ipsilon.git/ipsilon/providers, branch non-empty-attrs

Assertion AttributeStatements must be non-empty

2015-03-18T21:14:07+00:00

The saml-core-2.0-os specification section 2.7.3 requires
the AttributeStatement element to be non-empty. Shibboleth verifies
this and rejects assertions that do not comply. We gather attributes
into a local dict first before adding them to the AttributeStatement
so the fix is easy. Test if the dict is empty, move the initialization
of the assertion AttributeStatement inside the test so it's
conditional on whether the dict has members.

Fixes: https://fedorahosted.org/ipsilon/ticket/61
Signed-off-by: John Dennis

Properly handle groups info in SAML provider

2015-03-18T00:38:27+00:00

Also removes internal attributes (any attribute that starts with _

Fixes: https://fedorahosted.org/ipsilon/ticket/71

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Require admin when accessing REST pages

2015-03-03T02:44:38+00:00

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Load and initialize REST in the SAML2 plugin

2015-02-27T21:11:43+00:00

https://fedorahosted.org/ipsilon/ticket/26

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Implement GET and POST REST API for Service Providers

2015-02-27T21:10:51+00:00

The mount point is /idp/rest/providers/saml2/SPS.

GET .../SPS will retrieve all Service Providers
GET .../SPS/foo will retrieve the Service Provider named foo
POST .../SPS/foo will create the Service Provider named foo

https://fedorahosted.org/ipsilon/ticket/26

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add base REST provider framework classes

2015-02-27T21:05:49+00:00

These classes handle mounting the REST plugins.

The starting mount point is: /idp/rest/providers

https://fedorahosted.org/ipsilon/ticket/26

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add uninstallation support.

2015-02-26T20:18:02+00:00

As part of this, made all plugins use a Installer baseclass.

https://fedorahosted.org/ipsilon/ticket/38

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Add support for attribute policies in openidp

2015-02-24T15:58:20+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Add support for attribute policies in samlidp

2015-02-24T15:37:48+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Prefix userdata hives with _ to avoid conflicts

2015-02-24T15:37:38+00:00

The main userdata dict contains common attributes, but we add
a sepcial groups list and unmapped extras, as well as indicators
like auth_type.
All these additional attributes are now prefixed by a _ character
so that conflicts with legitimate attributes are improbable.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk