mconf / mconf-web

GNU Affero General Public License v3.0
123 stars 86 forks source link

Certificate authentication #937

Closed daronco closed 7 years ago

daronco commented 7 years ago

Adds a new authentication method: digital certificates.

Behaves similarly to the other authentication methods. If enabled, the users can use a certificate connected to their machine to sign in. Requires configurations in Apache and possibly adaptations in the code as well, since there is no single default way to configure data in a certificate. The implementation is as generic as possible that it might work for the majority of cases or might require just a few adaptations.

This PR also changes how superusers are defined in the application. The flag "superuser" was removed from User and now to set a user as admin Mconf-Web creates a permission object pointing to the user and to a role called "Global Admin".

Resolves #936.