ndg-saml 0.8.3

0.8.3

• Minor fixes for PyOpenSSL imports

0.8.2

• Allow for authorisation decision query response not setting Action namespace correctly. - Accept response with warning.

0.8.1

• Fixes for SAML response processing - allow for more liberal check of response type and for case for status message value not returned

0.8.0

• Re-factored to use ndg-httpsclient for client HTTP calls in place of M2Crypto.

• decoupled SAML bindings classes from types.

0.7.0

• add command line script for making attribute and authorisation decision query client calls.

0.6.0

• added support for SAML 2.0 profile of XACML v2.0 (http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-saml-profile-spec-os.pdf), specifically the SAML request extensions: XACMLAuthzDecisionQuery and XACMLAuthzDecisionStatement. This an alternative to the SAML defined AuthzDecisionQuery. It enables a richer functionality for expressing queries and authorisation decisions taking advantage of the full capabilities of a XACML PDP.

• fixed bug in SAML SOAP binding code: RequestBaseSOAPBinding and derived classes to act as a query factory, instead of container, for thread safety.

  Thanks to Richard Wilkinson for these contributions.

0.5.5

• allow passing a client certificate chain in client HTTPS requests

0.5.4

• fix for ndg.saml.saml2.binding.soap.server.wsgi.queryinterface.SOAPQueryInterfaceMiddleware: bug in issuerFormat property setter - setting issuerName value.

0.5.3

• fix for ndg.soap.utils.etree.prettyPrint for undeclared Nss.

0.5.2

• fix for applying clock skew property in queryinterface WSGI middleware, and various minor fixes for classfactory module and m2crytpo utilities.

0.5.1

• fix for date time parsing where no seconds fraction is present, fixed error message for InResponseTo ID check for Subject Query.

0.5

• adds WSGI middleware and clients for SAML SOAP binding and assertion query/request profile.

It is not a complete implementation of SAML 2.0. Only those components required for the NERC DataGrid have been provided (Attribute and AuthZ Decision Query/ Response). Where possible, stubs have been provided for other classes.