summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Fix subject-id requirements processingIvan Kanakarakis2023-02-241-1/+1
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* With encryption The ID of each Signature element must be uniqueMahyar Moghimi2023-02-141-1/+1
| | | | | | | | If assertion is gonna be encrypted and the response and the assertion are signed, both signatures will have an ID of `signature1` which leads to an invalid xml because the ids have to be unique. A similar issue has been reported and fixed the same way in server.py with this commit: 4375361939e942c4dd666d3ca4e1159858404bc4
* bugfix: bool(format) is always true. First bugfix using mypy :).Fredrik Thulin2023-02-141-1/+1
|
* Fix initial issues reported by mypy.Fredrik Thulin2023-02-146-13/+17
|
* Update behaviour of subject-id requirements entity attributeIvan Kanakarakis2023-02-142-28/+53
| | | | | | When the subject-id requiment is "any", both the subject-id and pairwise-id should be processsed. Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Merge pull request #894 from REANNZ/fix-ed-extensionsIvan Kanakarakis2023-01-311-0/+55
|\ | | | | Fix: render extensions also for EntityDescriptor and IdPSSODescriptor
| * fix: metadata: process extensions also for aa, aq and pdp descriptorsVlad Mencl2023-01-231-0/+33
| |
| * fix: metadata: process extensions also for idp_sso_descriptorVlad Mencl2023-01-161-0/+11
| |
| * fix: metadata: process extensions also for entity_descriptorVlad Mencl2023-01-161-0/+11
| | | | | | | | | | | | | | While extensions configured for an SP are processed (inside SPSSODescriptor), extensions defined at the EntityDescriptor level were ignored. Render the extensions also on the EntityDescriptor level.
* | Update entity.pyearonesty2023-01-251-1/+5
| |
* | delete_one do not accept just a key as delete previous didJohan Lundberg2023-01-231-6/+3
|/ | | | | change delete_one to delete_many instead of iterating through results deleting all found documents
* collection.remove has been removed in pymongo >=4Johan Lundberg2022-12-231-1/+1
|
* Disable REFEDS Access entity categories for SwamidJohan Lundberg2022-12-231-3/+5
| | | | | Turns out the implementation of no aggregation ECs was not quite what was needed to comply with the policy for these.
* do not add a duplicate attribute request for subject idJohan Lundberg2022-12-091-1/+1
|
* add requested subject id to SPs requested attributesJohan Lundberg2022-12-091-2/+7
|
* add ability to get required subject id as a RequestedAttribute dictJohan Lundberg2022-12-091-0/+37
|
* Update noteIvan Kanakarakis2022-12-071-1/+1
|
* clarify that order is important for all ECsJohan Lundberg2022-12-071-1/+3
|
* allow to specify no aggregation entity categoriesJohan Lundberg2022-12-071-2/+6
| | | | | this will restrict the attributes returned to only the one specified in that exact category
* added missing attribute mailLocalAddress to attribute mapsJohan Lundberg2022-12-072-0/+4
|
* update Swamid entity categories configJohan Lundberg2022-12-071-7/+53
| | | | new config option NO_AGGREGATION
* fix: use resp.name_id instead of resp.assertion.subject.name_id for cases ↵Tangent Chang2022-11-291-1/+1
| | | | that using encrypted-id
* make mongodb code run with more recent pymongoJohan Lundberg2022-11-291-10/+3
| | | | these changes should be compatible with pymongo >=3.5
* Clean up remaining legacy `try: except ImportError:` blocksAarni Koskela2022-11-153-46/+9
|
* Remove Six dependencyAarni Koskela2022-11-155-9/+4
|
* Run flynt -tc + black + isortAarni Koskela2022-11-1517-1008/+1006
|
* Run flynt + black + isortAarni Koskela2022-11-1530-144/+129
|
* Run autoflake --remove-all-unused-imports --ignore-init-module-imports + ↵Aarni Koskela2022-11-1529-53/+0
| | | | black + isort
* Run pyupgrade --py36-plus + black + isortAarni Koskela2022-11-1555-433/+395
|
* logging: write less on INFO levelKristof Bajnok2022-10-258-34/+34
| | | | | | | pysaml2 log messages were too verbose on INFO level to handle them in a production instance, therefore many messages have been redirected to DEBUG level. On the other hand, some error cases also were sending its log on INFO, these have been redirected to WARNING or ERROR level.
* Fix flake8 warningsIvan Kanakarakis2022-10-0132-130/+88
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Format code with black and isortIvan Kanakarakis2022-10-01113-17806/+17937
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* build: Replace version dependency on setuptoolsIvan Kanakarakis2022-10-011-5/+6
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* build: Convert to poetryIvan Kanakarakis2022-10-019-0/+2702
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix extra whitespace in eidas schema datafileIvan Kanakarakis2022-09-231-3/+3
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix signing when logout is requestedIvan Kanakarakis2022-09-231-5/+6
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* When handling logout try each binding from the top levelIvan Kanakarakis2022-09-231-20/+31
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add isMemberOf to the attributemaps file for the basic name-formatIvan Kanakarakis2022-09-221-0/+2
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Accept and forward sign and digest alg information when creating a metadata ↵Ivan Kanakarakis2022-08-121-8/+21
| | | | | | string Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Include eIDAS definitation in the validator - expose saml2.xml.schema:validateIvan Kanakarakis2022-08-102-66/+68
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add schemas for eIDAS extensions, elements and attributesIvan Kanakarakis2022-08-094-0/+310
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add the voPerson v2 attributes mappingsIvan Kanakarakis2022-06-281-21/+55
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add registration_info_typ to get the registration information from ↵Ivan Kanakarakis2022-06-281-2/+24
| | | | | | EntityDescriptor services Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Allow exceptions to directly set the StatusCode in an error responseIvan Kanakarakis2022-06-281-11/+24
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix saml2.mdstore.MetadataStore::sbibmd_scopes as shibmd_scopesIvan Kanakarakis2022-06-211-0/+9
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Add partial supprot for xs:date AttributeValue typeIvan Kanakarakis2022-06-081-0/+7
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fallback to xs:string for AttributeValue xs typesIvan Kanakarakis2022-06-081-4/+8
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Fix authn_class fallback from authn_context_class_ref to authn_context_decl_refIvan Kanakarakis2022-05-271-7/+5
| | | | Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
* Refactor: remove unused codeOmid Raha2022-05-051-1/+0
| | | This statement have no effect.
* Use Request.sender() methodOmid Raha2022-04-271-2/+2
| | | Use `Request.sender()` method in the `Request._do_redirect_sig_check` method
View Lorry Controller Status