Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -68,3 +68,8 @@ behat.yml
###> phpstan/phpstan ###
phpstan.neon
###< phpstan/phpstan ###

###> phpunit/phpunit ###
/phpunit.xml
/.phpunit.cache/
###< phpunit/phpunit ###
10 changes: 10 additions & 0 deletions ci/qa/phpunit
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
#!/usr/bin/env bash

cd $(dirname $0)/../../

if [ ! -d tests/Unit ]; then
echo "No unit tests found, skipping phpunit."
exit 0
fi

./vendor/bin/phpunit $1
25 changes: 21 additions & 4 deletions composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,14 @@
"license": "Apache-2.0",
"description": "Example Generic SAML Stepup Provider.",
"type": "project",
"minimum-stability": "stable",
"minimum-stability": "dev",
"prefer-stable": true,
"repositories": [
{
"type": "vcs",
"url": "https://github.com/OpenConext/Stepup-gssp-bundle"
}
],
"autoload": {
"psr-4": {
"Surfnet\\": "src\\Surfnet"
Expand All @@ -13,7 +19,8 @@
"autoload-dev": {
"psr-4": {
"Dev\\": "dev",
"Surfnet\\Gssp\\Test\\Features\\": "tests\\Functional\\Features"
"Surfnet\\Gssp\\Test\\Features\\": "tests\\Functional\\Features",
"Surfnet\\Gssp\\Test\\Unit\\": "tests\\Unit"
}
},
"require": {
Expand All @@ -22,7 +29,7 @@
"ext-libxml": "*",
"ext-zlib": "*",
"incenteev/composer-parameter-handler": "^2.1",
"surfnet/stepup-gssp-bundle": "^6.0",
"surfnet/stepup-gssp-bundle": "dev-feature/issue-48-preserve-mdui-uiinfo",
"symfony/asset": "^7.4",
"symfony/console": "^7.4",
"symfony/flex": "^2.3",
Expand All @@ -45,13 +52,15 @@
"phpmd/phpmd": "^2.14",
"phpstan/phpstan": "^2.1",
"phpstan/phpstan-symfony": "^2.0",
"phpunit/phpunit": "^11",
"rector/rector": "^2.3",
"slevomat/coding-standard": "^8.26",
"soyuka/contexts": "^3.3",
"squizlabs/php_codesniffer": "^4.0",
"symfony/browser-kit": "^7.4",
"symfony/css-selector": "^7.4",
"symfony/http-client": "^7.4",
"symfony/phpunit-bridge": "^7.4",
"symfony/stopwatch": "^7.4",
"symfony/web-profiler-bundle": "^7.4"
},
Expand All @@ -68,9 +77,11 @@
"@phpcs",
"@jscpd",
"@phpmd",
"@phpstan"
"@phpstan",
"@test"
],
"behat": "./ci/qa/behat",
"test": "./ci/qa/phpunit",
"composer-validate": "./ci/qa/validate",
"docheader": "./ci/qa/docheader",
"rector": "./ci/qa/rector.sh --dry-run",
Expand Down Expand Up @@ -145,6 +156,12 @@
"symfony/flex": true,
"dealerdirect/phpcodesniffer-composer-installer": true,
"symfony/runtime": true
},
"audit": {
"ignore": {
"PKSA-1fc7-xrz7-vw78": "GHSA-5cjr-mxj5-wmrx: DoS via XPath Transform in ds:Signature processing (transitive via surfnet/stepup-gssp-bundle -> surfnet/stepup-saml-bundle -> simplesamlphp/saml2). No patched simplesamlphp/saml2 4.x release exists or is planned. Mitigated in surfnet/stepup-saml-bundle by Surfnet\\SamlBundle\\Signing\\SignatureTransformGuard, called from PostBinding::processResponse() before every signature verification. See Stepup-saml-bundle PR #137.",
"PKSA-yk3g-3g3t-ts6q": "GHSA-6929-8p9f-26jx: TLS validator confusion in HTTP-Artifact binding resolution (transitive dependency). Neither this app nor surfnet/stepup-saml-bundle implement HTTP-Artifact binding; the affected code path is unreachable."
}
}
}
}
Loading
Loading