find . -name project.xml | xargs grep 2.2

IdP

• v1.4.2
• Updated org.guanxi.idp.Logout to fix bug with non passive logout.

I’ve been using Axis2 in the ASK web services and as I love XMLBeans, I use that data binding. So when I design the WSDL I include all the domain type definitions and I’ve got an instantly useable set of web services that work in the ASK domain model. Well, almost useable. I still have to implement the skeletons.

I’m also writing an Axis2 tutorial and one thing I found was that Axis2 wsdl2java didn’t support xsdconfig files when using the XMLBeans data binding. So I added it and submitted the patches. It was a case of extending Axis2′s XMLBeans code generator to support the BindingConfig methods:

• lookupJavaNameForQName(QName name)
• lookupPackageForNamespace(String uri)

and adding a new XSDConfig class that parses the xsdconfig file and stores the mappings in an easy format to let the Axis2 XMLBeans code generator get them.

I’ve added two new options to wsdl2java:

• -xsdconfig FULL_PATH_TO_XSDCONFIG_FILE
• -xc FULL_PATH_TO_XSDCONFIG_FILE

i.e. there is a long and a short option, in keeping with other wsdl2java options.

So now I have xsdconfig support in Axis2 and I can get on with my tutorial. For the moment it can only be used if you download from trunk but it should be in the next release after 1.1.1.

IdP

• v1.4.1
• Updated org.guanxi.idp.authcookiehandlers.BodingtonCookieHandler::authenticate to fix intermittent NullPointerException when authenticating via a Bodington cookie.
• Updated WEB-INF/guanxi_idp/config/idp.xml, added ID and Cookie.
• Updated org.guanxi.idp.SSO. Modified setup() to parse and modify existing idp.xml instead of creating new one.
• Upadated WEB-INF/web.xml, added logout servlet.
• Added WEB-INF/jsp/logout.jsp.
• Added org.guanxi.idp.Logout.
• Updated org.guanxi.idp.SSO. Now stores the GuanxiPrincipal in the servlet context and referenced via a cookie. Added logout functionality.
• Added Logout filter.

SP

• v1.3.3
• Updated WEB-INF/resources/protected/headers.jsp. Added logout of SP and IdP links.
• Updated WEB-INF/_xml/guard/guard-servlet-mapping.xml. Added Logout.
• Updated WEB-INF/_xml/guard/guard-servlet.xml. Added Logout.
• Added org.guanxi.sp.guard.Logout.
• Added WEB-INF/guanxi_sp_guard/jsp/logout.jsp.
• Updated org.guanxi.sp.guard.Guard to add guard.guanxiGuardlogout to list of pass through URLs.
• Updated org.guanxi.sp.engine.Engine to add SAML Response from the IdP to the headers of the SOAP message sent to the Guard.

Common

• v1.3.2
• Updated org.guanxi.common.definitions. Added CONTEXT_ATTR_IDP_COOKIE_PREFIX, CONTEXT_ATTR_IDP_ID and CONTEXT_ATTR_IDP_COOKIE_NAME.
• Updated org.guanxi.common.GuanxiPrincipal. Added support for storing ServletContext for logout functionality.

Core

• v1.0.5
• Updated xsd/guanxi_idp.xsd, added ssoCookieAgeUnitsType, ssoCookieAgeType, ssoCookieType and added ID and Cookie to idp.
• Updated xmlbeans/guanxi.xsdconfig. Added mappings for SSOCookieAgeUnits, SSOCookieAge, SSOCookie.

gx_lib

• v1.3.7
• Updated with guanxi-beans-1.3.2.jar

I was having some problems with the Guanxi IdP running in embedded mode in the Bodington VLE. What was happening was you could log in to Bodington and then automatically log in to mvnForum as I’d linked them together using the Guanxi IdP in Bodington and the Guanxi Guard in mvnForum. However, logging out of Bodington did not result in logging out of the embedded IdP.

The IdP was storing the GuanxiPrincipal in the session, which was different from the Bodington session. So although you’d logged out of Bodington you hadn’t logged out of the IdP. So the IdP would still dish out attributes for the previous user. Not good.

So to fix it I moved the GuanxiPrincipal handling to the servlet context and referenced it via a new IdP cookie and added a couple of static methods:

org.guanxi.sp.guard.Guard.deactivatePod(Pod pod)

org.guanxi.idp.SSO.logout(GuanxiPrincipal principal)

Then layered a couple of servlets on top of them to use from a browser:

http://localhost/protectedapp/guard.guanxiGuardlogout

http://localhost/guanxi_idp/logout

The two URLs are for users, to let them logout of the SP and IdP respectively. However, applications such as Bodington will use the low level APIs directly, to incorporate Shibboleth logout in their functionality.