ipsilon.git/ipsilon/util, branch rowmagic

Add options to explicitly set database uris during install

2015-03-30T18:20:11+00:00

Also offer the option to set the OpenID database URI during install

https://fedorahosted.org/ipsilon/ticket/17

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Set Cache-control on all generated pages, centralize in Endpoint

2015-03-19T20:57:55+00:00

See "Bindings for the OASIS Security Assertion Markup Language (SAML)
V2.0" section 3.2.3.2.

https://fedorahosted.org/ipsilon/ticket/7

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Save user attributes on subsequent calls to login.

2015-03-16T21:18:13+00:00

When a login comes in via the remote_login() call no
user attributes are set. These may be later filled in by
a subsequent call to login() after the info plugins are
called but a short-circuit in that function exits if the
user matches the current session.

Add an extra conditional such that if the user matches,
userattributes are passed in and the current user attributes
for this user is empty then save the new data.

https://fedorahosted.org/ipsilon/ticket/86

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Don't explicitly save sessions

2015-03-12T19:36:33+00:00

Saving a session causes it to be unlocked, but sessions have a
hook that also performs a save just before the session is finalized.
In CherryPy 3.3.0 and later, an assertion was added to ensure that
a session is locked when trying to perform a save.  Since we perform
explicit saves in our code, this causes the assertion to be tripped
when the hook executes.

This patch removes our explicit save calls.  We should rely on the
hook to save and unlock the session.

https://fedorahosted.org/ipsilon/ticket/84

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

Proper fallback from referer to REQUEST_URI

2015-03-12T18:48:11+00:00

If the referer is present but does not contain a transaction ID we still
need to fallback to the REQUEST_URI. Fix the code to check the url and
then fallback to REQUEST_URI rathe than decide upfront merely on the
fact a referer is available.

https://fedorahosted.org/ipsilon/ticket/74

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Find transaction ids for internal redirects

2015-03-06T20:15:31+00:00

On internal redirections, such as when ErrorDocument is used to
redirect on failed negotiate authentication we need to look harder
for the transaction id.

Ticket: #74

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Change root class of Page from Log to Endpoint

2015-02-27T21:05:00+00:00

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Low-level class for managing request endpoints

2015-02-27T21:04:13+00:00

An Endpoint is different from a Page in that it doesn't have menus,
templates, transactions, etc. It is only defines a URL that can be
mounted.

https://fedorahosted.org/ipsilon/ticket/38

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the configparser case sensitive.

2015-02-24T17:58:45+00:00

Per the instructions of
https://docs.python.org/2/library/configparser.html#ConfigParser.RawConfigParser.optionxform

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Make available case insensitive mapping matching

2015-02-24T15:58:25+00:00

If ignore_case is True then the incomping attributes are matched
case-insensitively in the policy engine.
The CAse of the incoming attribute is not changed on wildcard
matches. On ther matches attributes will be replaced according
to the mapping tables and the case used will be that of the
mapped attributes.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk