| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
| |
in api doc
|
| |
|
|
|
|
|
| |
* lasso/id-ff/session.h: add the OFTYPE decorator to the return type of
lasso_session_get_assertions.
|
|
|
|
|
| |
* bindings/java/tests/LoginTest.java: add assertion for the return code
of lasso_logout_process_request_msg.
|
|
|
|
| |
* lasso/id-ff/logout.c (lasso_logout_validate_request): use new macros.
|
|
|
|
|
|
|
| |
* lasso/id-ff/logout.c (lasso_logout_process_request_msg): use the
new allocation macros, add checking of the parsed object type, add
validation of some schema constraints before processing, like
presence of the name identifier.
|
| |
|
|
|
|
|
|
| |
* macros/as-compiler-flags.m4 configure.ac: add a new files of autoconf macro
to check support of warning flags, add needed line in configure.ac to define
variable WARNING_FLAGS, containing only supported flags.
|
|
|
|
|
| |
- lasso/xml/disco_insert_entry.c (lasso_disco_insert_entry_new) :
replace manual g_object_ref with assignment macro.
|
|
|
|
|
| |
- lasso/xml/disco_resource_offering.c (lasso_disco_resource_offering_new)
replace manual g_object_ref with assignment macro.
|
| |
|
|
|
|
|
|
| |
- add new return code LASSO_MESSAGE_FORMAT_XSCHEMA_ERROR
- fix SOAP_FORMAT bizarre if conditional
- remove old comments
|
|
|
|
|
| |
- use new memory macros
- copying nodes instead of stealing nodes
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
* lasso/id-ff/logout.c (lasso_logout_validate_request):
- when signature verification failed in process_request_msg,
do not continue validation of the request, stop immediately and
return the signature status code.
- use utils.h macro for memory allocation handling. Fix potential leak
of the profile->response object.
|
|
|
|
|
|
|
|
|
|
|
| |
- lasso/id-ff/login.c:
- the lasso_login_process_response_msg is used to process SOAP response
to artifact resolution requests. The answer contains an samlp:Response
that can be signed, and each contained assertion MUST be individually
signed.
- lasso/xml/samlp_response.c:
- set keep_xmlnode flag on the class metadatas to help in signature
validations.
|
|
|
|
|
|
|
|
| |
- lasso/id-ff/login.c:
- lasso_login_process_response_status_and_assertion:
- if signature_status is not 0 and an assertion is present, we
validate the signature on this assertion using the
internal API lasso_provider_verify_saml_signature.
|
|
|
|
|
|
|
|
| |
* lasso/errors.h, lasso/errors.c:
- LASSO_LOGIN_ERROR_REFER_TO_UNKNOWN_REQUEST is raised when a
samlp:Response contains an attribute inResponseTo when when no
previous request can be found inside the LassoLogin object or if the
given ID is not the as the one fome the previous request.
|
|
|
|
|
|
| |
* lasso/id-ff/login.c:
when signature validation fails on a message, then return the
signature status as return code. There is a security fix.
|
|
|
|
|
|
|
| |
* lasso/id-ff/provider.c, lasso/id-ff/providerprivate.h:
- (lasso_provider_verify_saml_signature) validate a signed
saml Request, Response or Assertion, using the public key
of the given provider.
|
|
|
|
|
|
|
| |
* lasso/xml/saml_assertion.c: set the keep_original flag of class
LassoSamlAssertion to true, to keep a copy of the original libxml tree
used to initialize eache instance of this object. We will use it to
validate signature on assertions.
|
|
|
|
|
|
|
|
|
|
| |
* lasso/xml/tools.c:
- lasso_saml_constrain_dsigctxt() add constraints following SAML
specifications on XMLDsig signatures to an libxmlsec DSig context.
- lasso_verify_signature() this function given an xmlNode and a key or
a keys manager (for a set of AC or AC chains) validate the
envelopped signature set upon this node. It can be instructed to
follow constraints of the SAML 1.0 specification.
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/errors.h: add error codes for,
- out of memory situation,
- excess of references during validation of signature on SAML
protocols message or assertions,
- an invalid reference during validation of signatures on SAML
protocols message or assertions,
- an mismatch between requested assertion issuer and received
assertion issuer.
|
|
|
|
|
| |
- configure.ac: when testing if bindings have been already generated
with differents settings do not let grep emit warnings.
|
|
|
|
|
|
| |
* lots of files: Explicitely set all field of initialized structures,
in order to remove -Wno-missing-field-initilizers from needed
compiler options when using -Wall -Wextra.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/utils.h: added new macros, renamed others:
- macros handling xmlNode are renamed from _node to _xml_node,
- new macros for assign GList* of specific objects:
- lasso_assign_list_of_gobjects,
- lasso_assign_list_of_strings,
- lasso_assign_new_list_of_gobjects,
- macros for assigning xmlChar string (we need a specific macros
because, we must use xmlFree to release the destination string),
- macros to add string without duping: lasso_list_add_xml_string,
- macros to add anything non-null (no type cast):
lasso_list_add_non_null.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/utils.h:
- add macro lasso_transfer_string and lasso_transfer_gobject,
to transfer ownership of such objects without copying or
their changing reference count. The old containing variable is
NULLed.
- lasso_list_add_gobject,lasso_list_add_new_gobject: test if the added
object is a GObject, if not do not add it and print a warning.
- lasso_check_type_equality: this macro use special builtin functions
only with GCC (typeof and __builtin_types_compatible_p) and do
metaprogramming using anonymous enumeration type to make compile
time assertions. It is used
- add macros to release XPathObject XPathContext, macro constructor to
make reference transfert macros (free dest, nullify dest, copy src
to dest without increasing refcount, nullify src), add a macro to
transfert xpath objects.
|
|
|
|
|
| |
* lasso/utils.h:
similar macro to goto_exit_if_fail but also produce a printed warning.
|
|
|
|
|
| |
* lasso/utils.h:
- lasso_list_add_string, add a copy of a string to a GList
|
|
|
|
|
| |
* lasso/utils.h: remove macros lasso_warn_deprecated, use GCC
attributes and gtkdoc markers instead.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
response
|
|
|
|
|
|
| |
* lasso/id-wsf-2.0/data_service.c, lasso/id-wsf-2.0/discovery.c,
lasso/id-wsf-2.0/profile.c: use assignment macros to maintain proper
reference counting and ownership of object field values.
|
|
|
|
| |
* lasso.pc.in: cflags must contain include directory
|
|
|
|
| |
* lasso/Makefile.am: errors.h.in must be distributed.
|
| |
|
|
|
|
|
| |
- lasso/xml/soap_envelope.c (lasso_soap_envelope_new): fix forgotten
reference count increase when assigning the body.
|
|
|
|
|
| |
- bindings/java/wrapper_top.c: (gobject_to_jobject_and_ref) initialize
local variable.
|
|
|
|
|
| |
- lasso/xml/tools.c: use BIO_new_mem_buf instead of BIO_new_file
if private_key is not an existing file.
|
|
|
|
|
| |
- lasso/id-ff/provider.c,lasso/id-ff/server.c: add missing initialization
of return code variable.
|
| |
|
|
|
|
|
| |
- lasso/id-ff/provider.c, lasso/saml-2.0/provider.c: add critical log
message in each failed loading of metadatas branch cases.
|
|
|
|
|
|
|
| |
- lasso/utils.c, lasso/utils.h:
New internal api lasso_safe_prefix_string that can show any string
taking care of escaping newlines,tabs and non-graphical ou non-ASCII
characters.
|