simplesamlphp · Zipixx · Jul 31, 2023 · Jul 31, 2023 · Jul 31, 2023 · Jul 31, 2023
diff --git a/.gitattributes b/.gitattributes
@@ -1,14 +1,23 @@
-/cache/.gitkeep export-ignore
-/config/.gitkeep export-ignore
-/metadata/.gitkeep export-ignore
-/tests export-ignore
-/tools export-ignore
+cert/.gitkeep export-ignore
+public/assets/.gitkeep export-ignore
+tools export-ignore
+tests/Utils export-ignore
+tests/modules export-ignore
+tests/routers export-ignore
+tests/src export-ignore
+tests/www export-ignore
+tests/SigningTestCase.php export-ignore
+tests/bootstrap.php export-ignore
 codecov.yml export-ignore
 .editorconfig export-ignore
 .gitattributes export-ignore
 .gitignore export-ignore
 psalm.xml export-ignore
+psalm-dev.xml export-ignore
 phpcs.xml export-ignore
 phpunit.xml export-ignore
 .github export-ignore
 .php_cs.dist export-ignore
+.markdownlintignore export-ignore
+.markdownlint.yml export-ignore
+.markdownlintrc export-ignore
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -6,6 +6,13 @@ about: Create a report to help us improve
 
 # **Help us to keep this issue-tracker clean!  For questions or support, please refer to our [mailing lists](https://simplesamlphp.org/lists)**
 
+**Specifics of your environment**
+1. Are you acting as SP/IdP/proxy?
+2. SimpleSAMLphp: What version are you using?
+3. PHP: What version are you using?
+4. Platform: unix or Windows?
+5. Webserver: Apache/Nginx/ISS?
+
 **Describe the bug**
 A clear and concise description of what the bug is.
 

diff --git a/.github/build/full.json b/.github/build/full.json
@@ -0,0 +1,36 @@
+{
+  "modules": {
+    "authorize": {
+      "repository": "simplesamlphp/simplesamlphp-module-authorize",
+      "version": "dev-master"
+    },
+    "consent": {
+      "repository": "simplesamlphp/simplesamlphp-module-consent",
+      "version": "dev-master"
+    },
+    "discopower": {
+      "repository": "simplesamlphp/simplesamlphp-module-discopower",
+      "version": "dev-master"
+    },
+    "ldap": {
+      "repository": "simplesamlphp/simplesamlphp-module-ldap",
+      "version": "dev-master"
+    },
+    "metarefresh": {
+      "repository": "simplesamlphp/simplesamlphp-module-metarefresh",
+      "version": "dev-master"
+    },
+    "radius": {
+      "repository": "simplesamlphp/simplesamlphp-module-radius",
+      "version": "dev-master"
+    },
+    "statistics": {
+      "repository": "simplesamlphp/simplesamlphp-module-statistics",
+      "version": "dev-master"
+    },
+    "sqlauth": {
+      "repository": "simplesamlphp/simplesamlphp-module-sqlauth",
+      "version": "dev-master"
+    }
+  }
+}
diff --git a/.github/build/slim.json b/.github/build/slim.json
@@ -0,0 +1,4 @@
+{
+  "modules": {
+  }
+}
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,43 @@
+---
+
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"  # See documentation for possible values
+    directory: "/"  # Location of package manifests
+    schedule:
+      interval: "monthly"
+    groups:
+      all-actions:
+        patterns: ["*"]
+
+  - package-ecosystem: "composer"  # See documentation for possible values
+    directory: "/"  # Location of package manifests
+    schedule:
+      interval: "weekly"
+    allow:
+      # Allow both direct and indirect updates for all packages
+      - dependency-type: "all"
+    groups:
+      production-dependencies:
+        dependency-type: "production"
+        exclude-patterns:
+          - "symfony/*"
+        update-types:
+          - "minor"
+          - "patch"
+      development-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+      symfony:
+        patterns:
+          - "symfony/*"
+        update-types:
+          - "minor"
+          - "patch"
diff --git a/.github/workflows/autolock-conversations.yml b/.github/workflows/autolock-conversations.yml
@@ -0,0 +1,25 @@
+---
+
+name: 'Lock Threads'
+
+on:  # yamllint disable-line rule:truthy
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: lock
+
+jobs:
+  action:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dessant/lock-threads@v5
+        with:
+          issue-inactive-days: '90'
+          pr-inactive-days: '90'
+          log-output: true
diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
@@ -0,0 +1,120 @@
+---
+
+name: Build release
+
+on:  # yamllint disable-line rule:truthy
+  push:
+    tags:
+      - '*'
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build release
+    runs-on: [ubuntu-latest]
+    strategy:
+      fail-fast: false
+      matrix:
+        version: ['slim', 'full']
+
+    steps:
+      - name: Setup PHP, with composer and extensions
+        id: setup-php
+        # https://github.com/shivammathur/setup-php
+        uses: shivammathur/setup-php@v2
+        with:
+          # Should match the minimum required version for SimpleSAMLphp
+          php-version: '8.1'
+          tools: composer:v2, phive
+          extensions: mbstring, xml
+          coverage: none
+
+      - name: Setup problem matchers for PHP
+        run: echo "::add-matcher::${{ runner.tool_cache }}/php.json"
+
+      - uses: actions/checkout@v4
+
+      # Store the version, stripping any v-prefix
+      - name: Write release version
+        run: |
+          TAG=${{ github.ref_name }}
+          {
+            echo "TAG=$TAG"
+            echo "COMPOSER_VERSION=$(composer config version)"
+            echo "VERSION=${TAG#v}"
+          } >> "$GITHUB_ENV"
+
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+
+      - name: Make sure a version is set in composer.json that matches the tag
+        if: "${{ env.COMPOSER_VERSION != env.TAG }}"
+        run: exit 1
+
+      - name: Install Composer dependencies
+        run: composer install --no-progress --no-dev --prefer-dist --optimize-autoloader
+
+      - name: Install SimpleSAMLphp modules
+        env:
+          FILE: ".github/build/${{ matrix.version }}.json"
+        run: |
+          for k in $(jq '.modules | keys | .[]' "$FILE"); do
+            module=$(jq -r ".modules[$k]" "$FILE");
+            if [ -n "$module" ];
+            then
+              repository=$(jq -r '.repository' <<< "$module");
+              v=$(jq -r '.version' <<< "$module");
+
+              composer require "$repository:$v" --update-no-dev --ignore-platform-reqs
+            fi
+          done
+
+      - name: Add composer.phar to the release
+        run: phive --no-progress install --trust-gpg-keys CBB3D576F2A0946F --copy --target ./bin composer
+
+      - name: Clean release
+        run: |
+          grep export-ignore .gitattributes | cut -d ' ' -f 1 | while IFS= read -r line
+          do
+            rm -rf "$line"
+          done
+          rm -rf .git
+
+      - name: Build tarball
+        run: |
+          cd ..
+          cp -R  simplesamlphp "simplesamlphp-$VERSION"
+          TARGET="/tmp/simplesamlphp-$VERSION-${{ matrix.version }}.tar.gz"
+          # remove -slim from the filename for our minimalistic build
+          TARGET=${TARGET/-slim/}
+          echo "VERSION=$TARGET" >> "$GITHUB_ENV"
+          tar --owner 0 --group 0 -cvzf "$TARGET" "simplesamlphp-$VERSION"
+          rm -rf "simplesamlphp-$VERSION"
+
+      - name: Save tarball
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-${{ matrix.version }}
+          path: "$TARGET"
+          retention-days: 1
+
+      - name: Calculate SHA checksum (${{ matrix.version }})
+        run: sha256sum "$TARGET"
+
+      - name: Run website build
+        if: |
+          startsWith(github.ref, 'refs/tags/v') &&
+          contains(github.ref, 'alpha') != true &&
+          contains(github.ref, 'beta') != true
+        uses: actions/github-script@v7
+        with:
+          # Token has to be generated on a user account that controls the docs-repository.
+          # The _only_ scope to select is "Access public repositories", nothing more.
+          github-token: ${{ secrets.PAT_TOKEN }}
+          script: |
+            await github.rest.actions.createWorkflowDispatch({
+              owner: 'simplesamlphp',
+              repo: 'simplesamlphp.github.io',
+              workflow_id: 'github-pages.yml',
+              ref: 'release'
+            })
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
@@ -1,29 +1,40 @@
+---
+
 name: Documentation
 
-on:
+on:  # yamllint disable-line rule:truthy
   push:
-    branches: [ master, simplesamlphp-* ]
+    branches: [master, simplesamlphp-*]
     paths:
       - '**.md'
   pull_request:
-    branches: [ master, simplesamlphp-* ]
+    branches: [master, simplesamlphp-*]
     paths:
       - '**.md'
+  workflow_dispatch:
 
 jobs:
   quality:
     name: Quality checks
     runs-on: [ubuntu-latest]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Lint markdown files
-        uses: nosborn/github-action-markdown-cli@v3.1.0
+        uses: nosborn/github-action-markdown-cli@v3
         with:
           files: .
           ignore_path: .markdownlintignore
 
+      - name: Perform spell check
+        uses: codespell-project/actions-codespell@v2
+        with:
+          path: '**/*.md'
+          check_filenames: true
+          # Words must be lowercase
+          ignore_words_list: tekst,widgits
+
   build:
     name: Build documentation
     needs: quality
@@ -32,7 +43,7 @@ jobs:
     steps:
       - name: Run docs build
         if: github.event_name != 'pull_request'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           # Token has to be generated on a user account that controls the docs-repository.
           # The _only_ scope to select is "Access public repositories", nothing more.