summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Update README.rstjkakavas-edit-readmeIoannis Kakavas2017-10-261-1/+1
| | | Updated version in readme so that people who land here are aware that 4.5.0 was released
* Merge branch 'master' of github.com:rohe/pysaml2v4.5.0Roland Hedberg2017-10-111-4/+15
|\
| * Merge pull request #387 from ↵Roland Hedberg2017-10-111-4/+15
| |\ | | | | | | | | | | | | SUNET/ft-swamid-attribute-release-policy-mergebranch SWAMID attribute release policy updates
| | * Update with changes from Hans NordlöfFredrik Thulin2017-02-101-4/+15
| | |
* | | Release 4.5.0Roland Hedberg2017-10-111-1/+1
|/ /
* | Removed unused importRoland Hedberg2017-10-111-1/+1
| |
* | Ordered way to find a local name of an attribute.Roland Hedberg2017-10-112-21/+42
| |
* | Function that can tell you if an attribute is optional or not for a ↵Roland Hedberg2017-10-111-2/+18
| | | | | | | | specified class.
* | Merge pull request #440 from grebinger/masterRoland Hedberg2017-10-111-2/+2
|\ \ | | | | | | Add sign_alg override to logout request handler
| * | Add sign_alg override to logout request handlerGrischa Ebinger2017-08-021-2/+2
| | |
* | | Merge pull request #454 from jkakavas/fix_authnRoland Hedberg2017-10-111-2/+3
|\ \ \ | | | | | | | | Quick fix for the authentication bypass due to optimizations #451
| * | | Quick fix for the authentication bypass due to optimizations #451Ioannis Kakavas2017-09-121-2/+3
| | | |
* | | | Merge pull request #439 from jkakavas/fix_sane_defaultsRoland Hedberg2017-10-116-14/+41
|\ \ \ \ | | | | | | | | | | Ensure signature checking for SAML Responses is enabled by default
| * | | | Fix failing testIoannis Kakavas2017-09-281-1/+1
| | | | |
| * | | | Merge branch 'master' into fix_sane_defaultsRoland Hedberg2017-09-286-27/+52
| |\ \ \ \
| * | | | | Fix whitespaceIoannis Kakavas2017-08-021-1/+1
| | | | | |
| * | | | | refactored based on @c00kiemon5ter commentsIoannis Kakavas2017-08-021-17/+19
| | | | | |
| * | | | | Fix syntaxIoannis Kakavas2017-08-021-2/+2
| | | | | |
| * | | | | Log a warning for insecure configurationsIoannis Kakavas2017-08-021-0/+5
| | | | | |
| * | | | | Allow deployers to override default True parametersIoannis Kakavas2017-08-021-5/+12
| | | | | |
| * | | | | Updated tests to work with new default signing requirementsIoannis Kakavas2017-08-015-4/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Explicitly allow unsigned responses in tests where we do not sign them.
