[java-shib-metadata] branch dev/IDP-1757 created (now 9c073d3e5)
Scott Cantor
cantor.2 at osu.edu
Tue Jun 7 13:43:24 UTC 2022
This is an automated email from the git hooks/post-receive script.
scantor pushed a change to branch dev/IDP-1757
in repository java-shib-metadata.
at 9c073d3e5 IDP-1757 Command line tool to emit IdP Metadata
This branch includes the following new commits:
new 3a2fc46bf Initial sharing of project
new f05342145 Initial import
new 1b378b226 Lots of common code
new 1bc731f0f Expose classes and libraries
new 4db0a062c Added missed resolver and filtering interfaces
new 738bdc2aa Couple more common libs
new 1c4ed21fc Add rolling log appender from IdP
new 40c3ebd9c align project and repository names
new b59d72984 added javadoc location for various libraries for easy access from within eclipse (shift-F2)
new 6690dc357 Basic configurator interfaces
new 340005900 initial commit of AttributeDefinition type hierarchy
new 4203bb3f0 type hierarchy for DataConnector and PrincipalConnector
new 39b36763e style and javadoc fixes (aka accommodating Chad's OCD)
new 43bf80fff Change to use Collection instead of list
new 0c73f2624 first run at new Collection implementation for ResolutionPlugIns.
new 6ba4abbea use Set instead of List for attributes argument to AttributeResolver.resolveAttributes()
new b05c24e90 Add checkstyle
new a4b9596e9 Add doc directory to svn:ignore
new fd61a41ef Tweak checkstyle rules slightly. Increase cyclomatic complexity check since the if statements around debug logging count against it.
new 1d535c4fd Add critical logging level
new 8f8227a9f Add code to watch Log4J config files and reload them when they change
new 6a29f6dc1 Some checkstyle cleanups
new 5e795d601 checkstyle fixes
new 5c5374270 added validate method to resolver plug-in interface. (Perhaps this should instead throw a ResolverConfigurationException?)
new eb38c1361 fixed return type
new e29e48470 Object renderer for XMLObjects to assist in logging
new 0ffdf9091 Object renderer for DOM Nodes to assist in logging
new 4e594ec39 Move xml related logging stuff to XMLTooling
new 534220a26 add validate method to resolution plug-in implementations
new 9a5d4f2f2 - modified AttributeResolver to return maps instead of collections
new 48893bf2a added jgrapht to classpath
new dee80700f a few minor renames I forgot
new 26c09c409 - reworked resolution plugin type hierarchy
new f480d091a add validate() to resolver interface
new a30a005da reworked the resolver implementation, moving validation into the resolver itself and cleaning up the resolution methods
new dca1756d4 Add statement creator skeleton
new c878d941e Align project layout and build files
new a26253a97 FIx back package name
new 41884abba remove unused properties
new 39935c190 more methods for programmatic configuration
new a86d54948 base attribute implementation, and first shot at SimpleAttributeDefinition and StaticDataConnector
new 9fa83db7b start of Spring configuration classes.
new beb93e1a5 add base session implementation
new f61c88a00 Update copyright date
new 267ba6bdb Initial interfaces for relying party configurations
new 27464d5dc Add bin/build/dist to top-level svn:ignore.
new 66ecc1e2d Remove old XML configuration interfaces
new cc890dcca Schema for credentials within config files
new 9925fa64e Stubs for credential configuration elements
new 815387c9d Place holder schema for relying party configuration
new 67129289d Initial import of VT LDAP libs.
new f15703e16 Initial import of LDAP data connector.
new a3ad6e9a8 Initial impl
new 8ec2753bc Change to use set for dependency ID. Order is not important but uniqueness is
new e8fbf0bbb Implement ApplicationListener, not SessionListener.
new 8d94c69f8 Integrate new statement creator
new aee17aeaa add logging messages
new 67917b659 Fixed checkstyle errors, except cyclomatic complexity.
new 8f308b4bf Add attribute definition attribute that indicates a definition is only ever to be used as a dependency and never released outside the resolver
new 12b7bee82 respect isDependencyOnly flag for attributes when responding to resolution request.
new 806047013 Add support for locating encoders by category
new 7b437d3ca Add dependcy only attribute to schema
new 89d040f23 Add dependecy only attribute
new 596ac3c5e More informative error message when a parser can not be found for an element
new 530c4f295 utils class for spring configuration.
new 7dda4a742 prevent XMLSchema cos-nonambig error
new f523ce6e9 renamed method to be more consistent and bean-like
new 88a3e5004 spring configuration code for attribute resolver
new 7a97c7e8f add META-INF to the classpath
new d9c807293 ignore other stuff resources folder
new f6b90b9fb Clean up and align project settings
new 2b6310195 Fix credential namespace handler package
new d842ccf7e very basic demonstration of testing spring configurations. (this is still quite ugly -- note the hardcoded xsi:schemaLocation in resolver.xml)
new f202bc655 well at least schema location isn't exactly hardcoded, but it's still not right.
new a2bfbe926 expanded & cleaned up the test resolver test a bit (but had to add absolute path back in)
new 44da2f022 Fixed my poorly coded generics.
new 611722beb Working test case for inline metadata provider
new 6019ed6fc Remove dependency on XML parsing
new 63c20d3fe Fix up library versions and classpath
new 2bf733250 Remove extraneous generics
new 12297f7cc Fix up classes broken by my last checkin
new a008f908a Audit log event object and CSV renderer
new e2e7e4216 save *then* commit
new 70eed247c clean up base resolver schema expecting definition of plugins/encoder via extension (vs. restriction)
new add80c80e Initial relational database data connector schema
new 2cf42d4ea Interfaces and schema for attribute filtering engine
new 64c74afe1 Added static property for encoder category.
new 233b7d2b6 Remove caching interfaces from resolver (individuals connectors need to take care of that)
new 116fea294 Rename StatementCreator and allow plugins to register templates with it
new 041611e3a Needed for Ldap connection pooling.
new f833241c7 Added code to clear cache when necessary for config changes.
new d574f7547 Document resolver, rdbms, and static schemas
new a6432bdf0 Base for Spring configuration unit tests
new da3a35934 Unit tests for metadata provider configs
new 441f23629 More unit tests
new b93ccb3b8 Flesh out some session management interfaces
new 9a1118700 Set reasonable default value for URL request timeout
new dacfc438c move static data connector into provider package
new 7b410d232 Modified to use new TemplateEngine.
new 9e44045e9 Basic implementation of a filter context
new 80937422d Correct typos
new 450778813 Change name to ApplicationManagedConnection from ConnectorManagedConnection
new b60f5d9e8 Add read-only flag
new 15101e45b move static data connector back to impl class
new 2852af504 Add documentation
new be3985b92 basic match functions
new fb27c3c35 update principal connector interface and add abstract base class.
new 4fb8eec80 add unimplemented methods and minor reformatting
new 7287ec544 enforce equality logic for all Attributes & optimize encoder lookup
new 7fd6fb888 data connector now resolves to a map instead of set of attributes. map key is the attribute ID. (this breaks a couple of classes, but I didn't want to touch them in case some additional stuff needed to be done i wasn't aware of)
new e87c2bad1 couple of minor typos
new 9ad9ba2dc implementation of SAML1 & 2 encoders. These handle on string values and do not yet support scoped attributes.
new 2ae85e5a5 data connector now resolves to a map instead of set of attributes.
new 5d98fff66 resolve method signature changed.
new bbb3184d6 Added many more relying party config options.
new 8bdcf4dfe merge saml relying party config into relying party config
new e6214bf11 Add method to retrieve encryption credential to be used for encryption of data to relying party.
new fb01df728 update to use new data connector API. The fix for RDBMSDataConnector should probably be re-examined.
new 97f0fc404 fix base type on static data connector
new ab0ef86db update resolver test to use base test class and new data connector api
new 4ef9166a8 Invert attribute rule structure
new 1a1e011de Add some SAML match functionality
new b1337182f Better prefixes for schema
new cb3f64673 Example of filtering attribute values against SAML information
new edb47f1a2 Flesh out credential information more
new 1e85a4106 Fix inline credential information type
new ac85c62c6 private static String id; are you kidding me? what bloody fool made an internal id static?! oh wait, nevermind. (wow, that wasted a lot of time)
new 99befb344 update attribute resolver configuration code
new 170fb340a first commit of static data connector configuration code
new 9693d935e Interfaces for SAML 1 and 2 attribute authorities that hide all the logic for creating an attribute statement
new ef3dd7a1b First pass as config to map SAML attribute names into internal IDs
new a2351050a Fix min occur on attribute decoder
new efcb82a22 Incorporate Scott's feedback
new 6d69a5db9 Change attribute name attribute to id for consistancy
new 3ded86bfa Attribute query method should throw resolution and filter exceptions.
new ba62bacd5 - lots of spring configuration code for attribute resolver
new 62cbdd4de Attribute filter engine impl
new 826812236 minor bugs revealed through unit testing... finally, a real working resolver.
new 5f8bd393d eliminate need for AttributeFactoryBean
new 77d562aa1 eliminate the need for factory beans for all the resolution plugins
new 0ff5dcf3a use constants for element and attribute names
new 9edc918e6 oopss.. missed schema changes from last night's checkin
new b27f522c9 Use metadata namespace constant in type name construction
new cb84069ba rename attribute resolver namespace handler
new 7843e98c6 Beginning configuration code for the AFP
new 73ec6250e fix enclosing function of merged value filters
new 255bb988f Checkin to prepare for SVN upgrade
new 006f11d0a Update schemas and examples with changes discussed between Nate and I
new fa95a4266 change code to reflect schema changes
new d60afeec7 clean up schemas, correct typo
new 70359ae08 New relying party configuration layout w/ support for SAML 1 and SAML 2 conditions
new c6cf99a38 More filter engine work w/ some config code. Doesn't work yet, have to figure out the best way to track component IDs
new 0830eaa70 Implement component name construction on AFPG bean parser
new 0edc6e38b deprecate javolution
new 09a12b159 deprecate javolution
new a94180d2f return map of attributes from resolver instead of set
new 7a158c6ad fix handling of dependency only attributes
new e42cb4337 more work on configuring resolution plug-ins
new 564240145 more work on configuring resolution plug-ins
new 349d83a96 rename to BasicAttribute since that's what we keep calling it anyway
new 025c2de21 rename attribute encoder implementations
new 3a24ff1da start of schema to define attribute encoder implementations.
new 6973d9e53 updates to encoder schema
new 6a95589e7 return map of attributes from resolver instead of set
new c8e27653e update attribute definition interface to return map of encoders (this is now consistent with the Attribute interface)
new 2ccf13701 more configuration code for attribute encoders and various little fixes. I also updated the naming of a couple of methods on the encoder interfaces for consistency (hope Chad doesn't mind :) ).
new 873b672dc First pass at moving attribute resolver files and making AttributeResolver hide all implementation details
new a0065ba70 Second, and final, file moving for attribute resolver
new 11a8d703d Moved AA from idp to common.
new 87d1e2780 Clean up attribute resolvers to use new create resolution context methods
new 872b62dc1 Lots of refactoring:
new a9ebb38b3 Fix type name
new e84300bb8 Allow attribute authorities without attribute filtering
new 60458fab7 First pass at Attribute Authority command line tool (still untested)
new 92b1218d6 Change some names for consistency
new 7cc584088 fix description of simple attribute definition.
new a61a282af LDAP data connector configuration schema
new 923bc088b change encoder namespace value
new 7670df2f0 use XMLHelper to parse child elements (and fixed a typo)
new dd7930ad5 use XMLHelper to parse child elements (and fixed a typo)
new 73b847ba2 add schema for scoped attribute encoders
new 32ab637de make use of "smart inline scoping" configurable (default: on).
new 67ec82aea hmm... I guess an attribute to carry the actual scope value would help.
new 150814405 fixed namespace in a couple of places (okay, I really think I'm done tweaking this now).
new da8896abc fixed various things after talking with Chad.
new f5cbcbbd7 Stipulate allowed values for a couple string elements
new ff4fb567b add support for scoped attribute definitions.
new 0f1f4d930 Clean up generics for attribute encoders
new 453617ffd guh... save THEN commit
new 688d10948 Use SAML 2 unspecified name format for last resort attribute namespace
new 320afcd81 add sourceAttribute to attribute definitions.
new 5a2ef6e4d Mostly tested and debugged RDBMS data connector
new 4f6c96aea rename attribute for consistency
new 7fb6b2266 most of the scoped attribute encoder code.
new 955add63e fix Generics handling in scoped encoder
new d0b7e9be5 fix bug where, if sourceAttribtueID isn't specified then attribtueID is not used
new 49f3d1c94 add beginning of SAML1 string attribute encoder & add AttributeEncodingException
new 38543dae7 XMLObject for handling scoped values
new a85e4e73f handle "attribute" scopeType in SAML1. (not quite 100% yet)
new 58c8d847f simplify SAML1 scoped encoder. Now, just needs implementation of XMLObjectBuilder for ShibbolethScopedValue types.
new af86eb880 Fix up some encoder schema bugs
new 7b8c9ab48 lots more config stuff for attribute definitions and encoders.
new 02f54222c LDAP data connector configuration code
new e214ddb17 Move to new factory-bean pattern for constructing resolver plugins - not yet tested
new af76f8247 Relational database for testing resolver
new 7392d667d Add missing db column
new 14fa646ee Setup in-memory database to test database data connector against
new 9888e2388 Attribute encoders work much better if you we actually put them on the attributes.
new 7c9e05eaa Minor bug fixes dealing w/ SAML 1 attribute @AttributeNamespace encoding
new fe23d6697 First pass as AA CLI Windows batch script
new d626f8964 Updated ldap libs with GSSAPI support.
new 6c2906417 Add some more logging messages
new d59e5d951 Add some more logging messages
new 29d4e2d32 Minor changes to LDAP connector schema and subsequently configuration
new 4f8a6c272 Fixed bug when checking authtype during bind.
new e3e6b706c Added url and base dn to constructor.
new 780bab984 Synch up fixed up LDAP connector, schema, connector factory, and config parser
new 31f1542c0 Bug fix where baseDN wasn't getting parsed
new b711e90cd Minor bug fixes
new d586e38ae fix up bugs with build and command line tool
new a3a3e47a3 Initalize loggined before OpenSAML
new f4aa64f95 Added interfaces to contain request data for profile handlers.
new dd869685e Scripted attribute definition based on JSR-223. This allows for, currently, about 30 different scripting languages but only javascript is included right now.
new 38f2d938d Create parser pool interface and move current pool to an implementation of this interface. Allows use of older versions of Xerces and Xalan
new de899cbc7 Tested scripted attribute definition with updated Rhino engine
new 44177b0f2 Improved javadocs.
new e9d2070e0 Fill out profile request and response objects more
new 180a66599 remove encoding and decoding related items from request/response objects
new 398fdff34 First bits of relying party configuration
new 28b0dc56c continue support for scoped SAML1 attributes. This will require additional changes to actually work though, specifically to the xmltooling configuration to use this object marshaller.
new a6a5cf4cb Some relying party refactoring.
new a93570d86 Completed, though untested, SAML 1 and SAML 2 profile configuration code.
new e117ec496 Clean up naming a bit.
new a4851a56b ParserPool is an now interface. Initialize a BasicParserPool instead
new 3b36763ea Cleanup profile handler classes/interfaces
new 78b7a8e13 Clean up relying party config code
new 0e8c66d92 flags for whether requests and responses should be signed
new 89a36df4c Add profile exception
new 878d83f3e Added generics to processRequest method params.
new c7468b2bc Fixed typo.
new 7ca481f26 Lots o' profile handler refactoring
new ce5b57651 update schema to reflect changes discussed at member meeting
new f12f42005 Backout change where MatchFunctorType was dropped
new ad66c61de Add implementations for OR, and scope string and regex matching
new 296fa7449 Expose relying party configuration within the attribtue request context
new 1e8c84857 resource capable of loading data from an HTTP(S) URL
new 756ecf5e7 Add ability to reload the configuration of the filtering engine
new ec14550c6 Create base classes for components that contain isolated applications contexts and ones that reload their configurations when they change
new 8c9c68346 Update Spring version
new 229c23e2e Add scripted match function
new 35c7e700e Spring config for filesystem and HTTP resources
new a34477bc8 Basic match functions and configuration code
new dbb2f4820 correct attribute optionality
new fc962d823 Filter policy configuration code
new 2e880f064 Derive resource types from base type
new f144b3a13 Move resource fetching and watching code down into OpenWS
new 52cce7b67 Clean up default logging config
new b208d7429 Log provider ID and authentication method use for service (not all authentications methods) within logging event
new fedb57135 Resource configuration code
new 3a4e6b095 Tested new service component model
new c908f5c8e Move resolver over to reloadable service component, resolver configurations now reloadable
new 58c9f9d9b Method was misspelled.
new ce42c1709 Code for creating access logs
new fb240bc7d Lots of profile request dispatcher work:
new fd945219f Add decryption credential information to SAML relying party configs
new 3ec57e0af Hook metadata provider into relying party config
new 35466dcd2 correct element cardinality constraints
new a89e96f17 Mispelled type.
new 648a3d8c2 Prep scripts for master distribution build script
new d0319ce8e Ensure Spring runs all lifecycle methods after a new context is loaded
new 114e0ea3a Basic AFP testing and bug fixes
new 2f2e1aff2 Remove attributes, when filtering, that contain no values.
new f0d14c105 Add a bit more logging
new ab4346f82 Range should be inclusive.
new 9e35f80ef Add some missing abstract specifiers, and required attribute flags.
new f8b0002cf More work on profile handlers, still have some more refactoring to do
new c27d71d40 Need to qualify local elements.
new a68a4d61f Configuration code for front-side profile error handlers
new 1212b5511 Make relying party configuration manager config reloadable
new 4adc7a4b2 remove outdated configuration code
new 51b2666a6 Spring configuration code for all component services: profile handler, relying party config managers, attribute resolver, and attribtue filtering engine
new ff8336de2 correctly specify schema location URI
new 8ff3dd8c3 default name ID format to transient
new caed2e595 move configuration files into a conf directory (which will be copied onto the filesystem during install)
new 39db9ed97 Initial configuration code for profile handlers
new 4c456bf97 Add addtional config handlers
new ea19587ab correct service ID attribute
new 36a5b1be3 Add attribute to contain resource location
new f7526395d Allow non-named spring components to auto-gen IDs
new af0e27332 Add property for hooking in timer task as constructor argument of reloadable services
new a387b04a3 Order constructor arguments to match parser ordering
new 4b11e8c20 Allow reloadable service properties to be gotten from the bean
new ccf05ab50 Config code to parse ProfileHandlerGroup elements
new 50c84949d Fetch beans from ServletContext instead of via injection.
new 2dcf46372 User getter to fetch profile handler manager
new 373c60bc4 Use correct name for servlet context attribute
new 37dd49b38 Root relying party file configuration parser
new 16824d792 Add some logging
new 7487905bc Bit more logging
new ed8ce646d Redo profile handle class heirarchy to make it cleaner and easier to extend
new 331327912 Fix profile handler type
new 86764fdfa Correct xsi type
new 7b3a2bc09 Some more logging
new c34454a8f Bit better logging message
new 757aa712d Trivial tests for the two trivial match functors
new 2fb25cf9c Further tests of boolean comparators. Bugfix: AND(null) is TRUE
new b96881288 Comments
new c43539ec3 AND(null) == AND(<empty>) == FALSE (Deny by default)
new 4cc481c5f First metadata based attribute filtering test
new 80535b70e Return correct metadata for Requester
new 14ff2d64c More tests from metadata. Code tidy
new d4544c363 Relying party configuration loading bug fixes and unit test
new 35b29b18d Make attribute value scopes per value (instead of per attribute)
new dcded1548 handle null attribute, correctly test for null values and empty value sets.
new c7c86ad69 Fix scoped attribute value toString to return the attribute value
new 7eb0bfddf Lookup attribute if it is non null
new d275a2496 Gracefully being handled the names of non scoped attribute
new 7af8003eb Further tidy. Attribute value and Scoped attribute tests
new 7355c5dbb Synch up with security policy changes
new 5f12bf7c4 Code tidy
new 2db685e87 Prinicipal and and AuthenticateMethod tests
new fa3208f92 Unit test for attribute resolver as service
new 917bef7a4 Synch up testing file names
new fe964e217 Scripting test.
new ec3766343 Hookin security policy with message decoding
new 2681a98e6 Missed checkin for scripting test...
new 79eaa713b Synch up with changes in OpenWS
new a823e5d3d Correct schema type name
new 350bf6e2d Better logging messages when looking up bean definition parsers
new f944425be Correct name of ClasspathResource class
new 617b0cb85 Service definition bug fixes
new 08bd444ef Update spring jars to catch bugfixes
new 06d4ce9b6 Update spring jars
new ea7a5f3cb export new spring libs
new b4851d68b Don't inject trust engine into profile handler. Just let it be injected into the security policy or policy rules
new 9c24c3d03 Initial attribute query test, along with bugfixes, where Issuer is not authenticated
new 377f2e03d Lots of attribute request context clean up and refactoring
new fd0f56692 More SAML attribute query unit test work (and related bug fixes) - Basic query flows seem to work now
new e1b4686b7 Added support for jaas in edu.vt.middleware.ldap.jaas.LdapLoginModule.
new 9161e8457 Lots of attribute authority changes in order to better support translation to/from subject name identifier/principal name
new 40164757c Encoder for SAML 2 NameIDs
new 56c6e4652 Remove name format from relying party configuration object
new ad190620e consolidate attribute resolver schemas
new 20ed1428f minor schema updates
new d0723acee SAML2 NameID encoder
new adb748c33 Add specialization of SAML 1 protocol message security policy rule to handle Shibboleth profile requirements.
new df2f482a0 Remove lats bits of old NameID-based-on-rp-config code
new fe777fa8b Cleanup generic parameterization ServletRequest vs. HttpServletRequest.
new ed2a09c82 Add Shibboleth subclass of client cert auth rule.
new f448bec90 Fix typo.
new a6e667357 Initial rework of authentication code, needs logging and testing
new 43a254367 added regex attribute definition. (needs test cases)
new a7f989f4c add ALL of the files for the regex attribute definition
new 8989b3783 Lots more authentication code cleaning
new d16073c7a Convert manner in which profile handlers work
new 89f9adcbf Fix some typos
new 91e06f1ee More work on authentication handlers; should be complete now except for testing
new cc08a6972 Fix mistake in handling SAML 1.x AttributeQuery/@Resource for Shibboleth profile.
new 62e778cfe Add XMLUnit to build libs. Need for reusing base SAML security policy rule test, as well as for testing XMLObject
new 3a1d4ca2c Unit test for Shib SAML 1.x profile handling of Request AttributeQuery Resource as issuer entity ID.
new 2d81fddb3 Use default renderer in toString to allow people who don't install renderers to at least get a basic CSV format
new 06a962a37 Hook in SAML 1 goodness
new b6a31eef2 Bug fixing - round two... now with working shib SSO
new 4d51dec32 add spring configuration logging, try to standardize some variable names
new 077a3482b attach javadoc locations for libraries
new ed244a159 add missing targetNamespace
new 78a893e19 revert last commit
new 8f55fbcf7 Push HttpHelper down into common
new c98245e63 SAML1 name identifier encoder
new dbb8c5acc Moving Shibboleth constants down to java-shib-common. Seems to more naturally belong there,
new 6a08fa357 Add Shibboleth SAML metadata extension schema.
new 315e322fb Add base class support for testing object providers.
new a7afc138f Object provider interfaces and impls for Shib SAML metadata extensions.
new 6b983f422 Allow null attribute query when constructing attribute resolution request contexts
new 2c72024c5 Attribute definitions that expose Principal name and authentication method as resolved attributes
new e60e6da71 Clean up resolver and filter engine logic to make it more effecient
new 5e360262b Fix bug where incorrect definitions were instantiated
new 643c5fc45 Allow for explicit override of subject locality information
new 99c6a2305 spring config for SAML-based match functors
new 5a01e5294 oops.. minor copy and paste errors.
new 4352ac4ae replace Regex attr def with Mapped attr def ...(step 1 of many)
new e610e6bf7 Remove concept of "category" from attribute encoders.
new 6228d99fc Allow for entity not being in metadata
new e5844811d add DefaultValue for Mapped attr def
new 46f3a2963 documentation for MappedAD schema
new afa0d2c41 Properly set subject locality
new e3ffc0e71 Extract information from decoders and store in requests context instead of store the entire decoder object graph
new 5c34e2732 Stop using build-date as version number
new bd8750308 add request context to information exposed within the script
new 1bf5ddc92 Renamed URL metadata providers to HTTP metadata providers as HTTP/HTTPS are the only URL schemes supported
new 99f6cb3df disable attribute push for SAML 1 by default
new 41a75bb4f Add some null checks
new 464afc377 complete implementation of mapped attribute definition
new a51df8040 add a couple more test cases for mapped attr def, including one for bug #SIDP-22
new 6c262fc1c bug fix and allow retrieval of values for attribute other than sourceAttributeID
new a6a852078 Code for parsing credentials from configuration file; either inline or from the filesystem
new f7ae36f43 Make services first order constructs
new 362526beb Fix NPE when no credential ref is given in the config
new 42e1f8230 Finish up SAML based attribute filter match functors: issuer/requester in metadata group & and value scope matching ShibMD Scope extension
new a427974bb Remove attribute scope filter. Can't implement it properly without carrying role information (scheduled as improvement issue SC-17)
new 457fcad52 Remove in-config logging configuration elements and related items. This simply is not supportable across even minor revs of Tomcat let alone across other containers.
new fbe579dc0 synch up with xmltooling API changes
new 42ab4be8c Fix manner in which relying party schema references credential schema
new e8a6778c6 fix namespace prefix
new 3c75dd55a Qualife elements
new ab2d0e402 Resolver for PKIX validation information from Shibboleth extensions to SAML metadata.
new f540f724a combine resolution dependency types in resolver schema - this allows us to maintain the order these dependencies were defined in. This may not be the most efficient way to do this in some places, but it does work (at least the unit tests pass).
new 45306e6f0 Mostly synched with OpenSAML changes
new 6a79c3339 Additional work on reconciling generics between type hierarchies
new 516d1aa72 Keep API generic to Collection for attribute values, but filter duplicates before releasing them from the resolver.
new a0672d236 Finish synch up with OpenSAML stack message context API changes
new e66a0137a Reorg criteria classes into separate package.
new 777a9e8eb Code clean up
new d61dfda13 SAML v1 artifact request endpoint
new 3f275d965 Re-write of security policy rules and tests for the new MessageContext and InTransport based design.
new 1cd1b75ba Add Shib metadata extensions config file to Spring config.
new 8506165f4 Quoth Chad: "requester is the inbound message issuer"
new ff3438df6 Fix uniot tests consequent to recent refactpring. The context no longer tidies the provided strings and the requestor is no longer inferred from the relying partying
new 3f2b3c8d4 Refactor to fit JUNIT Test<foo> becomes <foo>Test
new 22a237dc2 Init OpenSAML lib via default bootstrapper
new ba2f4a756 Collapse security related schemas, prepare for testing
new 01052bbec build correct classpath
new ce0faf139 Add display name and description to attributes configurable via attribute definition
new b204484e6 Remove tools dir, these go in top level projects (IdP, OpenSAML, SP, etc.)
new 412179864 Add SAML 1 & Base64 attribute value encoders - Resolved issue SC-12
new 095ff66ef Clean up transient ID creation and reverse mapping
new d8602af9d Remove duplicate file (stupid mac filesystem)
new 478ff032c maintain attribute order as best as possible and expose requestContext to templates
new 99cbfcb90 restore conf directory for testing
new 282d4a679 typo and update path of config file
new 3c2502d6a missed a few Collection API changes regarding plugin dependencies
new f3b2c7962 - finish some more overlooked API changes
new 1635ae4b2 Add flag for selecting outbound artifact type
new f5f8de2a0 Actually set the artifact type for the outbound message (makes it work much better)
new de9dc2dac Only attempt to parse artifact type if it's not null
new 797ddefc8 Add some logging
new 3dca0831a remove call to super
new 90b5b29a0 set lazy init to true
new 789a3372f AACLI should only load XML files (relying on the filename to end in ".xml" is not ideal, but it works for now).
new 40f099b70 cleanup handling of scoped values and add basic unit testing
new 057340050 default scopeTypes for SAML1 and SAML2 scoped string encoders. Make "Scope" attribute name consistent with Shib 1.3
new 1841cd7de documentation for Template attribute definition
new 3f3950c79 Missed synching up names when schema changed a while ago
new 5cdea660f Add in basic security policy items in order to properly populate message context with peer entityid, issue instant, etc.
new 7658ddd9d Correct unfinished change accidently comitted
new 3eea6b893 Don't mark elements as abstract, oops
new ff98a175f Wire in security policy appropriately
new e11c319d0 forgot to save first
new efabf66ab Need to declare security items before using them in relying party specific configs
new ec772eea9 Call refresh on spring context in order to ensure all beans are properly loaded and ready to go.
new a9768a9b1 correct handling of scoped attribute values.
new 761b94c3a correct handling of scoped attribute values.
new f7e8ff53b merge opensaml config into internal.xml
new 907ba6b47 various changes to resolver unit tests
new 895562472 use SpringConfigurationUtils to load AACLI configs. This fixes some problems, but introduces others.... still some work to be done.
new 659742a24 Add some logging
new b1451aa56 Try adding explicit dependency information to bean builder
new 9bcf082bd Parser security policy configurations
new 902664fc3 Add security policies to relying party group bean
new 5151287a9 Move security stuff back down to bottom of relying party config
new d18b98008 Hook trust engine parsing into the mix as well
new ab821f2e0 Correct parsing of storage reference
new 42febfc28 Additional logging
new 96e1a0b80 cleanup code a bit
new 4b0921e8f bit more code cleanup
new 0058d645a Fix bug when looking up metadataprovider by class
new ea3b1f19a back out part of last change which resulted in odd class casting error
new 408e1a063 rename config file to more accurate name
new 325757829 Update to nightly-build of spring to deal with Spring bug SPR-3842
new ebdf7e62c why do you do this to me Chad? why?
new ec761b171 Fix up replay cache and message replay rule
new 7efcaf08b Have decoders extract basic SAML message information (message ID, claimed issuer, and issue instant) and populate message context - allows for no security policies to be active
new 21ee2af97 Basic unit test and related fixes for Shibboleth SSO profile
new b044bf072 SAML 1 Attribute Query unit test and bug fixes
new 0d0af98e3 use xsi:string types for inline scoped attribute values
new b569e6883 proper config file loading
new f027e5949 updates to aacli - resolve servlet-api dependency, fix bug in creation of RelyingPartyConfiguration, use IDP_HOME env var to determine default config dir
new f8edf9ffe attributeEncoded flag should be reset for each attribute.
new 1f69424f9 fix NPE
new fff51080a Synch up artifact profile handler/relying party config class names
new 01033300b set svn:executable property on ant.sh
new a38cdd608 Move KeyInfoHelper, which for historical reasons was down in the signature package,
new 52f6e9c3e SAML1 nameformat defaults to urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified not urn:oasis:names:tc:SAML:1.0:nameidformat:unspecified
new 113723c00 Make stand along build work for windows
new 99e4333cb SC-22 Deal more gracefull with no attributes coming back from filter.
new 5a5012ca7 wire in the TransientIdAttributeDefinition
new ab0afdbcc branch to introduce new logging library
new 2ed0bd012 Correct unit of time in documentation
new ffda8191c Convert to SLF4J
new c95741aa2 Initialize new logging system at IdP startup
new 2d98fb3c2 identifierStore is not a constructor arg for the factory bean
new 3384eef98 better handling when endpoints are accessed directly (SIDP-55). Also add a few more checks for metadata lookup.
new b1a3ae12d redirect Log4J and JCL logging through SLF4J and logback so all logging for all libraries within the IdP goes through new logging system
new 74671a38e Force initial load of logging config
new 8e4731799 Merge in new logging system.
new 449ef3ae7 Initial draft of security policy selection code
new 29b51eea1 Security policy work round two, now wired into the IdP
new aa8e0a419 Don't shutdown the logger context during reconfig.
new fcf0c8c31 Try shutting down logger context and restarting it after reconfigure.
new ff87a84ff Forgot to assign manager to internal field
new 7d34f3924 Configuration code for all Trust engines
new b63b00e4f configuration code for trust engine related policy rules
new 8243fb3f3 pull value of metadata provider ref from attribute
new 40eedbf79 SAML 2 SimpleSign rules
new a11a02a8d correct typo in schema file
new af684d36c correct another typo in schema file
new b56c3f687 Correct improper inclusion of attributes, in attribute statement, when no encoder is provided.
new 94ba45fc7 Deal with SC-25. Attribute encoders *must* now have an explicit name defined.
new 703ce1d36 Minor bit of documentation to clean up javadoc build warning
new 791ce6a42 Update to 2.0.7 release of Spring, contains bug fix that was causing us to use a nightly build.
new ee777ec4f Do no sign assertions by default. Use metadata attribute or require explicit declaration
new d92c816d2 Add credential element LDAP config in prep for support in usage during TLS connections
new 971062f95 fix typo in schema file
new 166a05d93 Backout addition of credential which, for some reason, isn't recognized.
new 66a18a658 back out all changes, still getting error
new 09e4a48e6 missed some changes
new b58d35bad Drop SLF4J API and bridges, they are now in OpenSAML stack
new 107f4816f Lower logging levels
new b574b8a32 Auto-gen object id
new fa7518828 First pass at supporting NameID encryption
new 0996af719 Persitent ID data connector; generates legacy IDs and new IDs retrieved/stored in a database
new b9fe6060f Fix erroneous bean class return values.
new 2d058e556 For client cert auth rule, need to use the SAML MD and Shibboleth specific subclass, not the basic OpenWS one.
new 1cdd9b45c Correct spelling of class name.
new a546518fd HTTP Redirect simple sign rule does not take a parser pool or KeyInfo resolver in its constructor.
new 2f2df7beb Ooops, default and use=required schema modifiers are mutually exclusive.
new 648dab055 correct storage service injection in transient ID principal connector
new 3eb2b9fb4 Fix explicit key credential trust engine to be an ExplicitKeyTrustEngine, not an ExplicitX509CertificateTrustEngine.
new dd238a5ab Allow chaining metadata provider to have zero child providers
new 1ce09cc13 Various log message and Checkstyle fixups.
new 2e180881f Add in a read-write lock over the caches in the metadata-based resolvers.
new 153919df9 Add support for failover data connectors
new 40b45f01c Fix bug SIDP-58
new 37287f7e0 Deal with attributes that end up have no values after construction, filtering, encoding
new 98cfd6c99 synch up issue instant defaults with SP
new 3057d6397 Deal with case when resolved attribute is null, addresses SIDP-68
new c1f5c9928 Ensure attribute definitions and data connectors do not produce null results - addresses SIDP-69
new 1919fbdc9 Pull peer, not local, metadata.
new 88924599a Remove stale code
new 5c3d42baf fix SIDP-83
new bda85bc0f Some work on persistent ID
new 81be09c51 Configuration code for chaining, signature validating, and role filtering metadata filters
new 0a965a710 Rev vt-ldap lib
new 1fde723a8 Add security policy rule config requiring that an incoming message has been authenticated
new 5c5a9db6e Add container session listener that will destroy IdP sessions if the container sessions timeout or are destroyed
new 57bd7342b Check for null boolean attributes when parsing config xml
new f65fb452d Rev libs in prep for RC1
new cdc730bd4 Fix project exports
new 24013ae15 correct unqualified element setting
new ed5d66a71 Fix-up some default/example configs
new e9af99525 Bit o' unit test fix up
new aec009a88 Add support for computed IDs
new ca836dfdb Change name of startTLS trust and client credentials to be more descriptive
new 8c697aaae Remove DB connector validation query, can do this consistantly across DBs with DB-specific query.
new 1b1c9f3d0 Stored ID impl
new 8da965735 Lots of encoder code cleanup
new 96a3b4efb Fix typos
new c26b14014 Clean up some stored ID code and finish up all the components for stored ID
new 26c5e0feb Fix up bump copyright year ahead
new b500b7333 Return an established transient ID for a given (IdP, SP, Principal) if one exists
new 351e11718 Config for schema validation metadata filter
new c3ff1e684 prevent NPE when value is null, but matchString is not.
new 8a50adfcf display message instead of NPE when AACLI has a null attribute statement
new c30cd0c5a return empty attribute statement when no attribtues are resolved
new e9608ce1a Back out last change. Had been looking at the wrong schema fragment
new 500d66d80 clean up/optimize equals() and hashCode() methods
new d0e66986e Fix typo resulting in NPE
new 43c0f58f3 Allow Transports to express whether they provide message integrity protection
new 181afd90c Support for conditional encryption and signing based on what the transport and binding are capable of supporting
new 41648b2a1 A couple changes so that big ugly config errors are less big (still ugly though ;))
new 2ee131f2b Try to clean up configuration error log messages a bit more.
new 123a59f69 And, hopefully a bit better still
new 2b4ed379f drop error messages to trace. They are logged as errors further up the stack
new f2f4836eb Slightly more descriptive error message on runtime exceptions
new fd0067755 Add config for rule required flag
new 287dcf377 Lots of session management cleanup; no longer dependent on container session
new 720531678 Deal with NPE from malformed messages - SIDP-128
new fae394724 Add ability to set a character espcaing strategy when filling in a template
new f35c6d4e7 Make anonymous and default relying party configurations mandatory
new e34daeaf6 Don't log exceptions at this level.
new 80597c187 Prime the secure ID generator so that the first transient ID resolve doesn't pause while the PRNG is spun up
new bd48921fe Change name of existing trust engine configuration element types, to disambiguate and reflect
new 33646f0e1 Add config support for explicit key trust engines based on statically-configured trusted credentials.
new 71d87909f Fix stray character in schema causing validation errors.
new e536a58ef Fix a couple of erroneous method names due to copy/paste error.
new e8b1535be Fix typo in class name.
new ea06c9b26 Fix incorrect logger class.
new 6551ea44a Fix typo in error message.
new 8d682b578 Copy the collection types when creating a new object from the bean, so as to avoid
new 487910366 Process the entityCertificate attribute on X509Credential Certificate config elements.
new 3f03594ad Fix misleading variable name from copy/paste.
new c38f04a7d Add security schema and Spring config support for statically-configured PKIX validation information,
new fd691529f Rework config schema and Spring config machinery support to differentiate between basic and X509 credentials.
new 6b3b1845b Add schema and Spring config support for chaining trust engine.
new dbefba49a Log the names of the attributes that remain after filtering
new 2ce79e950 More logging
new 6f2088270 Log attributes returned from the resolver
new 679379c87 Ensure default values are set properly
new 167e28a30 Clean up input a bit
new 0e24bc7cc Log message cleanup
new 10fe9972b Drop some log messages down to trace
new b7c7ea997 Update docs for RC 1 release
new 0a24026f2 Missed two people, sorry guys
new f8ce6bf85 Correct unspec name id format
new a77dea606 Remove 1.4 code weaving
new 4b3a19a77 throw exception when attribut IS null
new 6e14ced02 pick up patch from Daniel to search multiple fields when determining the user DN used during authentication binding
new 5c2e7dc8c Don't encrypt NameIDs by default (they're already encrypted once with the assertion)
new f67fbc6ed Address SC-31
new b12e3e298 Javadoc cleanup
new a53be1595 Javadoc cleanup
new f5277c555 Bit of configuration code cleanup
new 3fb778c87 fix NPE
new 621c1507c Correct unspec name ID format URNs
new b1b465e7c Generate cleaner IDs for beans
new 0e6bebeab cut down stacktrace in configurate load errors
new c6bc6c629 cut down stacktrace in configurate load errors
new f318f38de Harmonize startup log messages
new 3dd776b2e Bit more work on startup log messages
new b5011dd96 Support lookup of session by principal name or session ID
new 8b46c3ef0 Correct property name typo
new cd4a72e0c Bug fixes and unit tests.
new 2955caf8f First pass to clean up config and fix multi serivce instance bug
new 5bb2c160a autogen ID
new 73faad05d More config cleanup
new 9b2980909 fix schema typo
new 1a6b0a328 fix schema typo
new 386f013c7 correct namespace decl
new d336c8c49 fix schema typo
new 1eb0622ce Fix NPE when config load errors are not nested
new 2404912fc handle services without config files more cleanly
new 882178fad Allow for full stacktrace logging
new 1ed0c56e5 Element another level in the config tree
new 5c7abf43f Cleanup service interface, make it easier and less error prone when creating new services
new 317b389e7 Remove unnecessary call to super
new 0f78e0bcf Extend service class
new 62fea2fcc Fix AOBE
new 1256d8da3 fix sign
new de70c2ff0 bit of logging
new 05831cd3a minor bug fixes
new cbb5b4a86 Bit of locking and logging cleanup
new 872ab915e bit locking fixup
new 4442c855c call super constructor
new d34cbd3c8 some extra logging messages
new 24fb6a84c more logging
new 90e3c5ae2 try to log complete stack trace
new e56455871 and still more logging
new 44c2f67f1 more logging
new 36b35c4c3 save then commit...
new ebd6327ca fix log message
new 02867a885 Add isDestroyed method
new 6810fa954 update to latest rev of Spring
new a4c933c40 more logging
new dd3d5765c more logging
new 7a6702901 remove old logging messages
new b1b030c7e turn off some annoying compiler warnings
new 489f277ee Fix SIDP-155
new e48bd21cc Be sure to use newly loaded filter policies when a context load is successful
new 3cd13631d Bind error, not messages, to HTTP request's error attribute
new 1d6464e38 log error message
new 993826905 placed logging message in wrong spot
new f9490c57b Fix up bug where constructor argument wasn't provided
new 79bbf3cd8 Add regex split attribute definition
new ebb4173fb Logging message cleanup
new ba32b7efd Logging message cleanup
new ca83ca83a Bug fixes and minor doco updates from Ian
new 5c4df6bf0 Correct property name typo
new 0453e8796 Add a bit of logging info
new 6c497b357 register chaining provider
new 90ed16170 Get siblings of appropriate element
new a0725b384 Support for localized attribute names and descriptions
new 8a678d0cd fix typos
new f04e82de8 fix up data type for localized string
new 2c6a9d099 process localized elements
new 77eac1a98 Bit of cleanup
new 3d15e976f remove redudant call to OpenSAML bootstrapping
new 8546a3d35 Load IdP's logging configuration
new 7edef4828 fix typo
new 20d82a9e6 fix check for more than one value
new ce5c898e0 register regex split AD
new 5588a3970 Minor typos in log messages and the provocation thereof.
new cec7d11e8 Fix typos
new e7534cf79 Make attribtues comparable
new 631053674 More effecient way to keeping allowed values
new 372c0815e Revert previous change
new 81b8c0440 Try to address class cast problem while preserving duplicate entry removal
new 8d3483eb2 Fix up NPEs
new c13e0aabd Fix digesting of computed value
new 7b4dddee3 Fix digesting of computed value
new dd9f63b47 Add Prescope attribute definition
new 47f8a616d Correct typos
new a9314a92c correct typo
new df2e84310 fix instanceof check
new ce7e99287 rev lib version
new c48a26811 add some logging and clean up scome comments
new fbde871f0 Properly set entity group name
new a1daace3c add some logging
new 12f6d7457 Fix recurrsion check
new 452dd68f6 Chain signature trust engine impl
new 3101f8680 Add logging message to indicate when values are ignored because they are not of a valid type.
new 46a7c358c Add encoder that transforms attribute values into SAML 1 attribtues containing SAML 2 NameIDs
new 21a6e481f Fix up attribute parsing
new 96a8c79d4 when data connectors fail, register failover connector in their place for the remainder of the resolution. This also works for multiple chained failover connectors.
new e0929d0e4 more accurate log message
new 80c70ef3c Add case sensitivity flag
new 417535c23 Break appart creation of XMLObject attribute values, like SAML 1 and 2 name identifiers, and the process of encoding
new e11f829a0 Use inbound message issuer, not peer ID for SPNameQualfier
new cfe3d14a5 return correct encoder class
new f63c59911 Fix matching code
new 69d4bcbab bug fix
new 198195e1f set local entity ID when using aacli
new b0902a97e fix typo
new 049e6b819 fix minor typos and use preparedStatement for storing persistent ID. We should probably use prepared statements for all of the queries as well.
new 9f25a3c6f use prepared statements for all sql operations
new 6775a5f1e add debug logging messages for prepared statements
new bfe70272c Treat unspec authentication method as meaning "any"
new 742f7be0d Address SC-36
new 7d5112069 Use year macro in license header so I don't ever have to remember to change it
new 33c547068 Mavenize shib-common
new 3f82342f4 Fix up some test code
new c26eb2713 correct groupId
new ba290d813 Clean up assemblies
new d9cca9243 exclude old XML libs brought in with commons pooling
new 47f7fffdb Add distro management configs
new 5b6af557b Recreate release branch, now based on Maven
new 82dc6b7a3 Add explicit option for support SessionNotOnOrAfter attribute in AuthnStatement; SIDP-165
new da31a6e17 Remove illegal character; SC-38
new dcaa24662 Allows resource filters to be configured on resources; SC-40
new 73becbeec Add in schema change for last commit
new 8bd7c2b51 Fix SC-37
new 8f5908e7b Create a storage service that uses Java's concurrent map. This makes configuring Terracotta much easier.
new 4c2682c13 Address issue SC-37
new 513d2692b Update OpenSAML rev
new c3ced3f78 Fix SIDP-170
new a33028669 Work on cleaning up some unit tests
new 8db228872 Clean up metadta provider bean definition parsers
new b6205cfa1 Update release notes
new 735a05d50 Make 'id' a required attribute (it is required, but was accidently set to the default optional usage)
new 93f09733e fix typo
new 27d8bef8e couple more typos
new 9f84e5076 Lots more unit test clean up
new 147b4035b Update script engine versions
new 6a7768287 Move over to using included Velocity string resource loader. Needed until Velocity 1.6 comes out with included bugfixes
new 56db6e968 Allow file paths to be file: URIs
new 7f20b2414 Fix SIDP-200
new bf1429635 Fix DB connection pool leak - SC-44
new 92f042bd8 Address SIDP-209: Enforce metadata SPSSODescriptor/@AuthnRequestsSigned on SAML 2 SSO profile handler.
new 6debebd07 Fix SIDP-213
new 813dd68a2 Remove duplicated dependencies
new a807378aa Remove most defaults from schemas
new 18294be58 Upgrade to latest VT LDAP lib - SC-46
new 4452d5445 Rework authentication and session management code:
new 15f9ab12b Remove unused class
new 57a307849 Add StoraeService implementaiton that produces events when objects are add or created.
new eea5efbd6 Set properties correctly during provider config time.
new c2aef8356 Missed a file on last commit
new 9c8cf3e8e Fix function or partial matches on mapped attribute definitions - SIDP-220
new f485bdf44 throw in regex test
new 50cc45194 And, update release notes
new e6d8e65c5 Proactively scan classpath for JDBC driver or JNDI for DataSource and if not available thrown an exception at startup time. - SC-47
new 04b66f9f8 Handle case where an attribute value is an empty string - SIDP-218
new 0da73c0c9 Fix NPE caused by missing optional attribtues
new df88a8e9c Correctly scan classpath for JDBC drivers
new f4dded293 Fix case where attribute associated with an ID is null
new 28c6b88a7 Fix minor typos
new 6ed692e2c Add some additional logging
new 2008f3d04 Add version and supported specification information into JAR manifiest
new f38a9eb2b SC-50: Provide options to enumerate trusted names for static PKIX trust engines
new 05eab60b5 SIDP-216: Second of two signed sources of metadata fail after cache expiration
new 0613886a6 Turn off LDAP and database caching by default until its cleanup can be linked in with session expiration/destruction
new 0a9440f49 Re-enable scripting engines. The class version error I was seeing appears to be some sort of OS X JVM issue
new 04a423d69 Add dependencies for SMTP appender - SC-52
new e71fc30a1 SIDP-230: sanity check provided credentials
new 00bf83add SIDP-229: IdP Metadata changes to KeyDescriptor not fully flushed from IdP cache
new d5d26ce3d Fix how errors are reported out in credential public/private key sanity checking.
new 7acb852d4 Make sure configuration parsers are extending the proper superclass
new 93b770ac3 Increase max memory available during tests
new 817fa5e57 Fix issue where nested spring beans were being instantiated multiple times
new 7a3d91f19 Fix bug introduced with previous fix
new 9e507fb01 SIDP-231: Several XML schemas incorrectly use xs:positiveInteger when they should really use xs:nonNegativeInteger
new f5242fe2a Correct error where some inner beans were being loaded as root beans.
new 0fd0e1a40 Fix broken LDAP test wrt apparent schema change.
new 5b646a039 Configuration workings for RequiredValidUntil metadata filter.
new 26be9b0d6 Update to use Q for Eclipse maven plugin
new 5d4266e49 Fix typo in name - SC-54
new 6e9f508cf use latest version of OpenSAML
new d974bea4d Make it easier to use other replication services within the storage service - SC-55
new 67b96b6e1 Add noResultsIsError option for RDBMS data connector - SC-57
new 93c72132a Remove deserialization work from SAML2 Login context and move it to the SSO profile handler - SIDP-202
new d8ca4a98c Fix typo in property name
new 71de2ed5a Fix typo in property name
new 087329dde Fix bug where ID attribtues were being required on AttribtueFilterPolicy elements
new 7b6815c3f Add logging of SQL state/code information.
new dab757a12 Fix bug where some explicitly configured LDAP properties were not overriding the defaults - SC-58
new 0ffb619aa Check for null SQL State before logging.
new 904bb3158 clean up logging messages
new 7c196d73f Ensure datasource is not null during validation
new 79924a0e9 Remove whitespace from search filter - SIDP-256
new 3162e4ca4 Bump version numbers to pick up patch levels
new a205b717b Only remove whitespace at the start and end of the search filer
new 7b6f4d390 Update release notes
new ee3f1a964 Fix opensaml version number
new b7a37ba63 Deal with case where randomly generated IDs have already been assigned to a user. Just new IDs until one is not used.
new 1b590792f Optimize collection usage
new 66503caf4 Optimize collection usage
new 566ab0992 fix NPE
new 5e2c656f2 bump version number and pull in latest opensaml
new 85cb5028b Update release notes
new 66dfd0d3f Fix NoSuchMethodException - SC-65
new b0e5f2afe Make event inner classes static
new bc00faa3c Fix XSS vulnerability when malformed URLs are displayed in error messages - SC-66
new f281ee78f Begin updating libs
new 3145e1c55 Update libs fro 1.1.3 release - SC-67
new fe8974244 SC-69: LDAP data connector factory bean is inverting constructor params for poolInitialSize and poolMaxIdleSize
new 9fde95fce Update release notes for last checkin.
new 5759cb100 Update documentation in schema for LDAP connector param.
new 75b4f67b5 SC-70: Upgrade Commons Pool library to 1.3
new 016f44231 get rid of really annoying 100 character warning when creating tar files
new 6c8ebcfbc Decrease log level of message
new ce2e4baa4 Properly error out if required input for stored ID is not available
new 5ae004793 https://issues.shibboleth.net/jira/browse/SC-77
new 5874357bb Properly set default retry attempts - SC-79
new 5f2b53cae Minor code cleanup
new 9766c9153 Fix up validate method on resolver
new fa16102f9 https://issues.shibboleth.net/jira/browse/SC-61
new fd66b6803 Clean up some deprecated methods
new 59cfb9687 SC-72 - https://issues.shibboleth.net/jira/browse/SC-75
new 97044b95f https://issues.shibboleth.net/jira/browse/SC-80
new 37981b2eb Parameterize release repository URL
new 100134777 Checkstyle warning fixes.
new a51233ce6 Back out suppressions around unused loggers, and additional suppressions in test cases.
new 60a9812da some bug fixes to the svn resource provider
new c8c8b0f0b Log non profile exceptions as errors
new 205aecaa5 Deal with ScriptFile elements - SC-81
new 87604709a https://issues.shibboleth.net/jira/browse/SC-82
new 1ceaf9e2f Fix NPE in principal connector when persistent identifier is not valid
new 777677d8b Fix up some javadocs
new 3224444e6 link in some external project's javadocs
new d34fef24c fix links
new cab1bf3de Update library versions for release
new f0cf1fd16 Fix warning about character encoding during build
new f71589d38 Correct OpenSAML version
new 9b3c0ad67 add schema information to POM
new 50347af04 Update projects to Eclipse-3.5, IAM, Checkstyle 5
new 3c385c5a6 turn down log message
new 4cacac86e Update VT LDAP lib to resolve bug where connections from JAAS login module were not properly closed
new 44bfbb58e Update OpenSAML library version
new 8281ba095 Create initial top-level structure of new repository
new b05240946 Initial Shib 3 project structure
new 3fe8d00db ignore target directories
new 5f061c2ce Change module names to make them appear better in Eclipse
new 7b5bc1ac4 make sub-modules eclipse projects
new 5d674b6d3 Add project preferences
new 2d8ab2f1c Update to Spring 3
new f5fba66dd remove unnecessary dependency declaration
new 524e591f8 logback, hsqldb dependency added in impl pom.
new 173787a13 initial commit of user consent entities
new 7f23a997b initial commit of user consent logic
new f3149397a Specify test scope for test libraries
new 4ac372fdd initial commit of user consent persistence
new 1376bcdde initial commit of user consent tests
new 249e5328d initial commit of user consent resource folders
new 12132e776 logback, hsqldb dependency corrected in impl pom.
new ab7948a2f Work on persistence layer for user consent engine.
new 34764857b various changes
new d9fc72cc5 AttributeList
new a4fd54353 Added main controller UseConsentEngine
new 551ad1ad5 base classes for service components
new 732fc7c3b update spring version
new a3a831eff - Removing setters of entity classes (more robustness)
new 6f7fdf04c - added vt-crypt for fingerprinting and hashing
new 8d32bad43 sync model directory name with maven project module artifact id to prevent eclipse from becoming confused
new 2db2e9190 Properly distinguished between artifacts dependencies that should be inherited from the parent project and present in all project modules and those that should simply be managed by the parent but must be explicitly declared within a particular module in order for it to be used.
new c64c3f6e3 Remove in preparation for setting via svn:externals
new ce718a897 Remove in preparation for setting via svn:externals
new b94d52d87 Add centralized config files
new afde7ceea checkstyle: relative path
new 04a799de4 - Controller tests (empty body) added
new c03e6492a - Test for Attributes
new bd7bc53b3 Start attribute module
new 636be183d Initial attribute, attribute encoder, and attribute resolver code
new 192e797b5 Add in filtering APIs
new 6ff1b882c Add commons modules
new 2490d7abc Update add module instructions
new 111029ade Add service component APIs
new e8c9afe16 mark attribute resolver and filter engines as services
new c64583b4b Add common module to parent pom
new 3456e9594 Setup new profiles module
new 880ee3a51 fix path to checkstyle config
new fe2dbc40f Some initial profile handler APIs
new d91f42b3d Add class to allow tracking of the IdP version
new 48c50b72e Merge api and common modules in to the core module
new d6a47f909 Make logging service compile against new service interface, still untested at this point and still more work to do
new 07ae40710 removed/added installer/example files (sql init, ToU etc.)
new f13a5b39c - fixed pom (added servlet-api version)
new 225c84869 New profile handler API
new 2c270c9a2 Do some POM cleanup; updating versions, fixing up some deps, etc.
new beb5500d2 Initial module creation
new 75e63c122 Initial module creation
new 0ca2a341e Initial module creation
new 0b799492f Initial module creation
new cd2455ef1 Set up additional modules, rename some existing ones to establish a module naming scheme
new 5ecac6fd9 Add some consent APIs
new c882ee55d Add passive/active profile indicator
new 7c4b0c43f Some initial APIs
new b4980fd87 Enable checkstyle
new 40afeaaed APIs and most of the impls for the attribute resolver
new 7dc60d6e8 Minor code and doc cleanup
new 275c292a1 Abstract most of the reloadable service work in to a base class usable by non-spring services
new be6b255ba Use OpenSAML resource APIs instead of Spring ones
new 042e56c60 Update help class and method names inline with opensaml-util name changes
new 36ccb26bc remove saml profile impl, will create a saml module that contains all the SAML specific bits for the whole IdP
new c3661ff66 ToU API added
new 78077b07e ToU Implementation added
new 6b166f69b Add missing step to instructions
new 445dfeb26 - added ToU modules (api and impl)
new 34ee6494b indicate requested attributes on the resolution context via the Attribute class, allowing it to take care of equality checking (probably still needs some work in the equals() method)
new e306287c2 - changed version of slf4j-api to 1.6.1
new 437bebef3 - Splittet out terms of use of the user consent module
new 63c0c5a4e - Refactored storage
new d5f910beb - Refactored to new project structure
new df783f601 initial port of v2 attribute resolver to v3
new 1567cb570 rename top level project to correspond to SVN project name
new dba45cd04 Fix up svn:externals and add module docu and templates
new d1db6880e add attribute resolver modue
new 0af04f168 add attribute resolver plugin impl module
new a7f48e6d0 add attribute filter engine api module
new e45afa31a add attribute filter engine impl module
new 04cf2ade7 add m2eclipse settings
new 6566ee6cc more cleanup for moving to m2eclipse
new c342760a8 move resolver and filter code to new project modules
new 9d7a6c9e5 adjust package name to use net.shibboleth base
new 3b9487eea update to new resource APIs
new fa3feb74b add svn ignore properties to each module
new b8d6e2374 Add additional Java 5 focused code formatting rules
new 1fd35169a fix up classpath to remove last bits of Eclipse IAM plugin and to target the Java6 execution environment
new 6f81a14bf set POM compiler source and target to 1.6
new e5406df8c configure a number of build plugins and add the release profile that appends GPG signing of artifacts
new 768b9cfe6 Add set/add/remove methods for display name and description, values, and encoders
new bee960938 unit test for scoped attribute value
new 32c6af54a remove display name and description from component, not everything needs this level of detail
new 1eb316933 Code and bug fixups
new bd059162c Rework attribute resolution context a bit to better track what plugins were resolved and which attribute's they provided.
new 11e494fd1 Move Static[DataConnector|AttributeDefinition] to the impl module
new 8f78093f6 Some unit test on BaseAttributeDefinition
new 74c016f33 Make attribute encoders a set, no need for duplicates
new 4e40e515c More unit testing and fixes
new 8e98ed68e Refactor resolution context a bit and update unit tests
new 5f115fea0 Sprinkle with final keyword
new f3e458541 - Removed edu.internet2.* packages and names.
new 284d48530 - Removed edu.internet2.* packages and names.
new e8cce91e7 - Adaption to net.shibboleth namespace.
new 8a6cf827f - Adaption to net.shibboleth namespace.
new e718390b5 First pass at new authentication API
new 4f4e09571 Minor code cleanup via use of CollectionSupport
new a5b6414f0 make Attributes cloneable
new 53a27fd14 working attribute resolver w/ unit tests covering basic functionality
new 1e15a051e Add SimpleAttribute and test
new 2275fa6db Make returned sets immutable (MappedAttribuyteDefinition)
new 1f47eeaf7 Regexp attribute definition and test
new bf00502dd Typo. IDP-11
new 38c455ede IDP-14 Add scoped attribute definition and test
new 0b5b4ca84 IDP-94 - Remove dependencies on old OpenSAML helper classes
new 59ec3b75a IDP-8 - Port prescoped resolver to IdP3
new 40a4e91ac IDP-15 - Add Scripted Attribute definition and tests
new 672d86c57 Fix up some comments
new 5412b3d11 IDP-17 - Add Template resolver definition and test.
new b2611f21b Fix license header in template and checkstyle
new be1bfe92c Missed file on last commit
new 38077abda IDP-7 move towards unmutable interfaces (collections passed to constructors and thereafter not exposed)
new 32c91c9e0 IdP parent POM updates to fix compile issues:
new ba9e686f7 Remove JBoss repository added in previous commit. Should all through shibboleth.net Nexus now (Infinspan is not currently working however.)
new 1dc10cf6f Update Java source files with new license header.
new be276eed3 fix up mime types and EOL style
new 3bb1f97a5 Fix idp-parent POM to point to HTTPS Nexus URL, not HTTP.
new 35fcb80f3 Add WebFlow dependency and update Infinispan
new 3d2125b3d Initial classes for developing profile handlers using Spring WebFlow
new ee5f71208 create SAML profile handler module
new 0c8fac212 Add SAML profile handler impl module to main build
new 53628ab20 Synch up with change of ProfileContext name to ProfileRequestContext
new be0b6f689 add in missing DTD, the lack of which makes Eclipse-CS unhappy
new a8c13c4d0 Rename some abstract classes Base- to Abstract-.
new b3782f5c4 Move some Abstract- classes up to the corresponding API package.
new 148312993 Missed checkin for IDP-7
new 3d3952148 Missed merge
new 2fd55efcd correct typo in license header file and update checkstyle appropriately
new 182c84eb2 Update license header, round 2
new c8b8a7a49 Some initial profile processing steps
new a2028965c synch up with opensaml changes
new 7b3c79ffa IDP-98 Review comments on MappedAttribute Definition & Test and TemplateAttribute Definition & Test
new c9598f7b3 IDP-98 Review comments applied to other attribute resolver definitions.
new 1689d9bfe Missed class from previous
new a0d74f5c4 Some more work on profile actions, still fleshing out everything
new 43a247c9c Add structure for relying party API module
new a5b7f74af Add relying party API module to build
new 00b298291 correct pom.xml name
new 880522d32 remove relying party module, this is actually tightly coupled to the profile handling and so will live in that module
new 029347c51 New relying party resolution API
new 3d5405181 Add some logging and some identifiers
new f17530b0d Basic session APIs
new a849951cf add a couple TODOs
new f0bed84c5 Fix license header
new 161c06d92 Add missing javadoc
new 7bcd8df34 SAML 1 and 2 profile configurations - still need to look at how sign/encrypt options as specified
new 676c946f5 Base class for profile configurations
new 4544ecfb4 Finished up SAML 1, SAML 2, and IDWSF SSOS profile configuration with unit tests
new f1b48faa5 Unit tests for relying party API classes
new 3b87fbb1f Some more unit tests and bug fixes
new 6558d32fb use EvaluableCriteria instead of a special one-off interface
new 27044b2d5 Replace Spring Expression object with OpenSAML EvaluableCriteria
new e857f5ffe Remove explicit dep on Spring expression
new bc69d8fa2 Harmonize field/method names and put in some default values for various criteria.
new f9623d62a Add script for creating new IdP modules
new fdae58a3d Create module metadata-api
new 7130dca46 Fix typo in new module script and .project-template
new 605fd98ec Add interface for a metadata resolver
new 5596de5af IDP-98 further review comments.
new d024cb9ad More authentication API work
new 33998659c Create module profile-saml-api
new aa7bfe115 add saml-api module to parent POM
new 203267699 rename SAML modules to reflect that they contain more than just profile-related classes
new 1ba7d70b3 update base package name to reflect module name change
new 546c20010 bit more work on metadata APIs - some or all of this will likely be moved to opensaml eventually
new 476f8bd2b Start implementing the attribute policy requirement implementation
new 3f58635d8 fix test method names
new e1aa28993 Fix test to actually have nulls in the List<>. CollectionSupport was stripping them out for me.
new 82f34504a IDP-29. Wrong class in logger definition
new 116e86011 Add the OrCriterion (and test)
new c9584d4fa IDP-41 - https://issues.shibboleth.net/jira/browse/IDP-30
new c52b3d2ed IDP-38 - Implement Attribute Value String Policy (and base string class)
new cad143fd0 IDP-36 - implement Attribute Scope String and test
new 7d4c331e0 IDP-37 - implement regexp value policy rule, base class and test
new 8b4290759 IDP-99 - implement scope regexp policy filter and test
new ce5fc6aa9 Clean up Javadoc
new fbe525278 IDP-49 - implement ANY AttributeMatcher and test
new 6dac67cdb IDP-57 - Implement StringValueMatcher and test. Involves moving some base clases around.
new b2efe5416 Consistent class names for tests
new 2e3328e27 IDP-57 - Fix bug found while testing OrMatcher (https://issues.shibboleth.net/jira/browse/IDP-61)
new 382135a2e Continue name refactoring missed in last.
new c7f602087 IDP-61 - Or Match Functor implementation and test
new 026cf6a33 Add missing "final"s (again)
new ee94224fd IDP-60 - Implement NOT matcher and test
new c13f476a3 IDP-60 - Review commetns for NOT matcher
new 639bfb701 IDP-61 - Review comments for OR matcher
new 68bb82b18 IDP-57 - Review comments for AttributeValueString matcher
new ec1b8e263 IDP-49 - Review comments for ANY matcher
new c8c8e00d8 IDP-48 - Create attribute value matcher implementation based on IdPv2 AND functor
new 54fb5ec5f IDP-55 - Create attribute value matcher implementation based on IdPv2 Attribute Scope string match functor
new 8e1d11894 IDP-56 - Create attribute value matcher implementation based on IdPv2 Attribute Value regex match functor
new da7f8be7c Mark all matchers as thread safe
new 5d0b71b43 mark Criteria and base classes thread saf
new 2bd734af4 Rename Criteria -> Criterion where singular makes sense.
new 46a36f14a Move Resolver to util module.
new 9cbb24787 Resolve some compile errors resulting from Resolver move.
new 0c583c299 Cleanup Javadoc
new ed06952f6 IDP-64 - Create attribute value matcher implementation based on IdPv2 Scripted functor (and test)
new e971996b4 Handle the fact that Criteria now throw an event
new 579f2ea5c Move Policy Criterion to extending AbstractBiasedEvaluableCriterion
new 5b176b480 IDP-100 - Create attribute policy requirement implementation based on IdPv2 Scripted match functor (and tests)
new e347fa6cf The base classes are now in the citeria/matcher packages (no multiple inheritance in java!)
new 1c2bcf573 Typos in JavaDoc
new 6376d540f Working on Session management APIs
new e18ea03ff More Session API work
new 3f4b27e4f Fix up compile errors related to EvaluableCriterion throwing an exception
new d9e7e54d8 migrate to eclipse 3.7 and parent-project configs
new f570b0670 overwrite checkstyle plugin config which used to be fetched externally with local file
new 94ca25f75 overwrite checkstyle plugin config which used to be fetched externally with local file
new 868f79e8e need to leave repository locations in project POM so it can find the parent POM
new 635a5b30b Remove IdP component interface/abstract class and move to use ones in OpenSAML
new 6420f1c59 Move the "boolean" matchers to be set up via setters, not parameters to the constructor.
new e88fff684 Typo in error message
new b91a47e99 - Source format and cleanup
new 08b2d4067 Remove dependency on OpenSAML v2
new 7810ce7c4 missed a file on last checkin
new e44424ac1 synch up with some changes to OpenSAML APIs
new b20ca00e9 Add interface for persistence management and make session manager extend it
new d1e53ee10 More work on the session APIs
new 9235287e4 Use ComponentSupport class to help propagate destroy, initialize, validate calls
new 71c0453cd Implement AuthnticationEvent equals/hashcode
new 23aa1a641 Syncrhonize the setters with initialize (for simpler code).
new ba043a132 Move the String and Regex matchers (and their testers) to be set by methods, not constructors.
new 0428da559 ScriptedAttributeMatcher. Remove parameters from constructor and move to setters. Make the class an Initializable, Unmodifiable component.
new d77554ed0 Componentize the "boolean" criteria (TRUE, NOT, AND, OR).
new 20913db25 Add attribute decoder interface
new b528d11f8 Fix method name typo
new ad6af97c1 StringValue and Regexp Criteria move from being contructor initialized to using setters.
new 46877cbac Scripted Criterion. Move to being an Initializable, Unmodifiable Component with setters.
new 2d041f8cc Start at making AttributeResolver Definitions fit into the new Component model. SimpleAttributeDefinition to start with (and encompassing support and test structures)
new af4bd42db Add all SAML encoder implementations, still need unit tests
new f5d061583 Mapped, Prescoped, Regex, Scoped, Scripted & template attribute definition become Initializable, Unmodifiable Components.
new 865dc6397 lots of encoder/decoder work
new cb94f9e20 Finish up new session APIs
new 26b37aa33 Make IdPSession constructor protected in order to discourage direct instantiation
new f8a82446e add authn impl module
new d7d27724f Add the created Subcontext into the owningContext (SubcontextContainer) in the constructor.
new 49354917c Set the context into the owning container *after* all other initialization is done (other wise the act of adding it in will fail).
new 265cb4242 rework and lock down session APIs
new 6cb6b3023 add authn impl module to parent module list
new a116a3578 works better if I don't typo the module name...
new ad4341d1f more work on authn/session API, now with unit tests
new 930161caa Bring over Shibboleth SAML extension XMLObjects - need to chat with Brent about best way to deal with unit tests
new b3724fa2d Add message decoding action and factory supporting its use for IdP initiated SSO requests
new 3e4e94b13 Remove special MetadataResolver interface in favor of more generic Resolver interface
new d0814c474 Typo in log message, fix checkstyle warnings (mostly long lines)
new c8055686d IDP-10 - Port IdPv2 Attribute Resolver Principal Name Attribute Definition to new APIs
new 48ed4fe7f Add profile impl module
new accb8f8ce Add action-specific exception to each action so that error pages can be customized based on exception type
new d545590c9 Add profile-impl module to parent POM
new 605e24218 We now depend on idp-authn-api because of the PrincipalAuthenticationXXXXDefinitions
new 76d51de6a Code review from Chad.
new 3ac96b9ff Add lots of stub response building actions as well as some implementations
new 89948c9e2 Add helper method for building Proceed actions and use it
new ca29a67ea add example profile handler webflow
new dc710b79d fix up a couple references
new a348d5a35 Typo in variable name
new 146fb1baa mark initialize() as final to avoid accidental erroneous extension of the class.
new c70ac2c5c Refactor prior to https://issues.shibboleth.net/jira/browse/IDP-44 and others.
new aa78a52d2 IDP-44 - AttributePrincipalNameValueFilter and test.
new 5438ec6f9 IDP-43 - PrincicpalNameRegexCriterion
new dfd461369 IDP-40 - Create attribute policy requirement implementation based on IdPv2 Authentication Method string match functor
new 2ba19ec31 Comments and test method names showed a touch of cut and paste
new 521d6777e IDP-34 - Create attribute policy requirement implementation based on IdPv2 Attribute Requester string match functor
new 1816fd5da Add stubs for most authentication related actions
new 63bc27a2a Add subcontexts for carrying X.509 certs and Kerb tickets to be validated
new 17edb8967 the IdP does received encrypted assertion, this is just the result of overzealous copy/pasting
new 2b1959ee2 Add attribute subcontext that carries attributes through actions like resolution, filtering, consent, etc.
new 14337c96d Use a criterion based strategy to determine if a token may be delegated to a given relying party
new 4e2e2c821 Remove "anonymous" relying party special case. This will just be represented as a relying party configuration whose activation criterion is the lack of relying party metadata
new 328f100b7 Add security configuration tracking to abstract SAML profile config
new 6dee8a4dc Add helper method to ActionSupport that binds the message contained in an exception to the Action's attribute map
new 8f6d443b1 IdP actions can no longer throw exceptions
new 2e8a611a7 remove now-incorrect javadoc
new 8dca1ab85 Add abstract class that extracts a profile request subcontext, checks for its existance and makes it available
new 27176443e Place attributes in AttributeSubcontext on relying party context
new a4f0a418a Change IdentifiedComponent to IdentifiableComponent in order to harmonize names with the rest of the component interfaces
new c8b75c75d Makes classes extend AbstractInitializableComponent where it makes sense
new f2620dd9c lots of profile impl work
new ba3efeff8 add more profile action implementations
new d3ac77d57 Have most methods of Assert return the input they are checking in order to allow check-and-assign and chaining usage patterns
new 7cc86f752 Class no longer needed
new 0c10ecf0d point to the trunk for parent project resources
new 84c8e54d6 lots of action work and unit tests
new 29aca7212 remove duplicate/unneeded deps
new 379b2830f add logback config to all modules
new 70d4dff71 some more unit tet work and demonstration of an OpenSAML issue for Brent to look at
new ab903936b missed a couple files with the last check in
new adbf18cde Move request-time profile configurations objects to a sub-package under the profile package. It never really made sense to have these in the relying party package
new a40ac085c Remove unnecessary abstract Action class
new 35c71aa05 more unit testing
new 112697cd0 More unit testing and bug fixes
new 4274eb3ab synch of project name
new 3faa2ef68 Introduce builder class for Spring's RequestContext object graph for use with testing; still need to do a similar thing with SAML messages
new 9bb025878 more action impls, unit testing, and bug fixing
new 485ebb1b0 Do not encode an attribute if the parent class cannot handle the (java) type
new da5a8f281 Fix type check in canEncodeValue()
new 2bc744eef Fix last "fix" correctly. If a value is not the correct type do not add it, but do add other types in the input array if they are valid.
new 5562bd86f Attribute Values go inside an <AttributeValue/>
new 2cfbc67a2 Fix base class for SAML2 XML encoding
new 3c3033a26 Add test for the non scoped and non SubjectNameId encoders
new 0ef6e089d Move Saml1ActionTestingSupport and Saml2ActionTestingSupport to idp-saml-api to allow unit tests for the support classes therein to be written.
new a136b0502 Add tests for Saml[12]ActionSupport classes.
new 233034f0d Collect issuer by name, not type
new 6a9b86522 Remove old module creation instructions/scripts from multi-module project
new 4c3a7c343 set name and description that will appear on the front page of the aggregated reports site
new 6ce99f069 fix up project names which show up if don't important code using the maven plugin
new 483eacb89 port over to use java-support and guava and clean up code
new bf9bb6d53 more java-support conversions, contains some compile errors
new 6548e00f8 clean up files to remove unnecessary elements
new 9249d12d0 A whole lot of API work
new f12264fa7 port to new context base class
new 54a0d9972 Rename a couple of helper classes to -Support convention.
new d1137a3c7 Switch use of ParserPool classes to java-support project versions.
new 5ad28b1c1 More attribute dependency work and some unit tests
new fccdac3ca add api module to test dependency
new a08af6e00 make TempaltedAttributeDefinition compile
new 2edc878a3 review code and sprinkle with appropriate annotations
new 609166fec Add exception for the common case of dealing with unsupported attribute value types
new 784e9c425 Lots of code cleanup - over to Rod for testing
new ba0e66c9b Case IDP-151
new dec866fe6 First pass of chopping up and simplifying the RDBMS data connector. Still need to add in support for column -> typed attribute value mapping
new d3f48b68f Some package refactoring
new 7a2704782 IDP-153
new a2a5545ed synch up with java-support checkin
new b6acd8504 Start to update to compile cleanly against java-support changes. Tests ongoing
new 74a1437cc synch up with opensaml and java-support class migrations
new af8d03fc4 Fix more compilation errors
new 36a8a89d3 Fix more compilation errors
new 134f74e20 Fix typo in class name
new 0b8543c75 Enhances testing from code coverage. Fixes to Attributes (encoders are unmodifibale once set, clone throws CloseUnsupported)
new 390082014 clone now throws CloneNotSupportedException.
new 50a66b5f4 Bug fix in permit rules. Comment why test coverage is impossible, make the engine return Optional.absert() not Option.present(emptyList).
new e5629a781 Once all the policies have been applied, we should iterate over the prefiltered attribute set, not the filtered one, in order to be able to determine which attributes were never touched by a permit rule.
new 9568f1baa Enhance test coverage. Phase 1
new 00b5d61f8 Change from SortedSet to Lists. I originally used a Set to try and catch and remove cases where people added multiple identical policies/matchers. However, this requires a potentially high burden on implementations because they have to implement Comparable which could be pretty nasty for some policy/matchers. So, we use a list and if people want to do something stupid, we let them.
new 91461430b Further test coverage
new c1458672a Remove JCIP concurrency annotations (we have the JSR305 ones now)
new 7a20dbcec Enhanced Tests.
new da8779742 Add java-support test jar to testing classpath
new 1178449f8 Remove authentication-related attribute definitions and replace with a more generic "some data from the attribute resolution context" attribute definition
new 4884c96b1 oopss... forget the getters/setters and stuff
new 26a5e8ba3 Update and extend tests to use the helper classes (Function/Predicate/Component) in java-support.
new 2de4fd34b Breath life into tests. Fix a couple of regressions caused by the rework of Attribute
new 5e7beaf9b Mark and check constraints
new bb2510fd1 Better tests and consequent fix for ByteAttributeValue
new 8ce4b88a1 fix imports
new 201f1dce8 Fix a couple of bugs in the corners of error handling and component handling.
new 25a65b48f Move classes in top-level package org.opensaml.xml to org.opensaml.core.xml
new 7472feb66 Rename packages in opensaml-core
new 4955be9f8 Rename packages in opensaml-xmlsec-api
new 7acea476b Bug fixes and first round of improved coverage
new 8fe92b123 Getting started on authn impl work
new fc5cc9efc Move some saml module classes.
new c57e1422c Rename some packages in opensaml-saml-api
new 1b6ce3287 Rename some packages in opensaml-saml-api
new c143604d9 Further Code Coverage and bug fixes. Also minor change to the setValues method for static data connectors.
new 3b0941a0c Goodbye Validators. We hardly used ya.
new 4114232e2 Move XMLObject-related config classes to their own subpackage
new 42ce03105 Rename old ConfigurationException to better align with current usage
new c7ddb88db Some more authn work
new 0a043ba2b more authn work
new 97d50648c More authn work
new f79381ea4 Rename Assert to Constraint and have it thrown ConstraintViolationException
new 29829ec5c Fixing logging for tests
new 85a187f1c Do a bunch of unit test clean up, in prep for TestNG conversion
new c808d646a idp-attribute-resolver-api clean compile. 6 tests still fail
new 304fdf2bb Tests are clean
new 542463390 Fix regressions flushed by the Assert->Constraint work
new 435c39e26 Fix typo in PrescopedAttributeTest class name. Fix pom to such in idp-authn-api is sucked in for testing. Change MappedAttributeTester class name to make sure that surefire picks it up..
new 7d632f80a Add java-support as a managed dep in the parent POM
new d3f8c5df8 Fix OpenSAML version number
new 4d915673b Update Shib metadata extension unit tests for OpenSAML TestNG conversion.
new 432981882 Fix messed up support for Shibboleth ScopedValue provider, which is not in the shibmd namespace.
new 0677e5511 clean up reference to opensaml
new 2ef8a9ced Remove explicit version from java-support test-jar dependency decl, so it just gets inherited from the dependencyManagement decl.
new a23debe0c IDP-163 enhanced coverage for all modules except rdbms. Associated bug fixes mostly to do with annotations and extra checks around initialization state.
new 4e3ab3594 Remove legacy inheritance cruft of the old SAML Configuration singleton.
new 9165f4fb6 Bye bye, DefaultBootstrap. Stay in touch.
new fc2d58cb7 Fix some out-dated calls
new 816ff6f38 IDP 169. Encoders now take <foo extends AttributeValue> rather than <foo>
new 1d3147bb0 IDP-169 Breathe life back into the attribute encoding tests. Changes in the main code to reflect that we now have attribute values (and a temporary home for XMLObjectAttributeValue while we contemplate the build/classpath implications of moving it to where it rightly belongs in idp-attribute
new 6cf3717b9 More work to recognise that Attributes carry AttributeValues not Objects, including tightening up the types in and around the internal APIS.
new ecb281a48 IDP-168 Unit tests for Attriburte encoder base classes. Some bug fixes to them but also use of ComponentSupport and addition of annotations
new 7bfbca1fc All encoders gain #equals() and #hashCode() (implemented in the base class)
new 65533dd7e OSJ-15 Do not call InitializeServer.Initialize() instead rely on an inherited class (and make sure we also respect group ordering if we have our own @BeforeSuite()
new fb33d0e63 OSJ-15 Do not call InitializeServer.Initialize() instead rely on an inherited class (and make sure we also respect group ordering if we have our own @BeforeSuite()
new fd3512c0c Tidy tests. Use BeforeClass rather than the needlessly convoluted BeforeSuite...
new ffabbd1f1 comment out consent api/impl modules until we have time to fix them
new 59e34d712 correct classpath
new 0573fba5d Accidentally inverted logic in a assert test
new 75d423446 Transition use of functions to navigate BaseContext trees
new 50d5cd57f Minor code cleanup
new b3779b871 Minor code cleanup
new 227230fe7 code cleanup/simplification
new 8995feb81 add config flag that determines if generate authn/attribute statements are added to an existing assertion or always added to a new one
new 721e0b0b7 test deps are not transitive so we need to list opensaml-core in order to use the OpenSAMLInitBaseTestCase
new ea8a8c44e Start adding some transition documentation and some action unit tests
new a916b1600 add spring extensions dep
new bd85cf780 Move a couple of SAML-specific data contexts from IdP saml-api down to OpenSAML saml-api.
new e77d782c1 Move to model where most branching conditions are exposed as event IDs so that deployers can decide how to treat such cases (e.g., ignore them, treat them as an error)
new dd61ea61b remove infinispan dep for now
new 50a1b7a55 Update POM to point to new repo server
new 0b468e963 Track profile ID in request context
new 5e2e9c102 Importing idp-war. For peace.
new 992d13a13 testing SVN
new ed4aa539e testing SVN
new d92738451 Clean up attribute resolution and filtering stages
new 13f1e26a8 refactor some Event IDs
new 043f96178 Initial set of work for bringing in the new OpenSAML message decoders for (almost?) all our supported bindings
new 4d0a36739 don't really need the metadata module right now. we should get all of that from OpenSAML
new fa9b1727b Rework some relying party related classes to allow for more flexibility of how a RelyingPartyConfiguration is looked up
new bc9a6e06c Clean up relying party configuration resolution stage
new bb91791f4 Pull up some stages that are applicable to more than just SAML
new ad2b45599 remove unused import
new 9d0150b48 add stage to selects active profile configuration
new 9de4c0fa7 profile stages and message decoders for SAML 1 and 2 IdP-initiated SSO requests - still need to deal with relay state and testing
new 39f5cd17f remove working context once processing is complete
new 4eed09c2b Add profile stage that can schema validate a message
new 9b0499c41 Rework some Event IDs to make them a bit broader
new 6694ad495 remove deprecated exception
new 196b722c9 various stages for setting up the authentication request context and filtering potential authentication workflows
new 2e107dd6a work on various authn stages
new 5aae8b2cc Unit test for profile action which schema validates incoming xml messages. IDP-199.
new e0550276f Fixed test to check for event id rather than catching an exception. IDP-191.
new 1c6f5f4a0 Add new doExecute methods that don't expose the Spring Webflow request context and convert all appropriate action implementations to using the new method. Old method still exists if an action really needs it.
new 2fc7bcb3e As part of webflow profile decoupling, profile tests now call action.doExecute(null, null, profileRequestContext) instead of action.execute(...). RequestContextBuilder.buildProfileRequestContext() is now public instead of protected.
new 112896bfc Fix debug log typo.
new c7afa7fa2 Completed check for null TODO. Fixed typo so saml2 class returns saml2 version. Updated tests.
new b54273912 Updated tests to assert event ids rather than catch exceptions which are no longer thrown.
new 9ae21fe9f Fixed errant copy/paste.
new 560884533 Updated tests with constraint exceptions and to handle AbstractProfileActions whose id defaults to the class name.
new 3254fe8cd Typo in doc.
new e77214ef7 Update ldaptive to 1.0-RC5 from RC3, which renames LdapResult to SearchResult.
new f3cf95fbd Tests should catch ConstraintViolationException rather than IllegalArgumentException.
new a9ca04ef7 More attempts to update tests so they pass.
new 9c0370987 Updated pom so that opensaml-core is of type test-jar for scope test.
new 2844001c3 Saml1 protocol should be 1.1 rather than 1.0.
new 871eab353 Update java-support, v3 OpenSAML and IdP stack, and metadata aggregator for new v3 parent POM:
new 824cd8803 Updated test to complete IDP-119.
new f010f9361 Initialize authentication context test, IDP-200, as well as authentication request context tests.
new 041f4fc03 Test for add authentication statement to assertion action, IDP-193.
new e261b2f25 Test for filter attributes action, IDP-116.
new 70aab4c57 Test for filter attributes action, IDP-116.
new 647116759 Test for resolve attributes action, IDP-117.
new f6cfdeb83 Test select relying party configuration action, IDP-180.
new 3de3770cb Test select profile configuration action, IDP-181.
new 329b023be Fixed typo from original import.
new 2d1a4ec96 Javadoc nit.
new fb053988e Test for DecodeMessage. IDP-174 ?
new 67dcfb6a6 Action testing support assertEvent(event, id) helper.
new 2705d8169 Updated profile action to return event ids rather than throwing exceptions upon error.
new 3369450c1 Cleaned up maven project <name/>s for consistency.
new a225c83a3 Renamed test.
new 0752eff84 Exception message whitespace nit.
new e579c889d Incorrect logger class.
new 53808cadb Bumping ldaptive to 1.0-RC7.
new 32022460b IDP-13 - Port IdPv2 Attribute Resolver SAML2 NameID Attribute Definition to new APIs
new ba0d55343 IDP-13 - Cleanup some code structure and most notably: The IdP EntityId is the NameQualifier, the SP one is the NameSPQualifier.
new 24d7070ba IDP-12 - Port IdPv2 Attribute Resolver SAML1 NameIdentifier Attribute Definition to new APIs
new bf9e05f46 Move dependency on opensaml-saml-impl to where it belongs
new 409ede6c9 Typos in log messages
new b7046cb71 saml-impl. Provided, not runtime
new e4e7c2654 IDP-18 - Implement (and test) Transient Attribute Definition.
new 070faa6dc Extra Todo
new f1cf9bc03 IDP-12 IDP-13 IDP-18
new 856f74bef Add missed parameter to logging statement
new 4dac9cb88 IDP-6 - Port Computed Id over to new APIs; includes tests and some restructuring of the test framework.
new d4e372cdb Move the StaticAttributeDefinition and StaticDataConnector into idp-attribute-resolver-impl. Introduce cut/paste classes to perform that job for testing idp-attribute-resolver-api
new 35a00d066 Better naming of the mock static attribute sources used in the tests.
new 2dbf6b30c Add a support class to grow a testable jdbc driver.
new 420a100c7 javadoc.
new 5fc2f8935 Forgot to modify the pom file to include hsql
new 2fa28be94 Bump HSQLDB to 2.2.9 and remove local override in resolver-impl
new 9669fb349 IDP-204 - (JDBC based) StoredIDStore and test
new 834dca175 IDP-204 - StoredIDConnector. This involved refactoring the ComputedIDConnector so that the hash calculation (and much parameterization) was common. Otherwise a port from 2.0 Much of the tests are shared with that for the ComputedIDConnector.
new 366e8e585 Missed paramter to log message
new 076ef8d9e IDP-260 - Posrt SAML1 scoped Attribute encoder to V3 APIs.
new 55e1ca607 IDP-25 - Port SAML2 attribute encoder (and test) to V3 APIs.
new 3de5b38fe IDP-220 This class is not longer required. There are multiple different requirement for each resolver and so each has been given their own Function<Class,String> members for one or more of Principal/IdPID/SPID
new cf0700748 typo nit
new 9f0bafde4 Method name typo.
new 85af5fd63 Some opensaml messaging package reorganization.
new 6e4ddc390 Annotate methods.
new b93650ce3 Set service state prior and after reload.
new 0137e8686 Do Spring build both at start and reload time, implement config file monitoring.
new fecde6c5d Expand some TODO.
new ef32df653 IDP-255 - Add Principal, AttributeIssuerID, AttributeRecipientID to the context. Also tests
new dcf78f83b IDP-18 - https://issues.shibboleth.net/jira/browse/IDP-255
new 7d539bfb4 IDP-13 - https://issues.shibboleth.net/jira/browse/IDP-255
new 054927d4d IDP-12 - https://issues.shibboleth.net/jira/browse/IDP-255
new faa462e3d IDP-6 - https://issues.shibboleth.net/jira/browse/IDP-255
new d00900c0c IDP-204 - https://issues.shibboleth.net/jira/browse/IDP-255
new d6b38f796 IDP-255 - Cleanup of log messages, remove superfluous test class. Change a few method names.
new 57ecb1eef Update classpath with 1.7 library change.
new 420aaec37 Actually start the performance event, otherwise an illegal state exception is thrown when it is stopped.
new 9ff18be6d IDP-255 Move Principal/Recipient/Issuer into a subcontext.
new 1a8317a93 Add Attribute Recipient Context and remove AttributeDataConnector. The former should and the latter hould not have been part of r4282
new bfbefa24a IDP-265 - AttributeResolutionException becomes ResolutionException (and loses inheritance from AttributeException) in preparation for PrincipalResolution (which has nothing to do with Attributes)
new 1e639d54f IDP-265 - Base Interface for PrincipalDefinitons. Initially targetted at the old style PrincipalConnectors, but retargettable to name canonicalisation
new f3815f48e IDP-265 - AttributeResolutionException becomes ResolutionException
new 3cff27f99 Deprecate the SAML data connector pending work being complete
new 75c990cd0 IDP-265 - AttributeResolutionException becomes ResolutionException
new f711b63cd IDP-265 - Definition (and tests and test framework) of the supporting infrastructure for PrincipalConnectors
new 16d081d4f IDP-203 missed checkin : AttributeResolutionException => ResolutionException
new 1eb75f05c IDP-203 Fix a couple of misplaced & mis-scoped dependencies.
new 07126b6d1 Update LdapDataConnector to use a SearchExecutor internally.
new e249de1d7 IDP-272 Move DataSealer over to V3 as a prerequiste to CryptoTransientIdAttributeDefinition. Tests added, but no coverage available
new e795b722e IDP-272 Port CryptoTransientIdAttributeDefinition to V3 APIs. Test coverage still pending.
new ee5320202 IDP-272 Port CryptoTransientIdAttributeDefinition to V3 APIs. Test coverage for the resolver and for the Data Sealer. Some exception paths not tested.
new 141f4d9f0 A temporary way to convert opensaml resources into spring resources.
new 1b698413a Moved inner classes out of the custom bean definition reader since spring was having some problems during runtime, this may be reverted in the future.
new c2f580d92 Add module idp-attribute-resolver-spring to project
new 169725141 The idp-attribute-resolver-spring module comprises spring extensible xml authoring as well as a service for the attribute resolver.
new 7ecaa5e2b Don't fail and block the build, just skip resolution for now.
new 95291e546 It looks like the spring services and resources schemas, bean definition parsers, and namespace handlers should live in idp-core.
new 0aa7f1d69 Remove unused import.
new 838563d6f This action will be called at the start of every flow, so we need to get it right. Override execute() rather than doExecute(), since the profile request context must be initialized and stored in the spring request context before it can be retrieved by doExecute().
new c5e7d95ef Made buildServletExternalContext public rather than protected as required by InitializeProfileRequestContextTest.
new 72b12f5fd Not sure where we should initialize the decoder, this class or ?
new c77938be6 An example flow and test which does not run yet.
new 06d5489cd Made scope of opensaml-saml-impl be test rather than compile.
new 865200cd1 Set externals.svn and ignore.svn.
new 223fae730 Reverting scope of opensaml-saml-impl back to compile.
new ae4f5d20c So test passes, catch and ignore unmodifiable component exception thrown when setting the id after initialization.
new 93b625402 IDP-208 : A first comparison predicate for Attribute Filtering
new ae8190d8f Spelling.
new f7a5a1a77 For spring dependency injection compatibility, change parameter type of setDependencies() from Collection to Set to match the return type of getDependencies() in BaseResolverPlugin and corresponding tests.
new 13683384d More work on spring wiring for the attribute resolver. Still wrong, but at least we can resolve a static attribute.
new 029dff0f0 Cleanup drifted imports
new 42fa2dabc Checkstyle (note that this fights with Auto-format)
new 2e20d0775 IDP-208 More of the easier predicates for attribute filtering. That is to say the ones that match attribute values and are targeted at AttributeValuePredicateMatcher
new d80e777ae Add module idp-attribute-cli to project
new 366c7bf6c Committing svn.externals and svn.ignore
new 5f809ebba Updating eclipse .classpath with jdk 7 and maven.pomderived elements new to eclipse 4.x, similar to r4289.
new 95b1b589d Add Validator interface for DataConnectors.
new 14bf61317 Added some types, annotations, TODOs.
new 089db66a7 More spring wiring work. Moved service and resource related classes to appropriately named packages. Probably will be refactored again.
new 90518ec7e Set the id of the wrapped attribute resolver to the id of the attribute resolver service.
new 14ffa0488 More spring wiring work. Moved attribute definition and data connector related classes to appropriately named packages. Might be refactored again.
new 65d4bce3a Capture RunTimeExceptions from the FilterContext predicates and turn them into a AttributeFilteringException. Some thought needs to be applied to this.
new bf9f7407d IDP-207 reintrodduce the (compound) MatchFunctor so as to simplify the parsers. More tests needed for the Logical Matchers.
new c4ae17712 Ported inputStreamToString() method from opensaml v2 to SpringSupport.
new c4775c000 IDP-207 Move the logic MatchFunctors into a separate package. Also add tests for the "Predicate<AttributeFilterContext>" part of the interface. Code coverage pending debugging Cobatura
new 2206e84be IDP-207 Add missing package info
new 5e77cdb62 Add some todos around throwing and catching or RuntimeExceptions inside the filtering code.
new dd83a7d0d IDP-208 Add the Attribute Value MatchFunctors and all the supporting scaffolding for both Matchers and Criteria. Tests added but code coverage missing.
new c5eb78d8f IDP-207 Do not allow Targetted Match Functors to have their attributeID set after initialization.
new 8e1e98dab IDP-209, IDP-46, IDP-47 Add some more dependencies. Filtering depends on the resolver *API* (and the absence of this broken the build with the last checkin). Tests for the context criteria will require the test run time library from resolver *IMPL* (in test scope and test-jar only).
new c9cc3e1f9 IDP-208 Add the PrincipalName and PrincipalRegexp filtercontext criteria and tests
new 0117683a3 Dammit I missed this in r4344
new 14e2f8a98 Add support for initializing a database from a file.
new 85ad92024 Refactoring of LdapDataConnector and RdbmsDataConnector common implementation into AbstractSearchDataConnector.
new 3be929959 IDP-208 Missed test data..
new e4b57bf71 Update dependencies to sync up with V2.
new e191c751f Fix bug in *current* implementation AttributeValueMatchFunctors to do with the different semantics in targeted and untargeted mode. Code coverage still pending. This design still subject to review.
new 7d94d6d79 SIDP-278 Move SAMLAttributeDataConnector to the test side, clean it up and add
new b1aeb93b1 Comments.
new 097ffb280 List, not set of attribute values - to allow for duplicates
new e6080721f Clean up a misleading logging message,
new 30501a474 IDP-278 Complex rule testing for the difference in semantics between a targeted (attributID="foo" present) and non-targeted (absent) AttributeValue matcher
new 44fce08c1 IDP-278 Dammit, I missed the checkin for the pom *again*
new 6facaa9f1 IDP-275 Add test to collect existing Attribute.
new e1f9a4304 IDP-275 Rename the (v3) context that the scripts get so as to leave the old name free for legacy support.
new d96b331ef Fix infinite loop in doInitialize
new a39d37ca2 Turn start/stop into usable Spring init/destroy methods.
new e17dcd947 Refactor content of initialize, validate, and start methods to fit expected lifecycle.
new 5328e4606 Call superclass validate()
new 5dd8626c1 Shell that loads a Spring config with logging, opensaml config, and a flow execution env.
new b62e5065d More descriptive name. Replaced "3.0-SNAPSHOT" with "${project.version}" in dependency version.
new 5f5fe1e57 Exbed the test scripts.
new a95e070d1 IDP-206 Recast the environment that the scripted Attribute resolver lives in to provide visibility to things which look like real attributes. Also the start of support for V2 scripting. Test coverage and documentation to follow.
new 0ad408073 Check for null task timer on stop.
new ace22f2bb Add module idp-attribute-filter-spring to project
new cc2678869 Committing svn.externals and svn.ignore
new f11d09911 Change javadoc for Attribute#getValues() to match code. Modify ScriptedAttribute to take advantage of same.
new 93d3912ae Initial work implementing spring wiring for the attribute filter service. Many TODOs. General layout is probably okay. Want to refactor 'filtering' to 'filter' everywhere except configuration files.
new 3d9df54c4 Missed some classes from last commit.
new 377fcf4da IDP-206 First part of backwards compatibility for V2 scripts. Includes tests for all four examples taken from the wiki unchanged (apart from indentation). On bug fix needed: the scripts implicitly assume that getValues() returns a list.
new 4610eb3d8 Typo in script.
new 2881bb154 IDP-206 Add in support for the V2 context and tests
new ce541c074 Remove need for spurious imports in a compatibility module.
new 01c6fbb19 Fix check style warnings: Add missing licensing info. Add more TODO statements. Add package files &c &c
new a16d48912 Clean up some very didgy imports which eclipse (and I) managed to add to the emulation class. Add test for the emulated methods (to flush any further such issues)
new 59e82c13f Guard servlet object access for non-web use.
new 87b87a699 Expose a Spring request context via OpenSAML context tree.
new 694cf4056 Add module idp-distribution to project
new 14af21d82 Committing svn.externals and svn.ignore
new eae287862 Adaptor for POJO actions, and adjustment to bootstrap action to use new profile context class.
new 4f6d9f00b Adjustments until we finalize where ProfileRequestContext really lives.
new 2a89c48c8 A webflow illustrating Spring-aware and nonaware actions, run from command line.
new 3319b30aa Clean up logging slightly
new 48dce51b8 Enhanced code coverage for Scripted attribute definition
new f1d6899f8 Start on Testing framework for parsers.
new e7a24d9f2 IDP-205. The dependency parser should be collecting sourceAtttributeID from the parent.
new 0ddfc552d AttributeEncoders has to take a SET not a list, otherwise Spring cannot find the setter.
new 7417d4132 typo, remove warnings
new f14d1a861 IDP-205 SimpleAttributeDefinitionBeanParser and tests (encorporating BaseAttributionDefinitionBeanParser)
new 819a3fe08 IDP-205 Set the attributeId of the dependency during initialization of AttributeDefinitions. Makes for cleaner parsing at the cost of some care being needed to rehash the Dependency Set in the super class.
new 4087910c6 Temp fix for build issues. Work in progress
new 519953a7d IDP-205 parser and tests for ScriptedAttributeDefinition
new a181e478c Profile and action refactoring. Actions left in idp modules for now.
new 2dcfa4a3b IDP-203 Parsers (and tests) for CryptoTransientIdAttruibuteDefinition
new 28c52c0ab IDP-282 add PirncipalAuthenticationMethodAttributeDefinitaiom and PrincipalNameAttributeDefinition and tests
new 55c1179c5 IDP-205 Parsers for Prescoped, PrincipalAuthnMethod, PrincipalName, Regexp, SAML1NamedId Attribute definition and tests
new bbd0aa0f9 Sync up with latest changes to profile classes.
new 4a00188c3 Better linkage between IdP and OpenSAML action base classes.
new 11e73646b Add LdapDataConnectorBeanDefinitionParser with unit test for parsing v2 and v3 configurations.
new 230ef6e34 Move Event ID constants into opensaml.
new a0d568634 Add annotations.
new 220a73a75 Move a predicate class into opensaml.
new 196bcdee6 Migrate a couple of actions into opensaml.
new fff69f491 IDP-205 Template definition takes its input attributes as an Array<String> rather than trying to infer them from the dependendencies. Makes constructing the bean tractable and understandable.
new 2ec3c35bc IDP-205 Template definition gets the velocity engine injected. Also the case where no template text is provided is aligned with the V2.x behavior. Test coverage for this and previous checkin.
new 442989956 Javadoc typo
new dba0f4e16 Bug in namespace definition caused tests to [start to] fail
new b4437eddb IDP-205 Parsing (and tests) for SAML2NameID, Scoped and Template Attribute Definitions.
new 1d700f2c3 IDP-205 Move Attribute Definition tests and their data down to the ad folder/package. Move the data for the top level tests down to the appropriate directory
new 291ce0415 IDP-205 Fix typo in method name. Exbed a test class to make it available to other test environments
new 0a7044227 IDP-205TransientIdAttributeDefinition parsing and tests
new c6aa1a344 Fix dependencies for build.
new bbcf5736f Switch bean scope to prototype.
new cb2372d0a IDP-7 Modify Mapped Attribute Definition To be much, much more like the V2 version. This will ensure compatibility and a significant easier job of parsing and wiring.
new 806c27922 IDP-7 Annotations, tests and constraints.
new f79ece7dd IDP-203 Parsers (and tests) for MappedAttributeDefintion and its two child beans
new 178577c17 Fix v2 LDAP property parsing.
new 9f4ed2509 IDP-203 Minor fix to method names for MappedAttributeDefinition
new 849051cee IDP-205
new 8af01869d IDP-205 minor refactor of the BaseDataConnectorParser and the Static parser. Proper tests (+ refactor of test classes)
new 5018859dc IDP-205 Add in ComputedIdDataConnector and tests. Also most of the skeleton for the StoredIdDataConnector (but no tests for this latter).
new 5cccbf64e BeanPostProcessor to wrap profile actions.
new 556a80d06 BeanPostProcessor to wrap profile actions.
new dca41b6d3 Coding guidelines - Add missing annotations.
new 0fdf0d1a9 Coding guidelines - Add missing annotations to the computed and Stored Dataconnectots
new 8a0681eb5 Coding guidelines. Remove Optional from LocalizedStringAttributeValue
new 59c200d1d IDP-283 Remove Optional from Scripted support functions and its only use in the attribute filter)
new c1ff0c48e IDP-205 Fix regression in MappedAttributeDefintion parsing not caught by jenkins.
new bfc9d0eb2 IDP-273 Clean up logging for attribute defintion and data connector parsers.
new 13a33494f IDP-283 Remove use of Optional inside filtering Engine
new ee00169aa Rebase ReplayCache on top of storage API and fix tests.
new 1255f0ad3 IDP-273 Apply coding guidance, mostly in the names of test methods.
new e79de1196 IDP-273 Apply coding guidance, mostly in the names of test methods.
new d6db8dc65 IDP-273 Apply coding guidance, mostly in the names of test methods.
new d5d4fc93b IDP-273 Apply coding guidance, TestFooClass becomes FooClassTest and 'test' gets dropped from the method names
new 42b1db5b6 typo
new e507993b3 IDP-273 Apply coding guidance, MumbleAttributeDefinitionBeanDefinitionParser becomes slightly more manageable in length as MumbleAttributeDefinitionParser
new aa22e68de Cleanup. Set svn:ignore property, remove Eclipse Java builder and .classpath.
new b3c343d39 Make the idp war minimally deployable. The contextConfigLocation param has been removed and will hopefully be set by the Jetty context descriptor. The v2 elements have been commented out. The JSPs referencing v2 are obviously broken until more porting happens.
new 5c964c287 Initial incomplete port of the v2 StatusServlet.
new bbccf23a3 Add idp-war module. Remove version from maven-jar-plugin since it is defined in the parent pom. Formatting.
new 0cbf6a0c4 Build a minimally runnable distribution. Initial commit of incomplete configuration files. Remove Eclipse Java builder from idp-distribution.
new e1e9f9231 More idp-distribution configuration files.
new e67daa2c4 Add FormatExecutableStatementBuilder to construct SQL using String#format.
new d82d0e4c7 Cleanup variable naming.
new f96478902 IDP-205 Tidy the NameID encoders priot to implementing the (discouraged from use in V3) StringNameId encoders
new f5a5f6098 IDP-205 Implementing the (discouraged from use in V3) StringNameId encoders for SAML1 and SAML2
new a165a0f8f CheckStyle
new d3875b27b IDP-205 Prepare the ground for the encoder parsers. Schema, spring gubbins and skeletal NameSpaceHandler
new 49deefd48 IDP-284 Attribute encoders never return null. Fix the annotation and the code for the concrete implementations.
new 3f346b3b8 IDP-284 test method names loose "test"
new 417465f2d IDP-284 test method names loose "test"
new 45caca1df Saml2ScopedStrinAttributeEncoder was inheriting wrongly
new 18a20d45e Bump ldaptive version to 1.0
new 101d37c6e IDP-4: add RdbmsDataConnectorParser and unit test.
new c49a13bb0 IDP-203 Parsers for all the old Attribute Encoders. NOTA no spring support for the (probably going to be dropped) XmlObjectNameIDEncoders
new eb077dcd2 Fix test regression introduced when the base class for the encoder was moved from SAML1 to SAML2
new 0ea100121 Temp fix a compile error due to refactoring work.
new 2d82b96e5 IDP-273 Remove Optional from the Attribute resolver APIs
new d850001d7 IDP-207 Remove Optional from some tests
new 03c082cdf IDP-273 Remove Optional from the Attribute resolver APIs. Two missed instances
new 4e4ea5ab1 IDP-273 Remove Optional from the Attribute resolver APIs. Dependency API looses them now
new 29d6b445d IDP-203 introduce getLogPrefix into base classes as an enabler for code tidy in inheriting classes.
new c042bf9c3 IDP-203 add logPrefix paradigm to the attribute resolver. Change prefix for Data Connector
new 95fe2d9a1 Add support for wiring a DataSource with v2 config or Spring.
new c7d80f045 typo in comment
new 5c7682f01 IDP-273 Cleanup pass over log messages (and eyball the test logs to coherence)
new 92a7a7105 Porting a couple more v2 SecurityPolicyRules to new MessageHandler API.
new 9eee77ea6 IDP 208 Start refactoring the Filter-API code so there is a more recognizable link between Schema constracts and Java Classes. Part 1 of n. MatchFunctor. The -impl code is not correct yet, but still compiles and passes all tests.
new 4daf7b1c2 Fix build. For some reason MatchFunctor did not get removed in the last commit.
new ff92d0d74 IDP 208 Start refactoring the Filter-API code so there is a more recognizable link between Schema types and Java Classes. Part 2 of n. The Predicate "criterion" becomes a MatchFunctor called " policyRequirement rule (as per the schema)
new 7d031ebb4 Fix build - some test code got comitted by accident.
new d5061e670 More refactporing provoked regressions.
new 10758acb7 Update Jetty dependency version.
new b1604435c IDP 208 Further refactoring the Filter-API to link better between Schema types and Java Classes. Part 3 of n. AttributeValueFilterPolicy gets exploded out into AttributeRule PermitRule and DenyRule
new faf037bcd IDP 208 Further refactoring the Filter-API to link better between Schema types and Java Classes. Part 4 of n. Clean up method names for <AttributeFileterPolicy/>
new 42a5bcf48 Refactor message decoding to use an injected MessageDecoder rather than a factory.
new 32fee9d41 IDP 208 Further refactoring the Filter-API to link better between Schema types and Java Classes. Part 5 of 5. Tidy up the implementation of the existing attribute filters to match the new -api. The resulting setup matches the schema better, is easier to understand and certainly easier to extend. Also take a pass through the logging, introducing the getLogPrefix() paradigm, and check code coverage.
new 672bdbb4a Process all composed matchers even if a composed matcher returns no matching values. Probably a copy-paste error.
new c8fd6b152 A a regression test for the bug found and fixed in r4482
new 78bab7969 Fix checkstyle nag
new 530557f72 IDP-207 Filters (regexp & string) for Attribute Issuer & Attribute recipient. Plus tests
new ac386ef9d Add prototype WebFlow adaptor for invoking a MessageHandler. Still needs unit tests
new 05b5d5379 Mildy refactor idp-attribute-filter-spring so that it will build and add it as a module to the parent POM.
new c14f38088 Add missing modules to parent POM, hopefully correctly ordered.
new 55e4f2c64 Add idp-attribute-api and idp-profile-api dependencies.
new 87cf80fba Do not try to build idp-distribution, yet.
new 940ade0c8 Discard the attribute filter service test, for now.
new 2d6bf6257 Initialize Resources upon context creation. Maybe resource initialization should be done elsewhere, but it lives here for now.
new 250385b57 Test simple configurations of the attribute filter service. AttributeRule is now an IdentifiableComponent, and the PermitValueRule and DenyValueRule classes have been deleted as they were difficult to parse via Spring and replaced by MatchFunctors. Include an implementation of AnyMatcher. The attribute filter parsers are not complete, and there is some uncertainty regarding how to handle id attributes.
new 9e461112c The AttributeValueStringMatcher Spring bean definition parser.
new ce1750398 Test was failing when run on a case-sensitive file system.
new 12d4485fc Misnamed test methods
new d0f198167 Fix package names in idp-attribute-filter-spring. Change net.shibboleth.attribute to net.shibboleth.idp.attribute.
new 4a26bb078 Fix package names in idp-attribute-filter-spring. Change net.shibboleth.attribute to net.shibboleth.idp.attribute.
new 96f51d454 Fix package names in idp-attribute-filter-spring. Change net.shibboleth.attribute to net.shibboleth.idp.attribute.
new 3132ee129 Rename "filtering" to "filter". The AttributeFilteringEngine becomes the AttributeFilter, although AttributeFilterer might be more consistent with the AttributeResolver.
new aefed0bea Rename MatchFunctor to Matcher and its evaluatePolicyRule() method to matches().
new b211d4717 Fix missed commits when refactoring MatchFunctor to Matcher and its evaluatePolicyRule() to matches().
new 41caa2450 Refactor subject name principal connector to use a MessageContext<SAMLObject> and related new API classes.
new 6020e0abd Fix a couple of POM property name typos.
new f5796e3c5 Check Brent's refactoring and strip the TODO to get that done.
new e966e27ac Checkstyle
new 734ac3225 IDP-283 Add some missing code coverage after the previous rounds of cleanup
new ee792fd5f IDP-283 Introduce tristated results from matchers to allow context lookups to fail. For now this is done via a runtime exception. To be revisited at the end of the project. Also tests for same,
new ff5c3fcd5 trivial optimization. Preallocate our map to be the size we want it.
new f93aa8a61 IDP-283 Update to use trstating (rather than a borrowed exception). Removes sereral todos
new f53fd3df7 IDP-207 Add some more metadata needed for attribute filtering and resolution. AuthenticationMethod and issuer/requester metadata
new 7f91b9d00 IDP-283 MatcherException gains a constructor
new 23daa3cbc IDP-283 couple of missed checkins.
new 31f7bbcd1 Another way to optimize the size of the underlying guarded maps set via setFilteredAttributes() and setPrefilteredAttributes().
new e3d44f243 IDP-208 AuthenticationMethod String & Regexp Matcher and tests
new 6a9ae7949 IDP-208 A Start on the EntityAttributeFilters: AttributeRequesterEntityAttributeExactMatcher and supporting infrastructure and tests
new 7649a5b96 IDP-208 A Start on the EntityAttributeFilters: AttributeRequesterEntityAttributeExactMatcher and supporting infrastructure and tests (part ii)
new 3e88a9759 IDP-208 A Start on the EntityAttributeFilters: AttributeRequesterEntityAttributeExactMatcher and supporting infrastructure and tests (part iii - missed checkin)
new 65741450f IDP-208 Minor plumbing change: [sg]etIssuerMetadata => [sg]etAttributeIssuerMetadata
new 449f4c377 IDP-208 AttributeIssuerEntityAttributeExactMatcher
new c53740f16 IDP-208 AttributeIssuerEntityAttributeRegexMatcher and AttributeRequesterEntityAttributeRegexMatcher
new e795bfa95 IDP-208 AttributeIssuerEntityGroupMatcher and AttributeRequesterEntityGroupMatcher
new b93b33691 IDP-208 AttributeRequesterNameIDFormatExactMatchFunctor and AttributeIssuerNameIDFormatExactMatchFunctor and tests
new c9e40c20e Refactor Ldap and Rdbms connectors to use java.beans.Introspector for retrieving beans from the Spring bean factory.
new df7896894 Remove factory impls for SAML message decoders from opensaml-saml-impl.
new 712221077 Pull IdP-initiated decoders out into distinct public classes, and remove their associated factories.
new 034958fdf Refactor and flesh out the Shibboleth protocol IdP-initiated message decoders.
new 5d9c4026d IDP-208 AttributeInMetadataMatcher and tests
new 730222c37 Update Spring Web Flow dependency version to 2.3.2.RELEASE. Add spring-webflow groupId and version properties to the v3 parent POM.
new d22e263e9 IDP-208 AttributeInMetadataMatcher changes to handle multi-mapped attributes and the case where attribute values were present but could not be decoded/
new 0b2da17f8 Rebasing transientId defn on storage API.
new 934969d78 Update class used for idStore bean.
new b7c996e02 Move storage classes into their own modules.
new 73f0e6f45 Add storage-api as compile dep.
new e577ac35a IDP-208 Code to reverse map from a SAML RequestedAttribute to an IdP RequestedAttribute. Some tests, final tests to be completed.
new 3354b670f IDP-283 Cleanup Pass over Attribute Filters
new f2ac42cdf IDP-209 Cleanup over spring code. Shut up (much of) checkstyle's whines. Add appropriate logging of tests
new 14dd4bf8b Properly handle long to DateTime conversion in IdP-initiated decoders when time param wasn't present.
new 0dc3b1a19 IDP-287 use @NonnullAfterInit
new 37ab66506 EncodeMessage:
new e79d34398 IDP-209 Start on wiring up the Attribute filters. Some code rationalization. Centralize the answer to the (as yet) open question about references.
new 679269a3c IDP-287 review comments.
new d9f114bad IDP-287 review comments.
new 13b8b6b2e IDP-287 review comments. Matcher implementations should reflect the annotations
new 260b3e084 IDP-287 Start refactoring the filtering as per the latest design.
new f70568f59 IDP-287 Dang, I always forget that profile-impl tests attribute filtering
new 26c04e321 IDP-287 surpress failing tests pending writing the parsers
new e02da183a IDP-287Add tristate handling the the logical matchers
new 9273bad26 IDP-287Add logical policy rules.
new 6ddb05b87 IDP-287Add parsing for the new implementation of 'or' and 'any'
new 5d216edf5 IDP-287 Better tests for the -api
new 72095d0a5 IDP-287 Tests (with coverage) for the new PolicyRequirementRules, some cleanup of the old Matcher tests.
new a2b2a20bf IDP-287 Per review feedback, modify the AttributeRule to take a single matcher and a boolean to say if it is a deny or a permit rule.
new 0d2c89162 IDP-287And yet again he forgets that profile-impl tests attribute filtering
new c93d525d2 IDP-287A whole lot of things that were Matchers now become PolicyRule.
new ff8edde94 Update ldaptive version to 1.0.1
new d2a728841 IDP-287 Put in the basic skeleton for all the AttributeValueMatcher Parsers.
new 7c19b15be IDP-287 Finish cleanup of Matchers.
new ccf9f954b IDP-287 Scripted matchers and Scripted Policy Rules
new ce5a82b50 typo
new 4fb4db97c IDP-287 Start to clean up old style tristating. No more MatcherException
new e04aa147f IDP-287 Start to clean up old style tristating. Matcher doesn't throw AttributeFilteringException any more
new 19780ef6c IDP-287 Start to clean up old style tristating. Matcher doesn't throw AttributeFilteringException any more
new 1edf5afa5 IDP-287 Start to clean up old style tristating. PolicyRequirementRule doesn't throw AttributeFilteringException any more
new d6b70e3b4 IDP-287 Remove AttributeFilteringException from everywhere except the topmost engine (including all those places which should have been in the previous checkin, but which Eclipse forgot to tell me about. Thanks eclipse).
new 148204bf1 IDP-287 Change local variable from "matcher" to policy rule. Got missed when I cloned the test from the scripted matcher test,
new 23df1adfd IDP-209 References only grab data from the "ref" attribute, rather than look at the attribute and fhe body text
new dbb06acbe IDP-209 References only grab data from the "ref" attribute, rather than look at the attribute and fhe body text
new 0db7c3146 IDP-209 Put together basic framework for unit tests of parsing of attribute filter parsers
new c77ff99eb Fix not quite right pom.
new 43b4ecba5 IDP-207 Attribute Value Matcher/PolicyRule parser tests. Also contains the test for all the strange "bridged cases"
new 28f58d53a Rod forgot to commit the pom(again)
new a6712b90b IDP-207 Complete implementation and tests of the Logical (And/Or/Not) Match Functors. Plus related bugfixes
new 118e74a02 Tidy
new 9694eea6d Change Method.
new d8bd8fa3f IDP-207 Parsers and their tests for the regexp attribute value/scope parsers and the attribute scope parser
new 59b52f1eb IDP-207 Start to do the work for "natural policy rules". This includes:
new 431ef8c71 Attribute Issuer policy parsers and tests
new 7c2af196d IDP-207 Authentication Method and Prinicpal Name filter parsers and tests
new 096db5184 Some authn-related refactoring.
new 8bc24118c Missed a fix.
new 72500c934 Missed a fix.
new 764ea0740 Fix failing test.
new fb0223184 Fix failing tests.
new 19cf18eee IDP207 add the forgotten NumOfAttributeValue Policy Rule (plus tests)
new 313624a30 IDP207 Add parser (and test) for NumOfAttributeValuesPolicyRule
new 01fce4ae0 Extend wrappers to handle AttributeMap-based EventContext.
new 675514c6d Add a SAMLContext type.
new 634017fec More refactoring of core authn APIs.
new bd187db2b After reflection, restore inactivity timeout.
new 0b5f1195f Missing annotation
new 911753dbc Add name hint.
new 96e34f8ed Add event serializer property.
new 40e555b45 Add storage dep.
new 8bdaf3667 IDP209 Parse scripted matcher. Includes a minor change to loggingprovoked by the tests
new 4d0b3028a IDP 283 - fix based on feedback.
new 0c011aafe IDP209 Parse all SAML policy rules except "AttributeInMetadata" and associated tests.
new 3e76a652e Add comment explaining use of Subject internally.
new 8802f3edd IDP209 Incorrect getter name flushed by writing tests (which missed the last checkin)
new 3220f8abb Revert 4599 for this file (whitespace only change?)
new 0ad236b22 Fix up the bootstrap action for authn.
new 0c590b6b6 IDP209 Add Deny Value rule parsing at the top of level
new 0d3285008 Start of renaming some classes.
new 0574244b8 Start of renaming some classes.
new 44c7f855f Rename workflow methods and add annotations.
new 39725f465 New Principal types for SAML authncontext data.
new 47b95c2e5 Move SAML-specific context subtype into idp-saml-api module.
new 4e778c7bd Improve some APIs, add an isActive checker.
new 35032677f Add implementation for TemplatedExecutableSearchFilterBuilder.
new 752ba911a Add pre-exec hook.
new ee64f058b Bit of cleanup on session API, lot more to do.
new 45edc4390 Fix test annotation.
new 7451ad20a Re-fit the passive filtering action, add unit test.
new cb5f6c122 Shorten action name a bit.
new 163151536 Add a ForceAuthn flow filter.
new 369b6b04d Removing action, will move this functionality back into the requested workflow extractor.
new 1f76baa78 IDP-108/160: action to select a flow or reuse a result
new 0b87d6afd Add a pre note to the action.
new 3ae680936 Rename a method.
new a2c88297f Unit test for flow selection action.
new 9ccf7e3da Fix a couple of pervasive errors to get some files building.
new e5531f2d8 Action to extract active results from session.
new 8f7481412 IDP-158 - user agent address extract action / unit test
new 0e3f4c2e8 IDP-207 First, gentle rework as a result of code review. Second rework will be more radical.
new 899e460e0 User agent string extraction / unit test
new ddcb73c8b IDP-112: factor out REMOTE_USER extracton
new cbd2b23cc Use constant for U-A header.
new 3c0eee12d Renamed some methods.
new 5ed0c53fc IDP-293: basic-auth extractor
new fd30b749b IDP-228: extract credentials from form submission
new 5eb12e768 typo
new 28a8517d0 IDP-207 More rework. Move a lot of basic function over into -api and add a couple of general Interfaces against an eventual non SAML use of attribute mapping.
new 6eaa2459c IDP-207 Latest checkin requires OpenSAML to be added to the pom
new ee126ede3 IDP-264: relax name format matching for attributes
new a48215327 IDP-207 As per r4634,Try pointing the pom at the correct package.
new 46aae75ec Remove extraneous events.
new 38662798e Some recfactoring, leaving the rest for later.
new 620cd0754 Refactor some TODO actions.
new 5146647df Basic auth challenge and unit test
new 68b1e3088 Added missing log prefix.
new 6702d01f0 IDP-107: form login page action
new 9d2e1dd4d Add a context slot for preserving login errors.
new 6df97bed9 Add error information to login page context.
new 53c66f071 IDP-110: IP address authenticator
new d4909a332 Update TemplatedExecutableSearchFilterBuilder to include the attribute resolution context in the velocity context.
new 675ef27e0 Simplify subject handling in authn results.
new f503cb443 IDP-112: validation of REMOTE_USER and unit test
new cda3ff526 IDP-264 Clean up logging to help understandign of code and of logs
new 1eb6ed8f0 IDP-264 An example of a configuration of the requestedAttribute to IdP RequestedAttribute config.
new e99947125 IDP-264 fix name
new d09186647 Fix failing test.
new 56c6ccc10 IDP-296 As a preliminary to turning off Schema validation in SchmeTypeAwareXMLBeanDefinitionReader, fix up the tests
new a483f7815 IDP-296 Turn on XSD schema validation by default for SPRING parsers
new 30bba243c IDP-231: JAAS login action
new 4e28d5f20 Remove unboundid version.
new 941529b3e Add LDAP test for JAAS action.
new 7f9d2d674 Rename TBD action updating session.
new 089d3e010 Rename TBD action updating session.
new 3c241df86 Move ESAPI config initialization into opensaml-core
new d00556f40 Fix comment.
new dc4a2d71a Action that finalizes authentication and creates SubjectContext.
new 844da1cb5 Add cloning of custom principals.
new a125a39af Get rid of superfluous exception class.
new e41306378 Draft API for subject canonicalization.
new 589f07875 IDP-297 Throw out an Error log message if we detect the same attribute being declared twice. Modify test to exercise same
new 1518368c4 IDP-297 modify r4665 to throw and IllegalArgumentException. Modify test to exercise same
new 845fe18a4 IDP-264 Some minor changes as a result of conversations in shib-dev. Most notable are
new 695d28536 IDP-264 Some minor changes as a result of conversations in shib-dev. Most notable are
new 7d3f8d2bf IDP-251 Move shibboleth-2.0-security schema to idp-core
new 4d66aa71b Action to finalize a flow and canonicalize subject.
new 8ff3399d9 IDP-207 feedback from Tom
new 7d2bfabcb IDP-207 Cleanup some javadoc/annotations/logging
new fc2f913d0 Javadoc typos.
new 77a4866ac IDP-283 Cleanup of implementation of the attribute filters.
new 78a82bd9c Remove defunct new MetadataProvider interface.
new 99fc5ba40 IDP 209 AttributeInMetadata parser. No tests at this stage
new 3633b55f4 IDP-264 Remove p-namespace
new 8cd529d98 IDP-283 Cleanup of parsers for the attribute filters.
new 733f626e7 Extend error handling and refactor validation-related authn actions.
new 33e53b463 Reworked subject c14n as a profile action and adjusted finalizing actions.
new 84d00a758 Fix an issue with absolute file paths, URIs and windows
new a94f40531 checkstyle/imports
new 478e8a5cc Fix handling of context lookup functions.
new 92c5be7a5 Support for connecting various bits with requested authentication types.
new 5230888b5 IDP-273 partial cleanup
new 374828f76 SIDP-591 Make the message when a resolution failed a warning since there is an obvious case to make it happen
new 9778cbc4c IDP-273 Cleanup- javadoc/annotation/...
new fbe52cb1d Supporting classes for AuthnContext eval machinery
new 41d012fac Exact match predicate for principal comparison
new bfd1880b4 Inexact match predicate for principal comparison
new eababcd86 Change collection handling.
new e884a3b2a Add module idp-attribute-mapper-api to project
new b12b2a7fe Committing svn.externals and svn.ignore
new f58f5862f Add module idp-attribute-mapper-impl to project
new 2cbc1b9f2 Committing svn.externals and svn.ignore
new 657f7ed2c Context for requested authn types, compat checking added to validation actions.
new 8e8867193 Fix failing test.
new 0c912a702 Fix null check.
new 887040f6b Test for R4698
new 456cb2617 Move attribute mapper from idp-attribute-filter to idp-attribute-mapper, IDP-307.
new 7b31f2a49 Remove empty packages and directories after moving attribute mapper from idp-attribute-filter to idp-attribute-mapper, IDP-307.
new 3e410b251 Add idp-attribute-mapper to idp-parent pom, IDP-307.
new 2e4421962 Move responsibility for adding AuthenticationContext out of authn flow.
new eed7e4c63 IDP-273 More cleanup of attribute defintion and (some of) the data connectrors.
new c096f8848 Unit test for checking requested principals in validation action
new cf3538ff1 Reworked variable declarations. Added TODO to pre-compile source value Patterns.
new fff1d16bd Redo authn selection action with new requested principal design.
new 53ff56023 Add a flag for password reset.
new 736ac73c1 Add schema locations to fix Spring parsing.
new e7bb94f7f Convert locations to classpaths until we fix this.
new 50e46a579 More work on idp-distribution. Hardcode the home directory for the IdP to /opt/idp. Configure a dispatcher servlet in idp-war web.xml for the /profile/* path to be handled by web flow. Configure Velocity as the web flow view resolver. A very simple status flow prints "ok" for the old /idp/profile/Status URL.
new 921997676 Include flows/ and templates/ from idp-auth-impl and idp-saml-impl in idp-distribution.
new f0e8ce3df Add jetty-maven-plugin to run the IdP from the idp-war directory via 'mvn jetty:run'.
new 48f3698b4 Temporarily build against specific Jetty snapshot version until the start.d directory stabilizes.
new f53523339 Move Velocity up a context to internal.xml and configure webflow in profile-servlet.xml. Remove the now unnecessary velocity-config.xml and webflow-config.xml.
new b7f13b848 Fix comment.
new ccd808191 Spring configuration of authentication comparison rules.
new 69813e3af Correct javadoc.
new 24d5404bb Mocking up authentication subflow.
new d4e0ecccd Remove stale examples.
new 1b679cac7 Consolidate a couple of event IDs.
new bf9d8ea1a Comments, some fixes.
new d649b4627 Missed an event comment.
new 8253b5a0c Fix comment.
new 23ae352aa Remove dependency on immutable list.
new 194f1dd8a Draft c14n and ip-based login flows.
new fe2171323 Default to adding custom principals from underlying flow.
new f94b92072 IP-based login descriptor
new 7e6dbab74 Add Duration-based setters.
new 1c2f9bc0b Switch from Duration valued setters to annotated fields.
new 5cf3f469d Reverting use of immutable lists and removing getters.
new 9d7af594f Added remoteuser flow and additional comments.
new f743a4007 Rename field to match accessors.
new bd411e2d4 Adaptor needs to override the opensaml execute method.
new 75dad7ee2 IDP-273 Widen out the AttributeResolverTest to contain many more attribute definitions and a few data connectors.
new 59e2170f9 IDP-273 Widen out the AttributeResolverTest: Add in the LDAP connector
new 7752ffbd3 IDP-273 Widen out the AttributeResolverTest: Add in the RDBMS data connector. No templating (yet)
new 96a995da4 Convert login form display into a view-state.
new 346ac1014 For now, replace absolute path with IDP_HOME reference.
new 87668da69 JSP login form example
new db28df21a Basic-auth flow omitting the actual challenge.
new 8b57f3df3 IDP-205 The template (velocity) engine is no longer fixed. The parsers will/do supply the default value.
new c750afa11 IDP-205 clean up Attribute resolution logging based on my experience of debugging a V2 configuration. In most cases resolvers become less wordy (debug->trace) in others more (trace->debug). Some extra logging has been added and the legacy context gets a better #toString() method.
new 049ebc2f3 IDP-205 Add templating into the RDBMS data connector.
new 2ab425d70 Forgot to change absolute path.
new 874200bc5 IDP-205 Modify the LDAP templating to use an injected velocity engine in the same way that the RDBMS one does
new 3c6f9f61c Move DataSealer into java-support.
new 413b595c0 Remove old MetadataProvider interface and all references.
new 537a8efef Resuse the velocity configuration in velocity.xml.
new ae30736c5 Rebase DataSealer on AES-GCM using BC-native API.
new 1c6c677d3 Eliminate redundant context lookup.
new 9ecc9f65d Add abstract base for subject c14n, and add transform support.
new b564f598f Add log prefixes.
new 161718571 Add abstract base for username extraction, and add transform support, case folding/trimming.
new ac7fbb055 Remove extra copy of canonical name from AuthnResult
new 92960c36c Remove extra copy of canonical name from AuthnResult
new 08ff3c741 Remove extra copy of canonical name from AuthnResult
new d3e37c72c Moving test principal to -api test classes for reuse.
new ef0974e3b Moving test principal to -api test classes for reuse.
new 637c1a55f Serializer for authentication results.
new b02f48e7f Copy over improved JAAS config handling.
new 3fa209819 Add serializer to flow definitions.
new 43029a2c4 Move CompositeMetadataResolver down from IdP to OpenSAML. Refactor to make it actually implement the MetadataResolver inteface.
new e25ce3219 Bring in some shib:KeyAuthority support code from v2.
new 501fe54c4 Javadoc fixes.
new 78a975104 Can't use a class here from opensaml-security-impl, don't want an IdP module depending on an OpenSAML -impl module.
new 6ffcdc400 Implement metadata node processor plugin for shibmd:KeyAuthority support.
new d54662b34 Remove some stale classes and fix CS warnings.
new 2b92c248a Disable CS warning.
new c1d837b59 Supress CheckStyle on a couple of parsing methods
new 6161fbc76 JSE-3. Change version of spring-extensions from 1.0-SNAPSHOT to 1.1-SNAPSHOT and add as a managed dependency to java-parent-project-v3.
new 7ed6f9e93 Some tweaks to ServiceSession class, pending full check-in of session changes.
new b60c9dc5a Session API revisions
new 21c51567c Adjust for session API changes.
new 6f6c26647 Add module idp-session-api to project
new 684d5ba8e Committing svn.externals and svn.ignore
new 5749cfabc Add module idp-session-impl to project
new 3825976f0 Committing svn.externals and svn.ignore
new 2ca86cdd1 Move session classes to new module.
new df54a3b74 Move the KeyAuthority processing-related things into their own package, in prep for also moving new metadata PKIX validation information resolver there.
new 0ad726812 Finish review driven tidy up now I can turn off CS warnings.
new 17570034e Update LdapDataConnectorParser to support the v2 trust and authentication credentials.
new 4f87d1e95 Eliminate duplicative EntityIDCriterion/EntityIdCriterion in favor of a single one, which for visibility reasons is moved to core.
new 6cbd78b48 Port over metadata-based PKIXValidationInformationResolver impl from v2.
new 8ef228cce IDP-264 Att hash code and equality to the mappers and value mappers
new 8bd7fd420 IDP-264 Att hash code and equality to the mappers and value mappers
new 972d46ad7 Javadoc typo
new c500403cd IDP-264 Summon up a ReqeustedAttributesMapper from a ResolutionEngine
new b54330ed9 Change core session classes into interfaces, service session serialization.
new a14d4ac93 Update with session API changes.
new eaf1dc4b9 Move test data to match other modules.
new 1928974b7 Additional unit tests.
new 89b9e9a30 TestNG, not JUnit
new 2d198cac9 More session work in progress, rationalized StorageSerializer parameter set and order.
new 5887f33d7 Unit test for IdP session serializer.
new 215ad064e Optimize out the last activity field from the serialization.
new 0328b8978 Update comment with summary of storage plan.
new 00290de98 Implement resolver methods based on current design.
new bf85fb305 Align some base class names to conventions, and more session impl work.
new 78db1cd45 Missed a class rename.
new 8020309e4 Incorporate ServiceSession lookup / loading into SessionManager
new c626ecb37 Implement session timeout update.
new 4c41ac4ef Implement address binding, begin work on write-back / update
new 12356f0ab IDP-315 Fix pom dependencies for now: Add in inherited dependencies and removed unused ones.
new 9264d5589 IDP-315 Fix pom dependencies for now: Add in inherited dependencies
new 514798898 Make sure we overwrite collections when overwriting object.
new 08bccfb7c "Complete" implementation ready for testing.
new b1c81fabc Add support for results caching using a Guava cache.
new 37c2f4d5d Add secondary index mgmt
new 48bf9fe97 IDP-315 Start a pass over the IDP mvn dependencies.
new 14c8aeae2 IDP-315 Junit? just say no
new fb28f4d77 First unit test and some bug fixes.
new c4bfdb383 Catch address binding errors.
new 82aac8714 Fix an NPE.
new 0c0ba6415 Extended unit testing.
new 6ba20c7da Streamline AuthnResult serialization through flow descriptor class.
new 22a656052 IDP-315 Maven dependencies.
new a0cc11f9a IDP-316 Pass type checking. In this case by turning said checking off becasue of impedance mismatch with Spring definitions.
new c19424fd0 No need for explicit bean reference to serializer.
new 9b56cc059 IDP-316 Clean up type checking. AttributeValue<?> vs AttributeValue is left as a warning
new 002330c32 Unit test for service session use.
new 9f3ce6429 Add a bit of logging.
new 350e289b7 Fix typo in method signature.
new 2a5d1d358 Update RDBMS data connector parser to handle cache.
new a0a0d2a74 Fix override method to take object being serialized.
new bbeddbe32 Improve cleanup of seconday lookup lists, add unit test.
new 737a60d1f Switch to versioned delete.
new 0b2b8c073 Rename ServiceSession to SPSession.
new fd5268ff5 Fix reference to AbstractIdPSession.
new 253435bff Update annotations.
new ddc1dfe51 Add some tests.
new c250d42ee SAML2-specific SPSession subclass and tests.
new cb14f6f41 Annotation cleanup.
new bed147a7b Annotation cleanup.
new 9f0c82813 Serializer and unit test for SAML2 SPSession subtype.
new 0b78a7362 Add profile request context to session manager API.
new b6b90fa10 Add consistentAddress flag, derive initial client address from profile context.
new a73f6b39e Rename and adjust eventual interface for cookie-based store.
new 6911c3787 Hide access to servlet objects via injected properties.
new ac3ec31fb Turn into a "marker" representing the current servlet request.
new 03c719206 Typo.
new 833ad0354 Refactor use of HttpServlet* in profile actions out of context into injected objects.
new 6d717bdf4 Add cookie-based lookup, implement profile action to populate Session Ctx
new 316d6be27 Refactor test case with base class.
new 6d5e1f882 Add module idp-conf to project
new 33fd732c4 Committing svn.externals and svn.ignore
new d9c956ff8 Create a knob to turn on or off the session layer actions.
new 8cf7c0821 Transferring configuration material in from other locations.
new 1a049b2d3 Small API adjustment
new 84d3e7153 Fix doc.
new cfd8ce3f1 Missing a method to update result activity time.
new 59845273e Require non-zero AuthenticationResult timeout, and fix race condition.
new 142712d8f IDP-109: action that creates/updates user session based on authentication result
new 6549657e7 Populate flag that disables session action.
new f22635627 Add action to handle identity switch, and fix up authn flow.
new 1fb6262c2 Move session-related action to session-impl.
new d143745ea Remove session-api as dependency.
new 3793d4976 Module names, and a javadoc nit.
new d461356f2 Corrections in the course of getting testbed running.
new 8dfeab8bd Removing hardcoded path.
new bfb89b448 Streamline handling of principal name during authn flow, fix up config files.
new f7f2da65d Fix doc link
new 418d092f4 These appear to share access to the property replacement bean.
new cc1e7c32d Baby step simplifying a login method config.
new 9443a1c45 OSJ-52 NavigationHelper->NavigationSupport
new 879f15c3e Idea for enabling flows without affecting bean declarations.
new d169022af Add logging.
new f9c72b587 Improve address-based login config.
new 4220d28fa Externalize IP address login config.
new fe218ffcb Remove deprecated property.
new 2263e9834 Add some annotations.
new 7945aeb63 Relax collection type.
new da4890092 Helps if various methods are public.
new c608d3229 Missing constructor.
new 3b31f5ba3 Allow for empty whitelist.
new 26cb9aac9 Consistent naming.
new cedb78933 Sync with testbed
new 36a938e4d IDP-321 Mass commit to change the internal attribute class name from Attribute to IdPAttribute. Some tidy and checkstyle clearup as a result thereof
new ef171632c Sync with testbed
new 73e3444dc IDP-321 Change the internal requested attribute class name from RequestedAttribute to IdPRequestedAttribute. Some checkstyle clearup as a result thereof
new 21cc772a2 IDP-321 Change the internal requested attribute class name from ScriptedAttribute to ScriptedIdPAttribute.
new cbc64237d Mark as requiring investigation wrt eventual removals of this module which appears to be redundant
new 7c99fa5b6 Mark as requiring investigation wrt eventual removal of this module which appears to be redundant
new 70dcce9f1 IDP-321 Change the a few method names and some parameters to be explicit that they deal with IdPAttributes or Attribute Ids
new 92a6e89e5 Add a slot for the subject c14n subflow to run.
new 3ae02ef80 Make methods public.
new e265daa74 Sync with testbed
new 9fc92905b Sync with testbed
new 2f93d09b7 Inject a predicate to selectively control authn result caching.
new 55410f88b Switch predicate to flag on result class, easier to disable from a login form.
new a25a21f6c Caching the result
new 57b5191ca Sync with testbed
new dbc0c36d0 Move result caching indicator to context so other actions can set it, implement bypass in form action.
new ac98c6e42 Fix doc link.
new 4626276d4 Fix doc link.
new 3b3a6de48 Fix doc links.
new 73091191f SSO bypass property.
new f24428647 Implement non-caching of results while still creating a session for other purposes.
new 3b5556f22 Add implementation for LDAP username password validation using ldaptive.
new 4f0babd47 IDP-316 Wide ranging change to get rid of the use of the raw type AttributeValue (it needs to be made generic such as AttributeValue<Object>)
new 797a80ce2 Take out unneeded TODO.
new f6514fea1 Pick a less commonly used port to connect to a non-existent LDAP server so tests pass on a host on which an LDAP server is running on port 389.
new 40bf68b7d On second thought, rather than picking a hopefully unused port to connect to a non-existent LDAP server, use a hopefully unknown host named "unknown" to be more obvious.
new 42fac4d1f Update TemplatedExecutableSearchFilterBuilder to use an EventCartridge for LDAP filter escaping.
new 5708656d3 Implement "memory" for the Principal that satisfied a requester's custom specifications.
new f879779d9 IDP 322 Start to introduce Interfaces for components
new 3810d7ebc IDP 322 Start to introduce Interfaces for components
new a65730dcd Sync with testbed.
new 7274d3fc1 Add a custom bean to shrink storage of AuthnResults.
new 5ee062898 IDP-321 Change the internal requested attribute class name from ScriptedAttribute to ScriptedIdPAttribute.
new cdfe1ba90 IDP 322 Start to introduce Interfaces for components
new f9c9cddcc IDP 322 Start to introduce Interfaces for components
new 8e1851b62 IDP 322 Missed checkin
new 418fdcbfb typo
new 3ad57d841 Missed checkin.
new 923dc9f50 IDP 322 Start to introduce Interfaces for components
new e8f6f861c Fixing up view templates and injection of view scoped data.
new cc2474eeb IDP-283 Cleanup: Annotations, types.
new adbcd87f0 IDP-273 Cleanup: Annotations, types.
new 1f753054b Warning and annotation cleanup.
new 5d32c054c IDP-316 Fixing types in a class in java-support and as a result finish tidy up of up AdPAttribute <AttributeValue> becomes <AttributeValue<?>>
new 0902514c0 IDP 322 The documentation states that the default value for sourceAttributeID is the ID of this attribute. Make this so.
new ec8356f68 IDP 322 Strip redundant setters from the interfaces. Only concrete implementations care about the setters. Also remove sourceAttribute from the Attribute definition since that is implementation, not function.
new 2b84c90b3 IDP 322 The documentation states that the default value for sourceAttributeID is the ID of this attribute. Make test match the new behavior
new 19e00679a IDP 322 Strip redundant setters from the interfaces.
new 247647069 IDP-326 refactor to reflect the "setup/initialize/run" paradigm. Also relax the restriction on the interfaces to be @NonnullAfterInit. The implementations remain @NonNull because they are like that.
new 5463ec012 IDP-328: Improve error message mapping approach
new cbaa02053 Default reset of error state between validation attempts.
new bf8119a3d Sync with testbed
new 2ac76021b Implement a "history" of flows to allow selection to loop back after a flow fails.
new c9b5c9dec Implement a "history" of flows to allow selection to loop back after a flow fails.
new 8a8914a09 Remove redundant transition.
new 25383fcf2 Add event indicating flow reselection, and switch flow descriptors to a linked hashmap to make iteration predictable.
new 55e53f0d0 Sync with testbed
new 231ff5f4f Sync with testbed.
new f45e1b2b4 Implement ReferenceInsertionEventHandler directly rather than using EscapeReference which has oro dependencies.
new e9cae0a9f Clarify in javadoc that this is not a net.shibboleth.utilities.java.support.resolver.Resolver
new b5e3c50b5 IDP-298 Nature study on loading of beans with custom parsers
new 52cc93456 IDP-298 Comment
new dc6ab8c12 IdP-298 Baby steps towards using only Spring resources in the IdP. Make idp-attribute-cli use spring resources only. Plus support in Springutils
new cbfefeb5f Sync with testbed
new 3d949c545 Remove classpath dependency
new 0a238e5e1 IDP-321 AttributeValue becomes IdPAttributeValue (and some code cleanup). Plus the fix or an erroneous use of SAML1 objects in the SAML2 scoped encoder.
new 416e48282 IDP-321 AttributeValue becomes IdPAttributeValue (and some code cleanup). (mised checkin)
new 21784d13f IDP-329 Make AbstractSpringService implement ApplicationContextAware so the parent context is set appropriately.
new b03f480bb IDP-330 Return an AttributeFilter via getAttributeFilter() from an AttributeFilterService. This may change.
new 1a677d7c8 IdP-273 Remove unused classes/
new 48545a878 Checkstyle - line length
new 2c3d33d0a IDP-18 use JSON rather than hacky '!' delimiting to code up the transient. Makes for a nicer "getter" experience too.
new bced6c7a5 JSON runtime artifact ID changed.
new a29e3d6ab Revert JSON artifact ID, Eclipse was just lying.
new 87209e5f2 JPAR-38 Bring Logback back up to 1.0.13, but this time take the IdP with us.
new 63417e8de IDP-18 use JSON rather than hacky '!' delimiting to code up the transient. Missed dependency which got loast in the general logback noise
new 0c779d47b IDP-317 clean up some javadoc (and some checkstyle)
new 3a68ea70c Annotations.
new e986a6236 IDP-337: Allow override of determination of which results are active for reuse
new 8f57369c4 Trailing space in class name.
new da4676b2f Allow JAAS validator to run against multiple application names at once.
new 4ec639972 IDP 298 move the nature study to idp-core (where there is spring stuff already)
new 89b409989 IDP-338 Work around a bug in Spring Framework. Add a canary test which will fail when the bug is fixed and this can be reverted.
new c8f2b09ef CheckStyle
new 97ed84a50 IdP-298 Make it possible to configure the 'Services; via things other than Shibboleth Resources (prior to removing them entirely)
new 1e4dfae44 IdP-298 Use Spring resources to configure the IdP (including a lot of reundant code)
new 2133b8af7 IdP-298 Remove unused classes
new 3f873f3b8 IdP-298 Remove Use of Shibboleth Resources in logback configurations
new 7622a6b2b Checkstyle
new 58074975f IdP-332 add concrete class prior to introducing an interface
new 76bc59b2a IDP-322 Introduce an interface for Attribute Resolution (which will make it easier to put into a service for IdP-330)
new b373f9747 IDP-322 Introduce an interface for Attribute Resolution missed checkin.
new 6caef5eb3 CheckStyle
new 94cab286e Remove duplicate TODO
new e8fd0a8e9 IDP-322 Introduce an interface for Attribute Filtering (which will make it easier to put into a service for IdP-330)
new 359a5dc56 IDP-330 Interfaces used for Spring reloadable serviced.
new 212feb0f9 IDP-330 Start to deconstruct the existing Service interface so we can fit the spring realdoing one on top. Enough changes to the Old spring code to make things work and fix up logback service to match the new code. Also fix multiple bugs in logback service
new 19d4c1672 Adjusting some relying party APIs to fit conventions.
new 93b5173ba Further relying party API cleanup.
new b834a6d4b Rename and fix tests.
new 0954ceb61 typos in javadoc
new de8139714 IdP-330 Start to fill in the code for serviceable components and their loading and destruction via Spring.
new 5fa10cd52 Moving IdP events from OpenSAML
new c903545c5 Fix imports after moving EventIds from/to OpenSAML.
new 635d4c33c JPAR-35 Remove circular java-support and spring-extensions managed dependencies from the java-parent-project-v3 POM and move those dependencies to downstream projects. Retain the properties which specify the versions of java-support and spring-extensions in the java-parent-project-v3 POM, hopefully for ease of future upgrades. Minor cleanup of POMs as needed.
new 939047edb Move non-IdP specific actions down to opensaml.
new 2a896a027 Bit of cleanup.
new 379c9a84c IdP-330 Tests for ReloadableSpringService, plus bug fixes
new f74e9edf7 IdP-330 Gotta love timing windows in tests
new 9284f81df - Rename SAML encoder base classes.
new a1d239ca2 Missed a test rename.
new 7007502ae JPAR-35 Remove java-support and spring-extensions version properties from parent-v3 POM.
new 6c669d9d8 Rename of SAML 1 encoders.
new 062ba54c6 Typo.
new a96b3fbc7 Add LDAPResponseContext for shipping LDAP response data around in the AuthenticationContext.
new 32fa01bb3 Separate authentication failures from other types of exceptions.
new 402af212d Update LDAP authentication to support return attributes and account states.
new bf3f6c5dc - Rename of SAML 2 encoders.
new 76e720fc1 Revert, iff means if and only if.
new c9c66c97f IdP-330 Clean up logging and add more to help debug jenkins failure
new 5322ee2e8 IdP-330 Typo and more tidy for jenkins test failure
new 2ff446adb IdP-330 More testing for jenkins test failure
new 693d86c14 IdP-330 Add fallback logging configuration for the Logback service (Jetty will still fail to load the provided logging, but the service will use this)
new 7a177309f IdP-330 Make ReloadableService an interface which can be used in profiles.
new 4898a1648 Add generic type when building collections.
new bb8e6c4b3 Doc and annotation cleanup.
new fd7ef01c6 Add some annotations and add missing calls to base class methods in overrides.
new 4b4c8ec33 IDP-338 The solution is to initialize the context before pulling beans from the factory. Note that this means that we need to create the factory via a context.
new aeed6b71b IDP-338 Tidy up a non longer needed bean definition
new 1526ae227 Merge basic/form JAAS flows and support IsPassive when set.
new f3642fae9 Redesign event handling for classified error conditions so the label becomes the event.
new 062bbceb1 IDP-338 Class test was the wrong way around in the ReloadableSpringService. Fix scope of the Component support functions AbstractServiceableComponent
new 6bca22e1e IDP-330 The attribute resolver implementation becomes a ServiceableComponent and gains its own parser. We now use the stand along ReloadableSpringServce bean to access the component and obery the pin/unpin semantic in the ResolverAttributes Stage
new d9510e4aa Typo in base class name
new 250d802f3 Javadoc
new 99e11e134 IDP-330 Tidy up.
new b3942a60e IDP-330 Tidy up. Remove grocer's apostrophe in log message. Make the Base resolver implement DestructableBean so that spring tears these elements down.
new 9e05495d6 IDP-330 more typo's <sic>
new 1f2689cc7 IDP-330 The attribute filter implementation becomes a ServiceableComponent and gains its own first class parser. We now use the stand alone ReloadableSpringServce bean to access the component and obey the pin/unpin semantic in the FilterAttributes Stage
new 1d9b161d0 IDP-330 Missed checkin and further code tidy
new 291c36c5a Sync to testbed
new 4084a789d IDP-330 Synch With Test bed - missed files.
new 1a127bfd1 Add LDAP flow from testbed.
new dbac6ee2b IDP-330 Remove old style service code and data files. Schemas remain in place.
new 5bf1cc97a IDP-330 <AttributeResolver/> gets an optional id. Plus test
new f26752a4d Remove duplicated dependency.
new f2e9f1a17 IDP-315: fix some Spring-related dependencies.
new 993658222 Make compatible with Spring 4 by refreshing the generic context before extracting beans.
new cd8196fed Make compatible with Spring 4 by refreshing the generic context before extracting beans.
new 15b62226b Make compatible with Spring 4 by overriding createDelegate rather than createHelper (which is deprecated in V3 and removed in V4).
new 1172fc7db Sync to testbed
new 976e87a5d Rename IdP-specific EventId class.
new f2a104d0c Rename SAML-specific EventId class.
new 36eaf73d7 Rename/refactor SAML profile config base class
new ea3a199a4 Fix regression in collection setter.
new 89f6bc717 Rename test.
new 1c2663f98 IDP-209 Remove more redundant classes and a schema. This time its stuff for parsing our custom schema and summoning up old style shibboleth resources
new ee9d28aae Put back the schema, its references elsewhere
new f74fceb0d Add custom principal for SAML 1.x authn methods.
new 97489781e Missed a text replace.
new 8c6ad5464 Sync with testbed
new db8b9fa30 Turn empty SAML 1 profile config base into a marker interface.
new ff99379b7 Name cleanup for SAML 1 SSO config class.
new 631a0c013 Name cleanup for SAML 1 SSO config class.
new 810cd8312 Cleanup for SAML 2 profile config
new 0ac3ca038 Fix ctor argument.
new d5de7e3c2 IDP-330 Remove services schemas and top level service definition from the attribute filter and attribute resolver custom configuration schemata. Add version to track the fact that we have changed it
new bc1d8b974 Add a field to SAML profile config, and implement SAMLArtifactConfig.
new 3897175cc Incomplete predicates to handle V2-style signing/encryption settings
new fd3830c25 Clean up some method names, and port over the signed request option.
new 8c52cf8c3 Rename helper classes.
new 0994b6b6f Rename remaining config class.
new 4d1a8462d Javadoc typo
new 6979cdb94 De-springify a couple of actions.
new d5e7630c4 Cleanup work on IdP initiated SSO decoder classes.
new 599c1240e IDP-348 Sync testbed to idp-conf.
new 52067b67d Cleanup, and return the defined event if the message context is missing.
new 3e04ab504 Move some non-SAML actions up to profile module.
new 05b9bd6c0 Replace dummy predicate with built-in Guava version.
new 8ff7aab9b Allow setting profileId from the bootstrap action.
new 5bd17b26e - Establish SAML 2 SSO profile ID when bootstrapping
new 0ed6f4687 Add PrincipalSerializer interface.
new 44c91c947 Update bean reference per IDP-344.
new 3ffa5cd92 IDP-209 More nature study.
new fdae7b7ad - Make StorageSerializer interface an initializable component
new 28ea9ed05 Add initialize/destroy defaults to get flows initialized.
new 5c3f4cfac Move Principal interfaces/classes into subpackages.
new a2b913907 Move Principal interfaces/classes into subpackages.
new 47ea98813 - Synchronize questionable Json methods in PrincipalSerializers
new d3a4d10c6 Clean up decorators on methods inside interfaces
new 65243537f Move serializer implementations out of -api
new 6beb615c5 Move serializer implementations out of -api
new 840e258a7 Fix some broken doc links.
new 2bd36bc16 Fix failing tests.
new d581bc61a IDP-330 (attempt to) Remove Reources Schema.
new 55fa0ffab JPAR-46 migrate to dependency on servlet 3.0.1
new 1678c2089 Attach RP context even if no relying party ID available.
new 6abec80d2 Update javadoc
new 2010ca8e1 Move version checking actions into opensaml.
new d486cf756 Eliminate redundancy.
new f052e071b Add missing test dependencies.
new 0b9d87d74 Remove duplicate bean definition.
new 11c3ce428 Add idp-conf as a child module.
new 61b0de130 Move hardcoded keystore properties to idp.properties.
new 3eb8f9872 Temporarily add keystores to idp-conf.
new 1ac6eb78f Fix log nit.
new 8636ea8d7 Fix logback config location, and move over settings from testbed.
new 352b1bac1 Move the action which creates an authentication context from the tesbed to idp-profile-impl. The context creation was previously done by the InitializeAuthenticationContext action, but now the profile is responsible for creating the context on which the authn subflow acts upon.
new 5aefcb744 Added TODO to make the create authn context action profile generic.
new 7f05073d7 Rename InitializeAuthnContext action to Populate
new f935c9b46 Remove unneeded call.
new 0e14da03c Remove unused getter.
new 56e9f558c Move InitAuthnContext action into idp-saml-impl, support both SAML versions.
new d166d7068 Move OpensamlConfigBean from the testbed and idp-conf to the spring package in idp-core.
new dd6814be8 Remove empty src/main/java package from idp-conf.
new a08c895ae Rename OpensamlConfigBean to OpenSAMLConfigBean.
new 0756fe30f Tweak collection API.
new 3d689ce3c No longer allow for null collection.
new 7a0596b61 Add a null check.
new 7e73025a6 Response signing will be in the outbound message handler chain.
new 3ae0ec382 Missing parameters to logging
new 996a1963f Add some (eclipse inspired) annotations.
new d77990169 IDP-257. We are thread safe so remove the todo.
new 904513139 IDP-307. Move IdPRequestedAttribute over to idp-attribute-api
new abec8900f remove duplicate-in-all-but case class
new 1775c9a10 add bin to svn:ignore
new f97aecb12 IDP-307. Move the mapper functionality from its own module to idp-saml (which is where I shou;d have originally put it).
new 76b2255c2 Rename of SAML messaging contexts (Saml to SAML)
new 1c8911b76 Converted action into a message handler.
new a02467736 Fix config dependency.
new 8cf0d4c0e Remove mock handler migrated to OpenSAML
new 90654e509 Remove unnecessary newContextSpring() method from SpringSupport as part of cleanup following IDP-298 work, which was to use Spring Resources in the IdP rather than java-support Resources.
new 65d500b34 The ReloadableSpringService needs to implement the Spring ApplicationContextAware interface to set the parent context, cleanup from IDP-330, IDP-329.
new 606d9ecf2 Annotations and cleanup.
new bbf998116 Annotations and cleanup.
new 17d27af3b Add missing setId method to The storage BackedSessionManager and set it in the test.
new d10a0c1da Revert r5106 : Eclipse and mvn managed to help me shoot myself in the foot.
new 75cbc0470 For the testbed, default to resolving attributes from the in-memory directory server, which needs to be instantiated before the attribute resolver. Add a default service account to test/ldap.ldif.
new 47587203d Deprecate AbstractSpringReloadableService to signal that it is probably appropriate to delete it.
new b441151f3 Fix init error by adding id property.
new 800d267fb Default component ID if not set.
new 0255ba081 Delete AbstractSpringReloadableService as it is no longer used.
new b841873cf Don't need id property now.
new 98a8f0236 Add dummy metadata and lookup handler.
new 455f6126c Test that the ReloadableSpringService implements the ApplicationContextAware interface.
new 7052a1c38 Clean up as much as possible after the test.
new cbffb00cf Log a warning when ignoring SPSession add.
new 02b5867d5 Action and supporting code for adding SP session to IdP session
new 92e6d2fab Add setter for parser pool.
new 87cc950c1 Add mappings for SPSession serialization.
new f40e18db9 Wire in SPSession maintainance as a test.
new af659c45f Annotations.
new 9984b6676 - Add an interface for profiles that expose default authentication methods
new a6ca4de57 IDP-346 (port SVN resource) SVN Attribute resolution we can test against.
new 39128c526 IDP-346 (port SVN resource) Test loading of the attribute resolver from SVN, with property replacement.
new f5e579e71 IDP-346 (port SVN resource) remove debugging change;
new d8c38a12a Add lookup strategy for RP context
new 79d6ef84f Resurrect DefaultAuthenticationResultSerializerTest after deletion during refactoring (r5066) and move to authn-impl from authn-api.
new 5b45de164 Refactor action.
new 3a4b706b7 Add SVNkit as an optional managed dependency to the v3 parent POM and update the spring-extensions and idp-attribute-resolver-spring POMs accordingly.
new 555534914 Defer event/prev event cleanup to OpenSAML class. Add event choreography to unit test.
new 769213007 Add a relying party flag controlling error detail.
new 1264883a5 Add a relying party flag controlling error detail.
new 30e464485 Add a relying party flag controlling error detail.
new d244fb50c Add a message source and message file to the config.
new aa21895e3 Implement Spring MessageSource support on profile actions.
new 71e0cd3ce IDP-351 Move the contexts into sub-packages
new bdaa71030 IDP-351 Add the principal to the AttributeFilterContext and AttributeResolutionContext
new eb1ae382b IDP-351, IDP-350 Remove the principal from the AttributeRecipientContext and look in the AttributeResolutionContext or AttributeFilterContext for the information
new efff64b55 IDP-351, IDP-350 Remove the principalAuthentcationMethod, AttributeIssuerID and AttributeRecipientID from the AttributeRecipientContext and move them into the AttributeResolutionContext and AttributeFilterContext
new 6cd6ae89c Call super.doPreExecute()
new bff23262b - Fix up naming of some setters.
new 23ed3cd2d Replace inline lookup function with a function composition.
new 15a2bf016 Change log level
new cf7d02128 Add version checking handler to inbound chain.
new b38b2c440 This is already done by a message handler.
new 774fe0993 This is already done by a message handler.
new 101b1195b IDP-351 Metadata only comes from the SAMLMetadatContext. Put mechanisms into the AttributeFilterContext to locate it and allow for an injectable strategy in the FilterAttributes Action
new dec8ee84a IDP-350 After a year, the temporary "Attribute Recipient Context" is no more.
new 114ac3ec5 Functor to simplify custom Principal extraction for profile fulfillment
new 927623e26 Add an event for invalid authn context.
new e50e5f32a Change the event returned for a missing context.
new 727c708dd Allow type parameters to carry through.
new 29befe4e9 Use Context Navigation to create the AttributeContext
new c90f05643 IDP-350 Request Specific attribute resolution by name rather than by Attribute
new 2ff845a49 IDP-193: Refactor and update for API changes
new 844e1fdc8 IDP-192: refactor action, set Response Issuer
new 490a37452 IDP-356 - Port status action to SAML 2
new a53a40386 IDP-133: Consent setting action as a message handler
new 164a16d1f Cleanup error message.
new 34ca48adb Forgot to honor matchingPrincipal property on RequestedPrincipalContext
new c994cc80c IDP-194 - ported SAML 1 action
new a277ea474 Add error checking for valid profile config.
new 24799629b Add SessionIndex / SessionNotOnOrAfter support.
new fab632be0 Add SubjectLocality
new 1ca0bb344 Reformat javadoc (as a test)
new e6c07811e IDP-351 Tie off parsing of the Attribute Issuer metadata filters with a log message and an exception
new 94928cdd8 Typo: Attribute Requester filter should be that. Not the Issuer one...
new a5309bd53 IDP-351 Remove the Atribute Issuer metadata filters
new de1a880d4 IDP-351 Rationalize the Class hierarchy as a result of removing the IdP Metadata based filters
new 8454478ba Bring related methods together for easier review
new 95e39a5cb Move AttributeResolverImpl into impl module.
new 8992ab2ef Move AttributeResolverImpl into impl module.
new e49781681 Move AttributeResolverImpl into impl module.
new 1cc4485ce Forgot to check in package info.
new 3990f6828 Convert externals to real files
new d8ee49733 Add initial prefs for Eclipse
new ef7c5d42f Rename .settings to settings
new 21b4e60fb Formatting only.
new 0b23b5dae Do not log exceptions when schemaLocation begins with 'classpath:'.
new eb8371eea Action to record "response complete" status on external context.
new 0b6d7ee0f Initial wiring for SAML1 flow. IDP-219
new 05d70b225 Overrides and formatting
new 2eebfe6d3 IDP-310 compile regexp on setting if apposite.
new ccee7e8ee - Split off "work in progress" context information for attribute resolver into a subcontext
new e94bc4c99 Fix NPE.
new 2715e2d09 Fix failing tests.
new 35ed92911 IDP-310 Fix failing parsing test
new 3c420abed Finish this TODO.
new a2dca27a0 IDP-359 Prinicipals to wrap NameID and NameIdentifier
new 79def0f74 IDP-359 Add Requester/Responder (SP/IdP) EntityIds to C14N Context
new aec3d3799 Remove spurious and confusing Entity from the Ids..
new d1689d7d1 Change remaining "http:" schemaLocations to "classpath:". Add default-destroy-method.
new 821c02893 IDP-359 Move TransientAttribute parameterization to saml-impl for better sharing between attribute encoders and NameID->Principal decoding
new faa83a2c0 IDP-359 First attempt at writing a name canonicalizer implementation
new 8aa8538e6 IDP-298 Allow the user to overwrite default resolver and filter locations with injected beans
new 841ccb0b9 IDP-346 Review input. Exbed the parameteriztion of the filter and resolution engine into a separate file (name may need to change)
new 0feea1ff0 A bit simpler syntax for the resource collections.
new 3906beb2c Revamp of subject c14n management and config.
new f8c9497af Fix a test.
new 7373598b3 Remove extra import.
new 6eaf9bf1a IDP-281 Registration Authority Matcher
new 87908a538 SAML testing has no need of the IdP EntityID now, so remove it from the helper which creates the filter context.
new 206f12988 IDP-281 Add parsers for AttributeRequesterRegistrationAuthority
new 21d1f842b IDP-361 Separate the filter context into public and private parts
new 7a4859a83 IDP 354 Use builders rather than summoned up objects so as to allow property replacement.
new d58445699 IDP 354 Remove directly injected beans from Attribute Defintitions
new 404ec1170 IDP-354 Fix regressions.
new fd3024f7c IDP-338 We no longer need to have this class since there is nothing to work around
new 7372c9beb IDP-338 remove use of a bean we deleted in previous checkin
new 5237fbaa1 Bump major version on java-support to account for removal of older SchemaBuilder and other classes.
new eeb4aad22 More work on SAML1 flow. Experimenting with preferring c-namespace and p-namespace as well as XML new-line-per-attribute formatting.
new d4b6bd8eb Wire IPAddress authentication to SAML1 flow via the "dev" profile.
new d7da1c681 SAML1 flow attribute resolution and filtering.
new dec00498a Fix missing list initialization.
new 77c9b6b6f Empty inbound message chain handler and InitializeRequestedPrincipalContext action.
new 430769d6f UpdateSessionWithSPSession and empty outbound message handler chain stub.
new 4ef44a268 Do not log exception when bean definition class is a property by setting log level to INFO and not DEBUG.
new b78d59df5 Collapse out RelyingPartyConfiguration subclass.
new 1a0b5fe5c Predicate for relying party ID matching.
new ae1952289 Add a "final"
new a3030065d IDP-362: plugin for NameIdentifier generation from attributes
new fa2c06364 Remove cut and paste error.
new 2ef8c9134 IDP-362: Allow generators to return null, add unit test and format validation to SAML 1 plugin
new 62c0db2a5 IDP-362: Add SAML 2 version
new e22de7dd1 Switch RPConfig class from c'tor to property-based initialization
new 27af8d488 Add name identifier format precedence to authn profile configs.
new 66e94351e IDP-357.
new 9b82e8e42 inadvertent check-in
new 56102b8cb IDP-262: Remove dependency on Xerces/Xalan and endorsement in POMs
new 793d63e2f Fix typo which resulted in SAX parsing exception.
new 33dc1d849 IDP-262 Change idp.xml.SecurityManager property from Xerces to JDK provided.
new d0cfbe879 Reorder loggers in logback.xml alphabetically by name, levels not changed.
new b226a2dfc Add action based C14N for transient encoded NameID. Add one Test. Remove previous implementation.
new ecadcedab Rework error handling and pre-checking of Simple c14n flow
new 73698e5c9 Update events in javadoc
new bd4563dff Remove stubbed action.
new 893b0fe1b Remove stubbed action.
new 7a22a506f Draft strategies for computing Name ID formats to choose.
new 187e9890c IDP-357.
new 005a32296 C14N: Remove redundant interface and collpase out distinguished Exception
new a348e58d5 IDP-359 Add embedded predicate class NameID C14N to simplify testing in pre-execute
new 89d3d2feb Typo in Javadoc
new f46fc5a7a IDP-359 Further refactoring of NameID C14N
new 63758c229 Git stripped significant trailing spaces
new 91add0a59 IDP-359 NameIdentifier Canonicalizer
new 45e933b15 For tests and probably to be removed later, output the ProfileRequestContext as a flow outcome output attribute.
new ae9256d65 For testbed flow tests, changed AuthRequestsSigned to "false" for SPSSODescriptor.
new 608454917 Unit test and fixes for NameID format strategy function.
new 8112b9862 Add format parameter to NameIdentifierGenerator interface, needed for legacy NameIDEncoder support
new 6944d63c4 Add marker interfaces for version-specific NameID encoders.
new 85018ea2a Delete old flows and stub test.
new 90d69a444 Formatting.
new b905a2008 Initial work on action to initialize the SAML 1 outbound message context.
new a10ee953a Require legacy NameID encoders to support format predicate.
new 6bd3d55f2 IDP-362: Legacy generators and unit tests
new 129968a58 Bypass use of test class to fix build.
new c8bf1c634 IDP-359 CryptoTransientDecoder and tests
new eafd4ef16 IDP-359 NameIdentifierAttributeDecoder has nothing to do with Attributes, so the word "Attribute" should not be in the interface name.
new d225751bb IDP-359 NameIdentifierAttributeDecoder has nothing to do with Attributes, so the word "Attribute" should not be in the interface name.
new cbd3c0c70 IDP-359 Direct Decoder and test
new 3207a1d14 Removing defunct class.
new 68a015bc2 Fix cut and paste errors.
new 38bfcd19e Annotation cleanup
new 14e75ea8a IDP-359 Distinguish between decoding errors and bad parameters once decoding has happened. Add extra testing that the requester and responder match the values found (if at all) in the NameID or NameIdentifier
new 05bfeb243 Remove destabiliing corruption from test where we are not testing for corruption
new 0c0b5a348 IDP-359 Per SAMKL-type format comparison
new b46ed19c9 Add rest of SAML constants, and simplify flow config using parent bean.
new c87c8d8e6 Add some dependencies so Eclipse/STS know about more classes.
new 69c19b526 Fix changed message handler.
new 8b41d1289 Add a null check.
new 6fa8757e3 Handle creation of SAML2 SPSession objects.
new d3b1f20bb Remove some unneeded dependencies.
new b3759d8df Removed a needed dep.
new a779804a2 Removed a needed dep.
new 939c74b0f IDP-363 resolver-impl relies of saml-api
new 65b69a05c IDP-219 : Add AddResponseShell action to SAML 1 flow.
new f5b6a7530 IDP-219 : Add AddAuthenticationStatementToAssertion action to SAML 1 flow.
new 8287f3007 IDP-219 : Add AddAttributeStatementToAssertion action to SAML 1 flow.
new e36a600df Formatting.
new 76fadf37d IDP 219 : The AttributeContext is a child of the RelyingPartyContext, not the ProfileRequestContext.
new 62559384d IDP 219 : Make SignAssertions stub action return "proceed" rather than null and add TODO.
new eb38b0c1a IDP 219 : Incorrectly add a SAMLEndpointContext.
new 53840d949 IDP 219 : Fill in most actions.
new f55efd3ad Refine AttributeContext lookup.
new ec4cd13df IDP-363 Start to exbed SAML contstructs from resolver-api and resolver-imp and move them to saml-impl
new efda10013 IDP-363 Exbed SAML contstructs from resolver-api and resolver-imp and move them to saml-impl
new 5537824f4 Missed checkin:
new 93f580c45 IDP-363 Juggle more dependencies around
new d3dead853 Checkstyle
new 2c50e657c why is svn whining about this file
new 6ce270acc IDP-359 Push responsibility for looking inside NameID or NameIdentifier to the specific decoder. The Action only cares about format (plus whatever else gets injected as a selector.
new 4d8bad368 IDP265 Start to add the Legacy PrincipalConnector Support in to the AttributeResolverImpl
new e59d82f6f IDP265 Clean up POMS
new 10b956ef2 IDP-367: rebase actions on IdP base class
new 94a6f10a1 Remove reference to authn-api to break a cycle.
new 785019a56 IDP-367: rebase actions on IdP base class
new 0db4681cf Fix failing tests.
new 1a31a7545 Fix failing tests.
new 700f9c7e3 IDP-367: rebase actions on IdP base class
new 5d35481ab IDP-359 Add SAML1 Direct decoder (so I cna use it in subsequent tests)
new 41828f34d IDP265 Add legacy PrincipalConnector Canonicalizer, PrincipalConnector (suitable for being parsed) and tests. Rename the interface which represents this to make it obvious that this is Legacy
new f6af79d9e Contexts should be default-constructable.
new 28a80c1d7 Fix check for "empty" RP context.
new 569b8fcf4 IDP-159 - Revise action to process RequestedAuthnContext
new af5ff5a55 IDP-159: bug fixes/unit test
new 7e4899ed5 Javadoc cleanup.
new d0705b37a Work in progress on NameID decrypting action.
new d6aa1829f IDP-139 - action to decrypt NameIDs
new da1671342 Replace approach to decrypter configuration with TODO.
new 217e22622 IDP-315 kill off all references to idp-mapper and fix resultant breakages
new 9333c8c44 Rename field appropriately
new 6ed57efaf IDP-359 Add Legacy C14N action to work from an injected attribute resolver.
new 8f0b37cf4 IDP-359 Plug principal connectors into AttributeResolverImpl
new fef22f9dc Rename xmlsec context package for consistency with other context types
new 189f606d4 IDP-139 - Rework to use SecParamContext and DecryptionParameters, location TBD
new 9f905775a Delete idp-attribute-mapper-impl
new a152fa643 Delete idp-attribute-mapper-api
new 02ae72eb1 Remove idp-attribute-mapper-* modules.
new 50c716135 IDP-129 : Initial implementation of SignAssertions action with test.
new 47d9b29fe Added some inbound and outbound message handlers.
new 967354a7c Cleanup TODOs.
new 1b8b3e0fd Cleanup a TODO.
new 2754a2389 IDP-130 : Ported SignAssertions action and test from SAML 1 to SAML 2.
new 535f88504 Change runtime exception logging from ERROR to WARN.
new c297ae30d Remove log - it isn't used
new becf6ccd0 Annotations
new c0cb99a56 IDP-359 Add framework for parsing PrincipalConnectors and the mapped connector as a simple exmaple.
new 85e3482f2 IDP-303: fixing spring.schemas, imports, and test files for resolver schemas, rename TBD
new f6327253c IDP-303: Update schema locations to http:// locations
new 8847d2790 IDP-303: Rename resolver schemas and update mappings.
new 199126f0a IDP-303: Rename security schema and update mappings.
new ca622b1da IDP-268 Move getBeanClass to the parent class - it is invariant across all parsers
new 9937f1cf7 IDP-266 Move the spring beans up out from 'ad' so that the principal connectors can borrow them
new 6999a3816 IDP-266 Transient Principal Connector
new 6b0a6a7b7 IDP-266 Transient Principal Connector needs the SAML1 NamedIdentifier decoder
new 3e1ee20ca Fix cut and paste error
new 322c2918c IDP-268 Add a predicate to the LegacyCanonicalizer to shortcut the C14N stage if there are no <PrincipalConnectors>
new cccd10bc3 IDP-359 The Predicate for a C14N action has to be static. This means that we cannot look at the formats in this case.
new 1c02e593c IDP-359 Add configuration for old style PrincipalConnector C14N and new style C14N (SAML2/Transient)
new e1398997e IDP-303: Rename filter schemas and update mappings.
new cd76b8d15 IDP-303: Update schema locations in default filter conf
new 2ad0a383f IDP-303: Update schema locations to http:// locations
new 460d0cb9c Validating inner <beans> elements requires inner schemaLocation.
new 8408bf4fc Fix validation errors.
new 1a4447c59 Allow validation to be disabled for now, a la the RDBMS case.
new 65623c64b IDP-303: Update Spring schema locations
new 1882b42b2 IDP-303: Forgot, we're still in webflow 2.3
new c8de24757 Webflow bug, it doesn't declare a schema mapping for the flow schema.
new 5ee8f62da Move xmlsig mapping to idp-core, add the rest.
new 6cef1542f Add mappings and excise classpath syntax from SAML 1.x schemas.
new 692c16088 - Add mappings and excise some classpath syntax from SAML 2.0 schemas.
new fe518c53f Set the ID of profile actions via a bean post processor.
new 01780ef91 Set the ID of the Web Flow profile action adapter.
new 344f15603 Add TODO to test signing exception.
new bb9925ce5 Set the ID of test actions now that the default has been removed.
new ef9112a64 IDP-359 Move the formats that are understood from the Canonicalization bean to the condition bean. This allows some simplification in config as well as saves time in running dead end flows.
new c0eb4c419 IDP-359 Missed checkin: Move the formats that are understood from the Canonicalization bean to the condition bean. This allows some simplification in config as well as saves time in running dead end flows.
new da9c2246c IDP-268 Add "the usual" interrogation of the Context into the activationCondition Predicate.
new fd8544a02 Make idp-consent-* and idp-tou-* compile again
new 1c374dde8 Pending decisions, support embedded beans, accounting for missing schemaLocation.
new 630de8514 IDP-368 : Add test for setting bean ID property automatically via BeanPostProcessor, currently only for AbstractProfileActions.
new f3dd347a7 Reorganize test.
new 60e85fb07 Use mock actions for ProfileActionBeanPostProcessor tests.
new 2d19ac5cc Replace Junit Assert with TestNG.
new b9b485aaf IDP-368 : Set ID of a ReloadableSpringService automatically by implementing BeanNameAware and setting the ID to the bean name in doInitialize().
new f263db2c0 Derive from the base class to ensure that OpenSAML is initialized. without this the test will not run on its own.
new 8ae2b7f27 IDP-359 A better way to configure. Move the formats into the descriptors and have the Actions look for the descriptor and thus the formats.
new 75199f67c IDP-359 Move stuff between preExecute and execute so that execute does the decode and poreexecute does the preconditions.
new 49f8f021d IDP-354.
new c394ef151 More for IDP-354.
new af7cba2fe Add maven-war-plugin:2.4 as a plugin dependency to the v3 parent POM.
new 32273437d OSJ-62 - relax type casting in message navigation, to avoid class cast errors
new 39035e965 Allow for generic typing in derived actions.
new 509ce5097 Webflow mapping unneeded
new 247a5064d Remove unneeded (I think) exception suppressor.
new a1af0dae6 IDP-354 nonpooled connections pass the bena definition, not its builder.
new bf62beea3 Bludgeon the consent and tou tests into working (by suppressing, or in some cases removing them). Then turn on the build in the parent pom
new be1c0ae3b Updates to outbound context action and tests.
new e69c4236a IDP-372 - move endpoint resolving action into IdP
new 38f090b19 IDP-372 - add signed request support
new 5bc826e04 Remove dependency on implementation class, move to unit test.
new d2d2ebf62 Integrate endpoint resolver action into SAML 1 flow, remove redundant code.
new 3488e35a7 IDP-367 : Rebase AddResponseShell actions on n.s.i.p.AbstractProfileAction.
new a7881466e IDP-367 : Rebase action support classes on n.s.i.profile.AbstractProfileAction.
new 42418cfd8 Make all beans "prototype" scope .
new 653ecbf10 IDP-359 Transient Decoding. Inabiloty to find the TransientID is a NameDecoderException (try the next one) error not SubjectC14NContext (stop dead) error
new 3990e79ca Cleanup logging
new 82f96fc90 Make the currently-under-investigation flow available to the flow predicates via the attemptedFlow Field
new 93ba7c7f6 Fix test
new f4da09508 Improve clarity of flow selection.
new c2db70fc0 Outbound context action is probably version agnostic
new f8fe206f0 Missing log prefix
new bf2c3bf26 Replace mock action with draft actions for outbound context mgmt
new ee0cd3a39 Create a marker interface for RP config resolver.
new fe355587d Remove entityID term from doc.
new d36e10cb5 Remove entityID term from doc.
new 8a3abc32b Align to expected location of AttributeContext in tree.
new 1fe3d092d Save some code using function composition.
new ab677c413 Remove saml-api dependency.
new 4d6c44a17 Improve flexibility in context lookup/creation.
new abf309dd5 - Move RP context into subpackage for consistency
new 06cd9faf9 IDP-359 Bug fixing. Wrong class name in config
new fd41c3a5a Update webflow schema loc.
new 74eb0b5de Package rename of context navigation for consistency.
new 69e1ceeb5 Eliminate more code using function comp.
new 1eee262b8 Accessor functions for multi-RP cases.
new d273c7fee typo in error message
new d890445f0 Implement SAML-aware RP context behavior.
new 692034c9a Switch to SAML-aware RP context setup.
new f8c1b38a6 Fix an NPE
new a2a6ef1f6 IDP-359 Crypto Transient NameID C14N flow and test
new f0ec7fb0f IDP-359 Failure to decode a crypto transient may be because it isn't a valid crypto transient and we should try the next C14N action
new 8d82ccbf1 IDP-371 IDP-359 Action for Direct NameID C14N and test
new deeaed273 IDP-359 Failure to decode a crypto transient may be because it isn't a valid crypto transient and we should try the next C14N action. Make test fit action
new cc1c54368 Revert last checked in in error
new 5ef1b2786 IDP-370 Use #setInitMtehodName on the builders of all parsers for PrincipalConnectors.
new a2514586f Add check for disabled profile config.
new 47a6c9ac6 Add message handler slots for dynamically resolved handlers.
new 52422563c Revert security manager type.
new 6c17997fa Base outbound context construction on relying party's reference to inbound tree.
new 796cfa3d1 IDP-370 Use of #setInitMethod on all attribute-resolver related parsers. This has involved supressing some tests which now fail in initialization and changing a lot of test data to stop that.
new 2f3894db8 IDP-370 Use of #setInitMethod on all attribute-filter related parsers. Since this is not selective (like default-init is) it then becomes more sensible to make all the attribute filter objects Initializable.
new df816ef48 Add a trabsient attribute and transient principal connectors to top level resolver
new a217ba725 IDP-358 Wrong bean name in flow
new 48e7436bd Javadoc typo.
new 98f7a4caf IdP 359 Align the NameIdentifier C14N with the NameID one and remove now-redudant base class
new c681292b0 Javadoc cleanup
new 609d562a2 Fix parameter to log message
new b2faa03b3 IDP267 Crypto C14N and tests
new b6aaf108f Add IdP extension of BindingDescriptor with property for encoder bean ID.
new 6f594460c IDP-267 CryptoTransient PrincipalConnector
new 3cc26675f IdP 359 SAML1 flows for Transient, CryptoTransient and Directr NameIdentifier C14N
new b3dff5be2 JSPT-41 Remove the IdP's use of ValidateableComponent
new e4b4cf4af JSPT-41 More ValidatableComponent changes. Strip out the soon to be defunct ComponentValidationException from the IDP and OpenSAML
new d5910e834 JSPT-40 Renamed *IdentifiableComponent to *IdentifiedComponent
new 88821cc31 JSPT-40 Renamed *IdentifiableComponent to *IdentifiedComponent
new 906a82c2c JSPT-40 IDO-370 Add calls to the setDestroyMethodName when parisng the (now) detroyable beans. Clean up the static Matchers and PolicyRules and their parsing so that they do not need to carry initialibilioty or destructability.
new 05c17c5a5 JSPT-43 Teach OpenSAML and the IdP about the new Abstract Class
new ad01f6c4c JSPT-43 Add a Bean Post processor which understand Identifiable interface and configure it in everywhere. Remove the name fernangling from the ProfileActionBeanPostProcessor.
new 2a0140c1a Missed call setting the beanInitiatzation/destruction name.
new 1b4e4c24f Fix failing test
new 9006d83a2 JSPT-43 Better Error message for the duplicate ID log message. Remove the (few) duplicates that we had, plus some over zealous inclusion of bean post processors
new e18fee07f - rework testbed Encode action to use new binding config
new 96b3d74ee IDP-219 - rework message encoding to use OpenSAML action, move Spring lookup to a factory
new 3dba92089 JSPT-43 Move the Identification-based Bean Post Processing tests closer to the Post Processors' definition.
new 6d94905e9 JSPT-43 Remove identification tests from Action tests
new 10e15d201 IDP-370 Remove cascading of initialize/destroy from attribute-filter-api
new 503a3d607 IDP-370 Remove cascading of initialize/destroy from attribute-filter-impl
new 418ba7ebd IDP-370 Remove cascading of initialize/destroy from attribute-resolver-api
new a5281d97c IDP-370 Remove cascading of initialize/destroy from attribute-resolver-impl
new a7bf91f35 IDP-146 - clean up action, and move down into OpenSAML along with ancillary support class
new 4ed378230 Fix unit test utility.
new b57c01bc4 IDP-146 - predicate to control conditional action
new 3401797b4 Fix default profile config flag.
new 1c2897010 IDP-146 - honor profile flag in SAML 1 flow
new 8b93e4877 Fix default profile config flag (unit test)
new fc812f82b Move SAML 2 helper class down so actions can be moved.
new b7a52cbe7 IDP-369 : A bean factory post-processor which ensures that @Prototype beans are indeed prototype scope.
new 0025b5891 IDP-135 - General InResponseTo action for both SAML versions.
new 37a3ef911 Fix javadoc.
new ecd76899b IDP-123 - refactor into OpenSAML and add strategy function to get assertion lifetime
new caff4493e - format cleanup on c14n config
new 34a2ff1a3 JSPT-40 : Rename BeanPostProcessorTest to IdentifiableBeanPostProcessorTest.
new 50b7f0aa0 JSPT-40 : Rename BeanPostProcessorTest to IdentifiableBeanPostProcessorTest.
new e2ba94f39 JSPT-40 : Cleanup. Log redundant setting of id property as well as mismatch between id attribute and property to debug.
new c2c035384 Get rid of redundant constructor parameter.
new fbac49b3f Get rid of redundant constructor parameter.
new 3c45beb51 Rename authn flow file to match better.
new 9784bb3a6 Make sure action IDs match bean ID, define missing global event in c14n flow.
new c2b0f9d8c Doc and method cleanup during code review.
new 568d35812 Improve c14n config layout, splitting into authn and saml flow sets.
new ca58f48ad Add missed formatting anchor to log statement.
new 064191a72 Move response creation action down to OpenSAML
new cc6a8e487 Move condition creation action down to OpenSAML
new c2f7e9d01 IDP-121 - Move audience condition creation action down to OpenSAML
new f498a99f6 IDP-358 There is not need to have The LegacyPrincipalDecoder Generically typed.
new 518508e0a JSPT-43 Now that we don't do setID we need to clear the logPath cache during initialize.
new c16123aa0 Typo nits in test class assert messages.
new e38967ce2 Temp resting place for relying-party schemas.
new e2c47bd97 Replace vt-crypt dependency with cryptacular.
new ef2672c8d Fix debug logging.
new 38b9575f0 Both getValues and setValues have to provoke the creation of a shadow collection to store values.
new df07ff6f2 Revert the vt-crypt -> cryptacular change until I fix the tests.
new 7974522ec Add trimming of parameters.
new 6c22f888d Forgot to check in test.
new 8636ecbe3 Refactor subject-config into user and system parts.
new 3994030ea Accidental check-in
new 03c8b085c Remove defaulted ID.
new e1faa1401 - Rename attribute-based name generators
new 382b0266e Removing new XMLObject NameID encoders, redundant with new design.
new 0516dc5d2 IDP-315 Remove use of deprecated com.google.common.collect.Constraint. This means making IdpAttribute#getValues() return @unmodifiable (just like eveytrhing else), with some fall out elsewhere (mnostly in tests)
new bbdd8e1de JSPT-44 Initializeable-> Initializable to keep all class and interface names consistent
new 5e448a1f4 Fix javadoc.
new bbe065687 Add STS prefs to ignore list.
new 176f61d54 Refactor storage-based transient generation and add new-style generators.
new 1b2bdee06 Add transient ID generation to config.
new 8d83b6e70 Port over crypto variant for transient generation
new e35fea4fd Cry[ptoTransient no longed encodes the issuer, it is therefore meaningless to test for it. Supress spurious test. Also javadoc clarifications
new 0d652c502 IDP-227 more nature study, revolving around our desire to keep the MetadatProviderService separate from the RelyingPartyService, but not making the latter pay the significant cost of initializing and summoning up the metadata.
new c1c6781c7 IDP-227 add @Overrides.
new ccfad1ced IDP-355 - refactor into OpenSAML using lookup functions
new f08ef6e85 IDP-356 - refactor into OpenSAML using lookup functions
new ea5739264 IDP-119 - refactor
new a413b5617 IDP-120 - sync with SAML 1 version
new b2a1cb248 Port over event from SAML class.
new 238907f82 Fix doc links, remove unused events.
new 6dc4bdcd6 Add module idp-profile-spring to project
new 274030b88 Committing svn.ignore
new 005c96e67 Remove completed TODOs
new a3c1c0f45 IDP-129 - refactor down into OpenSAML, using lookup strategies
new 61acdd740 Factor out some reusable functions.
new 940077325 IDP-130 - refactor down into OpenSAML, using lookup strategies
new 7bfa9cb1a IDP-192 - move down into OpenSAML, add responderId lookup fn
new de235d88a Expanded use of strategies in statement builders.
new 8d3c851e7 Remove accidental commit
new c0da40153 IDP-277 Start to add parsing of RelyingParty.xml - SAML2ArtifactProfileConfiguration (and its parents) plus tests
new 149e769ba IDP-277 SAML2LogoutProfileConfiguration plus tests
new b4677ac5d Expanded use of strategies in statement builders.
new 5787ee2e1 Move NameID decrypt action into OpenSAML
new f97e7e131 Collapse signing actions into one action.
new 70545c006 IDP-136 - Move to OpenSAML
new 126116b44 IDP-145 - create dual version action
new c991a7770 IDP-124 - create dual version action
new 6f302563a IDP-122 - create dual version action
new d900c45b6 Missed deleting a test
new 8284e4770 Removing unused event constants.
new 345b0a3f5 Revise session creation to bypass BasicMessageMetadataContext.
new 6934c8d9a Fix javadoc
new 5069e0d3e IDP-277 SAML2AttributeQueryProfileConfiguration plus tests
new 19dc525a3 IDP-277 Documentation about <saml:Audience/>
new d629c032e IDP-277 SAML2SSOProfileConfiguration plus tests
new 7fa12e23b IDP-277 SAML2SSOProfileConfiguration extend tests
new 2d26995af IDP-277 SAML2ECPProfileConfiguration and tests
new 08b95a6af IDP-277 Move RP schema up to idp-profile-spring
new ecb2e0815 Update name for module
new 9c3b8014a fix name-insensitivity
new 372c1f7b4 IDP-277 SAML1ArtifactProfileConfiguration plus tests
new 8e3a1ec04 IDP-277 Fix tests
new 7b40eb034 javadoc typo
new 84f763f0e Fix a TODO in the flow, fix a late binding issue with function composition
new 4f9896848 Relax handling of missing AttributeContext when filtering
new e016a4473 Add a runtime dep.
new ea141494b Refactor SAML SSO flows, and implement SAML 2 flow modeled on SAML 1 flow for now.
new 3f8ffc334 IDP-277 SAML1AttributeQueryConfiguration plus tests
new 45c159a22 IDP-277 ShibbolethSSOConfiguration plus tests
new 0fcbe607f IDP-277 Add some TODOs around security parsing
new b754610c3 IDP-277 Move some test files around prior to adding more parsers
new 0e188f4ad IDP-277 Make DefaultRelyingPartyConfiResolver take a list of ResoverConfigurations since we require that this be ordered so make defaults work.
new f863f887a Replace vt-crypt dependency with cryptacular.
new 0efe42959 Move remaining targeted ID generation classes into SAML module.
new 94f0e311d Correct an annotation in the schema.
new d0f0a0cef IDP-6 - refactored stored/computed ID connectors to allow reuse for new generators
new e4d6bce05 IDP-277 Move the metadata and security schemas close to the place wgere the parsers will be,
new dfd9123c2 IDP-277 Add the framework for parsing RelyingPartyGroup and the three RelyingParty types. Predicates to control their operation and fuller testing is TBD
new 3bcc0fa42 IDP-277 add missing POM
new aac7149b2 RP schemas were moved to other module.
new 6ad77516b More schemas were moved to other module.
new 5016a69ce Fix failing tests for now by depending on profile-spring where security schema lives.
new 785e943e3 Reduce code duplication in NameID generators, add Persistent SAML2 generator.
new 650956d6b IDP-277 Move the the last shemas over to profile-spring (they may move again buit for now they should live here)
new e9a4de0c6 More schemas were moved to other module
new c4e2435d1 IDP-277 Wire in the activation conditions in for AnonymousRelyingParty and DefaultRelyingParty. Create stub implementations of the AnonymousProfilePredicate and EntitiesDescriptorPredicate
new 56656d608 IDP-277 Make the DefaultRelyingPartyConifgurationResolver aware of Anonymous, Default, and named RelyingParties and test. Modify parser and test.
new 94dee3999 Relax restrictions on Default and Anonymous Relying Party configurations, pending (a) discussions and (b) wiring this into the flows
new f791e1640 Annotations
new beb0ba83f Add module idp-schema to project
new 2a4b88334 Committing svn.ignore
new dae6661a4 IDP-384 Move all non-test schemas to idp-schema. Fix poms and user_catalog.xml appropriately
new cf3ca04e7 Move remaining schema mappings for XML/SAML to idp-schema
new 6b5143937 Decoders are stateless.
new 367295e41 Implement anonymity signaling on RP context and predicate to check it.
new 61d511174 Fix tests by setting anonymity explicitly.
new 6e1cafff9 Move some non-SAML functions up into profile module.
new 176f3e215 Remove use of function subtype.
new 98fe8e126 Hook SAML relying party context to metadata-based anonymity check.
new 438c2f853 Move another non-SAML function up into profile module.
new bcd19d427 Fix javadoc.
new bbe9ef7b0 IDP-383 - get SPNameQualifier from NameIDPolicy passed into generators
new b4f5e6a96 Move DC unit tests into right package.
new 2279776a1 IDP-6 - unit test and fixes to new persistent ID generator
new c7d80df4c Clean up persistent ID store interface and move some API classes.
new 21e443f16 Move stored ID back-end into nameid package, work on bean access to SQL text.
new e48186818 Typo in comment
new 56b710426 JPAR-52 rationalise logging dependencies
new 6093c6926 IDP-277 Add "detailedErrors" to the schema for relying parties. Add parser and test
new 7206c6138 IDP-277 Add "detailedErrors" to the schema for relying parties. Missed file
new 94694f6d3 IdP-379 teach the Transient Attribute Definitions about @Duration. Because of broken-ness in Spring's annotation parsing (just don't ask) we take the opportunity to refactor the Definitions down to one class with the strategy defining the difference between CryptoTransient and Transient.
new a3f0b5e21 IDP-277 "Enabled" makes no sense for a profile configuration any more. Remove it. If we need it we can always add it back in again.
new 1f9622b7c IDP-277 "Enabled" makes no sense for a profile configuration any more. Remove it. If we need it we can always add it back in again. Missed test
new fd2803f9e IDP-277 "Enabled" makes no sense for a profile configuration any more. Remove it. If we need it we can always add it back in again. more missed Missed test
new 00ac4be56 Annotation cleanup, and remove unneeded methods.
new b0b311479 Fix documentation on deprecated and ignored attribute/
new 1af3685f3 IDP-383 - wire in NameIDPolicy checking
new bb6d5b129 Remove unnecessary version element for a managed dependency.
new 0d25d3f21 JPAR-49 dependencies: move dependency management for spring-jdbc into parent project
new d990cd651 IdP-379 Add the Spring converters to the helper method which summons up ApplicationContexts
new c67565522 IdP-379 Add the Spring converters to the helper method which summons up ApplicationContexts
new 57b423684 IDP-277 Wire in parsing of the <MetadataProviders> into the relyingparty parser such that a second bean is created. This will allow two services to borrow the same parser code.
new 1ff01af61 IDP-383 - set requester/responder after logins when prepping c14n context
new db9e3ca9e Remove c14n context after using it.
new 0ad8023c3 Set groundwork for handling Subject in SAML 2 AuthnRequest.
new 3dcadda46 IDP-277 Add InlineMetadataProvider and ChainingMetadataProvider. The simplest two to build parsers for allows detailed testing of deprecated, conflicting and irrelevant attributes.
new 7cf031472 Temporarily add dependencies on openSAML-impl to fix build (I trust)
new 25269d022 remove test, pending discussions on handling of default valud of "require valid metadata"
new 5eac85478 Fix test dependency to be on the test jar, otherwise we're overriding the previous compile scope dependency. Because Maven.
new 1b8138e62 Ian having pointed out my bug, do some further cleanup of idp-profile-spring pom. Also move idp-schema run <scope>runtime</scope> everywhere it is referenced
new 0c19d196d Handle outbound binding context for SOAP scenario with same action.
new 0b01c9095 Move endpoint/binding action into SAML parent flow.
new 8b4ac63e2 Indirect into the first state of the SAML child flows.
new 6ced89eec IDP-357.
new d9703213b Javadoc fixes.
new 43b5dc4d0 IDP-359 - action to pull subject from request and set up for c14n
new 7410f049e IDP-359 - action to populate subject context after SAML subject c14n
new 92e109135 IDP-277 Remove deprecated attributes from both the schema and the nascent parsers
new 6335de894 IDP-359 - unit test for action
new 9227a0aaa Add SOAP encoders and binding decsriptors.
new 2ee78992e Fix javadoc
new 3d1bff482 Reworked design of NameIDPolicy checking to allow for more generic use in different places.
new 9007563f3 Move NameID policy predicates to more general package.
new 374eec071 Move NameID policy predicates to an impl-named package.
new 4f078b46f IDP-359 - add a policy predicate to SAML c14n actions, and lookup functions to access qualifiers from c14n context
new d143e632d IDP-277 Add Filesystem metadata provider and simple tests. Use injected property placeholder to make the test location independant
new 110b9033d Revert addition of second predicate.
new 7f9d4439a Revamp NameID policy predicate design again, more direct expression of target object.
new 1732cc888 Hopefully "final" predicate design, working for NameIDPolicy checking and subject name extraction.
new 1e405913c Remove accidental dep. on opensaml-saml-impl
new b9b8e6ae1 Fix a bug in predicate, and add Format-based determination of policy.
new db5048860 Cleanup of NameID Decoder interfaces and impls, eliminate redundant policy checking.
new 96f2405d1 IDP-277 Better testing, plus a bug fix for the AbstractReloading and Filesystem MetadataProvider
new c1cca20c2 IDP-359 - StoredId decoder and unit test
new d1cd9b576 We don't always need or have the parser pool. So don't demand that it be there,
new 8b84d1b95 Try to fix test order instability by tearing down table after each class.
new b20980341 More teardown after test
new fd8cd6707 More post database testing cleanup
new d9a761944 Fix annotations
new 8a305eb40 Default the NameID format for transient generator.
new 238037b41 Default the NameIdentifier format for transient generator.
new f345f834f Make generator strategy setter name consistent with transient one.
new a39bca618 Switch to static constants.
new 5618f0b4f Missed check-in
new 692a224bc Fix constants in tests.
new 075d345b0 Provisional support for persistentID handling.
new 245e43ac3 IDP387 Parser for HTTPMetadataresolver
new 8192354ed Wire in decryption action.
new 35d64a124 IDP387 Parser for FileBackedHTTPMetadataresolver
new 800cfc017 IDP387 Suppress test failing due to case issues.
new 7dd3fa947 renenable test
new 2ac96f634 Add TODOs for security parameter steps.
new b19af972d Leave deprecated attributes *in* the schema and fail in the parser instead
new 9db064fff IDP388 Resolver backed Metadata parsers. Parsers & Tests for all types except SVN.
new 33fa410be Finger trouble in previous
new f9bf5f3b1 IDP388 SVN resource parser. Refactor the ResourceBackedMetadataProviderParser to use spring parsing for the the two Resources we still support directly. Add SVN Resource parser and very light testing.
new d465c68b0 IDP388 Add svnkit as an optional jar,
new 62d54ea5d test-jar dependency version should match compile dependency version.
new 794787bb8 Implement conditional signing/encryption option using message context.
new 30f85ab50 Widen test for a conditional predicate
new 078bc5e3f Add a flag for bypassing encryption failure when no key is available.
new ba4c92501 IDP-386.
new 3f87919f5 IDP388 Do not checkout the svn test files into the work space. Its wrong at too many levels. Plus is causes chaos if people are running recent svn versions. Also fix warning in the parser
new 92c661ffc IDP388 Bugfixes and supressed test for the corners of configuring the SVNResource.
new 708f6def3 Define properties for some dependency versions so that they don't have to be repeated, and will therefore stay in sync.
new ef1436eca Use TestNG, not JUnit.
new 8bee24b2a Wire in encryption flag.
new 1aeb83606 Add "non-legacy" versions of conditional signing/encryption predicates.
new 371d46a66 Lookup functions for security config classes.
new bdd9d14d7 OSJ-70 - Wire in action for signature validation params, and some supporting beans
new eddb79c4e OSJ-70 - wire in DecryptionParameters population
new 3d25216d9 Add missing component init checks.
new 7b5f51c87 OSJ-70 - forwarding predicates for response/assertion signing checks
new 404e2145b OSJ-70 - wire in response signing parameter action
new dec2e8765 IDP-389 Add requiredValidUntilFilter and simple tests. Detailed tests pending
new 77db686f2 IDP-389 extra tests for validUntil filter
new ea6df9ef6 OSJ-70 - wire in signing parameter actions, disable for now.
new 12c57aa52 Add missing data file.
new 516a0797a OSJ-70 - action for encryption parameter population
new 46809ec7d OSJ-70 - fix base class, add unit test
new cf56fbc89 OSJ-70 - wire in encryption parameter action, disable for now.
new ec9eb0db1 Fix synchronous binding check. TBD: deal with ECP, possibly with a different action
new 1d3df5689 Move outgoing binding alias into concrete flows.
new 9e8e65384 IDP-389 Chaining Filter plus test
new 011df9d4d IDP-389 Entity Role Whitelist filter and tests
new 607a69a20 IDP-389 Add SchemaValidation Filter and test. The deprecated parameterized version is support but a warning emitted.
new 3bb9d0ec4 Externalize LDAP connection properties.
new e569efb45 Prelim flow for SAML 1 queries
new bd3fd6ea3 Add port 9443 SOAP connector with our trust manager.
new bc3f90df1 Fix up message handlers to handle SOAP cases, and cert authn
new 71954dcab Wire in mandatory issuer check.
new a2acfa01f OSJ-22 - mandatory authentication handler
new 0bde5ae9c Removing EndpointIdentificationAlgorithm property to fix client cert authn
new 130254e73 Move binding to encoder mapper to parent flow.
new 5f2aaa596 IDP-222 - SAML 2 query flow
new f040d0184 Add ECP binding set for later.
new 2d1eb768a Factor out inbound handler chains into dynamically executed policy rulesets, and convert testbed trust engines to be metadata-based.
new 06ca67c53 IDP 390 Checkpoint of credential parsing - the factory beans.
new c6a6b88be Trap message handler exceptions and turn into event.
new 757ff950a Move message lookup function into -impl
new e695c71af Move unit test to proper location.
new 6d19e385b Add static method for parsing Spring <beans/> element and returning a BeanFactory.
new 59e8237d0 hygiene: Add call to super.doParse in the base parsers.
new 5578ac967 IDP-390 Parsers and test for X509Filesystem Credentials, plus generic infrastructure
new 4544010e8 IDP-390 Parsers and test for X509Inline Credentials
new afefde86f Checkpointing some error handling code.
new 603454e3f Package renaming in opensaml-impl, fixing warnings, adding missing prototype scopes.
new f2982d234 IDP-390 Parsers and test for X509Inline Credentials
new 7abecd27b clear line length warning
new 5f5d02dd3 Package and class renaming.
new b48f29d81 Package and class renaming.
new de0f0ef3c Package and class renaming.
new 3b8be5a15 Package and class renaming.
new fe5d68c0c IDP-390 StaticExplicitKeySignatureTrustEngine not StaticExplicitKeyTrustEngine
new 653855315 IDP-389 Add required SignatureValidationFilter parsing and tests
new 8e8e99885 IDP-394 As a temporary measure suppress all scripting tests under Java 8
new 43acb321c Override outer execute() method to avoid duplication of event tracking.
new 02703c57f Implement prelim. SAML status code mapping.
new 5268e0640 Annotations
new 46f030f66 Implement NoPassive as an event and map to SAML status.
new 221c18836 Rebase message handler adaptor on our base class, fixes event processing.
new 6c0c3c2ff Add dummy flows for user error handling, create end-state view for error handling.
new 28c9cc374 Cleanup, correct JSP path.
new 0633ee31e OSJ-69 Replace the OWASP base64 decoder used in tests with a JDK provided base64 decoder.
new f3c61593c Remove ProfileException, etc. from action execute signatures.
new 1298df7c4 Missed a test.
new fe4b8dc5b Remove ProfileException altogether.
new 8eaf41bd8 OSJ-69 Remove unused OWASP ESAPI dependency from IdP POMs.
new 568ea9928 OSJ-69 Replace OWASP ESAPI Encoder with the java-support HTMLEncoder in IdP flows.
new f0cd2bf63 OSJ-69 Instead of the JDK provided base64 decoder, use java-support's.
new 7a380fde8 Fix failing test.
new bf9372bff IDP-390 Inline basic credential. Using cryptacular for public key decoding for now, pending disucssion tomorrow
new 73abebea2 Inadvertent check-in.
new 9501550c6 IDP-389 Add inline public key and certificate file as other ways of providing the key to the SignatureValidationParser
new 71bdfeefb IDP-389 Change schema to all inline public key and certificate file as other ways of providing the key to the SignatureValidationParser
new 525b88091 Refactor initial inbound handler chain into discrete flow actions common to all flows.
new 686181654 Re-enable encryption populate action and map outbound handlers to an error event.
new b2aa25add Remove ID properties from actions, handlers, contexts.
new 4adab03da Cleanup logging when no resolverId Available
new 4415901b9 Action to lookup a subflow to run based on a profile configuration.
new 82993ea7d Check-point rest of profile config changes.
new 14bea0fd7 Convert inbound/outbound handler chains into subflows.
new 9889263e9 IDP-391 service to parse relying-party.x,ml and return the RelyingPartConfiguration
new 4cf4201ca Fix breaking test
new 9e4f266c6 Add some overrides
new ef994754a IDP-391 Add the infrastructure for the reloadable MetadataProvider resolver from relyingparty.xml
new 07fabae5f Fix warning, to check post-commit hook.
new 76da29f89 Copy over error handling changes to SAML 2 query flow
new 3cfbb1dfb Wire error handling into SSO flows, plus some missing SAML2 material.
new f1dc7ed99 IDP-391 Wire the MetadataResolver-from-relying-party and the RPConfigResolver-from-relying-party into the configuration. Leave profiles alone for now but put in an alias as a bandaid
new c3500c001 IDP-391 Migrate the shibboleth.Metadatresolver into the profile actions and their setup
new b1843a4c6 Remove dependencies from idp-war POM as they were only used to build idp-distribution and are not inherited since packaging is 'war'.
new add03ea79 Update idp-war web.xml based on java-idp-testbed.
new 0f04d9601 Revert r5760 removal of dependencies and update those dependencies.
new a7b2c139b Add jetty.backchannel.port, idp.context.path, and idp.war.path to idp.properties. Note that idp.war.path is nested.
new 15da895f7 Move HTMLEncoder from the newly created java-support "encoder" package to the "codec" package.
new 4f6a6315c Transitions using {true} can be simplified.
new 00a204e17 Collapse all the default SAML c14n subflows into one.
new 17f115b86 JSE-6 Move IdentifiableBeanPostProcessor from idp-core to spring-extensions.
new 3cada7a33 IDP-390 BasicFilesystem Credential (and tests)
new d98116374 IDP-390 Add failure if we encounter unsupported Resource backed credentials
new 3c83db618 IDP-390 Clean up error handling. Log all failures at error as well as throwing an exception.
new b23c750a2 Alter contract such that successful events return no event, and refactor flows to take advantage.
new ffd6d973e IDP-401 Extensions to the schema to support V3 profiles
new a131b3e57 Lets try that again shall we..
new 8e74b3800 Revert last & premature checkin
new 9496403d4 IDP-390 Add explicit SecurityConfiguration defaults for each profile type. Add a mechism to lookup same in to RelyingPartyConfigurationResvoler.
new 342accc51 IDP-390 Add configuration to provide profile specific-idp-wide default (secuirty and otherwise)
new bcb67ece9 IDP-401 Add parsing support, tests and defaults for inboundFlowId, outboundFlowId, artifactResolutionServiceURL and artifactResolutionServiceIndex
new 03ed61ccc IDP-401 secuirtyPolicyRef and attributeAuthority are centrally deprecated (and no longer default in the schema). Remove all per Configuration parser support. Fail parsing in the face of localityDNSName and localityAddress
new 436a818a2 IDP-401 Lazy init the profile parsers. That way we do not need to provide the Profile defaults to the metadata parser when it is sharing the input file with the profiles
new 406e68f73 IDP-401 Revert last and for now provide profile defaults to every parser that consumes relying-party.xml
new e5e7e5c1c Cleanup artifact encoders, and get rid of message metadata context.
new dee1f5259 Cleanup artifact encoders, and get rid of message metadata context.
new 9cdbc28a4 Fix to error handling, untested.
new 19f3a3b9e Populate artifact context, change data type on artifact type setting.
new 60b9e1c68 Revert comment in check-in.
new cd8c16c19 Fix test.
new ad821c1b5 Fix artifact type.
new 5b44394be Populate contexts needed for artifact encoders.
new 72000bf58 IDP-385 IDP-401 relax all types in relying-party-schema to string
new 6dd56e381 IDP-401 "encryptAttributes" for SAML2 profiles
new 4c1220eed IDP-401 "allowDelegation" for SAML2 SSO profiles
new 85e4c705e IDP-401 Add the capability to escape to spring for profile configuration
new ed77d72cf Eliminate duplication of artifact source ID.
new c35a1919e Correct artifact binding string.
new 1ebb36d6b Convert error handling action to predicate to avoid overwriting event.
new 04c32497f Refactor artifact config to be specific to profiles that allow it.
new 7e784d5ba Add binding descriptor to context.
new b039a85bc Fix error handling at start of flows.
new f65b2dbf4 Refactor SAML 1 profile beans to consolidate common defs.
new 0ff725243 IDP-390 Move help method out to SpringSupport. (Experimentally) modify createBeanFactory(Element) to take a parent application context
new 6d360342c IDP-390 Wire SecurityConfiguration into profile handlers. We consult embedded beans first, then the explicit signingCredentailRef, then the defaultSigningCredentialRef
new 59e405900 IDP-390 supress failing tests
new 6cf522078 IDP-390 re-enable failing tests
new eb1736b6f IDP-390 Cleanup. Remove redundant warnings and done TODOs
new 4487098ec IDP-390 Warn on <SecurityPolicy> try to parse trust engines.
new 3215e8ecf IDP-390 now that we need them, turn on the IdP credentials
new 445f5037d Remove the use of bean profiles to configure IP address based authn in the testbed. Instead, manually assemble the IP address authn flow and map of principal names to IP ranges.
new 0d1d181ac Remove the end state output attribute mapping used in the testbed from the abstract SAML flow definition. Instead, manually assembly flows and the output attribute mapper.
new 128d735e5 Fix an NPE.
new 971f6ae88 Fail silently if no context/config found.
new 7962f3506 IDP-221: SAML 1 artifact flow, some error cleanup
new 664a268f9 Fix bean names.
new cb9366be6 Factor common beans in SAML 2 flows.
new 524dadd04 Generalize response shell action for all response types.
new df5e5951d Remove assertion signing action from artifact flow.
new 23b1fa0eb IDP-223 - SAML 2 artifact resolution flow
new 8a8b69673 Javadoc nit.
new c355b7831 Add base class doDestroy call.
new c6c35c0d7 Fix warning.
new dad041d89 IDP-403 - Streamline interface between actions and NameID generation
new d7ecc27fd Missed a test.
new e85aa36c0 Move predicate inside NameID generators to simplify service abstraction.
new e356d2c2f IDP-403 - Service and proxies for use with NameID actions
new 0a44a7f30 Missed checkin - update todo to reflect installation tasks
new 851019c5f IDP-390 Make the Rp fonig resolver which loads from relying-party.xml "live. Remove old configurations. Fix default inboundFlowId for the flow artifact retrieval. Fix some bean capitalization en passant.
new a3c1fa70e Remove useless provision of parent context from native bean parsing and instead add usefull addition of BeanRegistry.
new e4eeed13e IDP-390 SSOS profile configuration. Parser, defaults, tests
new 6be4d32f9 Favor Cryptacular over KeySupport
new 5ba0bcba1 Clean up some bugs in the handling of credentials' usage type
new 7e661b8bd IDP-391 Special casing of a <MetadataResolver/> being the topmost element of a file - to allow such files to be injected into a ReloadingRelyingPartyMetadataProvider
new e626f2dd7 IDP-391 Move the default configuration to have separate files for relying-party configuration and metadata.
new 064f1407f Adjust bean names to match conventions.
new 09ba6f10a Adding Spring nature to some projects.
new d3287db0d IDP-390 As per discussion 5/5/14 inline certificates are Base64Encoded DER with no header/footer
new ed99ac687 IDP-390 use BeanDefinitions, not builders when parsing certificates.
new 26ecfc635 IDP-390 Use the Credential parsers from idp-profile-impl when looking for parameters to plug into the LDAP SSL connection
new 87be46d7a IDP-390 As per discussion 5/5/14 inline certificates are Base64Encoded DER with no header/footer. Fix failing tests
new 2d8507a77 IDP-390 Strip out more ----BEGIN CERTIFICATE--- statements.
new fc2a6c05c Expose setId() method for bean post-processor to use.
new 65ea9a0c1 Reorg service config, and add NameID service to the profiles.
new d7985d649 Generalize relying party ID predicate through lookup function.
new c3e2a1117 Generalize relying party ID predicate through lookup function.
new c8af22453 Rename subject-config files to match actual content
new 4baf17820 Demote authn-related config to a subdirectory
new d2cfc0bae Generalize relying party ID predicate through lookup function.
new ab1c9c2dc For now, remove component interfaces from Predicate for consistency
new c9463d5e1 For now, remove component interfaces from Predicate for consistency
new 306765a97 Put dummy LDAP config into JAAS
new 331b4c93c Remove unused LDAP props
new 35008663c Simple way to catch direct call to subflow.
new fcc71df11 Do not default includeAttributeStatement or assertionLifetime. Let the real class do it.
new b4bbe1640 IDP-377: add an activation condition to AttributeEncoder interface
new d669c9634 IDP-377: apply condition to AttributeEncoder use, plus factor out markers for encoders
new 8f3074335 Support generalized conditional activation of authentication flows.
new 6211d6893 Cleanup idp-distribution so that it consists of the contents of idp-conf plus the war file.
new d761aa692 Fix classpath schema locations.
new 0cc1c0788 Rework user-layer flows using flow-pattern approach
new 35b00a32c Add POST-simple-sign variant
new e0dbee1f8 Add SimpleSign test, and relocate profile flows to match V2
new 0b1f7ba88 Uncommenting idp-distribution back into the fold.
new d15d5738e Rework c14n flow naming.
new ce9c47107 Remove some classpath schema locs.
new 2e20dddf6 IDP-280 Predicate of attribute resolver plugins should take a <ProfileContext>
new 256764b87 IDP-280 extended tests
new 3ab426ffe IDP-280 Attribute resolution Context navigation, plus tests
new ea308781d IDP-280 Checkpoint Selective resolution plugin configuration. The predicate can be specified by reference on any plugin. Context navigation for non default cases is still pending
new 9d3907075 Add logging into test class to debug Jenkins-only failure
new abf0b9e6f IDP-280 Missed checkin
new 82d475112 Fix building of site by unpacking idp-conf in the 'package' phase instead of 'generate-resources' which was a leftover from bundling Jetty.
new 930eb7092 IDP-280 Selective resolution plugin configuration. Add context navigation configuration for non usual location of Profile Context.
new 6b72476ff IDP-352: add extra slash to file:// URIs to account for Windows.
new 50ad6ed97 Refactor and relocate some lookup functions.
new 7deac00e6 Alter base class.
new 8cb0d64ab Alter base class.
new 4299fb8b2 Fix classnames
new 9aec9aee9 Remove some classpath schema locs.
new f8ae92916 Renaming flows to make user-override cleaner
new 1bfcea2ad Renaming flows to make user-override cleaner
new e32853297 Move webflow-config to system tree
new 400833445 Fix up profile defaults.
new f871c306d Prototype of a more generalized predicate.
new bd376a40b Farm part of constructor to base class.
new 06e8ae2c1 Streamline further, only purpose of the subtype is to default the data lookup
new 7bda54216 Add attribute predicate subclasses.
new b282fb05e Missed a test.
new 359d7ca84 Matching relying parties are a constructor, not a property to RelyingPartyIdPredicate
new c40348d2d IDP-377 Add parser support for an injected bean to control encoding
new 6e770b704 A different approach to a generic predicate with more flexibility in what gets tested.
new 4f30e5a3d Add a global default security configuration for all profiles.
new cdc8c4159 Fix authn flow name convention.
new f700caa68 Change log message case.
new 692237c33 Add overwrite to response generation.
new 643732ed4 Default in an ID generator if not supplied when adding statements.
new d5366c080 Add an error masking property.
new 486c85116 Checkpoint a draft relying party file.
new 42999eb13 IDP-207 Basic Predicate Attribute Filter rule.
new 63a042e78 IDP-207 Wiring for basic Predicate Attribute Filter rule.
new 3cb8980c7 Add missing chain.doFilter call.
new d3eac6e2e Refactor security configuration handling to allow for IdP default configs.
new 9240936d9 IDP-406 The predicates which get attached to reolvers and encoders are refered to by the attibute "activationCriterionRef"
new 6d72fe301 IDP-245 Resuscitate JSP logn pages
new 1fab67ce9 Moved new predicates to OpenSAML, and layer legacy conditional rule on top of them.
new 4edc33f45 Set up defaults for signing/encryption in each profile config.
new bfeb25627 Add a missing default.
new 3906b1872 Fix failing conditional predicate test.
new e814eabb8 Populate security configuration and remove auto-wired credential.
new 4ee1a8244 IDP-406 The predicates which get attached to reolvers and encoders are refered to by the attibute "activationConditionRef". Change the field, setter & getteer in the base plugin class to match.
new 53812632c IDP-405 stop hard wiring defaults into the profiles.
new d7631bbe8 Account for removed method.
new cd468d172 Add module idp-ui to project
new f327258a3 Committing svn.ignore
new f9784f94a Add Spring project nature.
new 97922113d Add entityID criterion to resolution process.
new e72ecc2b4 Add protocol/role criterion to resolution process.
new ad85b1d1c Update security configuration resolvers to SAML versions.
new cea06e054 Cleanup whitespace.
new 30b441010 IDP-245 port V2 Taglibs to V3. Checkpoint work so far.
new 7d2aedd88 Turn on Idp_ui in the parent pom
new 296b7efc7 Adjust url-patterns for a context path of /idp.
new 515b6ff97 Remove stale reference to old session filter.
new 199a946d2 Add another slash to file:// URIs. Remove the DispatcherServlet declaration which was outside of the idp servlet.
new c9460cf71 Update Spring bean for MetadataCredentialResolver to reflect refactoring.
new de55c2203 Remove stubbed actions.
new 223121aed Add encryption to SSO flow, adjust tests to handle it
new ed21f8b62 Checkpoint work to run Jetty.
new fd04b5362 Set IDP_HOME similarly to JETTY_HOME.
new 0e1403ab7 Disable idp-distribution as a test, think the testbed has the wrong idp-conf artifact.
new 6beca550e See if usage criterion corrects key lookup.
new 1b8758afb Remove usage criterion, handled by resolver now.
new 9d9dcb108 IDP-188 - action to encrypt attributes
new a18bf4b57 IDP-189 - action to encrypt NameIDs
new 86738aebf Update POM <name/>.
new dceb53bee Re-enable idp-distribution after wiping Jenkins workspace.
new 59afed48d Disabling idp-distribution again. The Jenkins job fails on the ant plugin, but running mvn from the command line as the jenkins user in the directory used by Jenkins works fine, hmm.
new cb7e5bf13 Some new config lookup functions, and a bit of factoring.
new 7ecfd227f Remove stubbed action.
new 7ff91559b Fix reversed null check.
new 6a42c557d IDP-137 - Action to add ProxyRestriction
new e28115df1 Remove old SecurityConfiguration interface and impl, and all references.
new 8df64683e For now, do not try to encode the error messages.
new 4bdc7e1e9 IDP- 251
new bbaf1e3f1 IDP- 251Add the error .jsp file.
new 7a3c38389 - Replaced StatusServlet with a simple web flow and view.
new 6e8768b3f Global defaults are in, so we don't need to override them.
new 4288b9d4f Fix failing test.
new 9f08eac85 Try and fix faiing test
new 8d4592107 Add caclulated fields.
new 8e8d3a206 Change antrun plugin phase to package to attempt to fix Jenkins build issue.
new 2838cdefa Remove flow under experimental development
new 2bee7476b Fix image src.
new d614e0168 IDP- 251internally accessed jsp file move within WEB-INF.
new d2f1a25b5 Restore accdiently deleted views
new 58ff4a50c Muck with idp-distribution phases in order for Jenkins to build the assembly properly.
new 61f5e0c78 Add the opensaml-profile-api and -impl modules to the idp-war POM and consequently to WEB-INF/lib.
new cc9f57a1d Remove idp-conf as a dependency from idp-war so that it will not be copied to WEB-INF/lib.
new e025cd684 Remove jetty.xml from idp-conf. The testbed now uses jetty.xml from idp-distribution, which uses <Property/> elements rather than <SystemProperty/> for properties other than idp.home.
new 6e211332b Add opensaml-* artifacts other than opensaml-xacml-* to idp-war POM for inclusion in WEB-INF/lib.
new 27ab2b41a Downgrade from 9.2 to the Jetty 9.1 JSP module ini file.
new cf496d394 Use jetty-base/start.d/idp.ini for jetty.* properties instead of idp-conf/idp.properties.
new c8214fe98 Upgrade Servlet API dependency to 3.1.0 and Servlet JSP API to 2.3.1 to match Jetty 9.1.5 and later.
new d7cffb7ed Do not log AlgorithmRegistry exceptions when algorithms are not available at runtime.
new 3134db2be IDP- 251 First attempt at providing a configurable, language sensitive interface to MDUI attribute for Velocity.
new 3927b9133 Move jetty.* properties out of idp.properties to idp-distribution:jetty-base/start.d/idp.ini.
new ce89ae48f Revert from Servlet 3.1 back to Servlet 3.0. Make jetty.version the latest which supports Servlet 3.0.
new 0ffa572a0 IDP-234 - Draft implementation of external authn flow, also rename of conversation variable for PRC.
new 10ceb6e6c Remove old context parameter for cookie domain.
new 3dc351d31 Clean up object from session when complete.
new 21db947e7 External authn JSP converted to RemoteUser servlet living at V2 compatible location.
new 2e557c1dd Remove authnMethod from external login interface
new adb761a5a More web.xml cleanup, indirect location of external login.
new df7e456d5 Rename existing remoteuser login flow and reserve a new flow for external version.
new e314e6e14 Add dedicated copy of external login flow for container-auth
new 2bfce7335 Add JAAS realm to default jetty config.
new 8298fe8b6 Cleanup and comments for container authn
new 5eca37075 Allow external authn to bypass SSO.
new d9678e0eb Split off keys, and move profile defaults for legacy config into system tree
new 0febcc9df Splitting off credentials config, working on decryption.
new 9e1138dcd Some adjustments pending final class changes from Brent
new 068cb2f2e Add logging.
new 77a4e53c8 Add missing end state for InvalidSubjectContext condition.
new 0f5f1b59b Add header and attribute support in addition to REMOTE_USER
new 7fa867923 Log cleanup
new 4e540b609 Collection cleanup
new ace7549bc Log cleanup
new ece974d33 - Rewire "Direct" SAML decoders into empty Transforming decoders.
new 27099bbf3 Fix some comments.
new 30e33130c Simplify single element lists.
new 0872fa94a Convert Direct c14n flows into Transform flows with no transforms.
new 1b32628bb Add custom EncryptedKeyResolver to defaults.
new 5951e91eb Rewire with new Chaining resolver.
new a7830a9ed For EncryptedKeyResolver impls, add an overload constructor that takes a single String recipient.
new 4c60186e8 Swap in "new" config to stablize tests, need to add decryption cred/config to legacy config
new 4bb4b0929 Implement a default decryption configuration for legacy use.
new 74c24ea17 Support decryption in legacy config.
new a622957a9 Improving some filenames and config layout.
new 96ec07d37 Utility bean for common predicate, testing RP override
new 5905fb2f1 Experimenting with shorthand methods for specifying relying party rules.
new 9d63bf3e2 Fix a bug.
new 01665d970 Use groupId property instead of "net.shibboleth.idp".
new 5a3e6a2ad Predicate for EntitiesDescriptor membership.
new 4b5d74e3d Add some error checking.
new f0bc04b7b Split and simplify nameid-gen config files, add some properties.
new db7c914ec Javadoc link typo.
new 4f5589b57 JSE-1: change factory beans to operate on resources, not files
new 05c425753 Shrink credentials syntax.
new 815ac7958 Stick to shibboleth prefix for beans with fixed names.
new aa17303a1 Add a custom ApplicationContext type to handle file resources.
new 3d5d88a57 Don't need file:// prefixes anymore.
new d2138fcd9 Move Spring extension material out of idp-core.
new 90815bba4 Move Spring extension material out of idp-core.
new 8f73daa9a IDP-413 - parser support for NodeProcessing filter and known node processors.
new ff15f0f8a Fix class rename.
new 620a722c4 IDP-413 - add a parameter for injecting bean post processors into service context
new 89d86a032 Fix failing test
new d2cef79ef Fix failing test
new 9d5e5a884 IDP-413 - add a parameter for injecting bean post processors into service context
new 82572fe5f IDP-413 - BeanPostProcessor to attach node processing filter to relevant metadata resolvers
new 76ffb7872 IDP-413 - Recode group checking functions to use object metadata
new 4179c3f21 Add Spring nature to projects.
new 1fdc921d8 Add some comments.
new df37f575d Hiding more class names.
new 92b946413 Sync up event handling in status actions to rest of code.
new b62c6e52f Add override when the requester specifically asks for NameID encryption.
new df3e557f3 IDP-230 - add in hook for non-browser signaling, to avoid overloading isPassive with ECP
new e7e5ae5c7 Move test down to library.
new fa6f23ab4 Default to non-browser profile flag, set correctly for browser profiles and propagate into authentication.
new 7371632c7 Add some missing parserPool properties, and move Init action down into SSO concrete flow beans.
new 7803e8dfa Stop overriding event context state in status actions.
new 4eba2567e Add missing security policy flows.
new 087ce970b Demote outgoing bindings alias to per-binding files, for ECP to override.
new 7acf16fbb Rename outgoing handler chain to reflect the inter-file dependency.
new aec9d8158 IDP-230 - basic working ECP flow layed on SSO flow
new d3d0aeb70 Fix client-auth disablement on SOAP connector.
new 56be2720e Populate security params earlier in flow for more consistent outcome.
new c2b145a7c IDP-416 - Align location of MessageChannelSecurityContext to actions that populate it.
new 872b153fe IDP-416 - Add MessageChannelSecurityContext action with bean type defined per profile.
new 8089419bf Add option to suppress signing of error responses to flows.
new 0c77b175e IDP-416 - Add option to override message channel flags for artifact bindings.
new 6b0df8166 IDP-416 - Add sign/encrypt actions to artifact flows.
new dec4bbf54 Move flow tests from testbed to idp-conf.
new de79bcf18 Move flow tests from testbed to idp-conf.
new ebea87e84 Default content types of views.
new 84b09fc9f Add some initial support for SOAP faults.
new ce06d034e Provisionally add UTF-8 filter.
new 12f6a7d62 Move the in-memory directory server from the testbed to idp-conf.
new 4ee4eb878 Delete the testbed idp package.
new 68896b301 Cleanup :
new 2e0446cc3 Exit flow to look at attribute release set before proceeding with response.
new c08a3ce45 IDP-230 - Rework ECP error handling to generate SOAP faults and encode them, also move code mappings into dedicated file.
new ff2d997f1 Checkpoint some work on error handling refinements.
new 537e24501 Split paths on semicolon rather than space.
new a904ef65a Some work on JSPT-45: Implement class and method renames for new naming convention for any remaing components.
new ddebfe033 Some work on JSPT-45: Implement class and method renames for new naming convention for any remaining components.
new d9a198b05 Some work on JSPT-45: Implement class and method renames for new naming convention for any remaining components.
new 5ae4f967b Implement some class and method renaming to new convention.
new 3d635110e Render final error view based on a mapping function.
new 2cee8d8fd Better handling of missing data source in config.
new 9c6b3c00b Comment
new 09a5ea4cc IDP-413 Insert the chain after we have created it.
new 85e029a33 Clean up UI templates, reorg static content, add request/response to Velocity request scope
new 991d50ea3 Add error template for stake requests, map to back-button exception, and enhance MVC error handling.
new 0cb21d78b Update error handling in Status flow, and add a 403 view template.
new b40ff9e47 Remove 404 override for now.
new fad4bdb24 Create some placeholder error mappings and templates.
new f78d8b3f6 Streamline error handling using message resource, also adds i18n support.
new 8af6e14f4 Allow for a null property.
new f297008e3 Comment out the "strict" parameter because it is not applicable to Jetty 9.1+.
new 7753c27c4 Add the jaas and security modules to Jetty's start.ini.
new 38f6a175d Checkpoint integration test work. Refactor flow tests to reuse the SAML response validator in the integration tests.
new 71833ae8a Stop exposing detailed errors, to fix tests.
new c6628dc04 Extend error template to exceptions thrown outside flow.
new 7b20d0ed9 Bump Jetty from 9.0 to latest 9.1.x.
new e3ab2553f Refactor authn config.
new 2b663f04a Refactor authn config some more.
new 6e6f388f3 Remove references to the 'idp.home' system property from Jetty configuration files in lieu of paths relative to ${jetty.base}.
new a55088337 Bump Jetty version to latest 9.2.x in parent-v3 POM and override Servlet API 3.0.1 with Servlet API 3.1.0 in the testbed POM.
new 630f5bfeb IDP-376 Start to separate the Attribute type (requested or normal) out from the encoders to make mapping more general
new e158f47c4 IDP-376 Start to separate the Attribute type (requested or normal) out from the encoders to make mapping more general. Missed checkin
new 2d1d70278 IDP-376 Change interface name to track its changed function
new 1c8390b79 IDP 376. Move code to the base class to allow multiple output types.
new 8ce6552f2 IDP-376 New mapper to go from SAML2 attributes to IdP Attributes
new cedb247b8 IDP-376 Add a specific containing type to allow us to pluck mapped data from
new 1a270e0fa Set last reloaded date even if the the servuce is non realoding. This allows consumers to know if things move under their feet.
new b455285e2 IDP-376 Add an Node Processor to look for RequestedAttributes on the ACS and EntityAttributes on the EntityDescriptor, to map them to IdP[Requested]Attributes and add a container full of them back into the XMLObject Matadata
new f83d87d37 IDP-366 - use lookup for attribute context
new 7508244d6 IDP-376 Wire the AttributeMappingNodeProcessor into the metadata filter. Add EntityAttribute and RequestedAttributes to the example metadata
new 11a986775 IDP-376 Checkpoint work on AttributeInMetadataPolicy plumbing. Add a context to carry the ACS and navigation Functions to find XMLObjects from Contexts. Add code to the filter to understand (but not exploit) this.
new e149caea0 Fix build
new bd6c5c891 IDP-376 Do not default the object strategy in the MetadataPolicyFilter because of visibility issues. Inject it when parsing.
new 06b58a873 IDP-376 Location of the (mapped) requested Attributes is now entirely done by injected strategies. The Filter Contexts loose the explicit requested Attributes.
new a05bba1a1 Missed dependency.
new e659123f9 Missed dependency.
new e558e9b74 Remove extra & confusing dependency
new 1fbd8d4bb We don't need isDefault on the ACS OpenSAML does the heavy lifting
new 1b4cfcc8c Adjust some properties
new af3ff345e Add property defaults to allow for commenting them out.
new df6e7387b Swap filenames so legacy RP config is labeled as such.
new 08b4704bf Fix subversion stomping on file.
new 1802799cf Reorder services.
new de68e6062 IDP-376 Move ACS context down to OpenSAML
new fd6d50c95 IDP-376 Move ACS context down to OpenSAML
new ee57f5601 IDP-376 Add, and wire in, an Action to populate and ACSContext under. Move the ACSContext to the outbound message (just in case)
new f7a4e5388 Add jitter to occassionally failing test
new c788ee8aa More jitter
new 76de1d1a2 IDP-336 Captilization of acronyms. Start small because I fear what eclipse is telling me about what gets deleted (nothing)
new 9825695a4 IDP-336 Captilization of acronyms.
new 71a942319 Move implementations to .impl package
new fc511fd71 Change predicates file to use the standard
new 58046f892 Support configuring attribute IDs while resolving attributes.
new b986d4e8c Various cleanup as docs get written.
new e7d0aaa94 Fix changed property ID
new 0d638e6f0 Forgot to wire up artifact config defaults.
new 814b06925 Default more properties.
new 4124d9ddd Default more properties.
new ddf340cab Remove partial refactoring.
new ed2118186 Add a basic SHA1/SHA2 switch.
new 5e8cb3b70 IDP-420 Allow MetadataProviders to have embedded trust engines.
new 9572d4366 IDP-390 warning on unsupported trust engines.
new 78261a5f1 Per-discussion, don't default an encryption key using signing key property.
new 38f9b4c95 Per-discussion, don't default an encryption key using signing key property.
new 9d0144701 Stop defaulting in artifact endpoint URL.
new 3f43be9f4 Clean up artifact defaults, fix inbound security flow for ECP
new 8d5c5b7c2 - Layer IdP actions on conditional OpenSAML action and eliminate redundant booleans.
new 79134639c More property cleanup/enhancement
new faea10797 IDP-491 Scripted Predicate, plus string friendly factories. Plus tests.
new ae9a9cf2e Send all exceptions to default view, and suppress logging back buton.
new b18026e51 Move logic implementation down to .impl
new 74ce8cf55 Convert trust engine wiring to use a chaining variants, with existing explicit key ones as chain.
new f7b9d7c6c Add PKIX trust engines to chains for signature and client TLS cert eval.
new 8145766ac Make the default error view a property.
new b5d298889 Default more properties.
new 3b1ffcd9a Tone down log message.
new d0da9bf87 Add filtering of authn flows by profile config.
new a7575557e Re-enable one test that was failing due to OSJ-68/OSJ-71.
new 2f96d4b30 Re-enable test that was failing, unrelated to OSJ-68/OSJ-71 (bad PEM cert format).
new 139ff81d3 IDP-390 Final prep for Alpha
new d929612bb IDP-418 Remove needless syncrhonization
new adfedd025 IdP 376. Add a new Functor "EntityAttributeInMetadata". Tests pending.
new 7fb9068a8 Do a better job of reflecting back the right authentication method.
new a41e9207d Deal with case where flow result doesn't meet requested principal that caused flow selection.
new bd252f8fc Add a ContextLoader which handles bare file system paths.
new ba472e6bf Make the DataSealer consume a keystore Resource rather than a String path.
new 9efd47db9 Add custom root and idp application context which handles bare file system paths and defers placeholder resolution.
new 90e996dc9 Configure an application context initializer to find and load idp.properties and ensure that idp.home is set.
new c39e9c6e7 Remove the property-placeholder location attribute.
new 3a63c8b72 Remove the "file:" scheme from resource locations.
new b332e543b Add an accessor for the PRC.
new cc280c992 Add an accessor for the PRC.
new dabea9d54 PRC should be exposed using request attribute, not method.
new 00d36a1ed Cleanup of authn config, convert field names to match legacy conventions.
new e687d894d Tab cleanup
new 452d2fc22 Simplify Boolean beans.
new 77f09ca62 Add a property to make encryption optional.
new c08ae2979 Move the idp.properties app ctx nitializer from spring-extensions to idp-core.
new 50a11a9c8 Configure logging similarly to v2. The LogbackLoggingService now accepts a configuration properties resource. The 'idp.home' property is set on the logger context if it is present in the application context environment.
new ceb99409b Add test agains unsupported, but schema valid configurations (it's that rule reference thing again)
new 269ffa040 IDP-376 bug fixes from first end to end testing.
new d944ca910 End to end testing. Its attributeID not attributeId.
new da9b57dca IDP-422: switch Spring properties over to %{} syntax
new a57d7678f Add basic license and readme files.
new e219c1bd0 Only set the 'idp.home' property from the Spring application context on the Logback logger context.
new 339ed6cf0 Only set the 'idp.home' property from the Spring application context on the Logback logger context.
new 63b378151 Comment out the Jetty HTTP connector.
new 0839cd310 Remove idp.logDir from idp.properties.
new 7524b157e Comment out the HTTP connector port and add some documentation to idp.ini.
new 17486cb6e Add disabled setuid module to start.ini.
new b1f8608d8 Remove done todo marker
new 80613e85d More TODOne
new 76de7d8cf Start to code up end to end tests for AttributeInMetadata and EntityAttributeInMetadata tests
new d8fbc6cc7 IDP-376 Fix parsing bug. Its the type of the rule which distinguished whether we are looking at EntityAttributes or RequestedAttributes.
new 2645520bc Try to make the site plugin happy by changing the phase of the various build plugins to 'package'.
new c2cc94873 Fix tests on Windows by normalizing path like we do in our real context.
new 51304db4a Tweak default policy.
new 0de7c9abf The antrun plugin should run after the dependency plugin.
new e3e1916d0 IDP-423 As a test add an AttributeID to the EntityAttributeInMetadata schema type. We can remove this before the next Alpha if we decide this is wrong.
new 822cd0a87 IDP-423 Test end to end entity attribute maping (and EntityAttributeInMetadata as a targetted PolicyRule)
new 59da39259 AttributeInMetadata is a Matcher, not a PolicyRule
new 857045d89 IDP-269 Parser for StoredID connector and Associated Principal Connector.
new 89baa3a5c IDP-425 Make sure that the computed connectors look at data connectors as well as attributes.
new acad216a7 IDP-379 use IgnoreCase rather than IsCaseSensitive. This allows for direct injection of the config value into the bean.
new decdac147 IDP-379 use IgnoreCase rather than IsCaseSensitive. This allows for direct injection of the config value into the bean.
new f8a82ec76 IDP-379 supress deprecate warning on test and one specific use of getAttributeAsBoolean
new ef9b8855d IDP-379 stop parsing booleans in the parsers, let Srping do the heavy lifting
new 0a78430fa IDP-379 Use getAttributeValueAsManagedList where appropriate
new ad1cea719 If we supply a SpringResources then we do not need to specify a DataConnector.
new 549446670 IDP-269 checkpoint work with directly injected DataSource. Also rename regression test for IDP-426
new 010a8ecfb IDP-269 end to end testing of StoredId PrincipalConnector
new c73168881 IDP-385 Relax several types to be string to allow for property replacement.
new 17beb5afe IDP-385 No need to relax schema validation for attribute filter parsing.
new 477e886fb IDP-385 No need to relax schema validation for relying party, security, and metadata parsing
new 2d8ddf19e IDP-385 Relax several types to be string to allow for property replacement.
new 5601c3e7a If we supply a SpringResources then we do not need to specify a DataConnector.
new a098e68b4 IDP-385 Make test file schema valid
new c162dbe71 IDP-385 No need to relax schema validation attribute data connector parsing
new 3d7864481 IDP-385 Make many more test files schema correct. Only one is left and it is annotated as such. Clean code so that schema validation is always on except for this one case.
new 6f7d8c66f Fix for JDK 8 test.
new d2d735e02 Bump log level.
new 318d0e539 Fix some nits.
new 87ae80fba IDP-394 (for now) supress Scripted tests for JDK8
new f54b8b9f4 IDP-394 (for now) supress Scripted tests for JDK8
new c8cc4bdf0 Relax timing constraint which seems to trip up windows tests
new 92d2e3e0c IDP-390 rename a few static fields to refelect what they are (element names, not schema types).
new ec417cbd7 PKIXResourceBacked is an unsupported (V2 &V3) source of PKIX Validation Information. Check in a failing parser and annotate the schema appropriately.
new 5d34c7c22 Typo in javadoc
new 4bf12002b checkstyle
new 3b6533f5f Consolidate password flows into one flow. This is just clearly simpler.
new 06c851a57 Use LDAP back-end by default like before.
new f97345d4c tidy variable name.
new ecceabd65 Fix up some rotted Javadoc.
new 6d37490a6 IDP-390 Parser for File system backed PKIXValidationInformation.
new 8e06b6abe IDP-390 Name clean up. Revert a lot of r6204 (they *are* types). CRL not Crl
new fd14d60b6 IDP-390 PKIXInline ValidationInfo parser
new ac1336fba Supress test, pending working out why it fails on jenkins but not locally.
new d0d5512ab Supress test, pending working out why it fails on jenkins but not locally. If enable false doesn't work, then comment it out.
new e8745e183 Supress test, pending working out why it fails on jenkins but not locally.
new 7b0630bc4 Make RequestedAttributeInMetadata an alias for AttributeInMetadata
new 4b8d2ba1b Add SAML filters which are not name AttributeRequesterXYZ
new 0c489988d turn down warning when a policy or rule does not have an ID
new 5d99a2a84 Re-enable failing test with known to work test data
new 47ffa4113 Clean up test data
new 2aac83154 Point to know good data...
new 2d004f1ae Bad data makes for bad tests. But why did it pass locally?
new 72af39eb4 Widen credential parsing to allow specification of spring classpaths. Rename classes appropriately ad add a warning into the parsers if the old style stuff is used.
new bb18feb4e LDAP knows about Credentials, Credentials know about Resources now and so LDAP tests need to use the Filesystem prefering application context
new f936d9426 PKIX Validation Info can come from a (spring) resource as well as a file.
new 682ed3200 Add a helper function to SpringSupport to convert a list of elements to a ManagedList<String>
new e937c71fd IDP-390 Parser for ValidationOptions
new efaa320a9 Fix some bean names
new c174b3f3d IDP-390 Missed checkin - add missing parser
new 29b8f1e3d IDP-390 Parser for the StaticPKIXSignature Trust Engine
new fc957c081 Relax ordering requirements.
new 76d865a6a Rudimentary Kerberos validation action, based on Sun's JAAS module.
new a0ea419b1 Clean up test flow.
new 00d61e582 IDP-429 Use a strategy rather than a class to find the serviceable component.
new 2a6062dd4 IDP-429 Align test files with new ReloadingService constructor
new 788b68546 Indirect population of resolution/filter context data to better handle internal-to-IdP uses.
new 5035dc664 IDP-362: make scoped delimiter configurable
new 237639bce IDP-359: draft c14n flow that uses attribute resolver
new 19238fddd IDP-432: missing default bean for legacy RP loading
new 2284ab71d Remove wonky Predicate suffix from sign/encrypt property names.
new dd7a467eb Bit of cleanup.
new 8f895a333 Testing attribute-based c14n, make attribute actions handle a missing subject context.
new c9d026e63 Indirect principal name lookup in attribute actions.
new d97a8535e Add missing dep.
new 3ae271854 Fix log message.
new fc35e95a7 - Simplify boolean property.
new c17f2d599 IDP-429 Move creation of the Filter ServiceableComponent into the service.
new 57c0c2de1 IDP-429 Move creation of the Attribute Resolver ServiceableComponent into the service.
new 7a059d36e IDP-429 Handle multiple metadata files.
new c91a5cda6 IDP-429 Fix tests
new f56872273 Insert a more useful example for handling expiring password events.
new b1a4ff9d5 Initial release notes.
new 718dafa43 Change release notes formatting to include link to JIRA and release date.
new 345c080bf IDP-435 - untested fix, need to skip principal check when validator isn't customizing principal set
new 69c742a77 IDP-435 - addtitional related fix so SAML 1 authn method matching works
new 87e321f24 Setting password default methods breaks tests.
new ad150b9d4 Minor cleanup.
new 5da734bd1 IDP-434 and IDP-436 Omit creds/* and logs/* from idp-distribution.
new def537e06 IDP-436
new 4506c9ca2 Add 'classpath' to svn:ignore as Logback will write logs here if idp.home is set to 'classpath:'.
new 3293f5f6f IDP-434 Exclude 'logs' directory from jar.
new 00cbe6e40 The embedded Velocity bean wasn't using the file resource loader, so dump those options.
new b4eff375b IDP-436: switch to a syntax that enables the Spring Velocity resource loader, which handles classpath:/views
new f0728b82b IDP-410 and IDP-411 Unpacked WAR file.
new 249fe5c95 Javadoc fix.
new 58b9b32ef IDP-404 XML schema validity
new 3c0e559d6 Javadoc fix.
new d4ce565e6 Javadoc fix.
new 7c5836656 IDP-439: partial fix for empty form submission
new 5961d336d IDP-439: redesign the way validators handle missing user/pass data to unify signaling to form
new d01ac15f5 Update ldaptive to 1.0.4
new 94d9d6f13 Javadoc fixes.
new d54d6d151 Javadoc fix.
new 8ff9de5da Fix typo in identifier.
new 7d7bb166d Javadoc fixes.
new 73daec372 IDP-429 log the creation of the services
new c7c73422f IDP-410 Add a very basic script to generate credentials and add the dependencies to war/WEB-INF/lib to run it.
new 75ca9b6cd IDP-410 Rename localhost.p12 to idp-tls.p12 for the testbed.
new 7d71c100a IDP-439: fix regression in flow, and clear UP ctx every time
new 6485cff5f IDP-440 Attempt to generate data sealer keystore using keytool.
new 4d8ec171c Add Spring nature to projects.
new e7e363cef IDP-283 Better tests for AFC. Tests for DenyRules and Permit/Deny Rule reference
new 9fb206721 IDP 283 remove unused class
new 8b86f8a25 Clean up test files
new f0e1dfb11 Clear up some done/no longer relevant TODO statements
new 12134855a IDP-408 remove pointless synchronization
new 962557ea9 Checkstyle
new 69340bcd8 More needless syncrhonized setting
new 2269fb723 IDP 273 Fill in some test holes
new b39e10bff IDP-394 Start to make scripted tests run under JDK8. Low hanging fruit first.
new d214a181d IDP-394 Make the examples work for JDK8/Nashorn
new 87e33761d Forgot that we can use true/false for predicates.
new 94c30090b JDK-394 More work on JDK8/Nashorn
new d7c13c299 Spell out AttributeConsumingService to avoid confusion.
new 0f589b62a IDP-414: Wire ChannelBindings extract handlers into SOAP and ECP inbound handler chains
new ad85c1292 IDP-414: Add channel binding verification action, error handling.
new 11a0ba953 IDP-414: Action to add ChannelBindings to Advice
new 19bab6a52 IDP-414: Handler to add ChannelBindings to SOAP envelope.
new fb341d803 IDP-415: RequestAuthenticated and GeneratedKey SOAP header handlers.
new 097aced63 IDP-230: ECP RelayState handling
new a665dec11 IDP-415: Action to add GeneratedKey to advice.
new 3dadb7932 IDP-415: Action to populate ECP context.
new 0003776ed Revise encryption determination to fit actual IdP usage.
new b0c8d3c12 Add common LDAP authentication configurations.
new 83da077d6 IDP-70: put file loading support back into the velocity bean used by message encoders
new 12b06462c IDP-70: point this into home/views to avoid incidental access to private config files
new 306b256e9 Revert Version code to rely on manifest, move maven plugin invocation to idp-core
new ec92d8a92 Adjust config to match testbed for now.
new 0cd6f32de Fix log messages.
new b261c1f82 Service proxy for AccessControlService.
new 3ebc641bb Log nit.
new 6c7619a49 Logging improvements.
new f72188321 - Add configuration for access control policies
new 3800dff81 IDP-245 Checkpoint work on providing MDUI information to Velocity
new 5feb24b1e JSPT-46 Move Spring knowledge out of the base class and interface for services and up to the ReloadableSpringService.
new d92290df0 JSPT-46 Move services down from the IdP. The concrete Spring aware implementations go into Spring Support, the interfaces and base class to Java-support
new 8355b3c79 IDP-306 Allow 'permitAny="true"' to be added to an attribute rule.
new 18800934b Move service-wrapper AccessControlService down from IdP.
new 8e1b31f1d Support both string and boolean to Predicate conversions.
new 457c64421 IDP-433: action to filter authn flows based on resolved attribute
new 49b684c29 Revert accidental change.
new 4d7603072 Try and collapse into one flow registry.
new bcfb01a8d Alter test to verify principal collections are live.
new 20fa43bba Fix failing integration test by adding idp-ui as a dependency to idp-war (so it is included in the war) and to idp-conf for ease of use with the Spring Tool Suite.
new 61b5674a9 Missing trailing slash.
new 81e066dda IDP-72 Add actions to reload Services and to reload the metadata within a metadataResolverService.
new b9cd2a610 Always add entries to the manifest instead of only in the release profile.
new 9a4d2f85e Simplification to return the version string from the manifest unmodified.
new ffccad8a3 IDP-80: add a top level flag controlling attribute resolution as an optimization
new 425da5253 IDP-442 / IDP-80: implement includeAttributeStatement check, and override for artifact.
new 4ffc7a27c IDP-436 Move runtime dependencies for generating credentials to bin/lib rather than war/WEB-INF/lib.
new 34311b7a7 IDP 245. OrganizationName, ODN and varoues fields from ContactPerson
new c057d58ed IDP-436 Generate credentials using properties from idp.properties via Spring and provide a Windows .bat file to do so. The creds.bat and creds.sh scripts call GenerateCredentials which instantiates an application context from conf/generate-credentials.xml. Lower the abstraction level of the IdP application context initializer to work with non-web application contexts. Add initializers as a parameter to creation of new contexts in SpringSupport.
new db2eb41a3 Typo.
new 79a739f28 Fix constraint, and the constraint violation in the message checker.
new de49bc416 Try to make the release notes highlight bug fixes and improvements of note to testers.
new 9a0119c62 Add conditional to handle empty exception messages.
new 11482801b Log error message once for each refresh failure.
new b2768574d Tweak to DataSealer peoperties, will work on key versioning post alpha2
new c9b326e1d Bump java-support and spring-extensions versions.
new 1d3564e75 IDP-75 Change process log timestamp format to ISO8601 and shorten stack traces.
new a009fb989 IDP-451 Lower log level from info to debug when a policy or rule does not have an ID.
new 03e70fd67 Add link to release notes on the wiki.
new 3ef2c4088 Revert generating credentials using idp.properties via Spring.
new 0535ea5c3 Add jetty9-dta-ssl as a runtime dependency so that 'mvn versions:update-properties' can update the version during the release process.
new a133d6c7e IDP-447 Add scripted data connector and test.
new 353a2b29f Add profileContext to scripted attribute definition (+tests)
new f7c070b98 Add profileContext to scripted attribute filters (+tests)
new 302cab206 JSPT-47: key versioning revamp for DataSealer
new 908a0fc37 Add lookup functions to session actions.
new 9bcb6364c Fix failing tests.
new 8efa68238 Add SAML 2 unsolicited SSO integration test.
new e3f5c562a Fix failing tests.
new 4fd3ac347 IDP-453 Move AttributeFilterImpl to -impl module.
new f46e461a5 Some cleanup.
new 3b94ad50b IDP-454 Include *.dist copies of user-modifiable configuration files in dist/.
new f5126b95a IDP401 Remove the embedded spring beans from the syntax for relying party
new 4ff57ddaa IDP-455: option to run an explicit authn flow when no session exists
new 6df4bc4f1 - Remove duplicated browser profile signal.
new 0a2e35e24 IDP-455: generalize initial authn to multiple flows
new 11564ddc2 Add a slot to hold a signal for flow to run, enabling flows to signal each other.
new 4fbc721e3 IDP-455: move per-flow predicate eval to Populate action, add signaling between login flows
new 6afae3236 Make names of data sealer resources created by scripts match idp.properties.
new 8566025ab IDP-81 Convert line endings to be Windows friendly in idp-distribution .zip file via a Maven assembly.
new df0dfb0bb Remove authenticator beans from system flows.
new ade8e999f IDP-354 defer handling of string in script parsing (attribute definition and filtering) to a factory. Allows for property replacement.
new 2d53c4a6a IDP-447 Schema change and parser for Scripted Data Connector
new d734d3d65 Logging fixes.
new a9267bba0 IDP-456 Fix and cleanup logging of exceptions with parameterized messages.
new 5642cb14a Wire principal serializers in order to support serializing LdapPrincipal.
new c0b84ede9 Add refresh setting.
new 687644a1b Optimize the search validator created for v2 configs.
new 109341727 Javadoc warning fixes
new 5269bd75c Typo
new ba8b210bd IDP-458 remove assumption in populateMapper() that the friendlyName is non null. Fixes a difficult to diag nose initialization bug
new 541e59a3f Something is no longer deprecated, so stop suppressing deprecation warnings.
new 8bb7c7548 Fix test
new 84e043393 IDP-442 Fix the creation of the relyingparty selector. Better logging.
new cce0cadc8 IDP-451 Allow AttributeFilterPolicy to be anonymous (although it makes the logging very ugly).
new 2d4b82886 Remove spurious logging.
new dcced8fe1 IDP-354 Comment on the documented use of getAttributeAsBoolean
new 9e2c912e1 Move message source resources out of global-system.
new 0baa8a77e Add property for Velocity view location.
new 37f13689b javadoc
new 97a8ea448 IDP-354 Code Tidy
new ef3320e9f The embedded GenericApplicationContext should be a file system favouring one so as to avoid surprises.
new 78b036292 IDP-354 Add a handfull of todos and misc code tidy.
new 0390866a2 Improve some comments, and redo some property handling.
new 008bc4a55 Spring seems to auto-recognize bean references, but that's bad form.
new 92660db16 IDP-354 Fix a String to List<String> conversion. Add a TODO about inline defaults
new 17b49a77b IDP-460 - apply slop property consistently
new 170015102 IDP-456 Cleanup logging
new 085fd9fda Use list syntax explicitly instead of shorthanding it.
new 4e6fadb10 Annotations.
new d01e4df58 IDP-245 Start to test The smart context. Confirm the bug fix for SIDP-589
new 59ed54563 IDP-461 move defaulting away from the parser
new 430ac0772 IDP-461 move defaulting away from the parser. Fix tests, use symbolic defaults on inline random values.
new 5a53a00fa IDP-461 Fix tests
new 6aaf969a7 IDP-464 parsing for <security:ValidationOptions xsi:type="security:CertPathValidationOptionsType">
new cbbd8428c IDP-463 Warn where there is an implicit setId. Name Beans, not the components.
new 4c5debaa3 IDP-466 remove redundant invocation of the IdentifiableBeanPostProcessor.
new 2b3576b08 Remove implicit setId call from SessionManager.
new b02d450a9 Remove implicit setId call from StorageService.
new 9539b148d Remove implicit setId call from StorageService.
new 6c03661e2 Better logging of the message when a bean's ID != the bean name
new 82af7329a Minor change to name when we summon up an inferred Chaining resolver.
new e89c75b09 IDP-245 Add policing of URLS. Tidy logging, Add ServiceDescription and Email. Fully test all existing Functions.
new 3ac6c6cde Javadoc typo.
new bf371d88b Javadoc typo and add "final" to some declaration statements.
new f9a66a0b8 Javadoc typo and add "final" to some declaration statements.
new 28e617102 IDP-375 - audit log constants, context, action to generate log entries
new 442e6b899 IDP-375 - unit test for audit logger
new 09dadd02b IDP-245 Start to wire in the MDUI calls into the velocity template
new db1371271 IDP-245 Add Information and PrivacyURLs and better tests
new 6cd72144d IDP-245 Add Logo and wire into login page.
new fc7a928e0 IDP-245 Get rid of all that nonsense about default values and do the defaulting in velocity if we need to
new 523ac7e59 IDP-375 - checkpoint work on audit context pop. and some built-in servlet content
new 720a2dc20 IDP-245 Make the taglib apis use the RelyingPartyUIContext
new 8a0d28d58 Clean up use of constants.
new 0bb3f710f IDP-375 - second audit extraction point for IdP/SP identity
new 90a8dd43c IDP-375 - response audit extraction
new 7b21ce629 IDP-375 - event ID field
new 1989406ec Collapse unnecessary error handling state into end-state.
new 12ff398d4 Remove TODO.
new e44c6df01 Refactor as Spring-aware action to save a bit of code.
new 9eaaaf464 Initial refactoring for:
new 6635cf001 Remove injection of beans that are no longer valid due to trust engine refactoring (OSJ-84 and -85).
new 4dd50f44a Add default security config wiring for signature trust engine refactoring (OSJ-84).
new 5745544ff IDP-375 - initial set of assertion audit extractors
new 5bd6f2db0 Javadoc tweak
new cbd79de48 Add module idp-installer to project
new 993cb845c Committing svn.ignore
new 814e12747 Maven POM name and empty packages.
new e23a923a8 IDP-375 - some refactoring, and added session ID, username, and attrs extractors
new 9231b4d4f IDP-375 - AuditExtractor interface -> plain function, optimize extraction by skipping unformatted fields
new fe3cb7f60 IDP-375 - remove String/Collection assumption from audit functions
new cfecdf78a IDP-375 - add NameID audit extraction
new 3e312d432 IDP-375 - NameID format audit extraction
new a09746742 IDP-375 - Custom formatting of DateTime fields
new 615600728 IDP-375 - Stop exporting empty collections.
new cc4d45ea0 Add RP UIInfo action to external flows.
new 2d2feea74 IDP-469 Checkpoint early work.
new 40f7365e2 IDP-470 - redesign endpoint resolver handling of "implicitly trusted" endpoint criterion
new c348d5c85 Fix tests by aligning anonymity checking to state of context in real flow.
new ed48495c7 Fix tests by aligning anonymity checking to state of context in real flow.
new 8b2416e82 Allow controllable behavior on identity switches.
new 41ebb8fd9 OSJ-85: Class and package renaming to better reflect use in client TLS.
new ba20f9bd5 OSJ-85: IdP wiring and flow additions.
new 448d9eab2 OSJ-85: Fixed flubbed class rename.
new e3d1cb90e May not use it, but we should add the bean processor here.
new 929f2bf27 Move trust engines into RP config.
new 3bb05e4fd - Implement default trust engines for legacy RP configs
new 8a3cbe7e6 Update for rename of profile-defaults file.
new 761c02265 IDP-469 More Installer procedure tinkering. Handle absolute paths. Do more for the IdP install
new ed0438541 IDP-469 Install Tomcat below Shibboleth, not IdP. This means that the user selects that directory, not IDP
new aae7d024c IDP-471 - s/Anonymous/Unverified
new 3fcdc803b Fix NPE in language collection.
new b6ace2b4e Handle unverified SP case.
new d35d5c594 Handle unverified SP case.
new 51669c802 - Rework session serializer registry component, to support user extension.
new e3549ef23 IDP 469: Simple class to edit Properties files while preserving comments.
new 6f2316f74 Sketch some consent placeholders.
new 7b8cfe8cf Wire, but comment out, the consent flow placeholder into the SAML 2 SSO flow.
new ad44f61d6 Reorganize config imports to eliminate global.xml
new f53a375cc Sketch terms-of-use actions and form.
new 8a6b81e93 IDP 469: Checkpoint work in progress. Cleanup and start to wire in the scripts
new 37b3cf17f IDP 469 Introduce GUIs from the SP. Wixcop. Better control of features.
new e5b95cbe9 IDP-224 - Front-channel non-SAML logout flow
new d9b6d1271 IDP-224 - Add auditing to logout flow, and rework end states to match SAML flow.
new c8e747886 Add auditing to status flow, and rework end states to match SAML flow.
new 1b7b39193 Add a missing bean.
new eceb6d55c IDP-224 - Velocity view
new 93ab6a640 Remove accidental check-in.
new 27a1af99e IDP 469 Ant into the Distribution
new 2684df48b IDP 469 Checkpoint work on the ant file. V3->V3 update in place. Skeletons for other targets except for initial non MSI populate
new 0e17152b3 Javadoc typo.
new f836749e8 Fix docs and error message.
new 35f569025 IDP-224 - checkpoint work on SAML 2 ProcessLogout action
new 927646803 Add test dependency.
new 29d9d9446 IDP 469 Key Generation on install
new 929b48ccc IDP 469 Sealer Generation on install. More complexity on when to prompt so as to be as silent as possible in the non-interactive case.
new 78b4cf20f IDP-224 - more unit tests
new cd8523f71 Typos.
new 32e704fc0 Missed the pom (again)
new d5cc5ba4d IDP-469 Move bin\lib to utils\lib. Fix a couple of missed checkins
new 4be32ea6f IDP-224 - checkpoint work on extending RP contexts during logout
new 76c9ccaaa Missed a check-in.
new d031491e4 IDP-469 Add task to populate the installation tree in the non MSI case
new 9c15520e5 IDP-224 - finalize work on extending RP contexts
new f1e8c01d8 IDP-469 Modify idp.properties as part of an initial install.
new 0dc9e4349 Formatting.
new 4c23b97c5 JPAR-57 Add runtime logging dependencies to war/WEB-INF/lib/.
new a0b36f798 Probably typo, "disk" -> "dist".
new 5bb60346b Add secure processing feature to parser since we're overriding library defaults.
new 4b3d47b4d Fix up default text for security manager.
new 84992a799 IDP-469 Installer
new 2d4f6ffc0 IDP-224 - kind of working SAML logout flow
new df7ec47a1 Re-enable authn check for logout requests.
new 28bdf0e70 Fix failing test.
new ce775b799 Allow for null endpoint type in SOAP cases.
new 3fd024116 Some cleanup.
new a1d3319e9 Move MultiRP functions into -impl, add one.
new 218a78814 Throw unmodifiable exception in setter after initialization.
new c7ae45150 IDP-224 - Add RPUI information to logout flows/view
new c3f7d75b3 Checkpoint work on profile interceptor flow, mostly copied from the Subject c14n flow.
new 832818554 Override c14n beans to avoid need to modify after init.
new fdfc0382b Separate override beans for tests.
new 85ddd2064 IDP-224 - Move async logout handling out of view into flow.
new b89cbee46 IDP-224 - Sync up JSP version of logout page
new 46ff33276 IDP-224 - Rename ProcessLogout action to better reflect the behavior.
new 1608acfb0 Checkpoint work on post-authn profile interceptor flow.
new effbeccb6 Return null if there are no available interceptor flows to execute.
new 33fbbc9c3 IDP-224 - Add trivial processing of SAML logout responses.
new a20500fef Better Taglib support for logout.
new ffef55cda IDP-224 - Fix up JSP view and revise to use taglib again.
new d0d479add Typo nit.
new c0c6a1bbe Re-worked post-authn flows, fixed mistakes, added flow tests.
new 4ffa26d26 IDP-224 - Flow to propagate logouts generically.
new c29547d3e Comment out TBD logout flow.
new e2ac60b26 IDP 469 Fix a bit of Unixery. Add comments
new 3ff4688e0 IDP-474 - avoid mapping root for now
new dbb48bb36 IDP-474 - avoid mapping root for now
new b465c57cf IDP-474 - Fix tests, unmap MVC resource paths.
new 04e71baf2 Remove authn flow ID from SPSession.
new 48ad5150a IDP-224 - Add SAML logout endpoints to filter mappings.
new b621a9158 Clean up detection of service names, show field labels.
new 06d52a733 Move profile action into impl package.
new 463421a0c Reindent (using Eclipse) so next checkin only shows changes.
new b60730f8f IDP 469 V2 to V3 in a one -off prepopulation step. As always old configuration is saved.
new a56c2094c Add a placeholder file for user-defined beans.
new d58ef8228 IDP-229 - external login flow for X.509
new 5cc79a523 Remove trust engine parameter.
new c9b76aa7e Add a null check.
new 6530cb2ff Add additional context class to X.509 flow.
new c2b2a35c6 IDP-229 - c14n flow for X.500 principals
new 0aaf770fe Handle failure case.
new e6d881938 IDP-229 - X.500 c14n unit test
new dcb4411ca IDP-229 - Extend external servlet to handle cert chain, add internal actions and flow.
new f253f181c IDP-224 - rebase DN extractor on cryptacular, handle ordering issue
new d4388092b Clean up error handling and fall-through support in exernal login flows.
new 972886f39 IDP-318 - Move c3p0 versioning to parent POM.
new 8ddae7d5a Rearrange and refactor predicates to reuse EntityDescriptor predicates from OpenSAML
new e48c1f5a8 Migrate functions and predicates into API.
new 8f0ce3c20 Migrate functions and predicates into API.
new 8d6d4e636 Remove uneeded annotation
new de5452a2f IDP-469 Checkpoint work in Windows (and non Windows) Installer
new 83787324d IDP-469 Add loading from a property file. Add a very simple jetty configuration installer (MSI dependent)
new d04e91a34 IDP-341 - Testing use of tag predicate with relying party config.
new d7c82a549 Fix test after changing category value.
new 2533e413a IDP-79 - draft schema for PredicateFilter
new 8f3fac9ad Fix bug populating defaultAuthnMethod property.
new feb99dbb0 IDP-79 - Spring parser for Predicate metadata filter
new d05b7b391 Fix integration tests revert war path (inadvertantly changed) and add the now separate SSL keystore to the test files
new 63678b674 IDP-469 Run Ant from within the installer for both IdP and Jetty config. Currently called visible. QtExec is TBD.
new d99cf1f3a Fix log message.
new d1a7587c5 Add group walk to RegistrationInfo policy rule.
new caffd6382 IDP-302 - support multiple MetadataFilter elements without explicit chain
new 69ab41a88 IDP-400 - Log if an authn request is forced or passive
new 12def78a0 IDP-469 Config Jetty and create its browser certificate. Move setting of IDP specific Jetty parameterization into IdP (from jetty merge module). Tested that a deployed IdP responds as IdP/Status
new 2fa47fec0 Fix the RegistrationAuthority rule to use a Set, and not treat the value as a regex.
new f3d401d24 Fix a validation error that's immaterial to test.
new 74783c54a Fix a validation error that's immaterial to test.
new e84715255 Migrate functions and predicates into API.
new 6c482adf2 Reverting, not sure why test working locally.
new 556b42673 Migrate functions and predicates into API.
new 6016810a8 Fix use of deprecated methods.
new 508c71371 IDP-258 - removed some TODOs
new 376029ebf Add a suppression capability for auditing on a per-profile basis.
new 7ea3219bd IDP-469 More jetty configuration - make it possible to stop the service. Add more config from the ant file. Add 64 and 32 bit installers. Automatically detect a V2 upgrade in the ant scripts. Placeholder action for metadata generation
new 7048071b7 IDP-253 - add service reload status to status page
new 26ce2107b Checkpoint work on profile interceptor result.
new 26da5fa7d Move some profile interceptor classes to idp-profile-api.
new 950b1091e Move some profile interceptor classes to idp-profile-api.
new c497cf4c0 Add module idp-consent to project
new 2e339f7b2 Committing svn.ignore
new 471dda6dc Checkpoint some work on consent.
new 6d6cf5ae9 Moved profile impl classes to n.s.i.profile.interceptor.impl package.
new a711b2ecb Add storage api dependency.
new e45fd0df4 Fix import.
new 3620133fa OSJ-12: Schema for SAML1.1 and SAML1.0 are the cs-sstc,mumble versions, not the oasis-sstc-mumble versions
new d2be6cb91 IDP-244 - checkpoint some work on a resolvertest flow
new 2eed14ae7 use sensible names for user facing and back channel keystores
new a4f6845a7 Initial commit of attribute-resolver-full.
new 54c8e4e86 IDP-469 Port the "full" attribute resolver to V3. Add the idp.scope property and clean up the comments at the top of the minimal attribute-resolver.
new 19196ef95 Missed a rename
new 2215b2800 Only normalize a path if it isn't a classpath
new 5d7fd1135 Checkpoint work on consent : serializer and hash function.
new 9c2aa2b06 Add loggingId to PRC.
new 331f5dbf3 OSJ-9: Get rid of common Extensions provider and instead have separate providers for the metadata and protocols Extensions element
new 7129b11e8 OSJ-18: Harmonize names of status codes in org.opensaml.saml.saml1.core.StatusCode and org.opensaml.saml.saml2.core.StatusCode
new c045ee048 OSJ-18: Harmonize names of status codes in org.opensaml.saml.saml1.core.StatusCode and org.opensaml.saml.saml2.core.StatusCode
new 64c0538f8 IDP-244 - Working resolvertest flow with JSON output.
new 07de3e545 IDP-469 Metadata Generator Task and test
new c93dc9d88 Jiggery pokery to get the build to work.
new 0ada5577c IDP-469 Wire metadata generator into MSI and non MSI build. Add scope into non MSI build. Add ARPxxx to MSI build, fix a bad demonganization in jetty.xml rename MergeProperties to MergePropertiesTask
new a8f70f099 IDP-469 Have the shibd_idp daemon start up. Add ACLs to conf, creds and jetty-base\start.d to disallow non-administrators (because this is where we keep confidential material)
new f9af02db9 IDP-244 - Working resolvertest flow with SAML output.
new 0e95eeb1c Some fixes, and apply action refactor to auth statements.
new a11d736f1 Convert storage service version to a long.
new cd7923a6d Change SS update methods to return a boolean.
new 9eb5c68a6 IDP-244 - Prototype command line shell for resolvertest service.
new fe9e1c821 Remove stale attribute-cli module.
new fe96000d5 IDP-475 Default the useragent to be Shibboleth/Idp<Version> OpenSAML/<Version>
new a0e765391 IDP-244 - Revamp CLI prototype into a generalized tool and a pluggable parameter driver.
new 9a4044646 Change CLI error output, and add a driver for status handler.
new e5c99ebdb IDP-244 - Scripts for running classes and the CLI tools.
new 0c8cc097f Conditionalize client cert handler for non-browser profiles.
new 80d5467bb IDP-244 - Windows CLI batch files.
new 0f08142bf Add idp-consent module to idp-parent POM, remove previous TOU and consent modules.
new e946a5bc1 Checkpoint work on consent. Ugly views.
new 4b05c5167 Checkpoint work on consent, delete previous attribute consent objects.
new 07cfbfbd1 Checkpoint work on consent, add commented-out "revoke consent" checkbox to login.vm.
new 5efaebdf6 Improve consent templates. Add locale aware attribute display name function.
new 372e8cbd5 Add attribute consent message source and cleanup consent properties in view templates.
new a55a1512e Move status flow files under admin to reduce clutter.
new abc5877d6 Remove a stray )
new c5d9e7f1e Add a file-serving JSP for IdP metadata.
new 98b2d7ce6 Remove custom status pages.
new 01c8dd722 IDP-475 We do *not* need to set the timeout. It was a distrubance in the force
new a6621762b Add module idp-cas-api to project
new 3604442a5 Committing svn.ignore
new dfd9b1dbc Add module idp-cas-impl to project
new b369c6e3d Committing svn.ignore
new 9ddfa3e23 Setup CAS modules.
new bf61e4b3c Add CAS modules to idp-parent POM.
new 2d8e25912 Deleting no longer used idp-metadata-api module
new 663259ed3 JSE-7 use Java support client builder, not the factory bean
new da5a7abbe Convert status view into JSP, better fit.
new 62e3d7cf3 Add test that proves we can have an empty chain in out Metadataprovider.
new 1082e769f Move the example (test) metadata over to test. Make the distributed metadata-providers.xml and empty chain, but bung in some commented out examples.
new 43682649e Move Xerces property out of user's line of sight.
new d8c0c8c2c - Add support for loading additional properties through an indirected property.
new 1220c1624 Start factoring properties, starting with ldap and service config. Rename some audit properties.
new 4111c0afb Add LDAP authn properties, align names.
new 28226c763 Remove incorrect comment.
new 7f8440895 Check point work on service reload flow.
new 1e151ccb8 Checkpoint work on consent. Simplify the consent context, pass consent IDs rather than serialized forms during extraction of user input.
new 0ca35c6b2 IDP-72 - Working flow and CLI for service reload.
new f30463a8c Remove outdated template.
new 58ee86bc0 Override HTTP status for errors.
new 3c2fc28b5 Add some logging, and include a positive confirmation of success.
new 571e65848 Bump versions of commons-dbcp and hsqldb.
new f28f5d7d4 Fix integration tests.
new 789164c7a Checkpoint work on consent. Cleanup Spring wiring and unused flow descriptors.
new 411fb9108 Consent revocation is for attributes, not terms-of-use.
new 11749fd82 Checkpoint work on consent. Implement consent record lifetime. Remove expiration field from Consent object.
new d3c7f9f92 IDP-72 - Action / unit test to refresh selected metadata source from inside service.
new 8250d316c Checkpoint some Windows Installer bugfixes
new 81222a18e More Windows installer bugfixes: Better tidy up after build. Generate unique passwords for each keystore, better display of upgrade values and give the correct password to ant
new 6bd8b88e2 The init-script Jetty includes doesn't run on RH anyway, so deferring any work on that.
new e60c9b822 IDP-481
new c88e77608 IDP-72 - add metadata reload flow and CLI, rename service reloading flow files
new fd4087f8b Checkpoint work on attribute consent. Implement attribute whitelist / blacklist / match expression.
new 3c1ae56e6 Abstract attribute consent flow. FIx bug in views.
new 1eb3a98e2 Remove reference to misc directory
new 10a10691b Checkpoint work on consent. Use decision-state for consent revocation.
new fae28aead Use wildcard in ant.bat classpath
new af9ce1fe5 Add logs to svn:ignore.
new 0e34d9c62 No scripts using cpappend anymore.
new acc514410 IDP-481 - redo key gen scripts
new f677f54ea IDP-481 - Eliminate looping, and add in bin/lib jars to command line tools
new b4720ad34 IDP-481 - No need to generate back-channel cert and a p12 file.
new 1021bb51f Replace deprecated and unneeded Guava Objects methods.
new 64c86ae62 IDP-426
new 3e9662b48 Remove access log config.
new 516082689 Move logging service bean into services file, and add to status page.
new 833980afe Checkpoint work on consent.
new 50410e544 Remove collapsed attribute consent flows.
new d1f81a933 Checkpoint work on attribute consent UI.
new db8e1ff6e Missing bean needed to perform LDAP Authentication
new 1b186fa9f Set DOS linefeeds for batch files.
new b598a5793 Add a warning against modifying files.
new 61396becc Revert r6369, put the lazy-inits back.
new 2476613ac Updated SSL cipher whitelist, gives an A- at ssllabs.
new 7104d4488 IDP-469 More bugfixing. Set idp.home to *exactly* the correct string. Put the icon in place for 64 bit installs. Cleanup the Apache stop port. Also tested to upgrade from 3.0.0.0 to3.0.0.1
new aa795af09 IDP-469 Add Firewall exclusion for the jetty process.
new 159b594fb Fix line endings, exec bit on scripts
new 20778b89b IDP-481 - rename war directory to webapp, fix ant scripts to be runnable from outside bin
new fa8b5394d IDP-481 - add additional pre-content under edit-webapp
new faaedbb1c Shorter lines.
new 7b4c4a490 IDP-481
new 2bc957ab3 Consolidate all LDAP authn configuration in a single file and default lazy-init to true.
new f16346fca IDP-469 More debugging. Strip trailing backslash from ANT_HOME in ant.bat. Add logging (logging file deleted on success) to assist target debug. Move V2V3preopulate forward in the full copy install. involved bring gettarget forward as well.
new 0a49539b1 Partial fix to avoid generating creds on upgrades.
new eaaa41749 Avoid backchannel keygen on V2 upgrade.
new 5339e8785 IDP-481 - typo in jettty-base, don't generate metadata or create backchannel.crt on V2 upgrades
new a6243fd93 Clean up scope comment.
new 8701e9162 IDP-481 - Fixes to askscope target.
