summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * Remove validate_output parameter from _run_xmlsecIvan Kanakarakis2019-01-112-23/+6
| | | | | | | | | | | | | | All callers set it to false, but one which calls the validation method itself after the call to _run_xmlsec (which means that validation is done twice). Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Remove configurable exception typeIvan Kanakarakis2019-01-102-22/+12
|/ | | | | | | | _run_xmlsec function allowed to pass the kind of exception that would be raised in case of error. This was parameter was ignored. As such, it is not needed and is removed completely. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Do not hardcode the warning filterIvan Kanakarakis2019-01-073-8/+2
| | | | | | | | | | | | | | | | | | | | The application should control whether warnings should be visible or not. By hardcoding the simplefilter we turn on warnings' visibility for all modules that follow. Removing this allows the application code to decide if warnings should be shown. To enable warnings through the command line pass -Wd to the python interpreter. Quoting the python warnings module documentation[0]: > You can do this from the command-line by passing -Wd to the interpreter (this > is shorthand for -W default). This enables default handling for all warnings, > including those that are ignored by default. To change what action is taken > for encountered warnings you simply change what argument is passed to -W, > e.g. -W error. See the -W flag for more details on what is possible. [0]: https://docs.python.org/2/library/warnings.html#updating-code-for-new-versions-of-python Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #483 from skoranda/mdq_check_signatureIvan Kanakarakis2018-12-112-18/+62
|\ | | | | Enable signature verification for MDQ
| * Reformat paragraph to respect text width limitsIvan Kanakarakis2018-12-111-4/+5
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Fix typo in documentationIvan Kanakarakis2018-12-111-1/+1
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Reformat documented code exampleIvan Kanakarakis2018-12-111-8/+11
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Remove whitespaceIvan Kanakarakis2018-12-112-5/+5
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Fix typo and remove redundant argumentScott Koranda2018-12-051-2/+2
| |
| * Enable signature verification for MDQScott Koranda2018-12-052-13/+53
| | | | | | | | | | | | | | Add functionality to allow configuration of signature verification for metadata obtained using the MDQ protocol. Support is limited to checking the signature of a response containing a single entity and not multiple entities.
* | Remove the python-future module and use sixIvan Kanakarakis2018-12-067-41/+32
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* | Use cgi instead of html moduleIvan Kanakarakis2018-12-061-4/+4
| | | | | | | | | | | | | | The html module is only available for python3. The cgi module provides almost identical functionality and is present for both python2 and python3. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* | Merge pull request #577 from johanlundberg/non_standard_status_codeIvan Kanakarakis2018-12-062-21/+55
|\ \ | |/ |/| Handle non standard response error status codes
| * Rework status_ok structureIvan Kanakarakis2018-12-061-20/+23
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Handle non standard response error status codesJohan Lundberg2018-12-052-3/+34
|/
* Release version 4.6.5v4.6.5Ivan Kanakarakis2018-12-042-1/+10
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #574 from rectalogic/error-statusIvan Kanakarakis2018-12-042-3/+32
|\ | | | | Raise status exception when parsing an error status response
| * Do not swallow response verification exceptions.Andrew Wason2018-11-281-2/+0
| | | | | | Fixes IdentityPython/pysaml2#571
| * Add a test that client raises the proper exception when parsing an error ↵Andrew Wason2018-11-281-1/+32
|/ | | | | status response. This test passes in v4.6.3 but is failing in v4.6.4 due to IdentityPython/pysaml2#571
* Merge pull request #573 from skanct/ck_add_entity_category_support_attributeIvan Kanakarakis2018-11-282-0/+11
|\ | | | | Add metadata attribute for entity_category_support
| * Adds metadata attribute for entity_category_supportChristos Kanellopoulos2018-11-282-0/+11
|/
* Group assurance-certification and entity-categoryIvan Kanakarakis2018-11-271-7/+19
