summaryrefslogtreecommitdiff
path: root/docs
Commit message (Collapse)AuthorAgeFilesLines
* Better document signing_algorithm and digest_algorithmIvan Kanakarakis2020-12-141-2/+12
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Update documentationIvan Kanakarakis2020-12-081-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Configurable signing and digest algpeppelinux2020-11-241-0/+19
|
* Update docsIvan Kanakarakis2020-10-301-22/+31
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Allow registration authorities in policyJohan Lundberg2020-10-301-1/+18
|
* Document logout_responses_signedMaxime Besson2020-10-071-0/+18
|
* Support logging configuration through the python loggerIvan Kanakarakis2020-09-291-9/+49
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Rephrase documentation partsIvan Kanakarakis2020-09-121-29/+43
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Additional DocumentationGiuseppe2020-09-121-11/+97
|
* [Documentation] fixes https://github.com/IdentityPython/pysaml2/issues/710Giuseppe2020-09-121-1/+1
|
* Support arbitrary entity attributesIvan Kanakarakis2020-07-111-0/+23
| | | | | | | | | | | | | | | | | | Introduce new configuration option `entity_attributes` that defines a list of dictionaries each of which represents an <Attribute> element. Each dicrionary has fields for the NameFormat, the Name, the FriendName and a list of strings that are used to create <AttributeValue> elements, each with the string as the text node. "entity_attributes": [ { "name_format": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "name": "urn:oasis:names:tc:SAML:profiles:subject-id:req", # "friendly_name" is not set "values": ["any"], }, ] Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix formatting for docsIvan Kanakarakis2020-07-101-14/+15
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Differentiate between metadata NameIDFormat and AuthnRequest NameIDPolicy FormatIvan Kanakarakis2020-07-101-1/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | The `name_id_format` configuration option is used to define 1. the value of the `<NameIDFormat>` metadata element 2. and the value of the `<NameIDPolicy>` `Format` attribute in an `AuthnRequest` The configuration option to set what the value of `<NameIDFormat>` element is in the metadata should be different from the configuration option to specify what should be requested in an `AuthnRequest` through the `<NameIDPolicy Format="...">` attribute. Introduce a new option (`name_id_policy_format`), or use the same name but scoped in a specific section for metadata and AuthnRequest. On the side of this, pysaml2 defaults to _transient_ as the `<NameIDPolicy Format="...">` attribute value. To omit requesting a value for the `<NameIDPolicy Format="">` attribute the value `"None"` (a string) must be set in the configuration. This is unintuitive. It is better to be explicit and set transient to request a transient NameID, than not setting a value and requesting transient by default. If no value is set, no specific `<NameIDPolicy Format="...">` should be requested. - Refactor the name_id_format usage - Add name_id_policy_format configuration option - Remove the "None" convention value Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Update documentationChris Nelson2020-07-091-1/+13
| | | Mention `additional_cert_files` and the fact that `cert_file` only accepts a single cert and not a chain
* revert new typoDick Visser2020-05-121-1/+1
|
* typoDick Visser2020-05-121-1/+1
|
* Presently means 'going to happen soon'Dick Visser2020-05-121-3/+3
|
* typos and spellingDick Visser2020-05-121-6/+6
|
* Document default value for 'want_response_signed'John Kristensen2020-04-071-0/+2
| | | | | Document the default value for 'want_response_signed' so users don't have to dig through the code to fine it.
* code blockIsaac Hui2020-01-151-1/+1
|
* adding centos 7 install for xmlsec instructionsIsaac Hui2020-01-151-0/+4
|
* Format configuration examplesIvan Kanakarakis2019-12-261-93/+136
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Reformat and rearrange codeIvan Kanakarakis2019-12-261-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Update documentation with mdq freshness_periodNikos Sklikas2019-12-261-0/+9
|
* Extract `PYSAML2_DELETE_TMPFILES` option to config.pyJohn Paraskevopoulos2019-11-261-10/+14
| | | | | | | | | | | | | | | | - Moves parsing PYSAML2_DELETE_TMPFILES option to config.py and uses the value as a Config class property (`delete_tmpfiles`). This attribute is part of the configuration so its place is in the config.py and the corresponding class. This may add the config object dependency to classes/functions that are calling the `make_temp` function, but at the same time keeps a more layered approach since this config option is now processed and set up in the correct layer; that is the Config class and the config module. Scripts that (in)directly use classes that have methods that use the `make_temp` functions were not changed since those methods are not called when these scripts run and they are out of the scripts' scope (that is, the script functionality does not create any temp file). Those scripts are `verify_metadata`, `merge_metadata` and `mdexport`
* Read from env var PYSAML2_DELETE_TMPFILESIvan Kanakarakis2019-11-261-6/+10
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fixed xmlsec temporary files deletions.Giuseppe De Marco2019-11-261-0/+6
| | | | | | | | | | | PYSAML2_KEEP_XMLSEC_TMP replaced with PYSAML2_DELETE_XMLSEC_TMP and this latter is True by default. Unit tests involved: 40 42 50 # this produces six xml temp file probably for handled exceptions in its tests 51
* Fix warnings from docs generationIvan Kanakarakis2019-11-034-29/+32
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #632 from peppelinux/docIvan Kanakarakis2019-09-101-0/+16
|\ | | | | Add Documentation for name_id_format_allow_create and metadata folder
| * name_id_format_allow_create and metadata folderGiuseppe De Marco2019-08-161-0/+16
| |
* | Various typo fixesKalevi Vázquez Tuisku2019-08-254-58/+58
| |
* | Merge pull request #639 from timgates42/feature/fix_simple_typo__allowes__42Ivan Kanakarakis2019-08-231-1/+1
|\ \ | | | | | | Fix simple typo: allowes -> allows
| * | Fix simple typo: allowes -> allowsTim Gates2019-08-231-1/+1
| | |
* | | Fix simple typo: activites -> activitiesTim Gates2019-08-231-1/+1
|/ /
* | Fix IdP example listZehuan Li2019-08-151-0/+1
|/
* Merge pull request #593 from AmbientLighter/patch-2Ivan Kanakarakis2019-05-141-3/+3
|\ | | | | Fix typos: tupel and test_ouput
| * Fix typo: test_ouput to test_outputIvan Kanakarakis2019-05-141-1/+1
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
| * Fix typo: tupel to tupleVictor Mireyev2019-05-141-3/+3
| | | | | | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* | install.rst: complete pytest invocationStavros Ntentos2019-04-121-1/+2
|/
* Reformat paragraph to respect text width limitsIvan Kanakarakis2018-12-111-4/+5
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix typo in documentationIvan Kanakarakis2018-12-111-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Reformat documented code exampleIvan Kanakarakis2018-12-111-8/+11
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Remove whitespaceIvan Kanakarakis2018-12-111-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Enable signature verification for MDQScott Koranda2018-12-051-7/+18
| | | | | | | Add functionality to allow configuration of signature verification for metadata obtained using the MDQ protocol. Support is limited to checking the signature of a response containing a single entity and not multiple entities.
* Add assurance_certification configuration optionIvan Kanakarakis2018-11-261-1/+19
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add want_assertions_or_response_signed functionalityScott Koranda2018-11-211-0/+27
| | | | | | | Add the ability to configure an SP to require either a signed response or signed assertions. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Update docsEgor Panfilov2018-11-191-1/+1
|
* Set the correct version in the docsIvan Kanakarakis2018-07-041-6/+16
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix references to docsIvan Kanakarakis2018-07-041-2/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Move documentation from directory doc to docsIvan Kanakarakis2018-07-0413-0/+1901