Allow to specify which metadata sets to use in metarefresh. Can be configured either per set or per source.

* bug/issue230:
  No data about previous authentication is stored if authentication was not started at the SP (IdP-first flow). That makes the replay protection measures fail, leading to an ugly exception show to the user. Fix that.

  Additionally, give precedence to the RelayState configured in the local metadata, as the one received together with the SAML response may not even be an URL.

  This resolves #230.

add attributes from skolfederation.se/SIS

SimpleSAMLphp no longer requires mcrypt, it will only be needed depending on the configuration, so mark it as optional.

No data about previous authentication is stored if authentication was not started at the SP (IdP-first flow). That makes the replay protection measures fail, leading to an ugly exception show to the user. Fix that.

Additionally, give precedence to the RelayState configured in the local metadata, as the one received together with the SAML response may not even be an URL.

This resolves #230.

Reimplement \SimpleSAML\Utils\Crypto::aesDecrypt() and \SimpleSAML\Utils\Crypto::aesEncrypt() to use openssl instead of mcrypt. This removes the direct dependency on mcrypt and closes #228.

Update config.php

Fix typo (reccomended -> recommended)

$t - not grep-safe, used in 3rd party libs for other things
$template - only used for templates last I checked

Harbinger of things to come...

Move the aes[En|De]crypt() functionality in \SimpleSAML\Utils\Crypto to internal methods where the secret is passed as a parameter. Then we don't need a working configuration to test the functionality.

This reverts commit aec9571d.

Use $metadata array for example IDP and SP metadata

As per https://groups.google.com/forum/#!topic/simplesamlphp/nFXerlX839E

The text was copied from https://code.google.com/p/simplesamlphp/wiki/LostState, corrected some language and added a piece on http/https stemming from the comments on that page.

Fixes #214

Corrected logic in checkSessionCookie

Raise InvalidArgumentException if $retryURL is not a string AND is not null

Support file uploads in metadata converter.

Set PHP session cookie configuation to be true by default.

Remove override.host config variable.

# By Brook Schofield
# Via Brook Schofield (1) and Jaime Pérez Crespo (1)
* 'master' of github.com:simplesamlphp/simplesamlphp:
  Improve the local generation of metadata for attributes.required

Fix the phpdoc for SimpleSAML\Utils\Random::generateID() and add a constant with the length of generated IDs.

This option made it possible to override the configuration per host, but it has never been documented, and it can be replaced with simple PHP code in the configuration.

Closes #2

It's obviously more secure and therefore better as a default.