Add support for other kinds of WebSSO for us non CAS users. We use Cosign (http://weblogin.org/). Attached are some diffs to make it work with Filelocker 2.4.5. I've tried to generalize some of the names that are used in the Server Config page. For example I set
websso_cookie_name_header to X-COSIGN-SERVICE
websso_remote_user_header to X-REMOTE-USER
and configure Apache to set those headers for the proxy.
WebSSO diffs
Add a fix to prevent being able to impersonate a user when the browser is closed without the user logging out of Filelocker. Thanks to Phil E. from umflint.edu for finding this and providing the fix.
Patch to allow you to still log in as the admin account using the "/local" url when using the WebSSO option. The previous patches interfered with that ability.