Skip to content
Snippets Groups Projects
  1. Jan 28, 2011
  2. Jan 26, 2011
  3. Nov 30, 2010
  4. Nov 02, 2010
  5. Oct 21, 2010
  6. Oct 12, 2010
  7. Sep 10, 2010
  8. Aug 09, 2010
  9. Jul 09, 2010
  10. Jul 07, 2010
  11. Feb 15, 2010
    • Olav Morken's avatar
      Disable cookie secure-flag by default. · c4ae073b
      Olav Morken authored
      This patch removes the autodetection of the secure flag for the cookie
      based on whether the user is accessing simpleSAMLphp through https. The
      reason for this is that the user can often access an SP through both
      https and http. If the user starts with http, everything will work, but
      if the user starts with https, the user will get two separate cookies,
      one for https and one for http.
      
      This patch introduces a new configuration option in config.php:
      
          /*
           * Set the secure flag in the cookie.
           *
           * Set this to TRUE if the user only accesses your service
           * through https. If the user can access the service through
           * both http and https, this must be set to FALSE.
           */
          'session.cookie.secure' => FALSE,
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2180 44740490-163a-0410-bde0-09ae8108e29a
      c4ae073b
  12. Feb 14, 2010
  13. Oct 20, 2009
  14. Oct 19, 2009
  15. Oct 13, 2009
  16. Sep 29, 2009
  17. Sep 28, 2009
  18. Sep 21, 2009
  19. Aug 18, 2009
  20. Aug 14, 2009
  21. Aug 12, 2009
  22. Aug 07, 2009
  23. Jul 10, 2009
  24. Mar 17, 2009
  25. Mar 09, 2009
  26. Mar 03, 2009
  27. Feb 25, 2009
  28. Feb 24, 2009
  29. Feb 02, 2009
  30. Jan 11, 2009
  31. Jan 08, 2009
Loading