (Format: hours=-1;minutes=-2;seconds=-3)."
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:198 #: src/pages/providers/saml/SAMLProviderForm.ts:204
msgid "Assertion valid not on or after" msgid "Assertion valid not on or after"
msgstr "" msgstr ""
@ -338,19 +338,19 @@ msgstr ""
msgid "Base DN" msgid "Base DN"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:195 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:204
msgid "Based on the Hashed User ID" msgid "Based on the Hashed User ID"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:201 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:210
msgid "Based on the User's Email. This is recommended over the UPN method." msgid "Based on the User's Email. This is recommended over the UPN method."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:204 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:213
msgid "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains." msgid "Based on the User's UPN, only works if user has a 'upn' attribute set. Use this method only if you have different UPN and Mail domains."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:198 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:207
msgid "Based on the username" msgid "Based on the username"
msgstr "" msgstr ""
@ -586,11 +586,11 @@ msgstr ""
msgid "Configure WebAuthn" msgid "Configure WebAuthn"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:187 #: src/pages/providers/saml/SAMLProviderForm.ts:193
msgid "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected." msgid "Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:233 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:242
msgid "Configure how the issuer field of the ID Token should be filled." msgid "Configure how the issuer field of the ID Token should be filled."
msgstr "" msgstr ""
@ -598,7 +598,7 @@ msgstr ""
msgid "Configure settings relevant to your user profile." msgid "Configure settings relevant to your user profile."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:208 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:217
msgid "Configure what data should be used as unique User Identifier. For most cases, the default should be fine." msgid "Configure what data should be used as unique User Identifier. For most cases, the default should be fine."
msgstr "" msgstr ""
@ -840,7 +840,7 @@ msgstr ""
msgid "Customisation" msgid "Customisation"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:249 #: src/pages/providers/saml/SAMLProviderForm.ts:255
#: src/pages/sources/saml/SAMLSourceForm.ts:212 #: src/pages/sources/saml/SAMLSourceForm.ts:212
msgid "DSA-SHA1" msgid "DSA-SHA1"
msgstr "" msgstr ""
@ -959,7 +959,7 @@ msgstr ""
msgid "Device name" msgid "Device name"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:213 #: src/pages/providers/saml/SAMLProviderForm.ts:219
#: src/pages/sources/saml/SAMLSourceForm.ts:176 #: src/pages/sources/saml/SAMLSourceForm.ts:176
msgid "Digest algorithm" msgid "Digest algorithm"
msgstr "" msgstr ""
@ -1002,7 +1002,7 @@ msgstr ""
msgid "Dummy stage used for testing. Shows a simple continue button and always passes." msgid "Dummy stage used for testing. Shows a simple continue button and always passes."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:226 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:235
msgid "Each provider has a different issuer, based on the application slug." msgid "Each provider has a different issuer, based on the application slug."
msgstr "" msgstr ""
@ -1443,7 +1443,7 @@ msgstr ""
msgid "Groups" msgid "Groups"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:146 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:149
msgid "HS256 (Symmetric Encryption)" msgid "HS256 (Symmetric Encryption)"
msgstr "" msgstr ""
@ -1470,8 +1470,8 @@ msgstr ""
#: src/pages/events/RuleForm.ts:93 #: src/pages/events/RuleForm.ts:93
#: src/pages/groups/GroupForm.ts:132 #: src/pages/groups/GroupForm.ts:132
#: src/pages/outposts/OutpostForm.ts:98 #: src/pages/outposts/OutpostForm.ts:98
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:169 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:178
#: src/pages/providers/saml/SAMLProviderForm.ts:171 #: src/pages/providers/saml/SAMLProviderForm.ts:177
#: src/pages/sources/ldap/LDAPSourceForm.ts:167 #: src/pages/sources/ldap/LDAPSourceForm.ts:167
#: src/pages/sources/ldap/LDAPSourceForm.ts:193 #: src/pages/sources/ldap/LDAPSourceForm.ts:193
#: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114 #: src/pages/stages/authenticator_validate/AuthenticatorValidateStageForm.ts:114
@ -1544,11 +1544,11 @@ msgstr ""
msgid "In case you can't access any other method." msgid "In case you can't access any other method."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:218 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:227
msgid "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint." msgid "Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint."
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:215 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:224
msgid "Include claims in id_token" msgid "Include claims in id_token"
msgstr "" msgstr ""
@ -1592,15 +1592,15 @@ msgstr ""
msgid "Issuer" msgid "Issuer"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:221 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:230
msgid "Issuer mode" msgid "Issuer mode"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:138 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:141
msgid "JWT Algorithm" msgid "JWT Algorithm"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:187 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:196
msgid "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256." msgid "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256."
msgstr "" msgstr ""
@ -1698,15 +1698,15 @@ msgstr ""
#: src/pages/policies/event_matcher/EventMatcherPolicyForm.ts:108 #: src/pages/policies/event_matcher/EventMatcherPolicyForm.ts:108
#: src/pages/property-mappings/PropertyMappingTestForm.ts:59 #: src/pages/property-mappings/PropertyMappingTestForm.ts:59
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:74 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:74
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:166 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:175
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:185 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:194
#: src/pages/providers/proxy/ProxyProviderForm.ts:92 #: src/pages/providers/proxy/ProxyProviderForm.ts:92
#: src/pages/providers/proxy/ProxyProviderForm.ts:143 #: src/pages/providers/proxy/ProxyProviderForm.ts:143
#: src/pages/providers/saml/SAMLProviderForm.ts:71 #: src/pages/providers/saml/SAMLProviderForm.ts:71
#: src/pages/providers/saml/SAMLProviderForm.ts:133 #: src/pages/providers/saml/SAMLProviderForm.ts:133
#: src/pages/providers/saml/SAMLProviderForm.ts:149 #: src/pages/providers/saml/SAMLProviderForm.ts:149
#: src/pages/providers/saml/SAMLProviderForm.ts:169 #: src/pages/providers/saml/SAMLProviderForm.ts:175
#: src/pages/providers/saml/SAMLProviderForm.ts:185 #: src/pages/providers/saml/SAMLProviderForm.ts:191
#: src/pages/providers/saml/SAMLProviderImportForm.ts:55 #: src/pages/providers/saml/SAMLProviderImportForm.ts:55
#: src/pages/sources/ldap/LDAPSourceForm.ts:164 #: src/pages/sources/ldap/LDAPSourceForm.ts:164
#: src/pages/sources/ldap/LDAPSourceForm.ts:190 #: src/pages/sources/ldap/LDAPSourceForm.ts:190
@ -1916,7 +1916,7 @@ msgstr ""
msgid "NameID Policy" msgid "NameID Policy"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:174 #: src/pages/providers/saml/SAMLProviderForm.ts:180
msgid "NameID Property Mapping" msgid "NameID Property Mapping"
msgstr "" msgstr ""
@ -2426,30 +2426,30 @@ msgstr ""
msgid "Publisher" msgid "Publisher"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:143 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:146
msgid "RS256 (Asymmetric Encryption)" msgid "RS256 (Asymmetric Encryption)"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:172 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:181
msgid "RSA Key" msgid "RSA Key"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:237 #: src/pages/providers/saml/SAMLProviderForm.ts:243
#: src/pages/sources/saml/SAMLSourceForm.ts:200 #: src/pages/sources/saml/SAMLSourceForm.ts:200
msgid "RSA-SHA1" msgid "RSA-SHA1"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:240 #: src/pages/providers/saml/SAMLProviderForm.ts:246
#: src/pages/sources/saml/SAMLSourceForm.ts:203 #: src/pages/sources/saml/SAMLSourceForm.ts:203
msgid "RSA-SHA256" msgid "RSA-SHA256"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:243 #: src/pages/providers/saml/SAMLProviderForm.ts:249
#: src/pages/sources/saml/SAMLSourceForm.ts:206 #: src/pages/sources/saml/SAMLSourceForm.ts:206
msgid "RSA-SHA384" msgid "RSA-SHA384"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:246 #: src/pages/providers/saml/SAMLProviderForm.ts:252
#: src/pages/sources/saml/SAMLSourceForm.ts:209 #: src/pages/sources/saml/SAMLSourceForm.ts:209
msgid "RSA-SHA512" msgid "RSA-SHA512"
msgstr "" msgstr ""
@ -2474,11 +2474,14 @@ msgstr ""
msgid "Redirect" msgid "Redirect"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:119
#: src/pages/providers/oauth2/OAuth2ProviderViewPage.ts:107 #: src/pages/providers/oauth2/OAuth2ProviderViewPage.ts:107
msgid "Redirect URIs" msgid "Redirect URIs"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:119
msgid "Redirect URIs/Origins"
msgstr ""
#: src/pages/sources/saml/SAMLSourceForm.ts:104 #: src/pages/sources/saml/SAMLSourceForm.ts:104
msgid "Redirect binding" msgid "Redirect binding"
msgstr "" msgstr ""
@ -2574,22 +2577,22 @@ msgstr ""
msgid "SAML Attribute Name" msgid "SAML Attribute Name"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:218 #: src/pages/providers/saml/SAMLProviderForm.ts:224