new 41480c050 IDP-485 - add property to swap two sets of resources to load into relying party service
new 2e3e947ba IDP-485 - tweak a comment
new f5b0f45bb IDP-485 - draft changes to manipulate service.properties on a V2 upgrade
new 998c1baa7 IDP-485 - s/service/services
new aa316d622 Add extra LF at the end to better delineate installer changes.
new 918202c91 Legacy relying-party example is for testing.
new 5842e7de9 IDP-486 - Attempt at fixing credential config.
new 034a8739e IDP-486 - Property is set but not true
new f4cf2e078 Legacy use of relying-party.xml for metadata needs profile default beans to work.
new 217374c03 Fix svn props.
new ffb16dd1f Eliminate unavoidable warnings on unused settings.
new 0fc4c08bb Add some debugging help.
new 51fa484bb Fix javadoc.
new 31715db62 Revert metadata change, creates a circular ref.
new 3a9bb2e57 Put built warfile in war/idp.war to match V2 location.
new d534688de IDP-486 - rename creds back to credentials, for sake of upgrades
new f4dc6fc32 IDP-486 - rename creds back to credentials, for sake of upgrades
new cd54380d7 A couple of changed file locations
new 5aa09f0e4 Checkpoint work on consent. Implement three toggleable consent methods.
new bfdb36e30 Cleanup.
new 55d4c97bc IDP-488 When parsing legacy relying-party.xml make non-metadata builders lazy as well as metadata ones. Since they are not summoned up for the Metadata-resolver service none of their dependencies need to be present.
new 3aa1a67bc Reduce some log chattiness, alias DataSealer to ease upgrades.
new 1b8598740 Unify tabs
new adc746ef8 Correct weirdness in log message.
new 28172f527 Fix missing placeholder in log.
new 575870310 Fix extra placeholder in log.
new 63183c641 Reduce some log chattiness.
new 060d4be7c Disable SSLv3.
new d828d8921 IDP-491 - TemplateAttributeDefinition throws when no source data is supplied
new 1a429f22f Fix some logging errors, some general cleanup.
new ceea1a85b Logging error.
new e70bb3cb0 Missed injection of servlet request to get SubjectLocality populated.
new 645599a9f We're catching xmlsec logging now apparently. ;-)
new 029d5d1b2 Toggle off SPSession update action unless we're tracking them.
new 7d302ef24 IDP-494 - add test case that demonstrates rowcount bug
new 7de094694 IDP-494 - promote MappingStrategy to a public API in case people implement it to extend connectors
new 30abce1a2 Cleanup.
new 95c446bf5 Checkpoint work on terms of use consent.
new 6b9beff66 Cleanup annotations.
new 99c460718 IDP-357 - revert IdPAttribute to expose and track values as a List
new 05734520c Provide feedback to user that the terms-of-use checkbox is required.
new ad0853db0 Consent cleanup. One function to lookup interceptor flow descriptor types.
new 883e2e9c8 Consent cleanup. One function to lookup interceptor flow descriptor types.
new 9fbdf2a3d IDP-488 Catch up on changes in the ant file. Add better debugging support. Add capture and processing of scope. Fix the example metadata provider and add a couple of AD friendly comments to ldap.properties
new 08142d10e IDP-357 Make sure that Deduplication, does dedupe
new 89107e21e IDP-357 Try again. Make sure that Deduplication does dedupe
new 47bb40e66 IDP-357 Revert last two. The initial code handles the Immutable case by working backwards from V2... sigh
new 9cfcfb112 IDP-357 Cleanup code around logging, plus javadoc
new dcde3612d IDP-493 amend property replacement to understand commented line of the form # property=value and replay them appropriately
new 0c1c4bab8 IDP-493 Set NameID gen properties on a V2->V3 upgrade. Also cleanup the identifiers for the merge files (in the target processing we look to see if the property is set and if it isn't wet set it to a default, from there on we always use the proprtyname when writing to the property replacement file
new f066bd2ed IDP-489
new cd176b23f IDP-492 Add annotations into Jetty to allow JSP to run
new e77d43903 IDP-494 - extend LDAP result mapper to handle aliasing, also handle multiple results properly
new 60b3b8a34 IDP-494 - add test for multi LDAP result set
new 601e7743b Case IdP-378 Warn if the TransientConnectorParser has "noResultIsError" set
new d898ebad7 IDP-251: make any run quietly.
new caf1ed69a IDP-258 TODOs
new 80bc8ca1b SC197 more odd tests around matchers as policy and vice versa
new 10275e4cd IDP-203 tests for AttributeInMetadataRule parser, plus three bug fixes flushed thereby
new b0cfdde65 IDP-203 fill in missing tests.
new 55fe42370 IDP-203
new 8575f2969 IDP-203 Move default from the parser
new 649ec648b Add a context lookup function via script.
new 5e40298a6 IDP-494 - parse dc:Column elements into a StringResultMappingStrategy
new 77cad1a5d IDP-494 - add warn on unsupported type attribute
new c1a9b292a Guard property.
new 1d832a97a Fix warning check.
new fed5130d6 IDP-494 - fix a bug, add test data
new 65f310e65 Mark queryUsesStoredProcedure setting as unsupported, and log a warning.
new 6e02d7d27 IDP-494 - Add dc:Column parsing to LDAP connector
new 33a0f836e Add external bean support for subsets of RDBMS connector features.
new ddbb876a8 IDP-203 Adda javadoc where we are hard wiring values into LDAPtive
new 0dd5850a9 Fix missed refactor.
new fd5399c2e Property to enable post-authn flows.
new 1534b95dc Make consent flows abstract. Use message source in flow directory.
new e5438c176 Flatten consent flows by removing "consent" directories.
new 44cac7550 Rename "attribute consent" to "attribute release". Some consent cleanup.
new f8fc22e25 Fix test after adding property to enable post-authn flows.
new e6bdc584a Add idp-consent module to idp-war POM for inclusion in the WAR.
new 637b1744e Typo nit.
new 9175e79d2 IDP-481 Fix regression in asking for entityID
new 3199ddb74 IDP-93 auto layout to make later review easier
new 82072c635 idp-481 Add a comment at the top of the file
new 5d0ce1d66 IDP-469 Add and support for auto merging of ldap.properties
new 4a91cbbef comments about AD config
new ed87bc03d Fix bug in attribute release flow and add integration test.
new 3538e7772 More consent abstraction. Remove remaining terms of use actions and replace with "generic" consent actions and terms of use specific functions. Remove any consent related event IDs in lieu of predicates and decision-states.
new 7dcf89fe4 Rename a consent action.
new 5b1565a70 Refactor "post-authn" to "intercept".
new da27a56bc Prune the initiating SPSession from the logout context.
new a4c392143 Fix unit tests.
new 2bdb9c2e8 IDP-224 - initial SOAP logout flow
new 56da7c37e IDP-224 - Add a PartialLogout piece pending propagation working later
new 608cbfa96 IDP-469 Add (optional) capture and configuration of Active Directory configuration (into LDAP.properties). Testing still pending
new 2ac823f2c - Reimplement attr-checker flow as an intercept that eval's a predicate
new eeff8f42f Fix unit tests for now, need to think about how to propagate custom intercept errors.
new 8a1c294c5 Move consent flows to system/. Add consent properties to messages.properties.
new 4bb5d61ce Javadoc typo.
new a29de6724 Cleanup consent config slightly.
new 90f5f732d Add external bean support for mapping strategy and result cache in the LDAP connector.
new 62e80cd9c IDP-487 Lock down conf to be root readable only.
new 8498c52b1 IDP-498 Predicate Signing, Encryption and backchannel credentials on relying-party.xml existing
new b8d0053b3 Fix case in test class name.
new 845b5bb43 Fix case in test class name.
new f760a20a5 Cleanup for class rename.
new aad7e97ac IDP-497 Do not install any jetty config by default. A 'not yet for consumption' property will allow people to try to install jetty. If Jetty-base is installed then the layout is changed slightly to mirror what the MSI installer plant (start.d becomes start.d.dist)
new 6a9fa6874 Bump jetty-dta-ssl to 1.1-SNAPSHOT and move property to idp-parent from idp-distribution.
new 37034ab3b Bump java-support to 6.0-SNAPSHOT following release of 5.0.0. Bump spring-extensions to 3.0-SNAPSHOT as that is the proper version following the 2.0.0 release.
new f3457d326 Bump spring-extensions to 4.0-SNAPSHOT following release of 3.0.0.
new f2e320de6 IDP-481 Make metadata generator collect the input from the target.
new 126026817 IDP-481 nicer properties output
new 7e29855d6 Add CAS protocol API components.
new 8a8094e0e Define an interface that for the attributes that ECMAScripts get .
new cb9983f91 Add CAS protocol impl components.
new 85fbb67b6 Add more CAS protocol impl components.
new 25d179f37 Do not create duplicate assemblies.
new 460d381af Add CAS protocol flow beans.
new 26e2b0d35 Add CAS flow action unit tests.
new 9736cd402 IDP-502 - Align AttributeInMetadata filter to V2
new 597072cc5 IDP-502 - Align AttributeInMetadata filter to V2
new 44cdf64d0 Remove a duplicate policy.
new df562f0f0 Move intercept flow property up.
new 8fa849f0b Move intercept config into subfolder, create dedicated message source, create a special parent flow to hold user-supplied end-states.
new eea968897 Remove redundant end-state.
new 8ea652033 Reserve parent flows for custom authn and c14n events.
new 2e0bb7d6a Fix log message.
new c64b01db3 Add boolean condition shortcuts.
new 50afae572 Add a predicate and example for enforcing attribute checks.
new dd0736829 Fail CAS ticket validation on proxy failure.
new a9b05d25b IDP-77 Add The Version to the very top of the log immediately after log initialization
new 8ee4fc4c6 IDP-487 Lock down jetty config as per IdP config
new 6ddad9e44 IDP-505 Add appropriate quoting
new 80336cfa4 Improve CAS proxy flow action test coverage.
new 96f05c46e IDP-481 Ant handler for passwords. Ask for the password, ask again and compare. Do not allow null passwords.
new 020330156 IDP-481 Comment out SAML2 AA endpoint
new e193afbb0 IDP-481 Comment out SAML2 AA endpoint. Fix (and extend) test
new 3454425c7 Store CAS protocol request/response messages in context tree.
new d8803de44 Rename CAS profile configuration components.
new 0895a3d81 Add CAS protocol flow config files.
new ac9a0985f Move AuthenticationProfileConfig into the authn-api module.
new 473e9a83a Remove redundant keywords.
new 16b946738 IDP-506 - Support post-authn intercept flow activation via profile config
new 689698e7b IDP-506 - Add intercept/ prefix to test flow names, and add constant for the prefix.
new 229f71f21 IDP-496
new 5817f8b6b Fix case in test class name.
new b1e742345 Fix case in test class name.
new a9a76f2a8 Cleanup for class rename.
new c37bf4b59 IDP-489
new 28c19451f Todos done
new 21a1cf6a1 IDP-506 - Align profile-driven authn flow filtering to intercept filtering
new ca1faabcf Remove consent activation conditions in favor of using profile config.
new 7a1f69aa0 Add decision-state to avoid calling intercept subflow when no flows are enabled.
new e9ad63021 IDP-506 - Convert outbound flow option and explicit SAML error hook into intercept point.
new 3e268cfb3 Add high-level CAS flow test.
new f4b6a24d4 Revert accidental logging config changes.
new 18ad6e34b IDP-506 - Convert inbound flows and security policy flows into intercepts.
new a254e24c6 IDP-506 - Activating a non-existent flow handled as error.
new e1e44f89d IDP-506 - Revise test design
new 21b8f18a6 Complete CAS ticket validation flow test coverage.
new 362ebdcfe Fail on broken CAS proxy chain.
new 696eaf863 IDP-501 - support multiple audit logging formats
new f992ded39 Comment
new 6e895c196 IDP-251 Add HTTP: listener to captive jetty config
new de6c7e96c IDP-251 Add cas jar files to distribution
new b18ebbf45 IDP-251 Move the selection directory to be the one where the directory goes (the user gets no choice for Jetty). Makes for a better upgrade experience from V3. Extra cleanup during build and some feedback when the installer is doing the Ant processing.
new 0becba180 Add CAS proxy flow test.
new 31ef8cf99 CheckStyle
new 22d0ba395 As discussed enable useTls for LDAP
new 61827f340 Logging
new 0f94b2ada Extra tests for multiple file input
new b8afc6228 IDP-251 Make life much more wonderful for Quick Installer users - inherit installation dir, turn on Jetty and AD config and inherit keystore if we find an old QI install
new 9d27aa6d4 IDP-508 relax schema to allow multiple attribute resolver files. enable multiple resolver file test and fix test file.
new 581181db9 Factor out NameID properties.
new 405a94f38 IDP-507 Add sortKey into top level MetadataProviders, and test/
new b53eef486 Pull IPAddress as default login method.
new 96afbb9d3 Add properties for the service resource sets to use.
new 6960005f1 Adjust a default.
new 84563a943 Add CAS login flow tests.
new c980bdf62 Remove empty attribute-impl module from build.
new d7cd3f616 Rename XMLObject mapper class.
new b8f065f3d Make the distro version of jetty use 8080 for the http:\\ connector and overwrite the config for windows installer. Plays better with the integration tests that way
new f26c49194 Add setters for strategies. Just in case
new 1e5fe9961 Remove unused field
new a0831934c Use InitializeProfileRequestContext action to set up PRC.
new 7be88fc73 Minor cleanup.
new 914466423 IDP-418 - add a strawman class to cache and expose a SAML2AttributesMapper
new 5815ba423 IDP-418 - add parallel support for AttributeDesignator -> IdPAttribute mapping
new 551ffc4b8 Update InMemoryDirectory with startTLS keystore.
new d7faee996 Remove some commented-out configuration to avoid confusion.
new bc0fc5198 Comments, javadoc
new f9c24714c Adding a missed "final".
new 0968930fb Cleanup.
new 1f9466d50 IDP-509 Checkpoint work on secondary storage index for consent.
new 81d0a125e IDP-418 - finish parallel support for AttributeDesignator -> IdPAttribute mapping
new aaa9b071f Put accidentally removed constructors back.
new 85fc424e5 Add some ignores for wix and VS output
new 16482c3f3 IDP-512 optional extra class parameter to scripted function to police the output type
new eea80e69e IDP-418 - fix some bugs, implement AttributeDesignator filtering in query flow
new 9c09d51ca Add support for CAS RP config activation by group name.
new 1785201a8 IDP-418 - SAML 2 query filtering
new df495d3c6 IDP-418 - Fix tests.
new 4481bfc22 IDP-513 - Enhance attribute encoders with option to omit xsi:type info
new 23689cfaf IDP-513 - Missed a check-in.
new 69e048c96 IDP-513 - Fix base64 test.
new 5836379b5 Add a clarifying comment.
new dd0980caa Hide class name.
new acce71ec5 Remove redundant declarations.
new 598bba036 Remove more redundant declarations.
new a968b1a96 Initial work on schema for dynamic metadata provider.
new e55cb5347 Don't adorn ant input prompt.
new db0583366 Improve installer prompts, add install and build wrappers.
new b936c7c6e Add exec bit.
new 79a423af3 Disable SSL on backchannel connector, remove some ciphers.
new edd514dba Remove extra spaces.
new 4249d5400 Remove comment.
new 6b7af1413 Forgot to remove earlier attribute checker flow.
new de29aa2d9 Rephrase install dir prompt.
new 023aebea6 Lower log level on ID warning.
new 727f5bd4e We should never be adding new properties, so don't note that we might
new c8d8e10e5 IDP-612 Add factory methods to create scripted Function<MessageContext, Object>
new dd11a7388 Cleanup. Todos are either done or their time has passed
new c218e9446 Reversed type encoding check.
new 1baded0f3 Add missing annotation.
new 50c3ef176 V2 upgrade didn't do nameid.prop merge.
new 73c2e3eca Remove TODOs.
new 4765023a6 Less wonky wording (IMHO)
new c7332a0ae - Separate session and persistent cookie storage use cases.
new b94bec81b Add consent revoke box to JSP login form.
new ce3e85a15 Checkpoint some work on dynamic metadata resolver schema and Spring parsers.
new 70c337841 Fix log prefix.
new ffa78d0ac Disable STARTTLS in ldap.properties for integration tests via property replacement.
new 2f5c20a2e IDP-115 - add subjectAltName override to c14n action, and wire up options
new ee45abc41 Move throw on deprecations to parsers corresponding to where these attributes actually appear in the schema, rather than globally in AbstractMetadataProviderParser. Seems more correct in general.
new 19c580542 Change to use non-default Spring property placeholder prefix and suffix in parser tests, like elsewhere in the IdP.
new 165a96994 Some unit tests for dynamic metadata provider parser.
new 010289f16 IDP-115 - fix test, make a little more general so it operates without a certificate
new ac64be53e IDP-115 - comment out sAN extract
new ac15f7d7c Adjust order/level of logging.
new 8d8a42ed4 Fix tests, a %{} placeholder override was added?
new 4d57fd08d Trap runtime exceptions by logging and then passing on to error handling.
new 7d1ee178f Fix bugs in CAS SAML metadata impl.
new 8f6114ca4 Trap runtime exceptions by logging and then passing on to error handling.
new 43a7d450e Trap runtime exceptions by logging and then passing on to error handling.
new 554f5ff64 Add CAS login URI to cookie filter mappings.
new 58ab896ba Checkpoint consent cleanup and tests.
new 5e7dc0c10 Checkpoint consent cleanup and tests. Fix bug in PopulateAttributeReleaseContext.
new 077197262 Improve wording of some consent messages.
new f7f5445d5 Add some test target XML.
new 29afdd674 Test for dynamic metadata provider parser, regex case.
new 91a7d4a4c Checkpoint consent cleanup and tests.
new 9d668404c Add a generic scripted action.
new 404495203 Move scripted action to API module.
new f03b6ad82 Move property placeholder to system tree.
new f057ccb0b Add support for BeanFactoryPostProcessor injection to SpringSupport and Service APIs.
new 98e73b4be Fix annotation and move test to correct project.
new 23dcb7653 Move tests to correct package.
new 891a33643 Move test to correct package.
new 2f54a1f47 - Rename error config file
new bfe1a3378 Mask some I/O errors that shouldn't abort the flow (optionally in one case)
new 9720602a2 Revert errant refactoring.
new 505b6bfcd Checkpoint consent cleanup and tests.
new 627257bdf Small text adjustment.
new e770ba4e3 Reorder RevokeConsent step to happen before view.
new 2f63be5e2 FIx bug in ReleaseAttributes action where attributes exempt from consent were not released.
new 37ec68532 Move property configurers to BeanFactoryPostProcessor slot in services-system.xml
new a97239319 Reuse root context instance of PropertySourcesPlaceholderConfigurer in service contexts.
new 65fcd23bb Remove extraneous property bean.
new 89c25db97 Reuse root context instance of IdentifiableBeanPostProcessor in service contexts.
new d67c5b197 Convert AttributePredicate to setter-based DI plus tests.
new 0bf95259e Rename functions to end with "Function".
new c3aa1ba37 Avoid trigger words in user interface.
new 311f78fbb - Fix global consent revocation check
new d30be04ba Checkpoint consent cleanup and tests.
new d1b9604ad Add missing @Override annotation.
new 6796d7414 Checkpoint consent cleanup and tests.
new 463b7b9a7 - Refactor intercept configs into separate flow configs
new a20dd9eff Revert refactoring bug in logger field.
new 0bc46c42b Remove unused function, replaced by the JoinFunction. JoinFunction tests.
new 150eb3d93 Fix apparent historical schema doc typo.
new b1b40e55c Add second Reject event for terms of use.
new ef1ae4cac Update cryptacular RC, and port DN parsing code.
new bfa281160 Remove extra property override bean.
new 97f968f84 - Revamp error handling in flows to allow per-event audit decision
new e52e8624a Checkpoint consent cleanup and tests.
new 5497b95cf Move function to logic package and its test.
new 732cc94aa Checkpoint consent cleanup and tests.
new e6d832f6f Checkpoint consent cleanup and tests.
new 10003ac5e Interceptor action test.
new 9aa66d886 Missed checkin.
new bcfbea484 Use "_shib_idp" as prefix for parameters rather than "_idp".
new 7fd56b893 Wire a default SslConfig in the authn config which uses trust certificates.
new d3bf708ba Complete message-ization of error view.
new 4689e66a0 Fix an NPE in the service name check.
new f283c651f IDP-517 - Consent templates need to handle missing RPUI info
new 488909391 Match fonts to consent css.
new 0e5128fb7 Prep login page for i18n and fix up login error display.
new 4becada92 Removing JSPs, may restore at later date time permitting.
new 9267bfe61 Add i18n to more templates, fix up some comments.
new fd228b04e Add a shortcut bean for subject context -> principal name lookup.
new 724e60146 Make storage index context a bit more unique.
new b8eee4bb3 Hide consent storage key config, and expose properties to control it.
new 29c5d0731 - Enhance TOU flow to support mutliple TOU terms using indirection.
new d5bf36ffe typo
new 852a35590 Checkstyle
new 18c44b36d Switch an error event.
new 28e646d72 Remove default - it's in the bean.
new 6def58116 Add a clarifying comment.
new 90f167fbe Fix failing test.
new 8d8479596 IDP-518 Deleting idp-tou-impl
new 0c0646bc9 IDP-518 Deleting idp-tou-api
new 4ddcb7776 IDP-518 Deleting idp-consent-impl
new cd2a97bcc IDP-518 Deleting idp-consent-api
new 769b34f0d IDP-519 Skip consent flow execution in non-browser profiles by filtering flows via the profile interceptor dispatcher.
new 579e8dcea Gotta love a JRE update that changes the implied order insides Sets. Keeps us on our toes.
new 3b5cdb9d2 Fix test to work with Java 8.
new 9078b7dbd Add test for permitAny="true"
new 085e81340 Widen scripted filter tests
new 4480ffca3 Add messages directory to dist/ folder.
new 4cfbd3653 Fix mismatched failFast comments.
new babc86eb5 Set 400 status code on InvalidMessage events.
new ef99ffd80 Toggle off type encoding for legacy scoped values.
new 5c089e190 IDP-520 - Use of a DOM1 call to set an XML attribute.
new 691714e5a Fix default endpoint index used for SAML 2 artifacts to match generated metadata
new 892a47604 Fix default endpoint index used for SAML 2 artifacts to match generated metadata
new ccc753ca1 Fix DOM1 setAttribute call.
new 901ea138d Fix test on case sensitive file systems.
new 866ad5642 Let release notes point to JIRA and/or the wiki.
new 4f32cd7f5 Bump trunk snapshot versions after 3.0.0-beta1 release.
new 670fded87 Delete empty idp-attribute-impl project.
new 51a3c4129 Remove messages from the distribution prior to populating the MSI. We populate from .dist
new 291535bff IDP-512 rev name and version for beta1
new 55ce22589 Remove empty method override.
new a93db893e Rename distribution from 'idp-distribution-VERSION' to 'shibboleth-identity-provider-VERSION'.
new af5346c1c Use 'idp.' as prefix for local properties.
new 58ec65fa6 Fix some nits.
new f8b683ace IDP-523 First attempt at terms-of-use audit logging.
new 3f64a0538 Fix Javadoc.
new d78c8e4ac Javadoc typo.
new 60f2a5b5f IDP-523 Checkpoint work on consent auditing including attribute release.
new af22d2a1d Try to be consistent with 'shibboleth.consent' prefix in bean IDs.
new 1cb801ceb Revert r6997, the storage key for the storage index should be the user ID only, not the user ID joined with the relying party ID.
new c729ed692 Use CSS rather than Velocity to set background color of table rows for attribute consent.
new ab5a04b8b IDP-528 - Generated metadata has SLO and SSO endpoint collections swapped
new 07789eff3 IDP-528 - Generated metadata has SLO and SSO endpoint collections swapped
new 478e85787 Add compression to logs, do some reordering.
new 7ddd6e0bd Whitespace cleanup.
new 8cd184525 IDP-529 - The idp/shibboleth metadata "view" isn't seeing idp.home set.
new 97830651c IDP-526 - stop exposing component interfaces as a core part of service API
new 3bbd4db0a Stop exposing init/destroy interfaces as a core part of API
new 4e116ddd7 IDP-526 - Fix slow unload of filter by switching to prototype beans
new c54a7482e IDP-526 - stop exposing component interfaces as a core part of service API
new 6b852d71e Add deprecation and unsupported comments, fix docs.
new 16fac982e OSJ-14 - Metadata filter that can add EntityAttribute tags
new 50e0ccb84 IDP-92 - get last update/refresh of metadata exposed
new 7bd74766a Shorten application context accessor.
new 8fe07b066 IDP-516: Schema and custom parser for SignatureValidationFilter needs to account for default static CriteriaSet or other algorithm whitelisting/blacklisting
new 65ea02fd8 IDP-92 - add metadata refresh data to status page
new cd71894a9 IDP-76 - Treat port 443 as "insecure" for SAML messaging purposes
new 02889bee6 Clean up 32/64 bit handling. Remove Beta identification and rev the subsubversion.
new 8f738cd7d IDP-535 Jetty Logging and other changes from the jetty configuration documentation.
new e21f3554c Add a warn log (very useful at OSU)
new 795099f95 Remove unused classes (the perf mon stuff probably comes back later)
new 40187d881 IDP-409 - put initial MDC population and cleanup in place
new aeaba4411 Refactor test base class to expose ApplicationContext for testing more low-level Spring parsing things.
new 4b2e23dbe IDP-516: Parser unit tests.
new e1c763506 Deal with Checkstyle warnings.
new 66245e3c1 In the signature validation parser, default in a well-known bean name for the static criteria if not supplied.
new 04b11b553 IDP-534: Security-related *ConfigurationLookupFunctions are returning configs in the wrong order
new 26c44b817 Include OpenSAML global config by default.
new 88586b94e Update unit tests.
new 7601683d5 Correct erroneous notion that Spring parses p-namespace values into Lists. Just use standard Spring <list> syntax.
new 44d42069d First revision of security related beans, move metadata signature config bean to a system file.
new 9a05d3426 Use abstract base class.
new 75cac74a5 Fix default ID generator type.
new 07df06a60 Move some security-related beans out of global-system
new 646f38acc Undo bean move.
new e0beb0467 Add a BasicX509Credential FactoryBean to simplify config.
new 2a4e74832 For now, apply attribute-release flows only to attribute-push cases to avoid confusion.
new 27e233c61 Move the attribute push condition over into user space.
new de6d5a675 Add factory bean subclass for file caching HttpClient.
new d5b8ae24f Let StorageService manage its own Timer.
new 88b271838 Let DataSealer key roller manage its own Timer.
new 9ce1c8540 IDP-539 - Fix AbstractReloadableService to create its own Timer, and pull dependency on TaskTimer bean.
new 9d55dc69d IDP-539 - Fix metadata parsers and tests to allow for no injected Timer, and finally pull the Timer bean.
new 72957d9a7 Accidental change.
new 7eeb0f1ae IDP-331 FALSE, not FAIL if there is no metadata
new 2984fafe7 IDP-480 Setup the ARP stuff and pick a new subsubversion for the install (10)
new 040ed676b Indentation (done automatuically with WixCop)
new c5f332ba7 IDP-461 Refresh delay factor is defaulted in AbstractDynamicMetadataResolver. Do not hard wire it in the parser - it only confuses.
new 0b26b1fa3 Fix property default.
new 0be9bc12c Hide unnecessary material from user config.
new 175af626f remove unused files
new 48751c18a IDP-245 Add the abiloty to specify a list of languages to use when there is no match between the browser and the metadata
new ccf897bc3 IDP-245 - tweak property name, adjust setter
new c1322d97e IDP-452 - Limit log retention through Logback's maxHistory parameter
new e1e646153 Collapse material from security bean files back into global files.
new 9837a86f8 Root element formatting.
new e0fea068a Lower log level.
new d93a0b80d Lower log level.
new 252253510 IDP-245 - Initialize usable languages to empty list in case context is never modified
new 583f7c831 Comment out unimplemented bean.
new 10bdaf679 Some proposed defaults.
new 1aff83a88 Checkpoint some work on HTTP metadata provider parsers. Add in schema and parser support for configuring HttpClient caching right in the custom schema.
new 73dac5c8d Move remaining attribute-release flow settings into properties, and polish activation conditon.
new 31da8f82f Beans produced by a FactoryBean aren't subject to Spring lifecycle.
new 8e7d0248b Make init and destroy calls conditional on the component not already being inited and destroyed.
new 99048fcdd Update schema and parsers for metadata providers so HttpClient caching-related attribs have http- prefix, to better disambiguate them from other attribs.
new e2776112f Update missed attributes in parsers from schema renaming.
new b12b018ca Adjust some PKIX name resolution and handling.
new 35b6680c4 Javadoc typo.
new 58494d117 Add some annotations.
new 99cb1d466 IDP-511 and IDP-499 Checkpoint second try at secondary index implementation.
new 2710835cd IDP-499 Delete first try at secondary index implementation.
new c9494193e IDP-511 An action to count the number of times a flow has been executed and a function to order the storage keys used for pruning least-used first.
new 475ab9420 CheckStyle
new 7667440c8 More "spaces in directories" fixes. Turns out that bat files don't understand them too good these days.
new 01d42c141 IDP-541 one-time only populate the css and images directories in edit-webapp
new 6e112076c Perform hostname verification for CAS proxy authentication.
new 5e573fb76 IDP-537 Restore DOCTYPE and general HTML 5 conformance.
new cc9e083c3 Update parsers and factory to use non-deprecated methods.
new e2bd46a0d IDP-523 - align formatting of different consent events to avoid non-uniform parsing
new 2f481168b IDP-523 - fix a comment
new 04c7149be Instead of deprecating, just remove Ssl -> TLS methods.
new ca98282b2 HTML5 conformance - avoid section for styling.
new 1883429d5 Deprecate HTTP metadata provider schema disregardSslCertificate in favor of disregardTLSCertificate.
new 7a8a72894 Uncomment and flesh out in-memory and file caching HttpClient instances defined in global system. Primarily for use with HTTPResources.
new 0d3248949 Update security schema, parsers and factory beans to support SecretKey Credentials.
new 808b9f599 Additional consent properties. Allow unlimited number of storage records via property.
new 0d4950dbe IDP-444
new c53e799bf IDP-522.
new 5d72dd95a Do not set a lifetime for consent records, it probably would not be used client-side anyway.
new c8b5d666a IDP-543 Ensure that all beans created by a factory and custom schemas are destroyed correctly.
new 7fd387ac6 Javadoc fixes.
new 46da686b2 Javadoc fixes.
new d4b61c2fb Javadoc fixes.
new ee5d217ed Javadoc fixes.
new e93a86ebf Javadoc fixes.
new b4b440cf3 Javadoc fixes.
new f1ec8afa9 Javadoc fixes.
new e2ff7afbe Fix annotation ordering.
new aa35625ae Don't override managed version.
new 22a61a688 Javadoc fixes.
new 475ec967c Javadoc fixes.
new 34401c333 Javadoc fixes.
new a3fc5db48 Javadoc fixes.
new a26ea20aa Move httpclient props into services.properties since they'll be used mainly with service resources.
new d4bdbc5b2 Typo. Thanks Ian!
new e71ff9a39 Default properties.
new b0a2431f2 Default properties.
new 667db8e4f Typo. Thanks Ian!
new 5d72d2e03 Pull some old features and unneeded examples from the resolver configs.
new ae4db7d99 Comment defaulted properties.
new 8738b5289 Javadoc fixes.
new 98b9be627 Javadoc fixes.
new 1d8e3ae2a Javadoc fixes.
new 54e816c42 IDP-522 - propose some defaults
new 2f7394546 IDP-511 Use symbolics to reduce client-side storage of attribute names.
new a1c120548 Fix integration tests by adding default for 'idp.authn.LDAP.subtreeSearch' property if it is not set in ldap.properties.
new f3cfec673 Remove unneeded lazy-init attributes.
new 0a9a738de IDP-545 Expose Spring Environment in views.
new a79bb8c0c IDP-522 - Revert trust file syntax since Rod confirms this fails gracefully on Windows
new d225c9cd5 IDP-546 - new default resolver/filter, an LDAP example version, and test changes
new bc45876f5 IDP-546 - Clean up some comments, add some attributes and adjust some names and defs.
new fb8144758 Correct for change in attribute order.
new 9a3f30bdc Correct for change in attribute order.
new 26f851903 IDP-547 - Logging service should be abstracted away from logback
new 1afa10aa3 Add spaces.
new ae541b854 IDP-522
new 50f9421ba IDP-544 Target for developing tests to act as examples
new abc18392a IDP-544 Tests to act as the basis of the documentation for HTTPResource configuration
new eddd6e3e8 IDP-544 Add use of FileBackedHTTPResource
new 3497c612e IDP-544 Add HTTPFileResource examples
new e5afeaa48 Checkstyle
new 7b0e1444b Fix Javadoc
new 1cf12154d Adjust attribute name to match resolver examples.
new 2fe340141 Better Javadoc
new 73577b0ec Javadoc fixes.
new b0b1ad809 Javadoc fixes.
new 01fb15f91 Fix dependencies.
new 0b46860eb IDP-522.
new f4ec33efb Hide authn-impl class names in flow bean file.
new 2d3898e7e IDP-473 and IDP-478 Remove all default search locations for '/conf/idp.properties' besides '/opt/shibboleth-idp'.
new 4fa2eb2f9 Add a utility bean for Spring helper function.
new 59042eb9e Fix metadata generator tests by setting 'idp.home' system property to 'classpath:'.
new bbe03d436 Use Spring util function to simplify attribute list property.
new 3bd880835 IDP-511 Fix failing tests, missed symbolics support when reading from storage.
new c84245562 Switch fallback languages to a comma-delimited list for consistency.
new c404249c3 IDP-548 - IdPAttributeValue should expose a display value
new 5c2357fda Fix tests, including Java 8 tests, by ignoring the order of attributes in assertions by the response validator. This assumes that the order of attributes in assertions is not guaranteed.
new 380c8d4a7 IDP-548 - IdPAttributeValue should expose a display value
new 22cc2b6bc Make hashing calc. consistent with uApprove.
new 64e998e96 Put back default consent property.
new 1b5bb6d1b Add saml-api dependency.
new dc2c1ecee Fix IdPAttribute protos in tests.
new eefa460f8 Fix IdPAttribute protos in tests.
new 77c4d5dd4 Remove extra DOCTYPE.
new 100542868 Root page placeholder.
new a1077a538 IDP-548 - Since we're hashing the NameID value, go ahead and display it.
new 359dcad2b Add saml-api dependency.
new 2e6c219f2 Add index page to prevent directory listing on root URI.
new a6cea5596 Remove temp index page.
new a12eae8ec Switch persistent ID source IDs to a comma-delimited list for consistency.
new 9280191b9 Legacy configs parse the metadata elements, so we need to have a bean in scope for any Signature filters.
new a91f0afdd IDP-549 - Legacy Shibboleth SSO requests should fail if no target param is supplied
new ed7b3c925 Lower log level.
new 2699147c0 Check in a relying-party config for tests (without consent enabled).
new c61726a3a - Clean up excess content from r-p.xml
new c48fdc5ad Fix tests under Java 8 by ignoring the order of attributes in assertions.
new eebb16d72 Bump max number of stored records for consent from 5 to 10.
new 0e75284a4 Bump java-support and spring-extensions versions.
new 428536d23 Fix typo.
new 2eb2a70be IDP-552 - "3.0 Alpha Release Notes" in doc/README.txt
new ea1a44752 IDP-554 - Typos and mistakes in user config files
new 14d24cdb2 Correct typo.
new 9d4d286a6 IDP-554 - Typos and mistakes in user config files
new 518176de2 IDP-556 - Metadata schema should relax ordering of MetadataFilter and TrustEngine elements.
new fb9baf524 Remove unneeded util prefixes.
new 43ee0d5a5 native line endings
new 4989ceefb IDP-554 - Typos and mistakes in user config files
new 58d03d654 IDP-554 - Typos and mistakes in user config files
new b5c83f5f2 White space normalisation.
new 7f78e1f73 Correct a couple of typos.
new 63d841bad IDP-558 installer log file formatting issue
new 81a2b7083 Fix white space and indentation throughout.
new 1204a9ce4 Correct a comment.
new 50797de67 Improve description of idp.keystore.password property.
new f19ed02d0 Typo in log message.
new c0079a767 Typos.
new f6e89d94f Typo.
new ac8461250 Fix MIME types and line endings on some configuration files.
new 18c15021d Consistently indent using spaces rather than tabs in user-visible files.
new 661c88d46 IDP-559 Add Missing bean Schema validation in configuration. Also provide the ability to inject a bean named something other than shibboleth.SchemaBuilder.
new 9c671cb8f IDP-563 Add warning when we encounter a defaultAuthenticationMethod in any relying party.
new 3bc69fbf6 Correct a reference to a bean type in comment.
new 4a275d5de IDP-554 - remove unneeded use of utility schema
new ec880da2d SIDP-625 Exit with failure status when required.
new 59383c3f5 IDP-568 typo
new 497a08e74 IDP-571 regression test (supressed pending fixing the bug).
new 631d1634d Change java-support dependency versions.
new b85821dca IDP-571 Strip any aliases from the registry after registration. Spring added these if it finds "name='whatever'" attributes and we do not want these aliases.
new 2b4e5595e Bump java-support POM and deps to 7.1-SNAP
new 294afa6cf IDP-572 - attribute-resolver-full.xml default LDAP attribute value not consistent with v2
new 3e3f1811a IDP-564 - Allow for alternative StorageService beans
new bd373afa1 Missed check in, increase visibility of fields.
new 51bcec2ba IDP-570 - Installer doesn't honor input entityID in creating URI subject alt names
new ca6233968 IDP-573 Add a test to show that we cannot handle empty string attributes coming back from an LDAP.
new 8fb36c7e2 IDP-571 Why did this test work previously?
new 6b92fd8ed IDP-571 Use Brents proposed change for the fix for the aliasing issue
new 0a1eea275 Add missing svn:eol props.
new 2129f57cb Add missing svn:eol-style props.
new 5cefe06f8 Fix a log message.
new 27c28a1c0 IDP-573 - trim source values and prevent all-whitespace
new 685731eae IDP-573 - trim source values and prevent all-whitespace
new e8f6a1fb8 IDP-573 - Match V2 behavior by checking for all-whitespace, but don't trim.
new 0fc661e73 Fix warnings.
new a8b4190e1 IDP-573 - Match V2 behavior by checking for all-whitespace, but don't trim source ID.
new d656c399e Fix warnings.
new 254fee6cc Defensive null-check.
new a47e0d489 Fix warnings.
new d59a04aee Code cleanup
new 9d1b765e6 Fix warnings.
new d4482a29f Fix warnings, add some defensive checks
new e99754f00 Fix warnings.
new cf00551e4 Revert accidental changes.
new deddf9f62 Fix Javadoc.
new 22ef7abf8 Checkpoint work on SLO integration tests.
new 272e9259e IDP-576 - comment out SLO endpoints by default since we're defaulting to a client-side session cache
new c5b7efb4e IDP-576 - comment out SLO endpoints, add support to ant task and fix test
new 19c4e62f7 IDP-573
new 32e95896e IDP-573 Reintoduce the "allow null as values" semantic into the *simulated* V2 attribute
new a7b9f82f1 IDP-573 Reintoduce the "allow null as values" semantic into the *simulated* V2 attribute. Missed checkin.
new 58d099c00 IDP-580 Put the Trust Engine inside the <MetadataFilter xsi:type="metadata:SignatureValidation">
new 5ea384403 Doc typo.
new 986347c6c IDP-573 Reintoduce the "allow null as values" semantic into the *simulated* V2 attribute. Fix V8 tests
new b8f7a4697 Fix some warnings, add some defensive null checks to the Mapped attribute classes.
new 586d5cd58 IDP-578 - Attribute resolution errors are hardwired to fail the profile flows
new 47678dab8 IDP-578 - Missed test check-in
new c2ead9de4 IDP-578 - Also need to mask filter errors
new 2f69b5bd5 Remove some generic type warnings
new 412440663 Add StringAttributeValue.valueOf() test.
new f9c5148e0 IDP-573 Add empty attribute value test for LDAP and RDBMS data connectors.
new 79bef4bb9 IDP-575 Add action to log SAML message.
new 6cf131029 IDP-573 Tighten up test
new e75efb3b3 IDP-575 Remove LogSAMLMessage class from r7285 and add disabled SAML_PRE_ENCRYPTION logger to logback.xml.
new 1a094f2de IDP-569 Log Java version and vendor to INFO and standard system properties to DEBUG.
new c62088c87 Typo.
new 3906164c3 IDP-573
new 9798b25ab Modify test comments slightly.
new 9da8203a5 IDP-582 Provide servlet request to consent auditing.
new 85bbea061 Change SAML Encrypter to just use the class logger, rather than a special one for per-encryption.
new 4c1303c1a Show how to make logging work in Nashorn
new 380d654bf Clean up help display of arguments.
new 70621fa1c Fix warning.
new ec9516a9e Logging cleanup.
new c5c0c1e52 IDP-585 -Data connector caching not configured
new 5ceb20db3 IDP-585 -Data connector caching not configured
new 929cb3272 Clean up help display of arguments - remove accidental dup.
new 9b1687806 IDP-586 - Data connector cache fails on null results
new 88a929f45 Logging cleanup, add some missing annotations.
new 171325bc9 Log the offending attribute when sizes differ.
new 6cafe1bab Roll back spring-extensions snapshot version
new 1d2c9221d Add some comments to the ldif.
new a1520818d IDP-587 Add BeanManagedConnection to StoredConnector
new 3ab86d76d Database config rationalization
new d1f0f7c03 IDP-569 Change LogbackLoggingService to use class logger when logging system properties on DEBUG.
new b205957e8 IDP-569 Oops, remove System.exit from testing.
new f88fffa8f Add a missing event ID.
new 6258fe1b1 Comment on unused attribute in ResultCache
new 683d8764e Add MDQ specification reference. Fix a couple of typos.
new 5e238c1b5 IDP-589 Fix bogus caching of the attribute or dataconnector id in the log prefix
new af8bbb091 IDP-590 Moderate the logging if there is an activation condition.
new b9de242d7 An includable Logback configuration element that provides console logging.
new 1eea83b30 IDP-593 - idp-metadata.xml is invalid because of WEB-INF/jsp/metadata.jsp
new f95ef547b IDP-595 - The WantAssertionsSigned SP metadata flag is not honored.
new 911d2d039 IDP-561 - Inconsistent install behaviour on second run with credentials.xml
new 58fabea53 typo in log message
new 36296a716 Clean up LDAPDataConnector test behind itself
new 235a917d3 Move setters and getters together
new 7841fec9b IDP-592 move the parsing of the springResource file into a bean factory. This allows insertion of a parent AppContext, and fixes a couple of leaks. All data connectors except StoredID and ComputedID now can follow this paradigm. springResouce for StoredID is still accepted but deprecated (since the auto finding of setters doesn't work)
new b1c357fb8 IDP-595 - The WantAssertionsSigned SP metadata flag is not honored - missed checkin
new c86efc413 Revert accidental change.
new fd57a419b IDP-536 - Cleanup Guava's Lists.newArrayList() methods
new 6fc3b2e1d Fix a test case.
new d8dfb59b4 Create a mutable list.
new 8abf1af56 IDP-592 Add missed schema changes. Fix logging and defaulting of the BeanFactoryPostProcessor. Fix tests
new ebb561978 CheckStyle
new 34ad5b8f2 IDP-599 - Turn LDAP search filter into a property.
new 13f99ba1a IDP-560 - make "defaultlogo.png" file name settable by property
new 7c6c1a920 Add a trace for every dependency added to context.
new 92a91e99c Add a trace for every dependency added to context.
new 2ec6bc956 IDP-600 pull MDUI from the AA
new bf82cc097 Checkpoint work on HTTPS TLS TrustEngines - IdP config schema for metadata providers.
new 39939b640 Checkpoint work on HTTPS TLS TrustEngines - IdP config parsers.
new 5974a369a Correct case of bean property names in parsers due to JavaBean conventions: tlsTrustEngine -> tLSTrustEngine.
new 7b113fc24 Typing
new 4ea7b3470 IDP-603 - Add any necessary third party licenses to doc/
new a067417d4 IDP-603 - Add any necessary third party licenses to doc/
new ac7fbb4dc Bump spring-extensions dep to 5.1-SNAPSHOT.
new 37a2a6750 Update to use new SpringSupport method.
new d1a16d039 IDP-604 Use named beans not random impl classes
new e5946c5af IDP-606 - relying-party-system.xml declares wrong class for shibboleth.ExplicitX509TrustEngine
new a7bf7787a IDP-605 update subversion number for Merge module and MSI
new 530aaf510 IDP-562 Modify precanned jetty configuration to allow serving of static data from "
new 6430a12f5 OSJ-83. Add missing StaticExplicitKey Unsuppoorted trust engine.
new 99c1dd461 IDP-607 supress install.* in the install
new a73dde30a IDP-596 - malformed reload-service request loops infinitely
new a4ed10801 Fix failing test.
new 5ea0cc733 JSE-12: Consider moving HttpClient FactoryBeans down from idp-profile-spring
new c66fd1086 Checkstyle.
new 27ae9f436 Mistyped "Shibboleth" (in a modern digital version of the tale, does that mean I should prepare to meet my fate?).
new 95ad65ab6 IDP-613: Schema for Shibboleth metadata extensions is missing. Copied over from java-shib-common/src/main/resources/schema.
new f110faaa1 IDP-602 - authentication context class default is unexpected
new 2e441b2a7 Account for change to AC class ref
new 369fae219 Add wiring for additional schema (Shib metadata extensions) to global-system.xml schema builder instance.
new 86880c817 OSJ-108: Generic parameterization of TrustEngines is too restrictive on components that evaluate an X509Credential.
new 6078caf65 Bump OpenSAML to 3.1-SNAPSHOT.
new 99ddde3f0 IDP-620 TrustEngineRef takes a ref attribute, not text content
new bb57ea56f IDP 610 Add Chaining Trust Engine and tests
new 28507d60e IDP610 StaticExplicitKey & StaticPKIXX509Credential Trust Engine Parsers
new 1ac742414 Update IdP and testbed/test POM dependency versions.
new f0df32dd2 IDP-540 indirect the PredicateFilter.Direction setting through a factory bean. This allows for the (unlikely) case of someone putting this into a property
new 47ed18b17 IDP-608 allow advanced configuration of the precise permissions to wet on the conf directory for unix distros.
new d6f25bc30 IDP-621 use the new Spring mechanism to stop the "name" attribute being parsed as an alias.
new 685dfa87b IDP-540 - Fix name of factory bean.
new e3d74d0fe IDP-601 Predicate the protocols for the AttributeAuthorityDescriptoron whether we are commenting out the SAML2 Attribute Authority
new 39c039c01 IDP-613: Change signature schema import to be a http URL, instead of the classpath: one as copied over from v2.
new b555191ad Rename abstract base class to remove -Signature- since it's used by both signature and credential engine subclasses.
new 44c1ebd25 IDP-611: Complete testing of TLS TrustEngines for HTTP and dynamic HTTP metadata providers
new dbcc2c640 OSJ-109: BasicPKIXValidationInformation no longer allows a null verification depth
new 4dcb77f2a Improve log message.
new 1d3cbb649 Simplify comparator.
new 8d1b8be83 Fix log message.
new dd4bb14d2 IDP-623 - Deprecated type of credentials in provided sample LDAP config
new 17613233b IDP-623 Make the Schema documentation match the reality of resource vs filesystem backed credentials
new c9202e6ef Revert r7375.
new 41cb53623 IDP-628: Add support for disabling trusted name checking in StaticPKIX- TrustEngine parsers.
new 66111ace1 Update HTTP metadata provider TLS trust engine tests to be more realistic and disable trust engine-level name checking.
new 71246d5b5 Add bean and property toggles and SpEL for existing global-system.xml HttpClient builders to use a TrustEngineTLSSocketFactory.
new 2054a1fdb IDP-616 - wire key strategy into persistent client storage for detection of key changes
new 337e0fd52 IDP-628 Bounce the decision on trustedNameCheckEnabled into a factory bean. This allows property replacement
new f8e6b0188 IDP-626 Do not preserve jetty-base/tmp
new 684e0e8dc IDP-626 Do not preserve jetty-base/tmp. Delete before copy, not after
new d96a0d4f6 Swap order of springbuilder and maven2Builder so projects import into Eclipse without any changes.
new 14ca57332 Add Spring nature in order to import into Eclipse without any changes.
new 77d2b1a4a Swap order of springbuilder and maven2Builder so projects import into Eclipse without any changes.
new a8d7593c8 No compile time dependencies on commons-dbcp.
new 0d75d0af4 "Bad data" test causes key alias to become empty, so this test now throws.
new 7cfa4afbc Fix example metadata config to use a declared namespace.
new 45ce9dca1 IDP-631 - expiring password flow: environment missing
new e8c16a646 Update service numbers to reflect the existance of rc1
new 62e08daa1 IDP-633 Default consent storage record expiration to 1 year.
new fb3f7327c Lock parent version for new minior release
new 57d1a981a Update POM versions after release
new 2c1b2244d Locking jetty9-dta-ssl version in idp-parent POM.
new 299233f85 Checkstyle
new d6afa072f IDP-635 preliminary test
new b7bf5c691 IDP-635 Add HttpServletRequest /default language sensitive constructor. Leave old server base constructor in place pending tests
new 3e0679230 IDP-635 Missed checkin: Add HttpServletRequest /default language sensitive constructor. Leave old server base constructor in place pending tests
new 29e092e4b IDP-635 Wire into consent flow. This required a change in parameterization which is reflected in the tests.
new 5f2288a2b IDP-635 Remove deprecated constructor
new 4c3f15274 IDP-634 Code tidy.
new 440a7b0a2 IdP-637 Add Function to allow display of attribute Description
new 34faefb2e Fix syntax of disabled attribute release match expression.
new 608ccba6c A specialized exception handler for view/end states.
new 30167f0c5 Global bean for a specialized exception handler for view/end states.
new dd084a56a Guard the error view states with a dedicated exception handler.
new 1485d787b Add tests for exception behavior.
new 85888d5da Enhance runtime-error message with support for MVC-caught errors.
new dd598ba1f Guard the error view and response issuing states with a dedicated exception handler.
new 21f5160be IDP-646 add (supressed) test pending final decision on what to do
new e305a976a IDP-646 Allow seconds as a non duration input to RequiredValidUntil
new 01c117500 IDP-649 Typos in error messages
new 163e36f09 Log message typo.
new 79bdff169 IDP-642 - add schema validation to metadata for conf tests, this should break until we add the fix
new 171da0c24 IDP-642 - use of SchemaValidation metadata filter results in logged error
new 16134a295 IDP-651 - idp.session.consistentAddress setting is broken
new 795f37bfe IDP-652 - add a note about the returnAttributes property
new cd7473a1f IDP-647 Custom error message for MessageAuthenticationError event.
new 854d5d60a IDP-614 Add option to ignore URI path params in CAS ticket validation.
new f3245d136 IDP-647 Revert r7428 since it is a user-level config file change that would require a minor version bump.
new 73f0e32f9 IDP-653
new cbb6830b4 IDP-654
new e126318d8 Revert IDP-653.
new f2e5a2b75 IDP-659 Create new RandomIdGenerator on each call to generateIdentifier.
new c54536363 IDP-658 Fix error transition in CAS login flow.
new 49fdaaf0e IDP-624 Support ordering attributes displayed to user during attribute release consent.
new 29d12168b Improve CAS error handling.
new 648bf64f1 Change unit test to use new MDQ test target instance on shibboleth.net.
new 84ebda3a8 Typo in log
new 3d244c4ab CheckStyle
new 9f7f0ddb3 Add test for a conf provided bean
new ed85d99f2 Bump version after release.
new 2c8391cb7 Fix test.
new bec81ef12 IDP3.1.1 Move forward installer versions in line with POM
new 54145972c IDP-637 Add AttributeDisplayDescriptionFunction to the consent velocity scope
new 794316dbf IDP-637 Log an INFO level message if people ever specify an integer where they should have specified a duration. Fix the (system) configuration files where this happens and the comments in the properties files where the defaults have therefore changed from 0 to PT0S. Default configuration remains unchanged in function
new 0644f8693 IDP-624 Wire comparator used to control attribute display order during attribute release consent.
new 8297675fc IDP-666 Changed messageSource default charset used when parsing properties files to UTF-8.
new d09df2d4c Cleanup consent attribute display functions. Guard against improbable NPE.
new 85c2f3644 IDP-668 eol style
new 6a0d1bb1a IDP-668 explicitly remove any old detritus webbapp/system/binlib/jettybase prior to install
new a9d5ca6e5 IDP-644 test for broken dependency behavior. A precursor to detecting it
new 207da86e9 IDP-665 Warn if an attribute definition contains sourceAttributeID if this is irrelevant and also if one isn't when it should be
new 4665ba355 IDP-665 Warn if an attribute definition contains dependent attributes and sourceAttributeID was either different or absent.
new aa187a7a9 IDP-640 Configure CAS StorageService via idp.properties.
new 13a51d3b6 Stop using deprecated method in the tests
new 19e6ee614 IDP-665 Lost commit: Do not use deprececated methods in our implementations
new 96b5626d5 Turn on consent in idp-testbed
new 69aa9bf86 Revert last. My interrupt stack is too deep to make this work right now.
new 8b85925b1 IDP-682 Correct PRC strategy for scripted Attribute Definition
new bf25c6e91 IDP-682 Test aganst null PRC
new 0ca7ec469 Revert the change of the wrong relying-party. Revert the change to the test replying-party.xml
new d4c622f38 IDP-682 Fix PRC related unit tests
new 9b5e757c9 IDP-685 Set the default value of onlyIfRequired to be true
new 7d7d720ea IDP-685 Set the default value of onlyIfRequired to be true
new fa08d806f Fix Typo in example. Make example more realistic
new 7c5043072 Change previous checking. We no longer need a chaining filter.
new d0d216736 IDP-695 Handle absent "revision" attribute
new a7d531eec Add prefix for saml metadata
new af59a1c27 IDP-682 ScriptedDataConnector was looking for the PRC as a granfather
new f572b8f2c IDP-639 jetty-base gets distributed as embedded/jetty-base
new e20fd00cd IDP-670 Add shortcut to shibd_idpw.exe in bin folder
new 7f7a355ed IDP-686 Capture Max Memory into property and repopulate. Turn up default
new f32764305 Stop using deprecated APIs
new f40dd27e4 IdP 703 example test
new 2cfef9570 IDP-653
new 021486779 IDP-706 If the scope is specified on the command line then we need to make sure it gets written to the merge file
new d39724257 IDP-114 - Enhance Kerberos password validator with support for service ticket checking
new d1a5d1571 Checkstyle
new 932e6f1d9 Backout IDP-114 code a bit while I research,
new e3074a9ac Extra dash in a comment.
new 49447cfa6 IDP-114 - rewrite of Kerberos action on top of JAAS module and GSS exchange
new 56075756d IDP-704 - Add a system property to override base URL for command line tools
new 4c9a16679 IDP-704 - Add a system property to override base URL for command line tools
new 57ec1e0a3 IDP-647 - Provide custom event message for MessageAuthenticationError event
new ad74fd9f6 IDP-681 - index.jsp in webapp needs property replacement for logo
new 4d57fd44f IDP703 Copy resolved attributes from the failover connector to the failed
new 8d8e9adc2 IDP700 Add code to leave a data connector dead for a specified timeout
new 611aaaeb4 typos in Javadoc
new 109470af4 IDP-716 Fix backward ClassifiedMessageMap entries.
new 1f6fd612d IDP-704 - Float the /idp context path over into the default base URL so it can be overridden
new fc23adbb5 IDP-615 Implement ServiceRegistry reloading.
new 052add307 IDP-615 Call unpinComponent and rename for consistency.
new f8ffdb3af Allow overriding CAS components in user configuration.
new daeb56c00 IDP-380 - Review idp-conf Maven dependencies
new f8201c53d IDP-380 - Review idp-conf Maven dependencies
new 80f21e6c8 IDP-719 - Schema for Script attribute def doesn't require either child element
new 4666f479f Add a couple of comments.
new 0fd5e9d56 Annotations, some logging cleanup, add some deprecation warnings.
new d09436751 IDP-722 - Workaround space issues for Tomcat.
new 80249c962 IDP-615 Define default service resources in system conf.
new afc15b9e7 Testbed stopped working after change to Spring location.
new 25b4124eb IDP-702 - create a property that toggles signing requirement for received LogoutRequest
new b24712323 Add warning about sharing the salt
new 8f2c1cb70 IDP-722 revert previous
new 46fbc0890 IDP-722 Allow files to not be delimited by spaces.
new 5a64f59db IDP-615 Revert service config changes unrelated to CAS.
new 34199b4ae IDP-615 Uncomment CAS resources in services.xml.
new fd219648f IDP-699 - Override capability of custom Principals in AuthenticationResult is limited
new 2358c1a89 IDP-722 Shorten name of application context.
new 4a4d6689c IDP-699 - addDefaultPrincipals flag added to AbstractValidationAction
new 0bda4aa59 IDP-699 - extend RemoteUserAuthServlet with Java Subject and authnMethod features
new 5e589e42c Get container level JAAS working in testbed.
new 5f7206a6b IDP-699 - add a helper to evaluate a candidate Principal
new bf45cd554 IDP-594 Some work on local storage read and write subflows with tests.
new 67e0ddd05 Relax annotation to match actual Spring wiring.
new f54f7eb6e IDP-699 - incorporate weighting into selection of a matching Principal during Finalize action
new 170c315b7 IDP-699 - eliminate side effect of choosing a matching custom Principal
new 2184ad1df Annotations.
new 59173848b IDP-699 - Correct helper method, predicates need to be derived from the requested principals, not the candidate
new c47a26923 IDP-699 - Unit test for principal-testing helper method
new 55faabc6a IDP-729 Make the unfiltered attributes available in the attribute context and teach the non-legacy NameId generators to look at them if told to.
new 5d171edd1 IDP-729 - adjust defaults for unfiltered attribute usage in NameID generators
new 913cec946 IDP-729 - Add a property for turning off use of unfiltered attributes in persistent ID generator
new faf72b8f0 IDP-729 - change attribute context checking predicate to look at unfiltered set
new f6aafd7a7 IDP-594 Some work on local storage write subflow. Parameterize the item key and value. Return boolean representing success as well as exception.
new 9c37f3f7f IDP-715 - Allow idp.home to be any kind of Spring property (e.g. servlet init-param)
new 0a6070d66 Add warning when no authentication flows are configured.
new 2c756bea9 IDP-730 - add trim to various authn properties
new 82f75f570 IDP-730 - add trim to view location
new a2a21c5f4 Fixed bug checking for null entityID, and add a trim.
new 21f609d86 Fixed bug checking for null entityID, and add a trim.
new 6fefc25e2 IDP-730 - Add trimming to unhandled properties in system config files
new ee9e57d67 Add a clarifying comment.
new c4d5bd716 IDP-730 - Add trimming to DN and filter properties
new b815bdd97 IDP-594 Some work on the local storage read flow, make the item key a variable.
new c73dc8051 IDP-727 Turn off serving metadata
new 3b4a0d9fd Improve comments a bit.
new bf4119d40 IDP-594 Add version to read and write flow.
new 249389228 IDP-736- Remove undefined ciphersuites from jetty.xml
new 8c8753281 Correct a typo, and rephrase to read more clearly.
new a25db8dcd IDP-594 Instead of storing the version as a local storage item, concatenate it with the local storage value.
new 71d8b961f IDP-594 Add "use strict".
new 778bb0166 IDP-739 - EntityAttributesPredicate needs more boolean flexibility
new b98d0c846 Unlock spring-extensions and the IdP after bumping Spring and Jetty.
new d84f23055 IDP-739 - Add a template bean for building predicates against metadata
new 1e56004ae IDP-734 - EntityAttribute-based PolicyRule doesn't handle split EntityAttributes
new 5ef478009 Let's not embed schema-invalid logo sizes in the sample metadata.
new 8f4552cab IDP-728
new 8bc5e8e1a Remove redundant type arguments.
new 60279e732 Remove redundant type arguments.
new ab52edc70 Checkpoint initial non-functional port of Action to decorate a SAML 2 Assertion for delegation.
new c8a3884f4 Fix erroneous dependency on MetadataCredentialResolver, an OpenSAML impl class.
new e7131b1ec IDP-741 Extra logging for mapping
new a7d6850da Rename test class.
new a9c87439f IDP-742 Add intercept subflow support to CAS login flow.
new 79b930a3d Revert accidental logback changes.
new a53f243ec More work on initial Action to decorate a SAML 2 Assertion for delegation. Now functional, with unit test. Still a few TODOs and cleanup needed.
new d54904262 Use SAML2ActionSupport method to test/add Conditions to Assertion.
new 5acb35369 Introduce strategy and default impl for building/resolving Liberty SSOS endpoint URL from PRC or HttpServletRequest.
new 11c15f07e IDP-645 Make CAS SP session tracking optional.
new a9219a2ea IDP-744 - ExternalAuthentication.start method can return an empty conversation key
new 7cf7c0ca3 IDP-745 Add mappings for CASSPSession.
new 8d66e7d0c Add initial LibertySSOSContext subcontext impl.
new 612c494a0 IDP-746 Add DateAttributePredicate.
new e726e57d2 Minor javadoc tweak.
new eea3841b4 Add Liberty SOAP binding decoder and encoder.
new 19d1563f8 Get rid of special delegation handling of SAML presenter in favor of new standard SAMLPresenterEntityContext.
new ad130df4a Apply changes to SOAP fault handling to Liberty clone of SOAP 1.1 encoder.
new 534fa5ec0 IDP-748 - Add standardized way for external login to signal consent revocation
new 320e67fff IDP-748 - Pass through consent revocation param back into external auth API
new d758becce Fix logic bug introduced in r7577 refactoring.
new 9fe1facdc IDP-748 - Fix a regression in the servlet from an earlier change.
new a4a72d7d3 IDP-748 - Accomodate existing query strings in external authn URLs
new 1eabdaf96 First attempt to split idp.home from webflow base loc, with idp.webflows property
new 33c81c42c Go ahead and provisionally add DecorateDelegationAssertion into the SAML 2 SSO abstract flow.
new d7aac5787 SWF utility action for logging the basic structure of the current ProfileRequestContext tree. For debugging, etc.
new 86443dd39 IDP-754 - RelyingPartyUIContext throws NPE when xml:lang is missing
new b958ddcb3 Add home link to display page to make for easier testing
new 611e3198a IDP-663 - added utility bean for a non-caching HTTP client
new 399b165d7 Fix accidental line swap.
new d4ea5dc55 IDP-742 Fix attribute resolution on existing SSO session.
new fed69cc1e IDP-742 Populate SubjectContext.
new 3bd25675f IDP-757 - Add ability to configure the test directory server port.
new f544de00e Remove redundant type arguments.
new ec3abf19b IDP-624 - TODO to fix user-space reference to non-API class.
new 42b7aa885 IDP-738 - Add non-secure SAML1 endpoint to example metadata.
new aa3578608 IDP-757 - Remove errant logging.
new 04b805179 IDP-743 Add time of last DataConnector fail to status
new ec05bceaa IDP-700 do not record 'expected' failures from DataConnectors
new a655c47bd Remove accidental debugging info left in at commit
new acd8cf2cc IDP-762 Specify SAML metadata lookup function for CAS protocol.
new dfdc7f1a8 IDP-730 Trim values from (DOM) attributes
new 2724b6802 IDP-767 - Using keyStoreTrust causes BeanCreationException
new 95dcc7eea IDP-763 Conform style of CAS flows
new 184dc5e27 Add support for parsing the connectionReadOnly attribute.
new 7d81cea56 IDP-730 Trim values from (DOM) attributes. Attribute Resolver Parsers
new 9cd2cc581 IDP-730 Trim values from (DOM) attributes. RelyingParty related parsers
new b9c48beef IDP-769 Fix UTF-8 in metadata.
new 5dcbc4e11 IDP-727 Control metadata delivery by a property take 2
new b6c02765a IDP-727 Control metadata delivery by a property take 3
new 14ad5a3e6 IDP-721 Fix logging
new 6616a1458 IDP-660 Conform CAS flow error handling.
new eda9fdb2b IDP-679 Initial work on CAS protocol audit logging.
new 9e227e1c6 IDP-707 Better prompts and output for keystore
new 074a3a2c5 IDP-679 Complete CAS protocol audit logging.
new 34ede779c IDP-679 Add released attributes to CAS audit records.
new 54260081a IDP-761 Add support for initial-authn to CAS login flow.
new ee662abd1 IDP-679 Log IdP session ID for all CAS audit records.
new d97c47e41 IDP-773 - skipEndpointValidationWhenSigned not working for signed redirects
new 712f10890 IDP-772 Allow setting cas:user from attribute value.
new 410408268 IDP-679 Use default beans if no userspace beans exist.
new 27f089f69 IDP-773 - skipEndpointValidationWhenSigned not working for signed redirects (unit test)
new 4fae559c6 INFRA-106 native eol style
new db30185f9 IDP-771 Test for property replacement in ComputedIDConnector
new 559ea6895 IDP-771 Test for property replacement in ComputedIDConnector
new cb82fd94e IDP-738 - Validate subj conf address using range.
new 15edcf47e IDP-780 - Handle "unspecified" RequestedAuthnContext value
new f344feb74 Switch unit tests in idp-conf back to classpath:
new 6998022b7 IDP-748 - Rename of idp-consent module to delineate impl classes
new c616dab64 IDP-748 - Remove remaining idp-consent content.
new ff6ed52e2 Fix broken commit
new ec89d9c8c Fix dangling idp-consent ref. in idp-war POM
new 9e2fc3d75 Revert 80th accidental check in of config files
new f7c2abf7b Remove target from -api module
new 9b6c5efeb Add missing svn:ignore property to new consent modules.
new 61e9b0fa5 IDP-771 property replacement in Computed data connectors
new 4e8a8b28f IDP-782 Allow single element And/Or
new 0459c00b1 linestyle, mime type missed by eclipse
new 8e31c6374 IDP-768 Allow shibboleth.Conditions.RelyingPartyId to take a simple string
new f8e06f2b9 IDP-748 - Localize handling of consent revocation signaling to avoid cross-flow dependencies
new fbab506c3 Fix checkstyle warnings.
new 43e182d10 typo
new 51f672cc7 IDP-787 Lockdown the registry
new f3e3212a9 IDP-664 Provide assistance for Container installs
new 39013a9be IDP-785 - Behavior with multiple attribute-encoders on an attribute inconsistent with v2
new 38b482ba3 Deprecate an API that was never used.
new 5e101445f Checkpoint some work on composing the Liberty IDWSF SSOS flow for delegation.
new 309cbd173 JSE-15 Add constructors to FileBackedHTTPResource
new 1c11b1bcb IDP-661 Add Additional MDC attributes
new 466b1ff3c IDP-790 - No event ID, logging for InvalidSubjectCanonicalizationContext error
new 325128a68 IDP-726 Add logging
new 69125af88 IDP-594 - Read flow for client storage modeled on local-storage example
new d1a43c757 IDP-594 - Property to control local storage, placeholder list for client storage services
new 5deaf0e21 IDP-594 - Wire in client-storage load into SAML flows.
new c34a18558 IDP-726 Log authnFlowByAttribute Filtering
new 33ef8f703 IDP-542 Teardown application contexts after tests
new cac1ae2d9 IDP-542 Teardown application contexts after tests
new ae91cde40 IDP-542 Teardown application contexts after tests
new 9277af568 IDP-542 Teardown application contexts after tests
new e93c100aa IDP-542 Teardown application contexts after tests
new 8c50b5855 IDP-794 tests for EmptyAttribute
new 19a48a2c0 IDP-794 tests for EmptyAttribute ComputedID
new e59506061 IDP-794 tests for EmptyAttribute ComputedID
new 9f85de3e1 IDP-794 tests for EmptyAttribute
new 73560227e IDP-794 tests for EmptyAttribute
new 40253590c Checkpoint work on wiring Liberty delegation flow and related beans.
new 9a71f8e25 Add a diagnostic SWF Action that logs info on the Spring ApplicationContext hierarchy at the point of invocation.
new ed53f858d More work on wiring up Liberty delegation flow and related beans.
new fbda2a294 IDP-783 resolveEntryOnFailure
new 669f2d267 IDP-793 change log level
new 4f7eaefdd Add client storage view properties.
new fed09ca4a IDP-795 trim search filter
new 9e46cb196 Support resolution of signing credentials for delegation.
new 19ebf0801 Add profile action which populates inbound message context with SAMLSelfEntityContext entityID.
new 52d9749c1 Add missing delegation restriction condition validator to delegation Assertion validator.
new 75a33203c IDP-594 - Client storage save flow and view
new d749a774f Fix typo in bean ID.
new 5efb2e5b5 Can't remove context from within action-state due to involuntary transition.
new d46cf8f8e IDP-594 - Wire client storage load/save into relevant SAML and logout flows
new 579aa98c2 IDP-645 Document singleLogoutParticipant flag.
new 27045baca IDP-791 Wire in client storage actions into CAS login flow.
new f135a1c59 IDP-594 - Rework conditional use of SP session features in session cache
new 73096b524 Fix unit tests by initializing components.
new a9e250b7b IDP-594 - Add split record maximums for consent record management
new eacf6d57b IDP-801 - Emulate multiple SPs via the testbed
new 43ea09ddb Fix method names.
new e4153a46c Remove abstract keyword from default client storage service list.
new 7ca25acc6 Add action which does some outbound context population specific to delegation.
new cb04505ae More work on how Liberty delegation flow is wired.
new 77b4299c4 IDP-594 - Proposed "shipping" config for new client storage plugins.
new 2bc71f7d5 IDP-594 - Remove no-op client storage filters.
new 19c5eb106 IDP-789 Allow exposing PRC as request attribute.
new ab4c081df IDP-789 Update property name to reflect impl.
new 6e0f76876 IDP-725 - Insufficient customization support in UI pages
new 2695cf583 An attempt to investigate using native spring to configure attribute filters
new 14debeac4 IDP-774 - Support for arbitrary objects in SWF views
new b3cdef8e9 Checkstyle
new 6fe7955e8 IDP-790 - Add logging of error events during failed requests
new 5929cf8f9 IDP-806 - Add test flows for client-storage.
new 70623d58c Example of pure native DataConnector.
new 6e8682485 Native Spring DC configuration
new d25a35f23 IDP-808 Collapse Filter configuration namespaces - Schema manipulation (1)
new a84f37c4e IDP-808 Collapse Filter configuration namespaces - Mappings
new 6571ff5e1 IDP-808 Collapse Filter configuration namespaces - non saml:PolicyRules
new d82690f88 checkstyle
new 00f40ebf3 IDP-808 Collapse Filter configuration namespaces - Schema manipulation (2)
new b9c894033 IDP-808 Collapse Filter configuration namespaces - saml:PolicyRules
new 75a4d4b14 IDP-808 Collapse Filter configuration namespaces - booleans
new 17cbf2d30 IDP-807 - error.vm sends 500(internal server error) for common (client) errors
new 98d9387fb IDP-796 - Support storage and persistence of passwords as a private credential
new 272d6171b IDP-796 - Wire up option to retain password.
new 5d62c1073 IDP-810 - idp.authn.resolveAttribute not always honored properly
new 7cd06c75a IDP-724 - Review failFast default of AccessControlService
new a6f199189 IDP-804 Add 'impl' suffix to packages which are impl.
new d59eb7453 IDP-804 Add 'impl' suffix to packages which are impl.
new 2d50c4e46 Fix build
new bbc4cb5f4 IDP-804 Add 'impl' suffix to packages which are impl.
new d8820ab1d Typo in exception message.
new 574cfd0b3 IDP-804 Add 'impl' suffix to packages which are impl.
new d90c6ea23 IDP-804 Add 'impl' suffix to packages which are impl.
new 5edc78dce IDP-774 Custom object injection for scripting contexts: Attributes
new 0bf089b61 IDP-774 Custom object injection for scripting contexts: Attributes
new 24526d0f0 IDP-774 Custom object injection for scripting contexts: Attributes
new c5de7c384 Fix Java8 test script
new 26f9dcba8 Checkstyle
new a440fbe72 Fix logged class
new 50e6bca31 Fix Java8 test script (part 2)
new 10e6f9d26 Typos.
new 24075f9b7 Checkstyle
new 3619d68a4 IDP-800 - track initial AuthnResult to prevent double login
new c6764a2e5 IDP-800 - allow reuse of initial authn result when ForceAuthn set
new d648b8a4d IDP-800 - track initial AuthnResult to prevent double login
new 4db4cee37 IDP-800 - unit tests
new eb164c900 IDP-819
new 14a82434e Checkstyle
new 71cc61bcb Fix typos.
new 9e07aa12e Add a predicate around spring expressions, add some utility beans.
new 6da43e795 IDP-820 - Make IdP-hosted metadata configurable
new 49de7ad96 Add option to audit on unfiltered attributes.
new a15ea8f45 IDP-779 - Disabled AttributeStatement yields Attribute List in Audit log
new f50f7557b Collapse some wiring now that attribute statement predicate handles query profiles.
new da504a087 Clarifying comment.
new a44788603 Move parent bean over to utilities.
new 6a342e6f7 Update webflow schema version.
new 978fff2c7 Declare conversation manager explicitly so we can override its settings.
new 5896a5f5a IDP-808 Collapse namespaces
new 747bb69a1 IDP-808 Collapse namespaces
new 6de9eb226 Revert 81st accidental checkin of config files
new 52b5f700b IDP-808 Collapse namespaces
new 2b5a5d50a IDP-808 Collapse namespaces
new ccb554895 IDP-808 Collapse namespaces
new 18486802f Remove unneeded parameter from constructor.
new 51ed32d3f Provisional approach to Liberty SSOS delegation flow for "authentication".
new 3460f7b34 Nits : added 'final' keywords, typos.
new bce2d5d17 Add a second outgoing binding value for SAML-EC.
new 2ee9fa9d3 Deal with issuance of AuthnStatement in Liberty delegation profile.
new 60138ad06 Move up check for attempted flow into top-level base class.
new 125742a14 Add some Active Directory Kerberos message mappings.
new d700c8d6a IDP-821 - Expose capability to override Principal set for password validation step
new 01ab2bca4 Add action and bean/flow wiring to add DelegationRestrictionType Condition to outbound Response for Liberty SSOS delegation profile.
new a7c78315a When cloning XMLObject, rather than rooting in new Document, just leave in existing but then drop the DOM.
new b2569a515 Add missing call to super.doPreExecute().
new c84359d6f IDP-821 - Generally working "extended login" feature driven by password form
new 88298c7c6 Fix no-servlet tests.
new 5c9675f45 IDP-821 - Add general state communication between password form and extended flows
new 44ac86429 Add an input variable mapping.
new 43ff9ea51 IDP-821 - Add indicator when external flows are invoked as a subflow
new 62caece76 IDP-821 - Enforce extended flow predicates, and add some comments
new 7fd72e5a2 IDP-826 - Add default LDAP property values
new a2f45a380 IDP-224 Provide UI for logout propagation.
new e0cd8b723 IDP-224 Use JSON for logout propagation result.
new 32fc31cec IDP-829 - strawman redesign of SAML persistent ID storage interface
new 83e6a53dc IDP-224 Refactor logout propagation flow selection.
new 5bea82515 Conditional injection of custom view object so we don't need a dummy bean.
new 9821c1f6d IDP-774
new 8e8d941ea Relax method signature.
new 3ac73178f Conditional injection of various new objects to avoid dummy beans.
new c63f82830 IDP-804 Add impl to CAS implementation classes.
new d05fea670 IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new cbe85f0c6 IDP-715 Add Classpath*: location to contextConfigLocation
new c742f7322 IDP-829 - checkpoint completed implementation of new persistent ID store backend
new b996f84b0 IDP-829 - updated stored ID strategy plugin, and working tests for both old/new config
new 0af3a50c7 IDP-829 - fix some failing behavior, one test deferred for now
new f34f289c7 IDP-829 - Update decoder classes to account for new interface.
new 6d00721aa IDP-829 - Clean up use of computed strategy by passing it as a parameter.
new 56730cddf IDP-829 - Remove test that no longer applies to new implementation.
new 4f68d3de8 IDP-624 - Move attribute ID comparator impl to system/ from conf/.
new e30ec5e85 IDP-829 - Update JDBC test, add database verify (off by default), default retry codes to 23505
new cf907f44d IDP-829 - Improve logging during verification step.
new 148bfa096 Add final keyword to method parameters.
new ac84ec222 IDP-765 - Use unfiltered attributes to lookup consent storage key.
new cf6691c59 IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new a12193cca IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 5b1ea0c27 IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 384ce0644 IDP-829 - Logging and doc improvements, rename deprecated setter to avoid conflict.
new 74ed801a7 IDP-829 - Handle deactivation date column on inserts.
new 150561928 IDP-645 Functional SLO for CAS protocol.
new 2ad51232b IDP-829 - "Final" design/config changes and test fixes to support migration to new plugin
new 10688d7e5 Fix up remaning database schema.
new 945dadb8d Add trims to property expressions.
new fece714fe IDP-812 - Add tests for idp.home with a trailing slash.
new 0633c1502 IDP-829 - Finish new config for decoder side, and adjust when we verify the primary key
new c6a1907ff Update Javadoc.
new dc2f23169 IDP-788 - Some work on cleaning up the application context initializer.
new b212e4d1c IDP-710 ldaptive 1.0.7
new ebb3ffbc1 Fix javadoc; add final keyword.
new 818230cde IDP-671: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 1f606f11a JPAR-72 - Make Checkstyle config local.
new bb7d8b314 IDP-111 - Initial check-in of SPNEGO logic, started refactor of GSS code to handle multiple tokens
new 60a36062e Remove overridden mockito version.
new 939218cbc Revert change, not sure why this isn't inherited from parent POM
new 4414f2bde IDP-111 - rename package, continue code cleanup
new 300607702 Some comments.
new f90740d45 IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new e258b11b2 IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new ed284d422 Fix XMLObject cloning, should release self DOM as well as children.
new 25fb97a5d Some refactoring and cleanup.
new 4c5b777ce IDP-111 - cleaned up controller, error handling very TBD
new ef052143c IDP-837 - Add import of user-defined beans into MVC config
new 50c6fad0d IDP-834 Add flag to disable CASv2 attributes.
new e60d9f16b Add test coverage to ensure no duped attribute values.
new 4bf8f78e7 JPAR-72 - Fix Checkstyle config loc for reporting plugins.
new 4befe6645 Consent POM name nits.
new 094d5e983 IDP-671: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 9ffea850e Correct some comments.
new 206da7392 IDP-111 - Continued cleanup, working flow files and configuration
new d7be91ceb Update IdP signing credentials resolver to extend abstract base class to support predicate-based filtering.
new 5ef3b7e36 Implement IdP encryption credentials resolution support.
new 875b6f35c IDP-825 - replace requestContext legacy syntax
new 119e7fd94 Revert change to IdP signing and encryption credentials resolvers.
new 3dfb21e74 IDP-710 - revert part of previous commit
new 8843a72ff IDP-710 - revert new event id
new 10b314fa2 IDP-111 - stop hardwiring base path of controller
new e7d19bc84 IDP-111 - cover SPNEGO code with cookie buffering filter
new 9d48e0d4d IDP-111 - add a static constant for the signaling parameter name
new 9b19aff65 IDP-111 - strawman user preference manipulation flow/view
new 886401400 IDP-111 - revert cover of SPNEGO code with cookie buffering filter
new 1571c8941 Add the IssuingDelegatedAssertionPredicate to utilities bean wiring.
new 1100f8a4a IDP-671: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new f3816679b Don't use the metadata-based encryption params resolver for self-encryption case.
new 7d12d6015 IDP-671: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 074b7e3a0 Add class missed in last couple of check-ins.
new 54b49136e Add missing default token strategy.
new 901135e12 IDP-677: Port delegation "user authentication" of request based on presentation of SAML 2 Assertion WS-Security token
new 245a31e38 Checkstyle.
new 4d33b2e47 Reorder content.
new 199b3b4c3 IDP-111 - handle no-javascript case in user prefs view
new 1185b0e54 IDP-676: Port delegation configuration and policy control components
new d4a6873dd IDP-676: Port delegation configuration and policy control components
new 81cf13afd Normalize presenters collection, to include trimming as well as filtering out nulls.
new 71ab44069 IDP-671: Port delegation configuration and policy control components
new 0badf241f IDP-671: Port delegation configuration and policy control components
new b95ff598c Javadoc "the the" typos.
new 7215e997b Add missing annotation to method parameter.
new 879a41bda Patch from Daniel Lutz to support unit tests.
new 6768d7fe6 Checkstyle.
new c45d4744b IDP-672: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation
new 6fb75665e IDP-818 - Exposing excluded exceptions in ExtendedMappingExceptionResolver
new 8dd6f4dbe Checkstyle.
new 8b540601b Checkstyle.
new cbca608e3 Use a positional argument to align to checkstyle fix.
new b0de30704 Checkstyle.
new 387b87131 Some wording tweaks.
new df1f9dc00 IDP-671: Port SAML 2 delegation support from v2 extension (IdP)
new 866e4fed7 IDP-576 - Improve IdP SAML Logout default handling when client-side sessions are in use
new f47959773 Extend audit extractors to support additional message types.
new 68f7db2bb Fix double extraction of username audit field during logout requests.
new 192f1f058 IDP-224 - Restored some SAML logout response handling
new 6d7dbede3 IDP-274 - DataConnector Validate
new 68228008a IDP-224 - Remove unused material from propagation context
new 73004593a IDP-224 - Add some i18n to logout views, wire up new views to SAML logout flow
new e1f184aec Make consistent use of strategy functions for delegated assertion and Liberty context.
new 817442494 IDP-224 - Eventual meta-refresh selection of logout choice so SAML flow actually completes.
new 1d687ab84 IDP-224 - Attempt to add a degree of accessibility to logout results
new 6fd53edba IDP-224 - Single Logout implementation
new 12cd55276 IDP-224 - Add reserved LogoutPending event for SAML propagation flow
new 95782a199 Fix comments at the top of views.
new cb439cd54 IDP-846 Ensure IdP session has authn results.
new 9c429c70a IDP-842 Fix CAS protocol error handling.
new ea38ef13e Checkstyle.
new ccacf7f48 IDP-846 Delegate to authn flow for sec policy.
new 9914cea68 IDP-846 Remove unused Webflow events.
new 51ae0ebd3 IDP-846 Remove more unused events.
new 4964eebd7 IDP-224 - Mostly complete SAML 2 front-channel logout propagator
new 108866090 Check in unit test from SWITCH.
new 345bcbd48 IDP-845 - Move hsqldb test dependency to parent-v3 POM and update to 2.3.3.
new aea7bd842 IDP-847 - Fix additional SAML audience property
new fd7af2511 IDP-847 - Add a warning if deprecated property name used
new dbc518c13 Conditionalize outbound XML signing based on binding capability.
new 94204e745 IDP-836 - Attach CC license to message properties
new df993e51c IDP-818 - Exposing excluded exceptions in ExtendedMappingExceptionResolver
new 2839a5023 Lower log noise for audit field extraction.
new 7367ab2e1 IDP-224 - Bypass outbound context and inbound Subject work for a LogoutResponse.
new 468700d2c IDP-482 - Prevent repeated login attempts
new 06d56ae0f IDP-482 - Prevent repeated login attempts
new 813da1b8b trivial test for combining mapped attributed into a template
new 83b6d138e IDP-832 - Passing attributes back to IdP when external authN is used.
new 3ccd7cc5c IDP-833 - Make consent UI message more explicit.
new 269d97d3e Minor adjustments to mvc-beans.xml boilerplate.
new cee0a2e6f Adjust WS-Addressing messaging support package name for consistency with other support classes.
new efbe52574 IDP-817 - New ViewResolver configuration
new 8d1da3918 IDP-849: Update HttpClient-related components to use new TLSSocketFactory.
new c8af7934b IDP-224 - Localize jquery, add license, and split apart propagation template.
new 2280d7a85 Formatting.
new 0dca40b1b IDP-812 - Deprecate normalizePath() in the app ctx initializer.
new ebd80cdf7 IDP-812 - Fail on idp.home trailing slash.
new a995d9d86 IDP-812 - Rename a not-yet-released method, cleanup.
new f1e33c61b IDP-224 - Allow for multiple SessionIndex values, and add LogoutRequest support
new c85d84b95 Remove unnecessary null check.
new 7973b568e Refactoring of security-enhanced HttpClient TLS trust engine support.
new b1cf89e16 IDP-224 - Single Logout Implementation
new 039b38314 IDP-224 - Improve logout auditing field handling
new 4a0f6454a IDP-850 - Default audit log format is missing trailing pipe
new 215d07448 IDP-224 - Accidentally checked in a test version - toggle booleans appropriately
new 86708587c IDP-224 - Fix layer of indirection in status checking logic.
new c2500c414 IDP-224 - Correct for a Sanutario encryption change, pending investigation.
new 454c9f7fe Drop the clone's DOM to account for encryption.
new 5a9e78af4 IDP-851 - External authentication methods can't be called more than once
new 9cab66c83 IDP-851 - Patch another possibly repeatable context creation.
new c4733f83a IDP-840 - Addition of F-ticks support in the IdP
new 2daa62b6e IDP-840 - Block unsalted hashed usernames
new 08ac0a679 IDP-840 - Add F-TICKS file appender and enable it by default.
new 761444751 IDP-840 - Add fticks properties.
new 50acdac3b Remove implementation class reference in log config and lower it to trace.
new ab7a5ca98 IDP-840 - bit of category streamlining
new a5e2c03ff Update XMLObject cloning usage related to OSJ-139.
new cb4f029d5 IDP-730 Remove some property trimming around passwords
new 129af3bb0 Pull EventException out of delegation action and move to OpenSAML API for general reuse.
new bfda66cd5 IDP-840 - Revamp F-TICKS logging as a dedicated action at the end of SSO flows.
new a9b7259a9 IDP-840 - Fixes to F-TICKS format, and logging of success and failure
new ffa1844a4 Add a null check to compensate for a GSS-API misbehavior.
new 871b7a281 IDP-224 Add session key to LogoutPropagationContext.
new d95167cd8 IDP-645 Refactor related to session key changes.
new 855b04e52 IDP-791 - Correct order of initial client storage load.
new 332e36b8c Extend new abstract SOAP header generating handler class.
new c8211965c Move abstract SOAP header generating message handler to API module, needs to be used in IdP.
new 3c0f3451d In SOAP message handlers, on exceptions register contextually-specific faults where appropriate.
new 3d637ede9 Forgot to set requireSalt property.
new 0a686f5c1 Add null checks.
new 2e1cb4bbe OSJ-120: On SignatureValidationFilter change 'requireSignature' to something more descriptive
new 4f82699c1 IDP-735: On SignatureValidationFilter parser change schema attrib 'requireSignedMetadata' to something more descriptive
new ee51feef5 IDP-852 / IDP-823 - Proposal for new logback config, async config also included
new 82e318030 IDP-812 - Add fail fast to app ctx initializer.
new 41362d1f3 IDP-812 - Fix some tests via fail fast property.
new 67b0fefe6 Capitalization nit.
new 0e6854c3c IDP-853 - Attribute-based subject c14n flow missing PropertySourcesPlaceholderConfigurer bean
new a928e397e This test won't "fail" on a maven build because of the static block in AbstractFlowText class.
new f38a7b90d IDP-852 - Add ${idp.logfiles} to process log appender.
new 80b8f4038 IDP-812 - Remove failed test attempt.
new 9f8ea8da7 IDP-812 - Move test properties from static block to an app ctx initializer.
new 30891c980 IDP-854 - We don't have a supported way to disable artifact binding usage outbound.
new f18e771fe IDP-224 - Meta refresh to complete logout should only appear when propagate is an option
new 37d6fc8a0 Flesh out Javadocs for delegation-related components.
new 1202533f4 IDP-224 - Isolate logout propagation styles.
new 37c1e34d0 IDP-274 - DataConnector Validate
new 8dd03ec31 IDP-224 - After consideration, default SAML LogoutResponse to Success
new a8a0b4e53 IDP-594 - Remove old local storage test flows and views.
new 5f2ab3323 Remove older local-storage flows.
new fe22cf16f IDP-861
new 12373c665 Reorder some variables.
new 742151ed6 IDP-861
new d25f77f1c IDP-852 - Global fail-fast setting for services
new 271d671f9 IDP-852 - Global fail-fast setting for services
new dcb4e8cb4 IDP-864 - ldap resolver entryDN
new 7c6ea6ab1 IDP-861 Make sure that templating exceptions are caught
new ca73fdc3e IDP-861Fix test to reflect bug fix
new 94944c8d3 IDP-862 Improve CAS samlValidate compatibility.
new fa96bbb84 Add a dummy validator to use for non-failfast connectors.
new 3cce076c9 IDP-700 - Support noRetryDelay property in data connector schema and parsers
new d79f2ca2d IDP-700 - Implement specialized result set exceptions in parity with LDAP
new 674c220df IDP-700 IDP-743 Revert non compatible change to an interface
new c3da517af IDP-812 - Update Javadoc and tests.
new b7363f25b Move app ctx initializer test.
new 1bbc8b6af Checkstyle.
new 69131c7f3 IDP-868 - Stored persistent IDs can be invalidated by a date in the future
new 77b18fd66 Lock parent version for new minior release
new c288c61bf Move idwsfconsumer version to idp-parent property.
new a0afbb808 Peg idp-parent to idwsfconsumer 1.0.0, rather than SNAPSHOT.
new 7fb5b8e35 Bump version after release
new b1babfc64 idp-839 Update Minor version ready for next release.
new 90f88690e IDP-839 Update the Name of the installer.
new 2b6c54f06 Add additional retryable errors.
new 1996cb6aa Typo in comment.
new 1268fc4a6 Javadoc typo.
new 1153e9a85 IDP-871 - Skip attribute release flow if attribute context is missing
new 96f794259 Javadoc.
new a5dae9ee1 Update a comment.
new 90ad40fbc Bit of cleanup.
new 00729b77a IDP-848 Do not cache the UIContext
new 08cd35479 IDP-877 Fail in parsing if dependencies not supplied correctly.
new 3813233fe IDP-877 Fail in parsing if dependencies not supplied correctly.
new cbc25b02c IDP-878 Add IdP username to CAS system audit map.
new 3380eda71 IDP-881 Remove needless namespace.
new 509120ab6 Bump version to 3.3.0-SNAPSHOT.
new c392eeb79 IDP-879 Specify text/plain content type for IE logout response.
new 294c314a2 IDP-848 Deprecate an unused method
new 77fa43530 IDP-877 Better handling of band configuration
new 11efd553f IDP-876 forbid directory enumeration within the IdP
new 5140cd5ee IDP-877 - Adjust schema documentation of sourceAttributeID attribute
new f3930dbef IDP-694 Deprecate the use of workContext in the Scripted Attribute Plugins
new 10cc6f31a IDP-694 Deprecate the use of workContext in the Scripted Attribute Plugins
new a353aa4cb IDP-876 Remove checking caused by insufficiently engaged brain.
new 32cfc4bf6 IDP-880 - Expose newer StoredID features on deprecated connector
new 5e30c1065 IDP-883 - Create an audit field to log the AuthenticationResult
new bdcb2d5b8 Update version information
new 56112fa7c IDP-805 Fix encoder for example ePSA
new c132132ad Fix failing test.
new 5a3cc3448 Bump java-support, spring-extensions and java-opensaml versions.
new eea225e9c IDP-888 Fix IdP session ID mapping in CAS audit entries.
new 1ec5e8e8e IDP-876 Disable Jetty directory listing
new 80fca42db Fix incorrect example attribute ID.
new 549b98e0a IDP-873 - Add list to customize attribute display order.
new c96f93860 IDP-815 - On Windows, idp.home must use slashes instead of backslashes
new 17cd070da IDP-891 - Default value for idp.authn.favorSSO
new f63d0e60a IDP-879 Vary content type by user agent.
new 80be7d499 IDP-896 Handle longer names for the unpacked directory
new 2eb26a103 IDP-887 Make subjects available to the Attribute Scripts
new a10750345 IDP-893 avoid using Resource.getFile()
new c3ed01c4f Remove accidentally added file. Eclipse, I hate you
new 50ccb5c25 IDP-895 simple test for BasicX509CrdentialFactoryBean
new 6d7baa34a IDP-895 Make Credential factories publicly visible
new d555f5dde IDP-895 Make Credential factories publicly visible
new e178f2299 IDP-892 - global logout view - Uncaught Exception
new 7cdfe878d Add ExternalAuthenticationException to the list of "bookmark" errors.
new a35cdfd88 Enhance exception message.
new 9c2c79f78 IDP-889 - Handle 500 errors inside IDP
new 8d77d3118 IDP-889 - Handle 500 errors inside IDP
new 9201d718f IDP-889 - Handle 500 errors inside IDP
new 226c9d718 IDP-901 Fix typo introduced in IDP-804.
new d1b1ba37a IDP-904: Metadata Scope extension XMLObject impl fails on invalid regular expression value
new a15e99a7d IDP-903 Store authn data and session ID with ticket.
new 1263b33a8 IDP-899 - Back-button improvement
new 0cad246b6 Extend timeout to try and fix Windows build.
new 94432d0dd IDP-879 Populate UserAgentContext for browser profiles.
new e1536245a IDP-879 Use activation condition to execute PopulateUserAgentContext.
new 86966df74 Extend timeout to try and fix Windows build.
new 3bd85df80 Fix Javadoc typo.
new 7e3b9ffc6 Remove extremely out of date comment.
new 21baf9bc7 Add some annotations, and a failsafe setting, to predicate.
new 778b022a6 IDP-913 - Intercept flow that detects an expiring password based on an attribute.
new 23ed4e096 IDP-915 - Status page needs to check for failed startup of some components
new 5f0881cbe IDP-916 - Status page does not report state of chained metadata sources
new 381744b5a Lower some logging, given the intent behind the encryption-optional property.
new 8808ceb22 IDP-920 - Secondary session index update fails when a fixed NameID is used
new 6a15cbfac IDP-920 - Secondary session index update fails when a fixed NameID is used
new 00ac961de Bit of local storage text cleanup
new e750e2596 Tighten methods to protected.
new a2c5ad3b2 Fix some inconsistent terminology.
new 4a477369f IDP-922 - Session cache needs some inherent limits
new 4e23ede4c IDP-924 - Open <iframe> elements in logout-related views affect correct display in browser
new a5f367b85 IDP-914 - Validate usernames based on regex
new 624644d37 View state was missing some injected variables.
new 17c3d1b83 IDP-925 - Dynamic determination of JAAS configuration and custom Principals
new b6cda0659 IDP-925 - Dynamic determination of JAAS configuration and custom Principals
new dd224773d IDP-925 - Dynamic determination of JAAS configuration and custom Principals
new 8122d9491 IDP-925 - Dynamic determination of JAAS configuration and custom Principals
new 7ef30cbb8 IDP-925 - Dynamic determination of JAAS configuration and custom Principals
new 0038a0d4a IDP-927 - Race condition between setting of propeties in AbstractValidationAction
new 872fa0ae1 IDP-930 - Attributes missing from resolvertest audit record
new 7cb8e3f88 IDP-931 - Option to bypass data connector caching
new 550d03428 IDP-931 - Option to bypass data connector caching
new 2b9ce875c IDP-740 - Custom Prinicipal Serialization
new 716efabc0 Lower a routine log message.
new 885ea221e IDP-932 - Typo in documented trust engine bean name
new 72a501d44 IDP-932 - Typo in documented trust engine bean name
new 6ef48ca60 IDP-898 - improve logging for PopulateBindingAndEndpointContexts
new 805450fa9 Cleanup duplication of binding descriptor beans, and leverage that to get BindingDescriptor injected during inbound decode.
new 7d53fe4a3 Cleanup duplication of binding descriptor beans, and leverage that to get BindingDescriptor injected during inbound decode.
new 45e42ea35 IDP-935 - Audit log action bean missing access to servlet request
new c2d39381e Correct parameter annotation.
new 96a257e58 IDP-936 - Expose the date/time property in the audit field extractor
new 40205c456 Factor out PopulateAuditContext action into a parent bean.
new e86015108 Fix tests: override audit map properly, and include audit-system.xml to pull in additional user-defined beans.
new d1cee0e47 IDP-918 Grant ST in gateway mode if IdP session exists.
new 25ff5d2e8 Missed a BindingDescriptor set.
new 82c300eb6 IDP-928 Add support for CAS 3.0 method parameter.
new 7cc2df9e3 Bit of efficiency, don't clear cookie unnecessarily.
new d2aa4bc19 IDP-911 Wire up inbound/outbound intercept flows.
new 0d8208f60 Fix initialization of inbound flow collection.
new fd58a1aae IDP-311 - Make test resource path consistent across modules
new e3a0a687d IDP-311 - Make test resource path consistent across modules
new 12dabdb66 IDP-311 - Make test resource path consistent across modules
new 3b2b6180a IDP-311 - Make test resource path consistent across modules
new 18a2b44ca Fix failing tests after rename.
new 046138cb3 IDP-311 -Make test resource path consistent across modules
new 7db261ed3 Fix failing tests after rename.
new fa54f7c49 Fix test data paths impacted by opensaml change.
new 692ad5bf0 Override allowNullAttributeContext hook to match "missing" semantics.
new d9e25a9d5 IDP-911 Wire in inbound/outbound intercept subflows.
new 428fda40b Lower log level when cookie storage is used.
new dca6055c2 IDP-933 - Fix log placeholders in PopulateLogoutPropagationContext
new 7d6724034 IDP-946 - Clean up empty lists from audit config.
new 7762d25b3 IDP-946 - Clean up empty lists from audit config.
new d625e6d05 Fix warnings.
new 916dca490 IDP-504 - Unit tests should avoid creating XMLObjectBuilders explicitly
new bf0f96d9a Fix warnings.
new c0b820c39 IDP-942 - idp startup fails when no idp.sealer properties defined
new c91385f32 Move warning log message into conditional.
new b14577880 IDP-947 - status.jsp used_memory is wrong
new d1d6b9229 Fix warnings.
new d08de093b Clarify javadoc.
new 2a98a9b6d IDP-948 - Dynamic determination of profile and relying party configuration settings
new 0e9db3540 IDP-948 - Dynamic determination of profile and relying party configuration settings
new 8ddf8be91 IDP-948 - Dynamic determination of profile and relying party configuration settings
new f6a4b587b Missed an audit log action for servlet injection.
new 9a55d339f Attempt to fix test on Windows and fix setter constraint.
new 4dc4d369b Remove unused import.
new b71ffdd22 IDP-926 add PrincipalDerivedAttributeDefinition
new c57fcfaac Fix Javadoc
new a46c94ba5 IDP-951 - Username transforms are not being chained correctly.
new 3e6f505f0 IDP-948 - Dynamic determination of profile and relying party configuration settings
new 492805716 IDP-948 - Dynamic determination of profile and relying party configuration settings
new d1c141564 IDP-948 - Dynamic determination of profile and relying party configuration settings
new e454cbc80 Fix failing test.
new 92a3cdab4 IDP-926 Parser for PrincipalDerivedAttribute defintion
new 3cdb1af06 IDP-926 Schema changes for PrincipalDerivedAttribute
new 117ce44b3 Clarify a comment.
new 3a1fba081 IDP-954 Add infrastructure to allow warns or fails on Dependencies
new 7a5f1bcb1 IDP-926 IDP-954 Rename and more parsing for SubjectDerivedAttribute Dependencies
new 11012406f IDP-953 - AttributeQuery with blocked persistentId generates HTML
new 3cf87a53e IDP-926 Add another level of indirection to the SubjectDerivedAttributeDefinition
new 437725c0c IDP-926 Fix tests, rationalize names (attributeValueS)
new 1b457a65e Swap in '*' default for PRC flow listener to drive new profile config features.
new 53846b85e IDP-958 - Allow authn subflows to perform their own c14n.
new c65121683 IDP-958 - Allow authn subflows to perform their own c14n.
new a1a34f965 IDP-958 - Allow authn subflows to perform their own c14n.
new 51f699bea Principal name lookup function backed by either SubjectCanonicalizationContext or SessionContext.
new a6330dfab Missing constant in symbolic map.
new 12c3ef19e Fix log prefix.
new 2fb2e0dd5 Lower logging a bit.
new 244cd2c7c Fix javadoc link.
new 8d504852e IDP-948 - Dynamic determination of profile and relying party configuration settings
new cd2cd088b Relax some constraints on population of resolution context.
new 818c5b837 Fix javadoc.
new 804e5bbe0 Lower warning level for cases where this won't be a SubjectContext.
new 8a537bc6a Checkstyle nit
new 3ce3d98c6 IDP-959 - Support alternate principal derivation strategy in attribute-based c14n
new 27567206c IDP-921 - restart authentication in postAuthenticationFlows
new 9bdb0fcd3 Move principal evaluation machinery down to RequestedPrincipalContext.
new 2a9a88455 Set hintedName in AuthenticationContext based on session.
new c0d72da26 Update javadoc for action.
new 588300fdb Javadoc improvements.
new d19913d36 IDP-919 - Customization of client-storage views isn't practical
new 76faadbd4 IDP-956 Use on-render for view state setup.
new 4abcd09c5 Fix javadoc.
new f1f699f22 Relating to OSJ-161, add Spring schema and parser support for 2 new properties for FileBackedHTTPMetadataResolver.
new e896528f8 IDP-873 Allow integers as durations in the DataConnector parsers
new 420ba4723 Lower logging level when flow choices are exhausted.
new 570fc539d IDP-967 - Logging of non-proceed events needs fine tuning
new 9ff1c9668 IDP-504 - Unit tests should avoid creating XMLObjectBuilders explicitly
new 4263cadc9 IDP-504 - Unit tests should avoid creating XMLObjectBuilders explicitly
new f6cce7856 Fix warnings/javadocs.
new 48c7ab691 IDP-944 - Allowing administrators to centrally override messages/translations
new c9785697a Allow ECP profile to bypass SOAP fault for certain events.
new 56ec33d70 Cut and paste error on a new method name added for IDP-948.
new f4d0e8bc9 Cut and paste error on a new method name added for IDP-948.
new 9c4248660 Add @since annotations for methods added in IDP-948.
new fa12d5fb4 IDP-977 - Refactor c14n flow contract to allow a single flow, and reuse
new 355fb80d2 IDP-867 - Allow for no return endpoint when Asynchronous SLO extension used
new 247c473f5 IDP-978 - aacli isn't generating NameID results consistently with profiles
new 19376f493 IDP-960 - Remove or at least null-out UsernamePasswordContext after use
new d4f9f8b09 Fix class logger.
new 475c4e05e IDP-962 - Login flow or framework for combining authentication factors
new 68a25072c IDP-962 - Login flow or framework for combining authentication factors
new 22939d385 IDP-980: Reuse of authentication results for SSO is overly constrained
new 7a99e3f29 Add an initialized component check.
new 496b8ecfc IDP-962 - Login flow or framework for combining authentication factors
new 7e62aa08a Missing final.
new 034064ce7 IDP-962 - Login flow or framework for combining authentication factors
new 13aade538 IDP-962 - Login flow or framework for combining authentication factors
new ff67a4477 IDP-962 - Login flow or framework for combining authentication factors
new b031dd35c IDP-962 - Login flow or framework for combining authentication factors
new a3022a6e1 IDP-962 - Login flow or framework for combining authentication factors
new 1e9a98218 Javadoc comment nits.
new d9422843c Typo in debug logging.
new 224381e95 IDP-937 - Log rejected attribute consent via new action-state.
new c5cd0e3fa IDP-949 Implement CAS 1.0 protocol endpoint.
new 08a1eba9b Backport AttributeIssuer version of RegistrationAuthority functor into schema.
new fd53194a1 Bump schema version just as a tracking mechanism.
new 3b82a3c63 Bump schema version just as a tracking mechanism.
new 6aeb1f650 Note that scope-checking function is not implemented on Java side.
new 3454f2c68 Port RegistrationAuthority changes back into collapsed schema.
new 007319156 Add scope-checking function added to SP back into schema.
new 2df78eb8c IDP-982 Do not strip spaces from the salt
new 251e07c5d Unlock IdP and dependencies.
new 35b7fb669 IDP-983 Support Jetty 9.3
new 9c596cb8a INFRA-110 - Prepare IdP site.
new 1e50b8525 IDP-827 - Velocity support for auth filter
new 32e050513 IDP-984 - SOAP logout flow mislabeled as abstract
new cf01ef259 IDP-984 - SOAP logout flow mislabeled as abstract
new 66a9118ce IDP-985 searchTimeLimit parsing
new 754108080 IDP-938 connect and response timeouts
new 9afd88788 IDP-979 attribute resolver pool name
new 540342482 IDP-983 Add populate lib in the 8.3 jetty base
new 26c38e5d3 IDP-983 move some ini file contents back into start.ini
new 421c0a90d Flesh out signaling in MFA transitions.
new 2f871083f IDP-988 - Add scroll-bars rather than clipping long attribute values.
new f858738f5 IDP-962 - Login flow or framework for combining authentication factors
new d2367d8de IDP-990 Move to larger heaps
new 5d39f0248 IDP-983 Jetty-9.3 encorporate comments from Scott
new 4b9d06eac IDP-962 - Login flow or framework for combining authentication factors
new e17888a5c IDP-962 - Login flow or framework for combining authentication factors
new 7acf748bf Account for more esoteric flow execeptions.
new 468119e5f IDP-827 - update authn config
new adeba394a IDP-962 - Login flow or framework for combining authentication factors
new cb155cd54 Remove unnecessary test.
new 2fcf3c1d5 Give resolver action the ability to derive the attribute list dynamically.
new 77c98441d IDP-962 - Login flow or framework for combining authentication factors
new b2635b264 Allow flows to populate AttributeResolutionContext externally.
new 9e0314b0c IDP-962 - Login flow or framework for combining authentication factors
new aada576fa IDP-983 Merge Jetty 9.3 changes forward fron
new 6a6067988 For the gazillion-and-tenth time back out test configuration changes.
new a46e11fbd Override ldaptive version.
new 26205dd6c IDP-997 NameSpace Handler woes.
new 0ac654ef7 IDP-997 NameSpace Handler woes.
new 9361c16ef IDP-991 make sure we never care about idp-home in the installer
new faed5b4df IDP-1001: Update bean wiring to use new PredicateRoleDescriptorResolver
new 536c78d72 Log RelyingParty ID when profile config errors out.
new 9209940ed Set GET method in tests.
new 02a5a7141 IDP-986 add responseTimeout
new 9da0e32b2 IDP-965 - update LDAP resolver example
new e035fa5f6 IDP-1003 - External authn fails when consent is revoked
new a3305b6c6 IDP-1004 - StoredId data connector queryTimeout attribute doesn't support XML Duration
new f7556bb3b Bump timeout since tests keep failing.
new 0b3591177 Explicitly allow live access to member collection.
new 071ddce57 Add some MFA-related helpers.
new 78630e89a Add a SpEL-based context lookup function.
new b49038585 Update javadoc.
new 5dde27562 Add better error handling control to script and expression primitives.
new ffe66d393 IDP-962 - Login flow or framework for combining authentication factors (e.g. Duo)
new a89aff3e5 IDP-962 - Login flow or framework for combining authentication factors (e.g. Duo)
new 5dfda08cb Comment cleanup.
new 585ab35bf IDP-983 use the java-base from our separate project
new bbe62cccb Fix subsubversion
new 0b1466303 Support testing IPv6 addresses.
new c123bd7df Revert r8289 which breaks the test "API"
new 0169d81ed Bump timeout again since tests keep failing.
new 62bfecd5f IDP-1004 Add @Duration to appropriate methods
new 71c2d0b5a IDP-993 - Remove embedded/jetty-base from idp-distribution
new 02e5d59b1 IDP-1007 Fix CAS gateway bug.
new da62a8f5e Switch primary context variable from "context" to "input" to avoid Rhino conflict.
new 9ccc12322 Switch primary context variable from "context" to "input" to avoid Rhino conflict.
new 10f740559 IDP-966 - Provide a mechanism for adding webflows programmatically
new f0d82f89e Fix some logging categories.
new 16c88c467 IDP-966 - Provide a mechanism for adding webflows programmatically
new ac95196b3 IDP-966 - Provide a mechanism for adding webflows programmatically
new 0b696fa73 IDP-1009 - Fix typo in system messages.properties
new b1622f9d0 IDP-977 - Refactor c14n flow contract to allow a single flow, and reuse
new 24a10f2e6 IDP-962 - Login flow or framework for combining authentication factors
new dc6ef0827 IDP-962 - Login flow or framework for combining authentication factors
new 642001ca6 IDP-1013 - Login flow for Duo iframe-based authentication
new b9e5bf493 IDP-1011 default baseDn
new 62a66558d IDP-1010 validatePeriodically required
new 8ff673907 IDP-1013 - Login flow for Duo iframe-based authentication
new 7f8ec4f63 IDP-1016 - Factor out RPUI population step
new 761983a64 Bit of refactoring.
new c32c54132 Revert 8308 which spreads a property across multiple lines
new 85f65721e IDP-1008 - Add untrusted SP cert and key as test resources.
new 8ad438c9b Override cryptacular and BC versions for testing.
new 0e931cdb1 IDP-962 - Login flow or framework for combining authentication factors (e.g. Duo)
new 44a971f4f IDP-962 - Login flow or framework for combining authentication factors (e.g. Duo)
new fc3eae9eb Fix failing test
new 69a93a93b Eliminate some code duplication.
new b65f4f67c Add a parent bean for predicate policy type.
new 6899a7c00 Update template POM for new modules
new 15c6f5083 New module for administrative profile APIs
new d262b7824 Javadoc nit.
new d4df29993 IDP-961 - Use of IdP's authentication flow to protect itself
new 97cda7b4e Add admin-impl module.
new bdb602546 IDP-961 - Use of IdP's authentication flow to protect itself
new 4f58f88f4 IDP-962 - Login flow or framework for combining authentication factors
new 5cda5c4c3 Allow UIInfo to be used without SPSSODescriptor.
new 8e45aedb2 IDP-961 - Use of IdP's authentication flow to protect itself
new c96a89fdc IDP-981 - Allow RemoteUser Auth method on multiple URLs selected by AuthContextClass
new 20593eb98 IDP-981 - Allow RemoteUser Auth method on multiple URLs selected by AuthContextClass
new 3645c893a IDP-813 Collapse the enc: namespace into the resolver: namespace
new 29930171b IDP-813 Completely untabify before making any further changes
new ab635a9b0 Fix expression eval context passed into expression parser.
new e517a54ba IDP-813 flatten ad: namespace into resolver: namespace
new e8d09944c IDP-961 - Use of IdP's authentication flow to protect itself
new 8763ecb70 Add idp-admin modules to build.
new 8abde4826 IDP-961 - Use of IdP's authentication flow to protect itself
new 0842e897a IDP-813 flatten ad: namespace into resolver: namespace
new 5343231ae properties
new 1e315b71e IDP-961 - Use of IdP's authentication flow to protect itself
new e3107dba8 IDP-961 - Use of IdP's authentication flow to protect itself
new 6b71de0fb IDP-961 - Use of IdP's authentication flow to protect itself
new 713b238e8 Fix test due to parameter name change.
new 285dfeda2 Really fix test due to parameter name change.
new 78868b342 IDP-1018 New DataSealer-based TicketService.
new 0334f708f IDP-1018 Wire up EncodingTicketService.
new a703db612 IDP-1018 Encode proxy ticket data into ticket ID.
new f5845ec76 Add examples on user/attribute access control.
new eb40bb0ba IDP-1018 Facilitate switching TicketService impls.
new d30b501e5 IDP-961 - Use of IdP's authentication flow to protect itself
new 0131d62b0 Remove bouncycastle and cryptacular version overrides
new 09bdaf8c8 IDP-961 - Fix tests by adding new admin artifacts to WAR
new e7f8bcbff IDP-813 Flatten Attribute Resolution Namespaces - start on DataConnectors
new 9b2ba7fd5 IDP-813 Missed checkin
new 95a1f9ba9 Remove target directory.
new ba0994f50 IDP-1018 Component wiring that actually works w/r/t upgrades.
new 2a7d1a1a4 IDP-813 Flatten dc: namespace into the resolver: namespace
new 1dff901ae IDP-961 - Use of IdP's authentication flow to protect itself
new d50ee27ee IDP-962 - Login flow or framework for combining authentication factors
new 24bc48d7a track latest WIKI recommendations
new d597cda4a IDP-1018 Percent encode tickets.
new 4853be7bc IDP-1019 - Deprecation of various nameid properties in favor of String beans
new c989b0af6 IDP-1029 Don't try to call a setter if there isn't one.
new a6e25932d Sigh. Revert accidently checked in test file which was breaking the tests
new fc7562d57 IDP-813 Flatten down the dc:LDAPDirectory definitions into the resolver: namespace
new cf5be91b7 Checkstyle : Mostly ReturnCount
new b5b07c8fd Checkstyle : Mostly ReturnCount
new 13fe51e88 IDP-1019 - Problem using persistentId salt with special characters
new 93dfad601 Switch to Guava form parameter encoder.
new dd8fb57f0 IDP-1018 Revert ticket encoding, use URL-safe charset.
new e2dafbb84 CheckStyle
new f92333b93 Autogenerated finals
new 158dfd623 IDP-1031 - ExternalAuthentication ignores authnInstant
new eb904cec6 IDP-1031 - ExternalAuthentication ignores authnInstant
new 001c24a89 IDP-813 Collapse dc: into resolver: RelationalDataBase
new 80274fa3c IDP-1032 - NullPointerException in JDBCPersistentIdStoreEx when MySQL is busy
new 50b0c1edd Fix NPE when input to predicate is null
new 5c2b07fb3 Checktyle. Guava constraints are deprecated. These constraints have never fired and we are out of development. So remove
new 18efb082f Enforce non null membership with Guava constrained map
new a501a3363 Fix tests now that we have removed the deprecated class.
new e3bfd9377 IDP-813 Change attribute-resolver files to reflect new schema
new e2a452cd0 CheckStyle
new 11b8e1765 IDP-813 Modify tests
new 9d7fafd9f IDP-813 Shortcut to specify TLSTrustCredential
new e649515cb IDP-1018 Revert to SimpleTicketService as default.
new 2a98955ea Remove redundant idp-cas-impl dependency from POM
new b2540c0e4 IDP-813 Log deprecated element types
new 44eac09f4 If there are no entries in a map for a given key get will return null...
new ecd9ff38f IDP-715
new ee5b55a68 IDP-917 Make the need to hit return obvious
new 902e7b898 IDP-1039 - Enable use of PATH_INFO with webflows
new 5630239fe IDP-1039 - Enable use of PATH_INFO with webflows
new 877d7cc84 IDP-1034 - Fix filter-name typo in web.xml
new b70ec65da Draft of an action to output metrics.
new f5d2f20d4 Relocate admin flow configuration to hide it better.
new c3b554ce1 IDP-1044 - Add default LDAP pool properties
new 9d112e51b IDP-1044 - Make LDAP test accounts match non-LDAP
new 0459a2201 Move metric objects into admin config file.
new bc3156afb Add a filtering layer during metric reporting that leverages logger categories.
new 92f74e7db IDP-874 Command line property to supress setting firewall exceptions
new 9e41444af IDP-994 wait for the service to exit during uninstall
new 428e86d4c Revert example back to the intended default combining IPAddress and Password.
new 8e8dd4f92 IDP-996 Fix ServiceNotSpecified error.
new b9516261b IDP-1048 Check for authentication results in gateway mode.
new dd4f24f8b Adjust .project to import into Eclipse without warnings
new cb08477e3 Formatting, replace Windows line endings with Unix
new 3eeecfcfd IDP-996 Trap runtime exceptions due to misconfig.
new 8abdd9bf6 IDP-908 - Reporting on authentication events
new 4fb1e255a JPAR-60 - Fix trailing spaces in license headers and Checkstyle config
new ce9c6c666 JPAR-60 - Fix trailing spaces in Eclipse code template
new ec35835d3 Checkstyle, remove unused imports
new 789d0b8fe Checkstyle, remove unused imports
new bfdd8c9ab Fix comment
new be9c71884 Checkstyle.
new 255ae0993 IDP-865 - Checkstyle
new 89d91c868 Checkstyle.
new d663e507c IDP-865 - Checkstyle
new 67eb52535 Checkpoint work on timer support.
new 0494ffa46 IDP-865 - Checkstyle
new d38eaf1e1 IDP-1040 add warning for long-removed attribute.
new 78bbc96f0 IDP-813 Remove unsupported/deprecated attributed from flattened sche,a
new caf5cb57b Checkpoint work on adding timers across actions.
new 7d92b0467 Wire in support for timer configuration and an example.
new 9f5bbba05 IDP-865 - Checkstyle
new eb66153b3 IDP-865 - Checkstyle
new 2fdcb61b1 JPAR-85 - Checkstyle, check final parameters
new 2f2a265af Checkstyle, some missing annotations.
new d3cbac8b1 JPAR-85 - Checkstyle, check final variables
new eccf78a24 JPAR-85 - Checkstyle, check final variables in for loops
new 25b3b7e65 JPAR-85 - Formatting, fix line lengths
new 39a75a4d3 JPAR-85 - Checkstyle
new f679d412a Explain why this is deprecated
new 4484ac320 Add annotation to constructor and object annotation in method
new 97eb4dcb1 IDP-1047 Deprecate parameterized constructor for IdPAttributePrincipalValuesFunction
new 5209d5521 IDP-1047 Deprecate parameterized constructor for DataConnectorFactory
new dda6265be IDP-1055 Move AbstractDataConnectorParser up from impl
new d60be4f76 Add annotations and constraints (from code review)
new eb74984b7 Switch to simple class name for triggering timers.
new 5d14193ae Cleanup of BeanPostProcessors:
new 7749ab12b IDP-962 - Login flow or framework for combining authentication factors
new 3ff5e2882 IDP-1013 - Login flow for Duo iframe-based authentication
new b563c4569 IDP-1013 - Login flow for Duo iframe-based authentication
new d6406ba42 IDP-1013 - Login flow for Duo iframe-based authentication
new 01d275012 IDP-1047 Move some constructor beans to setProperty/Initialize
new 3ffd8e3e7 IDP-1047 Move AttributeResolverImpl from constructor parameterization to setProperty
new f941988aa IDP-1047 Add parameter name annotation to api class
new 485b5fb8d Fix build
new 0767510c7 We need the test jatr in order to use the helper class.
new 710d6e24a IDP-1047 Move AttributeFilterImpl from constructor parameterization to setProperty
new 8996c649a IDP-1047 Add parameter name annotation to attribute-filter-api classes
new 1369cf927 IDP-1047 Add parameter name annotation to attribute-api classes
new e95a9da3b IDP-1047 Add parameter name annotation to attribute-api classes
new 1e4bd5439 IDP-1047 Move idp-saml-impl, classes (and their parsers) from constructor params to properties
new 781412cc1 Clean up DuoIntegration subclass to avoid constructor use.
new 94c62512a Add constructor parameter annotations.
new a5903ae2f Add constructor parameter annotations.
new ebe984fdb Add timer hooks to resolver and filter.
new 6ca6f793e Add NPE checks while looking up contexts.
new 6e748ea02 IDP-1047 Add Properties, deprecate constructor.
new 4deb0f6bf IDP-1047 add annotations
new d725e3682 Add support for counters to context-driven metric feature, adjust names accordingly.
new c2f5ef5cf Add timer hooks to resolver plugins.
new 0959ea159 IDP-908 - Reporting on authentication events
new 4d4e34b2c Add jodatime support and a formatting string to Jackson serializer.
new 8230e6417 IDP-857 - Create a status page with JSON output
new c179aed25 IDP-857 - Create a status page with JSON output
new cfe31324b Move implementation classes into an impl package.
new a1c7138d1 IDP-857 - Create a status page with JSON output
new 7e48027af IDP-857 - Create a status page with JSON output
new 4b0b7965e Clarify comment.
new a1e610da7 Add constructor arg annotations.
new ff74806fd Add timer/counter hooks to adaptor classes pending OpenSAML adoption.
new 6ddccecb8 IDP-1059
new 69448063d Migrate Metrics support classes into opensaml-core.
new 0520fef76 Forgot to pull MetricRegistry out of OpenSAML ConfigurationService.
new d666f74ad Fix tests by overriding MetricRegistry in ConfigurationService.
new dc1cb50ad Missed check-in.
new abcfb2ab8 Authn tests now require opensaml config init.
new debfc4f99 IDP-814 - improve example in metadata-providers.xml
new 5824a7747 IDP-1050 - NameIDFormat Generation in Default Metadata
new c78495fc0 IDP-1041 - default idp.properties is missing idp.fticks.loghost/logport
new a988fed83 IDP-1050 - NameIDFormat Generation in Default Metadata
new 0f8f625a6 IDP-1058 - Make HTMLLocalStorage key configurable
new 5128ced55 IDP-1061 - Supported way to detect (and audit) SSO vs. fresh authentication
new 4b7c45c59 IDP-1062 - Implement regex-enabled attribute matching predicate
new 30ab6fc9f IDP-1047 Annotations for constructor arguments.
new caa7abfb8 IDP-1049 - Profile setting to disallow RequestedAuthnContext in requests
new c5b925a7d IDP-156 - Create an authn lock-out stage
new 6cccc1099 IDP-156 - Create an authn lock-out stage
new 6965540be IDP-156 - Create an authn lock-out stage
new 586455d73 IDP-865 - Revert inadvertent debug logging from r8425
new 83db457de Fix test (for now).
new 1d36247e5 IDP-156 - Create an authn lock-out stage
new 7cd8083b1 IDP-156 - Create an authn lock-out stage
new 1c579e2ce Add URL Decode step to path-info extraction.
new 3ca9841e9 IDP-1063 Allow StoredIdDataConnector to be configured with no salt
new df66deff8 IDP-1063 Fix test
new 4e95d851a IDP-1064 - Remove LDAP resolver return attributes property
new 4b1235a92 IDP-1064 - Return all LDAP attributes by default
new 4c1e29333 IDP-1026 - Omit empty attributes from consent
new e0ef2ad9c IDP-1065: HTTP metadata resolver XML config schema and parsers should support more HttpClient config options
new e9813f830 Support for non-GET/POST in API flows:
new aa1b1cff4 Add error checking for missing NameID in LogoutRequest.
new 5c469eecc IDP-1067 - Async LogoutRequest fails with EncryptedID
new 765e88a6d Install default Jackson ObjectMapper.
new 470a38a14 IDP-156 - Create an authn lock-out stage
new 5650125cb IDP-996 - CAS with HTML local storage ServiceNotSpecified error
new cc32fba73 IDP-1065: HTTP metadata resolver XML config schema and parsers should support more HttpClient config options
new 62830970e Update HttpClient bean defaults to align with recent changes.
new 0cd1f7aca Fix XML wiring typo from recent refactoring around bean post-processing.
new e711d38fb OSJ-157 - Metadata filter to inject NameIDFormat elements
new 360ede371 OSJ-157 - Metadata filter to inject NameIDFormat elements
new 3040b9083 IDP-1068: Delegation Liberty SSOS flow completely broken on Subject C14N
new c7fb6cb8e IDP-1022: ClientStorageService error when issuing delegated assertion
new 9bbb8e15f IDP-1012: Delegation Liberty SSOS flow Assertion Subject C14N fails for transient NameIDs
new 79dbf8fbe Fix inverted args to logging call.
new e74380ce2 IDP-1042 log salt at TRACE
new f73c03cd0 IDP-1042 Salts can have leading/trailing spaces
new 073cd917b IDP-1012: Delegation Liberty SSOS flow Assertion Subject C14N fails for transient NameIDs
new 3e410abf7 IDP-1070: Add config schema and parser for new AbstractDynamicMetadataResolver options
new ffc6b0586 Add/update services.properties with HttpClient bean properties recently added in global-system.xml.
new 1406bf2df Fix failing tests. We're now strict about inbound SOAP 1.1 Content-Type, can't be null.
new 76922547d IDP-1071: Config schema and parser support for HttpClientSecurityParameters in HTTP metadata resolvers
new 6376c0db6 IDP-1071: Config schema and parser support for HttpClientSecurityParameters in HTTP metadata resolvers.
new cfddf5f0a IDP-1072: Config schema and parser support for Set<MetadataIndex> on batch HTTP metadata resolvers
new 1b2402abd Add a Metrics Reporter that can do periodic delivery of metrics in JSON to an HTTP collection point.
new 2f6bb9528 Convert storage REST API from a view to a flow action.
new 995a17bfd Add example of push metrics reporter.
new f1a657fcf IDP-1071: Config schema and parser support for HttpClientSecurityParameters in HTTP metadata resolvers.
new 88d5bb4f7 Add a factory bean for ExplicitKeyTrustEngines on top of Static credentials.
new 8d62c6443 IDP-581 - Do not log Velocity status.vm error
new ef43cc7e3 IDP-1071: Config schema and parser support for HttpClientSecurityParameters in HTTP metadata resolvers.
new dff58955a IDP-970 - Predicate to determine if an attribute is required
new 79e171e97 Make use of new EncryptionOptionalCriterion introduced for OSJ-156.
new 624a104cf Add a parent bean for a statically-driven trust engine.
new e012664a1 Add missing dependency in attempt to fix build.
new d80512b2f IDP-972: Support a filesystem-based version of DynamicHTTPMetadataProvider
new 75b978d51 IDP-980 - Reuse of authentication results for SSO is overly constrained
new a7226fedb IDP-980 - Reuse of authentication results for SSO is overly constrained
new 0a8ae7adb Remove ldaptive snapshot override.
new 69c5f09a1 IDP-1060 - Adding hook for MetricContext to CAS flows
new a9cefb887 Refactor security-enhanced TLS socket factory bean wiring to use new support class. Add bean that support clientTLS.
new 2b7a4f5a6 IDP-1075: Add config schema and parser for new metadata resolver options related to predicates
new 9cebeb22f Add default TLS criteria for HttpClient re: OSJ-180.
new 56e9f88ca IDP-1027 - Replace $ with <br> by default but optionally
new 1dfaeaf2f IDP-1027 - Add test LDAP user
new 402384108 IDP-1076 - Kerberos failed password elevate exception to classified
new 3cd2e1fd2 Relocate static trust engine factory bean class.
new 62fc6bfea IDP-1073 - Factory beans for easier handling of simple trust scenarios.
new bfec5bb87 Relocate expiring-password view template with the rest of the intercept views.
new 1d4075d8b Add a note about earlier IdP versions.
new ede1b952b Fix issues with unit tests which would fail on next OSJ checkin.
new be5fa56a0 IDP-1077
new bda1213d7 IDP-882 - accessibility of consent screen output
new c267177f2 IDP-1078 - StorageBackedIdPSessionSerializer is slow under heavy load
new c9f68bac0 IDP-1078 - StorageBackedIdPSessionSerializer is slow under heavy load
new d0fb36ab7 Add check of result cache key to unit tests.
new 85287b5ea IDP-1079 - Make error message about missing GSSName more verbose
new 9454c4457 Reset 4th digit on msi version prior to release.
new 6d06f9dc1 OSJ-183 - backgroundInitializationFromCacheDelay property misspelled in AbstractDynamicMetadataProvider
new 8b8e5585a OSJ-186: Suggestions for metadata resolver improvements
new c98d45777 Reorder the commented content in the metrics config.
new 699de53ab Lock parent version for new minor release
new df134c5d8 Bump version after release
new 6406c5605 IDP-1085: LocalDynamicMetadataProviderParserTest should clean up test directories
new 206bed7ab IDP-1089 - Duo flow doesn't guard against a null username
new a006b839b Fix spelling errors
new 66b88e176 IDP-1091 - Logging gap in authn/Duo flow.
new e5a842913 Add comment noting profile context is available to view.
new f5cbe1417 Turn down logging.
new 7af1279af Correct sense of signRequests field variable and documentation.
new 46b039bfd Bump snapshot version to 3.4.0.
new b8b436c77 Refactor artifact config support methods.
new 61773a198 Unlock parent POM reference.
new 2adeb50ed IDP-1016 - Factor out RPUI population step
new f907fb5ac IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
new a27c71012 IDP=1097: Fix typo in build prompt
new 497688a72 IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
new e93df9fa8 IDP-1098 - C14n failure glitch during MFA transition
new 21f67eefd OSJ-124 - Add "impl" suffix to any implementation packages that don't include it.
new ad70221b8 IDP-1102 - View template used in expiring-password flow inadvertently moved
new 5dc714e2c IDP-1101 - SubjectC14N is not being performed for expiring-password condition
new d1f76c40c Bump spring-extensions version.
new 1bd88ad9b Fix HTTP client timeout defaults to use duration syntax.
new 2689cf9b7 Add setting for HTTP client logging.
new 8c047e728 Add ability to turn off name checking for HTTP client cases.
new 72438c9d7 OSJ-191 - Support for OpenSAML security features in HTTPResource layer
new 13d6980a0 Add @since tags.
new e0dac144f New Root cert for *.shibboleth.net
new 96760b58a IDP-1093 Add frame work to play with parsing ResultCache
new 6cfa3bb26 IDP-1093 New attributes to control TTL policy
new 084e80a0d IDP-1093 New attributes to control TTL policy
new 04fd608ef IDP-1106 - Support for key-based authentication of LDAP server
new 8e4dbae5a IDP-1046 - Audit Guava Collections transform and filter for problematic usage
new d32b77451 Update InMemoryDirectory.
new 475ba8528 IDP-1111 - Provide a case-insensitive computed persistent ID strategy
new 9e4fe07f9 IDP-693 - point out why we need a factory
new ac6e2602f IDP-1100 Allow command line specification of credentials umask
new f82a67d8d Correct the example script to get the username appropriately.
new 4c1e5d47f Checkstyle.
new ace627531 Checkstyle.
new 83b217cf7 IDP-688 - Fix bug with deprecated property setter.
new e5cfe2e91 IDP-688 yank never functional, and deprecated credentialsProvderRef
new 93a94fc3f IDP-688 warn if we meet deprecated tlsTrustEngineRef or basicCredentials
new 29a929460 IDP-1114 - Better control over AuthenticationResult reuse
new 977b02e7c IDP-1118 add an old validUntil in our example metadata
new b3d415577 Remove non startTLS test directory.
new 10a02c4b3 warn on dependencies for static data connector. They may no sense.
new 3367cec6a IDP-680 Introduce two new Dependency Types to the schema
new 3d757fa74 IDP-1113 in circularity checking look for attributes before data connectors
new 2e24f9f06 IDP-680 Tidy code prior to handlineg new dependency types
new ff0f6fdb0 IDP-680 Integrate the two new Dependency types in PluginDependency
new 849183335 IDP-680 Final tidy
new 262ea5a81 IDP-680 Deprecate Dependency
new ac480a90d IDP-693 Start to untangle the ValidUntil Filter Mess
new 3834896f6 IDP-1116 - Rework handling of webapp customization
new aa36f0282 IDP-1116 - Rework handling of webapp customization
new 3dcb0093d IDP-693 revert previous. We'll fix this completely in V4 and a comaptible manner.
new f8c4146ec IDP-680 deprecate sourceAttributeID
new 4483d763b typo in comment
new 73e380a60 IDP-1042
new a97b5d24a IDP-1116 - Rework handling of webapp customization
new efcca1385 IDP-1116 - Rework handling of webapp customization
new 0d7806ff4 Add missing init/destroy declarations.
new d61d29a60 Add missing c'tor annotations.
new f3dc3621c IDP-1051 Headless installs
new 332dc3ee6 IDP-688 Complete refactoring
new 5ea8e16b8 Replace deprecated Spring context creation method.
new 8b3cca556 Add various .gitkeep files to empty dirs, in prep for git conversion
new 7ccf24445 IDP-1129 - Logging properties can't be externally set
new 49e5671e6 Remove Visual Studio workfiles
new 5a580d056 IDP-1132 - Improper warning when using legacy relying-party format
new 26c51ace1 IDP-1133 - Replace wildcarded global transition rules
new b007ae121 IDP-1133 - Replace wildcarded global transition rules
new f8ef790e2 IDP-1133 - Fix implicit transitions in interceptor flows.
new 5d850892d Fix runtime exception logging when getCause is null
new 03c1ba55d IDP-1118 set validUntil to "Now"
new b218f8edc IDP-1131
new 72ca5d95e IDP-1136 Warn on legayc relying party files.
new 8cff85ca9 IDP-1138 Suppress logging of salt at all but TRACE
new ee3f8c778 IDP-1138 Typo
new 8cccabe0b IDP-1141 - SLO not working in IE/Edge
new ea9275a14 Add defensive warning if inbound flows are cleared.
new 95772c330 JSE-22, IDP-1146 remove use of extrenal SVN server from tests
new 3a68edcbe IDP-1116 reduce dependency on SVN repository.
new bd362598c Replace deprecated Spring context builder.
new 06aa96cf2 IDP-1146: Replace unit test usage of Subversion repo resources with Git
new 77875f4a9 Add explicit version to java-support test-jar dependency.
new 799becac2 IDP-1148 prepare: make beans lazy init
new 561dafa42 IDP-1148 add resourceRef to ResourceBackedMetadataProvider
new 4cb949b8d IDP-1149 Force create the jetty-base/tmp directory
new 85b8184c4 IDP-1149 Speculatively set version to 3.4.0
new 04b9b0ec7 IDP-1142 - Metadata-driven configuration strategy
new 87db768fb Fix dependency on Java 8 method.
new 7d391b467 IDP-1152 - Global transitions are inherited into subflows
new 5989e84be IDP-1152 - Global transitions are inherited into subflows
new aa0407628 IDP-1153 - Enhance context-check interceptor to support multiple events.
new a2034be1a Add constructor argument to suppress Spring warning.
new 75fc43074 Example NameID generators should omit qualifiers.
new bde24f0b3 IDP-1142 - Metadata-driven configuration strategy
new 2c3604874 Add additional helper beans and some lazy-inits.
new 124155498 Convert unnecessary util:list elements.
new 2d26fd89b IDP-1160 - Add activation condition to profile configs
new 5675f13d1 Fix typo in message.
new b7a2b5f80 IDP-1114 - Better control over AuthenticationResult reuse
new ac0513f49 Javadoc typo.
new cc1cfd58b Fix a typo.
new 7ce470e1b Fix javadoc.
new 912855ce2 IDP-1165 Bark more loudly if the to-be-encoded type mismatches.
new 3ecfe28bb IDP-1165 Warn on Lossy encoding of scoped attributes as strings.
new 4c69a91c2 Fix files incorrectly checked in as DOS format.
new 96a3a4503 Add a defensive check against an empty NameID.
new b4ac9cbda Add support for attributeFilterRef and unit test to schema/parser.
new 62f0fe1d4 IDP-1168 - Collapse duplicated scripted implementations
new 4c7cfc3d4 IDP-1168 - Collapse duplicated scripted implementations
new 6709cb1ce IDP-1168 - Collapse duplicated scripted implementations
new 468c30f1e IDP-1168 - Collapse duplicated scripted implementations
new 9269e7d30 IDP-1168 - Collapse duplicated scripted implementations
new 4d2ab0a16 IDP-1168 - Collapse duplicated scripted implementations
new 95efec662 Remove duplicate injection of custom object.
new dce9afac2 IDP-1168 - Collapse duplicated scripted implementations
new 77901b299 Add inline/resource scripting to EntityAttributes metadata filter.
new 26308499d Add inline/resource scripting to NameIDFormat metadata filter.
new 14f48cf8b IDP-1169 - Remote User Subject Attribute Logging
new 1430ce599 Add deprecation warning.
new 0e19f5292 Add annotations and adjust deprecation warnings.
new c77539f11 Add inline scripting to PredicateFilter.
new 86f49a1a6 Add inline scripting to AttributeEncoder.
new b68f869f4 OSJ-200: Improve logging around expired metadata refresh attempts
new 5dae9d976 IDP-1174 - IdP V3 Installation on Windows GUI
new 4332f1db2 Add executableSearchBuilderRef to flattened RDBMS connector.
new 71baa07d3 IDP-1170 - REST DataConnector
new 64745397d IDP-1170 - REST DataConnector
new c403453dd Remove unneeded base class reference.
new 39617ee9b IDP-1170 - REST DataConnector
new b069af5a7 Fix script test issues for both Java versions.
new fc04c7fd8 IDP-1167 dos2unix as apporpriate
new 6907329df Switch to new helper method and add test for exceeding size.
new 762f5fcb6 Fix some typos.
new 4462ff497 Auto-install identifiable bean processor into services.
new c18bdcb5d IDP-1170 - REST DataConnector
new c2d35e533 Bugzid: 1042 Fix Capitalization issue in precious fix
new 087df8f37 Include JAAS config name in success/failure logging.
new 6d96019bb IDP-1178 unnecessary LDAP filter
new 98572b74a IDP-1177 - Centralize deprecation warnings through dedicated function
new 00a2cc517 IDP-1177 - Centralize deprecation warnings through dedicated function
new 5487dd24a Fix deprecated test warnings.
new 56717476a IDP-1177 - Centralize deprecation warnings through dedicated function
new f2493894a IDP-1177 - Centralize deprecation warnings through dedicated function
new 9ee5d520b IDP-1177 - Centralize deprecation warnings through dedicated function
new 594317b92 IDP-1185 - Change expression parsing in MVC view creator
new 0b57f0f28 Add idp.properties example for idp.entityID.metadataFile.
new 0e35432df Fix warnings and missing javadocs.
new 87356a12b Add idp-bom module.
new 70256cb59 IDP-1186 - Undeprecate Issuer policy rules
new 34bd5abf4 IDP-1177 - Centralize deprecation warnings through dedicated function
new 461a5c218 Add executableSearchBuilderRef to LDAP connector schema.
new 0dd5ad471 JPAR-95 - scm plugin in parent POM still references subversion
new 4ae2d8a6c JPAR-95 - scm plugin in parent POM still references subversion
new 7e1fdd635 JPAR-95 - scm plugin in parent POM still references subversion
new d549ff450 Namespace of ScriptedType child elements will vary.
new 4e4df06fc IDP-1170 - REST DataConnector
new e3f062d93 Add new metrics to gauge set from OSJ-200 and OSJ-202.
new 83fa96c96 Switch to use new Extended- metadata resolver interfaces.
new 05643d739 Update status page with new metadata resolver info.
new a52fddabb Guava ImmutableMap builder values may not be null, need to guard.
new fc6420123 OSJ-209: Support mandatory use of TrustEngine in SecurityEnhancedTLSSocketFactory
new a09272e07 IDP-1184 Replace <sequence><choice> with <choice>
new 9841591a8 IDP-1184 Remove needless numeric restrictions on elements inside a choice
new 70c98d20e IDP-1184 Flattened Schema and FailoverDataConnector
new 9c53d894c IDP-1184 Flattened schema and Attribute Definitions
new 93ed7082a IDP-1184 Test for (existing) warning for duplicate elements in flattened schema
new 0e18f5925 IDP-1184 Clean up warning around RDBMS Connectors
new 34c275c7f IDP-1193 Flatten StoredIdConnector properly
new ef7a1450a IDP-1192 Deprecate references in the Attribute Filter language
new 5a81649b5 IDP-1177 Remove duplicate deprecation warning
new 6e68809a5 IDP-1177 A pass though attribute-resolver adding DeprecationSupport calls
new d094d35a8 IDP-1193 Strip jetty\demo-base from jetty distribution
new 9b9b0142c Format some whitespace
new ef70372ad Fix typos
new 1343b522b Add wiring for AffiliationDescriptor support in relying-party groups.
new 107637d99 Add metadata source to filtering context and to group policy rule.
new ede122c61 Replace pseudo-deprecation warning for sourceAttributeID.
new f6adeddf8 No need to propagate "need" for sourceAttributeID into base class.
new 4ffb58b2a Bit of log cleanup.
new caf7f9bca JPAR-90 - Add ReturnCount maxForVoid to checkstyle.xml
new 45822694c Fix a test which was still using junit
new d7e03e98f IDP-1170 - REST DataConnector
new 8e35d333c IDP-1170 - REST DataConnector
new fe8a5c871 IDP-1170 - REST DataConnector
new f6afb3669 IDP-692 Introduce SimpleManagedConnection
new d71523bfd IDP-692 Add parser for DBCP based SimpleManagedConnection
new 1b16d9bd5 IDP-1170 - REST DataConnector
new e2f967250 IDP-1170 - REST DataConnector
new 0557af4ca IDP-1170 - REST DataConnector
new 97182a22e Fix test (in correct project this time)
new 0f0def818 IDP-1170 - REST DataConnector
new 5d7a9a522 IDP-1170 - REST DataConnector
new a3e32c6a3 Fix test path in size limit test.
new 819f279b4 IDP-1208 - Make cache key optional/conditional on DataConnector searches
new 104d00813 IDP-1170 - REST DataConnector
new b0c547418 IDP-1170 - REST DataConnector
new e6fac9a68 Correct class description.
new 1013bdfff Update list of deprecated properties.
new 317201d57 Deprecate initial-authn flow.
new c161b16b9 Deprecate FilterFlowsByAttribute action.
new 035d370e1 Deprecate JVM trust in LDAP connector.
new 5460ba40f IDP-1196 Add authCert=, authKey= and authKeyPassword= to LDAP connector
new 0e5da0441 Roll back warning since it fires on non-TLS configs.
new 5b212f385 JPAR-96 - switch to new Java 7 parent
new 6b1e39471 IDP-1172 Deprecate the security: namespace
new 69148dc2a IDP-1207 - donotcache ignored on forceauthn
new f716a2102 IDP-1207 - donotcache ignored on forceauthn
new 3db09d243 IDP-1214 - Timestamp doesn't have configurable date handling
new 2c979aa31 IDP-1215 - Revocation and iterative seeds in pairwise ID generation
new 5d59044ab Revert accidental change.
new 25aa1cf09 IDP-1209 warn on jvm trust
new 0a53fc512 Merge from maint-3.3
new 686bd7ac8 IDP-1188 - Update the Duo 2fa plugin to use the latest WebSDK
new 60ee11ffd IDP-1223 - IdPv3 defaults to insecure cookies
new 56c3ff9ae Remove duplicate variable from view scope.
new 240452661 IDP-1211 - Interceptor for controlled impersonation to services
new 1b9071076 IDP-1211 - Interceptor for controlled impersonation to services
new 465e2ed54 IDP-1211 - Interceptor for controlled impersonation to services
new 667dde18a JPAR-99 - change from deprecated assembly plugin goal
new 58a807186 Javadoc warning fixes.
new 5b3fb9827 IDP-1229 - Add Scoping/RequesterID chains into various IdP features
new 4d4edab9c Accidentally checked in example without null return value.
new 281cf62a2 Fix javadoc.
new 266a82040 IDP-1229 - Add Scoping/RequesterID chains into various IdP features
new 8b2a7d998 Deprecate AuthenticationMethod simplification during filtering.
new 2c12d876e IDP-1231 - RelyingPartyMetadataProvider logs a null ID
new aa476793c Fix dependencies
new 2b07285cc Javadoc fixes
new 1fd0b8262 JSPT-76 - centralise detection of Java runtime version
new 0120236c9 JSPT-76 - centralise detection of Java runtime version
new d06350595 JPAR-99 - get tests to work under Java 9 runtime
new f0d54bb27 Use our matchKeyPair method.
new 36140f9bc Return NO_PASSIVE event in more cases.
new 8dce89dac Remove seemingly-superfluous parent paths from bean imports.
new 58d03326f IDP-1242 - Flow bean import issues when defining child flows externally
new b3dfbce97 Add a missing event ID.
new 6be176cf1 Add customObject hook to templates.
new 3ffcbfda4 Add customObjectRef wiring to URL/BodyTemplate elements.
new a2bef69b7 Defensive change against PRC type cast.
new 2abf7714e New "public" HttpClientBuilder classes.
new 1ef6e6dd1 Move builders into a dedicated package, not Spring specific.
new 2907caf11 Add pkginfo.
new 38f8db42e Switch tests to use HttpClientBuilder instead of FactoryBean.
new 2c83daf56 Convert empty mvc-beans file into a conditional import.
new 276c0ac8b Inject ConditionalResourceResolver into the ResourceLoader added.
new 5832626fd IDP-1243 - Deprecate HTTPMetadataProvider type
new aaf1aa8b2 IDP-1234 - Control Java servlet container session tracking
new 3f4d367c0 Partially revert IDP-1234 change for now, due to tests.
new d3f449ea5 Revert further.
new cea7954ae Fully revert.
new 1164c83b5 IDP-1234 - Control Java servlet container session tracking
new 047f9dfcc Fix logging argument syntax.
new 4bd2251fd IDP-1252 - Account lockout manager needs documented means of management
new 2d4a318bb IDP-1255 - Get IP address into the process log by default
new 9646e1d6b Add missing doc for attributeDisplayDescriptionFunction
new 202a593fd JPAR-106 - address Java 9 constructor deprecations
new 19bea6a0b JPAR-101 - Eclipse and Checkstyle 8.1+ compatibility issues
new 9e82dd86c Checkstyle fixes
new 15d7309c4 JPAR-114 - migrate from xmlunit 1.6 to xmlunit 2.x
new f96d90061 Add true/false condition beans.
new 65af4445b IDP-942 - idp startup fails when no idp.sealer properties defined
new c1959a141 IDP-1154 - Update MFA example script to populate attributeRecipientId
new bc2589ec4 IDP-1183 - Logout propagation master flow doesn't expose PRC
new 00d0afd60 IDP-1205 - Ship metrics-jvm JAR in webapp
new 38fcfa892 IDP-1210 - Insulate public joda-time references.
new e78a07aa7 Expose objectStrategy setter.
new 85de086f8 IDP-1271 - Admin flow for metadata queries
new d5cb77754 IDP-1206 - Clarify javadoc.
new 5f7b27626 IDP-1256 - Add audit field indicating whether encryption was used
new 0a1e50722 Missing compile dependency.
new 5ebb8bc7c IdP-1206 AttributeResolver: Optional filtering of null values after resolution
new 9b83c0217 IdP-1206 IdPAttribute: Don't silently filter null values
new bd719f4dd IdP-1206 Resolver Config: Optional filtering of null values after resolution
new 54aecc3d3 IdP-1206 Config: property control of stripping nulls from resolver attributes
new 7a0ad406d IDP-1190 idp-gui: Guard against malformed mdui input
new ead77406d IDP-1233 Try to differentiate between Front and Back Channel certs
new e33a94a63 IDP-1269 Update cryptacular with PRNG fix.
new 6b76f6dc9 IDP-1279 use getDisplayName when outputting JSON from resolvertest
new 011c6db7c Remove ia64 service and setup from the Installer
new 68f5f1acf IDP-1175 Setup sensible searchFilter for AD
new ddf45a33a IDP-1176 IDP-1123 Clean Dialog and align Entity ID with non Windows
new 7a3f32832 IDP-1244 Clarify some deprecations
new b84f04543 IDP-1047 Add @ParameterName annotations as indicated by the logging
new 2bfc5c9e7 IDP-1269 - Update cryptacular in parent POM
new 0384f1045 IDP-1244 Clean up Derecation warning.
new dfc848dcb Fix Maven site URLs
new e9267f90b CAS-1283 Derive CAS principal from SubjectContext.
new 10337c567 IDP-1047 Add @ParameterName Annotation to a test class.
new 3928ce315 IDP-1300 Move all the java-installer code into impl
new 901ce91ee IDP-1299 Name Replacement Property rewriter
new c785e1d1b IDP-1299 Name Replacement Property rewriter
new 9b9fb369a IDP-1110 Support for Jetty 9.4: property name rewriting
new e5e22b694 IDP-1300 Move all the java-installer code into impl
new 837332c48 IDP-1253 test for unsafe password saving.
new 83d4d88e8 IDP-1265 Conform CAS ticket IDs to protocol spec.
new 03c81f2e3 IDP-1161 Conform CAS service comparator config.
new 302a2f7f8 IDP-1150 Set default PGT period in constructor.
new 7f920f501 IDP-1217 Support the RequestedAttributes Extension
new cbfbd4c24 IDP-701 First pass at SAML metadata for CAS.
new a5365cef9 IDP-1217 Preliminary review
new 2bc5501ca IDP-701 Signing certificates imply CAS proxy authz.
new 7c741782b IDP-1217 Move SAML function down to OpenSAML
new dbf0e0327 IDP-1217 More review comments
new b90991490 IDP-701 Use CAS-specific endpoint binding URIs.
new 077dad07c IDP-701 Use attribute authority for CAS proxy.
new 438ecc443 IDP-1303 Clean example by providing a list where required
new d657d7c86 IDP-1257 The SVNResource is deprecated.
new 421e0aaae IDP-701 CAS metadata changes based on code review.
new ac826f537 IDP-701 Add configuration points for CAS metadata indices.
new 6cd098c11 IDP-1189 Set default key size to be 3072
new 58318eb5b IDP-1189 Document new idp.keysize property
new da870ba97 IDP-994 Stop the shibd_idp service during update an uninstall
new 1d5fd8aaa IDP-1090 remove unused file copies
new cd0557bab IDP-1213 Move Consent and ConsentContext classes to api
new 1d229f853 IDP-1213 Move AttributeReleaseContext class to api
new edfca4a04 IDP-1116 Fix runclass.bat
new 6361d724c CheckStyle
new 438f2c73c IDP-1047 At use of the @ParameterName annotation
new 2b6570330 IDP-1314 Migrate SpringExpressionContextLookupFunction to ue base class.
new 0c7460199 Do not add whitespace after the '=' when writing properties
new 1c72b97f0 IDP-1312 - mdqueryFlow cannot find shibboleth.MetadataLookup.Protocol
new 5e497a1f4 IDP-1297 - Missing qualifiers in LogoutRequest result in mismatch
new 4ee1779c0 IDP-1197 - x509-prompt.jsp links to SHIB2 document
new 8255db091 IDP-1275 - Deferred decryption of private key
new a6ce06113 IDP-1275 - Deferred decryption of private key
new 9ca6eb898 Override Spring context class to fix failing tests.
new 138d740f0 IDP-1275 - Deferred decryption of private key
new e8431fba7 Add more general admin flow audit logging in parent flow.
new 340dad2b1 Add contrived example to test customPObjectRef in the ScriptedPredicate
new a43a06683 Turn up logging to help diagnose test failure
new 9bd9189a1 Make custom script javascript language insensitive. Also revert previous change made for debugging purposes.
new 338cdcc0c Revert test - it's harder to make JVM independant than its worth
new 66942baa2 Turn test back on again (again).
new c9ba86335 OSJ-234: Reset next dynamic metadata refresh when entity is unchanged
new dca4b4076 OSJ-234: Reset next dynamic metadata refresh when entity is unchanged
new f443ca245 IDP-1239 - Non-browser support for Duo authentication
new a0beaa8f4 IDP-1239 - Non-browser support for Duo authentication
new ff32ed71d Fix log message.
new e9c230310 IDP-1239 - Non-browser support for Duo authentication
new 8ecf0bf44 Log tweak.
new 4886827dd Add a default account lockout mapping.
new b6c6bef5f Convert subject lookups to rely on protected method.
new 4845f544c IDP-1239 - Non-browser support for Duo authentication
new 0f032acad Add explicit trusted name support to StaticPKIX factory bean.
new bb1b9b724 IDP-1239 - Non-browser support for Duo authentication
new c0125f274 Add AccountError/AccountLocked as legal authn events.
new 66f68794c Remove unused property.
new e6e4deb80 Update comments in Duo config file.
new dbbeea3ab Add an ID to AccessControlService bean for logging.
new fca608c2e IDP-1211 - Interceptor for controlled impersonation to services
new a28b387e1 IDP-1314 named beans for Scripted and Spring EL Functions
new 901a0439a IDP-1211 - Interceptor for controlled impersonation to services
new 4f954262a Advanced attribute predicate that computes candidate values.
new 9d6844c62 Guard setters with init check.
new 7a09dc4f4 IDP-680 - Deprecate Dependency
new 81ef13f4d IDP-1199 - Servlet filter for X509 flow behind proxy
new b70026c79 IDP-1315 relyingparties="" attribute as short cut activationCondition
new 61c764322 IDP-1155 - Options for SSL checking bypass in command line tools
new 614387599 IDP-1117 - Support for AuthenticatingAuthority
new 1b0b0c800 IDP-1322 use attribute short cut for LDAP DataConnector TLS Cert
new 8b8c02ff1 IDP-1322 Remove sec: namespace from the attribute resolver full example
new 8b966a583 IDP-1117 - Support for AuthenticatingAuthority
new cfe9f21f5 IDP-1322 use trustFile= short cut for LDAP DataConnector TLS TrustCert
new 145a4a0df IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
new d66e51538 IDP-1276 - Voluntary acr OIDC feature
new bd2880fc6 Early injection of Santuario linebreak property.
new e2831e533 IDP-1277 - Maximum Authentication Age
new b91f3c0ba IDP-1277 - Maximum Authentication Age
new d16ca2055 Handle login error events a bit more generally.
new fc93a2a0e IDP-1103 - Configurable event signaling during password validation
new 38b7617f3 Revert "Handle login error events a bit more generally."
new 6da12ebbc IDP-1302 - Logout flow resolving encryption keys too aggressively
new b46fad1b3 IDP-1220 - Update jQuery version used by logout
new 993a5b690 IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
new 28f5db68a IDP-1316 - Cannot remove values on LocalStorage
new 12c6a3e1e IDP-1110 Jetty9.4 Installation support
new 2c5c65188 IDP-1110 Jetty9.4 Installation support
new 4e91c2f10 OSJ-248 - remove NameIDFormat elements from metadata
new 1850ece08 IDP-1266 - RFE to deployer-constructed RequestedPrincipalContext
new 1ca59fbe3 IDP-1110 - handle changed property names
new b357593aa Tighten up build of idp installer
new a6fb85ae6 IDP-974 - shell usage
new 94d5941cf IDP-974 - shell usage
new d9dd8a5e1 IDP-1124 - Function-driven login flow
new 979bb3847 IDP-1180 - MessageReplay Storage Failures
new ef8f345e0 IDP-999 Deprecate methods
new 1e14ee497 IDP-1322 Align attribute resolver files
new 8b3d96031 IDP-987 Add explanation about default behavior
new 3bc2b14fa IDP-1218 - Different storage key bases for consent flows
new 628a01c23 Pull rarely used audit beans from default file.
new 6bd50f0bc Beans need to be non-abstract.
new 12c301602 IDP-1200 - Logout templates lacking rpUIContext for initiating SP
new eb41cc9e7 IDP-1318 - Provide way to set forceAuthn on an RP from the IdP side
new 8a4a1922a Missed a couple of default inits.
new 20a2658a7 IDP-1324 Store CAS tickets in session context.
new 4574ff4ae Fix a couple of erroneous imports in test classes, related to OSJ-212.
new 7f67f0f06 IDP-1203: Introduce use of OpenSAML BOM to IdP dependency management
new 323e00ba3 More servlet filter mapping adjustments.
new 1067e1cc5 Yank unused static connector.
new 9ba7dc8c0 IDP-1327 - Add missing setting to schema/parser for ComputedId connector
new f3cf6bc3a Example policy honoring subject-id:req tag.
new 2b03bcdc5 IDP-1306 - Add new SAML pairwise and subject ids to attribute-resolver-full.xml
new 18e6577bf Adding a bit of useful tagging for testing.
new 86fe2762a OSJ-238: Internal ParserPool built by Decrypter
new 8c4417deb OSJ-1203: Introduce use of OpenSAML BOM to IdP dependency management
new 62d22def8 IDP-1327 Do full deprecation of sourceAttributeId for ComputedIds
new f43258524 IDP-680 Change how attribute names are specified
new 5b2822e41 IDP-680 marke getSourceAttributeId as deprecated
new 9c2a69a19 IDP-1328 Deprecate IdPAttribute names with spaces in them.
new 9e2de2310 IDP-1328 Deprecate IdPAttribute names with non printing chars.
new 385e4c14a Remove a redundant line.
new d6ac03dc4 Pull now-optional sourceAttributeID.
new 80a3007e7 IDP-1331 - Support relying party groups in attribute resolver
new b78b9f434 IDP-1331 - Support relying party groups in attribute resolver/filter
new b99e5804e Raise logging of suppressed, non-result-size errors.
new 3f85cd5bc IDP-1328 Use simpler regexp..
new 22a1c25f4 IDP-680 partial revert of f43258524cd3
new 04a6cc3b8 IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
new 1288c0dc4 IDP-1330 All Filter tests in new namespace
new 84896b90a Remove empty override of method.
new f38a435ec Fix some case-mismatches in Duo bean names.
new a8f5a35a5 Remove more empty collection placeholders.
new 587cad2f7 Fix a Spring ordering problem in tests.
new d3ad8a0f4 OSJ-218: Replace deprecated URL encoder in TemplateRequestURLBuilder
new cfc5d67a7 IDP-1332: Default LocalDynamicMetadataProviderParser to check modify...
new f10d791b2 OSJ-237: Support refreshing API on dynamic metadata plugins
new 47f9c0e36 Minor logging changes.
new 3394fa965 IDP-1306 - Add the new SAML identifiers to attribute-resolver-full.xml
new 1b7ca3aea IDP-1274 - "illegal reflective access" under Java 9, 10
new 28c48c87f IDP-1274 - "illegal reflective access" under Java 9, 10
new b5e45d7d0 IDP-1306 - Add SAML pairwise and subject ids to attribute-resolver-full.xml
new e9e80bb07 Relax subject-id tag to avoid enforcement error.
new e6e83de78 IDP-1306 - Add SAML pairwise and subject ids
new 0f7251372 IDP-1323 - Return NoPassive for attribute query without consent
new 87d0faa71 Add beans and property for AES-GCM encryption.
new a2c5dcf42 Fix metadata-driven bean lookup to use enclosing Spring context.
new a9e8a35f3 IDP-644 Use SAML metadata as source of CAS proxy trust.
new cd248b00f Set Eclipse classpath test bit for test folders.
new 6882b017e IDP-1335 - Add example attribute filter rules for tag-based release
new 0bd7e61b0 IDP-465 - WIP attribute query consent subflow
new 1463decd9 Add new RPC resolver which operates on CriteriaSet and delegates.
new f08c00be8 Work on wiring SAML 2 artifact decoder.
new ff930dce3 Work on SAML 2 artifact decoder SOAP client pipeline and wiring.
new 246131884 More SOAP client wiring.
new b5035b582 SOAP client wiring updates for SAML role and protocol handler changes.
new 83fd7d6ba Checkstyle.
new eecc855ae SAML artifact consumer profile config and SOAP pipeline usage thereof.
new 454ac4cae SOAP client wiring tweaks.
new f8a65b915 IDP-1334 Stop using "Webapp" as staging area for build.
new 5f2dc2f47 Tweak wiring in soap-client.xml.
new e4d2b8268 IDP-465 - Handle upgrades without condition trigger
new 476151cfc Remove an unneeded ProfileRequestContext dependency.
new e4edd1a65 Generalize metadata config lookups to avoid dependency on PRC.
new a5cd0692f A stab at wiring up inbound artifact property lookups.
new 532956b39 Enhance criteria RPC resolver to support metadata tags and groups
new 3aac7036a Yank a rarely used property example.
new e4a329574 IDP-1338 - More control over session cache address binding
new 720c0d461 Fix some trailing whitespace and indentation
new 3fff7bc38 Add property to shorten audited binding URIs.
new c8df6a6d7 IDP-1315 - Adding a relyingPartyID="" attribute to custom Syntaxes
new 278640bbc IDP-1315 - Add relyingPartyID="" attribute to custom Syntaxes
new a94ac73a3 IDP-465 - Cleanup
new be8b735bf IDP-1157 - Expose ToU message code suffix property
new d538fb609 Implement message channel security support for SOAP client case
new 8c4a3bc40 Wire default client TLS credential for HttpClient security config
new dfb575d48 SWF config and bean wiring for inbound SAML 2 SLO over artifact binding
new e797cc6a9 Wire soap-client.xml for SAML inResponseTo validation.
new 293cbf735 Add declared opensaml-messaging-api dependency
new 182c2f83a IDP-465 - Add consent subflow to SAML 1 attribute query
new 30a5019e1 IDP-1323 - Return NoPassive for ToU without consent
new 0d2f21aa5 Missing package-info file.
new ee912a1b7 Finish wiring of artifact consumer predicates.
new 1970d5d43 Fix LocalDynamic- parser for change to source manager interface.
new 0681a91c9 Dynamically map SOAP client pipeline predicates.
new 9474a6cca Default to skipping AffiliationDescriptor checking, option to enable.
new 1604dd587 Fix schema docs to align with property change.
new 0d9bc4852 OSJ-249: Enhance FilesystemLoadSaveManager to check file last ...
new 8e34ff6d2 Parallel lookup function for SAMLMetadataContext via MessageContext
new ae9bc80b3 JPAR-113 - establish Automatic-Module-Name
new c093808b9 Finalize wiring and defaults for MessageContext case.
new 32dcb5d0f Get rid of remaining non-default wiring.
new 1c1d0c8d7 Enable artifact indexing for testbed metadata.
new e006c2916 OSJ-181: Enhance dynamic metadata resolvers to support non-entityID criteria
new b87fceaad IDP-1286: Support expirationWarningThreshold in dynamic resolvers
new ca556552a IDP-1287: Deprecate the HTTP Caching Attributes
new e84f9564b Add some metadata-related bean defs for impl classes.
new 71edef6e8 Expose propagateResolutionExceptions flag to custom syntax.
new 284d45f97 Revert subject-id error handling action/wiring.
new f1b1fae51 Missing package-info.
new ad2324c91 Fix artifactConfiguration property handling and wire up tag lookup.
new 1d15fc424 Get Installer versions ready for V2.4 release
new 07e178bd4 Lock parent version for new minor release
new 3e3181190 Update files to be tagged for release
new a83caf91d Bump version after release
new c1463a1e3 IDP-1344 Implement delegated methods from BaseContext
new 03735d9b7 IDP-1347 Move deprecation warning from <DenyValueRule>
new 56896c5af IDP-1348 Restrict conditions when security name space warns.
new e464abd6b IDP-1330 Move AttributeDefinition tests to new namespace
new aaa05bb86 IDP-1330 Move mapped AttributeDefinition tests to new namespace
new 5e9309601 IDP-1330 Move Encoder tests to new namespace
new dbe928cf9 IDP-1330 Move LDAP DataConnector tests to new namespace
new c2581f447 IDP-1330 Move RDBMS DataConnector tests to new namespace
new d72c0b3a8 IDP-1330 Remove old namespace from most StoredDataConnector tests
new 681f57be7 Fix overeager file move
new c1852e412 Fix harmless typo.
new 7d35461eb Rev Installer for 3.4.1
new 388ff2c3c IDP-1350 - IdP fails to initialize on certain property values
new dd2292b76 Merge branch 'master' of git at git.shibboleth.net:java-identity-provider
new 17a9d00ac IDP-1353 - Display organizationDisplayName instead of organizationName
new 4a41e1e6f IDP-1353 - Revert to displaying organizationName
new 15950464d IDP-1354 Fix CAS proxy ServiceContext lookup.
new 143771be2 Update files to be tagged for release
new 92a9cecbf Bump version after release
new d039aceca Improve CAS proxy flow test.
new f0616d80e IDP-1356 - branch for IdP version 4
new 40b918f69 Bump IdP to V8 parent POM, Spring 5 updates, remove SVN support.
new 0c0218714 Temporarily disable failing CAS test.
new b9c621053 IDP-1359 sourceAttributeID is *not* required for StoredID
new 533190203 Attempt to fix failing CAS test
new 8d4824407 IDP-1361 Flag c14n/LegacyPrincipalConnector as deprecated
new 02b80f1be IDP-1361 javadoc for previous
new aa717134d IDP-964 - Support SAML logout propagation via SOAP
new 752968c6d IDP-1362 - Allow Template attribute to handle missing attributes
new baefd256a Remove SVN tests resources
new f7e837fd3 IDP-1364 Fix JNDIConnectionPropertyHandle handling.
new 2601e7592 IDP-1364 Deprecate JNDIConnectionPropertyHandle element
new b3376ed92 Checkstyle warnings.
new 47eae9438 Remove inaccurate javadoc comment.
new e9086e730 Remove use of old style dependencies from tests
new 104d94a8f IDP-1361 Deprecate <SourceAttributes> for TemplateAttrDef
new 598ba7251 IDP-1361 Deprecate PrincipalAuthenticationMethod Attribute Defn
new 3ede2c2c6 CheckStyle
new 1733e1cf2 Remove more SVN testfiles
new 359c4f1db Remove mostly never used from helper function.
new c6493cd06 CheckStyle
new abb639634 Remove more deprecated structures from tests
new 096688a22 De-duplicate audit field values by switching multimap impl.
new c03a4f3d3 Merge branch 'master' of git at git.shibboleth.net:java-identity-provider
new ba1c5a259 IDP-964 - Support SAML logout propagation via SOAP
new 384455151 Javadoc fixes for CAS protocol components.
new 63c436fda JPAR-115 - Javadoc fixes for Java 9,10
new 299769cf0 IDP-1330 Remove more needless use of old namespaces from test files
new d9d05f381 IDP-1163 - Flow expression failing on exit from login form
new 3a870ea2a Switch shipped local storage and session defaults.
new 16f44632b IDP-1127 - Improve logout user feedback and ease CSS design
new a79b0454e IDP-1361 Deprecate <Resource> as a child of ResourceBackedMetadata Provider
new 17bb31430 IDP-1361 Modify tests to exercise all SourceAttribute waring paths
new 2e71665ab IDP-1361 Fix boug in Source Attribute Warning function.
new 889531cbb IDP-1361 Deprecation warning on V2-only Trust Engine types
new 0009f50bb Add GCM warning in comment.
new cce3f4a40 Check for null role, which this action technically allows.
new d7e4e8cc8 IDP-1365 - rpUIContext not populated from CAS metadata
new 8f6466d86 IDP-1371 Conform CAS proxy HttpClient machinery.
new 4b1d1d439 IDP-1371 Address code review feedback.
new d96c0f2d0 IDP-1380 Move test source files overto new CA root
new 77ed3ab4e Supress test while I work out how to fix
new 271b10a37 IDP-1371 Add trusted names criteria.
new 62d820df2 IDP-1380 Move repository sources to test.shibboleth.net
new 7ce5d9219 IDP-1363: InlineMetadataProvider should support indexesRef ...
new 38f866e83 IDP-1363: InlineMetadataProvider should support indexesRef ...
new 1a45cb8fa IDP-929 - Extend logout behavioral options
new 64950bc13 IDP-1383 - SourceAttribute warning appears regardless of presence
new 4b49e67c7 IDP-1373 - commons-logging is still sneaking into the IdP WAR
new ad39ab1ed IDP-1386 Add a canary test.
new 14a6a25e2 IDP-1386 If specified we need to listen to the Source Attributes
new bb707baef IDP-1319 - Reduce redundant stack traces in log
new 94d32ff77 Remove jcl bridge dependency from distribution.
new 7bea9bbce IDP-1387 - Config-based ForceAuthn enhancement broke renew flag for CAS
new a31e5de5e IDP-1121 Refactor test code away from old style dependencies.
new 5de663be5 IDP-1390 - Service layer for exposing FlowDescriptor beans
new 6bcec4042 IDP-1397 - Removal of deprecated features
new 997d1a8bf Remove deleted file.
new 08ea064b9 Checkstyle.
new 82df60db7 Checkstyle.
new 2b6e94757 IDP-1397 - Removal of deprecated features
new 4983f946e IDP-1398: Servlet filter mappings missing inbound SAML 2 artifact ...
new 7e8436c57 IDP-1389 Handle mapping to null and empty strings
new e8f43c274 Removal of IdentifiableComponent from component subclasses.
new a07ea60f2 Route "weighted" Principal determination through flow descriptors.
new 1c2035630 Fix failing tests.
new e5769a3db No longer needed, package was removed prior to commit.
new c17b06bb7 Adjust base class of flow descriptor.
new 59fb22f19 Checkstyle.
new 126a5266a Remove irrelevant test.
new 6b79cf375 Shorten conditional expression.
new 1569d65ba Parent bean reorg.
new 9fed17e75 IDP-1390 - Service layer for FlowDescriptor beans
new b29cf2bf0 Compensate for code that was overwriting ResourceLoader.
new 8f38ce812 Add additional services to metrics and status page.
new 9af083e4b Move off deprecated SWF adapter class.
new a9c553770 IDP-1401 - Change to unboundid as default ldaptive LDAP provider
new 00f88b379 IDP-1401 - Change to unboundid as default ldaptive LDAP provider
new fd7d2327e IDP-1404 - SPNEGO typo in sample pattern
new 06f4c9028 IDP-1401 - Change to unboundid as default ldaptive LDAP provider
new 2ae72e60b JPAR-128 - Upgrade Velocity to 2.0
new 84669394d JPAR-128 - Upgrade Velocity to 2.0
new b5fe181ec Take out removed Velocity bean property, and trim some test logging.
new a51e6098c Fix test in light of newer Velocity behavior.
new 0f8875570 JPAR-128 - Upgrade Velocity to 2.0
new 79932e002 Noticed a redundant method call in test.
new 7fce7fa0f Fix annotation.
new 75ba80088 IDP-1411 Deprecation warning for Mapped attributes
new 482c58a15 IDP-1408 Remove deprecated encoders from generic test
new 27d1abdd0 IDP-1408 Stop relying on legacy NameID Encoders to prime C14N tests
new 323af0602 IDP-1412 - port to Java 11 platform
new cc2251dc1 IDP-1412 - update Eclipse settings for Java 11
new 5065b131a IDP-1405 - Remove use of Guava Function/Predicate interfaces
new b4423a675 IDP-1121 Remove Principal Connectors - Parsing and XML
new 21bd71d24 IDP-1121 Remove Principal Connectors. Implementation and tests
new d4cea9dc3 IDP-1121 Remove Principal Connectors. Implementation and tests
new df7e49ec1 IDP-1121 Remove enc: namespace
new 90e22f2a1 IDP-1121 Remove ad: namespace
new 5633e7a76 IDP-1121 Remove dc: namespace
new 7cc846db7 IDP-1121 Final schema tweaks after namespace removal
new fef42f880 IDP-1121 Remove basic: and saml: namespace from attribute filtering
new 96c80ce36 Remove use of old style getAttributeValueAsList
new 65a89b28b IDP-1121 Remove Policy and Attribute rule references
new f15b02229 IDP-1121 Remove the AbstractWarningFilterParser
new edbe2cb35 IDP-1121 Remove AuthenticationMethod filters
new 2f2229f7e IDP-1121 Move (filter) test xml files to their correct locations
new cb093bf5b IDP-1121 Remove the AbstractWarningAttributeDefinitionParser
new cf79fa52f IDP-1121 Remove misplaced (impl) AbstractDataConnectorParser
new ea14041b3 IDP-1121 Remove the AbstractWarningDataConnectorParser
new b9b74c657 IDP-1121 Remove warning encoder parsers
new 2557ca90a IDP-1121 Remove V2 metadata trust engines from security schema
new a1d7412c0 IDP-1375 Remove rules and other Non V3 config from sec: namespace
new 71e358f0a IDP-1121 Remove V2 relying party configuration
new 2cf20b421 IDP-1121 Disallow attribute names with spaces
new b2aa7d191 IDP-1121 Remove the explicit <SourceAttributes> from the <InputDataConnector>
new 843f5d4e8 IDP-1121 Remove <Dependency> from the schema
new dec3454d4 IDP-1121 Remove concrete uses of ResolverPluginDependency.
new 643f4df84 IDP-1121 Remove deprecated method from PluginDependencySupport
new 03e296c48 IDP-1121 Make AttributeDependencies and DataConnector dependencies different
new 52cc06bf4 Rationalize test helper method names
new 60331c875 Add hashCode and equals to ResolverDataConnectorDependency
new 179121d1b Bogus import
new 015bc595f Add hascode and equals tests
new 532e0699f IDP-1121 Separate AttributeDependencies from old dependency class
new 78765fc72 IDP-1121 ResolverPluginDependency is no more
new 51885e9da IDP-1121 sourceAttributeID is no more for attributes.
new 80f651558 IDP-1121 sourceAttributeID is no more
new 75125da18 IDP-1397 Collapse DataConnectorEx back into DataConnector
new 0c41ffa70 IDP-1121 stop supplying the workContext to the Scripted Resolver plugins
new c1796e533 IDP-1121 Remove Deprecated Constructors from LDAP support classes
new d608957fa IDP-1121 Remove Deprecated Constructors from RDBMS support classes
new 06ce29104 IDP-1121 Replace Deprecated getAttributeValueAsManagedList
new c908f2b84 CheckStyle
new fcb2a8435 IDP-1121 Replace spurious check and warning
new fe6a593f9 IDP-1409 Remove PrinciaplAuthenticationMethod from attribute filter context
new e18c72910 IDP-1409 Remove PrincipalAuthenticationMethod Attribute Name parsing
new 8aa6cae74 IDP-1409 Remove PrincipalAuthenticationMethod Attribute definition from Schema
new 356f627f5 IDP-1409 Remove PrincipalAuthenticationMethod Attribute Definition
new fd1a5a759 IDP-1409 Remove PrincipalAuthenticationMethod from the AttributeResolutionContext
new 3370cd320 IDP-1121 Remove unused deprecation helper methods.
new d649d8301 IDP-1408 Remove old and deprecated NameID/NameIdentifier 'encoders'
new feb598ce8 IDP-1408 Remove deprecated 'encoders' from schema
new 00ea231e8 IDP-1408 Make Legacy Generators minimal implementations
new 504b7b6e2 IDP-1408 Remove deprecated encoder implementations
new 28aa96598 IDP-1408 - Unpick NameID Encoders and beyond
new 55bd2d238 IDP-1413 - Clean up StoredID support classes/interfaces/beans
new c2f514eb2 Move TransientID-supporting class out of API.
new 96fa3ece1 IDP-1121 - V4 Deprecation work - Attribute Resolver
new d2c30c93a IDP-1121 - V4 Deprecation work - Attribute Resolver
new 433688487 Disable tests that misused removed plugins for now.
new 6f713cf9e IDP-1121 - V4 Deprecation work - Attribute Resolver
new 447e5a8d5 IDP-1415 - Attaching SPProvidedID to NameID uses wrong SQL statement
new 7ed31cd3b IDP-1121 Deprecated the V2 style scripted attributes.
new f444e162a Bump up warning on invalid date.
new 37ae45327 IDP-1121 More deprecation of V2 support.
new 470c9fc65 IDP-1121 Rempve parsing of non available attributes
new c1203d8f0 IDP-1121 Remove cacheResults and elementTimeToLive from <ResultCache>
new 3f5e50652 IDP-1121 Remove warning on removed attribute "queryUsesStoredProcedure"
new 85e0b63f8 IDP-1121 Explicitly deprecate "native" configuration of ScriptedDataConnectors
new 4d8dca571 IDP-1121 <ApplicationManagedConnection> is no more
new 6ccc68b11 CheckStyle: replace deprecated clazz.newInstance()
new 2169176e9 Checkstye: imports
new 3b13af423 CheckStyle: Deprecated Predicate method and imports
new 565c672b9 Checkstyle: supress unlikely-arg-type in equality testing
new d792a7dbe Checkstyle: More tests changed to use #test() not #apply()
new c5fc22873 Checkstyle found bug in taglibs
new bd7b8c32c Update idp-parent POM template.
new cb727a9cc IDP-1413 - Clean up StoredID support classes/interfaces/beans
new 8ae2ffbd6 IDP-1413 - Clean up StoredID support classes/interfaces/beans
new d49e7ffd6 Remove legacy RP file from test tree.
new e9d800d08 Add an embedded DB data source for pairwise ID testing.
new 34e4d9c66 IDP-1037 - Remove deprecated /META-INF/net.shibboleth.idp/config.xml
new 5da455260 OSJ-256 - Add final to all BaseContext/etc. classes
new 593bcb334 Missed a couple of finals.
new 43a52f60c Rebase this class to avoid extra dummy methods.
new da8436706 Reword outdated comment
new 65e266d13 IDP-1343, IDP-1121 Remove ApplicationManagedConnection from attribute-seolver-full.xml
new f67ea51ec Fix Javadoc nit.
new 91aa6fa5a IDP-1423 Remove the explicit Chaining of filters.
new 4af0db764 Strip out very old test support for SVN
new 34d6abded IDP-1423 Stop using deprecated HTTPmetadataProvider in https tests
new 89af1fa44 IDP-1423 Stop using deprecated constructor in HTTPResource Test
new bbb48ae1a IDP-1423 Strip out the no longer used "urn:mace:shibboleth:2.0:resource" namespace
new 889afabc0 IDP-1423 Remove Deprecated HTTPmetadataProvider.
new f67eac68c IDP-1425 - Default property name in duo.properties comment is wrong
new 9a0977778 IDP-693 ValidUntilFilter changes
new 1c29dff7f Stop using deprecated syntextr in test
new 385c91ad5 IDP-1423 Remove deprecated configuration of ResourceBackedMetadataProvider
new a426736eb checkstyle
new 232f0f242 IDP-1423 Remove deprecated ExtensionSchema from SchemaValidation metadata filter
new b8a8b0afd IDP-1423 Remove deprecated "standalong" trust engines
new b2c421cf6 JSPT-79 - Review date and time handling for Java 8
new 6842adbd5 Fix status page with Java types.
new 68fe78cf6 IDP-1423 Remove deprecated attribute disregardSslCertificate
new e49cb3900 IDP-1423 Remove deprecated attribute 'maintainExpiredMetadata'
new f9c090c46 IDP-1423 Remove deprecated attribute 'cacheDuration'
new 9307d475f IDP-1423 Remove deprecated attribute 'requestTimeout'
new f60a1d995 Stop using deprecated syntax in test
new 9fb493526 IDP-1423 Remove deprecated attributes around HTTP caching
new 087b54f16 IDP-1423 Remove more deprecated attributes.
new d96b03a28 IDP-1423 Remove deprecated attribute requireSignedMetadata from SignatureValidation
new 63c4d6e5d IDP-1375 <sec:TrustEngine> is allowed to be a child of<metadata:TLSTrustEngine>
new 00c698edf IDP-1423 Remove deprecated basicAuth from HTTP MetadataProviders
new 90a841f7c IDP-1423 Subsumes tests for HTTPMetadataProvideParser into FileBacked....
new 5c30d6eb6 Move failing Windows tests to unboundid LDAP provider.
new d17930ee4 JSPT-33 - Refactor HttpClient builders and factory beans
new 7a1122c49 Remove Eclipse project nature associated with obsolete Spring Tool Suite V3
new 6202bd0dc JPAR-133 - Update Mockito for Java 11
new 12401abf5 JPAR-133 - Fix Mockito deprecations from Mockito v2
new 82a6f3b87 JSPT-79 - Review date and time handling for Java 8
new b3796a60e Add duration converter to failing tests.
new 4d6895483 Remove git conflict markers mistakenly committed by someone
new 0341eb5b5 JSPT-79 - Review date and time handling for Java 8
new f6296524b Fix failing tests.
new a64f2e392 Fix failing tests.
new 730350030 JSPT-79 - Review date and time handling for Java 8
new d12c056a8 Add converter to failing tests.
new e556d4356 JSPT-79 - Review date and time handling for Java 8
new 7505aff9b Javadoc fixes.
new 9fb191c71 JSPT-79 - Review date and time handling for Java 8
new e5023fff6 Test cleanup.
new 50c45a7e3 IDP-1375 Remove all the deprecated Filesystem Credentials
new 4a12e5262 JSPT-79 - Review date and time handling for Java 8
new 717d4ba03 IDP-1418 Throw a BreanCreation error if useStartTLS is specified but trustFile isn't
new 6712f20a8 IDP-1423 Remove fina deprecations from Metadata namespace handling
new 402942ec7 Missed checkin from previous - remove deprecated attributes
new 9e9a43084 JSPT-79 - Review date and time handling for Java 8
new 86624289c Switch over a minor use of long as Duration.
new fdeca6eeb JSPT-79 - Review date and time handling for Java 8
new 1c1586cdb Fix a few long/Duration/Instant stragglers.
new 0c16a9ad1 checkstyle - deprecation warning in test code
new 8f11e2434 IDP-1375 Remove deprecation warning from security namespace parsers
new 34855d052 IDP-1432 Remove deprecated "api" methods
new 102dcf344 IDP-1430 - Review and cleanup of ProfileConfig classes
new 3fac714d5 Fix some bugs in RelyingPartyConfiguration.
new 7854b488b IDP-1430 - Review and cleanup of ProfileConfig classes
new d837af047 IDP-1430 - Review and cleanup of ProfileConfig classes
new 87d0b847e Remove HttpServletRequest property from profile configurations.
new 7a6555618 Formatters need UTC time zone set if not using local time.
new 67ec57212 Update WiX versions in prepartion for V4.
new d7b807f87 IDP-1423 More deprecation work in idp-profile-spring
new 189c80f34 IDP-1159 - Add audit field to mark start time of requests
new 6495cd5a5 Adjust more dialogs and display values for V4
new 06af8ce3d IDP-1433 Remove multiple-home choices from IdPPropertiesApplicationContextInitializer
new d6e5afd65 Remove use of deprecated #newInstance() method
new d4099ec60 IDP-1423 Remove spurious test
new 24ff5573e IDP-1403 replace com.google.common.base.Objects.equals(...) with java.util.Objects.equals(...)
new 492e4188b Up LDAP timeout
new 47315f74a IDP-1121 Add comments to V4 deprecations
new 3df5a9f70 IDP-1121 Remove legacy default template for TemplateAttributeDefinition
new d2e87e25e IDP-1121 Static data connector cannot have a FailoverDataConnector
new 98cb1f429 IDP-1121 Remove deprecated JNDIConnectionProperty
new 5358e2b11 IDP-1121 Remove deprecated constructor
new 25a7c01ea IDP-1121 Remove never-present mergeResult LDAP attribute
new 1902fdd00 Debug Windows Server 12/Java11 build
new 347a44cb8 Increase test timing granularity.
new c2bbe947f Turn up logging for idp-conf tests to DEBUG
new cdc2325fc IDP-1414 Further deprecation
new c852859cd Tidy Deprecation warnings
new 8bb98de39 Fix test for Java 7
new fe89513bf Turn up responseTimeout for LDAP data connector
new fcdbf5c03 idp-attribute-filter-impl: Use static imports for all the asserts in the tests
new b51cc72c7 idp-attribute-filter-spring: Use static imports for all the asserts in the tests
new ac3fcba9c idp-attribute-resolver-impl: Use static imports for all the asserts in the tests
new aebf3f9d6 idp-attribute-resolver-spring: Use static imports for all the asserts in the tests
new 8aa58e78e IDP-1429 Deprecate ignoreCase for StringMatcher
new c69723121 IDP-1429 Deprecate ignoreCase for StringPolicyRule
new fcc171b64 IDP-1429 Deprecate ignoreCase for StringMatcher Parser
new 192076f29 IDP-1429 Deprecate ignoreCase for StringPolicy Parser
new bd2f48a44 IDP-1429 Deprecate ignoreCase for SourceValue (in Mapped Attribute defn)
new c0f3f07ae IDP-1429 Deprecate ignoreCase for SourceValue Parser
new 23f48868e IDP-1429 The PatternFactoryBean has moved to SpringSupport
new cdc183f09 IDP-1429 Regexp Filters take a Pattern, not a string
new f51bd4268 IDP-1429 Add caseSensitive to all regexp filters
new cfd69c96b IDP-1429 Final tidy
new 33f7e57c7 IDP-1439 - correctly package dependencies with "xml" in the middle of their name
new 44942f516 IDP-1432 Some deprecated classes missed the axe
new 75e68ecd5 Revert "IDP-1418 Throw a BreanCreation error if useStartTLS is specified but trustFile isn't"
new 5b7f5dd75 IDP-1418 Fail if no truststore provided to LDAP
new a9e6fea0b Add Dither to delay to account for windows/J11 issues
new 5ddb9cd62 IDP-683 IDP-1291 Remove the *MatchesShibMDScope filters
new 90574df88 IDP-1439 - correctly package dependencies with "xml" in the middle of their name
new 0860d6cec IDP-1401 - Change to unboundid as default ldaptive LDAP provider
new bc5735d8e IDP-1121 Fix tests to refer to concrete class not interface
new b24c54aa7 OSJ-206: Promote new public methods to MetadataResolver subinterfaces
new bc13ec3b3 IDP-1121 remove AttributeDef and DataConnector getters from the Attribute Resolver Implementation
new 3e66d2e16 IDP-1121 jsp needs to be adjusted because of changed resolver API
new 777251360 OSJ-206: Promote new public methods to MetadataResolver subinterfaces
new 80990ed8b IDP-1052 Remove readOnlyConnection from RDBMS data connector config
new fae75b712 checkstyle
new 4f07b9a88 IDP-1121 Make tests use lists, not collections of attribute values
new 292e1de9c IDP-1121 Explicitly preserve input order o IdPAttribute#setValues
new fafc769ef Reference the correct Nullable annotation
new e75de2222 IDP-1444 - review dependencies in IdP modules
new 9f1315a54 Revert "Remove Eclipse project nature associated with obsolete Spring Tool Suite V3"
new 4baa305d3 IDP-1121 Simplify typing for IdPAttributeValue
new 759b2d533 Fix some javadoc warnings.
new 735a7f26a IDP-1442 - Allow request signatures to be ignored
new 4b1481fdb IDP-1121 Simplify typing for IdPAttributeValue
new 3be28a4be IDP-1121 Simplify typing for IdPAttributeValue
new 0f20a22a9 IDP-1434 Tests
new 2006717c3 IDP-1434 Tests for Filtering by queried attributes (SAML2)
new 2f39c0346 IDP-1434 Tests for Filtering by queried attributes (SAML1)
new ea002c803 Removed confusing and unrequired code from javascript examples test.
new 0353832c8 IDP-1434 - Redesign Attribute encoding/decoding as a service
new 5285c6a8e Tabs to spaces.
new d6b0e7480 IDP-1446 - Create CAS transcoders
new e56cc890c IDP-1446 - Create CAS transcoders
new 0f9001f75 Rollback logging levels that were accidentally checked-in.
new 47e6109a4 Move mapped attribute container to general package.
new 177a330f7 Optimize EntityAttributesPredicate with mapped attribute support.
new 25d3e67bd OSJ-278: Misspelled method on AttributeConsumingService
new f9b934449 Test cleanup.
new 0ae966540 IDP-1434 - Redesign Attribute encoding/decoding as a service
new 825be23fa IDP-1121 Remove LocalizedStringAttribute
new 1389cd705 IDP-1121 Attribute Values are no longer generic. Stage 1
new d9bd4134c IDP-1121 Attribute Values are no longer generic. Stage 2
new e230d0a15 IDP-1121 Attribute Values are no longer generic. Stage 3
new dc856451c IDP-1121 Attribute Values are no longer generic. Stage 4
new 31fdb969d IDP-1121 Attribute Values are no longer generic. Final stage
new a6ffdfe42 Rollback to unmapped EntityAttributesPredicate for compatibility.
new f111fcbad Split mapped and unmapped EntityAttribute predicates, add logging.
new 97ccfd1b2 Add mapped tag variant for relying party overrides.
new d2a2cf0d2 Add MappedTag syntax variant to Predicate metadata filter.
new 1ec429299 IDP-1121 Use Lists rather than Collections or AttributeValues
new 3d8f144f0 IDP-1121 Use LinkedHashSets in Attribute Filtering
new c6d172722 IDP-1455 Allow data Connectors to export attributes
new 5eaa48c30 silence javadoc warning
new 538256311 more javadoc warning cleanup
new 2e744a272 Add dither to timing delay
new 36c8289cc Cosmetic changes to annotations, initialize checks.
new fc22d7cd6 Auto-decode URI-named string value EntityAttributes with default rule.
new 421159423 Extend attribute mapping and mapped predicate to EntitiesDescriptors.
new a05ff9643 Correct degenerate checks for empty criteria/null input.
new be6701216 Fix a few remaining Predicate deprecation warnings.
new d35b9d67d Add mapped tag support to metadata-driven config lookup.
new 121bca4c0 Adjust some logging, and rework example registry rules as XML.
new b1e54ac30 Tighten NameFormat so tests work.
new 45d4b04fd Add mapped / EntitiesDescriptor checking to EntityAttribute rules.
new c235024c2 JSPT-87 - Scriptable DataSealerKeyStrategy
new 9f36dc1c7 Refactoring, and addition of issuer-based EntityAttribute rules.
new 3e079d139 Add some component init checks.
new 386b3e0b9 Refactor and complete schema/parser/tests for issuer EA rules.
new 312145ba5 Remove unused SourceAttribute element.
new 4118615cd IDP-1366 - Remove <SourceAttribute> from "Template" attribute definition
new 364dfb693 IDP-1456 - Apply attribute filtering code to inbound attributes
new 52bef0ec0 CheckStyle
new 4c4a60cfc IDP-1456 Strip deprecated method from md:Scope OpenSAML classes
new 6ba0c2da9 IDP-1456 Add a ScopesContainer class
new 75b91db79 IDP-1456 Add a ScopesNodeProcessor
new 0571d4c93 Minor javadoc cleanup
new cef37a765 Fix some compilation and Javadoc warnings
new 50d67bde4 Add automatic module name for idp-attribute-impl
new b9bd8b272 Add automatic module name hint to module template
new 1fa73f859 Remove unused authentication context lookup.
new e348f0daa IDP-1456 - Apply attribute filtering code to inbound attributes
new 8add9dbaa Fix an extraneous logging result.
new 7efb10269 IDP-1456 - Apply attribute filtering code to inbound attributes
new abafe8d4d IDP-1456 - Apply attribute filtering code to inbound attributes
new 76b958e23 IDP-1456 imp,ement matchers based on the shibmd:scope
new a52b2f5f0 IDP-1456 Parsers for ScopeMatchesShibMDScope and Value MatchesShibMDScope
new abc4ade27 IDP-1456 - Apply attribute filtering code to inbound attributes
new 4401edd50 Leave attribute descriptions unset if not already set.
new 303611e93 IDP-1434 - Redesign Attribute encoding/decoding as a service
new 5a781cc5b IDP-1434 - Redesign Attribute encoding/decoding as a service
new cd27395c4 Add a Subject DataConnector as a passthrough mechanism.
new 97f694ea3 Remove dead code referring to authentication context.
new cd9d51004 Javadoc nit.
new 4567dde4f Remove duplicated PRC lookup strategy.
new c63eba0ea IDP-1434 - Redesign Attribute encoding/decoding as a service
new f941c5111 Improve transcoder rule config a bit.
new 4da39eb07 Remove empty package.
new 516a5f51d Update default registry resource list.
new 113b8f338 Fix javadoc warning.
new 86b2ad51d IDP-1434 - Redesign Attribute encoding/decoding as a service
new c49ee2bf1 IDP-1434, IDP-1434 Add example names and Descriptions to default-rules.xml
new 756a94799 IDP-1463 - Authn finalize fails to overwrite previous active flow result
new 63acb4cf6 Update package reference.
new fd97feb4e Missed a class reference.
new afb262a8b Update deprecated Velocity configuration properties.
new c02a3cb3a IDP-1464 use new functions for Locale Selection for consent
new 85e266ce7 IDP-1456 Wire ScopesNodeProcessor into metadata handling
new c41b441a3 IDP-1464 Introduced a processed UIInfo class
new 4a6ce0a5b IDP-1464 Node Processor for mdui:UIInfo
new 2534f5517 IDP-1464 Introduce a processed UI class for ACS
new f43dd4c3a IDP-1464 Extend UI Node Processor to handle ACS
new cecc1b02b IDP-1464 Introduces a processed UI class for Organization
new c527c8d4d IDP-1464 Extend UI Node Processor to handle Organization
new 83738f3e4 IDP-1464 RelyingPartyUIContext now uses Locales
new 95beab14b IDP-1464 Change UI code to use non deprecated Locale handling.
new 227ca82de Fix duplicate locale bug in Mapper parsing.
new 93efea713 checkstyle
new ae6a59979 IDP-1464 Add deprecation warning on new deprecation.
new ea28eddbc IDP-1418 Force explicit definition of TLS trust for LDAP
new 3a12fe8d4 IDP-1451 Partially rewrite status jsp to use guages.
new 743798c2e IDP-1451 code tidy
new 175ee737e Fix integration test, remove spurious semicolon
new 57399da1f Refactor guages to allow better handling of late initializing services.
new 0de5d1a41 IDP-1450 TDD: Tests for various nasty attribute value cases
new 8515f142a IDP-1450 Disallow empty attributes in the AFP schema
new 620439598 IDP-1450 TDD: Further empty attribute Attribute Filter Tests
new 1b0dba07a IDP-1450 TDD: Fix empty/just space attribute in Attribute Filter
new 682cc69aa IDP-1469 - External intercept flow
new ffe9c51ef Move AccessControl impl classes into impl package.
new cce4729e9 Move UUID id generator into impl package.
new a062db202 IDP-514 - Type conversion in data connectors
new c3a59bc8f IDP-1223 - IdPv3 defaults to insecure cookies
new 7086e41b7 IDP-1372 - shibboleth.ComputedIdExceptionMap can't affect eduPersonTargetedID
new 9afd561f5 Bump idwsfconsumer to 2.0.0-SNAPSHOT.
new 980139b15 Move ID generators into impl package.
new 27b5c2a5a IDP-1470 Fix mix-scope custom parsing: Attribute Definition
new 545374f7c IDP-1470 Fix mix-scope custom parsing: Attribute Filters
new 5cde9723c IDP-1470 Fix mix-scope custom parsing: profile
new 0cafaa367 Fix an accidental commit.
new 9e3688e7f IDP-1365 - rpUIContext not populated from CAS metadata
new 39c27e639 Add some CAS machinery to test configs for testbed use.
new 0bf2295b8 Add a CAS client version property to parent.
new 52bc32c7a Add cas-client dependency.
new c9cb5ffb2 Remove bean left over from removed feature.
new 5b26e14ca Adjust conditional use of DataSealer based on additional properties.
new c9ede9288 Account for exception change.
new a2b4b533b IDP-1472 Centralized methods for invalid and deprecated Method Names.
new 24048217c IDP-1121 IDP-1472 Use common method for disallowed names
new c0f2f7cc3 IDP-1472 Warn on deprecated characters in attribute names
new 683be3aa3 IDP-1421 - CAS actions should avoid raising runtime exceptions
new ba12972a1 IDP-1450 Disallow empty attributes in the SEC schema
new 42c7cbd02 IDP-1450 Better handling of null properties in Mapped Attribute Definitions
new cf072ef92 IDP-1450 Disallow empty attributes in the resolver schema
new 195633426 Registry config and doc cleanup.
new a4ff8d861 Convert default syntax from Map to Properties.
new 9528e9ca8 Guard encoding of attributes with no values.
new 150a0f959 Support activationCondition by bean ID.
new d4aea8aa9 Exception msg cleanup.
new 6572cc996 Move attributes directory underneath conf
new f1b9977ae Eliminate use of removed base class.
new fc9e6b712 remove unused import
new e9365e27d IDP-1450 Review feedback
new 09b0495fe IDP-868 - Stored persistent IDs can be invalidated by a future date
new 2154dd4bb IDP-1474 - Easier configuration of algorithm agility
new 25b15e93c Add schemas for additional testing.
new 69b40fef0 IDP-1450 Revert permissive handling of empty boolean attributes.
new 0efa5b316 IDP-1450 Revert permissive handling of empty boolean attributes.
new 04f0b0533 IDP-1450 Use standard support to convert from attribute to boolean
new a3cee571a Add addtl namespaces to root element.
new 344194fc5 Align to default root element and add an algorithm filter.
new a463e65c2 Remove xsd reference.
new b53b2c31e IDP-316 Lint pass over the attribute projects.
new 61c91d820 IDP-1450 Final review for use of empty strings on attributes
new 1bba47ac5 Strip down default MFA example.
new 3acbbef10 IDP-404 Fix some XML errors
new 3b629a782 OSJ-280 - Remove generics from Message/Profile APIs
new 5778e7198 Add class parameter to function c'tor, and fix warnings.
new a7be32be4 Add language callback to JAAS validator.
new 4ed23a00d OSJ-187: Adjust MetadataFilter API to take a passed context
new fb77a5ef1 https://issues.shibboleth.net/jira/browse/IDP-1478 Recurse into chains when managing MetadataProviders
new 9e4b294e9 IDP-1391 - Add a service layer for password validators.
new fc4764919 IDP-1391 - Add a service layer for password validators.
new 6558c85aa Eliminate another unneeded generic use.
new b5203241a IDP-1391 - Add a service layer for password validators.
new 66d435bf0 IDP-1391 - Add a service layer for password validators.
new 5c59c83f2 IDP-1391 - Add a service layer for password validators.
new 442a08d5a Fix double iteration in error handling.
new 50f1227a7 Unit tests.
new fcbb846db IDP-1391 - Add a service layer for password validators.
new e3220f55d Missed a commit.
new 3af720968 Fix up a missing use of a parent bean.
new e504c993a Revert "Fix up a missing use of a parent bean."
new 82515a510 Fix inadvertent warning with null check.
new 13965d2ee Add DEST audit field for response URL.
new 5e8dedc62 Add inbound message signing audit field. Add the signed/encrypted fields to default log.
new 67737f448 Add audit fields for requested principal types.
new f06d97320 The SP-123 metadata wasn't been loaded correctly.
new 3c3019753 OSJ-188: Enhance SignatureValidationFilter to make operation ...
new b8ba6704a Attempt to fix some test errors from Jenkins builds.
new a5a3b4e33 Some generic fixups.
new c31dd32f5 Remove test version of jaas.conf
new b221397bd Fork jaas-authn-context.xml
new 51cb62084 Applying Eclipse settings and code cleanup.
new 5f200157c Refactor to rely on base class.
new 0f2814bbd Additional generic cleanup.
new 0bb1a2620 Collapse out deprecated TicketService method.
new eab01cbab Allow override of CAS proxy validator client.
new 1e524f5de IDP-1485 - CAS proxy validator configuration is not customizable
new 3f2aa2512 IDP-1397 - Removal of deprecated features
new da2e29da9 IDP-1486 Collapse the RelyingPartyMetadata Provider
new 85b9b8830 Cleanup Javadoc
new b9e70bea6 Remove deprecated ticket constructors.
new c691d33e8 IDP-1397 - Removal of deprecated features
new 306bd0f2f IDP-1487 - Add shorthand method for running AttributeFilter service
new 3cc7be6ce IDP-1181 Test FastFail behavior
new e8b2cffa8 Allow ignored AuthnContext content when blocking requested contexts.
new e4aaaf704 IDP-1490 - add system hostname to metrics
new 130754219 IDP-1181 Test FastFail behavior - Metadata Service + HTTPMetadataResolver
new d27869c79 IDP-1181 Test FastFail behavior - AttributeFilterService
new 873ccf1b6 IDP-1181 Test FastFail behavior - Attribute Resolver Service
new 2f660ec12 IDP-1181 Test FastFail behavior: Turn off all tests
new 6004c05cf IDP-1491 Detect and use JNDI LDAP properties.
new 1a598fed6 IDP-1443 - Default web.xml blocks CORS preflight requests
new 4771a4367 IDP-1476 - Need a filter to append SameSite to cookies
new 911fdb0e2 IDP-1181 Test FastFail behavior - Stored DataConnector
new 77674f1de IDP-1181 add failFast to LDAP/RDBMS/HTTP data connectors
new 4696a72e0 IDP-1181 Fix tests for new FailFast behavior
new 7c5dea45d Fix more tests
new 741498e27 IDP-1502 - Avoid object creation in the external web flows
new fe0f207ba IDP-1235 Add support to pe-resolve attributes
new e20cd3075 IDP-1501 explicitly set the app context for hand-grown beans
new 8f7834c5c IDP-1501 Require that ServicableComponents set and application context
new 048928c21 IDP-1235 Add support to pre-resolve attributes
new af8d0395e Fix Javadoc
new 6c8949c78 IDP-1235 Add support to pre-resolve attributes
new 9cda5d67f Tie servlet request and context mock objects together correctly.
new c64289a7b IDP-1235 Add pre requested attributes to unfiltered list as well
new 1453a623a IDP-1235 Full stack test of preRequested Attributes with Activation Conditions
new fe98bd34f IDP-1235 Always put an intermediate context in place, even when no prerequest happens
new 8a6a6abb3 Revert "IDP-1235 Add support to pre-resolve attributes"
new 6d27772db Reapply IDP-1235 change without logback update.
new f8368495e IDP-1502 - Avoid object creation in the external web flows
new 7c24e56a5 Temporarily disable test so tonights builds work.
new 31b607945 Fix and re-enable tests.
new ac06c12fd IDP-1181 Mark the idp.initialize.failfast property for tests only
new b5b574f4c IDP-1181 Deprecate failFast for StoredID dataconnector and replace with failFastInitialize
new e233c0d3a IDP-1181 failFast becomes failFastInitialize for all data connectors
new e0d268358 IDP-1181 Deprecate failFastInitialize on ConnectionPool
new 66f048ec4 Tidy up probing of LDAPS configuration
new cc57d364d IDP-1486 Fix status.jsp
new decb2fa67 IDP-1181 Remove the LDAP connection pool failFast property
new c12be947d Fix path in idp-conf services-system.xml to point to /conf
new 7bf9783a8 IDP-1507 - Increase flexibility around session address checking
new 12e9c375c IDP-1507 - Increase flexibility around session address checking
new da6c9070e IDP-1499 New V4 Installer: Initial Commit
new 38f57fd2d IDP-1499 New V4 Installer: Add an InstallerSupport class
new f357b2507 IDP-1499 New V4 Installer: Handle all user input
new 48188349a IDP-1499 New V4 Installer: Copy Distribution
new ec4ddc239 IDP-1499 New V4 Installer: Key Management
new 21e83f9bb IDP-1499 New V4 Installer: Move away from using static
new 071ea3c93 IDP-1499 New V4 Installer: First cut of install task
new fc3c3ac4b IDP-1499 New V4 Installer: Use Ant for delete
new 6a75a7126 IDP-1499 New V4 Installer: Typos in logs
new 07e3cc58f IDP-1499 New V4 Installer: Cleanup prior to first push
new 91c85d2b6 Recreate PropertiesWithComments in old location since it is still used in the tests
new f0cbffe4b Reapply precious fix, with correct code
new 8da7596c4 IDP-1499 New V4 Installer: fix class protection
new 6bd0e98f4 IDP-1499 New V4 Installer: Add InstallerProperties interface
new bb9c7cb9c IDP-1499 New V4 Installer: Roll Keymanagment into V4Installer
new 5cba1646d IDP-1499 New V4 Installer: Adapt MetadataGenerator for new installer
new e93e44efb IDP-1499 Installer: tighten up initialize checking
new 12adb6ed3 IDP-1499 V4 Installer: Wire in metadata generation
new 178785928 IDP-1509 V4 Installer: use "attrib /s" on Windows
new ad3c53cad fix tests
new e9d3c0b94 Convert to ApplicationContextAware Function.
new d27b3786c IDP-1494 - Login flow for proxied authentication
new fb5b2bb8e IDP-1494 - Login flow for proxied authentication
new 098f016be Block parsing of filters inside chaining providers.
new b9d259dbb Add a warning on misplaced filters.
new b8a110c38 IDP-553 IDP-1499 Installer Linux chmod and chgrp
new 502a0eaa0 IDP-1499 Installer: make CurentState an interface and hide implementation.
new cd083cd6d IDP-1499 Installer: Ant task to call the new installer
new e9f8f38b5 IDP-1499 Installer: Rewrite build.xml to call the new installer
new 8339b2095 IDP-1499 Installer: bugfixes.
new 349bf6333 IDP-1499 Installer: Minimal Wix change to install using new stuff
new db9c4ded6 IDP-1499 Installer: Remove old ant tasks
new 13c2fedfb Remove old ant task tests
new 6d80530a5 IDP-1511 - Support referencing of non-inline MetadataFilters
new a308a959c Move metadata test data into package.
new 5f54650c3 Move ByReference filter out of IdP.
new 3c9ba8776 IDP-1511 - Support referencing of non-inline MetadataFilters
new c0943b7f3 IDP-1511 - Support referencing of non-inline MetadataFilters
new 71e63f415 Add a flag to disable ByReference filter processing.
new 88fb2553e Update example file.
new 21e5fd5c4 Add a utility to locate RP metadata.
new 66579ffe9 Fix accidental non-public factory methods.
new f25b66bd1 Fix comment at top of file.
new efbe536c2 IDP-1452 Update services.properties for V3 to V4 updates
new 0e397bbe5 IDP-1499 Installer: First pass tidy up of logging
new 950de8af0 IDP-1499 Installer: Turn off quiet in ant to allow logback in
new b496e3568 IDP-1499 conf dir pre-overlay and edit-webapp contents
new a8ebb8279 IDP-1499 Installer: Revert removal of some tasks
new bb7715b82 Remove warning about needing to have Java 1.8 from installer upgrade dialog
new 80405e4b3 Test class was violating ApplicationContextBuilder API contract.
new b4cce32ec IDP-1512 Fix and ICE03 warning in the windows installer build.
new 1d162927d IDP-1499 Windows Installer: strip RO bit before updating version file.
new d0b32501a work around ant bug
new fe816c7d9 IDP-1513 Policy properties files for V2 support values
new 324b69991 Remove deprecated properties already in "dead" list.
new 68d5260e9 Remove legacy RP config beans.
new d51df0ad1 IDP-1513 Police idp.service.rp.resources correctly
new f56b765ab IDP-1516 - Reduce Guava dependence
new aa751bf85 Legacy NameID generator properties are warned on at runtime, not fatal.
new b88dda2f5 Remove nulls from unit test.
new 2df4a9b9e Fix another test using nulls.
new 33b1e08e3 IDP-1516 - Reduce Guava dependence
new 9213e0783 Allow internal addition to unmodifiable list.
new 17111310e Remove null check from unit test.
new b083fa1c2 IDP-1516 - Reduce Guava dependence
new 6599f5414 IDP-1516 - Reduce Guava dependence
new 7d7650f0e Remove bogus null test
new 420a24172 IDP-1516 Reduce guava dependence idp-attribute
new a8b338091 IDP-1516 Reduce guava dependence idp-attribute-impl
new 3908776d1 IDP-1516 Reduce guava dependence idp-attribute-resolver-api
new e77986413 IDP-1516 Remove @nullelements annotation
new b1bd3f062 IDP-1516 Reduce guava dependence idp-attribute-resolver-impl
new 71167bd12 IDP-1516 Reduce guava dependence.
new b8a0d1b11 IDP-1494 - Login flow for proxied authentication
new 0f252240a Context should be null-forgiving to allow clearing of state.
new 98d4a5dc5 IDP-1494 - Login flow for proxied authentication
new db947f7d1 IDP-1494 - Login flow for proxied authentication
new 5a80b2c62 Fix NPE when no SubjectContext exists.
new 929376837 Extend SubjectDerivedAttributeDefinition
new d3b6a0230 Make PRC creation more robust.
new 67d1b21f5 Clean up a couple of additional list properties.
new fe89e3020 Clean up more use of immutable collection methods.
new 43853d22a Fix handling of new boolean property so property expressions work.
new 7a0a5163e Fix tests, convert result from List to Set.
new dc1200a48 IDP-1516 stop using the collectingAndThen anti-pattern
new c16d7e192 IDP-1516 remove null tolerance
new 93e68ddc3 IDP-1516 Reduce guava dependencies attribute-filter-api
new 96eefce85 IDP-1515 Make a bunch of attribute-filter-api classes final
new 678fe206e add premapped test to AttributeInMetadataMatcherTest
new adaca4c83 IDP-1515 Reduce Guava dependencies idp-attribute-filter-impl
new e46d9c5b6 IDP-1481 - Add idp-war-distribution
new 2e5cce9ba IDP-1481 - Add type war to idp-war artifact in idp-bom
new 49e1528ab IDP-1516 - Reduce Guava dependence
new 2471bc926 IDP-1484 - Rationalize relying party ID usage with CAS + metadata
new 09d2671db Extend c14n variant to Subject DataConnector.
new 110a053e3 Silence unworkable test for now.
new aebc029e1 IDP-1349 - Enable two disabled tests
new 044805de7 IDP-1516 De-guava-ification: tests and a few Collections2.tramsform
new 2e5652e03 Define dummy beans to avoid errors on upgrades.
new e5c837bc6 Fix c14n handling in attribute def, add unit test.
new 79dbc2e94 Add support for serializing NameID principals.
new 7aa47fd21 Add bean dependency to fix init order.
new 372a65d42 IDP-1494 - Login flow for proxied authentication
new 3ff74f5a7 IDP-1494 - Login flow for proxied authentication
new 00c5ec7d0 IDP-1516 Reduce Guava dependency consent-impl
new f03010bfc IDP-1518 Better hashing of Empty Attribute Values
new c4a92b580 Pass over all projects doing javadioc warnign fixup
new 48d7da8ab Add cas option to metadata query flow.
new 1ab03a2ee IDP-1518 Add failure case for impossible empty attribute value
new 5689cfd89 IDP-1397 remove long deprecated impl class
new c211963a6 Add configurable handling of proxied SAML AuthnInstant.
new 5f8fbee75 IDP-1353 - Display organizationDisplayName instead of organizationName
new dedbe6ee5 Migrate proxiedAuthnInstant out of static config into profile config.
new 87d8d0dc9 IDP-1518 Revise handling on EmptyAttributeValue
new 7b2671cdf IDP-1499 Insert ant properties into inherited properties for installl
new 3edee8ff5 IDP-1515 Make several attribute api classes final
new 2750c2323 Fix logging bug.
new 41b242d23 Remove superfluous generic parameters.
new 9421a7585 Logging improvement.
new 4ac00a0d5 IDP-1519 - MFA transition action mishandles previous event determination
new 3ced1e90e IDP-1494 - Login flow for proxied SAML authentication
new f49d30a6f IDP-1494 - Login flow for proxied SAML authentication
new bebfd4fcc IDP-1494 - Login flow for proxied SAML authentication
new d9ca0ead0 More Guava cleanup.
new b67d79684 JPAR-148 - Checkstyle 8.24+ compatibility
new f9f621c94 Use checkstyle.xml from idp-parent
new 427683f76 IDP-1494 - Login flow for proxied SAML authentication
new 8a3423116 Clean up example mappings.
new d3c2724c4 IDP-1494 - Login flow for proxied SAML authentication
new a914f942e Add missing audit extraction bean.
new f6affce5a Replace deprecated AuthnContext methods, add more logging.
new 6f106416f Add extensible map to serialized AuthenticationResults.
new 43f3a860d Extend Proxy principal with restriction content.
new 4197913c7 JPAR-149 - Reinstate checks for missing or misplaced Javadoc
new 09ba5c2af IDP-1494 - Login flow for proxied SAML authentication
new 3daa702e0 IDP-1494 - Login flow for proxied SAML authentication
new 9e6383773 IDP-1494 - Login flow for proxied SAML authentication
new 2c02bc89c IDP-1494 - Login flow for proxied SAML authentication
new 943590b97 OSJ-292 - Mishandling of ProxyRestriction content
new 684fe0ef6 IDP-1191 - Add XSRF mitigation to form processing actions
new 75b64031c Fix deprecated methods.
new 86fc68d84 Rename view-state, add some logging.
new 42ec2b512 Fix NPE in log statement.
new c57da5da6 IDP-1179 Move some datacomnector configuration interfaces to api
new e3c50cf51 IDP-1179 Move the RDBMS StatementBuilders to api
new f48269977 IDP-1179 Move the RDBMS StringResultMappingStrategy to api
new 6af17de81 IDP-1179 Add in warning placeholders with old RDBMS impl classes
new 297607664 CheckStyle
new bfd409707 IDP-1494 - Login flow for proxied SAML authentication
new 63fba8d6c Final cleanup (I hope) on proxy computation.
new 654aa6f98 Cleanup warnings and deprecated method calls.
new c1d1a7e30 Deprecated method cleanup.
new 74a4951b6 Deprecated method update.
new f093b5b8d IDP-1494 - Login flow for proxied SAML authentication
new fd4f64ec4 IDP-1494 - Login flow for proxied SAML authentication
new 383459273 IDP-1494 - Login flow for proxied SAML authentication
new f9d6f1905 IDP-1494 - Login flow for proxied SAML authentication
new e2ddc0e9e IDP-1191 - Add XSRF mitigation to form processing actions
new 94fb7c41e IDP-1191 - Add XSRF mitigation to form processing actions
new 26a66e6ab Make legacy PrincipalConnector bean lazy-init.
new f94f32c25 Adjust javadocs, remove unused code.
new f1477ff2e Move proxy/SAML flow up to top-level authn flow.
new 931fb3078 IDP-1494 - Login flow for proxied SAML authentication
new d4f40d79f Fix unit tests, error handling still in flux.
new 98d8662e0 IDP-1494 - Login flow for proxied SAML authentication
new 5649c0937 Adjust annotations to match intent and clean up error paths.
new 792943d6d Remove redundant null check.
new 55ad4382c Remove additional redundant null checks.
new 7503489fc Ldaptive v1.3 API changes.
new b4279ab94 Add a test dependency on attribute-impl.
new 7063c8950 Pull duplicated Spring converter.
new 884ea82c1 Some code cleanup, moving bulk of LDAP defs into flow bean file.
new b8dde8be2 Add IssuerInEntityGroup policy rule, parser, tests.
new 870d25ca4 Reorder some types.
new 4c0f35a42 IDP-1179 Move several LDAP classes to api
new 4c0559b33 checkstyle
new ca0207c5c IDP-1179 Rename class
new ad500b65e IDP-1179 Deprecated classes introduced purely to support old configs
new f1bb6f100 IDP-1179 Add in warning placeholders with old RDBMS impl classes
new 8057720d6 Remove redundant version macro due to BOM.
new 90c54c223 Expose encodedSalt property on ComputedId/StoredId data connectors.
new 10bb7692a Fix uses of deprecated methods.
new 685ed2b84 Replace deprecated methods.
new 6c33e5d39 IDP-1397 remove deprecated method loadJdbcDriver
new 7ab274bba IDP-1238 - Changing signing credentials mid-flow
new fe24ae391 IDP-1238 - Support for changing ResponderId and signing credentials
new 91f5569fc Remove old V2 reference.
new bd581f56f IDP-1301 - Expose Entity Attributes by default to Velocity Templates
new d81f136c5 IDP-1446 - Create CAS transcoders
new c7970f780 JPAR-151 - Fix SCM details in multi-module projects
new 940f03a75 IDP-1489 - Promote CAS profile config into API
new 0d8940a19 IDP-1397 - Removal of deprecated features
new 1ac1c5f0d Tweak log messages.
new 9e789b8fb IDP-1472 - Police invalid attribute names in transcoders
new 9a1a82a1c IDP-1472 - Add deprecation warnings to transcoding rules
new 4f2ad3e6b IDP-1476 - Need a filter to append SameSite to cookies
new 9eaba9c39 IDP-1477 - Add lookup strategy for populating Address attributes
new 32b53d147 IDP-1406 - Expose more Velocity Engine options
new 77d0c9351 CheckStyle
new 5473672de IDP-1499 - report correct version when building war at the end of a new install.
new a9d7ef99f IDP-1523 - Split off secrets into separate property file
new 3b28731f5 JPAR-131 - Fix doclint issues
new 95f4e4168 Missed check-in of new file.
new bdbf2650d IDP-1319 - Reduce redundant stack traces in log
new 1ecd2fd3c IDP-1499 Strip property values from logging
new 396f6494e IDP-1523 Installer support for secrets.properties
new 3c0209cc3 IDP-1499 do not back fresh installs
new b71a8e0c6 IDP-1523 idp.authn.LDAP.bindDNCredential has moved to secrets.properties
new 14fe1379b IDP-1499 Make prompts more prompt like
new c9e9279c2 CodeStyle
new a0d74233d Move secrets.properties into credentials.
new df7f0daf5 IDP-1523 Secrets.properties moves to credentials
new 0a569ddf3 IDP-1523 Secrets.properties moves to credentials
new 2970c8057 IDP-1499 Remove spurious files after an upgrade
new 65662de5f IDP-1476 - Need a filter to append SameSite to cookies
new 6bdb0d0a5 IDP-1479 - Add custom object support for MVC exception views
new 6cac23f91 Correct some code comments.
new fa7696f8f IDP-1526 - Changes to profile and algorithm defaults
new 023a12bf2 Default off addition of Principals in SAML flow.
new 271e742a6 IDP-1523 Secrets.properties moves to credentials
new fa325744c JPAR-131 - Fix doclint issues
new 40c661ed9 IDP-1499 IDP-1523 Misc fixes flushed by Windows testing
new 925febadf Demote NameID precedence setting to SAML SSO classes.
new a148e85b5 Fix Javadoc.
new 30849890c Fix javadoc.
new 76ac0ddca IDP-1465 - update to Ant 1.10.7
new 159b17c4c IDP-1529 Create SAMLtranscodng rules
new f2d022921 IDP-1529 Complete transcribing the transcoding rules
new b2e2e0576 IDP-1529 Strip attribute encoder information from our example files.
new 5a81ea16d Deprecate and adjust a method name.
new 382701e73 Fix deprecated method call.
new a80911495 IDP-1465 - update JSP API to 2.3.3 (EE7)
new c3d3c2034 Cleanup javadoc for deprecated classes.
new 5a8e823db Suppress javadoc warning across attribute test classes
new 803651eb9 Missing a test dependency for some reason.
new 05053488d Load resolver into registry by default to support one-off encoders.
new ab87946a5 Finalize? handling of registry for new and upgraded systems.
new 8a6827645 Rename and adjust definition of naming registry for extension later.
new f3069b743 Move naming registry into root context for use by extension jars.
new 213146819 Add missing dependency
new 426696203 IDP-1531 - hold back maven-javadoc-plugin to avoid plugin bug
new 33bafbdae Attribute mapping is no more, so don't log it
new 69604d8db IDP-1525 Don't even attempt to backup during an install
new bb636819f Move audit beans into root context and remove import from flows.
new 64fe08f70 Add flag to disable pooling for LDAP authn.
new e6c9b606e IDP-1532 Info (rather than WARN) on empty transcoder files.
new d1468bd67 IDP-1530 Add I18N to default attribute rules
new 6d8c92eef JPAR-139 - Resolve duplicate activation artifacts
new ca5c976f6 IDP-1535 - Reduce per-request audit formatter parsing
new 2b6f6390e IDP-1534 Display all services on status page
new 7617e4491 IDP-1534 Remove line which should have been deleted in previous
new 4706c17d9 JSPT-93 - Clean up API for BaseXXSupport decoders (DECODE)
new 085f4b3e6 IDP-1465 - Update Jakarta JSONP artifacts
new e5809896a Add SAML Response message handling to SAML authn flow.
new df1dafeab Profile and flow support for SAML 2 authentication
new a3febf671 Move function for consistency with package content.
new 04ff03909 IDP-1530 intername name for urn:oid:0.9.2342.19200300.100.1.41 is 'mobile'
new 37a8b6228 IDP-1465 - Update JAXB dependencies
new 748b303d0 IDP-1530 I18N - modify some .de, split some de-ch from de-de
new 2541636fc JPAR-156 - Compatibility changes for checkstyle 8.28
new 8ccc54d37 Turn off SameSite filter by default.
new 056ffd706 IDP-1499 Do not even *think about key creation if this is an upgrade
new e788a9e68 Restore some unsupported LDAP DC settings and add deprecations.
new dbddd5abd IDP-1465 - Centralise ant dependency management
new 791e81743 IDP-1465 - Update maven-antrun-plugin to 1.8
new 70ea7849f IDP-1465 - Update UserAgentUtils to 1.21
new ce71770d4 Remove unused enum from schema.
new b21be88a1 Add specific errorEvent for Response handling for SAML authn
new 0288fa78e Support additional Audience values for SAML 2 Assertion validation
new 36c6eb828 Support optional eval of message signed state by presence of Signature.
new b856208d9 Update ValidateAssertions wiring for SAML authn with invalidFatal=false
new 64e366e52 Wiring for message and Assertion InResponseTo validation
new e874a33bb Enforce additional confirmation data on Assertion validation
new 59f3660f8 In wiring specify Conditions required by profile.
new 4181b72f7 Add wiring for checking inbound Response Issuer
new 70388b8f7 Broke a mutable collection contract in resolution context.
new a5c890867 Initial collection needs to be mutable also.
new d0e0932ff Sync OpenSAML lookup function changes to saml-authn-beans.xml.
new 8a133010a Javadoc
new 004e6d918 Prepare windows installer for Beta release
new 90c61952c IDP-1530 More ja rules and changes.
new 1e612b06b IDP-1499 Change unix setmodes
new 34c1149fb Lock parent version for new release
new e25f9f262 Update files to be tagged for release
new 1bc6455e8 Bump version after release
new 4df817189 Tidy up logging
new 6093e1e7e Log correct IdPVersion when building the war
new fbefbfb88 Checkstyle previous
new fd2fd6623 Stop building the 32 bit installer
new 7df0feb5e A bit of cleanup, and eliminating an API inconsistency.
new ae5b9bde0 IDP-1542 - Admin flows missing transoder registry for attribute resolution
new 40a5bfc6e IDP-1542 - Admin flows missing transoder registry for attribute resolution
new 2ccac90ad Remove unneeded Spring nature from project.
new 81ca2d84c Test-in-progress for resolvertest flow.
new 466055bea Flesh out resolvertest unit test.
new 2643d8d3b IDP-1543 - Change in behavior for scoped values when encodeType enabled
new bfcb641f5 Select Assertion and AuthnStatement for authn using SessionNotOnOrAfter.
new bb0588c29 For SAML authn completely remove non-valid Assertions from the Response
new b0d264b2a IDP-1544 Inject metadata generator in the ant task.
new b44d55170 IDP-1547: Add a simple Map-based impl of JAASCredentialValidator ...
new 5bc830780 IDP-153 Further 18N changes
new 11d7f46e1 IDP-1545 18N for message property files
new 6bf8449f1 JSPT-93 - Clean up API for BaseXXSupport decoders (ENCODE)
new a7bd878a4 Fix problematic Javadoc.
new 837e694ff IDP-1548 remove logback.xml from installer classpath
new bf22c6bb9 IDP-1530 Remove "pt" and "sv" from the default rules
new 9a325d0c7 IDP-1545 Add messages for de, de_CH, fr
new 1606635aa IDP-1533 Inherit default attribute regsitry files from attribute resolver.
new f55e9afb4 IDP-1545 Add messages-it to distribution.
new 86574b547 Move the important beans a bit higher in the file.
new 70eced7e8 OSJ-285: Ensure that Closeable instances are actually closed after use
new 1e0efeebb Revert "OSJ-285: Ensure that Closeable instances are actually closed after use"
new 099d15a95 OSJ-285 Ensure Closeeable interfaces are.
new 702fc2305 IDP-1551 - Inaccessible idp.home logged incorrectly as default location
new 48b0c6a76 IDP-1553 - Deprecate HttpClient parent beans
new e95359a16 Fix bean definition for tests.
new b568691ce IDP-1397: Removal of deprecated features
new 1afded95d IDP-1552 - Password flow seems to require ldapURL property to load
new 9b7e5e7a2 IDP-1555 - Optimize entityID-based predicates in MetadataFilter parsers
new 14491f08b IDP-1558 - Setting to disable TLS name check in LDAPConnector
new e6cb4e88a IDP-1558 - Setting to disable TLS name check in LDAPConnector
new d6434a895 IDP-1546 - Some nits on messages.properties
new a89083527 Add some audit niceties.
new 4aae72805 Proposed default audit format.
new d4c933b4f IDP-1492 - Log SPNameQualifier other than SP entityID
new 4a6f3de1c IDP-1526 - Changes to profile and algorithm defaults
new 9a7dda1cd IDP-1545 Move localized properties into system
new 911b6d96f IDP-1545 Blacklist property replacement if properties are going into secrets.properties
new 60a4b76d1 IDP-1554 Stop gratuitously lower casing the user password.
new 6ddf93036 IDP-1539 turn up ephermeral key size.
new 8b7c3abe7 Prepare for beta 2. Rev the subsub version of the installer.
new 0d82ebe48 IDP-1545 Extebnd blacklisting test
new 17e9b4b22 IDP-1558 - Setting to disable TLS name check in LDAPConnector
new ff082d43f JSPT-93 - Clean up API for BaseXXSupport decoders
new d03947397 OSJ-272: Move HttpClient TLS TrustEngine use to a X509TrustManager impl
new 476a4b59a IDP-1557 Cleanup dialog used for AD attribute resolver
new 0af842ffa Lock parent version for new release
new 15fb57849 Update files to be tagged for release
new 3cb42ab0c Bump version after release
new 14fbfa042 IDP-1562 - Audit field to log encryption algorithm used
new c8316114d IDP-1564 - Velocity status page error not being filtered as expected
new 0e8b329f0 Clean out old comments.
new 0430f5d93 IDP-1563 - New deprecations in 4.0.0-beta2 firing when they shouldn't
new 0875419aa IDP-1532 - Potentially spurious warning from the transcoding registry
new 9cd9a42c4 Fix boolean expression.
new 6f2c20f2d Add properties extension to rule loader.
new 8418a1b46 Allow entry resolution with bindDN.
new 6b7b98aee IDP-1568 Turn down noisy logging.
new 6823d4154 IDP-1569 - Update jQuery in logout propagation view.
new 40ebcb91a Fix camel casing.
new 631c5b695 IDP-1570 - Tag-driven properties based on aliased names are broken
new 49b5e1581 IDP-1571 - Default sn mapping uses wrong attribute ID
new 259ae3da8 Raise some logging.
new dbefbba14 Move failure counter maintenance to flow exit point.
new a2095fc0a IDP-1571 - Default sn mapping uses wrong attribute ID
new bc210efd5 Fix comment at the top.
new ba1625e42 Remove links to the old wiki space.
new 8e39c0d25 Add cn and some additional DN attributes.
new 910c5ccc3 Add a utility bean for pre-requested attribute lookup.
new bb1ef9605 OSJ-302: outgoing MDQ request may not use the correct Accept header
new 17f05640d IDP-1574 - SOAP fault generation in ECP flow is broken
new a4e4b032c IDP-1575 - Duo AuthAPI support breaks in timestamp generation
new cb0324bce Add eduCourse attributes to default rules.
new 7bbf382bf Correct a deprecation warning.
new 6395335c3 IDP-1576 Exported Attributes need Display Information
new 82f644a72 IDP-1578 - Provisionally deprecate SAML delegation flow
new 0d7ac5942 Reorganize default rules into separate files.
new dd483d676 Deprecate caching HttpClient properties.
new 18629cb64 IDP-1576 Javadoc nit
new ee6f9ad13 Remove TODOs that were already done.
new 639d167e8 OSJ-193: Provide a mechanism to detect ResolverExceptions in ...
new 41d00e928 OSJ-193: Provide a mechanism to detect ResolverExceptions in ...
new ba49e9e5f IDP-1579 - Remove transientId/persitentId in consent blacklist
new 5c2f1c596 IDP-1580 Update Windows installer
new c38d355d1 IDP-1494: Login flow for proxied SAML authentication
new 09e2dc0d7 Undeprecate the HttpClient properties for now.
new b0ed7bad1 Lock parent version for new release
new 1c293ed36 Update files to be tagged for release
new 4e3df79fa Bump version after release
new 35cb1c9c1 Reset idwsfconsumer to 2.0.0
new 4e84a8eae IDP-1581 Warn on inability to delete old war file.
new 041123e11 IDP-1584 fix quotes issue in build.bat (around logging)
new 8c01a797e Suppress Javadoc warnings on tests
new a6a992fec Suppress Unavoidable Javadoc warning
new 6c0184f4c JSE-30 Make test tidy up behind itself
new d5518e860 Reset dependencies to the latest released versions.
new 445476b4e Bump java-opensaml to current SNAPSHOT, which just got a bugfix.
new a65f66045 JPAR-137 Clean up old java7/Rhino tests
new 4eeb896a7 IDP-1263 - migrate away from legacy xmlunit API
new a75e54f09 Type inference.
new d4456448d IDP-1508 - TestNG @BeforeTest and @AfterTest are being misused
new de532a4e9 IDP-1459 - RuntimeException when using CAS and consent
new fca8467f8 IDP-1591 - Switched saml1/saml2 names for telephoneNumber transcoding
new ce318038b IDP-1524 - Refresh scripts used by the installer
new 907cc25f8 IDP-1524 - Refresh scripts used by the installer
new 5b4568943 IDP-1437 - CAS: Unicode SMP characters cause invalid XML
new c13d525ed Clean up some POM mistakes.
new 76faa939a JSPT-80 - Need formal dependency on non-legacy xml-unit
new 3be3d2a88 Clean up accidental junit imports.
new 83c0fc6fc Transitive test dependency on xmlunit.
new f9cf0a82b IDP-1431 - Update CAS comment in idp.properties
new aebbf4903 Eliminate reference to version in comment.
new 8fe7ac933 IDP-1360 - Spelling Error in Comment
new 14a62848c Remove duplicated JAXB exclusion.
new 2b48c2299 IDP-1593 Widen testing for null strings in ACSUiInfo.
new 84adada68 IDP-1593 Tests for weird ServiceName/ServiceDescription elements
new 9539d8081 IDP-1593 Fix logging in previous
new f1b69010a IDP-1593 Test and fix null-ness in Organization
new d5378c390 IDP-1593 Test and fix null-ness in UIInfo
new f7b95b96a IDP-1382 - Whitelist approach to web resource security contstraint
new b1cea8a0f IDP-1594 - AACLI fails if destination URL is audited
new d827782d4 JPAR-164 Add the git patch of Maven Javadoc Plugin 3.2.0
new 6cc43cc7d Improve warning messages.
new 3ceb6550e Additional logging improvement.
new 2e023ede6 Add id to example bean.
new d01018896 IDP-1382 - Whitelist approach to web resource security constraint
new 283d240be IDP-1600 - Success status with unexpected status message during logout
new a15c6b240 Remove out of date dependencies
new ea76bef8a IDP-1602 LDAP SASL configuration
new 335679a4a IDP-1603 LDAP referral chasing
new 23ae017e1 IDP-1606 AbstractValidationAction NPEs if a MetricRegistry is not installed
new 13f46ccc4 Remove spurious bouncycastle dependency
new 1bf2e1ef0 Move runtime logging dependencies to idp-war-distribution
new eddc6874a Remove unused runtime dependency
new 97249ab41 IDP-1605 - AuthenticationResult reuseCondition not re-populated
new f29b3d825 IDP-1611 remove rendudant property
new 14a75d6c1 IDP-1609 - Issues using certificates with multple SANs
new ec1b0e857 Bug fix for IDP-1602.
new f7a54e205 IDP-1587 add sortKey to metadata-providers.xml
new 43adf24ff IDP-1614 pin jetty version for CAS here (not the parent pom)
new 90dc34365 Update Installer versions ready for 4.0.1
new 8a0263441 IDP-1614 Wind back Jetty by one rev pending nexus upload
new 99566ecc3 Update subject details to 4.0.1 too
new 641c93ed7 Fix camel casing.
new 469fd89ae IDP-1441 bind pool passivator
new 503a9f8b2 OSJ-154: Marshalling an assertion into a new document does not preserve its IDness
new ffb286024 IDP-1614 case can now use latestr tomcat to test
new 726b615b6 OSJ-311: Migrate tests accessing shibboleth.net to test.shibboleth.net
new 566a5f419 Remove spurious joda time dependency
new e1162f1fc Lock parent version for new release
new 3840f3896 Update files to be tagged for release
new cb2bd3e24 Bump version after release
new 4da3415c7 Revert opensaml version to 4.0.1 from 4.0.2-SNAPSHOT
new a7e3cff38 Deprecate a duplicative property.
new e06e21c07 Remove unnecessary cast.
new b635b1311 Open branch for development.
new c4511c9e2 Missed idwsfconsumer version.
new ed86f4250 JSPT-94 - Add support classes to invert and join BiPredicates
new b885e17ba JSE-36 - Support override of status code in error view
new d6f408a6c OSJ-308 - Honor ordered BindingCriterion precedence
new 23ff97445 OSJ-317 - Tighten Metadata schema to disallow empty elements.
new dc8f4edef IDP-1595 Initial work
new dc315a348 IDP-1595 Add Range checking to PluginVersion
new be71e7e10 IDP-1595 Add a class to capture the current Plugin state
new 016f7a343 IDP-1595 Resource construction can throw an exception
new 2a421608b IDP-1595 Start to add the per plugin truststore
new bf203543c IDP-1595 Add signature checking
new edbc32c50 IDP-1595 Installer suppoer for installed modules.
new 981455735 IDP-1438 - Capture request parameters for use in Logout
new e45d65ac0 IDP-1619 Remove use of suspect variable names.
new 3f8185e03 IDP-1084 - Make wiring of custom KeyInfo generation easier
new 67fc63e64 IDP-1099 - Expose properties via Metrics interface
new d36c9f87f IDP-1601 - Hashed IdP Session ID audit log token
new 89af49fea Revert change to format.
new d94198615 IDP-1608 - Ability to supplement the list of default MetadataNodeProcessors
new 99a9fb4f0 IDP-1619 - Deprecate terms from classes and configuration
new 1d511ead1 IDP-1619 - Deprecate terms from classes and configuration
new 738d37fa2 JSPT-96 Deprecated multi-parameter constructors to EvaluableScript
new ecce2f56f JSPT-95 Throw some Rhino script tests back into the IdP
new df591761f JSPT-95 Fix over eager tests.
new d8405b26c JSPT-95 Selectively add graal into the test scope
new 7733f265f Log use of deprecated bean names.
new 76402f2f3 Remove unneeded type declaration.
new 2608d2968 Fix comment.
new 65e52ee43 IDP-1619 - Deprecate terms from classes and configuration
new c1a21cdae IDP-1619 - Deprecate terms from classes and configuration
new 8f7cc5148 IDP-1619 - Deprecate terms from classes and configuration
new 7f70c4958 Fix javadoc nit.
new f28505616 Fix warning.
new 5d0ceb7e4 OSJ-318 - Deprecate terms from classes and configuration
new d72dfa672 IDP-1619 - Deprecate terms from classes and configuration
new 4bc336376 IDP-1621 - web.xml: authn-constraint is wrong
new 9858fbd6e IDP-1618 - Generalize the expiring-password interceptor
new 14a19b6ab Fix message default.
new 42572080f IDP-1126 - Validation and testing features focused on new deployers
new 27d461237 IDP-1575 Push Path awareness into the trustore
new 70afb433a IDP-1575 Start to flesh out the plugin installer
new 9773c07e6 IDP-1623 ResolvedDataConnector#getResolvedAttributes() can return null.
new aaa943a61 LDAP example should be configured for a single result only.
new ed2fa1262 IDP-1624 - Preventing exporting DataConnectors from running during c14n
new a9109a083 Suppress failing test for now.
new 44897700f IDP-1126 - Validation and testing features focused on new deployers
new 770795146 Fix concurrency annotations.
new 59060520d IDP-1126 - Validation and testing features focused on new deployers
new fb1927a44 IDP-1624 - Preventing exporting DataConnectors from running during c14n
new 82417267e IDP-1624 - Preventing exporting DataConnectors from running during c14n
new 0a6499e60 IDP-1624 - Preventing exporting DataConnectors from running during c14n
new d8ab66015 Checkstyle warnings
new 2b6046cbd IDP-1595 Fix plugin names in test.
new 8a3b78665 More Checkstkle
new 978ba02f2 Deprecate exportAllAttributes from the DataConnectors
new 6a3a86512 Apply exclusion during c14n to example connectors.
new 66215dba5 Fix test by adding missing file.
new 2b57135f3 IDP-1625 - CSRF token missing in Duo cancel request hyperlink
new 0b27c3bbb Fix comment at the top.
new 4b697053e IDP-1583 - Spring schema metafiles have stale references
new 9f897339d IDP-1595 Code to unpack zip and tar.gz files
new 3a999e9f8 Supress local only (for now) test
new 6e5fa0349 Adjust LDAPProperty deprecation warning.
new 3d7b6007e IDP-1629 - Clean up Spring parser and docs for MappedAttributeInMetadata
new 096d0645b Fix accidental commit.
new 5afbe7768 IDP-1631 - Setting idp.logfiles property in idp.properties is ignored
new 932f3e429 IDP-1627 - LDAPCredentialValidator isn't logging errors adequately
new 9c8e6d6bc IDP-1522 - Support for encrypted attributes in the resolver
new ebc093877 Fix Javadoc on test
new 3e5eaefc2 Fix comment
new 78e0b960d IDP-1522 - Support for encrypted attributes in the resolver
new 9a7e2bb58 IDP-1595 Code check the signature on the files
new 3dc359b92 IDP-1595 Code download an installation package
new 9fff9af0c IDP-1595 Make PluginDescription an interface
new f7ded5d84 IDP-1595 Manifest constants for Support Level
new 33d2e47bc IDP-1595 Revert version information to being URL based
new 241704c12 Add in-memory database to testbed.
new 500508874 IDP-1634 - Add configuration for more Persistent NameID storage control
new e58f1a54f Fix errors when database is reused.
new 2fc576527 IDP-1585 - Add issuer-based NameIDFormat filter policy rule
new 92e83f62e IDP-1620 - Parent pom dependency cleanup
new 167355cb3 Guava replacement.
new db431514d IDP-1635 - "No lockout key returned for request" after authentication
new 4ca0a9fc1 Fix tests.
new 5bb654bd9 IDP-1620 Cleanup idp-parent pom. Phase 1
new 631b6aece IDP-1620: Clean up dependencies for idp poms
new b0f106d25 Remove redundant java-support versions.
new 21addf09e IDP-380 - Review idp-conf Maven dependencies
new bc2f8aef1 Fix javadoc.
new 0dcff2af6 IDP-1620: Fix POM for JDK-15
new 02ab45804 JPAR-153 - Update checkstyle.xml for LineLength control
new 6131dc92c Alter EntityAttributes filter test to include value addition.
new 053195f05 Remove commented out section
new 05ba38154 IDP-1595 Add constructor to BuildWar
new 08f91a1c0 IDP-1595 the work of installing a plugin
new 4b43d06be IDP-1595 Logging, callbacks, failures
new 0a3e2f8e8 IDP-1595 <pve plugin support classes to idp-admin
new 1b93519e7 IDP-1640 - Override Spring WebFlow's ApplicationContext creation logic
new 6732f4c5c IDP-1641 - Extend LDAP CredentialValidator with password construction
new b84c14933 IDP-1640 - Override Spring WebFlow's ApplicationContext creation logic
new 21f32f419 IDP-1595 Remove support for legacy Plugin Description
new f819bcf0c Revert additional change to audit format.
new b6dee17b9 IDP-1640 - Override Spring WebFlow's ApplicationContext creation logic
new 7eebd1312 Javadoc
new 22838bfa8 Fix an additional javadoc warning.
new 95c12c13b Make test immune to Java hash changes.
new 6ae5b1b39 IDP-1642 - Migrate configuration into jars where feasible
new 7a8a06d43 Make example policy name lineup with admin flow examples.
new 663d70c4a IDP-1642 - Migrate configuration into jars where feasible
new 134c8bedb IDP-1642 - Migrate configuration into jars where feasible
new fa6be2e11 Fix missing parts of previous commit.
new 73a631007 IDP-1642 - Migrate configuration into jars where feasible
new 5a666a0b6 IDP-1642 - Migrate configuration into jars where feasible
new 44539131f IDP-1642 - Migrate configuration into jars where feasible
new 2fba79e7e IDP-1642 - Migrate configuration into jars where feasible
new 16d9e85a2 IDP-1642 - Migrate configuration into jars where feasible
new ba71284e4 IDP-1595 Police plugin locations
new c2950e7a8 IDP-1595 Change format of Plugin status into to a single property file
new bbd486a73 IDP-1642 - Migrate configuration into jars where feasible
new 7ffe39b30 IDP-1646 - Remove remaining joda-time dependencies
new 9ae35e3a8 JPAR-121 Add our Nashorn ECMAScript engine as a TEST dependency
new e47c2cdac IDP-1647 Break our standard test metadata to provoke bug.
new 0723d7ce8 IDP-1647 Dedupe unmodifiable maps in UIInfo elements
new ab67be5be IDP-1647 Preemptively avoid duplicate values in Unmodifiable maps
new 2b4716f47 IDP-1642 - Migrate configuration into jars where feasible
new 10d7da953 Add idp-conf-impl to BOM.
new f17f2c014 IDP-1642 - Migrate configuration into jars where feasible
new 769295d44 Remove redundant file import.
new 8752b2ffa IDP-1642 - Migrate configuration into jars where feasible
new 19d26d7de IDP-1642 - Migrate configuration into jars where feasible
new a84237705 IDP-1642 - Migrate configuration into jars where feasible
new 7c589fb37 IDP-1642 - Migrate configuration into jars where feasible
new fc1e89adc Fix example parent bean.
new aa37f6168 IDP-1595 Make idp.home available to all programs run via runclass
new d9d0d0fd6 Remove @Beta annotation
new 819f42581 IDP-1595 Start to build command line utility for plugins
new 219b7bb2b IDP-1642 - Migrate configuration into jars where feasible
new 2e817d15a Remove duplicate dependency
new 6c5b6994d Close directory enumerations.
new 692c0e574 Track plugin decription name change in tests
new 6416e64ea Update Plugin tests
new e14f644b7 JSCRIPTING-3 Work around bug in scripting provider current release
new 9ec8b3ec5 IDP-1595 Test Framework for PluginCLI
new a85ab65f6 Break apart utilities.xml into separate categories.
new 900dd2dfb Move security beans into separate file.
new 3e3198a04 Move DataSealer into dedicated file and add property resolvers.
new ef08e70d0 IDP-1595 Tidy up some extraneous methods in PluginState
new 851b4003c IDP-1595 Plugin Command line: List installed clients
new fe9a88c4b IDP-1595 Install Remote and From Fle
new 77d9ebfaa IDP-1650 IDP-1595 Minimal changes to Plugins support new config layout
new 79a7ed151 JSCRIPTING-4 Supress provoked by broken plugin
new 033654c1c Fix regressed test
new 22aa2e795 Clean test
new 53ee0e105 Add SCM to pom
new c2544e57d More POM Changes
new cde94d148 Replace deprecated method calls.
new 761fbec5a Remove Unused Imports
new 280907e3f IDP-1595 Teach Plugin Installer to use the IdP's property Initializer
new e9962a522 IDP-1642 - Migrate configuration into jars where feasible
new c51e3023c Fix deprecated method.
new aadcf56fb JPAR-171 - Parent POM dependencies should be managed only
new c343b7a29 Force pairwise-id example to BASE32 and update comment.
new 6b09d4f13 IDP-1595 Add required jars to distribution
new beeb39635 Fix typos in error messages
new 6bd978a1c IDP-1652 - Redesign handling of lists of descriptors
new 15aba3595 IDP-1652 - Redesign handling of lists of descriptors
new 8df0d01c0 IDP-1652 - Redesign handling of lists of descriptors
new fa5cac96e IDP-1595 Add an IdP Home- aware command line class
new d0ef00750 Fix warnings and infos in eclipse
new 683f7a60c Add a placeholder file for tests.
new 2e4fa0e7a IDP-1595 Prompt user to install certificate
new 780963921 IDP-1652 - Redesign handling of lists of descriptors
new 57a7e4d2f IDP-1658: httpclient sockets stuck in CLOSE_WAIT break CAS proxy ...
new 29192a0af IDP-1595 Fix spaces in directory names (again).
new a612e75c5 IDP-1595 Prompt user to download externals
new 35bd9e734 Add execution key to logging.
new e45f02308 IDP-1642 - Migrate configuration into jars where feasible
new 8901ecd82 IDP-1652 - Support easier integration into configuration by plugins
new a62438ed5 Better refactoring of simple Principal serializers.
new d68f3b63a Add TOTPPrincipal to core for shared use.
new 5bd32554e Switch method to Nullable input for Spring friendliness.
new 571de0c51 Make configuration "optional".
new 664209454 Move internal HTTP client bean into the new Spring file.
new 18bad210c Give some hints that downloading is happening
new 18b93279e IDP-1644 Remove complex configuration from the plugin API
new bb9cdb809 IDP-1660 Make IdPAttributeValue implement Comparable<IdPAttributeValue>
new 8ca93998c IDP-1644 Revert decomplexifying the API
new 3bd68ccf1 IDP-1595 Add Update to the plugin installer.
new 20d5dedd5 IDP-1664 - Support Module service API
new a4f2b2276 Move new module tests to idp-admin-api.
new c6974de30 Add missed files.
new b84625db4 Fix javadoc errors.
new 52af9b190 Expand set of suspect path checks.
new f18cddb35 IDP-1667 Show progress when downloading
new 5a1f1a27b IDP-1662 Fall back to a default http client bean
new 51d69ac7a IDP-1595 Report if no download location defined.
new ef9b69d81 IDP-1664 - Support Module service API
new 28150d57d IDP-1664 - Support Module service API
new 73624e9ba IDP-1664 - Support Module service API
new 45e3bbf29 Add module list to status page.
new 46fe74b3c IDP-1670 - Example date/time format in expiring password flow is invalid
new 279b2f19e Add @since to Javadocs.
new 8b53502c4 Javadoc nits.
new 984f76205 Set test files to be LF-only.
new a94b1b92c Remove old subversion LF rule.
new ac1a1b80f Remove old subversion LF rule.
new fab47356d IDP-1671 - Eliminate need to manually identify standard property sources
new 194d9f5a5 IDP-1671 - Eliminate need to manually identify standard property sources
new 37239507e IDP-1664 - Support Module service API
new ad2ebccf2 Set idp.home override in scripts.
new f8432934f IDP-1642 - Migrate configuration into jars where feasible
new c435221a7 Change logic to remove disabled files that haven't changed.
new 0c169fa45 IDP-1666 All IdPAttributeValue implementations should return meaningful getDisplayValue
new e824f611d Fix javadoc error.
new ab7b2b4e6 javadoc
new 42da77767 Remove duplicate dependency in pom
new ed3a92fc8 IDP-1664 - Support Module service API: Fix plugin installer
new 6ddfec3b1 JSE-40 Make logging levels work on command lines
new febe33023 JDUO-8 - Registering the Duo MVC Controller
new 2836155b7 IDP-1673 - Error in Extended Flow section of login.vm
new a303ac880 IDP-1668 Add some basic defense against badly formed paths
new 804822848 Re-home module under impl package and control module ID separately.
new d21ea21ac Missed test check-in.
new 220219861 Spring bean file is optional for command lines
new e35460ee3 Remove debug-logging debug statement
new 09a7998b6 IDP-1663 Handle Read Only bit
new 613ee9efa Revert unneeded idp.home addition.
new ad65818cb IDP-1664 - Support Module service API
new 7b700a90e Factor HTTP client support up to CLI base class.
new 68998234a Add second module.
new a7eeee71d Close Spring expression.
new e7d387c27 Module for RemoteUserInternal flow.
new 7aaa11ae6 Fix build
new e3456adbc Add plugin list to status page.
new 999aff67f Add more modules, relax a null assumption on an API.
new beecb494f Streamline property syntax for module IDs.
new b5efe5a4e Fix test module definition file.
new e51259bcd More login modules, convert subset of SPNEGO config into properties.
new 33c8cdcae Fix failing test.
new 5245e08e2 Module for Duo login flow.
new e24dd826e Move duo.properties under module control.
new b4e6dfc2a Redo discovery config via property.
new 2e491e4b6 Migration of authn beans into properties.
new 238c5ba8d More bean to property conversion.
new 0c03d567c Fix SPNEGO properties.
new 3319a2cb3 Register additional module services.
new 537b6d9e4 Move x509-prompt.jsp into module resource.
new e825d40bc Guard file replacement if preserved file exists.
new 4528ef969 Fix discovery URL expression.
new 68613bd97 Property conversion of SAML proxy flow.
new cdca5137a MFA login module, remove some uninteresting authn.properties.
new c318d2522 Add Duo view to Duo login module.
new d540326f6 Convert password flow to module with property-driven configuration.
new 54d541dca Load module-managed views into testbed.
new 91e442ff8 Fix module view path.
new 0093b3245 Fix some error messages and a bug in JAAS config.
new 009710ca9 IDP-1676 DataConnectors: RetryDelay does not respect noPropagate
new a46f2312b IDP-1651 Installer should conditionally put system files into place for upgrades
new a6ca10196 Eliminate superfluous module/config.
new 8ec771ba6 Rename some system files for consistency.
new bd874ce51 SpringCLI applications no longer require an input. So don't add one
new 4f14a9443 CLI adjustments.
new 330e56b7b Better error reporting and allow for directory creation on new files.
new 505b17e50 Initial set of admin modules.
new 162d0d92c Align test to directory tree creation fix.
new f666510ff Add error handling when loading services.
new cbee6800d Account for rename of test "API" packages.
new 989cb2f19 Account for package renaming of test APIs.
new 108317fb9 Account for test "API" renames.
new f5d9d55d3 Account for test "API" changes.
new 1f51ac3c5 POM cleanup, rehoming test APIs.
new 34c06df2d Rename more test APIs.
new 31ba7e660 Rename test APIs causing split packages.
new c047c8900 GEN-266 - Seal as many jars as practical
new de01a8270 Fix another split package.
new 154d737d6 remove unused import
new 61cfe4d4a All plugin modules are IMPL
new 6cbd21df3 Remove pointless imports
new 0651fe7a9 Remove duplicate properties, and default authn property to Password.
new 144e8d9e5 IDP-1665 Remove "module function" from Plugin API
new 0d23e11f8 Unsplit another set of test base classes.
new b939d3b9e IDP-1652 - Support easier integration into configuration by plugins
new 0736d0eaf Make two other registry wiring changes.
new 957f17d21 IDP-1652 - Support easier integration into configuration by plugins
new cdcd74122 Assume default client storage services and remove config file.
new 3b35985f9 IDP-1652 - Support easier integration into configuration by plugins
new 2bd217d92 Remove old system file reference.
new d8c58fee9 IDP-1652 - Support easier integration into configuration by plugins
new 83ab6034c IDP-1595 Add the ability to remove a plugins jars from the war.
new b231390d4 IDP-1679 Re-Enable tests now that there is a new Plugin to test
new 3c00e3644 IDP-1664 - Support Module service API
new 8f7d0b415 IDP-1642 - Migrate configuration into jars where feasible
new fcc2cb076 IDP-1642 - Migrate configuration into jars where feasible
new 6d7edbd50 IDP-1642 - Migrate configuration into jars where feasible
new fba2b53a3 IDP-1642 - Migrate configuration into jars where feasible
new 5e08ed5ec Conditionalize consent import.
new 4c7fb5020 IDP-1679 Move PluginState from admin-impl to installer (impl)
new c6f0154c2 Fix Test - missed a change to the test services files
new 622f77161 Make cas-protocol import conditional just for cosmetics.
new 96db67134 IDP-1642 - Migrate configuration into jars where feasible
new d71b66e81 Remove system resource from metadata service.
new ab1b5ef76 Convince tests to run without CAS default file.
new c52cb1928 Initialize field.
new 82ff5de50 Full fix to field init bug, plus unit test.
new 8291fc056 IDP-1597 Change of language incomplete when switching locale
new 8ca751985 Revert "IDP-1597 Change of language incomplete when switching locale"
new 6013fc61a IDP-1597 Change of language incomplete when switching locale (Only this time without my local testbed changes)
new 4652bea2c IDP-1642 - Migrate configuration into jars where feasible
new 18f26544f Updated idp.properties without relocated authn settings.
new 73b435c3c IDP-1595 Plugin Handling improvements
new 4acad243c IDP-1595 Plugin Handling improvements
new b746fa512 IDP-1595 Plugin Handling improvements
new 2d50b0b4d Adjust module enable testing and use a linked hash map for results.
new 3bdfb7696 IDP-1595 Plugin Handling improvements
new 806f97f42 IDP-1595 Plugin Handling improvements
new d894a6695 IDP-1664 - Support Module service API
new 597da8188 IDP-1655 Implement encoded proxy-granting tickets.
new 5ad71a034 Add endpoint resolution failure to audited event list.
new 33df8769e Javadoc fixes.
new 33d0b29a1 Javadoc warning.
new 76ecf8d3f Missing deprecation annotation.
new aed5a67a5 Replace deprecated calls.
new 2f4429362 Add deprecation annotation.
new 601fdb372 IDP-1682 Turn off all tests with current plugins prior to major rototil of the API.
new 084f72403 Rename main plugin interface and classes.
new 6aad68d82 Disable some tests pending final cleanup.
new 5e6282931 Add module pre/post information to plugins, and override equals/etc.
new 8a8c64414 Support for checking prereq modules.
new 628f787d1 IDP-1685 - Logout page does not auto-redirect to default action
new b2b528731 First draft of a property-based plugin base class.
new 9f5f8c616 Fix javadocs.
new a4c41bc3a Favor manifest over property for plugin version.
new d3ad62048 Add a base class that appends a default plugin update site.
new d610e7406 Forgot to de-abstract method.
new 2dca31e54 Switch name of file and property to use to bootstrap plugin ID.
new 16460b103 IDP-1682 Move the plugins webapp to a common location 1/many
new c87195a07 IDP-1683 Plugin Handling. Remove methods.
new 890fc7dca Remove warning from ProgressReportingOutputStream
new 25486f2d5 IDP-1595 Plugins. Add license information to the API
new 0e7ce15ef Override idp.bindings.inMetadataOrder by default for new installs.
new bca26ea8e Fix for semantic and constructor changes in commons-codec 1.15
new 659d4c01e IDP-1595 Add -cl (--List-contents) to the plugin verb
new 1c7c0961a Remove spurious admin-impl dependency (and associated damage)
new 8377dd848 IDP-1595, IDP-1683, IDP-1682 Introduce rollback support
new 295e92721 IDP-1595 Plugin Uninstall work
new de4acee61 Remove dead property from file.
new 661e00e8b Adjust property comment.
new c0ac92189 Move principal weight map into comparison file.
new ba9db5ccf Auto-wire MetadataNodeProcessors.
new 3648b26a4 Reorder for clarity.
new 7da9659b2 Simplify an expression.
new 24300a2b7 IDP-1683 IdPPlugin Handling
new b582bf03e Add a test option for probing module enabled status.
new bc871539c Re-enable plugin tests
new 747befa40 IDP-1683 Substantial rewrite of Plugin Installer
new 91ddb8686 Code tidy
new 7c97ad367 Turn all Plugin CLI tests back off again prior to changing locations
new 98f42b5bf IDP-1683 Plugins not all go into a common folder in dist
new 4742d5a98 IDP-1683 Plugin Improvements - templating
new 12ff1eff5 Support for optional resources.
new 1af4ee827 IDP-1689 Plugin update fails on Windows.
new 9501c116c Update ANSI code API and enable option in module.sh
new 0d991802c Fix nonBrowser default on RemoteUserInternal flow.
new a60e05b54 Property support for matchExpression.
new 1da2d68de Guard additional matchExpression injection points.
new d6f57dd18 Property-ify remaining matchExpression settings.
new 36e485816 Expose a module's plugin ID.
new fc0f58e4b Missed a check-in.
new 9a8d427e5 Fix test class.
new 115745eb4 Move matchExpression into property.
new 94f516548 IDP-1690 Plugin -r does not remove contents file
new 906bc99e1 IDP-1682 Modules managemebnt during Plugin installation
new a4ea440a4 Fix classpath location for plugin-webapp
new 5f349e611 Fix tests temporarily by commenting out PluginDescription
new c0d5e0650 Add property fall back for validateLoginTransitions setting.
new 395dfa913 PluginDescription had become IdPPlugin
new bf6c2bce7 IDP-1694 - IPv6 fails when servlet container uses square brackets
new aa13d7ed5 IDP-1674 - Allow override of table name on StoredId connector
new c9aec8ace IDP-1674 - Allow override of table name on StoredId connector
new af928ad17 Detabify, update annotation.
new ee8b22a86 Remove redundant keywords.
new b0941d637 IDP-1697 - StorageService-backed DataConnector
new 38b1037d8 IDP-1697 - StorageService-backed DataConnector
new c92462796 Javadoc error.
new b90461876 Comment the migrated default credential bean to avoid accidental dups.
new 3e1ac6ae4 Default failFastInitialization to false in the example.
new bb804e07b javadoc
new 0eb4a9071 Add additional properties to admin flow wiring.
new 8272a4db3 Rename some properties to fit bean conventions.
new 7ffacae2e Uncomment non-defaulted supportedPrincipals properties.
new c810a9e1c Missed use of p:id in a flow descriptor.
new 1c9bdd094 Replace trivial/defaulted String bean with property.
new 9fc0d281f Guard use of empty regex.
new 53d7dd028 Track bug fix in spring-test 5.3.0
new df5c95799 Wire in activationCondition properties for consent flows.
new 0e69eaec1 IDP-1705 - Need to remove system refererences from stock web.xml
new 84e1a379d IDP-1706: Enhance StaticPKIXFactoryBean to support PKIXTrustEvaluator...
new 18cd3fd74 Add a property default to attribute c14n flow.
new 2694d2f85 Fix direct reference to query consent interceptor bean.
new ccaf9537a Missed some p:id fixes in the login flows.
new 5ebfba539 Missing string delimiters around property expressions.
new 41fc2fd27 Fix to property fix.
new 63e20652c Suppress additional properties.
new b5cf9b34a IDP-1652 - Support easier integration into configuration by plugins
new adc98fb2f Replace references to Pair class.
new 33246a15a Add a commented map bean back to the file.
new 394273228 OSJ-304: Support hash-based directory structure in LocalDynamic
new f43233768 IDP-1706: Enhance StaticPKIXFactoryBean to support PKIXTrustEvaluator...
new aad8ca4cc IDP-1652 - Support easier integration into configuration by plugins
new 17a198a7b IDP-1652 - Support easier integration into configuration by plugins
new 87237cb77 Add note about removing CAS registry resource bean.
new edb06386b Typo in comment
new 5286147d0 Promote bcpg-jdk15on to managed
new 21565f54d IDP-1706: Enhance StaticPKIXFactoryBean to support PKIXTrustEvaluator...
new 5e6a597b5 Handle the possibility of file names having () in them. like C:\Program Files (x86) for instance
new fb4b44189 Update parent to 11.2.0-SNAPSHOT
new dfe4d95e6 Revise Windows Installer Versions
new 08f7f0260 IDP-1711 Add a simple program to look for duplicate jars/classes
new b79855fd3 Update java-support to 8.2.0-SNAPSHOT
new 935b32b1b IDP-1661 Conditionalize Graal Pre-JDK15
new 7415b0944 IDP-1691 Re-Enable modules after an installation update
new 285b05304 IDP-1683 Check for IdP Version match on install (with override)
new cb163d1e0 IDP-1683 Guard the protocol of the update URL nore fiercely
new fec4590b4 Turn analysis-only test off
new fda9b4f1f IDP-1710 add connectionStrategy to LDAP authn
new ae48b5d10 JOIDC-18 - Work out better mechanism for overriding issuer in profiles
new b7218f964 Cleanup gpg terminology Eschew 'certificates' in favor of 'keys'
new 283d72914 Refresh paths for plugin tests
new 3bd66e158 IDP-1623 Add test for data connectors returning null as resolved attributes
new 56cc95d15 Add back a dummy bean used as extension point.
new 64da01062 IDP-1710 support property replacement in XML.
new a8a7cc24d IDP-1710 (#2) support property replacement in XML.
new c0a2bfc6f IDP-1660 Sort multi-value attributes before hashing them in for consent
new 42512d736 IDP-1660 Sort multi-value attributes before hashing them in for consent
new e8c87a900 IDP-1676 Add test for LDAP failfast
new 566803240 IDP-1725 - Review CredentialValidator bean names for consistency
new 852aab8c2 Update test for strong encapsulation
new 627e8ab85 IDP-1726 - Conditional DataSealer injection failing in Spring configs
new fbfebc25c IDP-1723 - Using RelyingPartyByGroup triggers dynamic metadata lookups
new d67210d31 IDP-1727 - Support directionality in AttributeTranscoders
new af7f092f9 Make the advanced Duo config optional.
new f23addaf6 IDP-1703 - More options for "direct" NameID consumption
new 75691d84c IDP-1703 - More options for "direct" NameID consumption
new 07935091f Fix bean definition.
new 46cdc417f IDP-1732 - Registry service metrics were not added to configuration
new 1c82eff0b IDP-1733 - Metric output includes nanosecs, doesn't allow TZ adjustment
new af9743c91 Adjust status uptime output to match metric.
new f69e8afa6 IDP-1731 - Add metric to detect connectors in failure state
new fad5d5597 IDP-1729 - Extend attribute-sourced c14n to IdPAttributePrincipal
new 97528d8fb IDP-1729 - Extend attribute-sourced c14n to IdPAttributePrincipal
new 26f6dfedb Tweak property defaults.
new e47083eca IDP-1734 - Various date formatters are using the wrong year syntax
new ce1f13376 Add a bean template.
new fada92adc IDP-1728 - Add support for mapping proxied Attribute into AuthnContext
new cb768b4b5 IDP-1653 - Include ProtocolBinding in proxied SAML AuthnRequest
new ef2f85fbe IDP-1653 - Include ProtocolBinding in proxied SAML AuthnRequest
new 7cdb37060 IDP-1717 Handle deprecated velocity property names
new d9a7186b1 IDP-1701 - Auditing failed requests with Subject log the wrong username
new 3ab7b34e1 Add @since annotation to new methods.
new a2eb98d07 Inject clock skew based on existing property.
new 028500f7f IDP-1638 - Add hooks to customize proxied SAML request/response handling
new 0389b31c2 IDP-1737 - Replace calls to cryptacular base64/sha2 code
new 8b09cbb89 Replace inline hash function with delegation to flow descriptor.
new 87c90781e IDP-1643 - Configurable activationCondition for WriteFTICKSLog
new db67dd37b IDP-1738 do a strict overwrite when updating the bin folder.
new 50ac7bb09 Remove redundant version macros.
new a0b508363 IDP-1637 - Investigate possible addition of more logging facades
new 24a16ff5c For future use.
new e6d4db849 IDP-1716 - X509 flow within MFA and subject canonicalization
new 4cf971c7c Options to omit certificate from public credentials.
new 3e6243510 IDP-1716 - X509 flow within MFA and subject canonicalization
new 56528c074 IDP-1739 Add caveat about documenting new Installer Properties
new 080ef0dd6 IDP-1716 - X509 flow within MFA and subject canonicalization
new 0218e22a5 Add property defaults.
new e15b50ed2 Adjust logging to prevent complete dump of attribute objects.
new 5209a5a4f IDP-1708 - Applying consent to queries fails with absence of consent
new 829365606 Another logging tweak.
new 9a89a978c Fix MSI Product description
new 82cd523bb IDP-1741 Blunder on if the service doesn't start
new b014a5112 Add in test view location.
new 8a6061a8a IDP-1126 - Validation and testing features focused on new deployers
new f80114285 Extend DataSealer customization hooks to CAS ticket sealer.
new f8aab48b5 Revise handling of demo account feature.
new 3ef0b8506 Add postenable message.
new 93499458a IDP-1736 ant.sh fails if "path to/java" has a space in it
new 9788cc887 IDP-1704 Installer needs to conditionally enable certain modules
new 10ae2b547 Composed Matchers: The order of the children matters
new a047de106 Remove emacs-droppings
new 93ba4cd54 IDP-1376 Add test for duplcate names in AFP
new 0694d33e6 IDP-1376 Warn on all duplicate filter names
new 3d91db475 Remove duplicate super.doParse() call
new ff520576a Remove native Spring Attribute Filter Service Tests
new 88b8492d0 Fix Javadoc, on a test, with javadoc warbings supressed
new 2a0808ddc IDP-1681 Comment out SAML1 endpoints in metdata generation
new 019456c78 IDP-1376 All custom syntax parsers derive from a common base class.
new 6446a0b89 IDP-1376 Remove the "context present" test of duplicate names.
new 38d014951 Rebase DataSealerCLI on idp.home aware classes.
new fbc9f0939 IDP-1743 Support use of dynamic scope in AttributeDefinition
new a8429a437 IDP-1743 Support use of dynamic scope in AttributeDefinition
new cfc2b6728 IDP-1607 Remove residual x86 support
new ffa02ead9 IDP-1607 Check for CRTL on install
new c02fee0c1 Remove some overenthusiastic editing in cfc2b672
new 809427520 Add executable option to module resources.
new ab96174a5 IDP-1745 Installer needs to auto-locate properties files
new f77f074e0 IDP-1746 - Allow sms factor for non-browser ECP Duo authn
new bbfe2b7df Token seed for testbed testing.
new 5d7c7bbf3 Logging nits.
new d4b05a6ed Javadoc
new 414e29134 IDP-634 Default consent storage lifetime is "forever"
new 334fa220b Fix tests to reflect the new reality
new 5446312a1 IDP-1747 Local override for plugin version properties
new 09a715fc6 Property to indirect CAS ticket sealer.
new bf6c7f8b7 Skip null help URL.
new c9471a693 Allow for no application key due to AuthAPI.
new 01eda3bd8 Drop out unneeded akey field.
new 7f51a1e47 Plugin removal should not disable modules with the clean flag.
new fc359102c IDP-96 User approval of attribute release per entity or organization or VO
new 36d0be223 IDP-1751 - SAML2NameID Attribute Definition not documented
new cf614c656 IDP-1676 Extensive failFast/propagateResolution tests
new c9ad420a6 IDP-1676 Add an AttributeDefinition to the resolver file
new 33c432ada Update nit in log message.
new 125459222 IDP-1676 failfastInitiailize and propagateResolutionExceptions still not working
new efeea469d Adjust a log level.
new acadc088c IDP-1752 - Support injection of extension schemas into SchemaBuilder
new 628e72909 Correct @since tag.
new 52537664d IDP-1506 - Stop SLF4JMDCServletFilter from always creating HTTP session
new bf99ef5b3 Lock down input type.
new a322e3c0f IDP-1686 - Looping detection
new 4d223aae8 IDP-1686 - Looping detection
new 313aad210 Add beans for new scripted function/predicate variants.
new 5aa860a17 JSPT-109 - Add scripted variants of additional functional interfaces
new 9055bab05 IDP-1759 - AuthenticatingAuthority elements created in the wrong order
new 350f4826f JSPT-109 - Add scripted variants of additional functional interfaces
new c26f60315 IDP-1760 - Improve logging on redundant connectors
new ef6768270 Needs to call superclass to add default variables into context.
new 45c746938 IDP-1760 - Improve logging on redundant connectors
new 4f5d77741 Add c'tor argument annotation.
new 809fce3bc Parent config beans and other wiring related to encryption via key agreement
new 8acb379c7 IDP-1761 - Resolve dependency on insecure version of JSTL artifact
new e016fd113 Add missing @Nullable annotations on methods of SecurityConfiguration.
new 8ae8f3fa6 IDP-1764: SecurityConfiguration -LookupFunctions not doing null check...
new 48e48aa4c IDP-1764: SecurityConfiguration -LookupFunctions not doing null check...
new 6e5601320 IDP-1762 Failure attempting plugin upgrade
new 812b4f0da Nit in comment.
new 57845f34a IDP-1766 - upgrade issues due to removal of session type map
new 8c020f0bb Fix map/list oversight.
new 346b6acce IDP-1767 - Missing username/password doesn't trigger classified error
new 95be1ccfe Fix unit test.
new facdbb3fc Account for symlinks in module resource paths.
new 01d7cc0ca Some logging cleanup.
new 3590c68c2 Add plugin version to some error msgs.
new 9b0b5e5f1 Javadoc and warning fixes.
new 145142919 IDP-1770 Installer is disabling modules during plugin upgrade
new bba75dfc2 IDP-1771 Plugin Installer is not obeying getEnableOnInstall()
new 7a4e3c0dd IDP-1769 Installer locks down plugin contents files and strips write access
new 6251caeb8 Fix Build
new e205997fd Add deprecation warning to first run of Duo flow.
new 3ac52cd67 Add detection of unknown module IDs.
new af409f33c IDP-1769 Installer locks down plugin contents files and strips write access
new 6bc4dccf7 Stop enabling consent by default given no viable deployment model.
new 1a027575f Move LDAP resolver example to new examples folder.
new 6001d29bc IDP-1748 - Allow SubjectConfirmationData Address to be disabled
new 1a9ad8bd2 IDP-1774 - Clean module removal should remove .idpnew files
new 9dca16114 IDP-1706: Enhance StaticPKIXFactoryBean to support PKIXTrustEvaluator...
new c7971a571 IDP-1774 - Uninstalling module should remove .idpnew files
new 6f7232fb7 Adjust warning on missing property files.
new b23118331 Add a field designation for RelayState.
new 52f035ee7 IDP-1775 - Add audit extraction of RelayState
new 498a1b3f1 Fix typo in log message
new 6e832ac9c IDP-1776 - Installer failure on missing "additional" property files
new 177afa9a5 Style tweak
new 26aab0013 Lock parent version for new release
new c43633ab8 Update files to be tagged for release
new fce09d4a0 Bump version after release
new 28bccab21 Fix Tests
new 0faf20ec3 IDP-1779 - Deprecated property left behind
new 47d9a6070 IDP-1780 Add jetty.http.compliance=RFC7230_NO_AMBIGUOUS_URIS
new 4afe31c2d Rev WiX files in prepartion for notional 4.1.1
new c624a202d IDP-1781 Remove support for V2.0 windows upgrade
new 00eec0f30 IDP-1783 - Root URL for modules' help is wrong
new bc6654d22 IDP-1784 --updateURLS only partially works for plugin installer
new 0b0597969 IDP-1785 - Move idp-parent managed deps into java-parent-project
new 21e0ac6b6 IDP-1785 - Move idp-parent managed deps into java-parent-project
new e2ac3b337 IDP-1785 - Move idp-parent managed deps into java-parent-project
new 40c96fd48 IDP-1786 - Upgrade jQuery to 3.6.0
new c059e2c9e IDP-1788 - Problem with x509 Authentication in IDP 4.1.0
new 58aed4b45 Add a German DisplayName to make testing easier.
new 901405ff1 Add a locale interceptor into the test tree.
new 3696652e8 IDP-1792 - NPE when filter rule permitAny isn't a boolean
new 83e19f6ac Missed a return statement.
new 58ffc62cf IDP-1597 Change of language incomplete when switching locale
new 07d5bc441 IDP-1597 Change of language incomplete when switching locale
new b657b525b IDP-1794 - Memory metrics missing max heap gauge
new 78da41cf3 IDP-1795 Complete the removal of Collections from IdPAttributes
new bf3f7d07f Revert "IDP-1795 Complete the removal of Collections from IdPAttributes"
new 26d1f06bf IDP-1795 Complete the removal of Collections from IdPAttributes (again)
new 086b9684e IDP-1796 - Selection of c14n flow doesn't log enough information
new 6c26030a7 Add a test for equality override.
new f4003c656 Fix comment in messages file.
new ca14ef178 Improve logging on loop detection.
new b53b8c843 IDP-1799 - X.509 certificate access should check jakarta attribute
new 68cc64e54 Fix comment at top of file.
new e5c57094b IDP-1801 - NPEs on invalid enum values in LDAP factory bean
new 0d05ca0da IDP-1801 - NPEs on invalid enum values in LDAP factory bean
new fc93526e0 IDP-1803 - Construction of Scoping in AuthnRequests is broken
new 3bc23709d Clean up deprecation warnings and annotations.
new c3f5813a3 IDP-1802 - Empty default for idp.persistentId.retryableErrors
new 740ba8d0b Accidental deprecation/warning on setBrowserLanguageRanges method.
new a317dca35 Remove dead resource
new c918cc8bf IDP-1624 Preventing exporting DataConnectors from running during c14n
new 1452b36c9 IDP-1624 IDP-1804 Fix parser to reflect changed factory method.
new d23f1d55b Add S3 CNAME as backup metadata location for first-party plugins.
new 21ebec680 Lower default session timeout a bit.
new 9d310b03d Tweak log message.
new b6800e8cf IDP-1812 - Make consent attribute logging less noisy
new f963a33ce idp.authn.Duo.addDefaultPrincipals property not honored by DuoWeb bean
new 8b2636d61 Lock parent version for new release
new 1142abf1c Update files to be tagged for release
new 161961e7b Bump version after release
new 99d1715ac Update files to be tagged for release
new 367c8c718 Bump version after release
new 1becabae5 Speculatively move windows installers to 4.1.3
new 9c073d3e5 IDP-1757 Command line tool to emit IdP Metadata
The 7652 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list