ruby-saml 0.8.9 → 0.8.14

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (42) hide show
  1. data/Gemfile +11 -1
  2. data/Rakefile +0 -14
  3. data/lib/onelogin/ruby-saml/authrequest.rb +84 -18
  4. data/lib/onelogin/ruby-saml/logoutrequest.rb +93 -18
  5. data/lib/onelogin/ruby-saml/logoutresponse.rb +1 -24
  6. data/lib/onelogin/ruby-saml/response.rb +206 -11
  7. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  8. data/lib/onelogin/ruby-saml/settings.rb +73 -12
  9. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +158 -0
  10. data/lib/onelogin/ruby-saml/utils.rb +169 -0
  11. data/lib/onelogin/ruby-saml/version.rb +1 -1
  12. data/lib/ruby-saml.rb +2 -1
  13. data/lib/xml_security.rb +332 -78
  14. data/test/certificates/ruby-saml-2.crt +15 -0
  15. data/test/certificates/ruby-saml.crt +14 -0
  16. data/test/certificates/ruby-saml.key +15 -0
  17. data/test/logoutrequest_test.rb +177 -44
  18. data/test/logoutresponse_test.rb +23 -28
  19. data/test/request_test.rb +100 -37
  20. data/test/response_test.rb +337 -129
  21. data/test/responses/adfs_response_xmlns.xml +45 -0
  22. data/test/responses/encrypted_new_attack.xml.base64 +1 -0
  23. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  24. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  25. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  26. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  27. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  28. data/test/responses/response_with_concealed_signed_assertion.xml +51 -0
  29. data/test/responses/response_with_doubled_signed_assertion.xml +49 -0
  30. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  31. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  32. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  33. data/test/responses/response_wrapped.xml.base64 +150 -0
  34. data/test/responses/valid_response.xml.base64 +1 -0
  35. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  36. data/test/settings_test.rb +5 -5
  37. data/test/slo_logoutresponse_test.rb +226 -0
  38. data/test/test_helper.rb +117 -12
  39. data/test/utils_test.rb +10 -10
  40. data/test/xml_security_test.rb +354 -68
  41. metadata +64 -18
  42. checksums.yaml +0 -7
metadata CHANGED
@@ -1,41 +1,46 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.8.9
4
+ version: 0.8.14
5
+ prerelease:
5
6
  platform: ruby
6
7
  authors:
7
8
  - OneLogin LLC
8
- autorequire:
9
+ autorequire:
9
10
  bindir: bin
10
11
  cert_chain: []
11
- date: 2019-05-12 00:00:00.000000000 Z
12
+ date: 2020-10-19 00:00:00.000000000 Z
12
13
  dependencies:
13
14
  - !ruby/object:Gem::Dependency
14
15
  name: uuid
15
16
  requirement: !ruby/object:Gem::Requirement
17
+ none: false
16
18
  requirements:
17
- - - "~>"
19
+ - - ~>
18
20
  - !ruby/object:Gem::Version
19
21
  version: '2.3'
20
22
  type: :runtime
21
23
  prerelease: false
22
24
  version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
23
26
  requirements:
24
- - - "~>"
27
+ - - ~>
25
28
  - !ruby/object:Gem::Version
26
29
  version: '2.3'
27
30
  - !ruby/object:Gem::Dependency
28
31
  name: nokogiri
29
32
  requirement: !ruby/object:Gem::Requirement
33
+ none: false
30
34
  requirements:
31
- - - ">="
35
+ - - ! '>='
32
36
  - !ruby/object:Gem::Version
33
37
  version: 1.5.0
34
38
  type: :runtime
35
39
  prerelease: false
36
40
  version_requirements: !ruby/object:Gem::Requirement
41
+ none: false
37
42
  requirements:
38
- - - ">="
43
+ - - ! '>='
39
44
  - !ruby/object:Gem::Version
40
45
  version: 1.5.0
41
46
  description: SAML toolkit for Ruby on Rails
@@ -46,9 +51,9 @@ extra_rdoc_files:
46
51
  - LICENSE
47
52
  - README.md
48
53
  files:
49
- - ".document"
50
- - ".gitignore"
51
- - ".travis.yml"
54
+ - .document
55
+ - .gitignore
56
+ - .travis.yml
52
57
  - Gemfile
53
58
  - LICENSE
54
59
  - README.md
@@ -61,7 +66,9 @@ files:
61
66
  - lib/onelogin/ruby-saml/logoutresponse.rb
62
67
  - lib/onelogin/ruby-saml/metadata.rb
63
68
  - lib/onelogin/ruby-saml/response.rb
69
+ - lib/onelogin/ruby-saml/setting_error.rb
64
70
  - lib/onelogin/ruby-saml/settings.rb
71
+ - lib/onelogin/ruby-saml/slo_logoutresponse.rb
65
72
  - lib/onelogin/ruby-saml/utils.rb
66
73
  - lib/onelogin/ruby-saml/validation_error.rb
67
74
  - lib/onelogin/ruby-saml/version.rb
@@ -74,6 +81,9 @@ files:
74
81
  - ruby-saml.gemspec
75
82
  - test/certificates/certificate1
76
83
  - test/certificates/r1_certificate2_base64
84
+ - test/certificates/ruby-saml-2.crt
85
+ - test/certificates/ruby-saml.crt
86
+ - test/certificates/ruby-saml.key
77
87
  - test/logoutrequest_test.rb
78
88
  - test/logoutresponse_test.rb
79
89
  - test/request_test.rb
@@ -82,6 +92,13 @@ files:
82
92
  - test/responses/adfs_response_sha256.xml
83
93
  - test/responses/adfs_response_sha384.xml
84
94
  - test/responses/adfs_response_sha512.xml
95
+ - test/responses/adfs_response_xmlns.xml
96
+ - test/responses/encrypted_new_attack.xml.base64
97
+ - test/responses/invalids/multiple_signed.xml.base64
98
+ - test/responses/invalids/no_signature.xml.base64
99
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
100
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
101
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
85
102
  - test/responses/logoutresponse_fixtures.rb
86
103
  - test/responses/no_signature_ns.xml
87
104
  - test/responses/open_saml_response.xml
@@ -95,42 +112,55 @@ files:
95
112
  - test/responses/response_node_text_attack.xml.base64
96
113
  - test/responses/response_with_ampersands.xml
97
114
  - test/responses/response_with_ampersands.xml.base64
115
+ - test/responses/response_with_concealed_signed_assertion.xml
116
+ - test/responses/response_with_doubled_signed_assertion.xml
98
117
  - test/responses/response_with_multiple_attribute_statements.xml
99
118
  - test/responses/response_with_multiple_attribute_values.xml
119
+ - test/responses/response_with_signed_assertion_3.xml
120
+ - test/responses/response_with_signed_message_and_assertion.xml
121
+ - test/responses/response_with_undefined_recipient.xml.base64
122
+ - test/responses/response_wrapped.xml.base64
100
123
  - test/responses/simple_saml_php.xml
101
124
  - test/responses/starfield_response.xml.base64
125
+ - test/responses/valid_response.xml.base64
126
+ - test/responses/valid_response_without_x509certificate.xml.base64
102
127
  - test/responses/wrapped_response_2.xml.base64
103
128
  - test/settings_test.rb
129
+ - test/slo_logoutresponse_test.rb
104
130
  - test/test_helper.rb
105
131
  - test/utils_test.rb
106
132
  - test/xml_security_test.rb
107
133
  homepage: http://github.com/onelogin/ruby-saml
108
134
  licenses: []
109
- metadata: {}
110
- post_install_message:
135
+ post_install_message:
111
136
  rdoc_options:
112
- - "--charset=UTF-8"
137
+ - --charset=UTF-8
113
138
  require_paths:
114
139
  - lib
115
140
  required_ruby_version: !ruby/object:Gem::Requirement
141
+ none: false
116
142
  requirements:
117
- - - ">="
143
+ - - ! '>='
118
144
  - !ruby/object:Gem::Version
119
145
  version: '0'
120
146
  required_rubygems_version: !ruby/object:Gem::Requirement
147
+ none: false
121
148
  requirements:
122
- - - ">="
149
+ - - ! '>='
123
150
  - !ruby/object:Gem::Version
124
151
  version: '0'
125
152
  requirements: []
126
153
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
127
- rubygems_version: 2.5.2.1
128
- signing_key:
129
- specification_version: 4
154
+ rubygems_version: 1.8.23.2
155
+ signing_key:
156
+ specification_version: 3
130
157
  summary: SAML Ruby Tookit
131
158
  test_files:
132
159
  - test/certificates/certificate1
133
160
  - test/certificates/r1_certificate2_base64
161
+ - test/certificates/ruby-saml-2.crt
162
+ - test/certificates/ruby-saml.crt
163
+ - test/certificates/ruby-saml.key
134
164
  - test/logoutrequest_test.rb
135
165
  - test/logoutresponse_test.rb
136
166
  - test/request_test.rb
@@ -139,6 +169,13 @@ test_files:
139
169
  - test/responses/adfs_response_sha256.xml
140
170
  - test/responses/adfs_response_sha384.xml
141
171
  - test/responses/adfs_response_sha512.xml
172
+ - test/responses/adfs_response_xmlns.xml
173
+ - test/responses/encrypted_new_attack.xml.base64
174
+ - test/responses/invalids/multiple_signed.xml.base64
175
+ - test/responses/invalids/no_signature.xml.base64
176
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
177
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
178
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
142
179
  - test/responses/logoutresponse_fixtures.rb
143
180
  - test/responses/no_signature_ns.xml
144
181
  - test/responses/open_saml_response.xml
@@ -152,12 +189,21 @@ test_files:
152
189
  - test/responses/response_node_text_attack.xml.base64
153
190
  - test/responses/response_with_ampersands.xml
154
191
  - test/responses/response_with_ampersands.xml.base64
192
+ - test/responses/response_with_concealed_signed_assertion.xml
193
+ - test/responses/response_with_doubled_signed_assertion.xml
155
194
  - test/responses/response_with_multiple_attribute_statements.xml
156
195
  - test/responses/response_with_multiple_attribute_values.xml
196
+ - test/responses/response_with_signed_assertion_3.xml
197
+ - test/responses/response_with_signed_message_and_assertion.xml
198
+ - test/responses/response_with_undefined_recipient.xml.base64
199
+ - test/responses/response_wrapped.xml.base64
157
200
  - test/responses/simple_saml_php.xml
158
201
  - test/responses/starfield_response.xml.base64
202
+ - test/responses/valid_response.xml.base64
203
+ - test/responses/valid_response_without_x509certificate.xml.base64
159
204
  - test/responses/wrapped_response_2.xml.base64
160
205
  - test/settings_test.rb
206
+ - test/slo_logoutresponse_test.rb
161
207
  - test/test_helper.rb
162
208
  - test/utils_test.rb
163
209
  - test/xml_security_test.rb
checksums.yaml DELETED
@@ -1,7 +0,0 @@
1
- ---
2
- SHA1:
3
- metadata.gz: 646f99f7f6a7590eb22b51fad5f183cfed8038be
4
- data.tar.gz: 008e10e85a4aea26fdf2c067cc8f6112d18f55a7
5
- SHA512:
6
- metadata.gz: 7d239d7038cf7041e4dab1dd27dd92e5bb1f53d777ace0aa0c4ed9f08b4a9b077555e7d1eeed2ed8a8e21767039267747b9194172148e74bac7703205b862a16
7
- data.tar.gz: 151df4d9fc610fbef47e5c93c73b8f25f9297b0bd457106e6fcd427933eebbe164c415d807ca9f70749937d5df66a4e49fb5423a7be2de6b1cd24641a077f94e