Skip to content
Snippets Groups Projects
  1. Feb 24, 2010
  2. Feb 15, 2010
    • Olav Morken's avatar
      Disable cookie secure-flag by default. · c4ae073b
      Olav Morken authored
      This patch removes the autodetection of the secure flag for the cookie
      based on whether the user is accessing simpleSAMLphp through https. The
      reason for this is that the user can often access an SP through both
      https and http. If the user starts with http, everything will work, but
      if the user starts with https, the user will get two separate cookies,
      one for https and one for http.
      
      This patch introduces a new configuration option in config.php:
      
          /*
           * Set the secure flag in the cookie.
           *
           * Set this to TRUE if the user only accesses your service
           * through https. If the user can access the service through
           * both http and https, this must be set to FALSE.
           */
          'session.cookie.secure' => FALSE,
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2180 44740490-163a-0410-bde0-09ae8108e29a
      c4ae073b
  3. Dec 02, 2009
  4. Sep 25, 2009
  5. Aug 14, 2009
  6. Jun 06, 2008
  7. May 14, 2008
  8. May 13, 2008
  9. Mar 12, 2008
  10. Jan 30, 2008
  11. Dec 18, 2007
  12. Nov 28, 2007
Loading