lajoie [Mon, 13 Sep 2010 14:42:41 +0000 (14:42 +0000)]
Check for null login context on the login.jsp and print an error that the login page can not be directly accessed. - SIDP-411
Also, make it even more clear that the provided login page is an example page
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2949
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 13 Sep 2010 12:59:26 +0000 (12:59 +0000)]
Check to make sure principal is authenticated if they have a login context and are returning to the IdP after having been to the login page but didn't authenticate - SIDP-409
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2948
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Wed, 25 Aug 2010 20:26:19 +0000 (20:26 +0000)]
Shibboleth SSO profile handler sets incorrect protocol string in outbound message context
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2947
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 24 Aug 2010 14:10:07 +0000 (14:10 +0000)]
Fix up config typos and loggin configs
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2946
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 23 Aug 2010 18:17:59 +0000 (18:17 +0000)]
Remove some commented out code
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2945
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 23 Aug 2010 18:17:35 +0000 (18:17 +0000)]
Fix bug where authentication method information was being re-recorded every authentication.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2944
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 23 Aug 2010 13:56:06 +0000 (13:56 +0000)]
Remove use of SLF4j MessageFormatter whose API changes in 1.6
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2943
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 23 Aug 2010 12:37:32 +0000 (12:37 +0000)]
Update 3rd party libs - SIDP-402
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2942
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 17 Aug 2010 00:33:19 +0000 (00:33 +0000)]
Fix bug where previous session login handler was attempted to be used if all authentication methods expired but session was still alive - SIDP-396
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2941
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 16 Aug 2010 13:35:11 +0000 (13:35 +0000)]
Stop using request forwards between authentication engine and profile handler - SIDP-380
Make profile handler responsible for binding/unbinding LoginContext
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2940
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 6 Aug 2010 22:31:51 +0000 (22:31 +0000)]
Deal with case when AuthnRequest does not include a NameIDPolicy - SIDP-400
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2939
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Aug 2010 23:17:03 +0000 (23:17 +0000)]
Declare all namespaces at top, use prefixed names for all elements - SIDP-288
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2938
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Aug 2010 19:15:41 +0000 (19:15 +0000)]
Remove use of events within session manager
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2937
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Aug 2010 10:14:17 +0000 (10:14 +0000)]
Fix NPE in LoginContext when authentication method information has not yet been set - SIDP-392
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2936
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Aug 2010 10:05:30 +0000 (10:05 +0000)]
Clear session indexes when session is destroyed - SIDP-386
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2935
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Aug 2010 08:06:08 +0000 (08:06 +0000)]
Fix up unit test cases - SIDP-397
Update logging configuration files
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2934
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 20 Jun 2010 18:57:34 +0000 (18:57 +0000)]
Fix another NPE dealing with encoding attributes to name identifiers
Remove some nearly duplicate code
Improve logging messages
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2933
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 20 Jun 2010 17:37:44 +0000 (17:37 +0000)]
Fix NPE when no attributes available to be encoded into a name identifier
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2932
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 22:56:25 +0000 (22:56 +0000)]
Use new metadata methods instead of deprecated ones
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2931
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 00:41:40 +0000 (00:41 +0000)]
Use duration notation for assertion lifetime in example config files - SIDP-381
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2930
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 00:38:17 +0000 (00:38 +0000)]
Switch parser pool implementation to one with fewer locks - SIDP-374
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2929
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 00:34:45 +0000 (00:34 +0000)]
decrease verbosity and logging messge of error message logged when a name ID can not be resolved in to a principal - SIDP-382
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2928
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 00:28:48 +0000 (00:28 +0000)]
Cleanup xmlns attributes and add some known namespace decls to the root elements of the config files - SIDP-288
Add eduPersonAssurance attribute to example attribute resolver - SIDP-388
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2927
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 May 2010 00:19:06 +0000 (00:19 +0000)]
fix typo in error msg - SIDP-384
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2926
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Wed, 7 Apr 2010 23:21:51 +0000 (23:21 +0000)]
Implement config wiring changes related to artifact map and JOST-110:
- inject the shibboleth.ParserPool bean into the OpenSAML config, and set on Configuration singleton,
so we are using a single ParserPool everywhere
- remove shibboleth.ParserPool from being injected on shibboleth.ArtifactMap bean, constructor now deprecated.
These changes are optional and non-disruptive, existing configs will continue to work as-is.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2925
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 16 Mar 2010 07:32:25 +0000 (07:32 +0000)]
Support explicitly setting the domain for cookies. - SIDP-369
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2924
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 16 Mar 2010 07:14:41 +0000 (07:14 +0000)]
Properly wrap LoginExceptions as AuthenticationException as documentation says - SIDP-379
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2923
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 16 Mar 2010 07:06:03 +0000 (07:06 +0000)]
Add Servlet filter to cleanup MDC context
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2922
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 4 Mar 2010 14:25:55 +0000 (14:25 +0000)]
Refactor name identifier code, pulling all of the selection process up in to AbstractSAMLProfileHandler
Always populate name qualifiers for name identifiers
Fix type in cache manager ID in internal.xml
Fix encoder type of jpegPhoto attribute in attribute-resolver.xml
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2921
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 26 Feb 2010 13:17:45 +0000 (13:17 +0000)]
Add SPNameQualifier to returned NameIDs if present in request
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2920
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 25 Feb 2010 22:02:03 +0000 (22:02 +0000)]
check that SP participating in affiliation is in fact in the affiliation
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2919
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 25 Feb 2010 18:24:47 +0000 (18:24 +0000)]
Favor UsernamePrincipal when Session.getPrincipalName is called
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2918
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Feb 2010 16:21:50 +0000 (16:21 +0000)]
Fix minor break in login.jsp backward compat when authn errors occur
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2917
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Feb 2010 00:59:28 +0000 (00:59 +0000)]
Expose login exception to login.jsp page in order to allow better message customization - SIDP-368
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2916
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 17 Feb 2010 17:51:17 +0000 (17:51 +0000)]
Add cache manager configuration
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2915
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 11 Feb 2010 17:32:06 +0000 (17:32 +0000)]
Fix schema datatype for duration attribute within schema
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2914
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 11 Feb 2010 16:33:37 +0000 (16:33 +0000)]
Support ISO8601 duration format for login authentication duration - SC-63
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2913
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 11 Feb 2010 14:38:03 +0000 (14:38 +0000)]
Add start time and uptime to status page - SIDP-365
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2912
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 16 Dec 2009 08:32:48 +0000 (08:32 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-355
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2909
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 16 Dec 2009 08:07:17 +0000 (08:07 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-359
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2908
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 16 Dec 2009 08:02:15 +0000 (08:02 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-360
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2907
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 16 Dec 2009 07:58:47 +0000 (07:58 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-362
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2906
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 4 Nov 2009 16:13:03 +0000 (16:13 +0000)]
Update shib common version
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2902
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 28 Oct 2009 05:24:22 +0000 (05:24 +0000)]
Don't trim username and passwords of outer whitespace
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2900
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 27 Oct 2009 05:58:43 +0000 (05:58 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-353
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2899
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 12 Oct 2009 17:06:48 +0000 (17:06 +0000)]
Leave out checkstyle checks during release phase for now
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2897
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 12 Oct 2009 16:58:38 +0000 (16:58 +0000)]
Override VT LDAP version included in shib-common
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2896
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 1 Oct 2009 10:32:52 +0000 (10:32 +0000)]
Fail attribute query request if specific attributes are requested - SIDP-344
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2895
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 28 Sep 2009 07:02:55 +0000 (07:02 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-343
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2894
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 25 Sep 2009 07:01:18 +0000 (07:01 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-350
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2893
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 25 Sep 2009 06:27:18 +0000 (06:27 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-342
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2892
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 24 Sep 2009 11:58:35 +0000 (11:58 +0000)]
Send back a valid authn statement upon successful authn even if attribute resolution fails - SIDP-351
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2891
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 24 Sep 2009 08:18:44 +0000 (08:18 +0000)]
Be sure to remove LoginContext from StorageService after authentication completes - SIDP-249
Bump patch version number
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2890
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 24 Sep 2009 07:01:49 +0000 (07:01 +0000)]
Remove TC config and place it on the wiki to be maintained - SIDP-348
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2889
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Aug 2009 11:21:35 +0000 (11:21 +0000)]
Update projects to Eclipse-3.5, IAM, Checkstyle 5
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2888
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
wnorris [Thu, 27 Aug 2009 00:59:13 +0000 (00:59 +0000)]
add schema information to POM
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2887
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 21 Aug 2009 13:23:22 +0000 (13:23 +0000)]
Include missing installer library
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2885
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 Aug 2009 11:10:51 +0000 (11:10 +0000)]
fix typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2882
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 20 Aug 2009 11:09:31 +0000 (11:09 +0000)]
Don't trim username and password. Apparently some people have spaces as the start of both.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2881
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 19 Aug 2009 14:50:15 +0000 (14:50 +0000)]
Don't pull in two versions of bouncycastle
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2880
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Aug 2009 09:28:48 +0000 (09:28 +0000)]
Fix warning about character encoding during build
Remove unused snapshot repo location
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2879
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 5 Aug 2009 16:43:51 +0000 (16:43 +0000)]
Only allow localhost to access the status page, by default
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2878
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 5 Aug 2009 16:42:39 +0000 (16:42 +0000)]
Fix CCE
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2877
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 5 Aug 2009 12:21:59 +0000 (12:21 +0000)]
Create IP range helper class
Refactor IP address login handler to use IP range helper
Add IP authentication for new status handler
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2876
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 5 Aug 2009 07:52:11 +0000 (07:52 +0000)]
Clean up cookie creation - use version 1, set path to IdP context, use session scoped cookies
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2875
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Tue, 21 Jul 2009 21:39:35 +0000 (21:39 +0000)]
Some refactoring in profile handlers to expose explicit methods for the determination
of whether to sign assertions and responses and to encrypt assertions and name IDs.
Makes code nicer style-wise, and also allows overriding, as in the delegation extension.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2874
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Mon, 20 Jul 2009 23:33:01 +0000 (23:33 +0000)]
Profile handler should use its getProfileId() method to obtain the communication profile ID to use.
Otherwise causes problems for subclassing.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2873
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 17 Jul 2009 06:59:08 +0000 (06:59 +0000)]
fix links
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2872
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 17 Jul 2009 06:58:00 +0000 (06:58 +0000)]
link in some external project's javadocs
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2871
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 17 Jul 2009 06:46:57 +0000 (06:46 +0000)]
Fix up some javadocs
Update release notes reflecting last couple of commits
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2870
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 16 Jul 2009 10:36:38 +0000 (10:36 +0000)]
Fix error page URL
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2869
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Fri, 10 Jul 2009 01:19:24 +0000 (01:19 +0000)]
Fix logging message, not enough format placeholders for the params array.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2868
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Wed, 8 Jul 2009 23:59:40 +0000 (23:59 +0000)]
Refactor inbound message decoder selection into a distinct method (as in r2865 for outbound encoder):
1) consolidate logic and avoid duplication of code
2) check and avoid NPE's if decoder is null due to misconfiguration
3) allow subclasses to override decoder selection mechanism (re: uPortal work)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2867
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 8 Jul 2009 08:22:12 +0000 (08:22 +0000)]
When binding a login context to a cookie also bind it to a request attribute
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2866
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Mon, 6 Jul 2009 18:00:44 +0000 (18:00 +0000)]
Refactor outbound message encoder selection into a distinct method to:
1) consolidate logic and avoid duplication of code
2) check and avoid NPE's if endpoint or binding is null due to misconfiguration
3) allow subclasses to override encoder selection mechanism (re: uPortal work)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2865
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Mon, 6 Jul 2009 05:46:33 +0000 (05:46 +0000)]
Check the inbound SAML message context slot, not the inbound message slot.
This mucks with eventual ECP profile support (e.g. Liberty SSOS).
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2864
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 6 Jul 2009 05:06:58 +0000 (05:06 +0000)]
Parameterize release repository URL
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2863
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Jul 2009 09:29:32 +0000 (09:29 +0000)]
Make user session available via public API, finishes off SIDP-296
Add a few more example information items to login page
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2862
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Jul 2009 05:36:22 +0000 (05:36 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-258
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2861
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 2 Jul 2009 18:32:32 +0000 (18:32 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-281
https://bugs.internet2.edu/jira/browse/SIDP-324
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2860
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 09:23:53 +0000 (09:23 +0000)]
Allow login handler to return an exception and allow that exception to propogate out of the AuthN engine without being rewrapped - SIDP-271
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2859
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:58:10 +0000 (08:58 +0000)]
Forgot to update release notes on last checkin
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2858
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:57:09 +0000 (08:57 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-265
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2857
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:12:35 +0000 (08:12 +0000)]
Add # marks before things that aren't metrics to make it easier for scripts to process output
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2856
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 06:54:43 +0000 (06:54 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-292
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2855
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 06:51:39 +0000 (06:51 +0000)]
Provide flags for retaining public and private user credentials, defaults to false so that they are always discarded
Make UsernamePassword login handler alway retain the password as a private credential - SIDP-135
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2854
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 05:24:20 +0000 (05:24 +0000)]
Initial work on new Status handler - SIDP-324
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2853
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 12:33:58 +0000 (12:33 +0000)]
Fix SIDP-261
Update JCE lib version
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2852
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 11:08:18 +0000 (11:08 +0000)]
Fix https://bugs.internet2.edu/jira/browse/SIDP-322
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2851
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 09:17:26 +0000 (09:17 +0000)]
Decrease log level of message - SIDP-318
Clean up some profile handling code and log messages
Make install script executable
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2850
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 23 Jun 2009 16:51:44 +0000 (16:51 +0000)]
Revert change in rev 2833
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2849
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 18 Jun 2009 05:44:05 +0000 (05:44 +0000)]
Add 2 post-processing methods, so subclasses get a chance to process Assertions and Responses.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2848
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 14 May 2009 20:40:56 +0000 (20:40 +0000)]
SIDP-310: Change default relying-party.xml settings for SAML 2 profiles' encryptNameIds parameter from "conditional" to "never"
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2847
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 7 May 2009 15:19:51 +0000 (15:19 +0000)]
Expose servlet init property to enable storing of password in Subject private credential set.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2846
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 30 Apr 2009 22:48:17 +0000 (22:48 +0000)]
SIDP-306: Remove ClientCertAuth rule from SAML 2 SSO SecurityPolicy in relying-party.xml
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2845
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Tue, 21 Apr 2009 19:38:42 +0000 (19:38 +0000)]
Sync up code broken by recent JOST-28 fix.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2844
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Apr 2009 09:10:55 +0000 (09:10 +0000)]
get rid of really annoying 100 character warning when creating tar files
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2843
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:41:49 +0000 (08:41 +0000)]
fix minor bug that could occur if two null subjects were given by two different login handlers and their results were merged
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2840
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:31:09 +0000 (08:31 +0000)]
Log plan NameID value even if it is encrypted later - SIDP-279
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2839
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:21:50 +0000 (08:21 +0000)]
Update libs for 2.1.3 release - SIDP-291
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2838
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca