summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Use default values for SSL peer and host validation.olavmrk2013-06-071-18/+0
| | | | | | | | | | | | Recent versions of libcurl do not allow CUROPT_SSL_VERIFYHOST to be set to 1. The default in cURL has been to validate both the certificate and the host since 2002. Setting these options is therefore unnecessary. Thanks to Nikola Ivačič for notifying us about this problem! git-svn-id: https://modmellon.googlecode.com/svn/trunk@216 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.7.0.olavmrk2013-05-301-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@214 a716ebb1-153a-0410-b759-cfb97c6a1b53
* NEWS-file for version 0.7.0.olavmrk2013-05-301-1/+8
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@213 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add auth_mellon_compat.h to .tar.gz.olavmrk2013-05-301-0/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@212 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add MellonSetEvnNoPrefix option.olavmrk2013-05-304-10/+71
| | | | | | | | | This option allows you to set environment variables without the "MELLON_" prefix. Thanks to Laas Toom for implementing this! git-svn-id: https://modmellon.googlecode.com/svn/trunk@211 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix typos.olavmrk2013-05-213-23/+23
| | | | | | Thanks to Thijs Kinkhorst for providing this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@210 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Handle empty RelayState the same as missing RelayState.olavmrk2013-05-081-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@209 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Compatibility helpers for Apache 2.4.olavmrk2013-05-083-8/+33
| | | | | | | Thansk to Thijs Kinkhorst for identifying the changes that were necessary! git-svn-id: https://modmellon.googlecode.com/svn/trunk@208 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Move GLib compatibility helpers to a separate file.olavmrk2013-05-083-23/+32
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@207 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix am_urldecode handling of encoded slashes.olavmrk2013-05-081-14/+62
| | | | | | | | | | | | | | Apache has fixed a bug/misfeature where ap_unescape_url_keep2f() decoded %2f-escapes. This leaves us with no functions that can be used to urldecode strings, so we have to roll our own. If we drop support for Apache 2.2, we can use ap_unescape_urlencoded(). See: http://svn.apache.org/viewvc?view=revision&revision=578332 git-svn-id: https://modmellon.googlecode.com/svn/trunk@206 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add MellonSPentityId to control entityId in autogenerated metadatamanu@netbsd.org2013-04-155-3/+29
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@205 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.6.1.olavmrk2013-03-221-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@204 a716ebb1-153a-0410-b759-cfb97c6a1b53
* NEWS file for version 0.6.1olavmrk2013-03-221-0/+9
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@203 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Redirect the user when missing repost data.olavmrk2013-03-221-4/+7
| | | | | | | | | In the case where we are missing the repost data, we currently display a 400 Bad Request error. This patch changes the code to redirect to the end URL instead, which at least has a chance to work. git-svn-id: https://modmellon.googlecode.com/svn/trunk@202 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix repost data expiration.olavmrk2013-03-221-1/+5
| | | | | | | | | | We were mixing microseconds and seconds, causing us to always delete all the repost data. This patch fixes the comparison, and also optimizes it a bit. Thanks to Matthew Slowe for diagnosing this bug! git-svn-id: https://modmellon.googlecode.com/svn/trunk@201 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.6.0.olavmrk2013-03-151-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@199 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update NEWS file.olavmrk2013-03-151-0/+3
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@198 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Revert "Revert "Directly link to GLib.""olavmrk2013-03-152-1/+3
| | | | | | | | I accidentally committed a revert that I had done for debugging. This commit reverts the revert :) git-svn-id: https://modmellon.googlecode.com/svn/trunk@197 a716ebb1-153a-0410-b759-cfb97c6a1b53
* README: Clarify MellonSPMetadataFile option.olavmrk2013-03-151-2/+4
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@196 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Revert "Directly link to GLib."olavmrk2013-03-152-3/+1
| | | | | | This reverts commit ee8e7f205d6c7cecdc56491877de88a361e027e3. git-svn-id: https://modmellon.googlecode.com/svn/trunk@195 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Directly link to GLib.olavmrk2013-03-152-1/+3
| | | | | | | Instead of relying on the Lasso library including GLib for us, we should link directly with it. git-svn-id: https://modmellon.googlecode.com/svn/trunk@194 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add emacs directory settings.olavmrk2013-03-151-0/+2
| | | | | | This sets the default indentation to 4 spaces, and disables tabs. git-svn-id: https://modmellon.googlecode.com/svn/trunk@193 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.6.0-rc1.olavmrk2013-03-061-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@190 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update NEWS file for version 0.6.0.olavmrk2013-03-061-0/+51
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@189 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Remove TODO file.olavmrk2013-03-062-5/+0
| | | | | | This file has been replaced with the issue tracker, so remove it. git-svn-id: https://modmellon.googlecode.com/svn/trunk@188 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Remove debian-directory.olavmrk2013-03-0611-291/+1
| | | | | | The Debian build files will be moving to a separate repository. git-svn-id: https://modmellon.googlecode.com/svn/trunk@187 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Use discovery service with "login" endpoint.olavmrk2013-03-061-4/+16
| | | | | | | | | | | | | Accessing the "login"-endpoint with multiple IdPs configured would bypass the discovery service. This patch changes the behaviour so that we send a discovery service request instead. This breaks backwardscompatibility slightly, but hopefully it should not be a problem. This fixes issue 13: https://code.google.com/p/modmellon/issues/detail?id=13 git-svn-id: https://modmellon.googlecode.com/svn/trunk@186 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix incorrect use of const-keyword in login handler.olavmrk2013-03-061-3/+5
| | | | | | This doesn't fix any bugs, it just makes the code cleaner. git-svn-id: https://modmellon.googlecode.com/svn/trunk@185 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Do not mark a session as logged in before all processing is completed.olavmrk2013-03-061-3/+3
| | | | | | | | | | | If we mark the session as logged in before all processing is completed, a failure during login processing (e.g. too big attribute values) can cause a user to receive a "half-authenticated" session. This patch changes the code so that the last task before releaseing the session is to mark it as logged in. git-svn-id: https://modmellon.googlecode.com/svn/trunk@184 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Avoid locking and unlocking the session multiple times during login.olavmrk2013-03-061-21/+14
| | | | | | | | We currently release the session lock only to grab it again a few instructions later. This patch changes this so that we initialize the session in one operation. git-svn-id: https://modmellon.googlecode.com/svn/trunk@183 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix missing session release in error path during login.olavmrk2013-03-061-0/+1
| | | | | | | | | We had forgotten to release the session object in one of the error paths during login. This could result in us hanging onto the session mutex after the request has finished, this deadlocking the server. This patch fixes that error. git-svn-id: https://modmellon.googlecode.com/svn/trunk@182 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Rename am_generate_session_id() to am_generate_id().olavmrk2013-03-064-18/+19
| | | | | | | | Since this function is used for both generating session IDs and for generating POST data identifiers for POST replay, it should have a generic name. git-svn-id: https://modmellon.googlecode.com/svn/trunk@181 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Handle relative paths in configuration.olavmrk2013-03-061-13/+23
| | | | | | | | | | | This patch changes all configuration options that receive paths to files to convert them to an absolute path. This ensures that relative paths work correctly after the server changes the current working directory during session initialization. Thanks to Jeroen De Ridder for reporting this bug and suggesting a fix! git-svn-id: https://modmellon.googlecode.com/svn/trunk@180 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Document the POST replay functionality.olavmrk2013-03-061-0/+38
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@179 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Disable automatic creation of MellonPostDirectory.olavmrk2013-03-064-80/+27
| | | | | | | | Now that the POST replay functionality has been disabled by default, we can force the administrator to create this directory manually. This saves us from worrying about temp file/directory vulnerabilities. git-svn-id: https://modmellon.googlecode.com/svn/trunk@178 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Disable replay of POST request by default.olavmrk2013-03-064-2/+33
| | | | | | | | | Since we are going to disable autocreation of the POST data directory, we will need to disable POST replay by default. This patch adds the MellonPostReplay option, which can be used to enable and disable the POST replay functionality on a per-location basis. git-svn-id: https://modmellon.googlecode.com/svn/trunk@177 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Change lock file to be stored in /var/run.olavmrk2013-03-062-3/+3
| | | | | | | | | The current code defaults to storing the lock file in /tmp. This patch changes the default to /var/run, which is where such files belong. Note that this lock file is only required on some platforms. git-svn-id: https://modmellon.googlecode.com/svn/trunk@176 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update license to reflect that we are linking to the OpenSSL library.olavmrk2013-03-061-0/+149
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@175 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Remove duplicate endpoint handlers.olavmrk2013-03-061-4/+0
| | | | | | | | The "metadata" and "repost" handlers were tested twice in the endpoint handler. This patch removes the last occurence, since they are never reached. git-svn-id: https://modmellon.googlecode.com/svn/trunk@174 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add Benjamin Dauvergne to contributors section in README.olavmrk2013-03-061-0/+6
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@173 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix SP-initiated logout.olavmrk2013-03-061-0/+1
| | | | | | | | | | | We need to restore the profile state when creating a logout request, so that Lasso has the information it requires for logging out. If we do not do this, every logout "fail" with the log message: User attempted to initiate logout without being loggged in. git-svn-id: https://modmellon.googlecode.com/svn/trunk@172 a716ebb1-153a-0410-b759-cfb97c6a1b53
* add implementation of g_hash_table_get_keys to compile under Centos 5benjamin.dauvergne2012-10-102-2/+24
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@171 a716ebb1-153a-0410-b759-cfb97c6a1b53
* fix indentation in configuration example in READMEbenjamin.dauvergne2012-10-091-26/+26
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@170 a716ebb1-153a-0410-b759-cfb97c6a1b53
* replace all assignment to r->content_type by calls to ap_set_content_typebenjamin.dauvergne2012-10-091-7/+6
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@169 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add configuration directive MellonDoNotVerifyLogoutSignaturebenjamin.dauvergne2012-10-095-3/+75
| | | | | | | This directive allows to list IdP entityID for which the signature of their logout request must not be verified. git-svn-id: https://modmellon.googlecode.com/svn/trunk@168 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add a local logout only possibility when IdP does not support logoutbenjamin.dauvergne2012-10-091-14/+17
| | | | | | | | Handle the case of an IdP not handling SLO as a normal situation, not an internal error, so that the HTTP flow can get back to the ReturnURL without interruption. git-svn-id: https://modmellon.googlecode.com/svn/trunk@167 a716ebb1-153a-0410-b759-cfb97c6a1b53
* rework logout handler to really handle SOAP requestsbenjamin.dauvergne2012-10-091-51/+45
| | | | | | | | | | | | - Change am_restore_lasso_profile_state to take an am_cache_entry_t* as parameter instead of looking at the current session (there is no session when you receive a SOAP request), - Restore the profile state after parsing the Logout request not before, - Always lookup the session through the NameID, as nothing in the spec forbid out-of-browser HTTP-Redirect requests, - Use the new helper function to return the LogoutResponse. git-svn-id: https://modmellon.googlecode.com/svn/trunk@166 a716ebb1-153a-0410-b759-cfb97c6a1b53
* add a new helper function to return SAML responsesbenjamin.dauvergne2012-10-091-0/+38
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@165 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix commit 140: error in the merge statement for authn_context_class_ref ↵benjamin.dauvergne2012-06-281-1/+1
| | | | | | configuration variable git-svn-id: https://modmellon.googlecode.com/svn/trunk@158 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add support for double-quoted cookie values.olavmrk2012-05-141-0/+10
| | | | | | JMeter may apparently use this. git-svn-id: https://modmellon.googlecode.com/svn/trunk@157 a716ebb1-153a-0410-b759-cfb97c6a1b53
generated by cgit (git 2.34.1) at 2024-06-06 15:57:54 +0000