Cédric Krier pushed to branch branch/default at Tryton / Tryton


Commits:
cdbf20f5ef15 by Nicolas Évrard at 2025-10-05T17:17:14+02:00
Restrict sessions to the client's IP address

Closes #13909
- - - - -
a8fd4880b3c5 by Nicolas Évrard at 2025-10-04T15:53:18+02:00
Validate the session without using the pool on bus requests
- - - - -
5af8d41ce7ce by Nicolas Évrard at 2025-10-06T17:03:41+02:00
Handle URL host of the bus on login instead of using a redirect

Browsers remove authorization header upon cross-origin redirect.

Closes #12329
- - - - -


16 changed files:

- modules/authentication_saml/routes.py
- sao/src/bus.js
- sao/src/sao.js
- sao/src/session.js
- tryton/tryton/bus.py
- tryton/tryton/rpc.py
- trytond/CHANGELOG
- trytond/doc/ref/transaction.rst
- trytond/trytond/bus.py
- trytond/trytond/ir/session.py
- trytond/trytond/protocols/dispatcher.py
- trytond/trytond/res/user.py
- trytond/trytond/security.py
- trytond/trytond/tests/test_transaction.py
- trytond/trytond/transaction.py
- trytond/trytond/wsgi.py


View it on Heptapod: 
https://foss.heptapod.net/tryton/tryton/-/compare/7e8fe7787a0d48eb57988a9dde522794776c596b...5af8d41ce7ce7d32ed5f43de2efd69264f509fe8

-- 
View it on Heptapod: 
https://foss.heptapod.net/tryton/tryton/-/compare/7e8fe7787a0d48eb57988a9dde522794776c596b...5af8d41ce7ce7d32ed5f43de2efd69264f509fe8
You're receiving this email because of your account on foss.heptapod.net.

Reply via email to