SATOSA
SATOSA copied to clipboard
Proxy translating between different authentication protocols (SAML2, OpenID Connect and OAuth2)
do not ignore variables supplied using HEAD or PUT requests see: * https://www.rfc-editor.org/rfc/rfc2616#section-9.4 * https://www.rfc-editor.org/rfc/rfc2616#section-9.6 ### All Submissions: * [x] Have you checked to ensure there aren't other open [Pull...
I've added a small set of [pre-commit](https://pre-commit.com/) hooks, including the [flake8](https://flake8.pycqa.org/) linter, to the project. Developers can use these hooks by running `pre-commit install`. They can bypass the hooks if...
Primary goal was to expose registration_authority for services connected to eduGAIN. Generalised to expose all possibly useful info available from MDStore. Notable decisions: * while registration_authority is included in registration_info...
... for metadata generation. Also using sha256 as default to prevent xmlsec breaking on systems where sha1 is disabled. ## Details Pull allows for additional parameters --signature-algorithm and --digest-algorithm in...
Allow processing prompt=none/login/select_account/consent, ForceAuthn=true and IsPassive=true, including interoperability (e.g. IsPassive=true from SAML frontend is converted to prompt=none in OIDC backend) Change is backward compatible considering nobody is using `prompt` and...
Added a function that collects metadata for swamid-satosa metainfo plugin for non-SAML backends. The metadata is collected into dictionary and added to the context. The functionality added is similar to...
This is a squashed and slightly polished variant of #405 . Original description follows: > If Satosa is installed under a path which is not the root of the >...
If multiple backends are available we want to be able to specify one when creating the metadata with `satosa_saml_metadata`. Otherwise all available backend appears in `SingleSignOnService` for the frontend. ###...
Without this fix only the last back/front-end will be written to file if split is not involved. Add new method create_entities_descriptor as a counterpart to create_signed_entity_descriptor to also apply `valid`...
This PR introduces SAML Single Logout support for SATOSA. With this addition users will be able to log out of SAML Service Providers, improving security and user experience. - [Detailed...