ruby-saml-mod 0.3.4 → 0.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d57c5f439e27b14820e79e77ce791f2011100a90
-  data.tar.gz: bf3028731541299c9d3553cbc5b613a5be435020
+  metadata.gz: dbd19eaeca1ad0380954f734734c8fa724e8870a
+  data.tar.gz: cc1752d1cb94e9c1171a936237f5ba793fce9362
 SHA512:
-  metadata.gz: '09cccef0a51735915597d450b258b7bf41abb686d1e5a4f40df5a17a62df192cf7b86c1663ff27ef482ac6ca1544fa53f13d49fd51930f3e9fff4a5b8d8881ca'
-  data.tar.gz: 45db1ce0200c6d08e776caa3321498d672475570530e89113195c55680f2ce9c662a308220be32395385b509e87b134513b7bd5c0e62e6786635ecbf08efcd45
+  metadata.gz: ec88a7a0d7c21753e00307871f250c774a096d196e7ef1f00c4bb1af0cfd2f5d707b7f78515b21ec29effa3afce196063e6ab3c22eb78714b48a33e7c18e5cb5
+  data.tar.gz: 682856dbbb4741cf6121bc6cdd790690c3dd96bea16796ad1348c3e24f9777a15e0fb8c09df92cd5c09f38349f0a8177fb430647356fbd7df7aae19c85ed5923

data/lib/onelogin/saml/response.rb

@@ -6,7 +6,7 @@ module Onelogin::Saml
     attr_reader :name_id, :name_identifier_format, :name_qualifier, :sp_name_qualifier, :session_index, :saml_attributes
     attr_reader :status_code, :status_message
     attr_reader :in_response_to, :destination, :issuer
-    attr_reader :validation_error
+    attr_reader :validation_error, :used_key
 
     def initialize(response, settings=nil)
       @response = response
@@ -60,6 +60,7 @@ module Onelogin::Saml
       @decrypted_document ||= document.clone.tap do |doc|
         doc.extend(XMLSecurity::SignedDocument)
         doc.decrypt!(settings)
+        @used_key = doc.used_key
       end
     end
 

data/lib/xml_sec.rb

@@ -304,7 +304,7 @@ module XMLSecurity
   end
 
   module SignedDocument
-    attr_reader :validation_error
+    attr_reader :validation_error, :used_key
 
     def self.format_cert(cert)
       # re-encode the certificate in the proper format
@@ -435,7 +435,10 @@ module XMLSecurity
     def decrypt_node(settings, xmlstr)
       settings.all_private_keys.each do |key|
         result = xmlsec_decrypt(xmlstr, key)
-        return result if result
+        if result
+          @used_key = key
+          return result
+        end
       end
       nil
     end

data/spec/response_spec.rb

@@ -15,6 +15,7 @@ describe Onelogin::Saml::Response do
       @response = Onelogin::Saml::Response.new(@xmlb64, @settings)
       @response.should be_is_valid
 
+      @response.used_key.should == fixture_path("test1-key.pem")
       @response.name_id.should == "zach@zwily.com"
       @response.name_qualifier.should == "http://saml.example.com:8080/opensso"
       @response.session_index.should == "s2c57ee92b5ca08e93d751987d591c58acc68d2501"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-saml-mod
 version: !ruby/object:Gem::Version
-  version: 0.3.4
+  version: 0.3.5
 platform: ruby
 authors:
 - OneLogin LLC
@@ -14,7 +14,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-03-27 00:00:00.000000000 Z
+date: 2017-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri