WEB-INF

* SAK-41692 allow SHA-256 use for SAML signing

* SAK-41692 add commented text

(cherry picked from commit 2c17baa58e4cccf3bc40777b71b40bb260d1866a)

(cherry picked from commit 185e8f61aa64a9c4b1e48eeb8dc00dba9688b464)

* SAK-41298 Document maxAuthenticationAge property for SAML auth

* Update xlogin-context.saml.adfs-prod.xml

SAK-41298 Update the ADFS max auth age to 86400 (1 day) as ADFS sets this to the time of first login

(cherry picked from commit 03a98d62729666bd46251eed5d693acc0f2cebe7)

(cherry picked from commit 4ad7482dc2a984269dc2836a608f5bb229394248)

* KNL-1284 Allow paths inside WEB-INF for tool registration

* KNL-1284 tool reg from /tools/ /WEB-INF/tools/

We allow registrations from multiple locations so that contrib tools continue to work without changes but all the core tools can move their files to a better location.

* KNL-1284 Move tool registration files to WEB-INF

This means that the tool registration files are no longer accessible through requests to the webapps directly. This change was done with:

find . -type d -path '*/webapp/tools' | while read dir; do pushd $dir; cd ..; if [ -d WEB-INF ]; then git mv tools WEB-INF; fi; popd; done

SAK-30105 Add Spring Security SAML as an authentication filter

Upgrading Spring to version 4.1.8 required

- Quartz 2.2.1 upgrade

- All xml files were updated to the modern XSD beans definition

- Many Tests were updated to using the newer ContextConfiguration

- Annotation as the old AbstractDependencyInjectionSpringContextTests was

removed and tests are now run with AbstractJUnit4SpringContextTests.

- Hibernate 3.6 is still supported in spring 4.1 but not in spring 4.2

- HibernateTemplate's *All methods were removed

- HibernateTemplate.find* needs explicit cast to List<?>

- All Kernel tests were updated to the junit 4 style, and many others

elsewhere

- Kernel test harness was removed as it's not needed

- ContextLoaderListener had some minor changes and was renamed to

SakaiContextLoaderListener (This is what binds sakai component

application context to webapps)

- GenericDAO lib was added to common and also upgraded to spring 4.1

- RSF was also upgraded to spring 4.1, see RSF-16

Add ability to display a message when a login fails so that the user can

have an idea what might be wrong and possibly what todo about it.

This allows container authenticated users to be sent to one logout URL and internally authenticated users to be sent to another one. This is useful where your container authentication needs to perform some cleanup.

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@308435 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@133281 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@129457 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@82468 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@79608 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@9142 66ffb92e-73f9-0310-93c1-f5514f145a0a

git-svn-id: https://source.sakaiproject.org/svn/login/trunk@7543 66ffb92e-73f9-0310-93c1-f5514f145a0a