libsaml 2.23.2 → 2.24.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ad687f067cae9e12a4cc97356fc317a5c6a5adb4
-  data.tar.gz: 54a50ab50c9c42599f33c166a2d1c04750a45296
+  metadata.gz: 978c7945916eeeb8a64b98ed8075bbc1ff0be77f
+  data.tar.gz: e92a5cdb687036239aa575dd5f0aba02c480d2f0
 SHA512:
-  metadata.gz: 9cdffc55930b88a2c633579749ad69b542d766c896c56d2e7ba05b86845e49d3fa198a55f6b559e578d1fe427b51e3f4236e1ad695bbafaed7b5c379a9afadf8
-  data.tar.gz: 47d367817defd084ca32685f03b46c9233a8f9bb82245fb73fbc63d54bccb8fb4f81426540bc02218ab693de20aedaf94b615d5473823543deb588cc58c6bb30
+  metadata.gz: 1fbfff4212a08c57edeafaa326581c5436942cd48723a7c9392facb73a82710b0cefe2e99dabab8b4c897d28b3470ba2cdbb3bdffe070a5864285c87c4019f89
+  data.tar.gz: da512d78df5a92a163fef860a1146830b9380d58d75dec6e976963eff0935b31bbf6c34351706facb3ea037fb0028ac314a9f67560ba89987443a9914745d36a

data/README.md

@@ -159,7 +159,7 @@ class SamlController < ActionController::Base
     authn_request = if request.get?
       Saml::Bindings::HTTPRedirect.receive_message(request, type: :authn_request)
     elsif request.post?
-      Saml::Bindings::HTTPPost.receive_message(request, type: :authn_request)
+      Saml::Bindings::HTTPPost.receive_message(request, :authn_request)
     else
       return head :not_allowed
     end

data/Rakefile

@@ -20,6 +20,9 @@ RDoc::Task.new(:rdoc) do |rdoc|
   rdoc.rdoc_files.include('lib/**/*.rb')
 end
 
+require "bundler/gem_tasks"
+require "rake/testtask"
+
 require "rspec/core/rake_task"
 
 RSpec::Core::RakeTask.new(:core) do |spec|
@@ -27,7 +30,3 @@ RSpec::Core::RakeTask.new(:core) do |spec|
 end
 
 task :default => [:core]
-
-
-Bundler::GemHelper.install_tasks
-

data/lib/saml/assertion.rb

@@ -58,10 +58,11 @@ module Saml
       @provider ||= Saml.provider(issuer)
     end
 
-    def add_attribute(key, value)
+    def add_attribute(key, value, value_attributes = {})
       self.attribute_statement ||= Saml::Elements::AttributeStatement.new
       self.attribute_statement.attributes ||= []
-      self.attribute_statement.attributes << Saml::Elements::Attribute.new(name: key, attribute_value: value)
+      attribute_value = Saml::Elements::AttributeValue.new(value_attributes.merge(content: value))
+      self.attribute_statement.attributes << Saml::Elements::Attribute.new(name: key, attribute_value: attribute_value)
     end
 
     def fetch_attribute(key)

data/lib/saml/bindings/http_post.rb

@@ -24,7 +24,16 @@ module Saml
           notify('receive_message', message)
           request_or_response = Saml.parse_message(message, type)
 
-          verified_request_or_response = Saml::Util.verify_xml(request_or_response, message)
+          skip_signature_verification = (
+            request_or_response.is_a?(Saml::AuthnRequest) &&
+            !request_or_response.provider.authn_requests_signed?
+          )
+
+          verified_request_or_response = if skip_signature_verification
+            request_or_response
+          else
+            Saml::Util.verify_xml(request_or_response, message)
+          end
           verified_request_or_response.actual_destination = request.url
           verified_request_or_response
         end

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = '2.23.2'
+  VERSION = '2.24.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 2.23.2
+  version: 2.24.1
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-21 00:00:00.000000000 Z
+date: 2016-12-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport