ruby-saml 0.8.8 → 0.8.13

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (45) hide show
  1. checksums.yaml +7 -7
  2. data/Gemfile +11 -1
  3. data/README.md +5 -2
  4. data/Rakefile +0 -14
  5. data/lib/onelogin/ruby-saml/authrequest.rb +86 -20
  6. data/lib/onelogin/ruby-saml/logoutrequest.rb +95 -20
  7. data/lib/onelogin/ruby-saml/logoutresponse.rb +5 -28
  8. data/lib/onelogin/ruby-saml/metadata.rb +5 -5
  9. data/lib/onelogin/ruby-saml/response.rb +187 -4
  10. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  11. data/lib/onelogin/ruby-saml/settings.rb +146 -10
  12. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +158 -0
  13. data/lib/onelogin/ruby-saml/utils.rb +169 -0
  14. data/lib/onelogin/ruby-saml/version.rb +1 -1
  15. data/lib/ruby-saml.rb +2 -1
  16. data/lib/xml_security.rb +330 -78
  17. data/test/certificates/ruby-saml-2.crt +15 -0
  18. data/test/certificates/ruby-saml.crt +14 -0
  19. data/test/certificates/ruby-saml.key +15 -0
  20. data/test/logoutrequest_test.rb +177 -44
  21. data/test/logoutresponse_test.rb +25 -29
  22. data/test/request_test.rb +100 -37
  23. data/test/response_test.rb +213 -111
  24. data/test/responses/adfs_response_xmlns.xml +45 -0
  25. data/test/responses/encrypted_new_attack.xml.base64 +1 -0
  26. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  27. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  28. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  29. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  30. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  31. data/test/responses/logoutresponse_fixtures.rb +6 -6
  32. data/test/responses/response_with_concealed_signed_assertion.xml +51 -0
  33. data/test/responses/response_with_doubled_signed_assertion.xml +49 -0
  34. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  35. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  36. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  37. data/test/responses/response_wrapped.xml.base64 +150 -0
  38. data/test/responses/valid_response.xml.base64 +1 -0
  39. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  40. data/test/settings_test.rb +7 -7
  41. data/test/slo_logoutresponse_test.rb +226 -0
  42. data/test/test_helper.rb +117 -12
  43. data/test/utils_test.rb +10 -10
  44. data/test/xml_security_test.rb +310 -68
  45. metadata +88 -45
metadata CHANGED
@@ -1,49 +1,54 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
- version: !ruby/object:Gem::Version
4
- version: 0.8.8
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.8.13
5
5
  platform: ruby
6
- authors:
6
+ authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
-
12
- date: 2019-03-21 00:00:00 Z
13
- dependencies:
14
- - !ruby/object:Gem::Dependency
11
+ date: 2020-07-23 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
15
14
  name: uuid
16
- prerelease: false
17
- requirement: &id001 !ruby/object:Gem::Requirement
18
- requirements:
19
- - - ~>
20
- - !ruby/object:Gem::Version
21
- version: "2.3"
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '2.3'
22
20
  type: :runtime
23
- version_requirements: *id001
24
- - !ruby/object:Gem::Dependency
25
- name: nokogiri
26
21
  prerelease: false
27
- requirement: &id002 !ruby/object:Gem::Requirement
28
- requirements:
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '2.3'
27
+ - !ruby/object:Gem::Dependency
28
+ name: nokogiri
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
29
31
  - - ">="
30
- - !ruby/object:Gem::Version
32
+ - !ruby/object:Gem::Version
31
33
  version: 1.5.0
32
34
  type: :runtime
33
- version_requirements: *id002
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: 1.5.0
34
41
  description: SAML toolkit for Ruby on Rails
35
42
  email: support@onelogin.com
36
43
  executables: []
37
-
38
44
  extensions: []
39
-
40
- extra_rdoc_files:
45
+ extra_rdoc_files:
41
46
  - LICENSE
42
47
  - README.md
43
- files:
44
- - .document
45
- - .gitignore
46
- - .travis.yml
48
+ files:
49
+ - ".document"
50
+ - ".gitignore"
51
+ - ".travis.yml"
47
52
  - Gemfile
48
53
  - LICENSE
49
54
  - README.md
@@ -56,7 +61,9 @@ files:
56
61
  - lib/onelogin/ruby-saml/logoutresponse.rb
57
62
  - lib/onelogin/ruby-saml/metadata.rb
58
63
  - lib/onelogin/ruby-saml/response.rb
64
+ - lib/onelogin/ruby-saml/setting_error.rb
59
65
  - lib/onelogin/ruby-saml/settings.rb
66
+ - lib/onelogin/ruby-saml/slo_logoutresponse.rb
60
67
  - lib/onelogin/ruby-saml/utils.rb
61
68
  - lib/onelogin/ruby-saml/validation_error.rb
62
69
  - lib/onelogin/ruby-saml/version.rb
@@ -69,6 +76,9 @@ files:
69
76
  - ruby-saml.gemspec
70
77
  - test/certificates/certificate1
71
78
  - test/certificates/r1_certificate2_base64
79
+ - test/certificates/ruby-saml-2.crt
80
+ - test/certificates/ruby-saml.crt
81
+ - test/certificates/ruby-saml.key
72
82
  - test/logoutrequest_test.rb
73
83
  - test/logoutresponse_test.rb
74
84
  - test/request_test.rb
@@ -77,6 +87,13 @@ files:
77
87
  - test/responses/adfs_response_sha256.xml
78
88
  - test/responses/adfs_response_sha384.xml
79
89
  - test/responses/adfs_response_sha512.xml
90
+ - test/responses/adfs_response_xmlns.xml
91
+ - test/responses/encrypted_new_attack.xml.base64
92
+ - test/responses/invalids/multiple_signed.xml.base64
93
+ - test/responses/invalids/no_signature.xml.base64
94
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
95
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
96
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
80
97
  - test/responses/logoutresponse_fixtures.rb
81
98
  - test/responses/no_signature_ns.xml
82
99
  - test/responses/open_saml_response.xml
@@ -90,44 +107,54 @@ files:
90
107
  - test/responses/response_node_text_attack.xml.base64
91
108
  - test/responses/response_with_ampersands.xml
92
109
  - test/responses/response_with_ampersands.xml.base64
110
+ - test/responses/response_with_concealed_signed_assertion.xml
111
+ - test/responses/response_with_doubled_signed_assertion.xml
93
112
  - test/responses/response_with_multiple_attribute_statements.xml
94
113
  - test/responses/response_with_multiple_attribute_values.xml
114
+ - test/responses/response_with_signed_assertion_3.xml
115
+ - test/responses/response_with_signed_message_and_assertion.xml
116
+ - test/responses/response_with_undefined_recipient.xml.base64
117
+ - test/responses/response_wrapped.xml.base64
95
118
  - test/responses/simple_saml_php.xml
96
119
  - test/responses/starfield_response.xml.base64
120
+ - test/responses/valid_response.xml.base64
121
+ - test/responses/valid_response_without_x509certificate.xml.base64
97
122
  - test/responses/wrapped_response_2.xml.base64
98
123
  - test/settings_test.rb
124
+ - test/slo_logoutresponse_test.rb
99
125
  - test/test_helper.rb
100
126
  - test/utils_test.rb
101
127
  - test/xml_security_test.rb
102
128
  homepage: http://github.com/onelogin/ruby-saml
103
129
  licenses: []
104
-
105
130
  metadata: {}
106
-
107
131
  post_install_message:
108
- rdoc_options:
109
- - --charset=UTF-8
110
- require_paths:
132
+ rdoc_options:
133
+ - "--charset=UTF-8"
134
+ require_paths:
111
135
  - lib
112
- required_ruby_version: !ruby/object:Gem::Requirement
113
- requirements:
114
- - &id003
115
- - ">="
116
- - !ruby/object:Gem::Version
117
- version: "0"
118
- required_rubygems_version: !ruby/object:Gem::Requirement
119
- requirements:
120
- - *id003
136
+ required_ruby_version: !ruby/object:Gem::Requirement
137
+ requirements:
138
+ - - ">="
139
+ - !ruby/object:Gem::Version
140
+ version: '0'
141
+ required_rubygems_version: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - ">="
144
+ - !ruby/object:Gem::Version
145
+ version: '0'
121
146
  requirements: []
122
-
123
147
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
124
- rubygems_version: 2.7.7
148
+ rubygems_version: 2.4.8
125
149
  signing_key:
126
150
  specification_version: 4
127
151
  summary: SAML Ruby Tookit
128
- test_files:
152
+ test_files:
129
153
  - test/certificates/certificate1
130
154
  - test/certificates/r1_certificate2_base64
155
+ - test/certificates/ruby-saml-2.crt
156
+ - test/certificates/ruby-saml.crt
157
+ - test/certificates/ruby-saml.key
131
158
  - test/logoutrequest_test.rb
132
159
  - test/logoutresponse_test.rb
133
160
  - test/request_test.rb
@@ -136,6 +163,13 @@ test_files:
136
163
  - test/responses/adfs_response_sha256.xml
137
164
  - test/responses/adfs_response_sha384.xml
138
165
  - test/responses/adfs_response_sha512.xml
166
+ - test/responses/adfs_response_xmlns.xml
167
+ - test/responses/encrypted_new_attack.xml.base64
168
+ - test/responses/invalids/multiple_signed.xml.base64
169
+ - test/responses/invalids/no_signature.xml.base64
170
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
171
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
172
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
139
173
  - test/responses/logoutresponse_fixtures.rb
140
174
  - test/responses/no_signature_ns.xml
141
175
  - test/responses/open_saml_response.xml
@@ -149,12 +183,21 @@ test_files:
149
183
  - test/responses/response_node_text_attack.xml.base64
150
184
  - test/responses/response_with_ampersands.xml
151
185
  - test/responses/response_with_ampersands.xml.base64
186
+ - test/responses/response_with_concealed_signed_assertion.xml
187
+ - test/responses/response_with_doubled_signed_assertion.xml
152
188
  - test/responses/response_with_multiple_attribute_statements.xml
153
189
  - test/responses/response_with_multiple_attribute_values.xml
190
+ - test/responses/response_with_signed_assertion_3.xml
191
+ - test/responses/response_with_signed_message_and_assertion.xml
192
+ - test/responses/response_with_undefined_recipient.xml.base64
193
+ - test/responses/response_wrapped.xml.base64
154
194
  - test/responses/simple_saml_php.xml
155
195
  - test/responses/starfield_response.xml.base64
196
+ - test/responses/valid_response.xml.base64
197
+ - test/responses/valid_response_without_x509certificate.xml.base64
156
198
  - test/responses/wrapped_response_2.xml.base64
157
199
  - test/settings_test.rb
200
+ - test/slo_logoutresponse_test.rb
158
201
  - test/test_helper.rb
159
202
  - test/utils_test.rb
160
203
  - test/xml_security_test.rb