ipsilon: clean up ipsilon role
This cleans up the ipsilon role, removing a bunch of old, commented out lines, and removes files and templates that are no longer used. Signed-off-by: Ryan Lerch <rlerch@redhat.com>
|
@ -1 +0,0 @@
|
|||
{"authentication": "/persona/SignIn/", "public-key": {"e": "65537", "algorithm": "RS", "n": "20247910214254214736729789035336914874343682534429989745106339093407288102989557063184506037998917181790215715971603657930991910656165517065370043861309799873084779893863141779981928089804591906957196420164549257292728537239850169134965453215201485763974844238012120894562718111241748339139704777496487373194259775726158955322486626724162292237287168783784930591965244460256625429877029195226939201178097727365180294396322283340847229335816394958113297492642359188468999825212878655452005870852700169928746108241045675403745184355855187672170175907229725179585841454478158220055559216110930961906825939648077396790149"}, "provisioning": "/persona/"}
|
|
@ -1 +0,0 @@
|
|||
{"authentication": "/persona/SignIn/", "public-key": {"e": "65537", "algorithm": "RS", "n": "24385401622012488402539132889528239710238371499364219659865183447144892222632942644107391086078596883298333289301440622808937201961563413336713854531004427355567568454568571597570778008466814108855520638826098878970029818658588699370647874263246095096125987696737419874653290133091853008175415840047281899222135647106187883870551008181199834578374579742134849852832157691170956320006663616762467403852221196792157796783374711458950947541675365075247861549915581204101510909365184142477502215065622520027148767888270269738114472766288513587067872744281044556932905239237198857201987370675203351195488146053544362182501"}, "provisioning": "/persona/"}
|
|
@ -1,30 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIFMTCCAxmgAwIBAgIJAKkACNwMmCwqMA0GCSqGSIb3DQEBCwUAMC8xLTArBgNV
|
||||
BAMMJGlkLmZlZG9yYXByb2plY3Qub3JnIFRFTVBPUkFSWSBTQU1MMjAeFw0xNTA5
|
||||
MzAwOTA4MjJaFw0xNTEwMzAwOTA4MjJaMC8xLTArBgNVBAMMJGlkLmZlZG9yYXBy
|
||||
b2plY3Qub3JnIFRFTVBPUkFSWSBTQU1MMjCCAiIwDQYJKoZIhvcNAQEBBQADggIP
|
||||
ADCCAgoCggIBAJhbNmEB9HSMe4gL3QBTmW5GTCKNWjmo2vEssnrM3mHFB6580gkB
|
||||
pLpEovgXe93trGYJkEqr6MLhx/cHGIBGGWsC1AGqO6fMMO6t9ZqeDAUuujJwK97S
|
||||
hVDNmQT9wzwGXlSLifvYaGcxKSMnVQFz2Ms+LRsQgumbMaZbAeHS2YpnZHmxNCb4
|
||||
+o3F0SSX4g1EPSkSzyFx8KFlqWlgg0fAkbIfJTe5/q6d+Y1JIKWKmIFDhyByiLLF
|
||||
4CIAVwZZBT2g+cYY3VnKLgWoSDlOTzQ2sB9xQm8ULLF3QBJtJ32JgudULpXvHxy1
|
||||
3dF0AcyE9wnSGlYUf0yXukWXZokqjMafN2KBer/epMAgbSXg09AWvfKrmnZw4w9z
|
||||
/I3S5eFvRPlffcfTkqk4bYb+V+GCF/ri/Bbx+yVRx/nqhLrk3f+QzpBTm52k2yqo
|
||||
XzpvFkNSYbPeuYYLUZNtg7b13rv5ezr4obN2jQHMPM1p9VLCANUE72y63H4wOVDv
|
||||
6C9bZqxww5becuYRPIYNlkWFgkyaMDvRjjpNBM8VNXUi2wkgjDQ9PtaYsRmbMzx6
|
||||
hI6YJUza49gEPwm5FRVXimW1t5PTqwIhIgiP8fTghgvfFBxuZi3QoohShjgDhfNw
|
||||
qDcjlKqQ6gbB1oUzEMs86qVWvGFDQXnnFrH3kPvM1pFlcDiCUimONEjjAgMBAAGj
|
||||
UDBOMB0GA1UdDgQWBBSTgtObEolj8bXrNXfM81a6o/+RuzAfBgNVHSMEGDAWgBST
|
||||
gtObEolj8bXrNXfM81a6o/+RuzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUA
|
||||
A4ICAQAG3wuIHr84DeNyUNy9i7Vl9QXravXXcfBjzagZFIv+vw5TQajzTP+cEhvW
|
||||
QBPy+bkx/e2gaeo5FPPwC4KISpHGU2sn/EyMajRpCFA9ackWU86V8ulWtafaBs9g
|
||||
kpE0CHXKpvdKFHEMqZqD76oz0JU++YZvrgFka6cLhN5goD5HxHGeLrFOH9cXUv0d
|
||||
SkH8iee8Ztpn/tFnxJ2/D/KHkzmxQWI6kEKkNTdxIk9jMVQ9JFNCBZaFOcJmJnf7
|
||||
L9Lp4PLZ2957ePKo7SKNiJEwF9uEL8RCPfos3qMhklItb3IPVmILrQubCUec43Z3
|
||||
hTzwJVjUedGrEaA/IYH+nOZL0LAR1/QUinx+NShMR6+fgBSj4pVkDm4L8h6dnnzi
|
||||
oJP/SPd0pOegOdN1bZOkb1qTp0cOoipItQQbJR9oHKcAPrapuvjngU0Fj5yqtuVo
|
||||
J+uCdUQPf8iXF6Ml/buZ9Xf44qcFuvJRWw74arDnIgXzCDzpN0faKZV61m1XPbso
|
||||
Sexyxv94LEvOrWp04M/r+eUmuV7NIpqegM2MTStBffu3kyeFyWMeU56ZjySRoADc
|
||||
UqXoHtxw5E8KMNSATmTp2z7nzpBhE8+vHsvjP/radJteiYLPgzYGxAOoOx+ct+Yh
|
||||
GqhnOPtE6u+yJm0OWqybeXUvpsYBTYGmL4wpIj48Zlrq7rkPpw==
|
||||
-----END CERTIFICATE-----
|
|
@ -1,30 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIFOTCCAyGgAwIBAgIJAOtrg+MpYNUgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNV
|
||||
BAMMKGlkLmZlZG9yYXByb2plY3Qub3JnIFNURyBURU1QT1JBUlkgU0FNTDIwHhcN
|
||||
MTUwOTMwMDkxMzU3WhcNMTUxMDMwMDkxMzU3WjAzMTEwLwYDVQQDDChpZC5mZWRv
|
||||
cmFwcm9qZWN0Lm9yZyBTVEcgVEVNUE9SQVJZIFNBTUwyMIICIjANBgkqhkiG9w0B
|
||||
AQEFAAOCAg8AMIICCgKCAgEAt1mvOsVxRm9O+dT0QIYxl0vmqQQ4MhQA3wboEeBp
|
||||
sQYjM2te+2Q/7OOwklVdD5g/rgXuDwOH6ztt1Y6UJmMC9RQCSJ5YNFe95hOE0H+P
|
||||
ar9/9xm6hlwqxp9S1NftO7G6x7Zad/QHURcQit2EeDJAox/LEk3FEti03Q2tSPBa
|
||||
wpNk/AUwkXnGn+bQ142JxvfJaO8sdxPpww1955SxKnJ3ClaPw3Qs0SLbD7cQQnyu
|
||||
gQne0jBNPS5LkXS7DKmPBXY7R7der2gx3Wr6TxHNCcqMruL/RHmGKEB/KnFqxDK1
|
||||
zNrcUyyghHGBRtGqbJw37kQBWtuoE67iyAiHQWnn4onNHTFeP1SfpzFIM3ya8Iew
|
||||
Awh93IH2YAAd3SxNsCE27iZej2+8OikkWp6rpG36apskwKLAmOTKATqAII49u32o
|
||||
aYqMe3LEORzmoR45/FGmQ8fPTxIXoT9kkA8nS3Xa1f6BaGnlxPu+VNAYEQx5hzX1
|
||||
yhjSEiIcyowIx4/Frp+XHn7USQHb0jBkBGTWlo3QRO3LDarTmcoJZIrMK1fISggv
|
||||
KJ1jUisrboFm0hX4O0F6TAx9UbWGIpgTiEjynDbBgIWsElGaTOfafPOFAVVusW5W
|
||||
6na5R0sKDiaw5Ej3tMz5gTlSLk+0Vfc/tQphqIgXu1BIQ5gghyDUAEZRIe7iFEnu
|
||||
LqUCAwEAAaNQME4wHQYDVR0OBBYEFFIneEZsGOpk6nVXammdrrRVyG5/MB8GA1Ud
|
||||
IwQYMBaAFFIneEZsGOpk6nVXammdrrRVyG5/MAwGA1UdEwQFMAMBAf8wDQYJKoZI
|
||||
hvcNAQELBQADggIBAGqXB//gUKBAUFHB4i45/70vWID2lYMu2nFvd7SWI1oc0n78
|
||||
DTlqFDYDyV05V/qCnezjAb+6KUyyeyAevgZPaDswCVd2aygYGDE9RsvOy60UhZ1c
|
||||
yfgVx2l/YLzO4bWNKllxpfbLVHTfKo8MfFa99ClN6Y+t8+fucTS2+WOq5MYd5lKS
|
||||
/4FY7QYq645oYHAlQzOV2PHAcMDbhtaEJJ4CXh4//ArM/NE73NYaH4SGQW1xVD7D
|
||||
8zS/0TGYDX6MNQvRwzihtKVEtUAGj1zIZZUYFd9+mx4Ir3OBnRozSe8LkfaWYd13
|
||||
hlRLINzOEQ3ebSGGRlgeFYXw+cTpn64KoyE56CcL//dxZS27LGBIMAul0eARoa6U
|
||||
Y1DYkZ178QugycphmLCkxe2/Qe9xZjn0ghycxiYAlPqGFG87pW8UC162B7eklOuR
|
||||
GO/BqcKZcO5GPyWkuslUpx8w0bOnCgXKxVzbt5BGBMvSMxe/QCw9x4sXnKGUtHaV
|
||||
FqnKqa/sxkfQ8HltSvft8goNw13/I+J5ERHdif0EyI83ba+CyGwEjCe8uZYjp2G3
|
||||
DqtUXjiYReHTYZr6R9Xgts0RKf44wVJ3D7Fs7P2dBGI7b/R/8HHv9HM+/HcbkRhA
|
||||
25vdCBgg+KF3u3bZZlUp82PkOtRFcr4kb3GwS4FAaxRC5i/8Z4qI2ICNZFPN
|
||||
-----END CERTIFICATE-----
|
|
@ -1,7 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
This is the Federated Open Authentication provider homepage.
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
You will be redirected to this application whenever another application requires you to authenticate.
|
||||
{% endblock %}
|
|
@ -1,15 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
500 - Internal Server Error
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% if message: %}
|
||||
<p>{{ message }}</p>
|
||||
{% else %}
|
||||
<p>Ipsilon encountered an unexpected internal error while trying to
|
||||
fulfill your request.</p>
|
||||
{% endif %}
|
||||
<p>Please retry again.</p>
|
||||
<p>If the error persists, contact the server administrator to resolve
|
||||
the problem.</p>
|
||||
{% endblock %}
|
|
@ -1,47 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block title %}Login{% endblock %}
|
||||
{% block toptext %}
|
||||
|
||||
<p>
|
||||
<small><strong>{{ login_target }}</strong> wants to use your Fedora Account System (FAS) credentials</small>
|
||||
</p>
|
||||
{% endblock %}
|
||||
{% block cardwidths %}col-md-6 col-md-offset-3 col-sm-8 col-sm-offset-2{% endblock %}
|
||||
{% block maintitle %}
|
||||
Log in with FAS
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% if error %}<p>{{error}}</p>{% endif %}
|
||||
<form method="post" action="{{ action }}" enctype="application/x-www-form-urlencoded">
|
||||
<input type="hidden" name="ipsilon_transaction_id" id="ipsilon_transaction_id" value="{{ ipsilon_transaction_id}}"/>
|
||||
<div class="form-group row">
|
||||
<div class="col-xs-12">
|
||||
<input class="form-control" id="username" name="login_name" placeholder="Username" autofocus value="{{ username | e }}" />
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group row m-b-0">
|
||||
<div class="col-xs-12">
|
||||
<input class="form-control" id="password" name="login_password" type="password" placeholder="Password" />
|
||||
</div>
|
||||
<div class="col-xs-12 text-xs-right">
|
||||
<small class="text-muted"><a target="_blank" href="https://accounts.fedoraproject.org/forgot-password/ask">Forgot password?</a></small>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group row m-b-0">
|
||||
<div class="col-xs-12">
|
||||
By using Fedora services, you agree to the terms of Fedora's <a href="https://fedoraproject.org/wiki/Legal:PrivacyPolicy">privacy policy</a>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group row m-b-0">
|
||||
<div class="col-xs-12">
|
||||
<input class="btn btn-primary" type="submit" id="loginbutton" value="Log in" />
|
||||
</div>
|
||||
</div>
|
||||
</form>
|
||||
{% endblock %}
|
||||
|
||||
{% block after_card %}
|
||||
|
||||
<div class="text-xs-center"><small class="text-muted">Don't have a FAS account? <a target="_blank" href="https://accounts.fedoraproject.org/">Sign up now</a>.</small></div>
|
||||
|
||||
{% endblock %}
|
|
@ -1,11 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block title %}Login{% endblock %}
|
||||
{% block toptext %}
|
||||
{{ login_target }} is asking to authenticate using Ipsilon
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
<div>
|
||||
Redirecting... {{ redirect }}
|
||||
</div>
|
||||
{% endblock %}
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
{% extends "master.html" %}
|
||||
{% block toptext %}
|
||||
Logged out
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% if user.name %}
|
||||
<p>Something prevented a successful logout</p>
|
||||
<p>You are still logged in as {{ user.fullname }}</p>
|
||||
{% else %}
|
||||
<p>Successfully logged out.</p>
|
||||
<p>Return to <a href="{{ basepath }}/">Home</a> page</p>
|
||||
{% endif %}
|
||||
{% endblock %}
|
|
@ -1,68 +0,0 @@
|
|||
<!doctype html>
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<title>{{ title }}</title>
|
||||
|
||||
<link rel="shortcut icon" type="image/vnd.microsoft.icon"
|
||||
href="//fedoraproject.org/static/images/favicon.ico"/>
|
||||
|
||||
<!--<link rel="stylesheet" href="{{ basepath }}/ui/fedora/fedora.css?v=0c4c5a3ae8781de41b62d3f5862a8e46">-->
|
||||
<link href="https://apps.fedoraproject.org/global/fedora-bootstrap-1.0/fedora-bootstrap.min.css" rel="stylesheet">
|
||||
<link href='/ui/fedora/fonts/fonts.css?v=67bec19c506ab613d1922c53f63ae4ba' rel='stylesheet' type='text/css'>
|
||||
<meta name="generator" content="Ipsilon">
|
||||
<style>
|
||||
