IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

FEATURE: setting to allow arbitrary redirects from sso origin

Browse Source 
if sso_allows_all_return_paths is set to true you can redirect off-site from sso success
This commit is contained in:
Sam
2016-12-16 13:37:44 +11:00
parent 6ff309aa80
commit 61eb134181
4 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
config/locales/server.en.yml
View File

@@ -1020,6 +1020,7 @@ en:
sso_overrides_name: "Overrides local full name with external site full name from SSO payload on every login, and prevent local changes."
sso_overrides_avatar: "Overrides user avatar with external site avatar from SSO payload. If enabled, disabling allow_uploaded_avatars is highly recommended"
sso_not_approved_url: "Redirect unapproved SSO accounts to this URL"
sso_allows_all_return_paths: "Do not restrict the domain for return_paths provided by SSO (by default return path must be on current site)"
enable_local_logins: "Enable local username and password login based accounts. (Note: this must be enabled for invites to work)"
allow_new_registrations: "Allow new user registrations. Uncheck this to prevent anyone from creating a new account."

1
config/site_settings.yml
View File

@@ -298,6 +298,7 @@ login:
enable_sso:
client: true
default: false
sso_allows_all_return_paths: false
enable_sso_provider: false
verbose_sso_logging: false
sso_url: