ruby-saml 0.8.9 → 0.8.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (42) hide show
  1. data/Gemfile +11 -1
  2. data/Rakefile +0 -14
  3. data/lib/onelogin/ruby-saml/authrequest.rb +84 -18
  4. data/lib/onelogin/ruby-saml/logoutrequest.rb +93 -18
  5. data/lib/onelogin/ruby-saml/logoutresponse.rb +1 -24
  6. data/lib/onelogin/ruby-saml/response.rb +206 -11
  7. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  8. data/lib/onelogin/ruby-saml/settings.rb +73 -12
  9. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +158 -0
  10. data/lib/onelogin/ruby-saml/utils.rb +169 -0
  11. data/lib/onelogin/ruby-saml/version.rb +1 -1
  12. data/lib/ruby-saml.rb +2 -1
  13. data/lib/xml_security.rb +332 -78
  14. data/test/certificates/ruby-saml-2.crt +15 -0
  15. data/test/certificates/ruby-saml.crt +14 -0
  16. data/test/certificates/ruby-saml.key +15 -0
  17. data/test/logoutrequest_test.rb +177 -44
  18. data/test/logoutresponse_test.rb +23 -28
  19. data/test/request_test.rb +100 -37
  20. data/test/response_test.rb +337 -129
  21. data/test/responses/adfs_response_xmlns.xml +45 -0
  22. data/test/responses/encrypted_new_attack.xml.base64 +1 -0
  23. data/test/responses/invalids/multiple_signed.xml.base64 +1 -0
  24. data/test/responses/invalids/no_signature.xml.base64 +1 -0
  25. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +51 -0
  26. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +49 -0
  27. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +1 -0
  28. data/test/responses/response_with_concealed_signed_assertion.xml +51 -0
  29. data/test/responses/response_with_doubled_signed_assertion.xml +49 -0
  30. data/test/responses/response_with_signed_assertion_3.xml +30 -0
  31. data/test/responses/response_with_signed_message_and_assertion.xml +34 -0
  32. data/test/responses/response_with_undefined_recipient.xml.base64 +1 -0
  33. data/test/responses/response_wrapped.xml.base64 +150 -0
  34. data/test/responses/valid_response.xml.base64 +1 -0
  35. data/test/responses/valid_response_without_x509certificate.xml.base64 +1 -0
  36. data/test/settings_test.rb +5 -5
  37. data/test/slo_logoutresponse_test.rb +226 -0
  38. data/test/test_helper.rb +117 -12
  39. data/test/utils_test.rb +10 -10
  40. data/test/xml_security_test.rb +354 -68
  41. metadata +64 -18
  42. checksums.yaml +0 -7
metadata CHANGED
@@ -1,41 +1,46 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.8.9
4
+ version: 0.8.14
5
+ prerelease:
5
6
  platform: ruby
6
7
  authors:
7
8
  - OneLogin LLC
8
- autorequire:
9
+ autorequire:
9
10
  bindir: bin
10
11
  cert_chain: []
11
- date: 2019-05-12 00:00:00.000000000 Z
12
+ date: 2020-10-19 00:00:00.000000000 Z
12
13
  dependencies:
13
14
  - !ruby/object:Gem::Dependency
14
15
  name: uuid
15
16
  requirement: !ruby/object:Gem::Requirement
17
+ none: false
16
18
  requirements:
17
- - - "~>"
19
+ - - ~>
18
20
  - !ruby/object:Gem::Version
19
21
  version: '2.3'
20
22
  type: :runtime
21
23
  prerelease: false
22
24
  version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
23
26
  requirements:
24
- - - "~>"
27
+ - - ~>
25
28
  - !ruby/object:Gem::Version
26
29
  version: '2.3'
27
30
  - !ruby/object:Gem::Dependency
28
31
  name: nokogiri
29
32
  requirement: !ruby/object:Gem::Requirement
33
+ none: false
30
34
  requirements:
31
- - - ">="
35
+ - - ! '>='
32
36
  - !ruby/object:Gem::Version
33
37
  version: 1.5.0
34
38
  type: :runtime
35
39
  prerelease: false
36
40
