Port TUPAS module to Drupal 7

Any news on this one?

Pushed latest code into the 7.x-1.x dev.

This contains multiple bugfixes and improvements (see all updates at http://drupalcode.org/project/tupas.git/blob/da25148:/CHANGELOG.txt).

There's also updates to the images and image names so you need to run update.php to keep them up-to-date.

Note: If you're upgrading and want to start using the SHA256 algorithm (as you should), remember also to check your own Tupas return/validation functions that they are up-to-date. You might have been doing some validation there like:

// Calculate the MAC based on the encryption algorithm.
if ($_GET['B02K_ALG'] == 01) {
  $mac = strtoupper(md5($macstring));
}
else {
  $mac = strtoupper(sha1($macstring));
}
 

The code for the new SHA256 algorithm at the Tupas documentation is 03. If your code is something like above and you don't update your code, it won't work. To make things simple, I added a simple function to the tupas.module that you can use to calculate the MAC. Like this:

  // Calculate the MAC with given algorithm.
  $mac = tupas_calculate_mac($macstring, $_GET['B02K_ALG']);

Hi,
I was just wondering that is this really convenient:

Fixed the bug when user's 'Tupas authenticated user' role wasn't removed on logout.

I'm not certain of what is the most common use case, but I think that there should be at least option for admin to select whether they want to remove the role or not. In many cases users are being identified for a maximum of 1 year period or so and therefore I'm having my doubts...

On the other hand it(this) seems like a feature(request) that would enable role expiration.

That is correct! Thank you for this point of view.

Just made a switch into the general settings form where you can select if the user's Tupas authentication should be terminated on logout. It says TRUE by default, since I think that's the most common use case. Committed to dev.