ruby-saml 1.10.1 → 1.12.2

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of ruby-saml might be problematic. Click here for more details.

Files changed (159) hide show
  1. checksums.yaml +7 -7
  2. data/.travis.yml +21 -20
  3. data/README.md +95 -26
  4. data/changelog.md +40 -0
  5. data/lib/onelogin/ruby-saml/attributes.rb +24 -1
  6. data/lib/onelogin/ruby-saml/authrequest.rb +11 -6
  7. data/lib/onelogin/ruby-saml/idp_metadata_parser.rb +70 -24
  8. data/lib/onelogin/ruby-saml/logging.rb +3 -3
  9. data/lib/onelogin/ruby-saml/logoutrequest.rb +11 -5
  10. data/lib/onelogin/ruby-saml/logoutresponse.rb +21 -2
  11. data/lib/onelogin/ruby-saml/metadata.rb +11 -3
  12. data/lib/onelogin/ruby-saml/response.rb +64 -23
  13. data/lib/onelogin/ruby-saml/saml_message.rb +6 -0
  14. data/lib/onelogin/ruby-saml/setting_error.rb +6 -0
  15. data/lib/onelogin/ruby-saml/settings.rb +72 -7
  16. data/lib/onelogin/ruby-saml/slo_logoutrequest.rb +20 -1
  17. data/lib/onelogin/ruby-saml/slo_logoutresponse.rb +31 -17
  18. data/lib/onelogin/ruby-saml/utils.rb +69 -0
  19. data/lib/onelogin/ruby-saml/version.rb +1 -1
  20. data/lib/xml_security.rb +34 -6
  21. data/ruby-saml.gemspec +9 -5
  22. metadata +161 -383
  23. data/test/certificates/certificate.der +0 -0
  24. data/test/certificates/certificate1 +0 -12
  25. data/test/certificates/certificate_without_head_foot +0 -1
  26. data/test/certificates/formatted_certificate +0 -14
  27. data/test/certificates/formatted_chained_certificate +0 -42
  28. data/test/certificates/formatted_private_key +0 -12
  29. data/test/certificates/formatted_rsa_private_key +0 -12
  30. data/test/certificates/invalid_certificate1 +0 -1
  31. data/test/certificates/invalid_certificate2 +0 -1
  32. data/test/certificates/invalid_certificate3 +0 -12
  33. data/test/certificates/invalid_chained_certificate1 +0 -1
  34. data/test/certificates/invalid_private_key1 +0 -1
  35. data/test/certificates/invalid_private_key2 +0 -1
  36. data/test/certificates/invalid_private_key3 +0 -10
  37. data/test/certificates/invalid_rsa_private_key1 +0 -1
  38. data/test/certificates/invalid_rsa_private_key2 +0 -1
  39. data/test/certificates/invalid_rsa_private_key3 +0 -10
  40. data/test/certificates/ruby-saml-2.crt +0 -15
  41. data/test/certificates/ruby-saml.crt +0 -14
  42. data/test/certificates/ruby-saml.key +0 -15
  43. data/test/idp_metadata_parser_test.rb +0 -587
  44. data/test/logging_test.rb +0 -62
  45. data/test/logout_requests/invalid_slo_request.xml +0 -6
  46. data/test/logout_requests/slo_request.xml +0 -4
  47. data/test/logout_requests/slo_request.xml.base64 +0 -1
  48. data/test/logout_requests/slo_request_deflated.xml.base64 +0 -1
  49. data/test/logout_requests/slo_request_with_name_id_format.xml +0 -4
  50. data/test/logout_requests/slo_request_with_session_index.xml +0 -5
  51. data/test/logout_responses/logoutresponse_fixtures.rb +0 -86
  52. data/test/logoutrequest_test.rb +0 -260
  53. data/test/logoutresponse_test.rb +0 -409
  54. data/test/metadata/idp_descriptor.xml +0 -26
  55. data/test/metadata/idp_descriptor_2.xml +0 -56
  56. data/test/metadata/idp_descriptor_3.xml +0 -14
  57. data/test/metadata/idp_descriptor_4.xml +0 -72
  58. data/test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml +0 -72
  59. data/test/metadata/idp_metadata_multi_certs.xml +0 -75
  60. data/test/metadata/idp_metadata_multi_signing_certs.xml +0 -52
  61. data/test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml +0 -71
  62. data/test/metadata/idp_multiple_descriptors.xml +0 -59
  63. data/test/metadata/idp_multiple_descriptors_2.xml +0 -59
  64. data/test/metadata/no_idp_descriptor.xml +0 -21
  65. data/test/metadata_test.rb +0 -331
  66. data/test/request_test.rb +0 -340
  67. data/test/response_test.rb +0 -1620
  68. data/test/responses/adfs_response_sha1.xml +0 -46
  69. data/test/responses/adfs_response_sha256.xml +0 -46
  70. data/test/responses/adfs_response_sha384.xml +0 -46
  71. data/test/responses/adfs_response_sha512.xml +0 -46
  72. data/test/responses/adfs_response_xmlns.xml +0 -45
  73. data/test/responses/attackxee.xml +0 -13
  74. data/test/responses/invalids/duplicated_attributes.xml.base64 +0 -1
  75. data/test/responses/invalids/empty_destination.xml.base64 +0 -1
  76. data/test/responses/invalids/empty_nameid.xml.base64 +0 -1
  77. data/test/responses/invalids/encrypted_new_attack.xml.base64 +0 -1
  78. data/test/responses/invalids/invalid_audience.xml.base64 +0 -1
  79. data/test/responses/invalids/invalid_issuer_assertion.xml.base64 +0 -1
  80. data/test/responses/invalids/invalid_issuer_message.xml.base64 +0 -1
  81. data/test/responses/invalids/invalid_signature_position.xml.base64 +0 -1
  82. data/test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 +0 -1
  83. data/test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 +0 -1
  84. data/test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 +0 -1
  85. data/test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 +0 -1
  86. data/test/responses/invalids/multiple_assertions.xml.base64 +0 -2
  87. data/test/responses/invalids/multiple_signed.xml.base64 +0 -1
  88. data/test/responses/invalids/no_authnstatement.xml.base64 +0 -1
  89. data/test/responses/invalids/no_conditions.xml.base64 +0 -1
  90. data/test/responses/invalids/no_id.xml.base64 +0 -1
  91. data/test/responses/invalids/no_issuer_assertion.xml.base64 +0 -1
  92. data/test/responses/invalids/no_issuer_response.xml.base64 +0 -1
  93. data/test/responses/invalids/no_nameid.xml.base64 +0 -1
  94. data/test/responses/invalids/no_saml2.xml.base64 +0 -1
  95. data/test/responses/invalids/no_signature.xml.base64 +0 -1
  96. data/test/responses/invalids/no_status.xml.base64 +0 -1
  97. data/test/responses/invalids/no_status_code.xml.base64 +0 -1
  98. data/test/responses/invalids/no_subjectconfirmation_data.xml.base64 +0 -1
  99. data/test/responses/invalids/no_subjectconfirmation_method.xml.base64 +0 -1
  100. data/test/responses/invalids/response_invalid_signed_element.xml.base64 +0 -1
  101. data/test/responses/invalids/response_with_concealed_signed_assertion.xml +0 -51
  102. data/test/responses/invalids/response_with_doubled_signed_assertion.xml +0 -49
  103. data/test/responses/invalids/signature_wrapping_attack.xml.base64 +0 -1
  104. data/test/responses/invalids/status_code_responder.xml.base64 +0 -1
  105. data/test/responses/invalids/status_code_responer_and_msg.xml.base64 +0 -1
  106. data/test/responses/invalids/wrong_spnamequalifier.xml.base64 +0 -1
  107. data/test/responses/no_signature_ns.xml +0 -48
  108. data/test/responses/open_saml_response.xml +0 -56
  109. data/test/responses/response_assertion_wrapped.xml.base64 +0 -93
  110. data/test/responses/response_audience_self_closed_tag.xml.base64 +0 -1
  111. data/test/responses/response_double_status_code.xml.base64 +0 -1
  112. data/test/responses/response_encrypted_attrs.xml.base64 +0 -1
  113. data/test/responses/response_encrypted_nameid.xml.base64 +0 -1
