CREATE TABLE may return 0 on some DBMS, but false is always an indicator something's wrong

(all SimpleSAMLphp source code should be updated, not only this contribution)

SHA-1 is still supported but needs to be configured explicitly if you need it.

By using an appropriate WHERE clause in the SQL statement,
we can avoid loading the whole dataset in getMetaData(),
which brings an welcome performance improvement with large
Metadata sets.

Support both hint.cidr and DiscoHints->IPHint

* Support metadata XML directly in config
Also consider 'xml' as a key, in addition to 'url' and 'file'.
When provided, attempt to load this directly as a metadata XML string.
This is useful when working with dynamic configuration and external polling of metadata updates.

* Test loading XML from a fixed string
No preexisting test in this area
Adjust XML loader to only get global config in file mode - otherwise it is
unused, and it might pollute the test usage.
Test that an actully invalid config throws an exception, but that minimal valid
(albeit useless) XML is accepted.

Now using DiscoHints->IPHint to support specified SAML extension for IdP discovery

Don't bail out if the MDQ cache is broken or the query fails, because
later other metadata sources might provide the metadata for the entity.

Added configuration support for index and isDefault on the generated md:AttributeConsumingService element

Added two metadata configuration options attributes.index and attributes.isDefault to the Service Provider section that outputs to the md:AttributeConsumingService element.
attributes.index overrides the index attribute value with another integer value specified.
attributes.isDefault adds the isDefault attribute with the given boolean value, if the configuration option is specified.

It actually needs a DOMNode, so it has been renamed to isDOMNodeOfType().

Additionally, some superfluous asserts() have been removed, and SimpleSAML\Utils\XML::getDOMChildren() has also changed its signature, as it should also receive a DOMNode, not a DOMElement.

Minor format and exception message fixes, plus add information about the different communication channels we have today.

While parsing the XML metadata file of SP, attributes in AttributeConsumerService marked as required where added multiple time causing duplication of attribute keys in attributes.required section.

Issue a notice when the option is used nonetheless.

Closes: #432

Now we are finally using the 2.x branch of the SAML2 library, which was also migrated to use namespaces. Even though the library provides an autoloader that allows loading the classes with the old names using class aliasing, we need to do the migration in one commit (at least for most part of it). This is due to the way SimpleSAMLphp checks data types, using inheritance to check objects agains abstract or more general classes. Even though class aliasing works, there's no way to replicate those relationships, and type checks that use the old class names will fail because the aliases are virtually new classes that don't inherit from others.

bugfix: Make sure the PDO and Serialize metadata storage handlers return metadata containing the 'entityid' key.

While investigating issue #393, we noticed that these two handlers don't enforce the entity ID of each entity to be set in the 'entityid' key of the metadata array (the Flatfile and XML handlers to enforce this). Since this is the way we propagate the entity ID (code using metadata won't necessarily have access to the key of the metadata array containing the entity ID, or such a thing might not even exist), we need to make sure the entity ID is set inside the array. Otherwise, if the metadata for an entity does not contain it directly, the 'ExpectedIssuer' would be set to null, an error recorded, and authentication would fail as the entity ID of the IdP issuing an assertion would not match.

The hash algorithm to use to calculate signature digests for self metadata was not configurable. Add the 'metadata.sign.algorithm' configuration option to fix that.

This resolves #411.

Move SimpleSAML_Metadata_MetaDataStorageHandlerMDX to SimpleSAML\Metadata\Sources\MDQ, and stop referring to it as MDX elsewhere.