libsaml 2.13.1 → 2.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5359f70cb191c9ed46d66b875efca2c5a456eef1
-  data.tar.gz: 1c6d0fa41102a3c807c05fdf3d7d21f7b5e6a5ed
+  metadata.gz: 68cc374f731a02daa6a0f13462a40dc0fb5187f5
+  data.tar.gz: ad65e6af3a361ae5266dfcbf26625433b134f8ae
 SHA512:
-  metadata.gz: 8379e0e7114a14b779325201a333226b803135d5ff417ad48e601e47d20f087bdce965a26cf29fab9adb48d81be00f6fe5d3bd86aac74e27c202a4c5306d9823
-  data.tar.gz: 6bce47311f98cdc0aba1ceaee744e76005c5465ef013a3e9410f72b170d21049ff52c898e5c32810f05d5de930b3258a366fe22a74d8fd7e9c7fedf73c739580
+  metadata.gz: b2768e1991f8909d74c673c2819b71194a617a171952c4fbc65ca261e259fe99f4c5bf7832b8f46fe3916fa627b5adbf44904493851bbccaf73c02a34a72dd72
+  data.tar.gz: 6af57acd2b87f93cb6621d55a65498585056c890abc5cb1b1a286c267b417d8238a1c0e0e0fa8914be633383509568a5ad549ac5c5ac33c9591f21b028a25424

data/lib/saml.rb

@@ -26,6 +26,8 @@ module Saml
     end
     class SignatureInvalid < SamlError
     end
+    class SignatureMissing < SamlError
+    end
     class InvalidProvider < SamlError
     end
     class UnparseableMessage < SamlError

data/lib/saml/bindings/http_redirect.rb

@@ -19,7 +19,11 @@ module Saml
           redirect_binding = new(request_or_response, options)
           query_string     = URI.parse(http_request.url).query
 
-          redirect_binding.verify_signature(query_string) if request_or_response.provider.authn_requests_signed?
+          if http_request.params["Signature"].present?
+            redirect_binding.verify_signature(query_string)
+          else
+            raise Saml::Errors::SignatureMissing.new('Signature missing, but provider requires a signature') if request_or_response.provider.authn_requests_signed?
+          end
 
           request_or_response.actual_destination = http_request.url
           request_or_response

data/lib/saml/provider.rb

@@ -84,7 +84,7 @@ module Saml
     end
 
     def authn_requests_signed?
-      sp_descriptor.authn_requests_signed
+      sp_descriptor(false).try(:authn_requests_signed)
     end
 
     private

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = "2.13.1"
+  VERSION = "2.14.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 2.13.1
+  version: 2.14.0
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-11-17 00:00:00.000000000 Z
+date: 2015-11-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport