Shibboleth authentication

[simong]

This PR replaces the SAML 2 authenticator with Shibboleth.

It has been tested with the following identity providers:

• TestShib Two
• University of Cambridge IdP

It currently relies on a custom branch of the passport-saml library for which there is a PR pending.

Documentation for setting it up is available on Confluence.

[nicolaasmatthijs]

2 spaces after param

[nicolaasmatthijs]

Some small comments remain.

[simong]

Followed up to all the addressed issues.

[nicolaasmatthijs]

@simong : Looks like there is a merge conflict here

[simong]

Merge conflict resolved.

[nicolaasmatthijs]

Travis build is failing with the following error:

 1) Authentication External authentication verify disabling the Shibboleth strategy:

  AssertionError: 500 == 401
      at Request.verifyEndpointIsDisabled [as _callback] (/home/travis/build/sakaiproject/Hilary/node_modules/oae-authentication/tests/test-external-strategies.js:86:36)
      at Request.init.self.callback (/home/travis/build/sakaiproject/Hilary/node_modules/request/main.js:127:22)
      at Request.EventEmitter.emit (events.js:99:17)
      at Request.<anonymous> (/home/travis/build/sakaiproject/Hilary/node_modules/request/main.js:767:16)
      at Request.EventEmitter.emit (events.js:126:20)
      at IncomingMessage.Request.start.self.req.self.httpModule.request.buffer (/home/travis/build/sakaiproject/Hilary/node_modules/request/main.js:729:14)
      at IncomingMessage.EventEmitter.emit (events.js:126:20)
      at IncomingMessage._emitEnd (http.js:366:10)
      at HTTPParser.parserOnMessageComplete [as onMessageComplete] (http.js:149:23)
      at Socket.socketOnData [as ondata] (http.js:1485:20)

[simong]

That's due to XSS being merged in and /api/auth/saml2 being replaced with /api/auth/shibboleth.

I've committed and pushed a fix.

[nicolaasmatthijs]

Merged. We have shibboleth authentication now