Skip to content
Snippets Groups Projects
  1. Apr 24, 2018
  2. Jan 06, 2018
  3. Dec 28, 2017
  4. Oct 19, 2017
  5. Aug 31, 2016
  6. Aug 15, 2016
    • Jaime Pérez's avatar
      Multiple enhancements and fixes to IDPList support in proxy mode. · c70e0b75
      Jaime Pérez authored
      - Bugfix: the modules/saml/www/proxy/invalid_session.php shouldn't call directly the error handler in sspmod_saml_IdP_SAML2. Instead, it should use the SimpleSAML_Auth_State::throwException() method to let it handle the exception appropriately (in this case, it should always return back to the requester).
      - The standard specifies that a "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP" or "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP" second-level status code should be returned to the requester in case an error occurs. Add a couple of exceptions to represent both statuses, and use them to set the right status code in the response.
      - We shouldn't ask the user to logout in case the IDPList does not offer an IdP we recognize, or in case the proxy enforces the use of an IdP ('idp' configuration option in the auth source) and such IdP is in the IDPList.
      - Similarly, these two cases should also handled in case we are authenticating for the first time, not only when reauthenticating.
      c70e0b75
  7. Jul 26, 2016
    • Jaime Pérez's avatar
      Bump the version of the SAML2 library. · b02c5432
      Jaime Pérez authored
      Now we are finally using the 2.x branch of the SAML2 library, which was also migrated to use namespaces. Even though the library provides an autoloader that allows loading the classes with the old names using class aliasing, we need to do the migration in one commit (at least for most part of it). This is due to the way SimpleSAMLphp checks data types, using inheritance to check objects agains abstract or more general classes. Even though class aliasing works, there's no way to replicate those relationships, and type checks that use the old class names will fail because the aliases are virtually new classes that don't inherit from others.
      b02c5432
  8. Nov 06, 2015
  9. Jan 15, 2015
  10. Jul 09, 2014
  11. Jun 29, 2010
  12. May 04, 2010
  13. Aug 03, 2009
  14. Jul 13, 2009
Loading