.bodycontent { min-height: 85vh; }
|
||||
</style>
|
||||
|
||||
|
||||
{%- if heads %}
|
||||
{%- for group, value in heads.items() %}
|
||||
{%- for head in value %}
|
||||
{{ head | safe }}
|
||||
{%- endfor %}
|
||||
{%- endfor %}
|
||||
{%- endif %}
|
||||
</head>
|
||||
<body>
|
||||
<div class="masthead">
|
||||
<div class="container text-center">
|
||||
<img alt="logo" src="{{ basepath }}/ui/fedora/fedora-authn-logo-white.png?v=dcabcce440f62c6282cfffb82f2f5614" height=40px />
|
||||
</div>
|
||||
</div>
|
||||
<div class="bodycontent p-t-lg">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-sm-10 col-sm-offset-1">
|
||||
<div class="row">
|
||||
<div class="col-xs-12 text-center">
|
||||
{% block toptext %}{% endblock %}
|
||||
</div>
|
||||
</div>
|
||||
<div class="row p-b-lg">
|
||||
<div class="{% block cardwidths %}{% endblock %}">
|
||||
<div class="card">
|
||||
<div class="card-header small">
|
||||
{% block maintitle %}{% endblock %}
|
||||
</div>
|
||||
<div class="card-block">
|
||||
{% block main %}{% endblock %}
|
||||
</div>
|
||||
</div>
|
||||
{% block after_card %}{% endblock %}
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="footer p-t p-b text-center">
|
||||
<div class="container">
|
||||
<p class="text-muted credit">
|
||||
<a href="https://fedoraproject.org/wiki/Legal:PrivacyPolicy">Privacy Policy</a> | Fedora FAS Login is powered by <a href="https://ipsilon-project.org/" target="_blank">Ipsilon</a>
|
||||
</p>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
|
@ -1,13 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
404 - Not Found
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% if message: %}
|
||||
<p>{{ message }}</p>
|
||||
{% else %}
|
||||
<p>This page does not exist.</p>
|
||||
{% endif %}
|
||||
<p>If you think this is an error, contact the server administrator to resolve
|
||||
the problem.</p>
|
||||
{% endblock %}
|
|
@ -1,30 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
<p><small><strong>{{trustroot}}</strong> requests to use the following details from your FAS Account</small></p>
|
||||
{% endblock %}
|
||||
{% block cardwidths %}col-md-10 col-md-offset-1{% endblock %}
|
||||
{% block maintitle %}Review the authorization details{% endblock %}
|
||||
{% block main %}
|
||||
<div class="small">
|
||||
<form method="post" action="{{action}}" enctype="application/x-www-form-urlencoded">
|
||||
<input type="hidden" name="ipsilon_transaction_id" id="ipsilon_transaction_id" value="{{ ipsilon_transaction_id }}" />
|
||||
{% for entry in authz_details|dictsort %}
|
||||
<div class="row m-b">
|
||||
<div class="col-sm-5"><strong>{{ entry[0] }}</strong></div>
|
||||
{%- if entry[1] is iterable and not entry[1] is string -%}
|
||||
<div class="col-sm-7">{{ entry[1] | join(', ') }}</div>
|
||||
{%- else -%}
|
||||
<div class="col-sm-7">{{ entry[1] }}</div>
|
||||
{%- endif -%}
|
||||
</div>
|
||||
{% endfor %}
|
||||
<div class="row m-b">
|
||||
Please note that this service is hosted outside of Fedora Project, and thus has its own privacy policy.
|
||||
</div>
|
||||
<p class="form_item">
|
||||
<input class="btn btn-primary" name="decided_allow" type="submit" value="Approve" />
|
||||
<input class="btn btn-link" name="decided_deny" type="submit" value="Reject" />
|
||||
</p>
|
||||
</form>
|
||||
</div>
|
||||
{% endblock %}
|
|
@ -1,7 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
This is the OpenID page for {{username}}.
