diff options
author | Rob Crittenden <rcritten@redhat.com> | 2015-05-11 18:14:42 -0400 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2015-05-11 18:14:42 -0400 |
commit | 551456691bcca369308cc8580705f1baa258f9fe (patch) | |
tree | 3ce2b9aa142f9946548fc6175dcc07fa2561ace0 /ipsilon/providers/saml2/auth.py | |
parent | d169919a1ff5a7668c8bb23a45b59011a91132e1 (diff) | |
download | ipsilon.git-551456691bcca369308cc8580705f1baa258f9fe.tar.gz ipsilon.git-551456691bcca369308cc8580705f1baa258f9fe.tar.xz ipsilon.git-551456691bcca369308cc8580705f1baa258f9fe.zip |
Use plugin-specific configuration, better expiration
Use a SAML2 plugin specific option to specify the database uri
for sessions.
Use a much more robust method to find sessions that need
expiration (thanks Patrick).
https://fedorahosted.org/ipsilon/ticket/90
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'ipsilon/providers/saml2/auth.py')
-rw-r--r-- | ipsilon/providers/saml2/auth.py | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/ipsilon/providers/saml2/auth.py b/ipsilon/providers/saml2/auth.py index 495e5a9..c46d604 100644 --- a/ipsilon/providers/saml2/auth.py +++ b/ipsilon/providers/saml2/auth.py @@ -5,7 +5,6 @@ from ipsilon.providers.common import AuthenticationError, InvalidRequest from ipsilon.providers.saml2.provider import ServiceProvider from ipsilon.providers.saml2.provider import InvalidProviderId from ipsilon.providers.saml2.provider import NameIdNotAllowed -from ipsilon.providers.saml2.sessions import SAMLSessionFactory from ipsilon.tools import saml2metadata as metadata from ipsilon.util.policy import Policy from ipsilon.util.user import UserSession @@ -275,7 +274,7 @@ class AuthenticateRequest(ProviderPageBase): self.debug('Assertion: %s' % login.assertion.dump()) - saml_sessions = SAMLSessionFactory() + saml_sessions = self.cfg.idp.sessionfactory lasso_session = lasso.Session() lasso_session.addAssertion(login.remoteProviderId, login.assertion) |