libsaml 3.6.0 → 3.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9eea4c36aa9fc6f404ff5e6283c2ef39c1cb0e328652edc5e5fda2ceb7b21416
-  data.tar.gz: d76324210f3fe2863f82f89ac7b7317bc295798ec10982b903f2e3b2700dd62f
+  metadata.gz: e689c8b19f26da4c7cc09904fb18cb052088834f32567abf14023219f9987481
+  data.tar.gz: cbc544b35d8b045d11c09c85f074234466d33b1a90a91a229d47d594456cc646
 SHA512:
-  metadata.gz: 40a5e18247a43f3e215ce6045d51feeb2774a86e649b4702a64533555b4c5c98b83dad3927b3238929d141f0c49a1078903a278b2ccd76cdf6c29d6188f71839
-  data.tar.gz: 0eda4d5265000e0da3fc7d2650b69064cda9de9914a287cecb2974e077f42d4c76d05e30e7025a56f6ba7173128c63a652b185f0253424715e6e62227f5bdb45
+  metadata.gz: 1b11d5dda8bf220251d944a1c8397075e33b0c98c67a42b6d0e61bffe0c67722a8628e79461880d3ecd9d982751ef322ff5485a18cd320c024f1ef13e5d80827
+  data.tar.gz: cec277eeadebc7a6c4f5294437b34f7a39daff47873c9e35ad95e6c42e0f91429580bca880214c4e95728f17cdf599694e60981bab8d24c2483f99ab0c79c1cb

data/README.md

@@ -94,10 +94,10 @@ Now you can make a SAML controller in `app/controllers/saml_controller.rb`:
 ```ruby
 class SamlController < ApplicationController
   extend Saml::Rails::ControllerHelper
-  current_provider "entity_id"
+  current_provider "<sp_entity_id>"
 
   def request_authentication
-    provider = Saml.provider("my:very:original:entityid")
+    provider = Saml.provider("<idp_enity_id>")
     destination = provider.single_sign_on_service_url(Saml::ProtocolBinding::HTTP_POST)
 
     authn_request = Saml::AuthnRequest.new(destination: destination)
@@ -153,7 +153,7 @@ Below is an example of a very primitive IDP Saml Controller
 ```ruby
 class SamlController < ActionController::Base
   extend Saml::Rails::ControllerHelper
-  current_provider "entity_id"
+  current_provider "<idp_entity_id>"
 
   def receive_authn_request
     authn_request = if request.get?
@@ -227,6 +227,10 @@ class SamlController < ActionController::Base
 end
 ```
 
+## Caveats
+
+- SAMLResponse and Assertions have to be signed as per the SAML security guidelines (Some IDP's don't do this by default and require special configuration)
+
 ## Contributing
 
 - Fork the project

data/lib/saml/bindings/http_redirect.rb

@@ -5,7 +5,7 @@ module Saml
 
       class << self
         def create_url(request_or_response, options = {})
-          options[:signature_algorithm] ||= 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
+          options[:signature_algorithm] ||= 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' unless options[:exclude_signature]
           new(request_or_response, options).create_url
         end
 
@@ -42,13 +42,14 @@ module Saml
         end
       end
 
-      attr_accessor :request_or_response, :signature_algorithm, :relay_state, :signature
+      attr_accessor :request_or_response, :signature_algorithm, :relay_state, :signature, :exclude_signature
 
       def initialize(request_or_response, options = {})
         @request_or_response = request_or_response
         @signature_algorithm = options[:signature_algorithm]
         @relay_state         = options[:relay_state]
         @signature           = options[:signature]
+        @exclude_signature   = options[:exclude_signature]
       end
 
       def verify_signature(query)
@@ -61,7 +62,7 @@ module Saml
         url = request_or_response.destination
         delimiter = url.include?('?') ? '&' : '?'
 
-        [url, signed_params].join(delimiter)
+        [url, exclude_signature ? unsigned_params : signed_params].join(delimiter)
       end
 
       private
@@ -108,6 +109,10 @@ module Saml
 
         "#{encoded_params}&Signature=#{encoded_signature}"
       end
+
+      def unsigned_params
+        encoded_params.to_s
+      end
     end
   end
 end

data/lib/saml/version.rb

@@ -1,3 +1,3 @@
 module Saml
-  VERSION = '3.6.0'
+  VERSION = '3.7.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libsaml
 version: !ruby/object:Gem::Version
-  version: 3.6.0
+  version: 3.7.0
 platform: ruby
 authors:
 - Benoist Claassen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-10 00:00:00.000000000 Z
+date: 2020-03-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport