Skip to content
Snippets Groups Projects
  1. Apr 16, 2015
  2. Jul 09, 2014
  3. Sep 13, 2013
  4. Sep 11, 2013
  5. Sep 05, 2013
  6. Jan 30, 2012
  7. Aug 10, 2011
  8. Aug 09, 2010
  9. Jul 13, 2010
  10. Jul 07, 2010
  11. Feb 24, 2010
  12. Feb 15, 2010
    • Olav Morken's avatar
      Disable cookie secure-flag by default. · c4ae073b
      Olav Morken authored
      This patch removes the autodetection of the secure flag for the cookie
      based on whether the user is accessing simpleSAMLphp through https. The
      reason for this is that the user can often access an SP through both
      https and http. If the user starts with http, everything will work, but
      if the user starts with https, the user will get two separate cookies,
      one for https and one for http.
      
      This patch introduces a new configuration option in config.php:
      
          /*
           * Set the secure flag in the cookie.
           *
           * Set this to TRUE if the user only accesses your service
           * through https. If the user can access the service through
           * both http and https, this must be set to FALSE.
           */
          'session.cookie.secure' => FALSE,
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2180 44740490-163a-0410-bde0-09ae8108e29a
      c4ae073b
  13. Dec 02, 2009
  14. Sep 25, 2009
  15. Aug 14, 2009
  16. Jun 06, 2008
  17. May 14, 2008
  18. May 13, 2008
  19. Mar 12, 2008
  20. Jan 30, 2008
  21. Dec 18, 2007
  22. Nov 28, 2007
Loading