summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release version 6.3.1v6.3.1Ivan Kanakarakis2020-11-112-1/+7
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #746 from spaceone/apply-binding-status-codeIvan Kanakarakis2020-11-105-15/+22
|\ | | | | | | | | Include status-code in http_info struct Note that, we still need to switch between 302 and 303 depending on the HTTP protocol version (1.1 or newer)
| * Amend test case adjustmentsIvan Kanakarakis2020-11-102-8/+5
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Issue #242: adjust test casesFlorian Best2020-11-103-4/+11
| |
| * Fix #242: make sure status code is always returned in http_info dictFlorian Best2020-11-102-6/+9
|/
* Revert "Fix travis warning"Ivan Kanakarakis2020-11-041-1/+1
| | | | | | | | | | | | | | There seems to be a problem with Travis and the handling of 'skip_cleanup' and 'cleanup'. > Preparing deploy > > Cleaning up git repository with `git stash --all`. If you need build artifacts for > deployment, set `deploy.skip_cleanup: true`. See > https://docs.travis-ci.com/user/deployment#Uploading-Files-and-skip_cleanup. > > Saved working directory and index state WIP on (no branch): ... This reverts commit 239c7a93d649a9dea171102406014a7d5113cf95.
* Merge pull request #742 from johanlundberg/bugfix_registration_policy_noneIvan Kanakarakis2020-11-042-14/+31
|\ | | | | Handle registration_policy None
| * Restructure the registration_info methodIvan Kanakarakis2020-11-041-14/+21
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Use literal list over list-constructorIvan Kanakarakis2020-11-041-1/+1
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Handle registration_policy NoneJohan Lundberg2020-11-042-1/+11
|/
* Fix travis warningIvan Kanakarakis2020-10-301-1/+1
| | | | | | | | ``` jobs.include.deploy: deprecated key skip_cleanup (not supported in dpl v2, use cleanup) ``` Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Release version 6.3.0v6.3.0Ivan Kanakarakis2020-10-302-1/+22
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #729 from johanlundberg/feature_registry_authority_policyIvan Kanakarakis2020-10-3014-471/+633
|\ | | | | | | | | Specify policy configurations based on the registration authority This changeset is backwards compatible, but to get the new features (restrictions based on the registration authority) one needs to properly upgrade, by initializing the Policy object with a metadata store. Usage that involves loading the configuration through the `saml2.config.Config` object get this automatically (this includes, the `saml2.server.Server` (IdP) object and the `saml2.client_base.Base` and `saml2.client.Saml2Client` (SP) objects.)
| * Remove the metadata_construction paramIvan Kanakarakis2020-10-306-35/+51
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Update docsIvan Kanakarakis2020-10-301-22/+31
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Refactor do_subject_confirmation and do_subject for policy infoIvan Kanakarakis2020-10-301-18/+14
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Refactor Policy to check the registration authority for restrictionsIvan Kanakarakis2020-10-304-349/+387
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Move endpoints, metadata, ui_info and name_id_format as common config optionsIvan Kanakarakis2020-10-301-7/+4
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Handle complex configs in the same placeIvan Kanakarakis2020-10-301-0/+9
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Remove unneeded unicode_convert methodIvan Kanakarakis2020-10-301-16/+2
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Handle complex configs in the same placeIvan Kanakarakis2020-10-301-23/+5
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Remove python shebang from configIvan Kanakarakis2020-10-301-5/+0
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Do not keep per service-type attribute converters and metadataIvan Kanakarakis2020-10-302-45/+23
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Policy needs metadata store to lookup registration authority for a SPJohan Lundberg2020-10-301-1/+1
| |
| * Allow registration authorities in policyJohan Lundberg2020-10-303-87/+182
| |
| * Support registration info in mdstoreJohan Lundberg2020-10-302-0/+59
| |
| * Missing ONLY_REQUIREDJohan Lundberg2020-10-301-0/+2
|/
* Improve warning messagesIvan Kanakarakis2020-10-303-9/+8
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Warn and log warning messagesIvan Kanakarakis2020-10-284-10/+27
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Update travis distribution from xenial to bionicIvan Kanakarakis2020-10-281-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #734 from Worteks/sign-logout-responseIvan Kanakarakis2020-10-286-2/+58
|\ | | | | Add logout_responses_signed configuration option to sign logout responses
| * Unit test for logout_responses_signedMaxime Besson2020-10-072-1/+33
| |
| * Document logout_responses_signedMaxime Besson2020-10-071-0/+18
| |
| * Fixes #733: add setting to sign logout responsesMaxime Besson2020-10-073-1/+7
| |
* | Merge pull request #728 from IdentityPython/feature-logout-response-locationIvan Kanakarakis2020-10-289-43/+124
|\ \
| * | Return the ResponseLocation before falling back to Locationfeature-logout-response-locationIvan Kanakarakis2020-10-288-60/+109
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ResponseLocation [Optional] Optionally specifies a different location to which response messages sent as part of the protocol or profile should be sent. The allowable syntax of this URI depends on the protocol binding. The ResponseLocation attribute is used to enable different endpoints to be specified for receiving request and response messages associated with a protocol or profile, not as a means of load-balancing or redundancy (multiple elements of this type can be included for this purpose). When a role contains an element of this type pertaining to a protocol or profile for which only a single type of message (request or response) is applicable, then the ResponseLocation attribute is unused. [E41]If the ResponseLocation attribute is omitted, any response messages associated with a protocol or profile may be assumed to be handled at the URI indicated by the Location attribute. ArtifactResolutionService, SingleSignOnService and NameIDMappingService MUST omit the ResponseLocation attribute. This is enforced here, but metadata with such service declarations and such attributes should not have been part of the metadata store in the first place. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * | Add unit test for #720Maxime Besson2020-10-272-2/+21
| | | | | | | | | | | | | | | making sure that ResponseLocation behaves properly when present and that Location is used in its place when missing
| * | Fixes #720: honor ResponseLocation in metadata when building logout responsesMaxime Besson2020-10-272-4/+17
|/ /
* | Do not out debug logs for example/idp2Ivan Kanakarakis2020-10-261-1/+1
|/ | | | | | The debug logs becomes part of the xml metadata. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix cleaning changes before deploying pre-releasesIvan Kanakarakis2020-10-051-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Do not clean changes before deploying pre-releasesIvan Kanakarakis2020-10-051-0/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Push pre-releases to test.pypi for every push on masterIvan Kanakarakis2020-10-051-6/+22
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Use encodebytes in place of encodestringIvan Kanakarakis2020-10-051-36/+34
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Refactor CI/CD to release new versions when a tag on master is presentIvan Kanakarakis2020-10-051-16/+71
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Release version 6.2.0v6.2.0Ivan Kanakarakis2020-10-052-1/+20
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* The xsd:id attribute value must not start with a numberIvan Kanakarakis2020-10-052-16/+42
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #704 from canderson90/fix-601-default-nameformatIvan Kanakarakis2020-09-294-3/+24
|\ | | | | Set the default attribute NameFormat to NAME_FORMAT_UNSPECIFIED
| * Add explanatory comment for harvest_element_tree usageIvan Kanakarakis2020-09-291-0/+1
| |
| * Ensure IdP configurations still default to NAME_FORMAT_URIChris Anderson2020-08-114-4/+24
| |
| * Set the default attribute NameFormat to NAME_FORMAT_UNSPECIFIED as per ↵Chris Anderson2020-07-241-1/+1
| | | | | | | | section 2.7.3.1 of the spec
View Lorry Controller Status