rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,039 Commits 1 Branch 0 Tags
78d7207403f2d00936df2f00a8a310e61c782cf2
Commit Graph

26 Commits

Author SHA1 Message Date
Sacha Al Himdani
975d16c623 Add employee page 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-12-09 15:33:05 +01:00
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication 
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-14 09:32:23 +01:00
Sacha Al Himdani
08c6cc8d09 Add api membership during organization creation 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-13 18:01:00 +01:00
Sacha Al Himdani
21c4b7cd9d Add role management 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-13 17:11:22 +01:00
Bryan Frimin
d3467c0a05 Make SAML role mapping optional 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 09:28:33 +01:00
Bryan Frimin
edce70141d Add IDP initiated flow support 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 09:06:02 +01:00
Sacha Al Himdani
5212d0c18f Add api keys 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 13:37:31 +01:00
Bryan Frimin
59aa332ab5 Move to vanity import url 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-31 17:01:52 +01:00
Bryan Frimin
d1c31978da Fix role and organization logo 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 22:42:17 +01:00
Bryan Frimin
aabad5087c Fix relay attack err 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 19:46:31 +01:00
Bryan Frimin
896e6e0736 Refactor hostname to become baseurl 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 19:41:15 +01:00
Bryan Frimin
57f43f822a Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:14 +01:00
Bryan Frimin
29917578fc Fix various bad tenant isolation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
a42670d5bd Simpliy and ensure tenant for saml consume 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
b92d78e4cf Remove race condition on relay attack 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
5a69c05516 Fix no iteration over all saml attr 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
eaaf6deca4 Fix missing session auth info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:11 +01:00
Bryan Frimin
8bf82331e8 Remove default role configuration 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
eb49e27724 Simplify saml validation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
a2b5d03b62 Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
6f2bd9c92f Fix failed to to cannot 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:08 +01:00
Bryan Frimin
2766f8e423 Add SAML support 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:31:27 +01:00
Sacha Al Himdani
87ac7485f3 Use link to png logo in emails 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-15 18:53:23 +02:00
Sacha Al Himdani
ae45410b82 Use html in emails 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-15 17:55:36 +02:00
Sacha Al Himdani
165eb267f2 Refactor invitation system 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-14 16:32:22 +02:00
Bryan Frimin
0f96b8518f Refactoring of authentification 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-14 16:32:22 +02:00