libsaml 3.2.3 → 3.3.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: f9b7ad8629b65a5ff1cff879fcb9c14860367c50
4
- data.tar.gz: 369ec5e80d51ef48ec4f687cf832a226b80ff157
2
+ SHA256:
3
+ metadata.gz: 8b4d2d073d577870bc1cd1544f6a19256658cfa34ecce1a4657a27aa6fe6e557
4
+ data.tar.gz: 4662c83c916fa7a6bbe202e6240c3c21823f4a9df971fee13bd90e422a66f6e9
5
5
  SHA512:
6
- metadata.gz: d0d4a3d3d68478258c784401ed8023cb98c7cdb3b8c0ceb2a9014e235efb9de53407ca49d32f6845f63694703fe1578ebba82867ba2a52483a8e9d68627fc765
7
- data.tar.gz: 9512d33685f71602956dc0eefc9e062b4ae8e31a242ae99b9946c6c356048bf96220fd49fb94555d4ffdd04aea9bad4122bbd2891d63941937c4c3853f3ea6ae
6
+ metadata.gz: b6a7a10818651da1e9622ae63f3d9324a65509d5ce7d1cb0e3e53e3aed69fa18b369b4b1c01b2ad7237cd51caca858d4390d399b36e64d4bbf0482ab93d76611
7
+ data.tar.gz: 93e49102f8502bf4e60fed5fd5a47d86992fb9246af6a107dcf6aa8bed4ee46f4ee336f8e249ea55c535663ee4fe881b6e3a156586d25cad8f5d29d4cde9fcee
@@ -115,7 +115,10 @@ module Saml
115
115
  document = Xmldsig::SignedDocument.new(raw_body)
116
116
 
117
117
  signature_valid = document.validate do |signature, data, signature_algorithm|
118
- message.provider.verify(signature_algorithm, signature, data, message.signature.key_name)
118
+ node = document.signatures.find { |s| s.signature_value == signature }.signature.at_xpath('descendant::ds:KeyName', Xmldsig::NAMESPACES)
119
+ key_name = node.present? ? node.content : nil
120
+
121
+ message.provider.verify(signature_algorithm, signature, data, key_name)
119
122
  end
120
123
 
121
124
  fail Saml::Errors::SignatureInvalid unless signature_valid
@@ -1,3 +1,3 @@
1
1
  module Saml
2
- VERSION = '3.2.3'
2
+ VERSION = '3.3.0'
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: libsaml
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.2.3
4
+ version: 3.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Benoist Claassen
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-10-22 00:00:00.000000000 Z
11
+ date: 2018-12-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -62,6 +62,9 @@ dependencies:
62
62
  - - ">="
63
63
  - !ruby/object:Gem::Version
64
64
  version: 1.8.2
65
+ - - "<="
66
+ - !ruby/object:Gem::Version
67
+ version: 1.8.5
65
68
  type: :runtime
66
69
  prerelease: false
67
70
  version_requirements: !ruby/object:Gem::Requirement
@@ -72,6 +75,9 @@ dependencies:
72
75
  - - ">="
73
76
  - !ruby/object:Gem::Version
74
77
  version: 1.8.2
78
+ - - "<="
79
+ - !ruby/object:Gem::Version
80
+ version: 1.8.5
75
81
  - !ruby/object:Gem::Dependency
76
82
  name: xmldsig
77
83
  requirement: !ruby/object:Gem::Requirement
@@ -262,7 +268,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
262
268
  version: '0'
263
269
  requirements: []
264
270
  rubyforge_project:
265
- rubygems_version: 2.5.1
271
+ rubygems_version: 2.7.6
266
272
  signing_key:
267
273
  specification_version: 4
268
274
  summary: A gem to easily create SAML 2.0 messages.