ipsilon.git/templates/install, branch test

Add request/response logging via cherrypy tool hooks

2015-01-26T18:34:06+00:00

The ability to easily review the HTTP Ipsilon request and response is
boon for development and issue debugging. Normally these HTTP
conversations occur on SSL/TLS encrypted connections making it
difficult to use other tools to view the traffic. Client side tools
have known pitfalls (e.g. Firebug) and not all conversations are
browser initiated (e.g. SAML ECP). Logging performed by the server
hosting Ipsilon makes logging at the server level server specific
(e.g. Apache's dumpio requires post-processing the log file to extract
and reassamble the HTTP conversation). The best place to log requests
and responses is within Ipsilon using the cherrypy framework
Ipsilon is embedded in. Cherrypy provides user defined hooks that can
be invoked at specific places in the request pipeline. We establish a
hook at the last stage just before the response is written to the
client, it logs the incoming request and outgoing response.

Resolves: https://fedorahosted.org/ipsilon/ticket/44

Signed-off-by: John Dennis 
Reviewed-by: Simo Sorce

Add support for Persona Identity Provider

2014-11-14T18:06:27+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Add simple SqlSession implementation

2014-11-12T22:46:52+00:00

This allows us to store session data in the DB. This way session data can
be shared by multiple servers behind a balancer.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Add test to check a real database (pgsql) works

2014-11-12T22:46:47+00:00

Change config template to e able to set up ipsilon with an extrenal
database.
For the easy install the database server must have 3 datbases configured,
and named exactly: admincondif, userprefs, transactions

If different names are required manual instalation will be necessary.
Database URLs (including credentials) can be set using the new option
named --database-url

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Make the template directory configurable

2014-10-24T16:03:28+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Add transactions db default paths

2014-10-06T17:53:44+00:00

Fixes installation and quickrun

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Use an instance specific session id cookie name

2014-09-24T18:29:26+00:00

Avoids issues if multiple instances are used on the same server

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Confine session to the instance

2014-09-24T18:29:24+00:00

Set session path so that the session is sent only for the specific instance

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Rework remote_login and remove protect decorator

2014-08-27T20:31:57+00:00

The protect decorator was not really being used for anything, remove it.

Change the way UserSession's remote_login() works.
If called now it either sets a REMOTE_USER (if found) or nukes the current
user data in the session.
This means this function can be safely called only in a login plugin now.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Strenghten default Security options in IDP

2014-06-17T18:51:10+00:00

Always deny access to the IDP if not using SSL by default.
Always turn on secure/httponly cookies by default.
Add a switch to disable all security options for testing.

Signed-off-by: Simo Sorce