libsaml 2.21.3 → 2.22.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 53f2e428424ecfb0c817ae13e9a2bc3855440c4a
-  data.tar.gz: 161e05eef6f5bb82aaca7f799dcdf046f021a8a5
+  metadata.gz: 10eebd806d0ef296de80f6c85761a72997c9968b
+  data.tar.gz: d8c01889808b0ea5a780aa2a744883917ccfc448
 SHA512:
-  metadata.gz: 0c37e2ca231d09cfa57d2d5dd422e468ba3e5fae3b1441ba459dc6189533c3f9ae5fe3ab2bbcb2d8290741e9cd2b0dc4646fcadae28d6e99143d19c78c7e5fd9
-  data.tar.gz: c8c61a87e01a8c196e3c6b10f9f4cd5e13e662e570ed6f1221515e4623dea46de4b5e3ee656e90695ffee5ef211b3702839f356c159fd10c94d550d05ee3f50a
+  metadata.gz: 66421bf62af62c9c2cf09e5a3c1fb31ae5067251af44dfa9dbc0cd07cdd4ff4d83f1de61e1f6015c33ee846c31f30b8ebd966f2546bde02e03f492ec17e8fe26
+  data.tar.gz: a54e585a408e5bf1032db290882c3a5ee96eb1ada9a0c97241b6eaaa73b90c20d5467fa3109daf98507140e886cca6e9d8ccd0ca476e5854cbcecaca8fcbb6b4

data/README.md

@@ -98,11 +98,11 @@ class SamlController < ApplicationController
 
   def request_authentication
     provider = Saml.provider("my:very:original:entityid")
-    destination = provider.single_sign_on_service_url(Saml::ProtocolBindings::HTTP_POST)
+    destination = provider.single_sign_on_service_url(Saml::ProtocolBinding::HTTP_POST)
 
     authn_request = Saml::AuthnRequest.new(:destination => destination)
 
-    session[:authn_request_id] = auth_request._id
+    session[:authn_request_id] = authn_request._id
 
     @saml_attributes = Saml::Bindings::HTTPPost.create_form_attributes(authn_request)
 
@@ -195,7 +195,7 @@ class SamlController < ActionController::Base
       # render an auto submit form with hidden fields set in the attributes hash
       @attribute = Saml::Bindings::HTTPPost.create_form_attributes(response, relay_state: session[:saml_request][:relay_state])
     else
-      # handle unsported binding
+      # handle unsupported binding
     end
   end
 

data/lib/saml/util.rb

@@ -32,10 +32,25 @@ module Saml
         http.request(request)
       end
 
-      def sign_xml(message, format = :xml, &block)
+      def sign_xml(message, format = :xml, include_nested_prefixlist = false, &block)
         message.add_signature
 
         document = Xmldsig::SignedDocument.new(message.send("to_#{format}"))
+
+        if include_nested_prefixlist
+          document.signatures.reverse.each_with_object([]) do |signature, nested_prefixlist|
+            inclusive_namespaces = signature.signature.at_xpath('descendant::ec:InclusiveNamespaces', Xmldsig::NAMESPACES)
+
+            if inclusive_namespaces
+              nested_prefixlist.concat(inclusive_namespaces.get_attribute('PrefixList').to_s.split(' '))
+
+              if signature.unsigned?
+                inclusive_namespaces.set_attribute('PrefixList', nested_prefixlist.uniq.join(' '))
+              end
+            end
+          end
+        end
+
         if block_given?
           document.sign(&block)
         else

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = '2.21.3'
+  VERSION = '2.22.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 2.21.3
+  version: 2.22.0
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-05-27 00:00:00.000000000 Z
+date: 2016-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport