summaryrefslogtreecommitdiffstats
path: root/lasso/xml/saml-2.0
Commit message (Collapse)AuthorAgeFilesLines
* xml/samlp2_logout_request: fix leaks around session indexesBenjamin Dauvergne2014-06-081-2/+14
|
* Fix license boilerplatesSimo Sorce2013-12-03107-214/+107
| | | | | | | Instad of referring to an old FSF address, point the reader to the FSF website where the latest licenses and addresses are published. Signed-off-by: Simo Sorce <simo@redhat.com>
* saml2/profile: fix missing ArtifactResolutionService index in artifactsBenjamin Dauvergne2013-09-081-0/+1
|
* xml-saml-2.0: ManageNameIDRequest must have a NameIDBenjamin Dauvergne2013-01-251-0/+18
|
* xml-saml-2.0: LogoutRequest must have a NameIDBenjamin Dauvergne2013-01-251-0/+8
|
* xml-saml-2.0: add missing namespace declaration for the ↵Benjamin Dauvergne2013-01-251-1/+2
| | | | KeyInfoSujectConfirmationData sub-type
* [xml/saml2] replace magic string by a defineBenjamin Dauvergne2011-12-161-4/+4
|
* Simplify useless complexity in include pathsBenjamin Dauvergne2011-12-164-58/+58
|
* [xml] rewrite schema directed serialization/deserialization methodsBenjamin Dauvergne2011-12-163-60/+66
| | | | | | | | | | | | | | | | | | | | | | | | The new implementations of lasso_node_impl_init_from_xml now validate namespace of all child nodes befores parsing. It stops on any error. For node which implement their own parsing of an attribute or a node, it must declare an XmlSnippet with an offset field set to 0. The 0 value is invalid for public GObject structure (it's the place of the GObject machinery like the reference count). The 0 offset can be used for XmlSnippet in a private structure, so never set the offset to 0 with the flag SNIPPET_PRIVATE, for a field which is parsed by you get_xmlNode virtual method. Other ameliorations in this commit is the possibility to set attributes with namespace when using the flags SNIPPET_ATTRIBUTE|SNIPPET_ANY. The syntax for an attribute is inspired by the element tree API from Python: {namespace}attribute_name an example: {http://www.w3.org/2001/XMLSchema-instance}type for the classic xsi:type attribute.
* [xml] complete missing namespace declarations for child nodesBenjamin Dauvergne2011-12-1616-49/+65
| | | | | | | To allow lasso_node_impl_init_from_xmlnode to do proper namespace checking, child node which are not of the same namespace as their parent in their XSD schema must have an explicit namespace declared in the XmlSnippet.
* [core] move XMLDsig related nodes in their own sub-library, add X509Data ↵Benjamin Dauvergne2011-12-162-2/+2
| | | | | | node implementation The goal is to use the KeyInfo structure as a transport format for our cryptographic keys
* [saml2] add missing extension point for LassoSaml2SubjectConfirmationDataBenjamin Dauvergne2011-11-181-0/+10
| | | | | - it can support any content and any attribute without validation xs:any with processContents="lax"
* [xml saml-2.0] add missing annotation for binding generation to header for ↵Benjamin Dauvergne2011-10-181-1/+1
| | | | LassoKeyInformationDataType
* [xml saml-2.0] add a class to handle the KeyInfoConfirmationData typeBenjamin Dauvergne2011-10-134-0/+254
| | | | | | * use a direct mapping to map this class to SubjectConfirmationData node having the xsi:type attribute. * overload get_xmlNode method to add the xsi:type attribute on output.
* [xml saml-2.0] change AttributeValue snippets to accept any childrenBenjamin Dauvergne2011-10-101-1/+1
| | | | An AttributeValue has an XSchema type of xs:any.
* [Core] replace all use of g_strcmp0 by lasso_strisequal and lasso_strisnotequalBenjamin Dauvergne2010-10-011-4/+4
| | | | | Too much human errors with strcmp kind of functions. Also change name os lasso_is_empty_string to lasso_strisempty.
* [XML] fix memleak in get_xmlNode for LassoSamlp2LogoutRequestBenjamin Dauvergne2010-09-171-0/+1
|
* [XML] fix memleak in get_xmlNode for LassoSamlp2ResponseBenjamin Dauvergne2010-09-171-2/+2
|
* [Core] remove now useless .cvsignore filesBenjamin Dauvergne2010-07-211-7/+0
|
* [SAMLv2] comment on SessionIndex support hackBenjamin Dauvergne2010-07-191-0/+8
|
* [Core] add password parameter to lasso_sign_nodeBenjamin Dauvergne2010-07-161-3/+1
|
* [Core] extract signature adding into base class method lasso_node_get_xmlNodeBenjamin Dauvergne2010-07-123-77/+6
| | | | | | | | | | | | | | | In order to permit subclass to modify the base xmlNode created by lasso_node_impl_get_xmlNode we must defer the concrete to the virtual method wrapper, lasso_node_get_xmlNode. To do that it whas needed to make id_attribute another virtual field of LassoNode subclasses (it can be accessed through an offset registered in the class object). This commit solves signature validation error since the patch for managing more than one SessionIndex element in samlp2:LogoutRequest. It also factorize the creation of signatures in one place.
* [Core] change return type of all error returning methodsBenjamin Dauvergne2010-07-121-1/+1
| | | | | The new return type is lasso_error_t, it should allow to pinpoint easily methods returning an error code in bindings.
* Merge branch 'issue-86'Benjamin Dauvergne2010-06-292-0/+138
|
* Improve safety by replacing all g_list_free use by lasso_release_listBenjamin Dauvergne2010-04-221-2/+1
|
* Improve safety by replacing all g_free use by lasso_releaseBenjamin Dauvergne2010-04-222-2/+2
|
* SAML 2.0&ID-FF 1.2: simplify and complete metadata loading for multi-role ↵Benjamin Dauvergne2010-03-272-1/+8
| | | | support
* SAML 2.0: add attribute profiles stringsBenjamin Dauvergne2010-03-271-0/+7
|
* SAML 2.0 XML: add header listing strings from XML schemaBenjamin Dauvergne2010-03-272-2/+58
|
* XML: move registry mapping into the *_get_type() functionsBenjamin Dauvergne2010-03-022-10/+12
| | | | | | | | | | | | | | * lassoxml/disco_send_single_logout.c: * lassoxml/id-wsf-2.0/sb2_user_interaction_header.c: * lassoxml/id-wsf-2.0/subsref_app_data.c: * lassoxml/lib_assertion.c: * lassoxml/saml-2.0/saml2_condition_abstract.c: * lassoxml/saml-2.0/saml2_encrypted_element.c: * lassoxml/ws/wsa_attributed_uri.c: * lassoxml/ws/wsa_endpoint_reference.c: class_init is only called the first time an object of the given type is created, registry mappings must exist before this time, so I moved the registration code to the _get_type() functions.
* SAML 2.0: LassoSaml2ConditionAbstract does not match its element name ↵Benjamin Dauvergne2010-02-221-0/+3
| | | | | | | | | anymore, add a registry mapping * lasso/xml/saml-2.0/saml2_condition_abstract.c: last commit to this file changed the element name from ConditionAbstract to Condition so the XML parser cannot find the corresponding GObject class anymore.
* SAML 2.0: fix bad name of Condition element, keep xmlNode as it is abstractBenjamin Dauvergne2010-02-221-1/+2
| | | | | | | | * lasso/xml/saml-2.0/saml2_condition_abstract.c: saml2:Condition is an element whose type is abstract, it must be used as an extension point helped by the xsi:type field. As the content is unknown before hand we must keep the original xmlNode for later analysis.
* SAML 2.0: if assertion possess a signed original_xmlnode return it instead ↵Benjamin Dauvergne2010-02-171-1/+18
| | | | | | | | | | | | of using get_xmlNode * lasso/xml/saml-2.0/saml2_assertion.c: assertion in lasso when read are not usable anymore because the signature is lost, this commit allows to keep assertion unaltered after reading them if they contained a top level signature (a signature contained in the Assertion node). This is useful for reusing assertion kept in a LassoSession object and for using assertion as security token for ID-WSF.
* Add saml2_strings.h to distBenjamin Dauvergne2010-02-121-1/+2
|
* Add LASSO_SAML2_FIELD_ENCODINGBenjamin Dauvergne2010-02-121-0/+1
| | | | | * lasso/xml/saml-2.0/saml2_strings.h: add another field name from SAML 2.0 specifications.
* Documentation: fix typos in saml2_strings.h documentation, add new string ↵Benjamin Dauvergne2010-02-101-10/+10
| | | | symbols to lasso-sections.txt
* SAML 2.0: move SAML 2.0 strings to their own header, add documentationBenjamin Dauvergne2010-02-101-0/+403
| | | | | | | * lasso/xml/strings.h: remove SAML 2.0 strings * lasso/xml/saml-2.0/saml2_strings.h: move them here, document useful ones.
* Documentation: document LsasoSamlp2NameIDPolicyBenjamin Dauvergne2010-02-101-1/+18
|
* Use new SAML2 strings instead of hardcoding query string field namesBenjamin Dauvergne2010-02-102-2/+2
|
* SAML 2.0: in samlp2_response.c, simplify code path for assertion encryptionBenjamin Dauvergne2010-02-041-21/+15
|
* in saml2_name_id.c, include utils.h to benefit from replacement for g_strcmp0Benjamin Dauvergne2010-01-201-0/+1
|
* XML SAML-2.0: AuthnContext content is a xdf:choice so make content optionalBenjamin Dauvergne2010-01-191-4/+4
| | | | | | | | | | | | - lasso/xml/saml-2.0/saml2_authn_context.c: <AuthnContext/> can contain at least one node among: - <AuthnContextClassRef/> - <AuthnContextDeclRef/> - <AuthnContextDecl/> to approximate this possibility, we need to make any of them optional. <AuthenticatingAuthority/> should be a list but we cannot change it without breaking the ABI, so we will wait for this.
* Documentation: distribute stylesheet, fix documentation comments, compelte ↵Benjamin Dauvergne2010-01-184-2/+6
| | | | lasso-sections.txt
* FIX ABI breakage when addning new field to struct LassoSaml2AttributeValueBenjamin Dauvergne2010-01-142-3/+0
|
* Core: rewrite lasso_assertion_encrypt using lasso_xmlsect_load_key and add ↵Benjamin Dauvergne2010-01-121-2/+2
| | | | recipient argument
* SAML 2.0: overhaul for ubuquitous binding support, still need work for ↵Benjamin Dauvergne2010-01-122-4/+4
| | | | HTTP-Artefact
* XML: fill node_data->{certificate,private_key}_file_offset for nodes with ↵Benjamin Dauvergne2010-01-123-0/+12
| | | | signatures
* XML: add element type annotation to all GList fieldsBenjamin Dauvergne2010-01-044-6/+6
|
* SAML 2.0 XML: map EncryptedID, EncryptedAssertion, EncryptedAttribute and ↵Benjamin Dauvergne2010-01-041-0/+9
| | | | | | | | | NewEncryptedID element to saml2:EncryptedElement * lasso/xml/saml-2.0/saml2_encrypted_element.c: add registry mapping from EncryptedID, EncryptedAssertion, EncryptedAttribute and NewEncryptedID element to saml2:EncryptedElement
* SAML2: add an equals operator to the NameID classBenjamin Dauvergne2009-10-302-0/+34
| | | | | | | * lasso/xml/saml-2.0/saml2_name_id.c: * lasso/xml/saml-2.0/saml2_name_id.h: add a lasso_saml2_name_id_equals method which return TRUE if two NameId are equal.