NameIDAttribute filter: update to use SAML2\XML\saml\NameID

\SimpleSAML\Utils\HTTP::fetch properly handles proxy settings before calling file_get_contents()

also add some tests ;)

Fix bug in createLoggingHandler

oauth: Cleanup unused demo + templates

Lowercased some keywords too!

Fixes edge-case https://github.com/simplesamlphp/simplesamlphp/issues/741 where application has one of the known LoggingHandlers' name as a defined class

Make MDQ more robust on errors (fixes #723)

Update and rename default-enable to default-disable

No need to default-enable this quite specific module

Added tests for sspmod_core_Auth_Process_AttributeMap

The last version of psalm breaks with array_key_exists(), so we use isset() instead.

Add new config option

Statistics: use secure endpoint

Prevent graph from being blocked because of mixed content.
https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content?utm_campaign=default&utm_medium=firefox-console-errors&utm_source=mozilla

Remove leftovers from previously supported PHP-version

Use PHPUnit\Framework\TestCase instead of PHPUnit_Framework_TestCase

Refactoring tests

Changes to the translation system made all authX509 messages show
as "Not translated", because the new mapping of error codes to
error messages was not passed to the template.

Doing so allows us to mock the class. Otherwise, the _autoload_module.php is always called first, and when it tries to register the functions from that class, it automatically autoloads it, making it impossible to mock it afterwards.

The OPENLDAP option uses hardcoded uid to search for. It should instead use the value of
attribute.username. This means it also changes the default since attribute.username
defaults to samAccountName. So update the docs to make the example work again. Has not
been in a release yet so should not break existing installations.

(UID was interpreted as HTML tag)

Don't bail out if the MDQ cache is broken or the query fails, because
later other metadata sources might provide the metadata for the entity.

Docs: fix typo's

This prevents a lot of -dev dependencies in composer.lock which are
not used otherwise and generate 'scary' warnings like "Package x is
abandoned".

Closes #718

Fix duplicate assertion error using Redis Store