ruby-saml 0.8.8 → 0.8.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (45) hide show
  1. checksums.yaml +7 -7
  2. data/Gemfile +11 -1
  3. data/README.md +5 -2
  4. data/Rakefile +0 -14
  5. data/lib/onelogin/ruby-saml/authrequest.rb +86 -20
  6. data/lib/onelogin/ruby-saml/logoutrequest.rb +95 -20
  7. data/lib/onelogin/ruby-saml/logoutresponse.rb +5 -28
  8. data/lib/onelogin/ruby-saml/metadata.rb +5 -5
  9. data/lib/onelogin/ruby-saml/response.rb +187 -4
  10. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  11. data/lib/onelogin/ruby-saml/settings.rb +146 -10
  12. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +158 -0
  13. data/lib/onelogin/ruby-saml/utils.rb +169 -0
  14. data/lib/onelogin/ruby-saml/version.rb +1 -1
  15. data/lib/ruby-saml.rb +2 -1
  16. data/lib/xml_security.rb +330 -78
  17. data/test/certificates/ruby-saml-2.crt +15 -0
  18. data/test/certificates/ruby-saml.crt +14 -0
  19. data/test/certificates/ruby-saml.key +15 -0
  20. data/test/logoutrequest_test.rb +177 -44
  21. data/test/logoutresponse_test.rb +25 -29
  22. data/test/request_test.rb +100 -37
  23. data/test/response_test.rb +213 -111
  24. data/test/responses/adfs_response_xmlns.xml +45 -0
  25. data/test/responses/encrypted_new_attack.xml.base64 +1 -0
  26. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  27. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  28. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  29. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  30. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  31. data/test/responses/logoutresponse_fixtures.rb +6 -6
  32. data/test/responses/response_with_concealed_signed_assertion.xml +51 -0
  33. data/test/responses/response_with_doubled_signed_assertion.xml +49 -0
  34. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  35. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  36. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  37. data/test/responses/response_wrapped.xml.base64 +150 -0
  38. data/test/responses/valid_response.xml.base64 +1 -0
  39. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  40. data/test/settings_test.rb +7 -7
  41. data/test/slo_logoutresponse_test.rb +226 -0
  42. data/test/test_helper.rb +117 -12
  43. data/test/utils_test.rb +10 -10
  44. data/test/xml_security_test.rb +310 -68
  45. metadata +88 -45
metadata CHANGED
@@ -1,49 +1,54 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
- version: !ruby/object:Gem::Version
4
- version: 0.8.8
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.8.13
5
5
  platform: ruby
6
- authors:
6
+ authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
-
12
- date: 2019-03-21 00:00:00 Z
13
- dependencies:
14
- - !ruby/object:Gem::Dependency
11
+ date: 2020-07-23 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
15
14
  name: uuid
16
- prerelease: false
17
- requirement: &id001 !ruby/object:Gem::Requirement
18
- requirements:
19
- - - ~>
20
- - !ruby/object:Gem::Version
21
- version: "2.3"
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '2.3'
22
20
  type: :runtime
23
- version_requirements: *id001
24
- - !ruby/object:Gem::Dependency
25
- name: nokogiri
26
21
  prerelease: false
27
- requirement: &id002 !ruby/object:Gem::Requirement
28
- requirements:
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '2.3'
27
+ - !ruby/object:Gem::Dependency
28
+ name: nokogiri
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
29
31
  - - ">="
30
- - !ruby/object:Gem::Version
32
+ - !ruby/object:Gem::Version
31
33
  version: 1.5.0
32
34
  type: :runtime
33
- version_requirements: *id002
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: 1.5.0
34
41
  description: SAML toolkit for Ruby on Rails
35
42
  email: support@onelogin.com
36
43
  executables: []
37
-
38
44
  extensions: []
39
-
40
- extra_rdoc_files:
45
+ extra_rdoc_files:
41
46
  - LICENSE
42
47
  - README.md
43
- files:
44
- - .document
45
- - .gitignore
46
- - .travis.yml
48
+ files:
49
+ - ".document"
50
+ - ".gitignore"
51
+ - ".travis.yml"
47
52
  - Gemfile
48
53
  - LICENSE
49
54
  - README.md
@@ -56,7 +61,9 @@ files:
56
61
  - lib/onelogin/ruby-saml/logoutresponse.rb
57
62
  - lib/onelogin/ruby-saml/metadata.rb
58
63
  - lib/onelogin/ruby-saml/response.rb
64
+ - lib/onelogin/ruby-saml/setting_error.rb
59
65
  - lib/onelogin/ruby-saml/settings.rb
66
+ - lib/onelogin/ruby-saml/slo_logoutresponse.rb
60
67
  - lib/onelogin/ruby-saml/utils.rb
61
68
  - lib/onelogin/ruby-saml/validation_error.rb
62
69
  - lib/onelogin/ruby-saml/version.rb
@@ -69,6 +76,9 @@ files:
69
76
  - ruby-saml.gemspec
70
77
  - test/certificates/certificate1
71
78
  - test/certificates/r1_certificate2_base64
79
+ - test/certificates/ruby-saml-2.crt
80
+ - test/certificates/ruby-saml.crt
81
+ - test/certificates/ruby-saml.key
72
82
  - test/logoutrequest_test.rb
73
83
  - test/logoutresponse_test.rb
74
84
  - test/request_test.rb
@@ -77,6 +87,13 @@ files:
77
87
  - test/responses/adfs_response_sha256.xml
78
88
  - test/responses/adfs_response_sha384.xml
79
89
  - test/responses/adfs_response_sha512.xml
90
+ - test/responses/adfs_response_xmlns.xml
91
+ - test/responses/encrypted_new_attack.xml.base64
92
+ - test/responses/invalids/multiple_signed.xml.base64
93
+ - test/responses/invalids/no_signature.xml.base64
94
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
95
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
96
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
80
97
  - test/responses/logoutresponse_fixtures.rb
81
98
  - test/responses/no_signature_ns.xml
82
99
  - test/responses/open_saml_response.xml
@@ -90,44 +107,54 @@ files:
90
107
  - test/responses/response_node_text_attack.xml.base64
91
108
  - test/responses/response_with_ampersands.xml
92
109
  - test/responses/response_with_ampersands.xml.base64
110
+ - test/responses/response_with_concealed_signed_assertion.xml
111
+ - test/responses/response_with_doubled_signed_assertion.xml
93
112
  - test/responses/response_with_multiple_attribute_statements.xml
94
113
  - test/responses/response_with_multiple_attribute_values.xml
114
+ - test/responses/response_with_signed_assertion_3.xml
115
+ - test/responses/response_with_signed_message_and_assertion.xml
116
+ - test/responses/response_with_undefined_recipient.xml.base64
117
+ - test/responses/response_wrapped.xml.base64
95
118
  - test/responses/simple_saml_php.xml
96
119
  - test/responses/starfield_response.xml.base64
120
+ - test/responses/valid_response.xml.base64
121
+ - test/responses/valid_response_without_x509certificate.xml.base64
97
122
  - test/responses/wrapped_response_2.xml.base64
98
123
  - test/settings_test.rb
124
+ - test/slo_logoutresponse_test.rb
99
125
  - test/test_helper.rb
100
126
  - test/utils_test.rb
101
127
  - test/xml_security_test.rb
102
128
  homepage: http://github.com/onelogin/ruby-saml
103
129
  licenses: []
104
-
105
130
  metadata: {}
106
-
107
131
  post_install_message:
108
- rdoc_options:
109
- - --charset=UTF-8
110
- require_paths:
132
+ rdoc_options:
133
+ - "--charset=UTF-8"
134
+ require_paths:
111
135
  - lib
112
- required_ruby_version: !ruby/object:Gem::Requirement
113
- requirements:
114
- - &id003
115
- - ">="
116
- - !ruby/object:Gem::Version
117
- version: "0"
118
- required_rubygems_version: !ruby/object:Gem::Requirement
119
- requirements:
120
- - *id003
136
+ required_ruby_version: !ruby/object:Gem::Requirement
137
+ requirements:
138
+ - - ">="
139
+ - !ruby/object:Gem::Version
140
+ version: '0'
141
+ required_rubygems_version: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - ">="
144
+ - !ruby/object:Gem::Version
145
+ version: '0'
121
146
  requirements: []
122
-
123
147
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
124
- rubygems_version: 2.7.7
148
+ rubygems_version: 2.4.8
125
149
  signing_key:
126
150
  specification_version: 4
127
151
  summary: SAML Ruby Tookit
128
- test_files:
152
+ test_files:
129
153
  - test/certificates/certificate1
130
154
  - test/certificates/r1_certificate2_base64
155
+ - test/certificates/ruby-saml-2.crt
156
+ - test/certificates/ruby-saml.crt
157
+ - test/certificates/ruby-saml.key
131
158
  - test/logoutrequest_test.rb
132
159
  - test/logoutresponse_test.rb
133
160
  - test/request_test.rb
@@ -136,6 +163,13 @@ test_files:
136
163
  - test/responses/adfs_response_sha256.xml
137
164
  - test/responses/adfs_response_sha384.xml
138
165
  - test/responses/adfs_response_sha512.xml
166
+ - test/responses/adfs_response_xmlns.xml
167
+ - test/responses/encrypted_new_attack.xml.base64
168
+ - test/responses/invalids/multiple_signed.xml.base64
169
+ - test/responses/invalids/no_signature.xml.base64
170
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
171
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
172
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
139
173
  - test/responses/logoutresponse_fixtures.rb
140
174
  - test/responses/no_signature_ns.xml
141
175
  - test/responses/open_saml_response.xml
@@ -149,12 +183,21 @@ test_files:
149
183
  - test/responses/response_node_text_attack.xml.base64
150
184
  - test/responses/response_with_ampersands.xml
151
185
  - test/responses/response_with_ampersands.xml.base64
186
+ - test/responses/response_with_concealed_signed_assertion.xml
187
+ - test/responses/response_with_doubled_signed_assertion.xml
152
188
  - test/responses/response_with_multiple_attribute_statements.xml
153
189
  - test/responses/response_with_multiple_attribute_values.xml
190
+ - test/responses/response_with_signed_assertion_3.xml
191
+ - test/responses/response_with_signed_message_and_assertion.xml
192
+ - test/responses/response_with_undefined_recipient.xml.base64
193
+ - test/responses/response_wrapped.xml.base64
154
194
  - test/responses/simple_saml_php.xml
155
195
  - test/responses/starfield_response.xml.base64
196
+ - test/responses/valid_response.xml.base64
197
+ - test/responses/valid_response_without_x509certificate.xml.base64
156
198
  - test/responses/wrapped_response_2.xml.base64
157
199
  - test/settings_test.rb
200
+ - test/slo_logoutresponse_test.rb
158
201
  - test/test_helper.rb
159
202
  - test/utils_test.rb
160
203
  - test/xml_security_test.rb