Parameter in Manager (#1928)

lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm

@@ -24,7 +24,7 @@ use constant MANAGERSECTION  => "manager";
 use constant SESSIONSEXPLORERSECTION => "sessionsExplorer";
 use constant APPLYSECTION            => "apply";
 our $hashParameters = qr/^(?:(?:l(?:o(?:ca(?:lSessionStorageOption|tionRule)|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|(?:(?:d(?:emo|bi)|facebook|webID)ExportedVa|exported(?:Heade|Va)|issuerDBGetParamete)r|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|macro)s|o(?:idc(?:RPMetaData(?:(?:Option(?:sExtraClaim)?|ExportedVar)s|Node)|OPMetaData(?:(?:ExportedVar|Option)s|J(?:SON|WKS)|Node)|S(?:erviceMetaDataAuthnContext|torageOptions))|penIdExportedVars)|s(?:aml(?:S(?:PMetaData(?:(?:ExportedAttribute|Option)s|Node|XML)|torageOptions)|IDPMetaData(?:(?:ExportedAttribute|Option)s|Node|XML))|essionDataToRemember|laveExportedVars|fExtra)|c(?:as(?:S(?:rvMetaData(?:(?:ExportedVar|Option)s|Node)|torageOptions)|A(?:ppMetaData(?:(?:ExportedVar|Option)s|Node)|ttributes))|(?:ustomAddParam|ombModule)s)|p(?:ersistentStorageOptions|o(?:rtalSkinRules|st))|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|v(?:hostOptions|irtualHost)|S(?:MTPTLSOpts|SLVarIf))$/;
-our $boolKeys = qr/^(?:s(?:aml(?:IDP(?:MetaDataOptions(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|IsPassiv)e|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Force(?:Authn|UTF8)|StoreSAMLToken|RelayStateURL)|SSODescriptorWantAuthnRequestsSigned)|S(?:P(?:MetaDataOptions(?:(?:CheckS[LS]OMessageSignatur|OneTimeUs)e|EnableIDPInitiatedURL|ForceUTF8)|SSODescriptor(?:WantAssertion|AuthnRequest)sSigned)|erviceUseCertificateInResponse)|DiscoveryProtocol(?:Activation|IsPassive)|CommonDomainCookieActivation|UseQueryStringSpecific|MetadataForceUTF8)|ingle(?:Session(?:UserByIP)?|(?:UserBy)?IP)|oap(?:Session|Config)Server|t(?:ayConnecte|orePasswor)d|kipRenewConfirmation|fRemovedUseNotif|howLanguages|slByAjax)|o(?:idc(?:ServiceAllow(?:(?:AuthorizationCode|Implicit|Hybrid)Flow|DynamicRegistration)|RPMetaDataOptions(?:LogoutSessionRequired|BypassConsent|RequirePKCE|Public)|OPMetaDataOptions(?:(?:CheckJWTSignatur|UseNonc)e|StoreIDToken))|ldNotifFormat)|p(?:ortal(?:Display(?:Re(?:setPassword|gister)|PasswordPolicy)|ErrorOn(?:ExpiredSession|MailNotFound)|(?:CheckLogin|Statu)s|OpenLinkInNewWindow|RequireOldPassword|ForceAuthn|AntiFrame)|roxyUseSoap)|c(?:a(?:ptcha_(?:register|login|mail)_enabled|sSrvMetaDataOptions(?:Gateway|Renew))|heck(?:User(?:Display(?:PersistentInfo|EmptyValues))?|State|XSS)|o(?:ntextSwitchingStopWithLogout|rsEnabled)|da)|l(?:dap(?:(?:Group(?:DecodeSearchedValu|Recursiv)|UsePasswordResetAttribut)e|(?:AllowResetExpired|Set)Password|ChangePasswordAsUser|PpolicyControl|ITDS)|oginHistoryEnabled)|i(?:ssuerDB(?:OpenID(?:Connect)?|SAML|CAS|Get)Activation|mpersonationSkipEmptyValues)|no(?:tif(?:ication(?:Server(?:(?:POS|GE)T|DELETE)?)?|y(?:Deleted|Other))|AjaxHook)|to(?:tp2f(?:UserCan(?:Chang|Remov)eKey|DisplayExistingSecret)|kenUseGlobalStorage)|u(?:se(?:RedirectOn(?:Forbidden|Error)|SafeJail)|2fUserCanRemoveKey|pgradeSession)|d(?:isablePersistentStorage|biDynamicHashEnabled|ontCompactConf)|(?:mai(?:lOnPasswordChang|ntenanc)|vhostMaintenanc)e|rest(?:(?:Session|Config)Server|ExportSecretKeys)|br(?:owsersDontStorePassword|uteForceProtection)|h(?:ideOldPassword|ttpOnly)|yubikey2fUserCanRemoveKey|(?:activeTim|wsdlServ)er|krb(?:RemoveDomain|ByJs))$/;
+our $boolKeys = qr/^(?:s(?:aml(?:IDP(?:MetaDataOptions(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|IsPassiv)e|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Force(?:Authn|UTF8)|StoreSAMLToken|RelayStateURL)|SSODescriptorWantAuthnRequestsSigned)|S(?:P(?:MetaDataOptions(?:(?:CheckS[LS]OMessageSignatur|OneTimeUs)e|EnableIDPInitiatedURL|ForceUTF8)|SSODescriptor(?:WantAssertion|AuthnRequest)sSigned)|erviceUseCertificateInResponse)|DiscoveryProtocol(?:Activation|IsPassive)|CommonDomainCookieActivation|UseQueryStringSpecific|MetadataForceUTF8)|ingle(?:Session(?:UserByIP)?|(?:UserBy)?IP)|oap(?:Session|Config)Server|t(?:ayConnecte|orePasswor)d|kipRenewConfirmation|fRemovedUseNotif|howLanguages|slByAjax)|o(?:idc(?:ServiceAllow(?:(?:AuthorizationCode|Implicit|Hybrid)Flow|DynamicRegistration)|RPMetaDataOptions(?:LogoutSessionRequired|BypassConsent|RequirePKCE|Public)|OPMetaDataOptions(?:(?:CheckJWTSignatur|UseNonc)e|StoreIDToken))|ldNotifFormat)|p(?:ortal(?:Display(?:Re(?:setPassword|gister)|GeneratePassword|PasswordPolicy)|ErrorOn(?:ExpiredSession|MailNotFound)|(?:CheckLogin|Statu)s|OpenLinkInNewWindow|RequireOldPassword|ForceAuthn|AntiFrame)|roxyUseSoap)|c(?:a(?:ptcha_(?:register|login|mail)_enabled|sSrvMetaDataOptions(?:Gateway|Renew))|heck(?:User(?:Display(?:PersistentInfo|EmptyValues))?|State|XSS)|o(?:ntextSwitchingStopWithLogout|rsEnabled)|da)|l(?:dap(?:(?:Group(?:DecodeSearchedValu|Recursiv)|UsePasswordResetAttribut)e|(?:AllowResetExpired|Set)Password|ChangePasswordAsUser|PpolicyControl|ITDS)|oginHistoryEnabled)|i(?:ssuerDB(?:OpenID(?:Connect)?|SAML|CAS|Get)Activation|mpersonationSkipEmptyValues)|no(?:tif(?:ication(?:Server(?:(?:POS|GE)T|DELETE)?)?|y(?:Deleted|Other))|AjaxHook)|to(?:tp2f(?:UserCan(?:Chang|Remov)eKey|DisplayExistingSecret)|kenUseGlobalStorage)|u(?:se(?:RedirectOn(?:Forbidden|Error)|SafeJail)|2fUserCanRemoveKey|pgradeSession)|d(?:isablePersistentStorage|biDynamicHashEnabled|ontCompactConf)|(?:mai(?:lOnPasswordChang|ntenanc)|vhostMaintenanc)e|rest(?:(?:Session|Config)Server|ExportSecretKeys)|br(?:owsersDontStorePassword|uteForceProtection)|h(?:ideOldPassword|ttpOnly)|yubikey2fUserCanRemoveKey|(?:activeTim|wsdlServ)er|krb(?:RemoveDomain|ByJs))$/;
 
 our @sessionTypes = ( 'remoteGlobal', 'global', 'localSession', 'persistent', 'saml', 'oidc', 'cas' );
 

lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm

@@ -210,28 +210,29 @@ sub defaultValues {
         'portalAntiFrame'                     => 1,
         'portalCheckLogins'                   => 1,
         'portalDisplayAppslist'               => 1,
-        'portalDisplayChangePassword' => '$_auth =~ /^(LDAP|DBI|Demo)$/',
-        'portalDisplayLoginHistory'   => 1,
-        'portalDisplayLogout'         => 1,
-        'portalDisplayOidcConsents'   => '$_oidcConnectedRP',
-        'portalDisplayRegister'       => 1,
-        'portalErrorOnExpiredSession' => 1,
-        'portalForceAuthnInterval'    => 5,
-        'portalMainLogo'              => 'common/logos/logo_llng_400px.png',
-        'portalPingInterval'          => 60000,
-        'portalRequireOldPassword'    => 1,
-        'portalSkin'                  => 'bootstrap',
-        'portalUserAttr'              => '_user',
-        'proxyAuthnLevel'             => 2,
-        'radius2fActivation'          => 0,
-        'radius2fTimeout'             => 20,
-        'radiusAuthnLevel'            => 3,
-        'randomPasswordRegexp'        => '[A-Z]{3}[a-z]{5}.\\d{2}',
-        'redirectFormMethod'          => 'get',
-        'registerDB'                  => 'Null',
-        'registerTimeout'             => 0,
-        'registerUrl'                 => 'http://auth.example.com/register',
-        'reloadTimeout'               => 5,
+        'portalDisplayChangePassword'   => '$_auth =~ /^(LDAP|DBI|Demo)$/',
+        'portalDisplayGeneratePassword' => 1,
+        'portalDisplayLoginHistory'     => 1,
+        'portalDisplayLogout'           => 1,
+        'portalDisplayOidcConsents'     => '$_oidcConnectedRP',
+        'portalDisplayRegister'         => 1,
+        'portalErrorOnExpiredSession'   => 1,
+        'portalForceAuthnInterval'      => 5,
+        'portalMainLogo'                => 'common/logos/logo_llng_400px.png',
+        'portalPingInterval'            => 60000,
+        'portalRequireOldPassword'      => 1,
+        'portalSkin'                    => 'bootstrap',
+        'portalUserAttr'                => '_user',
+        'proxyAuthnLevel'               => 2,
+        'radius2fActivation'            => 0,
+        'radius2fTimeout'               => 20,
+        'radiusAuthnLevel'              => 3,
+        'randomPasswordRegexp'          => '[A-Z]{3}[a-z]{5}.\\d{2}',
+        'redirectFormMethod'            => 'get',
+        'registerDB'                    => 'Null',
+        'registerTimeout'               => 0,
+        'registerUrl'                   => 'http://auth.example.com/register',
+        'reloadTimeout'                 => 5,
         'remoteGlobalStorage' => 'Lemonldap::NG::Common::Apache::Session::SOAP',
         'remoteGlobalStorageOptions' => {
             'ns' =>

lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm

@@ -2323,6 +2323,10 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
             'default' => '$_auth =~ /^(LDAP|DBI|Demo)$/',
             'type'    => 'boolOrExpr'
         },
+        'portalDisplayGeneratePassword' => {
+            'default' => 1,
+            'type'    => 'bool'
+        },
         'portalDisplayLoginHistory' => {
             'default' => 1,
             'type'    => 'boolOrExpr'

lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm

@@ -966,6 +966,12 @@ sub attributes {
             default       => '$_oidcConnectedRP',
             documentation => 'Display OIDC consent tab in portal',
         },
+        portalDisplayGeneratePassword => {
+            default => 1,
+            type    => 'bool',
+            documentation =>
+              'Display password generate box in reset password form',
+        },
 
         # Cookies
         cookieExpiration => {

lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm

@@ -82,6 +82,7 @@ sub tree {
                                         'passwordPolicyMinUpper',
                                         'passwordPolicyMinDigit',
                                         'portalDisplayPasswordPolicy',
+                                        'portalDisplayGeneratePassword',
                                     ]
                                 },
                                 {
@@ -130,7 +131,10 @@ sub tree {
                         {
                             title => 'choiceParams',
                             help  => 'authchoice.html',
-                            nodes => [ 'authChoiceParam',  'authChoiceModules', 'authChoiceAuthBasic' ]
+                            nodes => [
+                                'authChoiceParam', 'authChoiceModules',
+                                'authChoiceAuthBasic'
+                            ]
                         },
                         {
                             title => 'apacheParams',

lemonldap-ng-manager/site/htdocs/static/languages/ar.json

@@ -649,6 +649,7 @@
 "portalCustomization":"التخصيص",
 "portalDisplayAppslist":"قائمة التطبيقات",
 "portalDisplayChangePassword":"تغيير كلمة المرور",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"سجل تسجيل الدخول",
 "portalDisplayLogout":"تسجيل الخروج",
 "portalDisplayPasswordPolicy":"Display policy in password form",
@@ -1059,4 +1060,4 @@
 "samlRelayStateTimeout":"تناوب حالة مهلة الجلسة ",
 "samlUseQueryStringSpecific":"استخدام أسلوب query_string المعين",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}

lemonldap-ng-manager/site/htdocs/static/languages/de.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Customization",
 "portalDisplayAppslist":"Applications list",
 "portalDisplayChangePassword":"Password change",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"Login History",
 "portalDisplayLogout":"Logout",
 "portalDisplayPasswordPolicy":"Display policy in password form",
@@ -1059,4 +1060,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}

lemonldap-ng-manager/site/htdocs/static/languages/en.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Customization",
 "portalDisplayAppslist":"Applications list",
 "portalDisplayChangePassword":"Password change",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"Login History",
 "portalDisplayLogout":"Logout",
 "portalDisplayPasswordPolicy": "Display policy in password form",

lemonldap-ng-manager/site/htdocs/static/languages/fr.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Personnalisation",
 "portalDisplayAppslist":"Liste des applications",
 "portalDisplayChangePassword":"Changement de mot de passe",
+"portalDisplayGeneratePassword":"Afficher la boite de génération du mot de passe",
 "portalDisplayLoginHistory":"Historique des connexions",
 "portalDisplayLogout":"Déconnexion",
 "portalDisplayPasswordPolicy": "Afficher la politique dans le formulaire de mot de passe",

lemonldap-ng-manager/site/htdocs/static/languages/it.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Personalizzazione",
 "portalDisplayAppslist":"Lista delle applicazioni",
 "portalDisplayChangePassword":"Cambio password",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"Cronologia login",
 "portalDisplayLogout":"Logout",
 "portalDisplayPasswordPolicy":"Display policy in password form",
@@ -1059,4 +1060,4 @@
 "samlRelayStateTimeout":"Timeout di sessione di RelayState",
 "samlUseQueryStringSpecific":"Utilizza il metodo specifico query_string",
 "samlOverrideIDPEntityID":"Sostituisci l'ID entità quando agisce come IDP"
-}
+}

lemonldap-ng-manager/site/htdocs/static/languages/vi.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Tùy chỉnh",
 "portalDisplayAppslist":"Danh sách ứng dụng",
 "portalDisplayChangePassword":"Thay đổi mật khẩu",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"Lịch sử đăng nhập",
 "portalDisplayLogout":"Đăng xuất",
 "portalDisplayPasswordPolicy":"Display policy in password form",
@@ -1059,4 +1060,4 @@
 "samlRelayStateTimeout":"Thời gian hết hạn phiên RelayState ",
 "samlUseQueryStringSpecific":"Sử dụng phương pháp query_string cụ thể",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}

lemonldap-ng-manager/site/htdocs/static/languages/zh.json

@@ -649,6 +649,7 @@
 "portalCustomization":"Customization",
 "portalDisplayAppslist":"Applications list",
 "portalDisplayChangePassword":"Password change",
+"portalDisplayGeneratePassword":"Display generate password box",
 "portalDisplayLoginHistory":"Login History",
 "portalDisplayLogout":"Logout",
 "portalDisplayPasswordPolicy":"Display policy in password form",
@@ -1059,4 +1060,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}