ruby-saml 0.8.12 → 0.8.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (21) hide show
  1. checksums.yaml +7 -7
  2. data/lib/onelogin/ruby-saml/logoutresponse.rb +1 -24
  3. data/lib/onelogin/ruby-saml/response.rb +3 -1
  4. data/lib/onelogin/ruby-saml/utils.rb +65 -0
  5. data/lib/onelogin/ruby-saml/version.rb +1 -1
  6. data/lib/xml_security.rb +216 -86
  7. data/test/certificates/ruby-saml-2.crt +15 -0
  8. data/test/response_test.rb +20 -0
  9. data/test/responses/adfs_response_xmlns.xml +45 -0
  10. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  11. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  12. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  13. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  14. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  15. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  16. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  17. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  18. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  19. data/test/test_helper.rb +62 -30
  20. data/test/xml_security_test.rb +281 -37
  21. metadata +70 -45
metadata CHANGED
@@ -1,49 +1,54 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
- version: !ruby/object:Gem::Version
4
- version: 0.8.12
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.8.13
5
5
  platform: ruby
6
- authors:
6
+ authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
-
12
- date: 2020-05-08 00:00:00 Z
13
- dependencies:
14
- - !ruby/object:Gem::Dependency
11
+ date: 2020-07-23 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
15
14
  name: uuid
16
- prerelease: false
17
- requirement: &id001 !ruby/object:Gem::Requirement
18
- requirements:
19
- - - ~>
20
- - !ruby/object:Gem::Version
21
- version: "2.3"
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '2.3'
22
20
  type: :runtime
23
- version_requirements: *id001
24
- - !ruby/object:Gem::Dependency
25
- name: nokogiri
26
21
  prerelease: false
27
- requirement: &id002 !ruby/object:Gem::Requirement
28
- requirements:
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '2.3'
27
+ - !ruby/object:Gem::Dependency
28
+ name: nokogiri
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
29
31
  - - ">="
30
- - !ruby/object:Gem::Version
32
+ - !ruby/object:Gem::Version
31
33
  version: 1.5.0
32
34
  type: :runtime
33
- version_requirements: *id002
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: 1.5.0
34
41
  description: SAML toolkit for Ruby on Rails
35
42
  email: support@onelogin.com
36
43
  executables: []
37
-
38
44
  extensions: []
39
-
40
- extra_rdoc_files:
45
+ extra_rdoc_files:
41
46
  - LICENSE
42
47
  - README.md
43
- files:
44
- - .document
45
- - .gitignore
46
- - .travis.yml
48
+ files:
49
+ - ".document"
50
+ - ".gitignore"
51
+ - ".travis.yml"
47
52
  - Gemfile
48
53
  - LICENSE
49
54
  - README.md
@@ -71,6 +76,7 @@ files:
71
76
  - ruby-saml.gemspec
72
77
  - test/certificates/certificate1
73
78
  - test/certificates/r1_certificate2_base64
79
+ - test/certificates/ruby-saml-2.crt
74
80
  - test/certificates/ruby-saml.crt
75
81
  - test/certificates/ruby-saml.key
76
82
  - test/logoutrequest_test.rb
@@ -81,7 +87,13 @@ files:
81
87
  - test/responses/adfs_response_sha256.xml
82
88
  - test/responses/adfs_response_sha384.xml
83
89
  - test/responses/adfs_response_sha512.xml
90
+ - test/responses/adfs_response_xmlns.xml
84
91
  - test/responses/encrypted_new_attack.xml.base64
92
+ - test/responses/invalids/multiple_signed.xml.base64
93
+ - test/responses/invalids/no_signature.xml.base64
94
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
95
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
96
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
85
97
  - test/responses/logoutresponse_fixtures.rb
86
98
  - test/responses/no_signature_ns.xml
87
99
  - test/responses/open_saml_response.xml
@@ -99,10 +111,14 @@ files:
99
111
  - test/responses/response_with_doubled_signed_assertion.xml
100
112
  - test/responses/response_with_multiple_attribute_statements.xml
101
113
  - test/responses/response_with_multiple_attribute_values.xml
114
+ - test/responses/response_with_signed_assertion_3.xml
115
+ - test/responses/response_with_signed_message_and_assertion.xml
116
+ - test/responses/response_with_undefined_recipient.xml.base64
102
117
  - test/responses/response_wrapped.xml.base64
103
118
  - test/responses/simple_saml_php.xml
104
119
  - test/responses/starfield_response.xml.base64
105
120
  - test/responses/valid_response.xml.base64
121
+ - test/responses/valid_response_without_x509certificate.xml.base64
106
122
  - test/responses/wrapped_response_2.xml.base64
107
123
  - test/settings_test.rb
108
124
  - test/slo_logoutresponse_test.rb
@@ -111,33 +127,32 @@ files:
111
127
  - test/xml_security_test.rb
112
128
  homepage: http://github.com/onelogin/ruby-saml
113
129
  licenses: []
114
-
115
130
  metadata: {}
116
-
117
131
  post_install_message:
118
- rdoc_options:
119
- - --charset=UTF-8
120
- require_paths:
132
+ rdoc_options:
133
+ - "--charset=UTF-8"
134
+ require_paths:
121
135
  - lib
122
- required_ruby_version: !ruby/object:Gem::Requirement
123
- requirements:
124
- - &id003
125
- - ">="
126
- - !ruby/object:Gem::Version
127
- version: "0"
128
- required_rubygems_version: !ruby/object:Gem::Requirement
129
- requirements:
130
- - *id003
136
+ required_ruby_version: !ruby/object:Gem::Requirement
137
+ requirements:
138
+ - - ">="
139
+ - !ruby/object:Gem::Version
140
+ version: '0'
141
+ required_rubygems_version: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - ">="
144
+ - !ruby/object:Gem::Version
145
+ version: '0'
131
146
  requirements: []
132
-
133
147
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
134
- rubygems_version: 2.7.7
148
+ rubygems_version: 2.4.8
135
149
  signing_key:
136
150
  specification_version: 4
137
151
  summary: SAML Ruby Tookit
138
- test_files:
152
+ test_files:
139
153
  - test/certificates/certificate1
140
154
  - test/certificates/r1_certificate2_base64
155
+ - test/certificates/ruby-saml-2.crt
141
156
  - test/certificates/ruby-saml.crt
142
157
  - test/certificates/ruby-saml.key
143
158
  - test/logoutrequest_test.rb
@@ -148,7 +163,13 @@ test_files:
148
163
  - test/responses/adfs_response_sha256.xml
149
164
  - test/responses/adfs_response_sha384.xml
150
165
  - test/responses/adfs_response_sha512.xml
166
+ - test/responses/adfs_response_xmlns.xml
151
167
  - test/responses/encrypted_new_attack.xml.base64
168
+ - test/responses/invalids/multiple_signed.xml.base64
169
+ - test/responses/invalids/no_signature.xml.base64
170
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
171
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
172
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
152
173
  - test/responses/logoutresponse_fixtures.rb
153
174
  - test/responses/no_signature_ns.xml
154
175
  - test/responses/open_saml_response.xml
@@ -166,10 +187,14 @@ test_files:
166
187
  - test/responses/response_with_doubled_signed_assertion.xml
167
188
  - test/responses/response_with_multiple_attribute_statements.xml
168
189
  - test/responses/response_with_multiple_attribute_values.xml
190
+ - test/responses/response_with_signed_assertion_3.xml
191
+ - test/responses/response_with_signed_message_and_assertion.xml
192
+ - test/responses/response_with_undefined_recipient.xml.base64
169
193
  - test/responses/response_wrapped.xml.base64
170
194
  - test/responses/simple_saml_php.xml
171
195
  - test/responses/starfield_response.xml.base64
172
196
  - test/responses/valid_response.xml.base64
197
+ - test/responses/valid_response_without_x509certificate.xml.base64
173
198
  - test/responses/wrapped_response_2.xml.base64
174
199
  - test/settings_test.rb
175
200
  - test/slo_logoutresponse_test.rb