libsaml 3.2.3 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: f9b7ad8629b65a5ff1cff879fcb9c14860367c50
4
- data.tar.gz: 369ec5e80d51ef48ec4f687cf832a226b80ff157
2
+ SHA256:
3
+ metadata.gz: 8b4d2d073d577870bc1cd1544f6a19256658cfa34ecce1a4657a27aa6fe6e557
4
+ data.tar.gz: 4662c83c916fa7a6bbe202e6240c3c21823f4a9df971fee13bd90e422a66f6e9
5
5
  SHA512:
6
- metadata.gz: d0d4a3d3d68478258c784401ed8023cb98c7cdb3b8c0ceb2a9014e235efb9de53407ca49d32f6845f63694703fe1578ebba82867ba2a52483a8e9d68627fc765
7
- data.tar.gz: 9512d33685f71602956dc0eefc9e062b4ae8e31a242ae99b9946c6c356048bf96220fd49fb94555d4ffdd04aea9bad4122bbd2891d63941937c4c3853f3ea6ae
6
+ metadata.gz: b6a7a10818651da1e9622ae63f3d9324a65509d5ce7d1cb0e3e53e3aed69fa18b369b4b1c01b2ad7237cd51caca858d4390d399b36e64d4bbf0482ab93d76611
7
+ data.tar.gz: 93e49102f8502bf4e60fed5fd5a47d86992fb9246af6a107dcf6aa8bed4ee46f4ee336f8e249ea55c535663ee4fe881b6e3a156586d25cad8f5d29d4cde9fcee
@@ -115,7 +115,10 @@ module Saml
115
115
  document = Xmldsig::SignedDocument.new(raw_body)
116
116
 
117
117
  signature_valid = document.validate do |signature, data, signature_algorithm|
118
- message.provider.verify(signature_algorithm, signature, data, message.signature.key_name)
118
+ node = document.signatures.find { |s| s.signature_value == signature }.signature.at_xpath('descendant::ds:KeyName', Xmldsig::NAMESPACES)
119
+ key_name = node.present? ? node.content : nil
120
+
121
+ message.provider.verify(signature_algorithm, signature, data, key_name)
119
122
  end
120
123
 
121
124
  fail Saml::Errors::SignatureInvalid unless signature_valid
@@ -1,3 +1,3 @@
1
1
  module Saml
2
- VERSION = '3.2.3'
2
+ VERSION = '3.3.0'
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: libsaml
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.2.3
4
+ version: 3.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Benoist Claassen
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-10-22 00:00:00.000000000 Z
11
+ date: 2018-12-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -62,6 +62,9 @@ dependencies:
62
62
  - - ">="
63
63
  - !ruby/object:Gem::Version
64
64
  version: 1.8.2
65
+ - - "<="
66
+ - !ruby/object:Gem::Version
67
+ version: 1.8.5
65
68
  type: :runtime
66
69
  prerelease: false
67
70
  version_requirements: !ruby/object:Gem::Requirement
@@ -72,6 +75,9 @@ dependencies:
72
75
  - - ">="
73
76
  - !ruby/object:Gem::Version
74
77
  version: 1.8.2
78
+ - - "<="
79
+ - !ruby/object:Gem::Version
80
+ version: 1.8.5
75
81
  - !ruby/object:Gem::Dependency
76
82
  name: xmldsig
77
83
  requirement: !ruby/object:Gem::Requirement
@@ -262,7 +268,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
262
268
  version: '0'
263
269
  requirements: []
264
270
  rubyforge_project:
265
- rubygems_version: 2.5.1
271
+ rubygems_version: 2.7.6
266
272
  signing_key:
267
273
  specification_version: 4
268
274
  summary: A gem to easily create SAML 2.0 messages.