libsaml 3.2.2 → 3.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: dbada4b215e191b20ac43b7f660357488aa3f653
-  data.tar.gz: 441f6279105d4bbe5c979c86236dc12e1a8513e7
+  metadata.gz: f9b7ad8629b65a5ff1cff879fcb9c14860367c50
+  data.tar.gz: 369ec5e80d51ef48ec4f687cf832a226b80ff157
 SHA512:
-  metadata.gz: 25f52d94c02793dc5199921bb2a5f126d686f945aa2d72d2672ed7e9994acb568a1c1a008e59cf0ba94bbda4b432e539d1faf85bb809d28c77fd4fe00690d129
-  data.tar.gz: 268fa8e37192828053a4735c9b9376d8b80266b448d6a1f0df4e7000fbf5766cfa6639ebd93d775e57294a224503b370a1912a9f07d916cdd00be136d1cea764
+  metadata.gz: d0d4a3d3d68478258c784401ed8023cb98c7cdb3b8c0ceb2a9014e235efb9de53407ca49d32f6845f63694703fe1578ebba82867ba2a52483a8e9d68627fc765
+  data.tar.gz: 9512d33685f71602956dc0eefc9e062b4ae8e31a242ae99b9946c6c356048bf96220fd49fb94555d4ffdd04aea9bad4122bbd2891d63941937c4c3853f3ea6ae

data/lib/saml/bindings/soap.rb

@@ -29,7 +29,16 @@ module Saml
           notify('receive_message', raw_xml)
           message = Saml.parse_message(raw_xml, type)
 
-          Saml::Util.verify_xml(message, raw_xml)
+          skip_signature_verification = (
+            message.is_a?(Saml::AuthnRequest) &&
+            !message.provider.authn_requests_signed?
+          )
+
+          if skip_signature_verification
+            message
+          else
+            Saml::Util.verify_xml(message, raw_xml)
+          end
         end
       end
     end

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = '3.2.2'
+  VERSION = '3.2.3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 3.2.2
+  version: 3.2.3
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-04-24 00:00:00.000000000 Z
+date: 2018-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport