git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3200 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3199 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3198 44740490-163a-0410-bde0-09ae8108e29a

This patch fixes warnings from query strings like:

    http://.../endpoint.php?foo&bar=test

(Where the parameter "foo" doesn't have a value.)

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3197 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Daniel Tsosie for implementing this!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3196 44740490-163a-0410-bde0-09ae8108e29a

OpenID library updated to commit 9a79bd5, except for lib/Auth/OpenID/Message.php, which introduces a bug with return_to parameter.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3195 44740490-163a-0410-bde0-09ae8108e29a

Instead of always adding the endpoint to the metadata, require
setting a separate option to enable it.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3194 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3193 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3192 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3191 44740490-163a-0410-bde0-09ae8108e29a

Add support for AuthnRequestsSigned and WantAssertionsSigned when generating SSP metadata from a SPSSODescriptor.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3190 44740490-163a-0410-bde0-09ae8108e29a

The issuer of an AuthnResponse is now validated to check if we get the response from the same entity ID we sent the request to.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3189 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3188 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3187 44740490-163a-0410-bde0-09ae8108e29a

Fixed a bug on ArtifactResolutionService introduced by a previous commit on new SHA signatures support.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3186 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3185 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3184 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3183 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3182 44740490-163a-0410-bde0-09ae8108e29a

Support for RSA_SHA256, RSA_SHA384 and RSA_SHA512 in HTTP Redirect binding. Signature algorithm can now be set also in the remote IdP metadata, with more priority than the one specified in hosted SP metadata.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3181 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Dick Visser for implementing it!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3180 44740490-163a-0410-bde0-09ae8108e29a

Thansk to Thijs Kinkhorst for indentifying the problem!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3179 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Thijs Kinkhorst for providing this patch!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3178 44740490-163a-0410-bde0-09ae8108e29a

Thanks to Thijs Kinkhorst for providing this patch!

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3177 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3176 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3173 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3172 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3166 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3165 44740490-163a-0410-bde0-09ae8108e29a

Added support for RSA-SHA256, RSA-SHA384 and RSA-SHA512 signature algorithms. New hosted IdP metadata option 'signature.algorithm' to configure this, defaults to SHA1 for backwards compatibility.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3164 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3163 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3162 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3161 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3160 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3159 44740490-163a-0410-bde0-09ae8108e29a

Since the "about service"-link takes the user away from the IdP, the
user will still have an session on the IdP. This option allows us to
disable that link.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3158 44740490-163a-0410-bde0-09ae8108e29a

When the user reaches the consent page, they are logged in, but there
was no way to log out from that page. This patch attempts to solve that
problem.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3157 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3155 44740490-163a-0410-bde0-09ae8108e29a

Merged into trunk from r3150.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3151 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3148 44740490-163a-0410-bde0-09ae8108e29a