  version_requirements: !ruby/object:Gem::Requirement
41
+ none: false
37
42
  requirements:
38
- - - ">="
43
+ - - ! '>='
39
44
  - !ruby/object:Gem::Version
40
45
  version: 1.5.0
41
46
  description: SAML toolkit for Ruby on Rails
@@ -46,9 +51,9 @@ extra_rdoc_files:
46
51
  - LICENSE
47
52
  - README.md
48
53
  files:
49
- - ".document"
50
- - ".gitignore"
51
- - ".travis.yml"
54
+ - .document
55
+ - .gitignore
56
+ - .travis.yml
52
57
  - Gemfile
53
58
  - LICENSE
54
59
  - README.md
@@ -61,7 +66,9 @@ files:
61
66
  - lib/onelogin/ruby-saml/logoutresponse.rb
62
67
  - lib/onelogin/ruby-saml/metadata.rb
63
68
  - lib/onelogin/ruby-saml/response.rb
69
+ - lib/onelogin/ruby-saml/setting_error.rb
64
70
  - lib/onelogin/ruby-saml/settings.rb
71
+ - lib/onelogin/ruby-saml/slo_logoutresponse.rb
65
72
  - lib/onelogin/ruby-saml/utils.rb
66
73
  - lib/onelogin/ruby-saml/validation_error.rb
67
74
  - lib/onelogin/ruby-saml/version.rb
@@ -74,6 +81,9 @@ files:
74
81
  - ruby-saml.gemspec
75
82
  - test/certificates/certificate1
76
83
  - test/certificates/r1_certificate2_base64
84
+ - test/certificates/ruby-saml-2.crt
85
+ - test/certificates/ruby-saml.crt
86
+ - test/certificates/ruby-saml.key
77
87
  - test/logoutrequest_test.rb
78
88
  - test/logoutresponse_test.rb
79
89
  - test/request_test.rb
@@ -82,6 +92,13 @@ files:
82
92
  - test/responses/adfs_response_sha256.xml
83
93
  - test/responses/adfs_response_sha384.xml
84
94
  - test/responses/adfs_response_sha512.xml
95
+ - test/responses/adfs_response_xmlns.xml
96
+ - test/responses/encrypted_new_attack.xml.base64
97
+ - test/responses/invalids/multiple_signed.xml.base64
98
+ - test/responses/invalids/no_signature.xml.base64
99
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
100
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
101
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
85
102
  - test/responses/logoutresponse_fixtures.rb
86
103
  - test/responses/no_signature_ns.xml
87
104
  - test/responses/open_saml_response.xml
@@ -95,42 +112,55 @@ files:
95
112
  - test/responses/response_node_text_attack.xml.base64
96
113
  - test/responses/response_with_ampersands.xml
97
114
  - test/responses/response_with_ampersands.xml.base64
115
+ - test/responses/response_with_concealed_signed_assertion.xml
116
+ - test/responses/response_with_doubled_signed_assertion.xml
98
117
  - test/responses/response_with_multiple_attribute_statements.xml
99
118
  - test/responses/response_with_multiple_attribute_values.xml
119
+ - test/responses/response_with_signed_assertion_3.xml
120
+ - test/responses/response_with_signed_message_and_assertion.xml
121
+ - test/responses/response_with_undefined_recipient.xml.base64
122
+ - test/responses/response_wrapped.xml.base64
100
123
  - test/responses/simple_saml_php.xml
101
124
  - test/responses/starfield_response.xml.base64
125
+ - test/responses/valid_response.xml.base64
126
+ - test/responses/valid_response_without_x509certificate.xml.base64
102
127
  - test/responses/wrapped_response_2.xml.base64
103
128
  - test/settings_test.rb
129
+ - test/slo_logoutresponse_test.rb
104
130
  - test/test_helper.rb
105
131
  - test/utils_test.rb
106
132
  - test/xml_security_test.rb
107
133
  homepage: http://github.com/onelogin/ruby-saml
108
134
  licenses: []
109
- metadata: {}
110
- post_install_message:
135
+ post_install_message:
111
136
  rdoc_options:
112
- - "--charset=UTF-8"
137
+ - --charset=UTF-8
113
138
  require_paths:
114
139
  - lib
115
140
