summaryrefslogtreecommitdiffstats
path: root/Auth/Yadis
Commit message (Collapse)AuthorAgeFilesLines
* #130: PHP 7 compatibility (fixes #129)HEADorigin/masterorigin/HEADmasterOleksandr Zahorulia2016-09-308-11/+11
|
* Merge pull request #115 from marcoceppi/warn-when-person-is-doing-harmMarco Ceppi2014-02-131-2/+7
|\ | | | | Add warning when you disable SSL, don't be silly please
| * Add warning when you disable SSL, don't be silly pleaseMarco Ceppi2014-01-221-2/+7
| |
* | Reject OpenID XML responses with a doctype CVE-2012-4554Marco Ceppi2014-01-231-0/+4
| |
* | Clean upMarco Ceppi2014-01-231-3/+3
|/
* Merge pull request #113 from thanhhh/masterMarco Ceppi2014-01-201-1/+5
|\ | | | | Add Auth_OpenID_DISABLE_SSL_VERIFY opt to disable SSL verify
| * Remove wasted white space for #113ThanhHH2014-01-161-2/+2
| |
| * Add Auth_OpenID_DISABLE_SSL_VERIFY opt to disable SSL verifyThanhHH2014-01-091-3/+7
| |
* | Yadis: drop custom replaceEntities() function and use html_entity_decodeAdam Williamson2014-01-091-24/+1
|/ | | | | | | | | | | | | | | | Yadis' ParseHTML.php has a replaceEntities() function for replacing HTML entities, with a comment that appears to explain its existence by stating "Replace numeric entities because html_entity_decode doesn't do it for us". This is breaking with PHP 5.5 because it uses the deprecated /e modifier for preg_replace() - https://github.com/openid/php-openid/issues/108 . I think this custom function is no longer needed at least with PHP 5. PHP 5 has had support for replacing numeric entities since 2003, and its entity handling code has been refined quite a lot since then. replaceEntities() has been there since 2006, and probably earlier. I guess at that time PHP 4 compatibility was still important so this was needed - I don't think PHP 4's html_entity_decode() has ever had numeric entity support - but now PHP 5 is a decade old and there's a separate PHP 4 branch of php-openid, I think we can ditch replaceEntities() in the main branch!
* Merge pull request #94 from etienneq/pass-by-reference-fixMarco Ceppi2013-12-173-3/+3
|\ | | | | issue #8 fix (PHP 5.4 call-time pass-by-reference removed)
| * Call-time pass-by-reference fixEtienne Quiel2013-04-093-3/+3
| |
* | correction for PHP < 5.2.11nao-pon2013-08-251-6/+11
| | | | | | libxml_disable_entity_loader (PHP 5 >= 5.2.11)
* | disable external XML entities and libxml errorsWill Norris2013-08-111-1/+8
|/ | | | thanks to Kousuke Ebihara for the report and patch.
* Better to use isset() in case it doesn't exist.Henrik Sjökvist2013-02-211-1/+1
|
* If $_SESSION isn't set, don't trigger a PHP notice.Henrik Sjökvist2013-02-201-1/+1
|
* Merge pull request #61 from JonTheNiceGuy/removeloggingMarco Ceppi2012-12-211-7/+0
|\ | | | | Removed logging calls for a successful retrieval, as the PlainHTTPFetcher doesn't perform logging on a successful commit.
| * Removed logging calls for a successful retrieval, as the PlainHTTPFetcher ↵Jon "The Nice Guy" Spriggs2011-10-051-7/+0
| | | | | | | | doesn't perform logging on a successful commit.
* | Set proxy options only if Auth_OpenID_HTTP_PROXY is explicitly setitsour2012-10-251-1/+7
| |
* | fixed call-time pass-by-referenceArnaud Le Blanc2012-03-041-3/+5
| |
* | allow custom CA certs to be used to verify hostsWill Norris2012-01-021-0/+6
| | | | | | | | partially fixes #38
* | restructure Auth_OpenID_VERIFY_HOST logicWill Norris2012-01-021-24/+19
| | | | | | | | make it a little more readable and obvious what we're doing here
* | In response to Issue 38 and issue 51, this patch allows forcing host ↵Jon "The Nice Guy" Spriggs2011-10-051-3/+24
|/ | | | verification on and off, or leaving the defaults as-is.
* Improve PHP 5 complianceAdrian Lang2010-10-081-1/+1
|
* fixed Parse::match() returning different types and cleaned call-by-ref warningsTim Preston2010-07-201-1/+1
| | | | | | | | | Auth/OpenID/Parse.php The match() function takes a reference parameter $match and, depending on execution flow, either returns that as an array or a string. This has been modified to now return an array in both cases. Auth/OpenID/Consumer.php Auth/Yadis/Manager.php Fixed two function calls with explicit call-by-reference parameters.
* Added the following patch from the trac.openidenabled.com bug tracker:Lilli2010-02-163-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | http://trac.openidenabled.com/trac/ticket/338 (http://trac.openidenabled.com/trac/attachment/ticket/338/openid-php5.3.diff) Patch makes php-openid library compatible with PHP 5.3, and included changes to many files. Original Message: Reported by: http://paulisageek.com/ Opened 6 months ago Last modified 2 months ago php openid library doesn't seem to work with php 5.3 "I get many PHP warnings and then the error condition on the Consumer. Deprecated: Assigning the return value of new by reference is deprecated in *path*/Auth/OpenID/Consumer.php on line 271 Deprecated: Assigning the return value of new by reference is deprecated in *path*/Auth/OpenID/Consumer.php on line 273 Warning: Parameter 1 to filter_MatchesAnyOpenIDType() expected to be a reference, value given in *path*/Auth/Yadis/XRDS.php on line 431 Warning: Parameter 2 to Auth_OpenID_GenericConsumer::_completeInvalid() expected to be a reference, value given in *path*/Auth/OpenID/Consumer.php on line 669 " It should be noted that 3 hunks across 7 files failed, and I applied most of them manually. 7 files were patched.
* Added the following patch from the trac.openidenabled.com bug tracker:Lilli2010-02-166-66/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | http://trac.openidenabled.com/trac/ticket/337 (http://trac.openidenabled.com/trac/attachment/ticket/337/php-openid-php5.3.patch) Patch makes php-openid library compatible with PHP 5.3, and included changes to many files. Original Message: Reported by: http://bfarber.myopenid.com/ Opened 7 months ago Last modified 2 months ago PHP OpenID libraries do not work on PHP 5.3 "In my own application the script simply stops working at function Auth_OpenID_setNoMathSupport() { if (!defined('Auth_OpenID_NO_MATH_SUPPORT')) { define('Auth_OpenID_NO_MATH_SUPPORT', true); } } (Namespace issue perhaps?) I downloaded the latest 2.1.3 libraries available from the site here and set them up on my local server. Using PHP 5.2.9 they work fine (with some notices) however using PHP 5.3 they don't work at all. I just get this one a white screen Deprecated: Assigning the return value of new by reference is deprecated in C:\wamp\www\openid\php-openid-2.1.3\examples\consumer\common.php on line 72 Deprecated: Assigning the return value of new by reference is deprecated in C:\wamp\www\openid\php-openid-2.1.3\Auth\OpenID\Consumer.php on line 271 Deprecated: Assigning the return value of new by reference is deprecated in C:\wamp\www\openid\php-openid-2.1.3\Auth\OpenID\Consumer.php on line 273" It should be noted that 34 hunks across about 22 files failed, and I applied most of them manually. 37 files were patched.
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-121-0/+20
| | | | | | | | | | | | | | | http://lists.openidenabled.com/pipermail/dev/attachments/20090928/2d616914/attachment.bin Original Message: anthony.lenton at canonical.com anthony.lenton at canonical.com Mon Sep 28 11:30:12 PDT 2009 darcs patch: cURL verify host "With this patch, if you define Auth_Openid_VERIFY_HOST cURL will enable host verification on ssl connections, for added security." This patch was in the form of a Darcs patch, not a normal patch. So solve this, I applied it to the Darcs repository found on openidenabled, then created a new diff file between the original Darcs repo and the new one (with the patch applied) so that I could apply it to this git repo. All hunks were applied successfully.
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | http://lists.openidenabled.com/pipermail/dev/attachments/20090206/f0d91666/attachment-0001.bin Original Message: will at willnorris.com will at willnorris.com Fri Feb 6 14:56:12 PST 2009 darcs patch: Properly handle Yadis discovery failure "The library does not curently handle failures during Yadis discovery properly. Specifically, if Yadis discovery fails, and discovery WAS being done with an XRDS document, then non-Yadis discovery should be attempted. The use-case I'm dealing with right now that exposes this bug is when an XRDS document location is advertised (via HTTP response header or <meta /> HTML tag), but the document is not able to be retrieved for whatever reason. The library is failing in this case, instead of continuing to attempt non-Yadis discovery. This patch includes two changes: - change to Yadis/Yadis.php that properly detects if XRDS was used - change to OpenID/Discovery.php that prevents discovery from halting in the above example" This patch was in the form of a Darcs patch, not a normal patch. So solve this, I applied it to the Darcs repository found on openidenabled, then created a new diff file between the original Darcs repo and the new one (with the patch applied) so that I could apply it to this git repo. All hunks were applied successfully.
