ruby-saml 0.8.11 → 0.8.16
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of ruby-saml might be problematic. Click here for more details.
- checksums.yaml +5 -5
- data/Gemfile +3 -1
- data/Rakefile +0 -14
- data/lib/onelogin/ruby-saml/logoutresponse.rb +9 -51
- data/lib/onelogin/ruby-saml/response.rb +121 -30
- data/lib/onelogin/ruby-saml/settings.rb +27 -10
- data/lib/onelogin/ruby-saml/slo_logoutrequest.rb +101 -0
- data/lib/onelogin/ruby-saml/utils.rb +92 -0
- data/lib/onelogin/ruby-saml/version.rb +1 -1
- data/lib/ruby-saml.rb +1 -0
- data/lib/xml_security.rb +222 -87
- data/test/certificates/certificate.der +0 -0
- data/test/certificates/formatted_certificate +14 -0
- data/test/certificates/formatted_chained_certificate +42 -0
- data/test/certificates/formatted_private_key +12 -0
- data/test/certificates/formatted_rsa_private_key +12 -0
- data/test/certificates/invalid_certificate1 +1 -0
- data/test/certificates/invalid_certificate2 +1 -0
- data/test/certificates/invalid_certificate3 +12 -0
- data/test/certificates/invalid_chained_certificate1 +1 -0
- data/test/certificates/invalid_private_key1 +1 -0
- data/test/certificates/invalid_private_key2 +1 -0
- data/test/certificates/invalid_private_key3 +10 -0
- data/test/certificates/invalid_rsa_private_key1 +1 -0
- data/test/certificates/invalid_rsa_private_key2 +1 -0
- data/test/certificates/invalid_rsa_private_key3 +10 -0
- data/test/certificates/ruby-saml-2.crt +15 -0
- data/test/logoutrequest_test.rb +124 -126
- data/test/logoutresponse_test.rb +22 -42
- data/test/requests/logoutrequest_fixtures.rb +47 -0
- data/test/response_test.rb +373 -129
- data/test/responses/adfs_response_xmlns.xml +45 -0
- data/test/responses/encrypted_new_attack.xml.base64 +1 -0
- data/test/responses/invalids/invalid_issuer_assertion.xml.base64 +1 -0
- data/test/responses/invalids/invalid_issuer_message.xml.base64 +1 -0
- data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
- data/test/responses/invalids/no_signature.xml.base64 +1 -0
- data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
- data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
- data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
- data/test/responses/logoutresponse_fixtures.rb +4 -4
- data/test/responses/response_with_concealed_signed_assertion.xml +51 -0
- data/test/responses/response_with_doubled_signed_assertion.xml +49 -0
- data/test/responses/response_with_signed_assertion_3.xml +30 -0
- data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
- data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
- data/test/responses/response_wrapped.xml.base64 +150 -0
- data/test/responses/valid_response.xml.base64 +1 -0
- data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
- data/test/settings_test.rb +111 -5
- data/test/slo_logoutrequest_test.rb +66 -0
- data/test/test_helper.rb +110 -41
- data/test/utils_test.rb +201 -11
- data/test/xml_security_test.rb +359 -68
- metadata +77 -7
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: ruby-saml
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.8.
|
|
4
|
+
version: 0.8.16
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- OneLogin LLC
|
|
8
|
-
autorequire:
|
|
8
|
+
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2020-11-19 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: uuid
|
|
@@ -63,6 +63,7 @@ files:
|
|
|
63
63
|
- lib/onelogin/ruby-saml/response.rb
|
|
64
64
|
- lib/onelogin/ruby-saml/setting_error.rb
|
|
65
65
|
- lib/onelogin/ruby-saml/settings.rb
|
|
66
|
+
- lib/onelogin/ruby-saml/slo_logoutrequest.rb
|
|
66
67
|
- lib/onelogin/ruby-saml/slo_logoutresponse.rb
|
|
67
68
|
- lib/onelogin/ruby-saml/utils.rb
|
|
68
69
|
- lib/onelogin/ruby-saml/validation_error.rb
|
|
@@ -74,18 +75,44 @@ files:
|
|
|
74
75
|
- lib/schemas/xmldsig_schema.xsd
|
|
75
76
|
- lib/xml_security.rb
|
|
76
77
|
- ruby-saml.gemspec
|
|
78
|
+
- test/certificates/certificate.der
|
|
77
79
|
- test/certificates/certificate1
|
|
80
|
+
- test/certificates/formatted_certificate
|
|
81
|
+
- test/certificates/formatted_chained_certificate
|
|
82
|
+
- test/certificates/formatted_private_key
|
|
83
|
+
- test/certificates/formatted_rsa_private_key
|
|
84
|
+
- test/certificates/invalid_certificate1
|
|
85
|
+
- test/certificates/invalid_certificate2
|
|
86
|
+
- test/certificates/invalid_certificate3
|
|
87
|
+
- test/certificates/invalid_chained_certificate1
|
|
88
|
+
- test/certificates/invalid_private_key1
|
|
89
|
+
- test/certificates/invalid_private_key2
|
|
90
|
+
- test/certificates/invalid_private_key3
|
|
91
|
+
- test/certificates/invalid_rsa_private_key1
|
|
92
|
+
- test/certificates/invalid_rsa_private_key2
|
|
93
|
+
- test/certificates/invalid_rsa_private_key3
|
|
78
94
|
- test/certificates/r1_certificate2_base64
|
|
95
|
+
- test/certificates/ruby-saml-2.crt
|
|
79
96
|
- test/certificates/ruby-saml.crt
|
|
80
97
|
- test/certificates/ruby-saml.key
|
|
81
98
|
- test/logoutrequest_test.rb
|
|
82
99
|
- test/logoutresponse_test.rb
|
|
83
100
|
- test/request_test.rb
|
|
101
|
+
- test/requests/logoutrequest_fixtures.rb
|
|
84
102
|
- test/response_test.rb
|
|
85
103
|
- test/responses/adfs_response_sha1.xml
|
|
86
104
|
- test/responses/adfs_response_sha256.xml
|
|
87
105
|
- test/responses/adfs_response_sha384.xml
|
|
88
106
|
- test/responses/adfs_response_sha512.xml
|
|
107
|
+
- test/responses/adfs_response_xmlns.xml
|
|
108
|
+
- test/responses/encrypted_new_attack.xml.base64
|
|
109
|
+
- test/responses/invalids/invalid_issuer_assertion.xml.base64
|
|
110
|
+
- test/responses/invalids/invalid_issuer_message.xml.base64
|
|
111
|
+
- test/responses/invalids/multiple_signed.xml.base64
|
|
112
|
+
- test/responses/invalids/no_signature.xml.base64
|
|
113
|
+
- test/responses/invalids/response_with_concealed_signed_assertion.xml
|
|
114
|
+
- test/responses/invalids/response_with_doubled_signed_assertion.xml
|
|
115
|
+
- test/responses/invalids/signature_wrapping_attack.xml.base64
|
|
89
116
|
- test/responses/logoutresponse_fixtures.rb
|
|
90
117
|
- test/responses/no_signature_ns.xml
|
|
91
118
|
- test/responses/open_saml_response.xml
|
|
@@ -99,12 +126,21 @@ files:
|
|
|
99
126
|
- test/responses/response_node_text_attack.xml.base64
|
|
100
127
|
- test/responses/response_with_ampersands.xml
|
|
101
128
|
- test/responses/response_with_ampersands.xml.base64
|
|
129
|
+
- test/responses/response_with_concealed_signed_assertion.xml
|
|
130
|
+
- test/responses/response_with_doubled_signed_assertion.xml
|
|
102
131
|
- test/responses/response_with_multiple_attribute_statements.xml
|
|
103
132
|
- test/responses/response_with_multiple_attribute_values.xml
|
|
133
|
+
- test/responses/response_with_signed_assertion_3.xml
|
|
134
|
+
- test/responses/response_with_signed_message_and_assertion.xml
|
|
135
|
+
- test/responses/response_with_undefined_recipient.xml.base64
|
|
136
|
+
- test/responses/response_wrapped.xml.base64
|
|
104
137
|
- test/responses/simple_saml_php.xml
|
|
105
138
|
- test/responses/starfield_response.xml.base64
|
|
139
|
+
- test/responses/valid_response.xml.base64
|
|
140
|
+
- test/responses/valid_response_without_x509certificate.xml.base64
|
|
106
141
|
- test/responses/wrapped_response_2.xml.base64
|
|
107
142
|
- test/settings_test.rb
|
|
143
|
+
- test/slo_logoutrequest_test.rb
|
|
108
144
|
- test/slo_logoutresponse_test.rb
|
|
109
145
|
- test/test_helper.rb
|
|
110
146
|
- test/utils_test.rb
|
|
@@ -112,7 +148,7 @@ files:
|
|
|
112
148
|
homepage: http://github.com/onelogin/ruby-saml
|
|
113
149
|
licenses: []
|
|
114
150
|
metadata: {}
|
|
115
|
-
post_install_message:
|
|
151
|
+
post_install_message:
|
|
116
152
|
rdoc_options:
|
|
117
153
|
- "--charset=UTF-8"
|
|
118
154
|
require_paths:
|
|
@@ -128,24 +164,49 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
128
164
|
- !ruby/object:Gem::Version
|
|
129
165
|
version: '0'
|
|
130
166
|
requirements: []
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
signing_key:
|
|
167
|
+
rubygems_version: 3.0.4
|
|
168
|
+
signing_key:
|
|
134
169
|
specification_version: 4
|
|
135
170
|
summary: SAML Ruby Tookit
|
|
136
171
|
test_files:
|
|
172
|
+
- test/certificates/certificate.der
|
|
137
173
|
- test/certificates/certificate1
|
|
174
|
+
- test/certificates/formatted_certificate
|
|
175
|
+
- test/certificates/formatted_chained_certificate
|
|
176
|
+
- test/certificates/formatted_private_key
|
|
177
|
+
- test/certificates/formatted_rsa_private_key
|
|
178
|
+
- test/certificates/invalid_certificate1
|
|
179
|
+
- test/certificates/invalid_certificate2
|
|
180
|
+
- test/certificates/invalid_certificate3
|
|
181
|
+
- test/certificates/invalid_chained_certificate1
|
|
182
|
+
- test/certificates/invalid_private_key1
|
|
183
|
+
- test/certificates/invalid_private_key2
|
|
184
|
+
- test/certificates/invalid_private_key3
|
|
185
|
+
- test/certificates/invalid_rsa_private_key1
|
|
186
|
+
- test/certificates/invalid_rsa_private_key2
|
|
187
|
+
- test/certificates/invalid_rsa_private_key3
|
|
138
188
|
- test/certificates/r1_certificate2_base64
|
|
189
|
+
- test/certificates/ruby-saml-2.crt
|
|
139
190
|
- test/certificates/ruby-saml.crt
|
|
140
191
|
- test/certificates/ruby-saml.key
|
|
141
192
|
- test/logoutrequest_test.rb
|
|
142
193
|
- test/logoutresponse_test.rb
|
|
143
194
|
- test/request_test.rb
|
|
195
|
+
- test/requests/logoutrequest_fixtures.rb
|
|
144
196
|
- test/response_test.rb
|
|
145
197
|
- test/responses/adfs_response_sha1.xml
|
|
146
198
|
- test/responses/adfs_response_sha256.xml
|
|
147
199
|
- test/responses/adfs_response_sha384.xml
|
|
148
200
|
- test/responses/adfs_response_sha512.xml
|
|
201
|
+
- test/responses/adfs_response_xmlns.xml
|
|
202
|
+
- test/responses/encrypted_new_attack.xml.base64
|
|
203
|
+
- test/responses/invalids/invalid_issuer_assertion.xml.base64
|
|
204
|
+
- test/responses/invalids/invalid_issuer_message.xml.base64
|
|
205
|
+
- test/responses/invalids/multiple_signed.xml.base64
|
|
206
|
+
- test/responses/invalids/no_signature.xml.base64
|
|
207
|
+
- test/responses/invalids/response_with_concealed_signed_assertion.xml
|
|
208
|
+
- test/responses/invalids/response_with_doubled_signed_assertion.xml
|
|
209
|
+
- test/responses/invalids/signature_wrapping_attack.xml.base64
|
|
149
210
|
- test/responses/logoutresponse_fixtures.rb
|
|
150
211
|
- test/responses/no_signature_ns.xml
|
|
151
212
|
- test/responses/open_saml_response.xml
|
|
@@ -159,12 +220,21 @@ test_files:
|
|
|
159
220
|
- test/responses/response_node_text_attack.xml.base64
|
|
160
221
|
- test/responses/response_with_ampersands.xml
|
|
161
222
|
- test/responses/response_with_ampersands.xml.base64
|
|
223
|
+
- test/responses/response_with_concealed_signed_assertion.xml
|
|
224
|
+
- test/responses/response_with_doubled_signed_assertion.xml
|
|
162
225
|
- test/responses/response_with_multiple_attribute_statements.xml
|
|
163
226
|
- test/responses/response_with_multiple_attribute_values.xml
|
|
227
|
+
- test/responses/response_with_signed_assertion_3.xml
|
|
228
|
+
- test/responses/response_with_signed_message_and_assertion.xml
|
|
229
|
+
- test/responses/response_with_undefined_recipient.xml.base64
|
|
230
|
+
- test/responses/response_wrapped.xml.base64
|
|
164
231
|
- test/responses/simple_saml_php.xml
|
|
165
232
|
- test/responses/starfield_response.xml.base64
|
|
233
|
+
- test/responses/valid_response.xml.base64
|
|
234
|
+
- test/responses/valid_response_without_x509certificate.xml.base64
|
|
166
235
|
- test/responses/wrapped_response_2.xml.base64
|
|
167
236
|
- test/settings_test.rb
|
|
237
|
+
- test/slo_logoutrequest_test.rb
|
|
168
238
|
- test/slo_logoutresponse_test.rb
|
|
169
239
|
- test/test_helper.rb
|
|
170
240
|
- test/utils_test.rb
|