ruby-saml 1.10.0 → 1.12.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (159) hide show
  1. checksums.yaml +5 -5
  2. data/.travis.yml +28 -14
  3. data/README.md +96 -26
  4. data/changelog.md +37 -0
  5. data/lib/onelogin/ruby-saml/attributes.rb +24 -1
  6. data/lib/onelogin/ruby-saml/authrequest.rb +11 -6
  7. data/lib/onelogin/ruby-saml/idp_metadata_parser.rb +71 -22
  8. data/lib/onelogin/ruby-saml/logging.rb +3 -3
  9. data/lib/onelogin/ruby-saml/logoutrequest.rb +9 -3
  10. data/lib/onelogin/ruby-saml/logoutresponse.rb +21 -2
  11. data/lib/onelogin/ruby-saml/metadata.rb +11 -3
  12. data/lib/onelogin/ruby-saml/response.rb +68 -22
  13. data/lib/onelogin/ruby-saml/saml_message.rb +6 -0
  14. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  15. data/lib/onelogin/ruby-saml/settings.rb +72 -7
  16. data/lib/onelogin/ruby-saml/slo_logoutrequest.rb +20 -1
  17. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +29 -16
  18. data/lib/onelogin/ruby-saml/utils.rb +74 -1
  19. data/lib/onelogin/ruby-saml/version.rb +1 -1
  20. data/lib/xml_security.rb +34 -6
  21. data/ruby-saml.gemspec +9 -5
  22. metadata +36 -282
  23. data/test/certificates/certificate.der +0 -0
  24. data/test/certificates/certificate1 +0 -12
  25. data/test/certificates/certificate_without_head_foot +0 -1
  26. data/test/certificates/formatted_certificate +0 -14
  27. data/test/certificates/formatted_chained_certificate +0 -42
  28. data/test/certificates/formatted_private_key +0 -12
  29. data/test/certificates/formatted_rsa_private_key +0 -12
  30. data/test/certificates/invalid_certificate1 +0 -1
  31. data/test/certificates/invalid_certificate2 +0 -1
  32. data/test/certificates/invalid_certificate3 +0 -12
  33. data/test/certificates/invalid_chained_certificate1 +0 -1
  34. data/test/certificates/invalid_private_key1 +0 -1
  35. data/test/certificates/invalid_private_key2 +0 -1
  36. data/test/certificates/invalid_private_key3 +0 -10
  37. data/test/certificates/invalid_rsa_private_key1 +0 -1
  38. data/test/certificates/invalid_rsa_private_key2 +0 -1
  39. data/test/certificates/invalid_rsa_private_key3 +0 -10
  40. data/test/certificates/ruby-saml-2.crt +0 -15
  41. data/test/certificates/ruby-saml.crt +0 -14
  42. data/test/certificates/ruby-saml.key +0 -15
  43. data/test/idp_metadata_parser_test.rb +0 -587
  44. data/test/logging_test.rb +0 -62
  45. data/test/logout_requests/invalid_slo_request.xml +0 -6
  46. data/test/logout_requests/slo_request.xml +0 -4
  47. data/test/logout_requests/slo_request.xml.base64 +0 -1
  48. data/test/logout_requests/slo_request_deflated.xml.base64 +0 -1
  49. data/test/logout_requests/slo_request_with_name_id_format.xml +0 -4
  50. data/test/logout_requests/slo_request_with_session_index.xml +0 -5
  51. data/test/logout_responses/logoutresponse_fixtures.rb +0 -86
  52. data/test/logoutrequest_test.rb +0 -260
  53. data/test/logoutresponse_test.rb +0 -409
  54. data/test/metadata/idp_descriptor.xml +0 -26
  55. data/test/metadata/idp_descriptor_2.xml +0 -56
  56. data/test/metadata/idp_descriptor_3.xml +0 -14
  57. data/test/metadata/idp_descriptor_4.xml +0 -72
  58. data/test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml +0 -72
  59. data/test/metadata/idp_metadata_multi_certs.xml +0 -75
  60. data/test/metadata/idp_metadata_multi_signing_certs.xml +0 -52
  61. data/test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml +0 -71
  62. data/test/metadata/idp_multiple_descriptors.xml +0 -59
  63. data/test/metadata/idp_multiple_descriptors_2.xml +0 -59
  64. data/test/metadata/no_idp_descriptor.xml +0 -21
  65. data/test/metadata_test.rb +0 -331
  66. data/test/request_test.rb +0 -340
  67. data/test/response_test.rb +0 -1619
  68. data/test/responses/adfs_response_sha1.xml +0 -46
  69. data/test/responses/adfs_response_sha256.xml +0 -46
  70. data/test/responses/adfs_response_sha384.xml +0 -46
  71. data/test/responses/adfs_response_sha512.xml +0 -46
  72. data/test/responses/adfs_response_xmlns.xml +0 -45
  73. data/test/responses/attackxee.xml +0 -13
  74. data/test/responses/invalids/duplicated_attributes.xml.base64 +0 -1
  75. data/test/responses/invalids/empty_destination.xml.base64 +0 -1
  76. data/test/responses/invalids/empty_nameid.xml.base64 +0 -1
  77. data/test/responses/invalids/encrypted_new_attack.xml.base64 +0 -1
  78. data/test/responses/invalids/invalid_audience.xml.base64 +0 -1
  79. data/test/responses/invalids/invalid_issuer_assertion.xml.base64 +0 -1
  80. data/test/responses/invalids/invalid_issuer_message.xml.base64 +0 -1
  81. data/test/responses/invalids/invalid_signature_position.xml.base64 +0 -1
  82. data/test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 +0 -1
  83. data/test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 +0 -1
  84. data/test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 +0 -1
  85. data/test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 +0 -1
  86. data/test/responses/invalids/multiple_assertions.xml.base64 +0 -2
  87. data/test/responses/invalids/multiple_signed.xml.base64 +0 -1
  88. data/test/responses/invalids/no_authnstatement.xml.base64 +0 -1
  89. data/test/responses/invalids/no_conditions.xml.base64 +0 -1
  90. data/test/responses/invalids/no_id.xml.base64 +0 -1
  91. data/test/responses/invalids/no_issuer_assertion.xml.base64 +0 -1
  92. data/test/responses/invalids/no_issuer_response.xml.base64 +0 -1
  93. data/test/responses/invalids/no_nameid.xml.base64 +0 -1
  94. data/test/responses/invalids/no_saml2.xml.base64 +0 -1
  95. data/test/responses/invalids/no_signature.xml.base64 +0 -1
  96. data/test/responses/invalids/no_status.xml.base64 +0 -1
  97. data/test/responses/invalids/no_status_code.xml.base64 +0 -1
  98. data/test/responses/invalids/no_subjectconfirmation_data.xml.base64 +0 -1
  99. data/test/responses/invalids/no_subjectconfirmation_method.xml.base64 +0 -1
  100. data/test/responses/invalids/response_invalid_signed_element.xml.base64 +0 -1
  101. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +0 -51
  102. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +0 -49
  103. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +0 -1
  104. data/test/responses/invalids/status_code_responder.xml.base64 +0 -1
  105. data/test/responses/invalids/status_code_responer_and_msg.xml.base64 +0 -1
  106. data/test/responses/invalids/wrong_spnamequalifier.xml.base64 +0 -1
  107. data/test/responses/no_signature_ns.xml +0 -48
  108. data/test/responses/open_saml_response.xml +0 -56
  109. data/test/responses/response_assertion_wrapped.xml.base64 +0 -93
  110. data/test/responses/response_audience_self_closed_tag.xml.base64 +0 -1
  111. data/test/responses/response_double_status_code.xml.base64 +0 -1
  112. data/test/responses/response_encrypted_attrs.xml.base64 +0 -1
  113. data/test/responses/response_encrypted_nameid.xml.base64 +0 -1
  114. data/test/responses/response_eval.xml +0 -7
  115. data/test/responses/response_no_cert_and_encrypted_attrs.xml +0 -29
  116. data/test/responses/response_node_text_attack.xml.base64 +0 -1
  117. data/test/responses/response_node_text_attack2.xml.base64 +0 -1
  118. data/test/responses/response_node_text_attack3.xml.base64 +0 -1
  119. data/test/responses/response_unsigned_xml_base64 +0 -1
  120. data/test/responses/response_with_ampersands.xml +0 -139
  121. data/test/responses/response_with_ampersands.xml.base64 +0 -93
  122. data/test/responses/response_with_ds_namespace_at_the_root.xml.base64 +0 -1
  123. data/test/responses/response_with_multiple_attribute_statements.xml +0 -72
  124. data/test/responses/response_with_multiple_attribute_values.xml +0 -67
  125. data/test/responses/response_with_retrieval_method.xml +0 -26
  126. data/test/responses/response_with_saml2_namespace.xml.base64 +0 -102
  127. data/test/responses/response_with_signed_assertion.xml.base64 +0 -66
  128. data/test/responses/response_with_signed_assertion_2.xml.base64 +0 -1
  129. data/test/responses/response_with_signed_assertion_3.xml +0 -30
  130. data/test/responses/response_with_signed_message_and_assertion.xml +0 -34
  131. data/test/responses/response_with_undefined_recipient.xml.base64 +0 -1
  132. data/test/responses/response_without_attributes.xml.base64 +0 -79
  133. data/test/responses/response_without_reference_uri.xml.base64 +0 -1
  134. data/test/responses/response_wrapped.xml.base64 +0 -150
  135. data/test/responses/signed_message_encrypted_signed_assertion.xml.base64 +0 -1
  136. data/test/responses/signed_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  137. data/test/responses/signed_nameid_in_atts.xml +0 -47
  138. data/test/responses/signed_unqual_nameid_in_atts.xml +0 -47
  139. data/test/responses/simple_saml_php.xml +0 -71
  140. data/test/responses/starfield_response.xml.base64 +0 -1
  141. data/test/responses/test_sign.xml +0 -43
  142. data/test/responses/unsigned_encrypted_adfs.xml +0 -23
  143. data/test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64 +0 -1
  144. data/test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64 +0 -1
  145. data/test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64 +0 -1
  146. data/test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64 +0 -1
  147. data/test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64 +0 -1
  148. data/test/responses/unsigned_message_encrypted_signed_assertion.xml.base64 +0 -1
  149. data/test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  150. data/test/responses/valid_response.xml.base64 +0 -1
  151. data/test/responses/valid_response_with_formatted_x509certificate.xml.base64 +0 -1
  152. data/test/responses/valid_response_without_x509certificate.xml.base64 +0 -1
  153. data/test/saml_message_test.rb +0 -56
  154. data/test/settings_test.rb +0 -329
  155. data/test/slo_logoutrequest_test.rb +0 -448
  156. data/test/slo_logoutresponse_test.rb +0 -233
  157. data/test/test_helper.rb +0 -331
  158. data/test/utils_test.rb +0 -259
  159. data/test/xml_security_test.rb +0 -421
data/ruby-saml.gemspec CHANGED
@@ -15,15 +15,13 @@ Gem::Specification.new do |s|
15
15
  "LICENSE",
16
16
  "README.md"
17
17
  ]
18
- s.files = `git ls-files`.split("\n")
19
- s.homepage = %q{http://github.com/onelogin/ruby-saml}
20
- s.rubyforge_project = %q{http://www.rubygems.org/gems/ruby-saml}
18
+ s.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
19
+ s.homepage = %q{https://github.com/onelogin/ruby-saml}
21
20
  s.rdoc_options = ["--charset=UTF-8"]
22
21
  s.require_paths = ["lib"]
23
22
  s.rubygems_version = %q{1.3.7}
24
23
  s.required_ruby_version = '>= 1.8.7'
25
24
  s.summary = %q{SAML Ruby Tookit}
26
- s.test_files = `git ls-files test/*`.split("\n")
27
25
 
28
26
  # Because runtime dependencies are determined at build time, we cannot make
29
27
  # Nokogiri's version dependent on the Ruby version, even though we would
@@ -32,6 +30,7 @@ Gem::Specification.new do |s|
32
30
  if JRUBY_VERSION < '9.2.0.0'
33
31
  s.add_runtime_dependency('nokogiri', '>= 1.8.2', '<= 1.8.5')
34
32
  s.add_runtime_dependency('jruby-openssl', '>= 0.9.8')
33
+ s.add_runtime_dependency('json', '< 2.3.0')
35
34
  else
36
35
  s.add_runtime_dependency('nokogiri', '>= 1.8.2')
37
36
  end
@@ -40,10 +39,15 @@ Gem::Specification.new do |s|
40
39
  s.add_runtime_dependency('nokogiri', '<= 1.5.11')
41
40
  elsif RUBY_VERSION < '2.1'
42
41
  s.add_runtime_dependency('nokogiri', '>= 1.5.10', '<= 1.6.8.1')
42
+ s.add_runtime_dependency('json', '< 2.3.0')
43
+ elsif RUBY_VERSION < '2.3'
44
+ s.add_runtime_dependency('nokogiri', '>= 1.9.1', '<= 1.10.0')
43
45
  else
44
- s.add_runtime_dependency('nokogiri', '>= 1.8.2')
46
+ s.add_runtime_dependency('nokogiri', '>= 1.10.5')
47
+ s.add_runtime_dependency('rexml')
45
48
  end
46
49
 
50
+ s.add_development_dependency('coveralls')
47
51
  s.add_development_dependency('minitest', '~> 5.5')
48
52
  s.add_development_dependency('mocha', '~> 0.14')
49
53
  s.add_development_dependency('rake', '~> 10')
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.10.0
4
+ version: 1.12.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-03-21 00:00:00.000000000 Z
11
+ date: 2021-04-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: nokogiri
@@ -16,14 +16,42 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: 1.8.2
19
+ version: 1.10.5
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - ">="
25
25
  - !ruby/object:Gem::Version
26
- version: 1.8.2
26
+ version: 1.10.5
27
+ - !ruby/object:Gem::Dependency
28
+ name: rexml
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - ">="
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: coveralls
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - ">="
46
+ - !ruby/object:Gem::Version
47
+ version: '0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - ">="
53
+ - !ruby/object:Gem::Version
54
+ version: '0'
27
55
  - !ruby/object:Gem::Dependency
28
56
  name: minitest
29
57
  requirement: !ruby/object:Gem::Requirement
@@ -166,6 +194,7 @@ files:
166
194
  - lib/onelogin/ruby-saml/metadata.rb
167
195
  - lib/onelogin/ruby-saml/response.rb
168
196
  - lib/onelogin/ruby-saml/saml_message.rb
197
+ - lib/onelogin/ruby-saml/setting_error.rb
169
198
  - lib/onelogin/ruby-saml/settings.rb
170
199
  - lib/onelogin/ruby-saml/slo_logoutrequest.rb
171
200
  - lib/onelogin/ruby-saml/slo_logoutresponse.rb
@@ -187,144 +216,7 @@ files:
187
216
  - lib/schemas/xmldsig-core-schema.xsd
188
217
  - lib/xml_security.rb
189
218
  - ruby-saml.gemspec
190
- - test/certificates/certificate.der
191
- - test/certificates/certificate1
192
- - test/certificates/certificate_without_head_foot
193
- - test/certificates/formatted_certificate
194
- - test/certificates/formatted_chained_certificate
195
- - test/certificates/formatted_private_key
196
- - test/certificates/formatted_rsa_private_key
197
- - test/certificates/invalid_certificate1
198
- - test/certificates/invalid_certificate2
199
- - test/certificates/invalid_certificate3
200
- - test/certificates/invalid_chained_certificate1
201
- - test/certificates/invalid_private_key1
202
- - test/certificates/invalid_private_key2
203
- - test/certificates/invalid_private_key3
204
- - test/certificates/invalid_rsa_private_key1
205
- - test/certificates/invalid_rsa_private_key2
206
- - test/certificates/invalid_rsa_private_key3
207
- - test/certificates/ruby-saml-2.crt
208
- - test/certificates/ruby-saml.crt
209
- - test/certificates/ruby-saml.key
210
- - test/idp_metadata_parser_test.rb
211
- - test/logging_test.rb
212
- - test/logout_requests/invalid_slo_request.xml
213
- - test/logout_requests/slo_request.xml
214
- - test/logout_requests/slo_request.xml.base64
215
- - test/logout_requests/slo_request_deflated.xml.base64
216
- - test/logout_requests/slo_request_with_name_id_format.xml
217
- - test/logout_requests/slo_request_with_session_index.xml
218
- - test/logout_responses/logoutresponse_fixtures.rb
219
- - test/logoutrequest_test.rb
220
- - test/logoutresponse_test.rb
221
- - test/metadata/idp_descriptor.xml
222
- - test/metadata/idp_descriptor_2.xml
223
- - test/metadata/idp_descriptor_3.xml
224
- - test/metadata/idp_descriptor_4.xml
225
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
226
- - test/metadata/idp_metadata_multi_certs.xml
227
- - test/metadata/idp_metadata_multi_signing_certs.xml
228
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
229
- - test/metadata/idp_multiple_descriptors.xml
230
- - test/metadata/idp_multiple_descriptors_2.xml
231
- - test/metadata/no_idp_descriptor.xml
232
- - test/metadata_test.rb
233
- - test/request_test.rb
234
- - test/response_test.rb
235
- - test/responses/adfs_response_sha1.xml
236
- - test/responses/adfs_response_sha256.xml
237
- - test/responses/adfs_response_sha384.xml
238
- - test/responses/adfs_response_sha512.xml
239
- - test/responses/adfs_response_xmlns.xml
240
- - test/responses/attackxee.xml
241
- - test/responses/invalids/duplicated_attributes.xml.base64
242
- - test/responses/invalids/empty_destination.xml.base64
243
- - test/responses/invalids/empty_nameid.xml.base64
244
- - test/responses/invalids/encrypted_new_attack.xml.base64
245
- - test/responses/invalids/invalid_audience.xml.base64
246
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
247
- - test/responses/invalids/invalid_issuer_message.xml.base64
248
- - test/responses/invalids/invalid_signature_position.xml.base64
249
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
250
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
251
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
252
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
253
- - test/responses/invalids/multiple_assertions.xml.base64
254
- - test/responses/invalids/multiple_signed.xml.base64
255
- - test/responses/invalids/no_authnstatement.xml.base64
256
- - test/responses/invalids/no_conditions.xml.base64
257
- - test/responses/invalids/no_id.xml.base64
258
- - test/responses/invalids/no_issuer_assertion.xml.base64
259
- - test/responses/invalids/no_issuer_response.xml.base64
260
- - test/responses/invalids/no_nameid.xml.base64
261
- - test/responses/invalids/no_saml2.xml.base64
262
- - test/responses/invalids/no_signature.xml.base64
263
- - test/responses/invalids/no_status.xml.base64
264
- - test/responses/invalids/no_status_code.xml.base64
265
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
266
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
267
- - test/responses/invalids/response_invalid_signed_element.xml.base64
268
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
269
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
270
- - test/responses/invalids/signature_wrapping_attack.xml.base64
271
- - test/responses/invalids/status_code_responder.xml.base64
272
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
273
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
274
- - test/responses/no_signature_ns.xml
275
- - test/responses/open_saml_response.xml
276
- - test/responses/response_assertion_wrapped.xml.base64
277
- - test/responses/response_audience_self_closed_tag.xml.base64
278
- - test/responses/response_double_status_code.xml.base64
279
- - test/responses/response_encrypted_attrs.xml.base64
280
- - test/responses/response_encrypted_nameid.xml.base64
281
- - test/responses/response_eval.xml
282
- - test/responses/response_no_cert_and_encrypted_attrs.xml
283
- - test/responses/response_node_text_attack.xml.base64
284
- - test/responses/response_node_text_attack2.xml.base64
285
- - test/responses/response_node_text_attack3.xml.base64
286
- - test/responses/response_unsigned_xml_base64
287
- - test/responses/response_with_ampersands.xml
288
- - test/responses/response_with_ampersands.xml.base64
289
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
290
- - test/responses/response_with_multiple_attribute_statements.xml
291
- - test/responses/response_with_multiple_attribute_values.xml
292
- - test/responses/response_with_retrieval_method.xml
293
- - test/responses/response_with_saml2_namespace.xml.base64
294
- - test/responses/response_with_signed_assertion.xml.base64
295
- - test/responses/response_with_signed_assertion_2.xml.base64
296
- - test/responses/response_with_signed_assertion_3.xml
297
- - test/responses/response_with_signed_message_and_assertion.xml
298
- - test/responses/response_with_undefined_recipient.xml.base64
299
- - test/responses/response_without_attributes.xml.base64
300
- - test/responses/response_without_reference_uri.xml.base64
301
- - test/responses/response_wrapped.xml.base64
302
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
303
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
304
- - test/responses/signed_nameid_in_atts.xml
305
- - test/responses/signed_unqual_nameid_in_atts.xml
306
- - test/responses/simple_saml_php.xml
307
- - test/responses/starfield_response.xml.base64
308
- - test/responses/test_sign.xml
309
- - test/responses/unsigned_encrypted_adfs.xml
310
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
311
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
312
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
313
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
314
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
315
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
316
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
317
- - test/responses/valid_response.xml.base64
318
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
319
- - test/responses/valid_response_without_x509certificate.xml.base64
320
- - test/saml_message_test.rb
321
- - test/settings_test.rb
322
- - test/slo_logoutrequest_test.rb
323
- - test/slo_logoutresponse_test.rb
324
- - test/test_helper.rb
325
- - test/utils_test.rb
326
- - test/xml_security_test.rb
327
- homepage: http://github.com/onelogin/ruby-saml
219
+ homepage: https://github.com/onelogin/ruby-saml
328
220
  licenses:
329
221
  - MIT
330
222
  metadata: {}
@@ -344,146 +236,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
344
236
  - !ruby/object:Gem::Version
345
237
  version: '0'
346
238
  requirements: []
347
- rubyforge_project: http://www.rubygems.org/gems/ruby-saml
348
- rubygems_version: 2.4.8
239
+ rubygems_version: 3.0.8
349
240
  signing_key:
350
241
  specification_version: 4
351
242
  summary: SAML Ruby Tookit
352
- test_files:
353
- - test/certificates/certificate.der
354
- - test/certificates/certificate1
355
- - test/certificates/certificate_without_head_foot
356
- - test/certificates/formatted_certificate
357
- - test/certificates/formatted_chained_certificate
358
- - test/certificates/formatted_private_key
359
- - test/certificates/formatted_rsa_private_key
360
- - test/certificates/invalid_certificate1
361
- - test/certificates/invalid_certificate2
362
- - test/certificates/invalid_certificate3
363
- - test/certificates/invalid_chained_certificate1
364
- - test/certificates/invalid_private_key1
365
- - test/certificates/invalid_private_key2
366
- - test/certificates/invalid_private_key3
367
- - test/certificates/invalid_rsa_private_key1
368
- - test/certificates/invalid_rsa_private_key2
369
- - test/certificates/invalid_rsa_private_key3
370
- - test/certificates/ruby-saml-2.crt
371
- - test/certificates/ruby-saml.crt
372
- - test/certificates/ruby-saml.key
373
- - test/idp_metadata_parser_test.rb
374
- - test/logging_test.rb
375
- - test/logout_requests/invalid_slo_request.xml
376
- - test/logout_requests/slo_request.xml
377
- - test/logout_requests/slo_request.xml.base64
378
- - test/logout_requests/slo_request_deflated.xml.base64
379
- - test/logout_requests/slo_request_with_name_id_format.xml
380
- - test/logout_requests/slo_request_with_session_index.xml
381
- - test/logout_responses/logoutresponse_fixtures.rb
382
- - test/logoutrequest_test.rb
383
- - test/logoutresponse_test.rb
384
- - test/metadata/idp_descriptor.xml
385
- - test/metadata/idp_descriptor_2.xml
386
- - test/metadata/idp_descriptor_3.xml
387
- - test/metadata/idp_descriptor_4.xml
388
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
389
- - test/metadata/idp_metadata_multi_certs.xml
390
- - test/metadata/idp_metadata_multi_signing_certs.xml
391
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
392
- - test/metadata/idp_multiple_descriptors.xml
393
- - test/metadata/idp_multiple_descriptors_2.xml
394
- - test/metadata/no_idp_descriptor.xml
395
- - test/metadata_test.rb
396
- - test/request_test.rb
397
- - test/response_test.rb
398
- - test/responses/adfs_response_sha1.xml
399
- - test/responses/adfs_response_sha256.xml
400
- - test/responses/adfs_response_sha384.xml
401
- - test/responses/adfs_response_sha512.xml
402
- - test/responses/adfs_response_xmlns.xml
403
- - test/responses/attackxee.xml
404
- - test/responses/invalids/duplicated_attributes.xml.base64
405
- - test/responses/invalids/empty_destination.xml.base64
406
- - test/responses/invalids/empty_nameid.xml.base64
407
- - test/responses/invalids/encrypted_new_attack.xml.base64
408
- - test/responses/invalids/invalid_audience.xml.base64
409
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
410
- - test/responses/invalids/invalid_issuer_message.xml.base64
411
- - test/responses/invalids/invalid_signature_position.xml.base64
412
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
413
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
414
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
415
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
416
- - test/responses/invalids/multiple_assertions.xml.base64
417
- - test/responses/invalids/multiple_signed.xml.base64
418
- - test/responses/invalids/no_authnstatement.xml.base64
419
- - test/responses/invalids/no_conditions.xml.base64
420
- - test/responses/invalids/no_id.xml.base64
421
- - test/responses/invalids/no_issuer_assertion.xml.base64
422
- - test/responses/invalids/no_issuer_response.xml.base64
423
- - test/responses/invalids/no_nameid.xml.base64
424
- - test/responses/invalids/no_saml2.xml.base64
425
- - test/responses/invalids/no_signature.xml.base64
426
- - test/responses/invalids/no_status.xml.base64
427
- - test/responses/invalids/no_status_code.xml.base64
428
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
429
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
430
- - test/responses/invalids/response_invalid_signed_element.xml.base64
431
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
432
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
433
- - test/responses/invalids/signature_wrapping_attack.xml.base64
434
- - test/responses/invalids/status_code_responder.xml.base64
435
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
436
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
437
- - test/responses/no_signature_ns.xml
438
- - test/responses/open_saml_response.xml
439
- - test/responses/response_assertion_wrapped.xml.base64
440
- - test/responses/response_audience_self_closed_tag.xml.base64
441
- - test/responses/response_double_status_code.xml.base64
442
- - test/responses/response_encrypted_attrs.xml.base64
443
- - test/responses/response_encrypted_nameid.xml.base64
444
- - test/responses/response_eval.xml
445
- - test/responses/response_no_cert_and_encrypted_attrs.xml
446
- - test/responses/response_node_text_attack.xml.base64
447
- - test/responses/response_node_text_attack2.xml.base64
448
- - test/responses/response_node_text_attack3.xml.base64
449
- - test/responses/response_unsigned_xml_base64
450
- - test/responses/response_with_ampersands.xml
451
- - test/responses/response_with_ampersands.xml.base64
452
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
453
- - test/responses/response_with_multiple_attribute_statements.xml
454
- - test/responses/response_with_multiple_attribute_values.xml
455
- - test/responses/response_with_retrieval_method.xml
456
- - test/responses/response_with_saml2_namespace.xml.base64
457
- - test/responses/response_with_signed_assertion.xml.base64
458
- - test/responses/response_with_signed_assertion_2.xml.base64
459
- - test/responses/response_with_signed_assertion_3.xml
460
- - test/responses/response_with_signed_message_and_assertion.xml
461
- - test/responses/response_with_undefined_recipient.xml.base64
462
- - test/responses/response_without_attributes.xml.base64
463
- - test/responses/response_without_reference_uri.xml.base64
464
- - test/responses/response_wrapped.xml.base64
465
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
466
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
467
- - test/responses/signed_nameid_in_atts.xml
468
- - test/responses/signed_unqual_nameid_in_atts.xml
469
- - test/responses/simple_saml_php.xml
470
- - test/responses/starfield_response.xml.base64
471
- - test/responses/test_sign.xml
472
- - test/responses/unsigned_encrypted_adfs.xml
473
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
474
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
475
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
476
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
477
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
478
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
479
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
480
- - test/responses/valid_response.xml.base64
481
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
482
- - test/responses/valid_response_without_x509certificate.xml.base64
483
- - test/saml_message_test.rb
484
- - test/settings_test.rb
485
- - test/slo_logoutrequest_test.rb
486
- - test/slo_logoutresponse_test.rb
487
- - test/test_helper.rb
488
- - test/utils_test.rb
489
- - test/xml_security_test.rb
243
+ test_files: []
data/test/certificates/certificate.der DELETED
Binary file
data/test/certificates/certificate1 DELETED
@@ -1,12 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIIBrTCCAaGgAwIBAgIBATADBgEAMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApD
3
- YWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9uZUxv
4
- Z2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMB4XDTEwMTAxMTIxMTUxMloX
5
- DTE1MTAxMTIxMTUxMlowZzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3Ju
6
- aWExFTATBgNVBAcMDFNhbnRhIE1vbmljYTERMA8GA1UECgwIT25lTG9naW4xGTAX
7
- BgNVBAMMEGFwcC5vbmVsb2dpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ
8
- AoGBAMPmjfjy7L35oDpeBXBoRVCgktPkLno9DOEWB7MgYMMVKs2B6ymWQLEWrDug
9
- MK1hkzWFhIb5fqWLGbWy0J0veGR9/gHOQG+rD/I36xAXnkdiXXhzoiAG/zQxM0ed
10
- MOUf40n314FC8moErcUg6QabttzesO59HFz6shPuxcWaVAgxAgMBAAEwAwYBAAMB
11
- AA==
12
- -----END CERTIFICATE-----
data/test/certificates/certificate_without_head_foot DELETED
@@ -1 +0,0 @@
1
- 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
data/test/certificates/formatted_certificate DELETED
@@ -1,14 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
3
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
4
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
5
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
6
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
7
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
8
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
9
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
10
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
11
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
12
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
13
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
14
- -----END CERTIFICATE-----
data/test/certificates/formatted_chained_certificate DELETED
@@ -1,42 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
3
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
4
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
5
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
6
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
7
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
8
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
9
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
10
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
11
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
12
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
13
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
14
- -----END CERTIFICATE-----
15
- -----BEGIN CERTIFICATE-----
16
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
17
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
18
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
19
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
20
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
21
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
22
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
23
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
24
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
25
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
26
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
27
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
28
- -----END CERTIFICATE-----
29
- -----BEGIN CERTIFICATE-----
30
- MIICPDCCAaWgAwIBAgIIEiC/9HMAWWAwDQYJKoZIhvcNAQEFBQAwTzELMAkGA1UE
31
- BhMCVVMxDDAKBgNVBAoTA2libTEMMAoGA1UECxMDc3NvMSQwIgYDVQQDExtjMjVh
32
- MDI3Ny50b3JvbnRvLmNhLmlibS5jb20wHhcNMTEwNTI0MTYzNTQ4WhcNMjEwNTIx
33
- wsQMPBj4WQTNzTYMCQYDVQQGEwJVUzEMMAoGA1UEChMDaWJtMQwwCgYDVQQLEwNz
34
- c28xJDAiBgNVBAMTG2MyNWEwMjc3LnRvcm9udG8uY2EuaWJtLmNvbTCBnzANBgkq
35
- hkiG9w0BAQEFAAOBjQAwgYkCgYEAgzfYQZuf5FVdJTcrsIQZ+YHTPjOsw2MGo0jC
36
- mdGMcp4brWeFgk1OVaOmytPx6P76wHWR436AleX3crHBPd8gPxuZdnvBQ7PkrKpw
37
- Vvaq52juenFrho8JY0TeVgVkY5jAh45YzytjP2y2k/cGQurI/56NT0PpQJ0S1G3N
38
- 4eTg718CAwEAAaMhMB8wHQYDVR0OBBYEFCYVLJqcJ7WgdzGIsuJ/TzDGDqinMA0G
39
- CSqGSIb3DQEBBQUAA4GBAB80bIePf+qWDvWe+9bEEnbFTw7pCknLexxZ0AMqrsmZ
40
- +4jmI+evP1JZYCjfIg9X+MBH01hfp5dFcetz3o6w6SkV+BxLYLgfcy5KUcYsIM/1
41
- 2Zkedj87bS1glzOy5B89pKD2DMbu6828Abzgc+4lyQ2ASifsqM4cZdVayzo8n+dQ
42
- -----END CERTIFICATE-----