  114. data/test/responses/response_eval.xml +0 -7
  115. data/test/responses/response_no_cert_and_encrypted_attrs.xml +0 -29
  116. data/test/responses/response_node_text_attack.xml.base64 +0 -1
  117. data/test/responses/response_node_text_attack2.xml.base64 +0 -1
  118. data/test/responses/response_node_text_attack3.xml.base64 +0 -1
  119. data/test/responses/response_unsigned_xml_base64 +0 -1
  120. data/test/responses/response_with_ampersands.xml +0 -139
  121. data/test/responses/response_with_ampersands.xml.base64 +0 -93
  122. data/test/responses/response_with_ds_namespace_at_the_root.xml.base64 +0 -1
  123. data/test/responses/response_with_multiple_attribute_statements.xml +0 -72
  124. data/test/responses/response_with_multiple_attribute_values.xml +0 -67
  125. data/test/responses/response_with_retrieval_method.xml +0 -26
  126. data/test/responses/response_with_saml2_namespace.xml.base64 +0 -102
  127. data/test/responses/response_with_signed_assertion.xml.base64 +0 -66
  128. data/test/responses/response_with_signed_assertion_2.xml.base64 +0 -1
  129. data/test/responses/response_with_signed_assertion_3.xml +0 -30
  130. data/test/responses/response_with_signed_message_and_assertion.xml +0 -34
  131. data/test/responses/response_with_undefined_recipient.xml.base64 +0 -1
  132. data/test/responses/response_without_attributes.xml.base64 +0 -79
  133. data/test/responses/response_without_reference_uri.xml.base64 +0 -1
  134. data/test/responses/response_wrapped.xml.base64 +0 -150
  135. data/test/responses/signed_message_encrypted_signed_assertion.xml.base64 +0 -1
  136. data/test/responses/signed_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  137. data/test/responses/signed_nameid_in_atts.xml +0 -47
  138. data/test/responses/signed_unqual_nameid_in_atts.xml +0 -47
  139. data/test/responses/simple_saml_php.xml +0 -71
  140. data/test/responses/starfield_response.xml.base64 +0 -1
  141. data/test/responses/test_sign.xml +0 -43
  142. data/test/responses/unsigned_encrypted_adfs.xml +0 -23
  143. data/test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64 +0 -1
  144. data/test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64 +0 -1
  145. data/test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64 +0 -1
  146. data/test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64 +0 -1
  147. data/test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64 +0 -1
  148. data/test/responses/unsigned_message_encrypted_signed_assertion.xml.base64 +0 -1
  149. data/test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64 +0 -1
  150. data/test/responses/valid_response.xml.base64 +0 -1
  151. data/test/responses/valid_response_with_formatted_x509certificate.xml.base64 +0 -1
  152. data/test/responses/valid_response_without_x509certificate.xml.base64 +0 -1
  153. data/test/saml_message_test.rb +0 -56
  154. data/test/settings_test.rb +0 -329
  155. data/test/slo_logoutrequest_test.rb +0 -448
  156. data/test/slo_logoutresponse_test.rb +0 -233
  157. data/test/test_helper.rb +0 -331
  158. data/test/utils_test.rb +0 -259
  159. data/test/xml_security_test.rb +0 -421
data/ruby-saml.gemspec CHANGED
@@ -15,15 +15,13 @@ Gem::Specification.new do |s|
15
15
  "LICENSE",
16
16
  "README.md"
17
17
  ]
18
- s.files = `git ls-files`.split("\n")
19
- s.homepage = %q{http://github.com/onelogin/ruby-saml}
20
- s.rubyforge_project = %q{http://www.rubygems.org/gems/ruby-saml}
18
+ s.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
19
+ s.homepage = %q{https://github.com/onelogin/ruby-saml}
21
20
  s.rdoc_options = ["--charset=UTF-8"]
22
21
  s.require_paths = ["lib"]
23
22
  s.rubygems_version = %q{1.3.7}
24
23
  s.required_ruby_version = '>= 1.8.7'
25
24
  s.summary = %q{SAML Ruby Tookit}
26
- s.test_files = `git ls-files test/*`.split("\n")
27
25
 
28
26
  # Because runtime dependencies are determined at build time, we cannot make
29
27
  # Nokogiri's version dependent on the Ruby version, even though we would
@@ -32,6 +30,7 @@ Gem::Specification.new do |s|
32
30
  if JRUBY_VERSION < '9.2.0.0'
33
31
  s.add_runtime_dependency('nokogiri', '>= 1.8.2', '<= 1.8.5')
34
32
  s.add_runtime_dependency('jruby-openssl', '>= 0.9.8')
33
+ s.add_runtime_dependency('json', '< 2.3.0')
35
34
  else
36
35
  s.add_runtime_dependency('nokogiri', '>= 1.8.2')
37
36
  end
@@ -40,10 +39,15 @@ Gem::Specification.new do |s|
40
39
  s.add_runtime_dependency('nokogiri', '<= 1.5.11')
41
40
  elsif RUBY_VERSION < '2.1'
42
41
  s.add_runtime_dependency('nokogiri', '>= 1.5.10', '<= 1.6.8.1')
42
+ s.add_runtime_dependency('json', '< 2.3.0')
43
+ elsif RUBY_VERSION < '2.3'
44
+ s.add_runtime_dependency('nokogiri', '>= 1.9.1', '<= 1.10.0')
43
45
  else
44
- s.add_runtime_dependency('nokogiri', '>= 1.8.2')
46
+ s.add_runtime_dependency('nokogiri', '>= 1.10.5')
47
+ s.add_runtime_dependency('rexml')
45
48
  end
46
49
 
50
+ s.add_development_dependency('coveralls')
47
51
  s.add_development_dependency('minitest', '~> 5.5')
48
52
  s.add_development_dependency('mocha', '~> 0.14')
49
53
  s.add_development_dependency('rake', '~> 10')
metadata CHANGED
@@ -1,128 +1,180 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: ruby-saml
3
- version: !ruby/object:Gem::Version
4
- version: 1.10.1
3
+ version: !ruby/object:Gem::Version
4
+ version: 1.12.2
5
5
  platform: ruby
6
- authors:
6
+ authors:
7
7
  - OneLogin LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
-
12
- date: 2019-04-08 00:00:00 Z
13
- dependencies:
14
- - !ruby/object:Gem::Dependency
15
- name: uuid
16
- prerelease: false
17
- requirement: &id001 !ruby/object:Gem::Requirement
18
- requirements:
19
- - &id007
20
- - ">="
21
- - !ruby/object:Gem::Version
22
- version: "0"
23
- type: :runtime
24
- version_requirements: *id001
25
- - !ruby/object:Gem::Dependency
11
+ date: 2021-04-08 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
26
14
  name: nokogiri
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - ">="
18
+ - !ruby/object:Gem::Version
19
+ version: 1.10.5
20
+ type: :runtime
27
21
  prerelease: false
28
- requirement: &id002 !ruby/object:Gem::Requirement
29
- requirements:
30
- - - <=
31
- - !ruby/object:Gem::Version
32
- version: 1.5.11
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - ">="
25
+ - !ruby/object:Gem::Version
26
+ version: 1.10.5
27
+ - !ruby/object:Gem::Dependency
28
+ name: rexml
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - ">="
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
33
34
  type: :runtime
34
- version_requirements: *id002
35
- - !ruby/object:Gem::Dependency
36
- name: minitest
37
35
  prerelease: false
38
- requirement: &id003 !ruby/object:Gem::Requirement
39
- requirements:
40
- - - ~>
41
- - !ruby/object:Gem::Version
42
- version: "5.5"
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: coveralls
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - ">="
46
+ - !ruby/object:Gem::Version
47
+ version: '0'
43
48
  type: :development
44
- version_requirements: *id003
45
- - !ruby/object:Gem::Dependency
