auth: Use correct username is auth policy requests When doing master authentication as first, use the username of the user, not master user, for policy lookup.

Updated copyright notices to include the year 2018.

auth: Include tls=true/false in policy server request

global: drop unnecessary parens in &(foo) This makes the code more consistent since most of the repo uses the no-parens style. These inconsistencies were found using `git grep '(&([^*]'` and any use of the parens in macros was ignored for safety reasons.

global: Use t_buffer_create sed -i -e 's/buffer_create_dynamic(pool_datastack_create(), */t_buffer_create(/g'

global: Remove extra ';' to fix compiler errors Sun C doesn't like them.

global: Use http_response_get_message() to log HTTP responses.

global: Update http_client_request_set_destroy_callback usage

auth-policy: Enable SSL connections

auth-policy: hashed_password will always be blank, tell buffer it has data so str_len works when converting to hex

Updated copyright notices to include the year 2017.

auth-policy: Allow unsupported attributes in response Do not choke if we receive unsupported attributes in response. This allows better interoperability with different systems that are getting signals from auth policy server that are not (yet) supported by dovecot.

global: Added missing copyright notices.

auth: Fix auth-policy crash when username is NULL If SASL request is invalid, or incomplete, and username is left NULL, handle it gracefully by adding just NUL byte in auth policy digest for username.

auth: Use buffer_truncate_rshift_bits

lib: API change - var_expand*() now returns error string. This allows callers to fail properly if the format string is invalid.

auth-policy: Use request's pool instead of new pool This fixes existing memory leak in auth_report, which is caused by using separate memory pool instead of request's pool. Thank you for Andrea Carpani for extensive debugging.

auth-policy: Ref/unref auth request If auth_request is not referenced it can go away before HTTP response is handled.

auth: Explicitly ignore return value to make static analyzer happier.

auth: Finish policy.[ch] renaming..

auth: Rename policy.[ch] to auth-policy.[ch]