Move SimpleSAML_Auth_Default::initLogoutReturn() to SimpleSAML_Auth_Source and deprecate the former.

Throw an exception instead of doing nothing if the auth source specified is invalid. This mimics the old behaviour.

Add a check in case the authentication authority specified in SimpleSAML_Auth_Default::initLogin() is not valid.

Reimplement the old SimpleSAML_Auth_Default::loginCompleted() as a wrapper of the refactored method in SimpleSAML_Auth_Source, now that the latter is public again.

SimpleSAML_Auth_Source::loginCompleted() needs to be declared public, as it is used as a callback from outside the class.

Deprecate SimpleSAML_Default::logoutCallback() and move it to SimpleSAML_Auth_Source. This also resolves an issue with this callback not being called, since SimpleSAML_Auth_Source::initLogin() was expecting the method to be inside that class.

When building an assertion, the current time should be obtained once, used many, instead of being obtained every time we are using it (that could lead to clock discrepancies between several timestamps in the same assertion). Additionally, if authentication happened in the past (that is, we got a request that is not the one that triggered authentication, and this is pure SSO), we should calculate the value for SessionNotOnOrAfter relative to the start of the session, not the current time. This resolves #244.

Make SQLPersistentNameID more flexible

Added support for the full SCHAC 1.5.0 schema, including new attribute mappings between the old namespace in TERENA and the new urn:schac namespace.

Added missing mappings for schacHomeOrganization[Type]

Source: https://wiki.surfnet.nl/display/surfconextdev/Attributes+in+SURFconext

Refactor SimpleSAML_Auth_State::extractPersistentAuthState() to getPersistentAuthData() to avoid confusions around the behaviour of this method.

The state array should not be modified after extracting (getting) the persistent authentication data. This resolves #247.

Provide config options to allow SQLPersistentNameID to be less conservative about creating entries in the SQL datastore, whilst preserving default behaviour

a

# By Thijs Kinkhorst
# Via Thijs Kinkhorst
* 'master' of github.com:simplesamlphp/simplesamlphp:
  Add more tests for auth proc filters

Deprecate SimpleSAML_Default::initLogin() and move it to SimpleSAML_Auth_Source as a non-static method.