libsaml 2.1.3 → 2.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2504015222bc579e1825cb91a8494ac10a6f9de7
-  data.tar.gz: 6941b75d531369162d63f231449df9ad1a40b5c7
+  metadata.gz: 8be02c920e8a39d14cd84660c6332f5d114266ef
+  data.tar.gz: e405dddd6b98273f414ae7c7bf2e1f16d6cbc915
 SHA512:
-  metadata.gz: 40e7fdc415fd8c0dcf47bfce890771928e9d29041731fcb578d48867f24f44b367102f83fba41093a288f8a94fdd8129066ad3baa7c8dddae0cc263a49674ef8
-  data.tar.gz: 72e25b192850943f4ff413f34affa35502cc8054c94029450bf8309cc62a5a1d38dabe400a0d10d569d976e66bc4640a576a86a688a94fa8aba62bb5124c7c42
+  metadata.gz: 39754e57b0eb30b97e685f2bb8d4fac05eab30c9b7996d2bfce0d425ea44c38cb627d213379d3c97f3a31eba180d353ba11203595600b1cea52089d0d584f701
+  data.tar.gz: 3bf81850cf0eca4640b308827a6238c9ff624f14319db3cfdac49cc176a6f0554e2834c1d15741a642bab8c6b9525e363f1f8d42abe4132c40a95abd0b693d70

data/README.rdoc

@@ -1,4 +1,6 @@
 {<img src="https://travis-ci.org/digidentity/libsaml.png?branch=master" alt="Build Status" />}[https://travis-ci.org/digidentity/libsaml]
+{<img src="https://gemnasium.com/digidentity/libsaml.png" alt="Dependency Status" />}[https://gemnasium.com/digidentity/libsaml]
+{<img src="https://codeclimate.com/github/digidentity/libsaml.png" />}[https://codeclimate.com/github/digidentity/libsaml]
 = libsaml
 Libsaml is a Ruby gem to easily create SAML 2.0 messages. This gem was written because other SAML gems were missing functionality such as XML signing.
 

data/lib/saml.rb

@@ -6,7 +6,8 @@ require 'saml/encoding'
 require 'saml/util'
 require 'xmlenc'
 require 'xmldsig'
-require 'httpi'
+require "net/https"
+require "uri"
 
 module Saml
   MD_NAMESPACE       = 'urn:oasis:names:tc:SAML:2.0:metadata'

data/lib/saml/bindings/http_artifact.rb

@@ -31,7 +31,7 @@ module Saml
 
           response = Saml::Util.post(location, Saml::Util.sign_xml(artifact_resolve, :soap))
 
-          if response.code == 200
+          if response.code == "200"
             artifact_response          = Saml::ArtifactResponse.parse(response.body, single: true)
             verified_artifact_response = Saml::Util.verify_xml(artifact_response, response.body)
 

data/lib/saml/bindings/soap.rb

@@ -14,7 +14,7 @@ module Saml
 
           http_response = Saml::Util.post(message.destination, signed_message, { 'SOAPAction' => SOAP_ACTION } )
 
-          if http_response.code == 200
+          if http_response.code == "200"
             response = Saml.parse_message(http_response.body, response_type)
             Saml::Util.verify_xml(response, http_response.body)
           else

data/lib/saml/config.rb

@@ -7,13 +7,10 @@ module Saml
     @@max_issue_instant_offset = 2
 
     mattr_accessor :ssl_private_key_file
-    @@ssl_private_key_file = 'SSL_PRIVATE_KEY_FILE'
-
-    mattr_accessor :ssl_certificate
-    @@ssl_certificate = 'SSL_CERTIFICATE'
+    @@ssl_private_key_file = nil
 
     mattr_accessor :ssl_certificate_file
-    @@ssl_certificate_file = 'SSL_CERTIFICATE_FILE'
+    @@ssl_certificate_file = nil
 
     mattr_accessor :registered_stores
     @@registered_stores = {}

data/lib/saml/rails/controller_helper.rb

@@ -14,16 +14,8 @@ module Saml
         end
       end
 
-      def current_store(store_or_symbol = nil)
-        case store_or_symbol
-          when Symbol
-            before_filter { Saml.current_store = store_or_symbol }
-          else
-            before_filter do
-              Saml::Config.register_store klass.name.underscore, klass_or_symbol
-              Saml.current_store = klass.name.underscore
-            end
-        end
+      def current_store(store)
+        before_filter { Saml.current_store = store }
       end
     end
   end

data/lib/saml/util.rb

@@ -15,16 +15,27 @@ module Saml
       end
 
       def post(location, message, additional_headers = {})
-        request = HTTPI::Request.new
+        uri = URI.parse(location)
 
-        request.url                     = location
-        request.headers.merge! additional_headers
-        request.headers['Content-Type'] = 'text/xml'
-        request.body                    = message
-        request.auth.ssl.cert_file      = Saml::Config.ssl_certificate_file
-        request.auth.ssl.cert_key_file  = Saml::Config.ssl_private_key_file
+        http             = Net::HTTP.new(uri.host, uri.port)
+        http.use_ssl     = true
+        http.verify_mode = OpenSSL::SSL::VERIFY_PEER
 
-        HTTPI.post request
+        if Saml::Config.ssl_certificate_file.present? && Saml::Config.ssl_private_key_file.present?
+          cert  = File.read(Saml::Config.ssl_certificate_file)
+          key   = File.read(Saml::Config.ssl_private_key_file)
+
+          http.cert        = OpenSSL::X509::Certificate.new(cert)
+          http.key         = OpenSSL::PKey::RSA.new(key)
+        end
+
+        headers = { 'Content-Type' => 'text/xml' }
+        headers.merge! additional_headers
+
+        request = Net::HTTP::Post.new(uri.request_uri, headers)
+        request.body = message
+
+        http.request(request)
       end
 
       def sign_xml(message, format = :xml, &block)

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = "2.1.3"
+  VERSION = "2.1.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 2.1.3
+  version: 2.1.4
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-11-27 00:00:00.000000000 Z
+date: 2013-12-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -94,20 +94,6 @@ dependencies:
     - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: httpi
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '>='
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '>='
-      - !ruby/object:Gem::Version
-        version: '0'
 description: Libsaml makes the creation of SAML 2.0 messages easy. The object structure
   is modeled after the SAML Core 2.0 specification from OASIS. Supported bindings
   are HTTP-Post, HTTP-Redirect, HTTP-Artifact and SOAP. Features include XML signing,