Skip to content
Snippets Groups Projects
  1. Aug 04, 2015
  2. Jun 08, 2015
  3. May 27, 2015
  4. Apr 21, 2015
  5. Apr 16, 2015
  6. Jul 09, 2014
  7. Sep 13, 2013
  8. Sep 11, 2013
  9. Sep 05, 2013
  10. Jan 30, 2012
  11. Aug 10, 2011
  12. Aug 09, 2010
  13. Jul 13, 2010
  14. Jul 07, 2010
  15. Feb 24, 2010
  16. Feb 15, 2010
    • Olav Morken's avatar
      Disable cookie secure-flag by default. · c4ae073b
      Olav Morken authored
      This patch removes the autodetection of the secure flag for the cookie
      based on whether the user is accessing simpleSAMLphp through https. The
      reason for this is that the user can often access an SP through both
      https and http. If the user starts with http, everything will work, but
      if the user starts with https, the user will get two separate cookies,
      one for https and one for http.
      
      This patch introduces a new configuration option in config.php:
      
          /*
           * Set the secure flag in the cookie.
           *
           * Set this to TRUE if the user only accesses your service
           * through https. If the user can access the service through
           * both http and https, this must be set to FALSE.
           */
          'session.cookie.secure' => FALSE,
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2180 44740490-163a-0410-bde0-09ae8108e29a
      c4ae073b
  17. Dec 02, 2009
  18. Sep 25, 2009
  19. Aug 14, 2009
  20. Jun 06, 2008
  21. May 14, 2008
  22. May 13, 2008
  23. Mar 12, 2008
  24. Jan 30, 2008
  25. Dec 18, 2007
  26. Nov 28, 2007
Loading