ipsilon.git/ipsilon/providers/saml2/auth.py, branch ticket_25

Mapped Attrs - WIP

2015-03-20T14:57:46+00:00

Assertion AttributeStatements must be non-empty

2015-03-18T21:49:43+00:00

The saml-core-2.0-os specification section 2.7.3 requires
the AttributeStatement element to be non-empty. Shibboleth verifies
this and rejects assertions that do not comply. We gather attributes
into a local dict first before adding them to the AttributeStatement
so the fix is easy. Test if the dict is empty, move the initialization
of the assertion AttributeStatement inside the test so it's
conditional on whether the dict has members.

https://fedorahosted.org/ipsilon/ticket/61

Signed-off-by: John Dennis 
Reviewed-by: Nathan Kinder

Properly handle groups info in SAML provider

2015-03-18T00:38:27+00:00

Also removes internal attributes (any attribute that starts with _

Fixes: https://fedorahosted.org/ipsilon/ticket/71

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Add support for attribute policies in samlidp

2015-02-24T15:37:48+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Prefix userdata hives with _ to avoid conflicts

2015-02-24T15:37:38+00:00

The main userdata dict contains common attributes, but we add
a sepcial groups list and unmapped extras, as well as indicators
like auth_type.
All these additional attributes are now prefixed by a _ character
so that conflicts with legitimate attributes are improbable.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Implement Single Logout Service for SP-initiated logout

2015-02-13T22:51:14+00:00

https://fedorahosted.org/ipsilon/ticket/24

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Fix file permissions and remove shebang's

2014-12-16T15:51:43+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Show login target on the login screen

2014-10-24T16:03:28+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Add attribute mapping for user information

2014-10-24T16:03:18+00:00

When user information is retrieved we map any wellknown data to a
standardized set of names.
A ne InfoMapping class takes cares of helping the info modules to
map the data they retrieve so that providers can find it in wellknown
attribute names for further use.
Mapping of attribute names for diplay purposes is also provided.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Move some exceptions into provider.common

2014-10-24T16:02:20+00:00

These are generically useful and can be rused as they are by other
providers.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk