summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* ID-WSF 2.0: add a create arg to ↵Benjamin Dauvergne2010-02-172-14/+12
| | | | lasso_soap_envelope_get_sb2_user_interaction_header, add it to public API
* ID-WSF 2.0: fix lots of bad usage of g_strcmp0Benjamin Dauvergne2010-02-173-6/+6
| | | | | | | * lasso/id-wsf-2.0/idwsf2_helper.c lasso/id-wsf-2.0/soap_binding.c lasso/id-wsf/data_service.: add missing check for the return value of strcmp, maybe we need a macro like lasso_strequal.
* Tests: in login_tests_saml2.c, add test for ↵Benjamin Dauvergne2010-02-171-0/+10
| | | | lasso_saml2_assertion_validate_conditions
* in idwsf2_tests.py, merge test case for metadata registering, add test case ↵Benjamin Dauvergne2010-02-171-144/+178
| | | | for failure
* Bindings: parse defines refering to other definesBenjamin Dauvergne2010-02-171-1/+7
| | | | | | * bindings/bindings.py: Allow to build constants using other constants (prefix string), the constant type is retrieved from the prefix existing record.
* in tools.c, add defines to permit import of timegmBenjamin Dauvergne2010-02-171-0/+3
|
* SAML 2.0: make lasso_saml2_assertion_validate_conditions really workBenjamin Dauvergne2010-02-171-2/+2
|
* Core: fix lasso_iso_8601_gmt_to_time_t, use timegm instead of mktimeBenjamin Dauvergne2010-02-171-1/+1
| | | | | | * lasso/xml/tools.c: mktime convert works on local time, we need timegm to work with GMT time.
* ID-WSF 2.0: add strings for Discovery service ActionsBenjamin Dauvergne2010-02-1731-52/+57
|
* ID-WSF 2.0: add serialization code for private properties of LassoIdWsf2ProfileBenjamin Dauvergne2010-02-172-1/+192
|
* ID-WSF 2.0: fix missing initialization of request field in ↵Benjamin Dauvergne2010-02-171-0/+2
| | | | lasso_idwsf2_discovery_validate_md_register
* ID-WSF 2.0 Documentation: update lasso-sections.txt with LassoIdWsf2Profile ↵Benjamin Dauvergne2010-02-171-1/+12
| | | | methods
* ID-WSF 2.0: fix lasso_idwsf2_discovery_add_simple_service_metadataBenjamin Dauvergne2010-02-171-2/+2
| | | | | | * lasso/id-wsf-2.0/discovery.c: options is a string list, and security_mech_ids too, so employ the corresponding macros.
* Core: in utils.h, use a temporary to store reference to freed listBenjamin Dauvergne2010-02-171-3/+4
|
* ID-WSF 2.0: in lasso_idwsf2_discovery_status2rc, check second level status ↵Benjamin Dauvergne2010-02-171-2/+10
| | | | code too
* Website: add a link to the developement version documentationBenjamin Dauvergne2010-02-171-1/+2
|
* Binding python: fix leak in string gettersBenjamin Dauvergne2010-02-151-1/+1
|
* SAML 2.0: fix documentation of lasso_saml2_assertion_validate_conditionsBenjamin Dauvergne2010-02-151-1/+1
|
* Add signature on EPR secur tokenBenjamin Dauvergne2010-02-151-1/+1
|
* Bindings python: udpate id-wsf 2.0 test fileBenjamin Dauvergne2010-02-151-122/+105
| | | | | | * bindings/python/tests/idwsf2_tests.py: Disco Service registering is working, it now needs a bootstrap epr in all case (before registering could be done without signatures).
* ID-WSF 2.0: add signature to Disco produced EPR SAML 2.0 security tokensBenjamin Dauvergne2010-02-151-0/+1
|
* ID-WSF 2.0: in lasso_idwsf2_profile_build_request_msg, properly handle the ↵Benjamin Dauvergne2010-02-151-4/+19
| | | | | | | | | | security token * lasso/id-wsf-2.0/profile.c: security token is a signed assertion by an IdP or a discovery service, we must keep as is, that is with the signature, in order to do that we extract the original xmlNode from the assertion and embed it in the new message using a LassoMiscTextNode.
* ID-WSF 2.0: in lasso_login_idwsf2_get_discovery_bootstrap_epr, better handle ↵Benjamin Dauvergne2010-02-151-7/+11
| | | | | | | | attribute content * lasso/id-wsf-2.0/saml2_login.c: LassoSaml2AttributeValue can contain many children, so traverse them all to find the firs LassoWsAddrEndpointReference among them.
* ID-WSF 2.0: in lasso_login_idwsf2_add_discovery_bootstrap_epr, initialize ID ↵Benjamin Dauvergne2010-02-151-3/+5
| | | | | | | and Issuer property on bootstrap assertion. * lasso/id-wsf-2.0/saml2_login.c: initialization of ID and Issuer properties was missing.
* Core: in lasso_verify_signature, fix conditional about single referenceBenjamin Dauvergne2010-02-151-1/+1
| | | | | * lasso/xml/toosl.c: verify that reference is unique if NO_SINGLE_REFERENCE is disabled.
* SAML 2.0: in saml2_helper.c, better check issuer element and also test the ↵Benjamin Dauvergne2010-02-151-1/+5
| | | | LassoServer object for issuance, lasso_saml2_assertion_get_issuer_provider
* ID-WSF 2.0: in lasso_wsa_endpoint_reference_new_for_idwsf2_service, do not ↵Benjamin Dauvergne2010-02-151-0/+2
| | | | | | | forget to add metadata to epr, fill usage property of token * lasso/id-wsf-2.0/idwsf2_helper.c: add missing initialization code.
* ID-WSF 2.0: fix bad type checking in ↵Benjamin Dauvergne2010-02-151-4/+2
| | | | | | | lasso_wsa_endpoint_reference_get_idwsf2_security_context_for_security_mechanism * lasso/id-wsf-2.0/idwsf2_helper.c: SecurityMechID is a list of strings not LassoMiscTextNode.
* ID-WSF 2.0: fix bad conditionnal in ↵Benjamin Dauvergne2010-02-151-2/+1
| | | | | | | | | | lasso_idwsf2_discovery_process_metadata_register_response_msg * lasso/id-wsf-2.0/discovery.c: fix check in lasso_idwsf2_discovery_process_metadata_register_response_msg fix duplication of service metadatas inside private list of service metadatas.
* in server.c, fix missing loading of public keys in constructorsBenjamin Dauvergne2010-02-151-0/+4
| | | | | | | * lasso/id-ff/server.c: constructor for LassoProvider load public keys but they are not called by LassoServer constructors, so we have to explicitely duplicate calls to lasso_provider_load_public_keys.
* ID-WSF 2.0: moved strings to their own headerBenjamin Dauvergne2010-02-153-859/+938
|
* Add saml2_strings.h to distBenjamin Dauvergne2010-02-121-1/+2
|
* Bindings python: remove default argument if there is parameters without ↵Benjamin Dauvergne2010-02-121-0/+25
| | | | default argument following
* Use defined symbols instead of magic constantsBenjamin Dauvergne2010-02-121-2/+2
|
* Add LASSO_SAML2_FIELD_ENCODINGBenjamin Dauvergne2010-02-121-0/+1
| | | | | * lasso/xml/saml-2.0/saml2_strings.h: add another field name from SAML 2.0 specifications.
* Fix lasso_get_relaystate_from_query, support semi-colon and parameter at ↵Benjamin Dauvergne2010-02-121-7/+22
| | | | | | | | beginning * lasso/xml/tools.c: getting first parameter was broken (query_string does not contain '?' at the beginning) and semi-colon support was missing.
* Documentation: fix typos in saml2_strings.h documentation, add new string ↵Benjamin Dauvergne2010-02-102-11/+38
| | | | symbols to lasso-sections.txt
* SAML 2.0: move SAML 2.0 strings to their own header, add documentationBenjamin Dauvergne2010-02-102-199/+406
| | | | | | | * lasso/xml/strings.h: remove SAML 2.0 strings * lasso/xml/saml-2.0/saml2_strings.h: move them here, document useful ones.
* Documentation: document LsasoSamlp2NameIDPolicyBenjamin Dauvergne2010-02-101-1/+18
|
* Documentation: complete non finished documentation commentsBenjamin Dauvergne2010-02-1023-89/+127
| | | | | | * too much warnings when generating doc, now we can concentrate on undocumented symbols (in lasso/docs/reference/lasso/lasso-undocumented.txt).
* Bindings perl: prevent unused functio warning for array_to_glist_gobjectBenjamin Dauvergne2010-02-101-1/+1
|
* Tests perl: raise number of testsBenjamin Dauvergne2010-02-101-1/+1
|
* Docs: reorder sections in chapter "Lasso Architecture"Benjamin Dauvergne2010-02-101-2/+2
|
* SAML 2.0: separate lasso_saml20_login_process_response_status_and_assertion ↵Benjamin Dauvergne2010-02-101-75/+100
| | | | | | | | into multiple functions * lasso/saml-2.0/login.c: in lasso_saml20_login_process_response_status_and_assertion, extract assertion decryption, and issuer checking into their own function.
* SAML 2.0: when verifying query signature, do not presume order of field and ↵Benjamin Dauvergne2010-02-103-33/+126
| | | | | | | | | | | | | | separator * lasso/xml/tools.c: in lasso_saml2_verify_query_signature, extract needed field and order them appropriately before computing digest, expect ';' as well as '&' as separator. * tests/random_test.c: add non-regression tests for query signature validation. * tests/Makefile.am: make tests link agains static version of liblasso, to get access to private functions.
* SAML 2.0: complete list of field names for SAML 2.0Benjamin Dauvergne2010-02-101-3/+6
|
* Core: in tools.c, enhance urlencoded_to_string to support semu-colon separatorBenjamin Dauvergne2010-02-101-9/+21
|
* SAML 2.0: add helper method lasso_saml2_assertion_get_in_response_toBenjamin Dauvergne2010-02-102-0/+21
| | | | | * lasso/saml-2.0/saml2_helper.c lasso/saml-2.0/saml2_helper.h: add a method to access easily the InResponseTo attribute.
* SAML 2.0: in lasso_saml20_login_process_authn_response_msg always report ↵Benjamin Dauvergne2010-02-101-10/+13
| | | | | | | | signatures errors * lasso/saml-2.0/login.c: - in lasso_saml20_login_process_authn_response_msg keep around all error codes returned by intermediary steps. At the end report the first one.
* SAML 2.0: in lasso_saml20_profile_process_any_response do not stop on ↵Benjamin Dauvergne2010-02-101-9/+31
| | | | | | | | | | missing issuer * lasso/saml-2.0/profile.c: Issuer is not a mandatory element of SAML 2.0 response, but if we do not remember which issuer we sent the request (of if the response is spontaneous) then we will receive a provider not found error when trying to check the message signature.