Skip to content
Snippets Groups Projects
  1. Dec 07, 2016
  2. Dec 06, 2016
  3. Dec 05, 2016
  4. Nov 22, 2016
  5. Nov 16, 2016
    • Andy Summers's avatar
      Prepare for version 2.0.1 · 3f107fe8
      Andy Summers authored
      3f107fe8
    • Andy Summers's avatar
      Merge branch 'uwmadison-attr' into 'master' · 584faeab
      Andy Summers authored
      Add UDDS attribute and refactor
      
      Apologies for the large and hard to read PR--it should hopefully make the code more easy to read and navigate.
      
      This PR adds UDDS as an attribute for `UserDetails`, along with a new class, `PreauthUserDetailsProvider`, which is an implementation of `UserDetailsProvider` for UW-Madison login.
      
      Notable changes:
      1. 'HTTP' is now assumed by default. This is the flag that can be passed to `Preauth` constructors for the 'HTTP' versions of attributes. Example: `wiscEduPVI` becomes `HTTP_WISCEDUPVI`.
      2. `UserDetailsProvider` is an abstract class now, not an interface.
      3. Constants used for header keys are much more consistent. Keys for UW-System login no longer have the `FED_` prefix and you will get the correct key for your particular implementation (`FederatedPreauth...` vs. `Preauth`) by using `static::<CONSTANT_NAME>`. *The only exception:* UWMSN and UW-System differ on their name for 'PVI'--UWMSN uses "PVI" and UW-System uses "SPVI", so `PVI` is only a constant in `PreauthUserDetailsProvider` while `FederatedPreauthUserDetailsProvider` has an `SPVI` constant.
      4. *Namespace reorganization*. Rather than lumping everything into the `edu\wisc\doit` namespace, the namespace structure is now much  more like [uw-spring-security](https://git.doit.wisc.edu/adi-ia/uw-spring-security). General classes now exist in the `edu\wisc\doit\uwphps` namespace, with `local` and `preauth` namespaces existing for the local and preauth implementations. This change necessitated the bump to 2.0.0.
      
      Please review: @ahoffmann @weizhong-wang @KJOYNER
      
      See merge request !8
    • Andy Summers's avatar
      Turn off HTTP headers by default · 1e198930
      Andy Summers authored
      1e198930
    • Andy Summers's avatar
      370af8bd
  6. Nov 15, 2016
  7. Jul 27, 2016
    • Andy Summers's avatar
      Merge branch 'test-fix' into 'master' · 661a01b1
      Andy Summers authored
      Fix bug with non-HTTP Shib sessions being valid for HTTP sessions
      
      Previously, the `PreauthUserDetailsProvider` was only checking that a
      valid Shib session existed by looking for the regular or HTTP Shib
      session header. This check is now strengthened by validating the
      correct header exists for the correct instance.
      
      Also renamed and changed some things in the `Preauth` test--it's now called `HTTPPreauthUserDetailsProviderTest` to reflect the fact that it's only testing the HTTP version of `Preauth`. Along those same lines, the test user now uses the HTTP headers and has been renamed to `testuser_http.json`.
      
      Please review: @ahoffmann 
      
      See merge request !7
    • Andy Summers's avatar
      Fix bug with non-HTTP Shib sessions being valid for HTTP sessions · f5aa2687
      Andy Summers authored
      Previously, the `PreauthUserDetailsProvider` was only checking that a
      valid Shib session existed by looking for the regular or HTTP Shib
      session header. This check is now strengthened by validating the
      correct header exists for the correct instance.
      f5aa2687
  8. Jul 25, 2016
  9. Jul 20, 2016
  10. Jul 18, 2016
  11. Jul 15, 2016
  12. Jul 14, 2016
    • Andrew Hoffmann's avatar
      Merge branch 'provider-refactor' into 'master' · 3f428903
      Andrew Hoffmann authored
      Refactor uw-php-security to use 'Provider' classes
      
      After a discussion about the project's design and requirements moving
      forward, it was decided to refactor the project to remove
      `AttributeMapper` classes and have `Provider` classes handle attribute
      mapping as well as user loading. This also adds a third provider,
      `PreauthHTTPUserDetailsProvider`, which can be used in environments
      where Shibboleth attributes are sent as HTTP headers.
      
      Apologies for the big PR!
      
      Please review: @ahoffmann 
      
      See merge request !2
      3f428903
Loading