ruby-saml 1.10.0 → 1.12.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (159) hide show
  1. checksums.yaml +5 -5
  2. data/.travis.yml +28 -14
  3. data/README.md +96 -26
  4. data/changelog.md +37 -0
  5. data/lib/onelogin/ruby-saml/attributes.rb +24 -1
  6. data/lib/onelogin/ruby-saml/authrequest.rb +11 -6
  7. data/lib/onelogin/ruby-saml/idp_metadata_parser.rb +71 -22
  8. data/lib/onelogin/ruby-saml/logging.rb +3 -3
  9. data/lib/onelogin/ruby-saml/logoutrequest.rb +9 -3
  10. data/lib/onelogin/ruby-saml/logoutresponse.rb +21 -2
  11. data/lib/onelogin/ruby-saml/metadata.rb +11 -3
  12. data/lib/onelogin/ruby-saml/response.rb +68 -22
  13. data/lib/onelogin/ruby-saml/saml_message.rb +6 -0
  14. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  15. data/lib/onelogin/ruby-saml/settings.rb +72 -7
  16. data/lib/onelogin/ruby-saml/slo_logoutrequest.rb +20 -1
  17. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +29 -16
  18. data/lib/onelogin/ruby-saml/utils.rb +74 -1
  19. data/lib/onelogin/ruby-saml/version.rb +1 -1
  20. data/lib/xml_security.rb +34 -6
  21. data/ruby-saml.gemspec +9 -5
  22. metadata +36 -282
  23. data/test/certificates/certificate.der +0 -0
  24. data/test/certificates/certificate1 +0 -12
  25. data/test/certificates/certificate_without_head_foot +0 -1
  26. data/test/certificates/formatted_certificate +0 -14
  27. data/test/certificates/formatted_chained_certificate +0 -42
  28. data/test/certificates/formatted_private_key +0 -12
  29. data/test/certificates/formatted_rsa_private_key +0 -12
  30. data/test/certificates/invalid_certificate1 +0 -1
  31. data/test/certificates/invalid_certificate2 +0 -1
  32. data/test/certificates/invalid_certificate3 +0 -12
  33. data/test/certificates/invalid_chained_certificate1 +0 -1
  34. data/test/certificates/invalid_private_key1 +0 -1
  35. data/test/certificates/invalid_private_key2 +0 -1
  36. data/test/certificates/invalid_private_key3 +0 -10
  37. data/test/certificates/invalid_rsa_private_key1 +0 -1
  38. data/test/certificates/invalid_rsa_private_key2 +0 -1
  39. data/test/certificates/invalid_rsa_private_key3 +0 -10
  40. data/test/certificates/ruby-saml-2.crt +0 -15
  41. data/test/certificates/ruby-saml.crt +0 -14
  42. data/test/certificates/ruby-saml.key +0 -15
  43. data/test/idp_metadata_parser_test.rb +0 -587
  44. data/test/logging_test.rb +0 -62
  45. data/test/logout_requests/invalid_slo_request.xml +0 -6
  46. data/test/logout_requests/slo_request.xml +0 -4
  47. data/test/logout_requests/slo_request.xml.base64 +0 -1
  48. data/test/logout_requests/slo_request_deflated.xml.base64 +0 -1
  49. data/test/logout_requests/slo_request_with_name_id_format.xml +0 -4
  50. data/test/logout_requests/slo_request_with_session_index.xml +0 -5
  51. data/test/logout_responses/logoutresponse_fixtures.rb +0 -86
  52. data/test/logoutrequest_test.rb +0 -260
  53. data/test/logoutresponse_test.rb +0 -409
  54. data/test/metadata/idp_descriptor.xml +0 -26
  55. data/test/metadata/idp_descriptor_2.xml +0 -56
  56. data/test/metadata/idp_descriptor_3.xml +0 -14
  57. data/test/metadata/idp_descriptor_4.xml +0 -72
  58. data/test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml +0 -72
  59. data/test/metadata/idp_metadata_multi_certs.xml +0 -75
  60. data/test/metadata/idp_metadata_multi_signing_certs.xml +0 -52
  61. data/test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml +0 -71
  62. data/test/metadata/idp_multiple_descriptors.xml +0 -59
  63. data/test/metadata/idp_multiple_descriptors_2.xml +0 -59
  64. data/test/metadata/no_idp_descriptor.xml +0 -21
  65. data/test/metadata_test.rb +0 -331
  66. data/test/request_test.rb +0 -340
  67. data/test/response_test.rb +0 -1619
  68. data/test/responses/adfs_response_sha1.xml +0 -46
  69. data/test/responses/adfs_response_sha256.xml +0 -46
  70. data/test/responses/adfs_response_sha384.xml +0 -46
  71. data/test/responses/adfs_response_sha512.xml +0 -46
  72. data/test/responses/adfs_response_xmlns.xml +0 -45
  73. data/test/responses/attackxee.xml +0 -13
  74. data/test/responses/invalids/duplicated_attributes.xml.base64 +0 -1
  75. data/test/responses/invalids/empty_destination.xml.base64 +0 -1
  76. data/test/responses/invalids/empty_nameid.xml.base64 +0 -1
  77. data/test/responses/invalids/encrypted_new_attack.xml.base64 +0 -1
  78. data/test/responses/invalids/invalid_audience.xml.base64 +0 -1
  79. data/test/responses/invalids/invalid_issuer_assertion.xml.base64 +0 -1
  80. data/test/responses/invalids/invalid_issuer_message.xml.base64 +0 -1
  81. data/test/responses/invalids/invalid_signature_position.xml.base64 +0 -1
  82. data/test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 +0 -1
  83. data/test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 +0 -1
  84. data/test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 +0 -1
  85. data/test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 +0 -1
  86. data/test/responses/invalids/multiple_assertions.xml.base64 +0 -2
  87. data/test/responses/invalids/multiple_signed.xml.base64 +0 -1
  88. data/test/responses/invalids/no_authnstatement.xml.base64 +0 -1
  89. data/test/responses/invalids/no_conditions.xml.base64 +0 -1
  90. data/test/responses/invalids/no_id.xml.base64 +0 -1
  91. data/test/responses/invalids/no_issuer_assertion.xml.base64 +0 -1
  92. data/test/responses/invalids/no_issuer_response.xml.base64 +0 -1
  93. data/test/responses/invalids/no_nameid.xml.base64 +0 -1
  94. data/test/responses/invalids/no_saml2.xml.base64 +0 -1
  95. data/test/responses/invalids/no_signature.xml.base64 +0 -1
  96. data/test/responses/invalids/no_status.xml.base64 +0 -1
  97. data/test/responses/invalids/no_status_code.xml.base64 +0 -1
  98. data/test/responses/invalids/no_subjectconfirmation_data.xml.base64 +0 -1
  99. data/test/responses/invalids/no_subjectconfirmation_method.xml.base64 +0 -1
  100. data/test/responses/invalids/response_invalid_signed_element.xml.base64 +0 -1
  101. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +0 -51
  102. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +0 -49
  103. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +0 -1
  104. data/test/responses/invalids/status_code_responder.xml.base64 +0 -1
  105. data/test/responses/invalids/status_code_responer_and_msg.xml.base64 +0 -1
  106. data/test/responses/invalids/wrong_spnamequalifier.xml.base64 +0 -1
  107. data/test/responses/no_signature_ns.xml +0 -48
  108. data/test/responses/open_saml_response.xml +0 -56
  109. data/test/responses/response_assertion_wrapped.xml.base64 +0 -93
  110. data/test/responses/response_audience_self_closed_tag.xml.base64 +0 -1
  111. data/test/responses/response_double_status_code.xml.base64 +0 -1
  112. data/test/responses/response_encrypted_attrs.xml.base64 +0 -1
  113. data/test/responses/response_encrypted_nameid.xml.base64 +0 -1
  114. data/test/responses/response_eval.xml +0 -7
  115. data/test/responses/response_no_cert_and_encrypted_attrs.xml +0 -29
  116. data/test/responses/response_node_text_attack.xml.base64 +0 -1
  117. data/test/responses/response_node_text_attack2.xml.base64 +0 -1
  118. data/test/responses/response_node_text_attack3.xml.base64 +0 -1
  119. data/test/responses/response_unsigned_xml_base64 +0 -1
  120. data/test/responses/response_with_ampersands.xml +0 -139
  121. data/test/responses/response_with_ampersands.xml.base64 +0 -93
  122. data/test/responses/response_with_ds_namespace_at_the_root.xml.base64 +0 -1
  123. data/test/responses/response_with_multiple_attribute_statements.xml +0 -72
  124. data/test/responses/response_with_multiple_attribute_values.xml +0 -67
  125. data/test/responses/response_with_retrieval_method.xml +0 -26
  126. data/test/responses/response_with_saml2_namespace.xml.base64 +0 -102
  127. data/test/responses/response_with_signed_assertion.xml.base64 +0 -66
  128. data/test/responses/response_with_signed_assertion_2.xml.base64 +0 -1
  129. data/test/responses/response_with_signed_assertion_3.xml +0 -30
  130. data/test/responses/response_with_signed_message_and_assertion.xml +0 -34
  131. data/test/responses/response_with_undefined_recipient.xml.base64 +0 -1
  132. data/test/responses/response_without_attributes.xml.base64 +0 -79
  133. data/test/responses/response_without_reference_uri.xml.base64 +0 -1
  134. data/test/responses/response_wrapped.xml.base64 +0 -150
  135. data/test/responses/signed_message_encrypted_signed_assertion.xml.base64 +0 -1
  136. data/test/responses/signed_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  137. data/test/responses/signed_nameid_in_atts.xml +0 -47
  138. data/test/responses/signed_unqual_nameid_in_atts.xml +0 -47
  139. data/test/responses/simple_saml_php.xml +0 -71
  140. data/test/responses/starfield_response.xml.base64 +0 -1
  141. data/test/responses/test_sign.xml +0 -43
  142. data/test/responses/unsigned_encrypted_adfs.xml +0 -23
  143. data/test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64 +0 -1
  144. data/test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64 +0 -1
  145. data/test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64 +0 -1
  146. data/test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64 +0 -1
  147. data/test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64 +0 -1
  148. data/test/responses/unsigned_message_encrypted_signed_assertion.xml.base64 +0 -1
  149. data/test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  150. data/test/responses/valid_response.xml.base64 +0 -1
  151. data/test/responses/valid_response_with_formatted_x509certificate.xml.base64 +0 -1
  152. data/test/responses/valid_response_without_x509certificate.xml.base64 +0 -1
  153. data/test/saml_message_test.rb +0 -56
  154. data/test/settings_test.rb +0 -329
  155. data/test/slo_logoutrequest_test.rb +0 -448
  156. data/test/slo_logoutresponse_test.rb +0 -233
  157. data/test/test_helper.rb +0 -331
  158. data/test/utils_test.rb +0 -259
  159. data/test/xml_security_test.rb +0 -421
data/ruby-saml.gemspec CHANGED
@@ -15,15 +15,13 @@ Gem::Specification.new do |s|
15
15
  "LICENSE",
16
16
  "README.md"
17
17
  ]
18
- s.files = `git ls-files`.split("\n")
19
- s.homepage = %q{http://github.com/onelogin/ruby-saml}
20
- s.rubyforge_project = %q{http://www.rubygems.org/gems/ruby-saml}
18
+ s.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
19
+ s.homepage = %q{https://github.com/onelogin/ruby-saml}
21
20
  s.rdoc_options = ["--charset=UTF-8"]
22
21
  s.require_paths = ["lib"]
23
22
  s.rubygems_version = %q{1.3.7}
24
23
  s.required_ruby_version = '>= 1.8.7'
25
24
  s.summary = %q{SAML Ruby Tookit}
26
- s.test_files = `git ls-files test/*`.split("\n")
27
25
 
28
26
  # Because runtime dependencies are determined at build time, we cannot make
29
27
  # Nokogiri's version dependent on the Ruby version, even though we would
@@ -32,6 +30,7 @@ Gem::Specification.new do |s|
32
30
  if JRUBY_VERSION < '9.2.0.0'
33
31
  s.add_runtime_dependency('nokogiri', '>= 1.8.2', '<= 1.8.5')
34
32
  s.add_runtime_dependency('jruby-openssl', '>= 0.9.8')
33
+ s.add_runtime_dependency('json', '< 2.3.0')
35
34
  else
36
35
  s.add_runtime_dependency('nokogiri', '>= 1.8.2')
37
36
  end
@@ -40,10 +39,15 @@ Gem::Specification.new do |s|
40
39
  s.add_runtime_dependency('nokogiri', '<= 1.5.11')
41
40
  elsif RUBY_VERSION < '2.1'
42
41
  s.add_runtime_dependency('nokogiri', '>= 1.5.10', '<= 1.6.8.1')
42
+ s.add_runtime_dependency('json', '< 2.3.0')
43
+ elsif RUBY_VERSION < '2.3'
44
+ s.add_runtime_dependency('nokogiri', '>= 1.9.1', '<= 1.10.0')
43
45
  else
44
- s.add_runtime_dependency('nokogiri', '>= 1.8.2')
46
+ s.add_runtime_dependency('nokogiri', '>= 1.10.5')
47
+ s.add_runtime_dependency('rexml')
45
48
  end
46
49
 
50
+ s.add_development_dependency('coveralls')
47
51
  s.add_development_dependency('minitest', '~> 5.5')
48
52
  s.add_development_dependency('mocha', '~> 0.14')
49
53
  s.add_development_dependency('rake', '~> 10')
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.10.0
4
+ version: 1.12.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-03-21 00:00:00.000000000 Z
11
+ date: 2021-04-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: nokogiri
@@ -16,14 +16,42 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: 1.8.2
19
+ version: 1.10.5
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - ">="
25
25
  - !ruby/object:Gem::Version
26
- version: 1.8.2
26
+ version: 1.10.5
27
+ - !ruby/object:Gem::Dependency
28
+ name: rexml
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - ">="
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: coveralls
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - ">="
46
+ - !ruby/object:Gem::Version
47
+ version: '0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - ">="
