Skip to content
Snippets Groups Projects
  1. May 31, 2018
  2. Apr 27, 2018
  3. Feb 27, 2018
  4. Jan 05, 2018
  5. Oct 19, 2017
  6. Dec 05, 2016
  7. Nov 07, 2016
  8. Oct 27, 2016
  9. Aug 31, 2016
  10. Aug 15, 2016
    • Jaime Pérez's avatar
      Multiple enhancements and fixes to IDPList support in proxy mode. · c70e0b75
      Jaime Pérez authored
      - Bugfix: the modules/saml/www/proxy/invalid_session.php shouldn't call directly the error handler in sspmod_saml_IdP_SAML2. Instead, it should use the SimpleSAML_Auth_State::throwException() method to let it handle the exception appropriately (in this case, it should always return back to the requester).
      - The standard specifies that a "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP" or "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP" second-level status code should be returned to the requester in case an error occurs. Add a couple of exceptions to represent both statuses, and use them to set the right status code in the response.
      - We shouldn't ask the user to logout in case the IDPList does not offer an IdP we recognize, or in case the proxy enforces the use of an IdP ('idp' configuration option in the auth source) and such IdP is in the IDPList.
      - Similarly, these two cases should also handled in case we are authenticating for the first time, not only when reauthenticating.
      c70e0b75
  11. Aug 10, 2016
    • Jaime Pérez's avatar
      Make the 'debug' configuration option more fine-grained. · 6c3d49f9
      Jaime Pérez authored
      Some things, like logging of SAML messages or backtraces, are controlled with the 'debug' configuration option. However, it might be possible that we don't want one while we want the other, but that's impossible with just one option.
      
      This commit allows us to configure debugging options independently, but groupping all of them together. This is particularly useful if we want to log backtraces to debug errors, for example, but we don't want to log SAML messages to keep the privacy of the users. This also allows us to get rid of the 'debug.validatexml' configuration option, and group it with other debug options.
      
      This changes are backwards-compatible. Old and new configurations will work at the same time.
      6c3d49f9
    • Jaime Pérez's avatar
      Log backtraces with the same log level as the error messages, whatever that is. · 0858c10c
      Jaime Pérez authored
      It's not very useful to log backtraces always as debug, since that implies getting all the log messages, while backtraces would still help debug a particular error.
      0858c10c
  12. Jul 25, 2016
    • Jaime Pérez's avatar
      bugfix: Critical configuration errors should not enforce a baseurlpath. · de8c1d24
      Jaime Pérez authored
      The code was enforcing this option even if a configuration was passed as a parameter to the constructor. If there is something wrong with a configuration and we are passing it to the constructor, we should know if at least the 'baseurlpath' is correct, and if not, fix it somehow.
      
      This bug was producing a default configuration without 'baseurlpath', when no configuration was passed. In that situation, only the default path (/simplesaml) was working correctly.
      de8c1d24
  13. Jul 04, 2016
  14. Jul 02, 2016
  15. Apr 19, 2016
    • Jaime Perez Crespo's avatar
      Add a couple new exceptions, both to signal configuration issues. One can be... · c3950c6b
      Jaime Perez Crespo authored
      Add a couple new exceptions, both to signal configuration issues. One can be used to signal an error in a certain configuration, leaving to the user deciding whether it was critical or not, and what to do to deal with it. The other one indicates a configuration exception that we cannot recover from (i.e. missing files), and bootstraps a minimal configuration skeleton that we can use to go on momentarily.
      c3950c6b
  16. Apr 18, 2016
  17. Apr 13, 2016
  18. Mar 09, 2016
  19. Nov 06, 2015
  20. Nov 03, 2015
  21. Aug 06, 2015
  22. Apr 21, 2015
  23. Apr 16, 2015
  24. Jan 20, 2015
Loading