The decoder still supports standard base64 encoding for backwards
compatibility.

It's probably wise to verify that the ticket that we're about to sign is
syntactically correct. Required fields must be present, and values
should not contain separator characters.

Auth api refactor

See merge request !2

AuthBase.__init__ is passed the top-level Flask configuration object, so
variables should adhere to the standard naming conventions (uppercase,
etc). Use key lookups instead of attributes.

No need to force the 'escape' filter, autoescaping is on.

Authenticates users using the authclient protocol (supports OTP).

Makes the machdb code slightly more readable.

Allows the caller to specify password and other auth parameters, and to
force sessions to be non-interactive (for scripts and such).

vagrant: upgrade apache config to 2.4

The config now lives in /etc/apache2/000-default.conf.
Also changed the allow, deny syntax to Require all granted.

fixes #7

See merge request !1

The config now lives in /etc/apache2/000-default.conf.
Also changed the allow, deny syntax to Require all granted.

Mostly fixes to the Apache 2.4 configuration for now.

Uses the email as a SAML attribute.