Skip to content
Snippets Groups Projects
  1. Aug 04, 2015
  2. Apr 16, 2015
  3. Jul 09, 2014
  4. Sep 13, 2013
  5. Sep 05, 2013
  6. Jan 30, 2012
  7. Aug 10, 2011
  8. Aug 09, 2010
  9. Jul 07, 2010
  10. Feb 24, 2010
  11. Feb 15, 2010
    • Olav Morken's avatar
      Disable cookie secure-flag by default. · c4ae073b
      Olav Morken authored
      This patch removes the autodetection of the secure flag for the cookie
      based on whether the user is accessing simpleSAMLphp through https. The
      reason for this is that the user can often access an SP through both
      https and http. If the user starts with http, everything will work, but
      if the user starts with https, the user will get two separate cookies,
      one for https and one for http.
      
      This patch introduces a new configuration option in config.php:
      
          /*
           * Set the secure flag in the cookie.
           *
           * Set this to TRUE if the user only accesses your service
           * through https. If the user can access the service through
           * both http and https, this must be set to FALSE.
           */
          'session.cookie.secure' => FALSE,
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2180 44740490-163a-0410-bde0-09ae8108e29a
      c4ae073b
  12. Dec 02, 2009
  13. Jun 12, 2008
  14. Jun 06, 2008
  15. May 13, 2008
  16. Mar 05, 2008
  17. Feb 08, 2008
  18. Jan 30, 2008
  19. Dec 18, 2007
  20. Nov 28, 2007
Loading