| * | | | | Revert this change as it is not requiredIoannis Kakavas2017-08-011-1/+1
| | | | | |
| * | | | | Ensure signature checking for SAML Responses is enabled by defaultIoannis Kakavas2017-08-012-4/+3
| | |_|/ / | |/| | |
* | | | | Merge pull request #438 from c00kiemon5ter/feature-documentationRoland Hedberg2017-10-111-32/+214
|\ \ \ \ \ | | | | | | | | | | | | Documentation for configuration options
| * | | | | Add documentation for requested_attributes configuration optionivan2017-07-311-0/+46
| | | | | |
| * | | | | Add documentation for sp_type and sp_type_in_metadata configuration optionsivan2017-07-311-0/+36
| | | | | |
| * | | | | Add documentation for hide_assertion_consumer_service configuration optionivan2017-07-311-0/+22
| | | | | |
| * | | | | Add documentation for allow_unsolicited configuration optionivan2017-07-311-0/+15
| | | | | |
| * | | | | Add documentation for force_authn configuration optionivan2017-07-311-0/+15
| | | | | |
| * | | | | Add documentation for want_response_signed configuration optionivan2017-07-311-0/+15
| | | | | |
| * | | | | Add documentation for preferred_binding configuration optionivan2017-07-281-0/+33
| | | | | |
| * | | | | Remove trailing whitespaceivan2017-07-281-32/+32
| |/ / / /
* | | | | Merge pull request #369 from jgehrcke/jp/fix-static-file-handlerRoland Hedberg2017-10-112-8/+11
|\ \ \ \ \ | | | | | | | | | | | | example/sp-wsgi/sp.py: respond with bytes (enhance WSGI compliance)
| * | | | | example/sp-wsgi/sp.py: respond with bytes (enhance WSGI compliance)Jan-Philip Gehrcke2016-10-142-8/+11
| | | | | |
* | | | | | Merge pull request #400 from hpk/masterRoland Hedberg2017-10-113-17/+34
|\ \ \ \ \ \ | | | | | | | | | | | | | | Remove optional dependencies from install_requires
| * \ \ \ \ \ Merge branch 'master' into masterRoland Hedberg2017-10-1138-180/+830
| |\ \ \ \ \ \ | |/ / / / / / |/| | | | | |
* | | | | | | Merge pull request #419 from leifj/satosa-double-parseRoland Hedberg2017-10-111-1/+2
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fix issue with satosa and encrypted assertions
| * | | | | | | fix issue with satosa and encrypted assertionsLeif Johansson2017-05-291-1/+2
| | | | | | | |
* | | | | | | | Merge pull request #437 from c00kiemon5ter/feature-eidas-supportRoland Hedberg2017-10-1113-26/+439
|\ \ \ \ \ \ \ \ | |_|_|_|_|/ / / |/| | | | | | | Add support for eIDAS SAML profile
| * | | | | | | Add eIDAS RequestedAttributes node supportivan2017-10-086-0/+245
| | | | | | | |
| * | | | | | | Add eIDAS SPType node supportivan2017-10-087-2/+106
| | | | | | | |
| * | | | | | | Add eIDAS namespace and attributesivan2017-10-082-24/+88
|/ / / / / / /
* | | | | | | Merge pull request #447 from rhoerbe/rh_issue446Roland Hedberg2017-09-281-5/+9
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | #446 not_before/notonorafter messages more explicit
| * | | | | | | make exception not_before/notonorafter messages more explicit (formatted ↵r2h22017-08-291-5/+9
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | time, slack as different value)
* | | | | | | Merge pull request #462 from skoranda/http_form_post_messageRoland Hedberg2017-09-284-22/+43
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | | Fix for 459 HTTP_POST form nonconforming and shows submit
| * | | | | | Fix for 459 HTTP_POST form nonconforming and shows submitScott Koranda2017-09-234-22/+43
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix for issue 459 "Form used with HTTP_POST binding nonconforming and shows submit button". The fix introduces an HTML5 DOCTYPE declaration and uses noscript tags appropriately to hide the submit button when Javascript is enabled. Modification of tests were necessary because the tests unecessarily relied on the response being a list of strings with the <form> element being the fourth item in the list, in order to unpack the form and pull out the SAMLResponse and relay state for comparison. The new tests do not require the response to be arbitrarily broken up as a list of strings.
* | | | | | Merge pull request #442 from jkakavas/fix_441skoranda2017-08-241-1/+1
|\ \ \ \ \ \ | |/ / / / / |/| | | | | attr might not be in _fro. Resolves #441
| * | | | | attr might not be in _fro. Resolves #441Ioannis Kakavas2017-08-041-1/+1
|/ / / / /
* | | | | Merge pull request #434 from ↵Ivan Kanakarakis2017-07-262-15/+20
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | c00kiemon5ter/feature-hide-assertion-consumer-service Add configuration option to hide assertion consumer service on authn requests This kind of functionality is required for the eIDAS SAML profile that dictates that > eIDAS-Connectors SHOULD NOT provide AssertionConsumerServiceURL.
| * \ \ \ \ Merge branch 'master' into feature-hide-assertion-consumer-serviceIvan Kanakarakis2017-07-269-9/+73
| |\ \ \ \ \ | |/ / / / / |/| | | | |