ruby-saml 0.8.12 → 0.8.13

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (21) hide show
  1. checksums.yaml +7 -7
  2. data/lib/onelogin/ruby-saml/logoutresponse.rb +1 -24
  3. data/lib/onelogin/ruby-saml/response.rb +3 -1
  4. data/lib/onelogin/ruby-saml/utils.rb +65 -0
  5. data/lib/onelogin/ruby-saml/version.rb +1 -1
  6. data/lib/xml_security.rb +216 -86
  7. data/test/certificates/ruby-saml-2.crt +15 -0
  8. data/test/response_test.rb +20 -0
  9. data/test/responses/adfs_response_xmlns.xml +45 -0
  10. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  11. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  12. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  13. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  14. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  15. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  16. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  17. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  18. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  19. data/test/test_helper.rb +62 -30
  20. data/test/xml_security_test.rb +281 -37
  21. metadata +70 -45
metadata CHANGED
@@ -1,49 +1,54 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
- version: !ruby/object:Gem::Version
4
- version: 0.8.12
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.8.13
5
5
  platform: ruby
6
- authors:
6
+ authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
-
12
- date: 2020-05-08 00:00:00 Z
13
- dependencies:
14
- - !ruby/object:Gem::Dependency
11
+ date: 2020-07-23 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
15
14
  name: uuid
16
- prerelease: false
17
- requirement: &id001 !ruby/object:Gem::Requirement
18
- requirements:
19
- - - ~>
20
- - !ruby/object:Gem::Version
21
- version: "2.3"
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '2.3'
22
20
  type: :runtime
23
- version_requirements: *id001
24
- - !ruby/object:Gem::Dependency
25
- name: nokogiri
26
21
  prerelease: false
27
- requirement: &id002 !ruby/object:Gem::Requirement
28
- requirements:
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '2.3'
27
+ - !ruby/object:Gem::Dependency
28
+ name: nokogiri
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
29
31
  - - ">="
30
- - !ruby/object:Gem::Version
32
+ - !ruby/object:Gem::Version
31
33
  version: 1.5.0
32
34
  type: :runtime
33
- version_requirements: *id002
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: 1.5.0
34
41
  description: SAML toolkit for Ruby on Rails
35
42
  email: support@onelogin.com
36
43
  executables: []
37
-
38
44
  extensions: []
39
-
40
- extra_rdoc_files:
45
+ extra_rdoc_files:
41
46
  - LICENSE
42
47
  - README.md
43
- files:
44
- - .document
45
- - .gitignore
46
- - .travis.yml
48
+ files:
49
+ - ".document"
50
+ - ".gitignore"
51
+ - ".travis.yml"
47
52
  - Gemfile
48
53
  - LICENSE
49
54
  - README.md
@@ -71,6 +76,7 @@ files:
71
76
  - ruby-saml.gemspec
72
77
  - test/certificates/certificate1
73
78
  - test/certificates/r1_certificate2_base64
79
+ - test/certificates/ruby-saml-2.crt
74
80
  - test/certificates/ruby-saml.crt
75
81
  - test/certificates/ruby-saml.key
76
82
  - test/logoutrequest_test.rb
@@ -81,7 +87,13 @@ files:
81
87
  - test/responses/adfs_response_sha256.xml
82
88
  - test/responses/adfs_response_sha384.xml
83
89
  - test/responses/adfs_response_sha512.xml
90
+ - test/responses/adfs_response_xmlns.xml
84
91
  - test/responses/encrypted_new_attack.xml.base64
92
+ - test/responses/invalids/multiple_signed.xml.base64
93
+ - test/responses/invalids/no_signature.xml.base64
94
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
95
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
96
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
85
97
  - test/responses/logoutresponse_fixtures.rb
86
98
  - test/responses/no_signature_ns.xml
87
99
  - test/responses/open_saml_response.xml
@@ -99,10 +111,14 @@ files:
99
111
  - test/responses/response_with_doubled_signed_assertion.xml
100
112
  - test/responses/response_with_multiple_attribute_statements.xml
101
113
  - test/responses/response_with_multiple_attribute_values.xml
114
+ - test/responses/response_with_signed_assertion_3.xml
115
+ - test/responses/response_with_signed_message_and_assertion.xml
116
+ - test/responses/response_with_undefined_recipient.xml.base64
102
117
  - test/responses/response_wrapped.xml.base64
103
118
  - test/responses/simple_saml_php.xml
104
119
  - test/responses/starfield_response.xml.base64
105
120
  - test/responses/valid_response.xml.base64
121
+ - test/responses/valid_response_without_x509certificate.xml.base64
106
122
  - test/responses/wrapped_response_2.xml.base64
107
123
  - test/settings_test.rb
108
124
  - test/slo_logoutresponse_test.rb
@@ -111,33 +127,32 @@ files:
111
127
  - test/xml_security_test.rb
112
128
  homepage: http://github.com/onelogin/ruby-saml
113
129
  licenses: []
114
-
115
130
  metadata: {}
116
-
117
131
  post_install_message:
118
- rdoc_options:
119
- - --charset=UTF-8
120
- require_paths:
132
+ rdoc_options:
133
+ - "--charset=UTF-8"
134
+ require_paths:
121
135
  - lib
122
- required_ruby_version: !ruby/object:Gem::Requirement
123
- requirements:
124
- - &id003
125
- - ">="
126
- - !ruby/object:Gem::Version
127
- version: "0"
128
- required_rubygems_version: !ruby/object:Gem::Requirement
129
- requirements:
130
- - *id003
136
+ required_ruby_version: !ruby/object:Gem::Requirement
137
+ requirements:
138
+ - - ">="
139
+ - !ruby/object:Gem::Version
140
+ version: '0'
141
+ required_rubygems_version: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - ">="
144
+ - !ruby/object:Gem::Version
145
+ version: '0'
131
146
  requirements: []
132
-
133
147
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
134
- rubygems_version: 2.7.7
148
+ rubygems_version: 2.4.8
135
149
  signing_key:
136
150
  specification_version: 4
137
151
  summary: SAML Ruby Tookit
138
- test_files:
152
+ test_files:
139
153
  - test/certificates/certificate1
140
154
  - test/certificates/r1_certificate2_base64
155
+ - test/certificates/ruby-saml-2.crt
141
156
  - test/certificates/ruby-saml.crt
142
157
  - test/certificates/ruby-saml.key
143
158
  - test/logoutrequest_test.rb
@@ -148,7 +163,13 @@ test_files:
148
163
  - test/responses/adfs_response_sha256.xml
149
164
  - test/responses/adfs_response_sha384.xml
150
165
  - test/responses/adfs_response_sha512.xml
166
+ - test/responses/adfs_response_xmlns.xml
151
167
  - test/responses/encrypted_new_attack.xml.base64
168
+ - test/responses/invalids/multiple_signed.xml.base64
169
+ - test/responses/invalids/no_signature.xml.base64
170
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
171
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
172
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
152
173
  - test/responses/logoutresponse_fixtures.rb
153
174
  - test/responses/no_signature_ns.xml
154
175
  - test/responses/open_saml_response.xml
@@ -166,10 +187,14 @@ test_files:
166
187
  - test/responses/response_with_doubled_signed_assertion.xml
167
188
  - test/responses/response_with_multiple_attribute_statements.xml
168
189
  - test/responses/response_with_multiple_attribute_values.xml
190
+ - test/responses/response_with_signed_assertion_3.xml
191
+ - test/responses/response_with_signed_message_and_assertion.xml
192
+ - test/responses/response_with_undefined_recipient.xml.base64
169
193
  - test/responses/response_wrapped.xml.base64
170
194
  - test/responses/simple_saml_php.xml
171
195
  - test/responses/starfield_response.xml.base64
172
196
  - test/responses/valid_response.xml.base64
197
+ - test/responses/valid_response_without_x509certificate.xml.base64
173
198
  - test/responses/wrapped_response_2.xml.base64
174
199
  - test/settings_test.rb
175
200
  - test/slo_logoutresponse_test.rb