| | | | | | | Assurance-certification and entity-category should be under the same EntityAttributes elements. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add assurance_certification configuration optionIvan Kanakarakis2018-11-263-5/+36
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Use SamlBase::loadd to do_contact_person_infoIvan Kanakarakis2018-11-262-45/+14
| | | | | | | | metadata.do_contact_person_info does not need to reimplement loading of the data given, as this is already implemented and more complete through SamlBase::loadd Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Release version 4.6.4v4.6.4Ivan Kanakarakis2018-11-222-1/+21
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Use short form for markdown headersIvan Kanakarakis2018-11-221-14/+9
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Change changelog format to markdownIvan Kanakarakis2018-11-222-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Pull out sigalg and look it up onceIvan Kanakarakis2018-11-211-2/+3
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Lookup signer only if signing is requestedIvan Kanakarakis2018-11-211-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Pass sign information when calling apply_bindingIvan Kanakarakis2018-11-213-7/+11
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #485 from skoranda/want_assertions_or_response_signedIvan Kanakarakis2018-11-216-5/+260
|\ | | | | Add want_assertions_or_response_signed functionality
| * Remove unused code about only_identity_in_encrypted_assertionIvan Kanakarakis2018-11-211-5/+0
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Group response_is_signed and assertions_are_signed blocksIvan Kanakarakis2018-11-211-24/+20
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Add tests for client signature requirementsScott Koranda2018-11-211-0/+155
| | | | | | | | | | | | Add logic to test client configuration options want_response_signed, want_assertions_signed, and want_assertions_or_response_signed.
| * Add want_assertions_or_response_signed functionalityScott Koranda2018-11-215-5/+114
|/ | | | | | | Add the ability to configure an SP to require either a signed response or signed assertions. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #566 from erakli/idp_example_fixiesIvan Kanakarakis2018-11-203-309/+395
|\ | | | | Fix example IdP and SP to work with python 3
| * Make example sp compatible with python3Ivan Kanakarakis2018-11-201-3/+11
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Make example idp compatible with python3Ivan Kanakarakis2018-11-201-7/+24
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Indent and format codeIvan Kanakarakis2018-11-202-298/+359
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Restore idp.py codeIvan Kanakarakis2018-11-201-53/+21
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * [Need help] Fix IdP example to work with python 3Egor Panfilov2018-11-192-23/+55
|/
* Merge pull request #561 from erakli/fix_response_encodingIvan Kanakarakis2018-11-191-11/+8
|\ | | | | Fix return format of Response._response
| * Encode response message as utf-8Ivan Kanakarakis2018-11-191-4/+1
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Fix return format of Response._responseEgor Panfilov2018-11-191-11/+11
| |
* | Conform to black defaultsIvan Kanakarakis2018-11-191-2/+2
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* | Merge pull request #563 from erakli/fix_response_condition_checkIvan Kanakarakis2018-11-191-2/+5
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix AuthnResponse.condition_ok to not require conditions ## 2.3.3 Element <Assertion> The <Assertion> element is of the `AssertionType` complex type. This type specifies the basic information that is common to all assertions, including the following elements and attributes: ### <Conditions> [Optional] Conditions that MUST be evaluated when assessing the validity of and/or when using the assertion. See _Section 2.5_ for additional information on how to evaluate conditions
| * | Fix AuthnResponse.condition_ok to be not so restrictiveEgor Panfilov2018-11-191-2/+5
| |/ | | | | | | | | As we can see in specs, Conditions are not required, so we should not to check assertion on its existence.
* | Merge pull request #562 from erakli/update_config_factoryIvan Kanakarakis2018-11-191-9/+25
|\ \ | | | | | | Make config_factory to be more universal method
| * | Make config_factory more universal methodEgor Panfilov2018-11-191-9/+25
| |/
* | Merge pull request #565 from erakli/docs_updateIvan Kanakarakis2018-11-192-4/+8
|\ \ | | | | | | Small updates in docs
View Lorry Controller Status