#: src/pages/sources/saml/SAMLSourceForm.ts:181 #: src/pages/sources/saml/SAMLSourceForm.ts:181
msgid "SHA1" msgid "SHA1"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:221 #: src/pages/providers/saml/SAMLProviderForm.ts:227
#: src/pages/sources/saml/SAMLSourceForm.ts:184 #: src/pages/sources/saml/SAMLSourceForm.ts:184
msgid "SHA256" msgid "SHA256"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:224 #: src/pages/providers/saml/SAMLProviderForm.ts:230
#: src/pages/sources/saml/SAMLSourceForm.ts:187 #: src/pages/sources/saml/SAMLSourceForm.ts:187
msgid "SHA384" msgid "SHA384"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:227 #: src/pages/providers/saml/SAMLProviderForm.ts:233
#: src/pages/sources/saml/SAMLSourceForm.ts:190 #: src/pages/sources/saml/SAMLSourceForm.ts:190
msgid "SHA512" msgid "SHA512"
msgstr "" msgstr ""
@ -2620,7 +2623,7 @@ msgstr ""
msgid "SSO URL" msgid "SSO URL"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:229 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:238
msgid "Same identifier is used for all providers" msgid "Same identifier is used for all providers"
msgstr "" msgstr ""
@ -2634,7 +2637,7 @@ msgstr ""
#: src/elements/oauth/UserCodeList.ts:31 #: src/elements/oauth/UserCodeList.ts:31
#: src/elements/oauth/UserRefreshList.ts:31 #: src/elements/oauth/UserRefreshList.ts:31
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:152 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:155
msgid "Scopes" msgid "Scopes"
msgstr "" msgstr ""
@ -2669,7 +2672,7 @@ msgstr ""
msgid "Select users to add" msgid "Select users to add"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:168 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:177
msgid "Select which scopes can be used by the client. The client stil has to specify the scope to access the data." msgid "Select which scopes can be used by the client. The client stil has to specify the scope to access the data."
msgstr "" msgstr ""
@ -2730,11 +2733,11 @@ msgstr ""
msgid "Session duration" msgid "Session duration"
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:209 #: src/pages/providers/saml/SAMLProviderForm.ts:215
msgid "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)." msgid "Session not valid on or after current time + this value (Format: hours=1;minutes=2;seconds=3)."
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:205 #: src/pages/providers/saml/SAMLProviderForm.ts:211
msgid "Session valid not on or after" msgid "Session valid not on or after"
msgstr "" msgstr ""
@ -2775,7 +2778,7 @@ msgstr ""
msgid "Sign up." msgid "Sign up."
msgstr "" msgstr ""
#: src/pages/providers/saml/SAMLProviderForm.ts:232 #: src/pages/providers/saml/SAMLProviderForm.ts:238
#: src/pages/sources/saml/SAMLSourceForm.ts:195 #: src/pages/sources/saml/SAMLSourceForm.ts:195
msgid "Signature algorithm" msgid "Signature algorithm"
msgstr "" msgstr ""
@ -2930,7 +2933,7 @@ msgstr ""
msgid "Subject" msgid "Subject"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:190 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:199
msgid "Subject mode" msgid "Subject mode"
msgstr "" msgstr ""
@ -3368,7 +3371,7 @@ msgstr ""
msgid "Token expiry" msgid "Token expiry"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:132 #: src/pages/providers/oauth2/OAuth2ProviderForm.ts:135
msgid "Token validity" msgid "Token validity"
msgstr "" msgstr ""
@ -3708,6 +3711,10 @@ msgstr ""
msgid "Using source" msgid "Using source"
msgstr "" msgstr ""
#: src/pages/providers/oauth2/OAuth2ProviderForm.ts:123
msgid "Valid redirect URLs after a successful authorization flow. Also specify any origins here for Implicit flows."
msgstr ""
#: src/pages/providers/proxy/ProxyProviderForm.ts:115 #: src/pages/providers/proxy/ProxyProviderForm.ts:115
msgid "Validate SSL Certificates of upstream servers." msgid "Validate SSL Certificates of upstream servers."
msgstr "" msgstr ""

5
web/src/pages/providers/oauth2/OAuth2ProviderForm.ts
View File

@ -113,9 +113,12 @@ export class OAuth2ProviderFormPage extends Form<OAuth2Provider> {
<input type="text" value="${first(this.provider?.clientSecret, randomString(128))}" class="pf-c-form-control"> <input type="text" value="${first(this.provider?.clientSecret, randomString(128))}" class="pf-c-form-control">
</ak-form-element-horizontal> </ak-form-element-horizontal>
<ak-form-element-horizontal <ak-form-element-horizontal
label=${t`Redirect URIs`} label=${t`Redirect URIs/Origins`}
name="redirectUris"> name="redirectUris">
<textarea class="pf-c-form-control">${this.provider?.redirectUris}</textarea> <textarea class="pf-c-form-control">${this.provider?.redirectUris}</textarea>
<p class="pf-c-form__helper-text">
${t`Valid redirect URLs after a successful authorization flow. Also specify any origins here for CORS Headers.`}
</p>
</ak-form-element-horizontal> </ak-form-element-horizontal>
</div> </div>
</ak-form-group> </ak-form-group>