Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | bugfix: Do not try to apply SSP's base URL if REQUEST_URI does not match. | Jaime Pérez | 2016-08-22 | 1 | -2/+14 |
| | | | | It is possible that the current script ($_SERVER['SCRIPT_FILENAME']) is inside SimpleSAMLphp's 'www' directory. However, even if that's the case, we should not enforce our base URL (as set in the 'baseurlpath' configuration option) if the request URI ($_SERVER['REQUEST_URI']) does not contain the relative path to the script. This is the case of AuthMemCookie, for example, where accessing a random URL protected by Apache, leads to the execution of a SimpleSAMLphp script, where SimpleSAML\Utils\HTTP::getSelfURL() must not try to be smart when guessing the current URL. | ||||
* | bugfix: Restore the capability to get our self URL when invoked from a ↵ | Jaime Pérez | 2016-07-15 | 1 | -17/+81 |
| | | | | | | | | | | third-party script. Recent fixes for URL guessing and building addressed bugs in the code that were preventing the 'baseurlpath' from being used properly. However, they introduced a new issue, as the code was assuming the current URL would always point to a SimpleSAMLphp script. This is not always true, of course, as any script can invoke our API and end up trying to get its own URL (for example, when calling requireAuth()). In order to fix this, we monitor mismatches between SimpleSAMLphp's installation path and the absolute, real path to the current script. When there's a mismatch, it means we are running a third-party script outside SimpleSAMLphp, and therefore we should NOT enforce 'baseurlpath'. This introduces an additional issue, as applications behind a reverse proxy may cause trouble to guess the right URL (we will use the URL as seen by SimpleSAMLphp in the server, which is not necessarily the same as the user sees with a reverse proxy in between). For the moment, we'll leave the responsibility to sort that issue out to implementors. It might be a good idea to add a page to the wiki explaining how to do this. This resolves #418. | ||||
* | tests: Fix CI build. | Jaime Pérez | 2016-06-27 | 1 | -8/+8 |
| | | | | Now that we are using realpath() to try to obtain the URL relative to the base URL path of SSP, we need to use real scripts or realpath() will return an empty string. | ||||
* | Change the implementation of SimpleSAML\Utils\HTTP::getSelfURL() and ↵ | Jaime Perez Crespo | 2016-06-08 | 1 | -0/+74 |
| | | | | getSelfURLNoQuery() to honor the 'baseurlpath' configuration option instead of simply using the environment. They were actually broken since they were using it to build the scheme, host and port, but completely ignoring the path, rendering wrong URLs in between what was configured in 'baseurlpath' and the real information in the environment. This resolves #396, but also affects #5. The changes to getSelfURLNoQuery() in #391 are unnecessary now, since we now basically getting the full URL and remove the query afterwards. | ||||
* | Make sure the modifications to $_SERVER in the tests do not go beyond each test. | Jaime Perez Crespo | 2016-06-07 | 1 | -0/+20 |
| | |||||
* | Add some tests for SimpleSAML\Utils\HTTP::addURLParameters(). | Jaime Perez Crespo | 2016-06-07 | 1 | -2/+45 |
| | |||||
* | Allow regular expression matching of trusted.url.domains. | Jon Dufresne | 2016-06-01 | 1 | -0/+73 |
| | | | | Fixes #379 | ||||
* | Add some tests for the new SimpleSAML\Utils\HTTP::guessBasePath(). | Jaime Perez Crespo | 2016-04-19 | 1 | -0/+47 |
| | |||||
* | Complete the code coverage for SimpleSAML\Utils\Arrays. | Jaime Perez Crespo | 2016-03-04 | 1 | -0/+3 |
| | |||||
* | Typo. | Jaime Perez Crespo | 2016-03-04 | 1 | -1/+1 |
| | |||||
* | Fix mistake in the test just added. | Jaime Perez Crespo | 2016-03-04 | 1 | -3/+4 |
| | |||||
* | Complete unit testing for SimpleSAML\Utils\Time by adding test for ↵ | Jaime Perez Crespo | 2016-03-04 | 1 | -0/+43 |
| | | | | initTimezone(). | ||||
* | Complete the coverage for SimpleSAML\Utils\Time::parseDuration(). | Jaime Perez Crespo | 2016-03-04 | 1 | -19/+45 |
| | |||||
* | Add tests for SimpleSAML\Utils\Time::parseDuration(). | Jaime Perez Crespo | 2016-03-04 | 1 | -0/+77 |
| | |||||
* | Initial test for SimpleSAML\Utils\Time. | Jaime Perez Crespo | 2016-03-03 | 1 | -0/+21 |
| | |||||
* | Rename Utils\HTTP::getSelfHostWithoutPort() to ↵ | Jaime Perez Crespo | 2016-03-03 | 1 | -6/+15 |
| | | | | Utils\HTTP::getSelfHostWithNonStandardPort(), change the logic, and reimplement Utils\HTTP::getSelfHost() to depend on use the former. Complete the tests to include the case of port 443 while using HTTPS. | ||||
* | Fixes issue 337 | Andrés Blanco | 2016-03-02 | 1 | -0/+35 |
| | |||||
* | Move MetadataTest to SimpleSAML\Test\Utils\Config/MetadataTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -41/+44 |
| | |||||
* | Move RandomTest to SimpleSAML\Test\Utils\RandomTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -3/+11 |
| | |||||
* | Move Utils_ConfigTest to SimpleSAML\Test\Utils\ConfigTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -4/+10 |
| | |||||
* | Move Utils_AttributesTest to SimpleSAML\Test\Utils\AttributesTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -16/+19 |
| | |||||
* | Move Utils_ArraysTest to SimpleSAML\Test\Utils\ArraysTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -11/+14 |
| | |||||
* | Move NetTest to SimpleSAML\Test\Utils\NetTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -38/+49 |
| | |||||
* | Move CryptoTest to SimpleSAML\Test\Utils\CryptoTest. | Jaime Perez Crespo | 2016-02-26 | 1 | -8/+19 |
| | |||||
* | Add full test coverage to ↵ | Jaime Perez Crespo | 2016-02-03 | 1 | -0/+36 |
| | | | | SimpleSAML\Utils\Config\Metadata::isHiddenFromDiscovery(). | ||||
* | Complete the test coverage for \SimpleSAML\Utils\Config\Metadata::getContact(). | Jaime Perez Crespo | 2016-02-03 | 1 | -0/+19 |
| | |||||
* | Fix tests for SimpleSAML\Utils\Attributes::getExpectedAttribute(). | Jaime Perez Crespo | 2015-09-01 | 1 | -4/+43 |
| | |||||
* | Basic reformatting. | Jaime Perez Crespo | 2015-09-01 | 1 | -11/+24 |
| | |||||
* | Refactor SimpleSAML\Utils\Arrays::normalizeAttributesArray() to ↵ | Jaime Perez Crespo | 2015-09-01 | 2 | -49/+53 |
| | | | | SimpleSAML\Utils\Attributes::normalizeAttributesArray(). | ||||
* | Add a new \SimpleSAML\Utils\Attributes class. | Jaime Perez Crespo | 2015-09-01 | 1 | -0/+101 |
| | |||||
* | Merge branch 'master' of https://github.com/tldev/simplesamlphp into ↵ | Jaime Perez Crespo | 2015-08-11 | 1 | -0/+49 |
|\ | | | | | | | feature/config-from-env | ||||
| * | Added tests for getConfigDir | Tom Johnell | 2015-07-22 | 1 | -0/+49 |
| | | |||||
* | | Reimplement \SimpleSAML\Utils\Crypto::aesDecrypt() and ↵ | Jaime Perez Crespo | 2015-07-20 | 1 | -3/+3 |
| | | | | | | | | \SimpleSAML\Utils\Crypto::aesEncrypt() to use openssl instead of mcrypt. This removes the direct dependency on mcrypt and closes #228. | ||||
* | | Use always the private methods to test AES encryption/decryption. | Jaime Perez Crespo | 2015-06-22 | 1 | -2/+8 |
| | | |||||
* | | Move the aes[En|De]crypt() functionality in \SimpleSAML\Utils\Crypto to ↵ | Jaime Perez Crespo | 2015-06-20 | 1 | -0/+72 |
| | | | | | | | | internal methods where the secret is passed as a parameter. Then we don't need a working configuration to test the functionality. | ||||
* | | Revert "Add some tests for SimpleSAML\Utils\Crypto." | Jaime Perez Crespo | 2015-06-14 | 1 | -48/+0 |
| | | | | | | | | This reverts commit aec9571dc85c861ac0b6e081782aae30f9b6d2c1. | ||||
* | | Add some tests for SimpleSAML\Utils\Crypto. | Jaime Perez Crespo | 2015-06-14 | 1 | -0/+48 |
|/ | |||||
* | Add tests for SimpleSAML\Utils\Random. | Jaime Perez Crespo | 2015-05-27 | 1 | -0/+18 |
| | |||||
* | Fix namespace in phpdoc. | Jaime Perez Crespo | 2015-05-27 | 1 | -1/+1 |
| | |||||
* | Simplify phpunit test structure. | Olav Morken | 2015-05-26 | 3 | -0/+444 |
* One test suite for all tests. * One file per class that is tested. These changes should make it easier to add new tests. |