maestrano 0.12.2 → 0.12.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a9d1c9fb5b475f043c192002780684ae88c23799
-  data.tar.gz: 25f9dc01f76554186b8aa430a072bd5c9a0fedee
+  metadata.gz: 027c20721a82e2ffaaa608c140e1145f2474e408
+  data.tar.gz: 058be80ac7c4ddceb3a4f786799a0b93120f5a4d
 SHA512:
-  metadata.gz: a2213e1418b92942ce9f45104625494fe2027983c1f991f96980b3a1c9c4163018aa4fafb35e6e793eab4d1bcf91a4721c03b0b4ad05c533aeb6a65bae46dec7
-  data.tar.gz: ee7352efceccc3086502997a674caee54db92656164ae7dace4c98cb0ba7f9561be5feeac8c7780d7db807791a14c14920011ed8513f6a3ef3bfa254a5c7e122
+  metadata.gz: 0d650626a4b6959204cffc47955472eb820f23d6bff56b195152b3e7f3f6f50ba627ee95202790070854b9aea7fb883241c657558f71ed80f7f704197523115d
+  data.tar.gz: 0dc742db8608cce95ee687eeb7050f8a65ba2f2873ed96caa10ecfd473d22df52a781a15331016e719fbc0377544b673b81549650e75373d87e7a351583dbe84

data/DEVELOPER.md

@@ -20,5 +20,5 @@ curl -u maestrano https://rubygems.org/api/v1/api_key.yaml > ~/.gem/credentials;
 
 Then push the gem
 ```bash
-gem push maestrano-0.12.0.gem -k maestrano
+gem push maestrano-0.12.3.gem -k maestrano
 ```

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    maestrano (0.12.1)
+    maestrano (0.12.2)
       httparty (~> 0.13)
       json (~> 1.8)
       mime-types (~> 1.25)
@@ -12,7 +12,7 @@ PATH
 GEM
   remote: http://rubygems.org/
   specs:
-    domain_name (0.5.25)
+    domain_name (0.5.20160128)
       unf (>= 0.0.5, < 1.0.0)
     http-cookie (1.0.2)
       domain_name (~> 0.5)
@@ -29,7 +29,7 @@ GEM
       metaclass (~> 0.0.1)
     multi_xml (0.5.5)
     netrc (0.11.0)
-    nokogiri (1.6.7.1)
+    nokogiri (1.6.7.2)
       mini_portile2 (~> 2.0.0.rc2)
     rake (10.5.0)
     rest-client (1.8.0)
@@ -42,7 +42,7 @@ GEM
     timecop (0.6.0)
     unf (0.1.4)
       unf_ext
-    unf_ext (0.0.7.1)
+    unf_ext (0.0.7.2)
     uuid (2.3.8)
       macaddr (~> 1.0)
 

data/README.md

@@ -144,6 +144,13 @@ Maestrano.configure do |config|
   # used in a controller before filter to check user session - always return true
   #
   # config.sso.slo_enabled = true
+
+  # ==> x509 SSL Certificate
+  # During the SSO handshake, the SSL certificate is validated and must match the IDP provider.
+  # For multi-tenant integration, the certificates may change per environment.
+  #
+  # config.sso.x509_fingerprint = '2f:57:71:e4:40:19:57:37:a6:2c:f0:c5:82:52:2f:2e:41:b7:9d:7e'
+  # config.sso.x509_certificate = "-----BEGIN CERTIFICATE-----\nCERTIFICATE CONTENT==\n-----END CERTIFICATE-----"
   
   # ==> SSO User creation mode
   # !IMPORTANT

data/lib/maestrano/sso.rb

@@ -9,8 +9,9 @@ module Maestrano
       settings.assertion_consumer_service_url = self.consume_url
       settings.issuer                         = Maestrano[preset].param('api.id')
       settings.idp_sso_target_url             = self.idp_url
-      settings.idp_cert_fingerprint           = Maestrano[preset].param('sso_x509_fingerprint')
-      settings.name_identifier_format         = Maestrano[preset].param('sso_name_id_format')
+      settings.idp_cert                       = Maestrano[preset].param('sso.x509_certificate')
+      settings.idp_cert_fingerprint           = Maestrano[preset].param('sso.x509_fingerprint')
+      settings.name_identifier_format         = Maestrano[preset].param('sso.name_id_format')
       settings
     end
     

data/lib/maestrano/version.rb

@@ -1,3 +1,3 @@
 module Maestrano
-  VERSION = '0.12.2'
+  VERSION = '0.12.3'
 end

data/test/maestrano/saml/response_test.rb

@@ -183,7 +183,8 @@ module Maestrano
                 'sso.consume_path'  => '/mno/sso/consume',
                 'sso.creation_mode' => 'real',
                 'sso.idm'           => 'http://idp.myotherapp.com',
-                'sso.x509_fingerprint' => signature_fingerprint_1
+                'sso.x509_fingerprint' => signature_fingerprint_1,
+                'sso.x509_certificate' => signature_1
               }
 
               Maestrano.configure do |config|
@@ -210,6 +211,7 @@ module Maestrano
                 config.sso.creation_mode = @preset_config['sso.creation_mode']
 
                 config.sso.x509_fingerprint = @preset_config['sso.x509_fingerprint']
+                config.sso.x509_certificate = @preset_config['sso.x509_certificate']
               end
             end
 
@@ -229,6 +231,7 @@ module Maestrano
             should "support dynamic namespace resolution on signature elements" do
               Maestrano[@preset].configure do |config|
                 config.sso.x509_fingerprint = "28:74:9B:E8:1F:E8:10:9C:A8:7C:A9:C3:E3:C5:01:6C:92:1C:B4:BA"
+                config.sso.x509_certificate = nil
               end
 
               response = Maestrano::Saml::Response[@preset].new(fixture("no_signature_ns.xml"))

data/test/maestrano/sso_test.rb

@@ -43,8 +43,9 @@ module Maestrano
         assert settings.assertion_consumer_service_url == Maestrano::SSO.consume_url
         assert settings.issuer == Maestrano.param('api.id')
         assert settings.idp_sso_target_url == Maestrano::SSO.idp_url
-        assert settings.idp_cert_fingerprint == Maestrano.param('sso_x509_fingerprint')
-        assert settings.name_identifier_format == Maestrano.param('sso_name_id_format')
+        assert settings.idp_cert == Maestrano.param('sso.x509_certificate')
+        assert settings.idp_cert_fingerprint == Maestrano.param('sso.x509_fingerprint')
+        assert settings.name_identifier_format == Maestrano.param('sso.name_id_format')
       end
     
       should "build the right saml request" do
@@ -202,8 +203,9 @@ module Maestrano
         assert settings.assertion_consumer_service_url == Maestrano::SSO[@preset].consume_url
         assert settings.issuer == Maestrano[@preset].param('api.id')
         assert settings.idp_sso_target_url == Maestrano::SSO[@preset].idp_url
-        assert settings.idp_cert_fingerprint == Maestrano[@preset].param('sso_x509_fingerprint')
-        assert settings.name_identifier_format == Maestrano[@preset].param('sso_name_id_format')
+        assert settings.idp_cert == Maestrano.param('sso.x509_certificate')
+        assert settings.idp_cert_fingerprint == Maestrano[@preset].param('sso.x509_fingerprint')
+        assert settings.name_identifier_format == Maestrano[@preset].param('sso.name_id_format')
       end
     
       should "build the right saml request" do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: maestrano
 version: !ruby/object:Gem::Version
-  version: 0.12.2
+  version: 0.12.3
 platform: ruby
 authors:
 - Arnaud Lachaume
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-21 00:00:00.000000000 Z
+date: 2016-02-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client