Add manager options for authn level in issuer apps (#2124, #1848)

5 years ago · cb43b27904
parent ffb7c7430d
commit cb43b27904
16 changed files with 81 additions and 12 deletions
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
@ -24,12 +24,12 @@ our $specialNodeHash = {
 our $doubleHashKeys = 'issuerDBGetParameters';
 our $simpleHashKeys = '(?:(?:l(?:o(?:calSessionStorageOption|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|c(?:as(?:StorageOption|Attribute)|ustom(?:Plugins|Add)Param|ombModule)|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|(?:(?:d(?:emo|bi)|facebook|webID)E|e)xportedVar|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|p(?:ersistentStorageOption|ortalSkinRule)|macro)s|o(?:idcS(?:ervice(?:DynamicRegistrationEx(?:portedVar|traClaim)s|MetaDataAuthnContext)|torageOptions)|penIdExportedVars)|s(?:(?:amlStorageOption|laveExportedVar)s|essionDataToRemember|fExtra)|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|S(?:MTPTLSOpts|SLVarIf))';
 our $specialNodeKeys = '(?:(?:(?:saml(?:ID|S)|oidc[OR])P|cas(?:App|Srv))MetaDataNode|virtualHost)s';
-our $casAppMetaDataNodeKeys = 'casAppMetaData(?:Options(?:UserAttribut|Servic|Rul)e|(?:ExportedVar|Macro)s)';
+our $casAppMetaDataNodeKeys = 'casAppMetaData(?:Options(?:(?:UserAttribut|Servic|Rul)e|AuthnLevel)|(?:ExportedVar|Macro)s)';
 our $casSrvMetaDataNodeKeys = 'casSrvMetaData(?:Options(?:ProxiedServices|DisplayName|SortNumber|Gateway|Renew|Icon|Url)|ExportedVars)';
 our $oidcOPMetaDataNodeKeys = 'oidcOPMetaData(?:Options(?:C(?:lient(?:Secret|ID)|heckJWTSignature|onfigurationURI)|S(?:toreIDToken|ortNumber|cope)|TokenEndpointAuthMethod|(?:JWKSTimeou|Promp)t|I(?:DTokenMaxAge|con)|U(?:iLocales|seNonce)|Display(?:Name)?|AcrValues|MaxAge)|ExportedVars|J(?:SON|WKS))';
-our $oidcRPMetaDataNodeKeys = 'oidcRPMetaData(?:Options(?:A(?:(?:uthorizationCode|ccessToken)Expiration|llow(?:PasswordGrant|Offline)|dditionalAudiences)|I(?:DToken(?:ForceClaims|Expiration|SignAlg)|con)|R(?:e(?:directUris|freshToken|quirePKCE)|ule)|Logout(?:SessionRequired|Type|Url)|P(?:ostLogoutRedirectUris|ublic)|OfflineSessionExpiration|Client(?:Secret|ID)|BypassConsent|DisplayName|ExtraClaims|UserIDAttr)|(?:ExportedVar|Macro)s)';
+our $oidcRPMetaDataNodeKeys = 'oidcRPMetaData(?:Options(?:A(?:uth(?:orizationCodeExpiration|nLevel)|llow(?:PasswordGrant|Offline)|ccessTokenExpiration|dditionalAudiences)|I(?:DToken(?:ForceClaims|Expiration|SignAlg)|con)|R(?:e(?:directUris|freshToken|quirePKCE)|ule)|Logout(?:SessionRequired|Type|Url)|P(?:ostLogoutRedirectUris|ublic)|OfflineSessionExpiration|Client(?:Secret|ID)|BypassConsent|DisplayName|ExtraClaims|UserIDAttr)|(?:ExportedVar|Macro)s)';
 our $samlIDPMetaDataNodeKeys = 'samlIDPMetaData(?:Options(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|EncryptionMod|UserAttribut|DisplayNam)e|S(?:ignS[LS]OMessage|toreSAMLToken|[LS]OBinding|ortNumber)|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Re(?:questedAuthnContext|solutionRule|layStateURL)|Force(?:Authn|UTF8)|I(?:sPassive|con)|NameIDFormat)|ExportedAttributes|XML)';
-our $samlSPMetaDataNodeKeys = 'samlSPMetaData(?:Options(?:N(?:ameID(?:SessionKey|Format)|otOnOrAfterTimeout)|S(?:essionNotOnOrAfterTimeout|ignS[LS]OMessage)|(?:CheckS[LS]OMessageSignatur|OneTimeUs|Rul)e|En(?:ableIDPInitiatedURL|cryptionMode)|ForceUTF8)|(?:ExportedAttribute|Macro)s|XML)';
+our $samlSPMetaDataNodeKeys = 'samlSPMetaData(?:Options(?:N(?:ameID(?:SessionKey|Format)|otOnOrAfterTimeout)|S(?:essionNotOnOrAfterTimeout|ignS[LS]OMessage)|(?:CheckS[LS]OMessageSignatur|OneTimeUs|Rul)e|En(?:ableIDPInitiatedURL|cryptionMode)|AuthnLevel|ForceUTF8)|(?:ExportedAttribute|Macro)s|XML)';
 our $virtualHostKeys = '(?:vhost(?:A(?:uthnLevel|liases)|(?:Maintenanc|Typ)e|ServiceTokenTTL|Https|Port)|(?:exportedHeader|locationRule)s|post)';

 our $authParameters = {
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@ -713,6 +713,9 @@ sub attributes {
        'casAppMetaDataOptions' => {
            'type' => 'subContainer'
        },
+        'casAppMetaDataOptionsAuthnLevel' => {
+            'type' => 'int'
+        },
        'casAppMetaDataOptionsRule' => {
            'test' => sub {
                return perlExpr(@_);
@ -2152,6 +2155,9 @@ m[^(?:ldapi://[^/]*/?|\w[\w\-\.]*(?::\d{1,5})?|ldap(?:s|\+tls)?://\w[\w\-\.]*(?:
            'default' => 0,
            'type'    => 'bool'
        },
+        'oidcRPMetaDataOptionsAuthnLevel' => {
+            'type' => 'int'
+        },
        'oidcRPMetaDataOptionsAuthorizationCodeExpiration' => {
            'type' => 'int'
        },
@ -3392,6 +3398,9 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
            'keyTest'    => qr/^[a-zA-Z](?:[a-zA-Z0-9_\-\.]*\w)?$/,
            'type'       => 'keyTextContainer'
        },
+        'samlSPMetaDataOptionsAuthnLevel' => {
+            'type' => 'int'
+        },
        'samlSPMetaDataOptionsCheckSLOMessageSignature' => {
            'default' => 1,
            'type'    => 'bool'
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@ -2304,6 +2304,10 @@ sub attributes {
            type          => 'text',
            documentation => 'CAS User attribute',
        },
+        casAppMetaDataOptionsAuthnLevel => {
+            type          => 'int',
+            documentation => 'Authentication level requires to access to this CAS application',
+        },
        casAppMetaDataOptionsRule => {
            type          => 'text',
            test          => sub { return perlExpr(@_) },
@ -2915,6 +2919,10 @@ sub attributes {
            type    => 'bool',
            default => 1,
        },
+        samlSPMetaDataOptionsAuthnLevel => {
+            type          => 'int',
+            documentation => 'Authentication level requires to access to this SP',
+        },
        samlSPMetaDataOptionsRule => {
            type          => 'text',
            test          => sub { return perlExpr(@_) },
@ -4065,6 +4073,10 @@ m{^(?:ldapi://[^/]*/?|\w[\w\-\.]*(?::\d{1,5})?|ldap(?:s|\+tls)?://\w[\w\-\.]*(?:
            default       => 0,
            documentation => 'Issue refresh tokens',
        },
+        oidcRPMetaDataOptionsAuthnLevel => {
+            type          => 'int',
+            documentation => 'Authentication level requires to access to this RP',
+        },
        oidcRPMetaDataOptionsRule => {
            type          => 'text',
            test          => sub { return perlExpr(@_) },
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/CTrees.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/CTrees.pm
@ -134,6 +134,7 @@ sub cTrees {
                        nodes => [
                            "samlSPMetaDataOptionsEncryptionMode",
                            "samlSPMetaDataOptionsEnableIDPInitiatedURL",
+                            "samlSPMetaDataOptionsAuthnLevel",
                            "samlSPMetaDataOptionsRule",
                        ]
                    }
@ -221,6 +222,7 @@ sub cTrees {
                            'oidcRPMetaDataOptionsRequirePKCE',
                            'oidcRPMetaDataOptionsAllowOffline',
                            'oidcRPMetaDataOptionsAllowPasswordGrant',
+                            'oidcRPMetaDataOptionsAuthnLevel',
                            'oidcRPMetaDataOptionsRule',
                        ]
                    },
@ -286,6 +288,7 @@ sub cTrees {
                nodes => [
                    'casAppMetaDataOptionsService',
                    'casAppMetaDataOptionsUserAttribute',
+                    'casAppMetaDataOptionsAuthnLevel',
                    'casAppMetaDataOptionsRule'
                ]
            },
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.js
@ -48,6 +48,12 @@ function templates(tpl,key) {
            "id" : tpl+"s/"+key+"/"+"casAppMetaDataOptionsUserAttribute",
            "title" : "casAppMetaDataOptionsUserAttribute"
         },
+         {
+            "get" : tpl+"s/"+key+"/"+"casAppMetaDataOptionsAuthnLevel",
+            "id" : tpl+"s/"+key+"/"+"casAppMetaDataOptionsAuthnLevel",
+            "title" : "casAppMetaDataOptionsAuthnLevel",
+            "type" : "int"
+         },
         {
            "get" : tpl+"s/"+key+"/"+"casAppMetaDataOptionsRule",
            "id" : tpl+"s/"+key+"/"+"casAppMetaDataOptionsRule",
@ -535,6 +541,12 @@ function templates(tpl,key) {
                  "title" : "oidcRPMetaDataOptionsAllowPasswordGrant",
                  "type" : "bool"
               },
+               {
+                  "get" : tpl+"s/"+key+"/"+"oidcRPMetaDataOptionsAuthnLevel",
+                  "id" : tpl+"s/"+key+"/"+"oidcRPMetaDataOptionsAuthnLevel",
+                  "title" : "oidcRPMetaDataOptionsAuthnLevel",
+                  "type" : "int"
+               },
               {
                  "get" : tpl+"s/"+key+"/"+"oidcRPMetaDataOptionsRule",
                  "id" : tpl+"s/"+key+"/"+"oidcRPMetaDataOptionsRule",
@ -1153,6 +1165,12 @@ function templates(tpl,key) {
                  "title" : "samlSPMetaDataOptionsEnableIDPInitiatedURL",
                  "type" : "bool"
               },
+               {
+                  "get" : tpl+"s/"+key+"/"+"samlSPMetaDataOptionsAuthnLevel",
+                  "id" : tpl+"s/"+key+"/"+"samlSPMetaDataOptionsAuthnLevel",
+                  "title" : "samlSPMetaDataOptionsAuthnLevel",
+                  "type" : "int"
+               },
               {
                  "get" : tpl+"s/"+key+"/"+"samlSPMetaDataOptionsRule",
                  "id" : tpl+"s/"+key+"/"+"samlSPMetaDataOptionsRule",
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"تطبيق كاس",
 "casAppMetaDataOptions":"خيارات",
 "casAppMetaDataOptionsService":"خدمة أل يو أر ل",
+"casAppMetaDataOptionsAuthnLevel":"مستوى إثبات الهوية",
 "casAppMetaDataOptionsRule":"القاعدة",
 "casAppMetaDataMacros":"ماكرو",
 "casAppMetaDataOptionsUserAttribute":"خاصّيّة المستخدم",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"بروتوكول",
 "oidcRPMetaDataOptionsPublic":"Public client",
 "oidcRPMetaDataOptionsRequirePKCE":"Require PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"مستوى إثبات الهوية",
 "oidcRPMetaDataOptionsRule":"قاعدة الدخول",
 "oidcRPMetaDataMacros":"ماكرو",
 "oidcOPMetaDataOptionsScope":"نطاق",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"جلسة ليست مع أو بعد المدة",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"ليس على أو بعد المدة",
 "samlSPMetaDataOptionsForceUTF8":"فرضUTF-8  ",
+"samlSPMetaDataOptionsAuthnLevel":"مستوى إثبات الهوية",
 "samlSPMetaDataOptionsRule":"قاعدة الدخول",
 "samlSPMetaDataMacros":"ماكرو",
 "samlIDPName":"اسم SAML IDP",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"تناوب حالة مهلة الجلسة ",
 "samlUseQueryStringSpecific":"استخدام أسلوب query_string المعين",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"CAS Applikationen",
 "casAppMetaDataOptions":"Optionen",
 "casAppMetaDataOptionsService":"Service URL",
+"casAppMetaDataOptionsAuthnLevel":"Authentication level",
 "casAppMetaDataOptionsRule":"Regel",
 "casAppMetaDataMacros":"Macros",
 "casAppMetaDataOptionsUserAttribute":"User attribute",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protocol",
 "oidcRPMetaDataOptionsPublic":"Public client",
 "oidcRPMetaDataOptionsRequirePKCE":"Require PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"Authentication level",
 "oidcRPMetaDataOptionsRule":"Access rule",
 "oidcRPMetaDataMacros":"Macros",
 "oidcOPMetaDataOptionsScope":"Scope",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"sessionNotOnOrAfter duration",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"notOnOrAfter duration",
 "samlSPMetaDataOptionsForceUTF8":"Force UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Authentication level",
 "samlSPMetaDataOptionsRule":"Access rule",
 "samlSPMetaDataMacros":"Macros",
 "samlIDPName":"SAML IDP Name",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"CAS Applications",
 "casAppMetaDataOptions":"Options",
 "casAppMetaDataOptionsService":"Service URL",
+"casAppMetaDataOptionsAuthnLevel":"Authentication level",
 "casAppMetaDataOptionsRule":"Rule",
 "casAppMetaDataMacros":"Macros",
 "casAppMetaDataOptionsUserAttribute":"User attribute",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protocol",
 "oidcRPMetaDataOptionsPublic":"Public client",
 "oidcRPMetaDataOptionsRequirePKCE":"Require PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"Authentication level",
 "oidcRPMetaDataOptionsRule":"Access rule",
 "oidcRPMetaDataMacros":"Macros",
 "oidcOPMetaDataOptionsScope":"Scope",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"sessionNotOnOrAfter duration",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"notOnOrAfter duration",
 "samlSPMetaDataOptionsForceUTF8":"Force UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Authentication level",
 "samlSPMetaDataOptionsRule":"Access rule",
 "samlSPMetaDataMacros":"Macros",
 "samlIDPName":"SAML IDP Name",
--- a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"Applications CAS",
 "casAppMetaDataOptions":"Options",
 "casAppMetaDataOptionsService":"URL du service",
+"casAppMetaDataOptionsAuthnLevel":"Niveau d'authentification",
 "casAppMetaDataOptionsRule":"Règle",
 "casAppMetaDataMacros":"Macros",
 "casAppMetaDataOptionsUserAttribute":"Attribut de l'utilisateur",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protocole",
 "oidcRPMetaDataOptionsPublic":"Client public",
 "oidcRPMetaDataOptionsRequirePKCE":"PKCE requis",
+"oidcRPMetaDataOptionsAuthnLevel":"Niveau d'authentification",
 "oidcRPMetaDataOptionsRule":"Règle d'accès",
 "oidcRPMetaDataMacros":"Macros",
 "oidcOPMetaDataOptionsScope":"Étendue",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"Durée sessionNotOnOrAfter",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"Durée notOnOrAfter",
 "samlSPMetaDataOptionsForceUTF8":"Forcer l'UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Niveau d'authentification",
 "samlSPMetaDataOptionsRule":"Règle d'accès",
 "samlSPMetaDataMacros":"Macros",
 "samlIDPName":"Nom du fournisseur d'identité SAML",
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"Applicazioni CAS",
 "casAppMetaDataOptions":"Opzioni",
 "casAppMetaDataOptionsService":"URL del servizio",
+"casAppMetaDataOptionsAuthnLevel":"Livello di autenticazione",
 "casAppMetaDataOptionsRule":"Regola",
 "casAppMetaDataMacros":"Macro",
 "casAppMetaDataOptionsUserAttribute":"Attributo utente",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protocollo",
 "oidcRPMetaDataOptionsPublic":"Cliente pubblico",
 "oidcRPMetaDataOptionsRequirePKCE":"Richiedi PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"Livello di autenticazione",
 "oidcRPMetaDataOptionsRule":"Regola di accesso",
 "oidcRPMetaDataMacros":"Macro",
 "oidcOPMetaDataOptionsScope":"Scopo",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"Durata sessionNotOnOrAfter ",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"Durata di notOnOrAfter ",
 "samlSPMetaDataOptionsForceUTF8":"Forza UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Livello di autenticazione",
 "samlSPMetaDataOptionsRule":"Regola di accesso",
 "samlSPMetaDataMacros":"Macro",
 "samlIDPName":"Nome di SAML IDP ",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"Timeout di sessione di RelayState",
 "samlUseQueryStringSpecific":"Utilizza il metodo specifico query_string",
 "samlOverrideIDPEntityID":"Sostituisci l'ID entità quando agisce come IDP"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/pl.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/pl.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"Aplikacje CAS",
 "casAppMetaDataOptions":"Opcje",
 "casAppMetaDataOptionsService":"URL usługi",
+"casAppMetaDataOptionsAuthnLevel":"Poziom uwierzytelnienia",
 "casAppMetaDataOptionsRule":"Reguła",
 "casAppMetaDataMacros":"Makra",
 "casAppMetaDataOptionsUserAttribute":"Atrybut użytkownika",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protokół",
 "oidcRPMetaDataOptionsPublic":"Klient publiczny",
 "oidcRPMetaDataOptionsRequirePKCE":"Wymagaj PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"Poziom uwierzytelnienia",
 "oidcRPMetaDataOptionsRule":"Reguła dostępu",
 "oidcRPMetaDataMacros":"Makra",
 "oidcOPMetaDataOptionsScope":"Zakres",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"czas trwania sessionNotOnOrAfter",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"czas trwania notOnOrAfter",
 "samlSPMetaDataOptionsForceUTF8":"Wymuś UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Poziom uwierzytelnienia",
 "samlSPMetaDataOptionsRule":"Reguła dostępu",
 "samlSPMetaDataMacros":"Makra",
 "samlIDPName":"Nazwa IDP SAML",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"Limit czasu sesji RelayState",
 "samlUseQueryStringSpecific":"Użyj określonej metody query_string",
 "samlOverrideIDPEntityID":"Zastąp identyfikator jednostki podczas działania jako IDP"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"CAS Uygulamaları",
 "casAppMetaDataOptions":"Seçenekler",
 "casAppMetaDataOptionsService":"Servis URL'si",
+"casAppMetaDataOptionsAuthnLevel":"Doğrulama seviyesi",
 "casAppMetaDataOptionsRule":"Kural",
 "casAppMetaDataMacros":"Makrolar",
 "casAppMetaDataOptionsUserAttribute":"Kullanıcı niteliği",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protokol",
 "oidcRPMetaDataOptionsPublic":"Açık istemci",
 "oidcRPMetaDataOptionsRequirePKCE":"PKCE gerektir",
+"oidcRPMetaDataOptionsAuthnLevel":"Doğrulama seviyesi",
 "oidcRPMetaDataOptionsRule":"Erişim kuralı",
 "oidcRPMetaDataMacros":"Makrolar",
 "oidcOPMetaDataOptionsScope":"Kapsam",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"sessionNotOnOrAfter süresi",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"notOnOrAfter süresi",
 "samlSPMetaDataOptionsForceUTF8":"UTF-8'e zorla",
+"samlSPMetaDataOptionsAuthnLevel":"Doğrulama seviyesi",
 "samlSPMetaDataOptionsRule":"Erişim kuralı",
 "samlSPMetaDataMacros":"Makrolar",
 "samlIDPName":"SAML IDP Adı",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"RelayState oturum zaman aşımı",
 "samlUseQueryStringSpecific":"Spesifik query_string metodu kullan",
 "samlOverrideIDPEntityID":"IDP olarak davrandığında Varlık ID'yi geçersiz kıl"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"Ứng dụng CAS",
 "casAppMetaDataOptions":"Tùy chọn",
 "casAppMetaDataOptionsService":"Dịch vụ URL",
+"casAppMetaDataOptionsAuthnLevel":"Mức xác thực",
 "casAppMetaDataOptionsRule":"Quy tắc",
 "casAppMetaDataMacros":"Macros",
 "casAppMetaDataOptionsUserAttribute":"thuộc tính người dùng",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Giao thức",
 "oidcRPMetaDataOptionsPublic":"Public client",
 "oidcRPMetaDataOptionsRequirePKCE":"Require PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"Mức xác thực",
 "oidcRPMetaDataOptionsRule":"Quy tắc truy cập",
 "oidcRPMetaDataMacros":"Macros",
 "oidcOPMetaDataOptionsScope":"Phạm vi",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"thời gian sessionNotOnOrAfter ",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"Thời gian notOnOrAfter ",
 "samlSPMetaDataOptionsForceUTF8":"Bắt buộc UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"Mức xác thực",
 "samlSPMetaDataOptionsRule":"Quy tắc truy cập",
 "samlSPMetaDataMacros":"Macros",
 "samlIDPName":"Tên SAML IDP ",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"Thời gian hết hạn phiên RelayState ",
 "samlUseQueryStringSpecific":"Sử dụng phương pháp query_string cụ thể",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@ -122,6 +122,7 @@
 "casAppMetaDataNodes":"CAS 系列应用",
 "casAppMetaDataOptions":"选项",
 "casAppMetaDataOptionsService":"服务 URL",
+"casAppMetaDataOptionsAuthnLevel":"认证等级",
 "casAppMetaDataOptionsRule":"规则",
 "casAppMetaDataMacros":"Macros",
 "casAppMetaDataOptionsUserAttribute":"User attribute",
@ -593,6 +594,7 @@
 "oidcOPMetaDataOptionsProtocol":"Protocol",
 "oidcRPMetaDataOptionsPublic":"Public client",
 "oidcRPMetaDataOptionsRequirePKCE":"Require PKCE",
+"oidcRPMetaDataOptionsAuthnLevel":"认证等级",
 "oidcRPMetaDataOptionsRule":"Access rule",
 "oidcRPMetaDataMacros":"Macros",
 "oidcOPMetaDataOptionsScope":"Scope",
@ -1074,6 +1076,7 @@
 "samlSPMetaDataOptionsSessionNotOnOrAfterTimeout":"sessionNotOnOrAfter duration",
 "samlSPMetaDataOptionsNotOnOrAfterTimeout":"notOnOrAfter duration",
 "samlSPMetaDataOptionsForceUTF8":"Force UTF-8",
+"samlSPMetaDataOptionsAuthnLevel":"认证等级",
 "samlSPMetaDataOptionsRule":"Access rule",
 "samlSPMetaDataMacros":"Macros",
 "samlIDPName":"SAML IDP Name",
@ -1141,4 +1144,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
+}