summaryrefslogtreecommitdiffstats
path: root/lib/SimpleSAML/XML/SAML20
Commit message (Collapse)AuthorAgeFilesLines
* Delete the old SAML2 classes.Olav Morken2009-08-034-1615/+0
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1621 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Move constants from sspmod_saml2_Const to SAML2_Const.Olav Morken2009-08-031-3/+3
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1597 44740490-163a-0410-bde0-09ae8108e29a
* SAML20/AuthnResponse: Send correct response code for errors.Olav Morken2009-07-131-1/+1
| | | | | | | | | A small bug with the previously committed code, which could result in a response being sent with a status code of success when it was actually an error. The error was in the code which was included for backwards- compatibility. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1583 44740490-163a-0410-bde0-09ae8108e29a
* SAML20_AuthnResponse: Add getStatus() function.Olav Morken2009-07-131-9/+42
| | | | | | | Add a getStatus() function, which retrieves the status code of the response as a sspmod_saml2_Error object. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1578 44740490-163a-0410-bde0-09ae8108e29a
* SAML20/AuthnResponse: Allow the status to be passed as an instance of ↵Olav Morken2009-07-131-11/+39
| | | | | | sspmod_saml2_Error. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1575 44740490-163a-0410-bde0-09ae8108e29a
* Allow white characters preceeding and proceeding Issuer in request.Andreas Åkre Solberg2009-06-161-1/+1
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1523 44740490-163a-0410-bde0-09ae8108e29a
* Patch by Thomas Graff: Handling invalid casing of true and false in authrequestAndreas Åkre Solberg2009-05-111-6/+7
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1500 44740490-163a-0410-bde0-09ae8108e29a
* Thomas Graff: Patch to fallback to default value instead of showing error ↵Andreas Åkre Solberg2009-05-041-11/+30
| | | | | | when invalid boolean format set on ispassive or forceauthn git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1487 44740490-163a-0410-bde0-09ae8108e29a
* Make it possible to send logout responses to a different endpoint than ↵Olav Morken2009-04-161-1/+4
| | | | | | | | logout requests. Patch by Joakim Recht <jre@trifork.com> git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1460 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Support configurable attribute encodings.Olav Morken2009-04-161-11/+43
| | | | | | | | | This option makes it possible to include raw XML in the attributes sent to an SP. A new option is introduced: attributeencodings Patch by Joakim Recht <jre@trifork.com>. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1459 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Remove debug code for jpegPhoto.Olav Morken2009-04-031-10/+3
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1458 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Handle unknown NameID formats.Olav Morken2009-04-011-11/+54
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1455 44740490-163a-0410-bde0-09ae8108e29a
* Fix Conditions time validity to be session durationAndreas Åkre Solberg2009-03-111-3/+10
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1395 44740490-163a-0410-bde0-09ae8108e29a
* Adding support for the IdP-first flow with SAML 2.0, where there is no ↵Andreas Åkre Solberg2009-02-061-4/+5
| | | | | | authentication request, and an unsolited response is sent back to the SP. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1242 44740490-163a-0410-bde0-09ae8108e29a
* Fix for handling NoPassive responses to Google apps when using NameIDFormats ↵Andreas Åkre Solberg2009-01-131-15/+25
| | | | | | that are different from Transient... git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1146 44740490-163a-0410-bde0-09ae8108e29a
* Verify recipient of SAML2 assertions.Olav Morken2008-11-171-5/+23
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1017 44740490-163a-0410-bde0-09ae8108e29a
* increase support for persistent name identifiers: for now only based on a ↵Hans Zandbelt2008-10-301-2/+7
| | | | | | specified attribute value (like e-mail nameid format) git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@955 44740490-163a-0410-bde0-09ae8108e29a
* AuthnResponse: Use SimpleSAML_Utilities::loadPrivateKeyOlav Morken2008-10-201-10/+4
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@930 44740490-163a-0410-bde0-09ae8108e29a
* SAML2/AuthnResponse: use SimpleSAML_Utilities::loadPublicKeyOlav Morken2008-10-201-17/+6
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@926 44740490-163a-0410-bde0-09ae8108e29a
* Fix of typo in non-successfull StatuscodeMads Freek Petersen2008-09-091-2/+2
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@866 44740490-163a-0410-bde0-09ae8108e29a
* Send non Success StatusCode as per the spec ie. as a two-level StatusCode ↵Mads Freek Petersen2008-09-061-4/+6
| | | | | | | | | | | | | element. Currently the only non Succes statuscode we use is NoPassive. HTTPPost required a follow up fix thats prevents a runtime error that occurs if we try to encrypt an assertion thats missing in unsuccessfull responses git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@858 44740490-163a-0410-bde0-09ae8108e29a
* SAML2-SP: Moved session creating from AuthnResponse class to ↵Olav Morken2008-08-191-13/+65
| | | | | | AssertionConsumerService. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@815 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Fix transient NameId for logout.Olav Morken2008-07-181-3/+5
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@787 44740490-163a-0410-bde0-09ae8108e29a
* Create a persistent session index for SAML2 SPs.Olav Morken2008-07-171-2/+4
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@786 44740490-163a-0410-bde0-09ae8108e29a
* SAML2 SP: Add support for CA path validation.Olav Morken2008-07-041-4/+17
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@771 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Add support for encrypted private keys for decrypting encrypted ↵Olav Morken2008-07-011-0/+3
| | | | | | assertions. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@737 44740490-163a-0410-bde0-09ae8108e29a
* SAML2: Validate signature om samlp:Response before decrypting Assertions.Olav Morken2008-07-011-10/+22
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@736 44740490-163a-0410-bde0-09ae8108e29a
* SAML2_AuthnRequest: Add support for retrieving the request id of the ↵Olav Morken2008-06-301-3/+19
| | | | | | generated request. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@726 44740490-163a-0410-bde0-09ae8108e29a
* SAML2_AuthnResponse: Code for indicating different status codes to ↵Olav Morken2008-06-301-8/+11
| | | | | | AssertionConsumerService. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@725 44740490-163a-0410-bde0-09ae8108e29a
* Update everything to use the autoloader.Olav Morken2008-06-064-24/+0
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@610 44740490-163a-0410-bde0-09ae8108e29a
* Adding support for setting custom AttributeNameFormatsAndreas Åkre Solberg2008-06-031-5/+20
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@595 44740490-163a-0410-bde0-09ae8108e29a
* Session: Remove uses of SimpleSAML_Session::init(...).Olav Morken2008-05-151-2/+2
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@566 44740490-163a-0410-bde0-09ae8108e29a
* Make it possible to set a default value for IsPassive in SP-hosted metadata.Olav Morken2008-05-141-1/+20
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@554 44740490-163a-0410-bde0-09ae8108e29a
* Change SAML20 & Shib13 xml handlers to use generateID and generateTimestamp ↵Olav Morken2008-05-131-7/+7
| | | | | | from Utilities. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@546 44740490-163a-0410-bde0-09ae8108e29a
* Added code to retrieve the ID used in a LogoutRequest and the InResponseTo ↵Olav Morken2008-05-132-2/+41
| | | | | | attribute from a LogoutResponse. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@541 44740490-163a-0410-bde0-09ae8108e29a
* Change SAML2 LogoutRequest and LogoutResponse to use generateID and ↵Olav Morken2008-05-132-38/+5
| | | | | | generateTimestamp from Utilities. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@540 44740490-163a-0410-bde0-09ae8108e29a
* Added support for IsPassive flag.Mads Freek Petersen2008-05-122-51/+117
| | | | | | | | If NoPassive is returned (ie. user not logged in) AuthnResponse.process creates a valid session with an empty set of attributes. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@537 44740490-163a-0410-bde0-09ae8108e29a
* Added support for __default__ host configuration and __dynamic__ entity ↵Andreas Åkre Solberg2008-04-281-2/+11
| | | | | | pointing to generated metadata git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@522 44740490-163a-0410-bde0-09ae8108e29a
* Added support for encryption/decryption of assertionsMads Freek Petersen2008-04-221-3/+69
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@509 44740490-163a-0410-bde0-09ae8108e29a
* git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@505 ↵Mads Freek Petersen2008-04-221-8/+17
| | | | 44740490-163a-0410-bde0-09ae8108e29a
* Add support for ForceAuthn on the IdP side.Olav Morken2008-04-011-0/+30
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@481 44740490-163a-0410-bde0-09ae8108e29a
* Added support for leaving out the samlp:NameIDPolicy in the request by ↵Andreas Åkre Solberg2008-03-251-6/+24
| | | | | | setting the NameIDFormat to null in the SAML 2.0 SP metadata. Requested by James Hartford. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@424 44740490-163a-0410-bde0-09ae8108e29a
* Cleaning up authentication request code, and saml 2 sp hosted metadataAndreas Åkre Solberg2008-03-061-40/+62
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@373 44740490-163a-0410-bde0-09ae8108e29a
* Adding a SIMPLESAML_INCPREFIX parameter before the inclusion of new files. ↵Andreas Åkre Solberg2008-03-054-17/+17
| | | | | | This workaround was neccessary for university of oslo to make simplesamlphp work when ini_Set was not available. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@353 44740490-163a-0410-bde0-09ae8108e29a
* Adding option for protecting metadata. Default is that metadata is not ↵Andreas Åkre Solberg2008-03-031-1/+1
| | | | | | protected (publicly available) git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@340 44740490-163a-0410-bde0-09ae8108e29a
* Adding SPNameQualifier again since some implementations need it.Andreas Åkre Solberg2008-02-132-7/+21
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@287 44740490-163a-0410-bde0-09ae8108e29a
* fix wrong default value for forceauthn settingHans Zandbelt2008-02-041-2/+2
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@250 44740490-163a-0410-bde0-09ae8108e29a
* Alot of template options is now moved from beeing required to beeing optional.Andreas Åkre Solberg2008-02-041-4/+9
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@249 44740490-163a-0410-bde0-09ae8108e29a
* Implementeed better error handling. Separate static function for fatal error ↵Andreas Åkre Solberg2008-01-311-0/+1
| | | | | | in utitilies that present a error the user. This page to the user shows a error text that can be localized to several languages, the error page also shows debug text, and a way to submit errors to the administrators. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@232 44740490-163a-0410-bde0-09ae8108e29a
* Changed SAML2 AuthnResponse processing.Olav Morken2008-01-311-109/+312
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@231 44740490-163a-0410-bde0-09ae8108e29a
* Changed SAML2:AuthnResponse to use the new Validator class, and cleaned up ↵Olav Morken2008-01-311-171/+82
| | | | | | getAttributes(). git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@229 44740490-163a-0410-bde0-09ae8108e29a
* Setting file properties in svn metadata. Adding header in all library php ↵Andreas Åkre Solberg2008-01-302-22/+10
| | | | | | files with version etc. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@222 44740490-163a-0410-bde0-09ae8108e29a
* Improved the SAML messages templates regarding XML namespaces optimalization ↵Andreas Åkre Solberg2008-01-302-42/+27
| | | | | | etc. in the logout request and response. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@221 44740490-163a-0410-bde0-09ae8108e29a
* The session class now takes the nameid as an array with value and format, ↵Andreas Åkre Solberg2008-01-302-36/+41
| | | | | | instead of two separate methods. this resulted in changes in several files. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@218 44740490-163a-0410-bde0-09ae8108e29a
* Removed references to SPNameIdentifier, and added support for at SP to ↵Andreas Åkre Solberg2008-01-292-11/+8
| | | | | | define ForceAuthn = true in metadata. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@216 44740490-163a-0410-bde0-09ae8108e29a
* Changed the authentication request in SAML 2.0. More effective xml ↵Andreas Åkre Solberg2008-01-291-33/+24
| | | | | | namespaces, removed some unneccessary optional fields, etc. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@213 44740490-163a-0410-bde0-09ae8108e29a
* forgot to checkin the bitmap for favicon, here it isAndreas Åkre Solberg2008-01-282-17/+2
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@207 44740490-163a-0410-bde0-09ae8108e29a
* More efficient session usage. Now caching only assoc array for values from ↵Andreas Åkre Solberg2008-01-281-1/+0
| | | | | | logout request. Also implemented a clean() function to call after successfully logged out. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@205 44740490-163a-0410-bde0-09ae8108e29a
* Removed caching of AuthnResponses in Session object. This reduces the ↵Andreas Åkre Solberg2008-01-281-1/+1
| | | | | | session storage with approx 90%!! git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@203 44740490-163a-0410-bde0-09ae8108e29a
* Adding some headers in files, and setting the ID keyword in svnAndreas Åkre Solberg2008-01-281-12/+6
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@201 44740490-163a-0410-bde0-09ae8108e29a
* Implemented more efficient storage of AuthnRequests in session. Instead of ↵Andreas Åkre Solberg2008-01-282-45/+25
| | | | | | | | | caching the complete request object, we now cache an assoc array with the neccessary parameters. Both for SAML 2.0 and Shib 1.3. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@200 44740490-163a-0410-bde0-09ae8108e29a
* XML:SAML20: Escape variables in XML output.Olav Morken2008-01-244-16/+16
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@190 44740490-163a-0410-bde0-09ae8108e29a
* Change SAML2 & Shib13 AuthResponse to use the new ↵Olav Morken2008-01-221-19/+12
| | | | | | fingerprint-retrival-function in xmlseclibs. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@184 44740490-163a-0410-bde0-09ae8108e29a
* Rewrite of SAML2 HTTP Redirect request signing, now using xmlseclibs. Lasse Birnbaum Jensen2008-01-201-1/+0
| | | | | | | | | | | | | | | Implemented verification of authenticationrequest, logoutrequest and logoutresponse. Moved config of signing and verification to individual metadata entries. To sign/verify on hosted SP there must be a certificate and a privatekey. The normal certificate and privatekey of the IdP are reused when signing is enabled. To verify remote SP and/or IdP the remote certificate must be present. This commit is tested to some extend - please post bugs on google code project page. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@178 44740490-163a-0410-bde0-09ae8108e29a
* Updating the SAML 2.0 authnresponse generation to use the new API in ↵Andreas Åkre Solberg2008-01-171-1/+1
| | | | | | xmlseclibs for adding reference ID attribute... Basicly an updated needed to make the saml 2 part work with the new xmlseclib version git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@176 44740490-163a-0410-bde0-09ae8108e29a
* Typo NameIDFormat versus NameIDformat. Thanks to James HartfordAndreas Åkre Solberg2008-01-171-3/+3
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@174 44740490-163a-0410-bde0-09ae8108e29a
* Applied patch from Hans Zandbelt (with some modifications). This patch ↵Olav Morken2008-01-172-1/+3
| | | | | | enables signing of authentication requests if there is an privatekey-element in the SP's metadata. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@172 44740490-163a-0410-bde0-09ae8108e29a
* Change the metadata set we retrieve the base64encode parameter from. Now at ↵Andreas Åkre Solberg2008-01-111-1/+1
| | | | | | the IdP side it will read this option from the SAML 2.0 SP Remote metadata. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@151 44740490-163a-0410-bde0-09ae8108e29a
* Updated files to use the new abstraction classes for metadata instead of the ↵Andreas Åkre Solberg2008-01-074-8/+8
| | | | | | old class. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@143 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Changed getInResponseTo() to use a different xPath ↵Olav Morken2007-12-171-3/+4
| | | | | | approach. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@123 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Changed functions in class to use self::<constant> ↵Olav Morken2007-12-171-6/+6
| | | | | | instead of <constant>. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@122 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Changed getInResponseTo() to use class constant ↵Olav Morken2007-12-171-1/+1
| | | | | | SAML2_PROTOCOL_NS instead of string. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@121 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Removed SAML2_BINDINGS_POST and SAML2_STATUS_SUCCESS ↵Olav Morken2007-12-171-4/+0
| | | | | | unused run-time defines. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@120 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Made SAML2_ASSERT_NS and SAML2_PROTOCOL_NS constants ↵Olav Morken2007-12-171-3/+7
| | | | | | of the class instead of run-time defines. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@119 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:LogoutResponse - Escape InResponseTo value in response data.Olav Morken2007-12-171-1/+1
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@117 44740490-163a-0410-bde0-09ae8108e29a
* SAML2:AuthnResponse - Added getInResponseTo() method to get the InResponseTo ↵Olav Morken2007-12-171-1/+29
| | | | | | attribute of the response-element. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@116 44740490-163a-0410-bde0-09ae8108e29a
* SAML2/AuthnResponse: Encode values that may contain special characters (such ↵Olav Morken2007-12-141-9/+9
| | | | | | as '"&<>'). git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@109 44740490-163a-0410-bde0-09ae8108e29a
* SAML2/AuthnResponse: Removed commented-out $authnResponse assignment.Olav Morken2007-12-131-72/+0
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@98 44740490-163a-0410-bde0-09ae8108e29a
* Added support for multivalued attributes in the IdP.Olav Morken2007-11-301-7/+35
| | | | git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@90 44740490-163a-0410-bde0-09ae8108e29a
* Added SAML 2.0 IdP Discovery service. Read more here: ↵Andreas Åkre Solberg2007-10-121-0/+1
| | | | | | http://rnd.feide.no/2007/10/12/saml-20-idp-discovery-service-implemented/ git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@23 44740490-163a-0410-bde0-09ae8108e29a
* Simplified metadata! tidy up in metadata. Added support for sending metadata ↵Andreas Åkre Solberg2007-09-304-5/+8
| | | | | | to feide. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@16 44740490-163a-0410-bde0-09ae8108e29a
* fix exception with fingerprint mismatch. Fix discovery of HTTP-HOST when ↵Andreas Åkre Solberg2007-09-251-1/+1
| | | | | | Host: header contains port number. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@12 44740490-163a-0410-bde0-09ae8108e29a
* Initial commit of version 0.4 of simplesamlphpAndreas Åkre Solberg2007-09-144-0/+1057
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2 44740490-163a-0410-bde0-09ae8108e29a
generated by cgit v1.1 at 2025-06-08 03:09:12 +0000