github.com/greenpau/origin_crewjam_saml commits

sp: don’t discard query string in the SSO URL

re #19

269009158e8da193d2def9e34cee60c71d2dd01b authored almost 9 years ago by Ross Kinder <[email protected]>

sp: don’t verify the NameQualifier or SPNameQualifier

It is a coincidence that the name qualifier from testshib matches
the entity ID, but it is not r...

40523dc5cd0d4e0c7e54cf00a3b3c6e99dd191e3 authored almost 9 years ago by Ross Kinder <[email protected]>

middleware: in token, use a []string{} for token values to correctly handle assertion attributes with multiple values

4edeb07f45c91cbf5f74a0549f8760ece355df11 authored almost 9 years ago by Ross Kinder <[email protected]>

sp: make requestID verification mandatory

fixes #15

75ce4a5f1ef1c1e712d7b073288ab5cdaa78a207 authored almost 9 years ago by Ross Kinder <[email protected]>

update docs, fix lint issues

45699cc2b76f1af16af4e7c3e5533f8585b4f9bc authored almost 9 years ago by Ross Kinder <[email protected]>

move the trivial example into it’s own directory so it doesn’t break `go get`

e829398cf814ba6fb404126b5e91fbe81fc947ca authored almost 9 years ago by Ross Kinder <[email protected]>

update read

2986148103fb00f808c58b0978b6120e8cab982b authored almost 9 years ago by Ross Kinder <[email protected]>

add README

d31b64bf4b6f0e848cc8b2ac38e38fc751165c4d authored almost 9 years ago by Ross Kinder <[email protected]>

rename samlmiddleware to samlsp, add convenience functions

e0bf39cb722adce3d7d94b726fb3d6f4acdc1267 authored almost 9 years ago by Ross Kinder <[email protected]>

fix up example.

8fddfa4a92c9de9ab924dc66f25bdd7a0f530994 authored almost 9 years ago by Ross Kinder <[email protected]>

middleware: add a flag to allow IDP initiated requests

In IDP-initiated requests, we do not have a cookie with information about the
pending request.

72821a47dbeeba722f08d72c58e5b747bc511cf1 authored almost 9 years ago by Ross Kinder <[email protected]>

samlidp: add shortcut service

e8246e722c1e25349885a90e2b00cd2a8096ba64 authored almost 9 years ago by Ross Kinder <[email protected]>

samlidp: add REST interface to configure services

fc1ef9fd9ba755f835117850b099236be977a80a authored almost 9 years ago by Ross Kinder <[email protected]>

samlidp: add sessions REST interface

afbbf214af6444b71810d310fd6f87b62bb72a0b authored almost 9 years ago by Ross Kinder <[email protected]>

samlidp: add user REST

d46084fa0fc4361792a2a4b126527f71749a4677 authored almost 9 years ago by Ross Kinder <[email protected]>

samlidp: begin implementation

b194ea98673d73e166984a7e97168e38f560924b authored almost 9 years ago by Ross Kinder <[email protected]>

temporarily remove DefaultSession, UserStore, etc

These functions are not part of an implementation of the SAML spec, so
they don’t belong in the ...

d2e7e43bb00477ead12da37463eccaf704964ee0 authored almost 9 years ago by Ross Kinder <[email protected]>

move metadata into the top level package

7d38a8c0e74d087cfa20712a1c103efc6a3968ae authored almost 9 years ago by Ross Kinder <[email protected]>

move middleware into a sub package

fb0fd8b84f2e0a421925ded087fb5dd5fc84a6bc authored almost 9 years ago by Ross Kinder <[email protected]>

middleware: validate request IDs

This change also makes middleware a little bit more opinionated. For now,
callbacks are removed...

238d74543afce393de14ecd39be315293fae64f1 authored almost 9 years ago by Ross Kinder <[email protected]>

use 160-bits of randomness when generating identifiers as recommended by SAML-CORE 1.3.4

fixes #14

af5cbfb5d3a99c167d2d99bf34613bf4f980b5c9 authored almost 9 years ago by Ross Kinder <[email protected]>

middleware: use a cookie to maintain the desired URL during the auth flow because RelayState is limited to 80 bytes

e9702b476e671c0cf99c6d255715ac826985ff29 authored almost 9 years ago by Ross Kinder <[email protected]>

fix typo (thanks, go vet)

de4a5ef7e56e9c03fdc15ef3420c6e8fc1678084 authored about 9 years ago by Ross Kinder <[email protected]>

schema: export SAML object types

f456fe46fe5411230fc8adba2e6620b8f3d7566b authored about 9 years ago by Ross Kinder <[email protected]>

rename service_provider_schema.go to schema.go

e7d7253021234c027111a6d70349aedf709f7d4d authored about 9 years ago by Ross Kinder <[email protected]>

fix lint errors and add comments

0136de7f2bbb2776cde8c42a2ad8c6b89722c37b authored about 9 years ago by Ross Kinder <[email protected]>

add support for IDP-initiated SAML

fc1619557d7c75527f9b955d51a42ac276a155dc authored about 9 years ago by Ross Kinder <[email protected]>

idp: clean up example app

ff3c05cdf8b49aeea7154ad341f83154a0315fb4 authored about 9 years ago by Ross Kinder <[email protected]>

IDP: refactor and add tests

81146f88d9f346231b1c4043f25c6db918d18db5 authored about 9 years ago by Ross Kinder <[email protected]>

sketch out implementation of identity provider

With this commit IdentityProvider is a (very poorly organized) IDP implementation.

This commit ...

def276fe800ff29aa3f063cb3c77fbfbcc536320 authored about 9 years ago by Ross Kinder <[email protected]>

implement service provider http middleware

fixes #3

ec66a095599b1b9a79e04c40ab12fcdd2153b9b8 authored about 9 years ago by Ross Kinder <[email protected]>

sp: re-enable the Use=“signing” and Use=“encryption” certificates in SP metadata

dfa03836bfa68a8130d5df2c9fc63fe07df9e193 authored about 9 years ago by Ross Kinder <[email protected]>

remove references to logout because it is dumb

ref: issue #4
ref: http://xacmlinfo.org/2013/06/28/how-saml2-single-logout-works/

0e1a6dd1b584dfabed74e7337e6614278f899847 authored about 9 years ago by Ross Kinder <[email protected]>

move metadata into a package, add comments everywhere

SAML is complicated enough without the root
namespace being all polluted. So even if it
results...

0713e370bc86bd86e07a11934cf83dfbcecddb84 authored about 9 years ago by Ross Kinder <[email protected]>

add HTTP-POST service provider binding

c0589315546836a5a8092018c880d6f63e913cbc authored about 9 years ago by Ross Kinder <[email protected]>

fix broken timezone stuff so tests work no matter the timezone

2ca44ec0b9fe96b0cbb152ee22bb1defb9540c08 authored about 9 years ago by Ross Kinder <[email protected]>

add travis

65cb6728dc5bca6d636200905d6be3b65820f527 authored about 9 years ago by Ross Kinder <[email protected]>

add tests for service provider

54acc46841428aa5134d680a7db1af60a42f2682 authored about 9 years ago by Ross Kinder <[email protected]>

initial implementation of Metadata and ServiceProvider

ed15b095b54d0a22d27c905e43c24cdca3211f72 authored about 9 years ago by Ross Kinder <[email protected]>

Ecosyste.ms: OpenCollective

github.com/greenpau/origin_crewjam_saml