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
This page is primarily used internally
|
||||
{% endblock %}
|
|
@ -1,16 +0,0 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<xrds:XRDS xmlns:xrds="xri://$xrds" xmlns="xri://$xrd*($v*2.0)">
|
||||
<XRD>
|
||||
<Service>
|
||||
{%- for t in types %}
|
||||
<Type>{{ t }}</Type>
|
||||
{%- endfor %}
|
||||
{%- if uri %}
|
||||
<URI>{{ uri }}</URI>
|
||||
{%- endif %}
|
||||
{%- if localid %}
|
||||
<LocalID>{{ localid }}</LocalID>
|
||||
{%- endif %}
|
||||
</Service>
|
||||
</XRD>
|
||||
</xrds:XRDS>
|
|
@ -1,58 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block main %}
|
||||
|
||||
<div>
|
||||
<p>The OpenID Connect client <b>
|
||||
{%- if client['homepage'] %}
|
||||
<a href="{{ client['homepage'] }}">{{ client['name'] }}</a>
|
||||
{% else %}
|
||||
{{ client['name'] }}
|
||||
{%- endif %}
|
||||
</b> is asking
|
||||
to authorize access for <b>{{ username }}</b>.</p>
|
||||
<p>Please review the authorization details</p>
|
||||
|
||||
{%- if client['policy'] %}
|
||||
<p><a href="{{ client['policy'] }}">Client privacy policy</a></p>
|
||||
{% endif %}
|
||||
{%- if client['tos'] %}
|
||||
<p><a href="{{ client['tos'] }}">Client terms of service</a></p>
|
||||
{%- endif %}
|
||||
</div>
|
||||
|
||||
<div>
|
||||
<form class="form-horizontal" role="form" id="consent_form" action="{{ action }}" method="post" enctype="application/x-www-form-urlencoded">
|
||||
<input type="hidden" name="ipsilon_transaction_id" id="ipsilon_transaction_id" value="{{ ipsilon_transaction_id }}">
|
||||
|
||||
<div class="list-group">
|
||||
{%- for item in claim_requests|dictsort %}
|
||||
<div class="list-group-item">
|
||||
<div>
|
||||
<strong>{{ item[1]['display_name'] }}</strong>
|
||||
</div>
|
||||
<div>{{ item[1]['value'] }}</div>
|
||||
</div>
|
||||
{%- endfor %}
|
||||
{%- for item in scopes|dictsort %}
|
||||
<div class="m-t-md"><strong>{{ item[0] }}</strong></div>
|
||||
{%- for item in item[1]|dictsort %}
|
||||
<div class="list-group-item">
|
||||
<div>
|
||||
<!-- Empty, so that values come on the right hand -->
|
||||
</div>
|
||||
<div>{{ item[1] }}</div>
|
||||
</div>
|
||||
{%- endfor %}
|
||||
{%- endfor %}
|
||||
</div>
|
||||
|
||||
<div class="form-group text-right m-t-md">
|
||||
<div class="submit">
|
||||
<button type="submit" name="decided_deny" value="Reject" class="btn btn-secondary btn-lg" tabindex="3">Reject</button>
|
||||
<button type="submit" name="decided_allow" value="Allow" class="btn btn-primary btn-lg" tabindex="3">Allow</button>
|
||||
</div>
|
||||
</div>
|
||||
</form>
|
||||
</div>
|
||||
|
||||
{% endblock %}
|
|
@ -1,59 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
This page is used internally
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
<script type="text/javascript" src="https://login.persona.org/provisioning_api.js"></script>
|
||||
<script type="text/javascript">
|
||||
var xmlhttp = new XMLHttpRequest()
|
||||
|
||||
var loggedin = {{ loggedin|lower }};
|
||||
|
||||
xmlhttp.onreadystatechange = function()
|
||||
{
|
||||
if(xmlhttp.readyState == 4)
|
||||
{
|
||||
if(xmlhttp.status == 200)
|
||||
{
|
||||
navigator.id.registerCertificate(xmlhttp.responseText);
|
||||
}
|
||||
else if((xmlhttp.status == 401) || (xmlhttp.status == 403))
|
||||
{
|
||||
navigator.id.raiseProvisioningFailure('Error in provisioning!');
|
||||
}
|
||||
else
|
||||
{
|
||||
alert("Response code: " + xmlhttp.status);
|
||||
alert("Response text: " + xmlhttp.responseText);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
function generateServerSide(email, publicKey, certDuration, callback)
|
||||
{
|
||||
xmlhttp.open("POST", "Sign/", true);
|
||||
xmlhttp.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
|
||||
xmlhttp.send("email=" + encodeURIComponent(email)
|
||||
+ "&publicKey=" + encodeURIComponent(publicKey)
|
||||
+ "&certDuration=" + encodeURIComponent(certDuration));
|
||||
}
|
||||
|
||||
function startProvisioning()
|
||||
{
|
||||
navigator.id.beginProvisioning(function(email, certDuration)
|
||||
{
|
||||
if(loggedin)
|
||||
{
|
||||
navigator.id.genKeyPair(function(publicKey)
|
||||
{
|
||||
generateServerSide(email, publicKey, certDuration);
|
||||
});
|
||||
} else {
|
||||
navigator.id.raiseProvisioningFailure('user is not authenticated');
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
startProvisioning();
|
||||
</script>
|
||||
{% endblock %}
|
|
@ -1,19 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block toptext %}
|
||||
This page is used internally
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
<script type="text/javascript" src="https://login.persona.org/authentication_api.js"></script>
|
||||
<script type="text/javascript">
|
||||
var loggedin = {{ loggedin|lower }};
|
||||
|
||||
if(loggedin)
|
||||
{
|
||||
navigator.id.beginAuthentication(function(email) {
|
||||
navigator.id.completeAuthentication();
|
||||
});
|
||||
} else {
|
||||
navigator.id.raiseAuthenticationFailure('User cancelled signon');
|
||||
}
|
||||
</script>
|
||||
{% endblock %}
|
|
@ -1,12 +0,0 @@
|
|||
{% extends "master-user.html" %}
|
||||
{% block maintitle %}
|
||||
401 - Unauthorized
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% if message: %}
|
||||
<p>{{ message }}</p>
|
||||
{% else %}
|
||||
<p>Authentication was not succesful</p>
|
||||
{% endif %}
|
||||
<p><a href="{{ basepath }}/login" title="Login">Try to login again</a></p>
|
||||
{% endblock %}
|
Before Width: | Height: | Size: 9 KiB |
|
@ -1,143 +0,0 @@
|
|||
@import url(https://fonts.googleapis.com/css?family=Cantarell:400,700);
|
||||
|
||||
body
|
||||
{
|
||||
padding:0;
|
||||
margin:0;
|
||||
font-family: 'Cantarell', sans-serif;
|
||||
font-size:20px;
|
||||
}
|
||||
|
||||
.header_bg
|
||||
{
|
||||
width:100%;
|
||||
background-image: url('repeater.png');
|
||||
height:84px;
|
||||
display: block;
|
||||
}
|
||||
|
||||
.body
|
||||
{
|
||||
max-width:800px;
|
||||
margin-left:auto;
|
||||
margin-right:auto;
|
||||
|
||||
}
|
||||
|
||||
.main
|
||||
{
|
||||
/* margin-top:50px;*/
|
||||
}
|
||||
|
||||
.header
|
||||
{
|
||||
height:100%;
|
||||
}
|
||||
|
||||
#loginbutton
|
||||
{
|
||||
float: right;
|
||||
margin-right: 4px;
|
||||
margin-left: 8px;
|
||||
}
|
||||
|
||||
#logo
|
||||
{
|
||||
padding-top:9px;
|
||||
margin-left:auto;
|
||||
margin-right:auto;
|
||||
display:block;
|
||||
}
|
||||
|
||||
.middlebox
|
||||
{
|
||||
width:320px;
|
||||
background:#eee;
|
||||
margin-left:auto;
|
||||
margin-right:auto;
|
||||
box-shadow: 0px 0px 5px 1px #999;
|
||||
padding:10px 40px 40px;
|
||||
color:#555;
|
||||
text-align:center;
|
||||
}
|
||||
|
||||
table.details
|
||||
{
|
||||
text-align:left;
|
||||
font-size:16px;
|
||||
margin-left:auto;
|
||||
margin-right:auto;
|
||||
}
|
||||
|
||||
table.details td:first-child
|
||||
{
|
||||
font-weight:bold;
|
||||
text-align:right;
|
||||
padding-right:10px;
|
||||
}
|
||||
|
||||
|
||||
#toptext
|
||||
{
|
||||
text-align:center;
|
||||
/* margin-bottom:30px;*/
|
||||
}
|
||||
|
||||
|
||||
input {
|
||||
border: 1px solid #555;
|
||||
padding-top:5px;
|
||||
padding-bottom:5px;
|
||||
font-size: 15px;
|
||||
/* width: 100%; */
|
||||
background: #fff;
|
||||
color: 000000;
|
||||
text-indent:10px;
|
||||
font-family: 'Cantarell', sans-serif;
|
||||
}
|
||||
|
||||
input:focus {
|
||||
box-shadow: 0px 0px 5px #3366FF;
|
||||
}
|
||||
|
||||
input[type=submit]
|
||||
{
|
||||
text-indent:0px;
|
||||
background-image: url('repeater.png');
|
||||
color:white;
|
||||
/* font-weight:bold;*/
|
||||
width: 150px;
|
||||
}
|
||||
|
||||
.middlebox a {
|
||||
padding-left: 5px;
|
||||
padding-right: 5px;
|
||||
}
|
||||
|
||||
.button {
|
||||
border: 1px solid #555;
|
||||
padding-top: 5px;
|
||||
padding-bottom: 5px;
|
||||
font-size: 15px;
|
||||
/* width: 100%; */
|
||||
background: #fff;
|
||||
text-indent: 10px;
|
||||
font-family: 'Cantarell', sans-serif;
|
||||
text-indent: 0px;
|
||||
background-image: url('repeater.png');
|
||||
color: white;
|
||||
/* font-weight: bold;*/
|
||||
text-decoration: none;
|
||||
/* display: block; */
|
||||
}
|
||||
|
||||
|
||||
#password, #username {
|
||||
width: 310px;
|
||||
}
|
||||
|
||||
input::-moz-focus-inner {
|
||||
border:0;
|
||||
padding:0;
|
||||
}
|
||||
|
|
@ -1,84 +0,0 @@
|
|||
/* open-sans-300 - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: normal;
|
||||
font-weight: 300;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-300.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans Light'), local('OpenSans-Light'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
||||
/* open-sans-300italic - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: italic;
|
||||
font-weight: 300;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-300italic.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans Light Italic'), local('OpenSansLight-Italic'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300italic.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300italic.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300italic.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-300italic.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
||||
/* open-sans-regular - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: normal;
|
||||
font-weight: 400;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-regular.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans'), local('OpenSans'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-regular.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-regular.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-regular.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-regular.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-regular.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
||||
/* open-sans-italic - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: italic;
|
||||
font-weight: 400;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-italic.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans Italic'), local('OpenSans-Italic'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-italic.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-italic.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-italic.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-italic.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
||||
/* open-sans-700 - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: normal;
|
||||
font-weight: 700;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-700.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans Bold'), local('OpenSans-Bold'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
||||
/* open-sans-700italic - latin_latin-ext */
|
||||
@font-face {
|
||||
font-family: 'Open Sans';
|
||||
font-style: italic;
|
||||
font-weight: 700;
|
||||
src: url('../fonts/open-sans-v13-latin_latin-ext-700italic.eot'); /* IE9 Compat Modes */
|
||||
src: local('Open Sans Bold Italic'), local('OpenSans-BoldItalic'),
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700italic.woff2') format('woff2'), /* Super Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700italic.woff') format('woff'), /* Modern Browsers */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700italic.ttf') format('truetype'), /* Safari, Android, iOS */
|
||||
url('../fonts/open-sans-v13-latin_latin-ext-700italic.svg#OpenSans') format('svg'); /* Legacy iOS */
|
||||
}
|
||||
|
Before Width: | Height: | Size: 248 KiB |
Before Width: | Height: | Size: 252 KiB |
Before Width: | Height: | Size: 249 KiB |
Before Width: | Height: | Size: 252 KiB |
Before Width: | Height: | Size: 252 KiB |
Before Width: | Height: | Size: 249 KiB |
Before Width: | Height: | Size: 18 KiB |
Before Width: | Height: | Size: 190 B |
|
@ -1,6 +1,3 @@
|
|||
# NOTE: this is not used anymore since Ipsilon has been moved to OpenShift.
|
||||
# See playbooks/openshift-apps/ipsilon.yml and roles/openshift-apps/ipsilon/
|
||||
|
||||
---
|
||||
# Configuration for the ipsilon webapp
|
||||
|
||||
|
@ -10,7 +7,6 @@
|
|||
- ipsilon
|
||||
- ipsilon-openid
|
||||
- ipsilon-saml2
|
||||
# - ipsilon-persona
|
||||
- ipsilon-openidc
|
||||
- ipsilon-authgssapi
|
||||
- ipsilon-authform
|
||||
|
@ -29,83 +25,6 @@
|
|||
- ipsilon
|
||||
- packages
|
||||
|
||||
#- name: Copy OpenID API extension
|
||||
# copy: src=api.py
|
||||
# dest=/usr/lib/python2.7/site-packages/ipsilon/providers/openid/extensions/api.py
|
||||
# owner=root group=root mode=0644
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
#- name: Copy extended infofas
|
||||
# copy: src=infofas.py
|
||||
# dest=/usr/lib/python2.7/site-packages/ipsilon/info/infofas.py
|
||||
# owner=root group=root mode=0644
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
#- name: Copy OpenID Connect scope registrations
|
||||
# copy: src=oidc_scopes/{{item}}.py
|
||||
# dest=/usr/lib/python2.7/site-packages/ipsilon/providers/openidc/plugins/{{item}}.py
|
||||
# owner=root group=root mode=0644
|
||||
# with_items:
|
||||
# - account-scopes
|
||||
# - mbs
|
||||
# - beaker
|
||||
# - waiverdb
|
||||
# - odcs
|
||||
# - wiki
|
||||
# - src
|
||||
# - fpdc
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
# - ipsilon/oidc_scopes
|
||||
|
||||
#- name: Copy OpenID Connect scope registrations (STAGING)
|
||||
# copy: src=oidc_scopes/{{item}}.py
|
||||
# dest=/usr/lib/python2.7/site-packages/ipsilon/providers/openidc/plugins/{{item}}.py
|
||||
# owner=root group=root mode=0644
|
||||
# when: env == "staging"
|
||||
# with_items:
|
||||
# -
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
# - ipsilon/oidc_scopes
|
||||
|
||||
#- name: Apply hotfix for taiga to get POST results
|
||||
# copy: src=openid_server.py
|
||||
# dest=/usr/lib/python2.7/site-packages/openid/server/server.py
|
||||
# owner=root group=root mode=0644
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
# - name: copy ipsilon templates
|
||||
# copy: src=templates/
|
||||
# dest=/usr/share/ipsilon/templates-fedora
|
||||
# owner=ipsilon group=ipsilon mode=0666
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
#
|
||||
# - name: copy ipsilon ui assets
|
||||
# copy: src=ui-fedora/
|
||||
# dest=/usr/share/ipsilon/ui/fedora
|
||||
# owner=ipsilon group=ipsilon mode=0666
|
||||
# notify:
|
||||
# - reload apache
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
- name: Download Fedora-specific code
|
||||
git:
|
||||
repo: https://pagure.io/fedora-infra/ipsilon-fedora.git
|
||||
|
@ -202,52 +121,6 @@
|
|||
notify:
|
||||
- restart apache
|
||||
|
||||
# - name: Create Ipsilon config symlink
|
||||
# file:
|
||||
# dest: /var/lib/ipsilon/ipsilon.conf
|
||||
# src: /etc/ipsilon/root/ipsilon.conf
|
||||
# state: link
|
||||
# tags:
|
||||
# - ipsilon
|
||||
# notify:
|
||||
# - reload apache
|
||||
|
||||
# - name: create wellknown directory
|
||||
# file: path=/etc/ipsilon/root/wellknown state=directory
|
||||
# owner=ipsilon group=ipsilon mode=0755
|
||||
# tags:
|
||||
# - ipsilon
|
||||
# notify:
|
||||
# - reload apache
|
||||
|
||||
# - name: copy persona private key
|
||||
# copy: src={{ private }}/files/ipsilon/persona.key dest=/etc/ipsilon/root/persona.key
|
||||
# owner=ipsilon group=ipsilon mode=0600
|
||||
# when: env != "staging"
|
||||
# tags:
|
||||
# - ipsilon
|
||||
#
|
||||
# - name: copy persona public key
|
||||
# copy: src=browserid dest=/etc/ipsilon/root/wellknown/browserid
|
||||
# owner=ipsilon group=ipsilon mode=0644
|
||||
# when: env != "staging"
|
||||
# tags:
|
||||
# - ipsilon
|
||||
#
|
||||
# - name: copy persona STG private key
|
||||
# copy: src={{ private }}/files/ipsilon/persona.stg.key dest=/etc/ipsilon/root/persona.stg.key
|
||||
# owner=ipsilon group=ipsilon mode=0600
|
||||
# when: env == "staging"
|
||||
# tags:
|
||||
# - ipsilon
|
||||
#
|
||||
# - name: copy persona STG public key
|
||||
# copy: src=browserid.stg dest=/etc/ipsilon/root/wellknown/browserid
|
||||
# owner=ipsilon group=ipsilon mode=0644
|
||||
# when: env == "staging"
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
- name: copy OIDC private key
|
||||
copy:
|
||||
src: "{{ private }}/files/ipsilon/openidc{{ env_suffix }}.key"
|
||||
|
@ -258,13 +131,6 @@
|
|||
tags:
|
||||
- ipsilon
|
||||
|
||||
# - name: copy OIDC STG private key
|
||||
# copy: src={{ private }}/files/ipsilon/openidc.stg.key dest=/etc/ipsilon/root/openidc.stg.key
|
||||
# owner=ipsilon group=ipsilon mode=0600
|
||||
# when: env == "staging"
|
||||
# tags:
|
||||
# - ipsilon
|
||||
|
||||
- name: create SAML2 dir
|
||||
file:
|
||||
path: /etc/ipsilon/root/saml2
|
||||
|
|