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-123-4/+32
| | | | | | | | | | | | | | | http://lists.openidenabled.com/pipermail/dev/attachments/20090109/7e344691/attachment-0001.bin Original Message: ketmar at ketmar.no-ip.org ketmar at ketmar.no-ip.org Fri Jan 9 07:51:35 PST 2009 darcs patch: fix for incomplete URIs in "location" http field (for ... "* fix for incomplete URIs in "location" http field (for technorati and maybe others)" This patch was in the form of a Darcs patch, not a normal patch. So solve this, I applied it to the Darcs repository found on openidenabled, then created a new diff file between the original Darcs repo and the new one (with the patch applied) so that I could apply it to this git repo. Hunks were applied successfully.
* [ remove closing ?> tag from all files ]Luke Shepard2009-05-2811-11/+4
| | | | | | | | | | | | Reviewed By: Will Norris Facebook has a policy to not have closing ?> tags at the bottom of PHP files. It can unintentionally introduce newlines which causes ridiculous bugs. This is recommended in the Zend style guide: http://framework.zend.com/manual/en/coding-standard.php-file-formatting.html Signed-off-by: Will Norris <will@willnorris.com>
* Revert "[ remove closing ?> tag from all files ]"Luke Shepard2009-05-2711-4/+11
| | | | | | This reverts commit a2bdc5c6129ff11b1c1e29a207b1b80153ac6fb0. I'm going to stop playing in bce's fork, and start messing in my own. Sorry for the mess Brian :)
* [ remove closing ?> tag from all files ]Luke Shepard2009-05-2711-11/+4
| | | | | | | | | | Reviewed By: Will Norris Facebook has a policy to not have closing ?> tags at the bottom of PHP files. It can unintentionally introduce newlines which causes ridiculous bugs. This is recommended in the Zend style guide: http://framework.zend.com/manual/en/coding-standard.php-file-formatting.html
* [ Upgrading php-openid test framework to use PHPUnit 3.3 ]Luke Shepard2009-05-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Reviewed By: Will Norris The set of tests assumes PHPUnit 2.3, which conflicts with my environment setup. I think PHPUnit 3.3 is pretty widespread now, and under active maintenance (latest rev 4/10/2009). There's a few changes included here. I did a few mostly automated code transformations: replace "PHPUnit_TestCase" "PHPUnit_Framework_TestCase" replace "PHPUnit_TestSuite" "PHPUnit_Framework_TestSuite" removed all require_once "PHPUnit.php" - they are unnecessary. "call by reference" is now deprecated, so changed "&$" to "$" I also made a few changes to admin/testtext.php and Tests/TestDriver.php to accomodate the new syntax. Note that this just upgrades the framework; it does not guarantee that all tests pass. I'll submit future diffs to fix or disable failing unit tests. I wasn't able to get the tests running with the previous version, so I don't know if these have always been failing. I doubt that the github has automatically running unit tests, but if so then we'll have to make sure that the central repo is running the same version of PHPUnit.
* [project @ Unify method signatures to reduce E_STRICT warnings]tailor2008-12-122-2/+2
|
* [project @ Don't use Range header for ID page requests]tailor2008-10-312-4/+0
|
* [project @ ↵dAniel hAhler2008-06-221-14/+6
| | | | | | | | | | ParanoidHTTPFetcher-strpos-instead-of-preg_match-and-code-improvements] ParanoidHTTPFetcher: - Fix corner case in get() and post() for headers without any value (e.g. 'Expires:') - Use strpos() instead of preg_match() when looking for ":" (and look for ": " now instead)
* [project @ fix accept header]tailor2008-06-231-1/+1
|
* [project @ etxrd.getCanonicalID: case-insensitive comparsions, patch from =wil]Kevin Turner2008-06-131-8/+8
| | | | | | | 1. There should only be a single CanonicalID in each XRD (in the latest XRI resolution spec), so I made it use the first CID found instead of the last. 2. Use case-insensitive comparison when comparing CanonicalIDs.
* [project @ Accept response code 206 from fetcher results. Fixes #260]Kevin Turner2008-06-112-5/+7
|
* [project @ Plain http fetcher: allow for absent "path" key in parsed URL array]tailor2008-06-051-0/+4
|
* [project @ Auth_Yadis_Yadis::discover: Correctly test for null fetcher ↵tailor2008-06-051-1/+1
| | | | parameter]
* [project @ Fix Auth_OpenID_getAllowedReturnURLs, ↵tailor2008-06-051-1/+43
| | | | Auth_Yadis_DiscoveryResult::usedYadisLocation, add Auth_Yadis_getServiceEndpoints, tests]
* [project @ ParanoidHTTPFetcher: check to see if curl_version returns an ↵Kevin Turner2008-05-312-2/+7
| | | | array or not.]
* [project @ Update license strings to say Apache]tailor2008-05-308-8/+8
|
* [project @ Set User-Agent string in fetchers. include various versions]tailor2008-05-303-1/+6
|
* [project @ ParanoidHTTPFetcher: Fix string interpolation of max response size]tailor2008-05-291-1/+1
|
* [project @ Add fetch response size limiting to libcurl fetcher]tailor2008-05-291-2/+6
|
* [project @ Fetcher: add Range header: 0-1MB]tailor2008-05-293-2/+6
|
* [project @ Only fetch 1MB of data in Auth/Yadis/PlainHTTPFetcher.php]tailor2008-05-291-1/+6
|
* [project @ fix copyright notices to include 2008]http://mike.glover.myopenid.com2008-05-278-8/+8
|
* [project @ Yadis: add application/xhtml+xml to Accept header, include qualities]Kevin Turner2008-05-211-1/+2
|
* [project @ Accept HTML when making YADIS discovery]Artemy Tregubenko2008-05-121-1/+1
| | | | | Some http servers strictly follow http spec and do not send html reply when text/html isn't listed in Accept: header. Because of this YADIS discovery fails for these servers. This patch adds 'text/html' to Accept: header.
* [project @ Collapse allowedURL and isHTTPS checks into HTTPFetcher.canFetchURL]tailor2008-05-213-23/+34
|
* [project @ ParanoidHTTPFetcher: log error condition when returning null]tailor2008-05-201-0/+29
|
* [project @ Handle malformed HTTP headers in fetchers]tailor2008-03-132-4/+12
|
* [project @ Handle null responses in Yadis.php]tailor2008-03-131-1/+1
|
* [project @ Extend Yadis HTML discovery regex to support XHTML-style tags]tailor2008-03-131-1/+1
|
* [project @ Add conditional check for CURLOPT_NOSIGNAL (thanks: ↵tailor2008-02-191-1/+4
| | | | http://ols2000.myopenid.com/)]
* [project @ ParanoidHTTPFetcher.php (supportsSSL): Updated to work under PHP 4.]tailor2008-01-241-1/+7
| | | | The official documentation lies, curl_version() returns an array in PHP 5 and a string in PHP 4.
* [project @ Fixing documentation]tailor2008-01-161-1/+1
|
* [project @ Remove PHP5ism (stripos())]tailor2007-12-311-1/+1
|
* [project @ Fixed discovery failure due to case-sensitive comparison of ↵Trevor Johns2007-12-301-1/+1
| | | | | | | | | | | 'Location:' header] If an HTTP redirect was issued during discovery with a 'Location:' header that doesn't exactly match case (such as 'location:' or 'LOCATION:'), discovery would fail. This is incorrect behavior per RFC 2616, Section 4.2. This behavior is corrected by using a case insensitive compare when checking for HTTP redirects.
* [project @ Removed unused $http_response from Auth_Yadis_Manager]Trevor Johns2007-12-291-1/+0
|
* [project @ Make Auth_Yadis_identifierScheme handle an empty string]tailor2007-11-131-1/+2
|
* [project @ Clean up manager in session when response has different URL from ↵tailor2007-10-161-7/+16
| | | | request]
* [project @ Added function to Yadis/XRDS.php that parses the Expires date out ↵tailor2007-10-011-0/+30
| | | | of an XRD]
* [project @ supportsSSL docstrings]tailor2007-05-222-0/+6
|
* [project @ Remove trigger_error calls from fetcher code]tailor2007-05-222-23/+0
|
* [project @ Add SSL support detection to fetchers]tailor2007-05-213-0/+49
|
* [project @ Use correct URL when storing manager in session]tailor2007-05-081-4/+4
|
* [project @ Make yadis META tag search ignore comments]tailor2007-04-261-0/+14
|
* [project @ @package Yadis -> OpenID]tailor2007-04-039-22/+22
|
* [project @ Docblock additions and fixes ]tailor2007-04-032-1/+23
|
* [project @ Add CURL override for testing]tailor2007-04-021-1/+5
|
* [project @ FIX: Plain fetcher now returns correct headers array]tailor2007-04-021-1/+1
|
* [project @ FIX: CURL fetcher POST now supports extra_headers]tailor2007-04-021-3/+7
|
* [project @ Docstring updates in Auth/Yadis/Manager.php]tailor2007-04-021-0/+6
|
* [project @ Global variables conflict resolution]tailor2007-03-231-1/+2
|
* [project @ [2/2] Change Services_Yadis_ and Services/Yadis/]tailor2007-03-1211-181/+187
|
* [project @ [1/2] Move Services/Yadis to Auth/]tailor2007-03-1211-0/+2764
generated by cgit v1.1 at 2025-05-13 07:34:51 +0000