53
+ - !ruby/object:Gem::Version
54
+ version: '0'
27
55
  - !ruby/object:Gem::Dependency
28
56
  name: minitest
29
57
  requirement: !ruby/object:Gem::Requirement
@@ -166,6 +194,7 @@ files:
166
194
  - lib/onelogin/ruby-saml/metadata.rb
167
195
  - lib/onelogin/ruby-saml/response.rb
168
196
  - lib/onelogin/ruby-saml/saml_message.rb
197
+ - lib/onelogin/ruby-saml/setting_error.rb
169
198
  - lib/onelogin/ruby-saml/settings.rb
170
199
  - lib/onelogin/ruby-saml/slo_logoutrequest.rb
171
200
  - lib/onelogin/ruby-saml/slo_logoutresponse.rb
@@ -187,144 +216,7 @@ files:
187
216
  - lib/schemas/xmldsig-core-schema.xsd
188
217
  - lib/xml_security.rb
189
218
  - ruby-saml.gemspec
190
- - test/certificates/certificate.der
191
- - test/certificates/certificate1
192
- - test/certificates/certificate_without_head_foot
193
- - test/certificates/formatted_certificate
194
- - test/certificates/formatted_chained_certificate
195
- - test/certificates/formatted_private_key
196
- - test/certificates/formatted_rsa_private_key
197
- - test/certificates/invalid_certificate1
198
- - test/certificates/invalid_certificate2
199
- - test/certificates/invalid_certificate3
200
- - test/certificates/invalid_chained_certificate1
201
- - test/certificates/invalid_private_key1
202
- - test/certificates/invalid_private_key2
203
- - test/certificates/invalid_private_key3
204
- - test/certificates/invalid_rsa_private_key1
205
- - test/certificates/invalid_rsa_private_key2
206
- - test/certificates/invalid_rsa_private_key3
207
- - test/certificates/ruby-saml-2.crt
208
- - test/certificates/ruby-saml.crt
209
- - test/certificates/ruby-saml.key
210
- - test/idp_metadata_parser_test.rb
211
- - test/logging_test.rb
212
- - test/logout_requests/invalid_slo_request.xml
213
- - test/logout_requests/slo_request.xml
214
- - test/logout_requests/slo_request.xml.base64
215
- - test/logout_requests/slo_request_deflated.xml.base64
216
- - test/logout_requests/slo_request_with_name_id_format.xml
217
- - test/logout_requests/slo_request_with_session_index.xml
218
- - test/logout_responses/logoutresponse_fixtures.rb
219
- - test/logoutrequest_test.rb
220
- - test/logoutresponse_test.rb
221
- - test/metadata/idp_descriptor.xml
222
- - test/metadata/idp_descriptor_2.xml
223
- - test/metadata/idp_descriptor_3.xml
224
- - test/metadata/idp_descriptor_4.xml
225
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
226
- - test/metadata/idp_metadata_multi_certs.xml
227
- - test/metadata/idp_metadata_multi_signing_certs.xml
228
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
229
- - test/metadata/idp_multiple_descriptors.xml
230
- - test/metadata/idp_multiple_descriptors_2.xml
231
- - test/metadata/no_idp_descriptor.xml
232
- - test/metadata_test.rb
233
- - test/request_test.rb
234
- - test/response_test.rb
235
- - test/responses/adfs_response_sha1.xml
236
- - test/responses/adfs_response_sha256.xml
237
- - test/responses/adfs_response_sha384.xml
238
- - test/responses/adfs_response_sha512.xml
239
- - test/responses/adfs_response_xmlns.xml
240
- - test/responses/attackxee.xml
241
- - test/responses/invalids/duplicated_attributes.xml.base64
242
- - test/responses/invalids/empty_destination.xml.base64
243
- - test/responses/invalids/empty_nameid.xml.base64
244
- - test/responses/invalids/encrypted_new_attack.xml.base64
245
- - test/responses/invalids/invalid_audience.xml.base64
246
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
247
- - test/responses/invalids/invalid_issuer_message.xml.base64
248
- - test/responses/invalids/invalid_signature_position.xml.base64
249
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
250
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
251
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
252
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
253
- - test/responses/invalids/multiple_assertions.xml.base64
254
- - test/responses/invalids/multiple_signed.xml.base64
255
- - test/responses/invalids/no_authnstatement.xml.base64
256
- - test/responses/invalids/no_conditions.xml.base64
257
- - test/responses/invalids/no_id.xml.base64
258
- - test/responses/invalids/no_issuer_assertion.xml.base64
259
- - test/responses/invalids/no_issuer_response.xml.base64
260
- - test/responses/invalids/no_nameid.xml.base64
261
- - test/responses/invalids/no_saml2.xml.base64
262
- - test/responses/invalids/no_signature.xml.base64
263
- - test/responses/invalids/no_status.xml.base64
264
- - test/responses/invalids/no_status_code.xml.base64
265
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
266
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
267
- - test/responses/invalids/response_invalid_signed_element.xml.base64
268
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
269
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
270
- - test/responses/invalids/signature_wrapping_attack.xml.base64
271
- - test/responses/invalids/status_code_responder.xml.base64
272
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
273
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
274
- - test/responses/no_signature_ns.xml
275
- - test/responses/open_saml_response.xml
276
- - test/responses/response_assertion_wrapped.xml.base64
277
- - test/responses/response_audience_self_closed_tag.xml.base64
278
- - test/responses/response_double_status_code.xml.base64
279
- - test/responses/response_encrypted_attrs.xml.base64
280
- - test/responses/response_encrypted_nameid.xml.base64
281
- - test/responses/response_eval.xml
282
- - test/responses/response_no_cert_and_encrypted_attrs.xml
283
- - test/responses/response_node_text_attack.xml.base64
284
- - test/responses/response_node_text_attack2.xml.base64
285
- - test/responses/response_node_text_attack3.xml.base64
286
- - test/responses/response_unsigned_xml_base64
287
- - test/responses/response_with_ampersands.xml
288
- - test/responses/response_with_ampersands.xml.base64
289
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
290
- - test/responses/response_with_multiple_attribute_statements.xml
291
- - test/responses/response_with_multiple_attribute_values.xml
292
- - test/responses/response_with_retrieval_method.xml
293
- - test/responses/response_with_saml2_namespace.xml.base64
294
- - test/responses/response_with_signed_assertion.xml.base64
295
- - test/responses/response_with_signed_assertion_2.xml.base64
296
- - test/responses/response_with_signed_assertion_3.xml
297
- - test/responses/response_with_signed_message_and_assertion.xml
298
- - test/responses/response_with_undefined_recipient.xml.base64
299
- - test/responses/response_without_attributes.xml.base64
300
- - test/responses/response_without_reference_uri.xml.base64
301
- - test/responses/response_wrapped.xml.base64
302
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
303
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
304
- - test/responses/signed_nameid_in_atts.xml
305
- - test/responses/signed_unqual_nameid_in_atts.xml
306
- - test/responses/simple_saml_php.xml
307
- - test/responses/starfield_response.xml.base64
308
- - test/responses/test_sign.xml
309
- - test/responses/unsigned_encrypted_adfs.xml
310
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
311
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
312
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
313
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
314
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
315
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
316
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
317
- - test/responses/valid_response.xml.base64
318
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
319
- - test/responses/valid_response_without_x509certificate.xml.base64
320
- - test/saml_message_test.rb
321
- - test/settings_test.rb
322
- - test/slo_logoutrequest_test.rb
323
- - test/slo_logoutresponse_test.rb
324
- - test/test_helper.rb
325
- - test/utils_test.rb
326
- - test/xml_security_test.rb
327
- homepage: http://github.com/onelogin/ruby-saml
219
+ homepage: https://github.com/onelogin/ruby-saml
328
220
  licenses:
329
221
  - MIT
330
222
  metadata: {}
@@ -344,146 +236,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
344
236
  - !ruby/object:Gem::Version
345
237
  version: '0'
346
238
  requirements: []
347
- rubyforge_project: http://www.rubygems.org/gems/ruby-saml
348
- rubygems_version: 2.4.8
239
+ rubygems_version: 3.0.8
349
240
  signing_key:
350
241
  specification_version: 4
351
242
  summary: SAML Ruby Tookit
352
- test_files:
353
- - test/certificates/certificate.der
354
- - test/certificates/certificate1
355
- - test/certificates/certificate_without_head_foot
356
- - test/certificates/formatted_certificate
357
- - test/certificates/formatted_chained_certificate
358
- - test/certificates/formatted_private_key
359
- - test/certificates/formatted_rsa_private_key
360
- - test/certificates/invalid_certificate1
361
- - test/certificates/invalid_certificate2
362
- - test/certificates/invalid_certificate3
363
- - test/certificates/invalid_chained_certificate1
364
- - test/certificates/invalid_private_key1
365
- - test/certificates/invalid_private_key2
366
- - test/certificates/invalid_private_key3
367
- - test/certificates/invalid_rsa_private_key1
368
- - test/certificates/invalid_rsa_private_key2
369
- - test/certificates/invalid_rsa_private_key3
370
- - test/certificates/ruby-saml-2.crt
371
- - test/certificates/ruby-saml.crt
372
- - test/certificates/ruby-saml.key
373
- - test/idp_metadata_parser_test.rb
374
- - test/logging_test.rb
375
- - test/logout_requests/invalid_slo_request.xml
376
- - test/logout_requests/slo_request.xml
377
- - test/logout_requests/slo_request.xml.base64
378
- - test/logout_requests/slo_request_deflated.xml.base64
379
- - test/logout_requests/slo_request_with_name_id_format.xml
380
- - test/logout_requests/slo_request_with_session_index.xml
381
- - test/logout_responses/logoutresponse_fixtures.rb
382
- - test/logoutrequest_test.rb
383
- - test/logoutresponse_test.rb
384
- - test/metadata/idp_descriptor.xml
385
- - test/metadata/idp_descriptor_2.xml
386
- - test/metadata/idp_descriptor_3.xml
387
- - test/metadata/idp_descriptor_4.xml
388
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
389
- - test/metadata/idp_metadata_multi_certs.xml
390
- - test/metadata/idp_metadata_multi_signing_certs.xml
391
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
392
- - test/metadata/idp_multiple_descriptors.xml
393
- - test/metadata/idp_multiple_descriptors_2.xml
394
- - test/metadata/no_idp_descriptor.xml
395
- - test/metadata_test.rb
396
- - test/request_test.rb
397
- - test/response_test.rb
398
- - test/responses/adfs_response_sha1.xml
399
- - test/responses/adfs_response_sha256.xml
400
- - test/responses/adfs_response_sha384.xml
401
- - test/responses/adfs_response_sha512.xml
402
- - test/responses/adfs_response_xmlns.xml
403
- - test/responses/attackxee.xml
404
- - test/responses/invalids/duplicated_attributes.xml.base64
405
- - test/responses/invalids/empty_destination.xml.base64
406
- - test/responses/invalids/empty_nameid.xml.base64
407
- - test/responses/invalids/encrypted_new_attack.xml.base64
408
- - test/responses/invalids/invalid_audience.xml.base64
409
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
410
- - test/responses/invalids/invalid_issuer_message.xml.base64
411
- - test/responses/invalids/invalid_signature_position.xml.base64
412
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
413
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
414
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
415
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
416
- - test/responses/invalids/multiple_assertions.xml.base64
417
- - test/responses/invalids/multiple_signed.xml.base64
418
- - test/responses/invalids/no_authnstatement.xml.base64
419
- - test/responses/invalids/no_conditions.xml.base64
420
- - test/responses/invalids/no_id.xml.base64
421
- - test/responses/invalids/no_issuer_assertion.xml.base64
422
- - test/responses/invalids/no_issuer_response.xml.base64
423
- - test/responses/invalids/no_nameid.xml.base64
424
- - test/responses/invalids/no_saml2.xml.base64
425
- - test/responses/invalids/no_signature.xml.base64
426
- - test/responses/invalids/no_status.xml.base64
427
- - test/responses/invalids/no_status_code.xml.base64
428
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
429
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
430
- - test/responses/invalids/response_invalid_signed_element.xml.base64
431
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
432
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
433
- - test/responses/invalids/signature_wrapping_attack.xml.base64
434
- - test/responses/invalids/status_code_responder.xml.base64
435
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
436
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
437
- - test/responses/no_signature_ns.xml
438
- - test/responses/open_saml_response.xml
439
- - test/responses/response_assertion_wrapped.xml.base64
440
- - test/responses/response_audience_self_closed_tag.xml.base64
441
- - test/responses/response_double_status_code.xml.base64
442
- - test/responses/response_encrypted_attrs.xml.base64
443
- - test/responses/response_encrypted_nameid.xml.base64
444
- - test/responses/response_eval.xml
445
- - test/responses/response_no_cert_and_encrypted_attrs.xml
446
- - test/responses/response_node_text_attack.xml.base64
447
- - test/responses/response_node_text_attack2.xml.base64
448
- - test/responses/response_node_text_attack3.xml.base64
449
- - test/responses/response_unsigned_xml_base64
450
- - test/responses/response_with_ampersands.xml
451
- - test/responses/response_with_ampersands.xml.base64
452
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
453
- - test/responses/response_with_multiple_attribute_statements.xml
454
- - test/responses/response_with_multiple_attribute_values.xml
455
- - test/responses/response_with_retrieval_method.xml
456
- - test/responses/response_with_saml2_namespace.xml.base64
457
- - test/responses/response_with_signed_assertion.xml.base64
458
- - test/responses/response_with_signed_assertion_2.xml.base64
459
- - test/responses/response_with_signed_assertion_3.xml
460
- - test/responses/response_with_signed_message_and_assertion.xml
461
- - test/responses/response_with_undefined_recipient.xml.base64
462
- - test/responses/response_without_attributes.xml.base64
463
- - test/responses/response_without_reference_uri.xml.base64
464
- - test/responses/response_wrapped.xml.base64
465
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
466
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
467
- - test/responses/signed_nameid_in_atts.xml
468
- - test/responses/signed_unqual_nameid_in_atts.xml
469
- - test/responses/simple_saml_php.xml
470
- - test/responses/starfield_response.xml.base64
471
- - test/responses/test_sign.xml
472
- - test/responses/unsigned_encrypted_adfs.xml
473
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
474
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
475
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
476
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
477
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
478
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
479
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
480
- - test/responses/valid_response.xml.base64
481
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
482
- - test/responses/valid_response_without_x509certificate.xml.base64
483
- - test/saml_message_test.rb
484
- - test/settings_test.rb
485
- - test/slo_logoutrequest_test.rb
486
- - test/slo_logoutresponse_test.rb
487
- - test/test_helper.rb
488
- - test/utils_test.rb
489
- - test/xml_security_test.rb
243
+ test_files: []
data/test/certificates/certificate.der DELETED
Binary file
data/test/certificates/certificate1 DELETED
@@ -1,12 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIIBrTCCAaGgAwIBAgIBATADBgEAMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApD
3
- YWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9uZUxv
4
- Z2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMB4XDTEwMTAxMTIxMTUxMloX
5
- DTE1MTAxMTIxMTUxMlowZzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3Ju
6
- aWExFTATBgNVBAcMDFNhbnRhIE1vbmljYTERMA8GA1UECgwIT25lTG9naW4xGTAX
7
- BgNVBAMMEGFwcC5vbmVsb2dpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ
8
- AoGBAMPmjfjy7L35oDpeBXBoRVCgktPkLno9DOEWB7MgYMMVKs2B6ymWQLEWrDug
9
- MK1hkzWFhIb5fqWLGbWy0J0veGR9/gHOQG+rD/I36xAXnkdiXXhzoiAG/zQxM0ed
10
- MOUf40n314FC8moErcUg6QabttzesO59HFz6shPuxcWaVAgxAgMBAAEwAwYBAAMB
11
- AA==
12
- -----END CERTIFICATE-----
data/test/certificates/certificate_without_head_foot DELETED
@@ -1 +0,0 @@
1
- MIIEYTCCA0mgAwIBAgIJAMax+2BoUJmCMA0GCSqGSIb3DQEBBQUAMIHGMQswCQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xIzAhBgNVBAoMGldlbGxzcHJpbmcgV29ybGR3aWRlLCBJbmMuMRwwGgYDVQQLDBNTeXN0ZW1zIEVuZ2luZWVyaW5nMSQwIgYDVQQDDBtzc28ud2VsbHNwcmluZ3dvcmxkd2lkZS5jb20xKTAnBgkqhkiG9w0BCQEWGml0QHdlbGxzcHJpbmd3b3JsZHdpZGUuY29tMB4XDTEzMDIyNzIzNTUwOFoXDTIzMDIyNzIzNTUwOFowgcYxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhJbGxpbm9pczEQMA4GA1UEBwwHQ2hpY2FnbzEjMCEGA1UECgwaV2VsbHNwcmluZyBXb3JsZHdpZGUsIEluYy4xHDAaBgNVBAsME1N5c3RlbXMgRW5naW5lZXJpbmcxJDAiBgNVBAMMG3Nzby53ZWxsc3ByaW5nd29ybGR3aWRlLmNvbTEpMCcGCSqGSIb3DQEJARYaaXRAd2VsbHNwcmluZ3dvcmxkd2lkZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNhrDaXa00JAIRaxEyDrK/Zjj8bBTQD5dPgugDndYf1AOpzSGpGFU+lPu0QRv0o66K64HrF24FATWI18Q6aZ+xX8QbuBrfia6hOFef29Sk5paS9+DcDCmisuNpl84kbbiazy6S6cFtcdrG9/cr2iXtYmIzz7EfUcP/UVAp24ZW7dWhcvxoqxF9n6Fj94N+rA0dmUFUGz6glm7us3p36xbkiUMpgr3feD/9P34H+2YFsQ2b2DblDI5Z7YULHxBsl5nuhPLFuPN1olcWQBsJYO6iHElFRH+487L2yZ1mLVXKI0LFb/w1rAJpPeUc8E5s1MATAjNx3wPwwqgw30sKtoXAgMBAAGjUDBOMB0GA1UdDgQWBBSrGGV9w3hGXTafkJLUaWBsWiDGaTAfBgNVHSMEGDAWgBSrGGV9w3hGXTafkJLUaWBsWiDGaTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQCcvZV0VIwIRD4C5CItFwfNRF2LRBmYiNh4FJbo0wESbH0cWT9vXNdcjcx6PHrIj7ICErSCR5eZmIrSgLEBEkptjVsiFsHWSvMHv37WaHwyhZWnhutss32aP9+ifxQ1lzwm54jZWZsVVVFQH155BDsVeU1UwEhvcCExFa7RNjyvqQrZmyQwMFSzL1cQp0humu0hHLtAI7E32lp5itw6kTOfyhjB8d1bzBVZe6RY64RxOPEcx+9hkrHmfCohdt644jRtPdLTvqqxpscYGD+L2QOt1HpbGgAdcgUZeUHo/eosqpwDOoyuFepz7JzqMncxFN//NmjnFGVZdGR+6bTxKUKq
data/test/certificates/formatted_certificate DELETED
@@ -1,14 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
3
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
4
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
5
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
6
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
7
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
8
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
9
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
10
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
11
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
12
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
13
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
14
- -----END CERTIFICATE-----
data/test/certificates/formatted_chained_certificate DELETED
@@ -1,42 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
3
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
4
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
5
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
6
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
7
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
8
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
9
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
10
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
11
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
12
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
13
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
14
- -----END CERTIFICATE-----
15
- -----BEGIN CERTIFICATE-----
16
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
17
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
18
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
19
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
20
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
21
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
22
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
23
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
24
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
25
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
26
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
27
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
28
- -----END CERTIFICATE-----
29
- -----BEGIN CERTIFICATE-----
30
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
31
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
32
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
33
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
34
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
35
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
36
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
37
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
38
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
39
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
40
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
41
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
42
- -----END CERTIFICATE-----