connector/saml/saml_test.go · e46f2ebe40551599ff12a22bde90e7b50677ac15 · hdacloud / dex

You need to sign in or sign up before continuing.

8 years ago

Improve SAML Signature and Response Validation · e46f2ebe

Holger Koser authored 8 years ago

* Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17).
* Do not compress the AuthnRequest if `HTTP-POST` binding is used.
* SAML Response is valid if the Message and/or the Assertion is signed.
* Add `AssertionConsumerServiceURL` to `AuthnRequest`
* Validate Status on the Response
* Validate Conditions on the Assertion
* Validation SubjectConfirmation on the Subject

e46f2ebe

History

Improve SAML Signature and Response Validation

Holger Koser authored 8 years ago

* Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17).
* Do not compress the AuthnRequest if `HTTP-POST` binding is used.
* SAML Response is valid if the Message and/or the Assertion is signed.
* Add `AssertionConsumerServiceURL` to `AuthnRequest`
* Validate Status on the Response
* Validate Conditions on the Assertion
* Validation SubjectConfirmation on the Subject

Code owners

Assign users and groups as approvers for specific file changes. Learn more.