  required_ruby_version: !ruby/object:Gem::Requirement
141
+ none: false
116
142
  requirements:
117
- - - ">="
143
+ - - ! '>='
118
144
  - !ruby/object:Gem::Version
119
145
  version: '0'
120
146
  required_rubygems_version: !ruby/object:Gem::Requirement
147
+ none: false
121
148
  requirements:
122
- - - ">="
149
+ - - ! '>='
123
150
  - !ruby/object:Gem::Version
124
151
  version: '0'
125
152
  requirements: []
126
153
  rubyforge_project: http://www.rubygems.org/gems/ruby-saml
127
- rubygems_version: 2.5.2.1
128
- signing_key:
129
- specification_version: 4
154
+ rubygems_version: 1.8.23.2
155
+ signing_key:
156
+ specification_version: 3
130
157
  summary: SAML Ruby Tookit
131
158
  test_files:
132
159
  - test/certificates/certificate1
133
160
  - test/certificates/r1_certificate2_base64
161
+ - test/certificates/ruby-saml-2.crt
162
+ - test/certificates/ruby-saml.crt
163
+ - test/certificates/ruby-saml.key
134
164
  - test/logoutrequest_test.rb
135
165
  - test/logoutresponse_test.rb
136
166
  - test/request_test.rb
@@ -139,6 +169,13 @@ test_files:
139
169
  - test/responses/adfs_response_sha256.xml
140
170
  - test/responses/adfs_response_sha384.xml
141
171
  - test/responses/adfs_response_sha512.xml
172
+ - test/responses/adfs_response_xmlns.xml
173
+ - test/responses/encrypted_new_attack.xml.base64
174
+ - test/responses/invalids/multiple_signed.xml.base64
175
+ - test/responses/invalids/no_signature.xml.base64
176
+ - test/responses/invalids/response_with_concealed_signed_assertion.xml
177
+ - test/responses/invalids/response_with_doubled_signed_assertion.xml
178
+ - test/responses/invalids/signature_wrapping_attack.xml.base64
142
179
  - test/responses/logoutresponse_fixtures.rb
143
180
  - test/responses/no_signature_ns.xml
144
181
  - test/responses/open_saml_response.xml
@@ -152,12 +189,21 @@ test_files:
152
189
  - test/responses/response_node_text_attack.xml.base64
153
190
  - test/responses/response_with_ampersands.xml
154
191
  - test/responses/response_with_ampersands.xml.base64
192
+ - test/responses/response_with_concealed_signed_assertion.xml
193
+ - test/responses/response_with_doubled_signed_assertion.xml
155
194
  - test/responses/response_with_multiple_attribute_statements.xml
156
195
  - test/responses/response_with_multiple_attribute_values.xml
196
+ - test/responses/response_with_signed_assertion_3.xml
197
+ - test/responses/response_with_signed_message_and_assertion.xml
198
+ - test/responses/response_with_undefined_recipient.xml.base64
199
+ - test/responses/response_wrapped.xml.base64
157
200
  - test/responses/simple_saml_php.xml
158
201
  - test/responses/starfield_response.xml.base64
202
+ - test/responses/valid_response.xml.base64
203
+ - test/responses/valid_response_without_x509certificate.xml.base64
159
204
  - test/responses/wrapped_response_2.xml.base64
160
205
  - test/settings_test.rb
206
+ - test/slo_logoutresponse_test.rb
161
207
  - test/test_helper.rb
162
208
  - test/utils_test.rb
163
209
  - test/xml_security_test.rb
checksums.yaml DELETED
@@ -1,7 +0,0 @@
1
- ---
2
- SHA1:
3
- metadata.gz: 646f99f7f6a7590eb22b51fad5f183cfed8038be
4
- data.tar.gz: 008e10e85a4aea26fdf2c067cc8f6112d18f55a7
5
- SHA512:
6
- metadata.gz: 7d239d7038cf7041e4dab1dd27dd92e5bb1f53d777ace0aa0c4ed9f08b4a9b077555e7d1eeed2ed8a8e21767039267747b9194172148e74bac7703205b862a16
7
- data.tar.gz: 151df4d9fc610fbef47e5c93c73b8f25f9297b0bd457106e6fcd427933eebbe164c415d807ca9f70749937d5df66a4e49fb5423a7be2de6b1cd24641a077f94e