46
- name: mocha
47
49
  prerelease: false
48
- requirement: &id004 !ruby/object:Gem::Requirement
49
- requirements:
50
- - - ~>
51
- - !ruby/object:Gem::Version
52
- version: "0.14"
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - ">="
53
+ - !ruby/object:Gem::Version
54
+ version: '0'
55
+ - !ruby/object:Gem::Dependency
56
+ name: minitest
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - "~>"
60
+ - !ruby/object:Gem::Version
61
+ version: '5.5'
53
62
  type: :development
54
- version_requirements: *id004
55
- - !ruby/object:Gem::Dependency
56
- name: rake
57
63
  prerelease: false
58
- requirement: &id005 !ruby/object:Gem::Requirement
59
- requirements:
60
- - - ~>
61
- - !ruby/object:Gem::Version
62
- version: "10"
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - "~>"
67
+ - !ruby/object:Gem::Version
68
+ version: '5.5'
69
+ - !ruby/object:Gem::Dependency
70
+ name: mocha
71
+ requirement: !ruby/object:Gem::Requirement
72
+ requirements:
73
+ - - "~>"
74
+ - !ruby/object:Gem::Version
75
+ version: '0.14'
63
76
  type: :development
64
- version_requirements: *id005
65
- - !ruby/object:Gem::Dependency
66
- name: shoulda
67
77
  prerelease: false
68
- requirement: &id006 !ruby/object:Gem::Requirement
69
- requirements:
70
- - - ~>
71
- - !ruby/object:Gem::Version
72
- version: "2.11"
78
+ version_requirements: !ruby/object:Gem::Requirement
79
+ requirements:
80
+ - - "~>"
81
+ - !ruby/object:Gem::Version
82
+ version: '0.14'
83
+ - !ruby/object:Gem::Dependency
84
+ name: rake
85
+ requirement: !ruby/object:Gem::Requirement
86
+ requirements:
87
+ - - "~>"
88
+ - !ruby/object:Gem::Version
89
+ version: '10'
73
90
  type: :development
74
- version_requirements: *id006
75
- - !ruby/object:Gem::Dependency
76
- name: simplecov
77
91
  prerelease: false
78
- requirement: &id008 !ruby/object:Gem::Requirement
79
- requirements:
80
- - *id007
92
+ version_requirements: !ruby/object:Gem::Requirement
93
+ requirements:
94
+ - - "~>"
95
+ - !ruby/object:Gem::Version
96
+ version: '10'
97
+ - !ruby/object:Gem::Dependency
98
+ name: shoulda
99
+ requirement: !ruby/object:Gem::Requirement
100
+ requirements:
101
+ - - "~>"
102
+ - !ruby/object:Gem::Version
103
+ version: '2.11'
81
104
  type: :development
82
- version_requirements: *id008
83
- - !ruby/object:Gem::Dependency
84
- name: systemu
85
105
  prerelease: false
86
- requirement: &id009 !ruby/object:Gem::Requirement
87
- requirements:
88
- - - ~>
89
- - !ruby/object:Gem::Version
90
- version: "2"
106
+ version_requirements: !ruby/object:Gem::Requirement
107
+ requirements:
108
+ - - "~>"
109
+ - !ruby/object:Gem::Version
110
+ version: '2.11'
111
+ - !ruby/object:Gem::Dependency
112
+ name: simplecov
113
+ requirement: !ruby/object:Gem::Requirement
114
+ requirements:
115
+ - - ">="
116
+ - !ruby/object:Gem::Version
117
+ version: '0'
91
118
  type: :development
92
- version_requirements: *id009
93
- - !ruby/object:Gem::Dependency
94
- name: timecop
95
119
  prerelease: false
96
- requirement: &id010 !ruby/object:Gem::Requirement
97
- requirements:
98
- - - <=
99
- - !ruby/object:Gem::Version
120
+ version_requirements: !ruby/object:Gem::Requirement
121
+ requirements:
122
+ - - ">="
123
+ - !ruby/object:Gem::Version
124
+ version: '0'
125
+ - !ruby/object:Gem::Dependency
126
+ name: systemu
127
+ requirement: !ruby/object:Gem::Requirement
128
+ requirements:
129
+ - - "~>"
130
+ - !ruby/object:Gem::Version
131
+ version: '2'
132
+ type: :development
133
+ prerelease: false
134
+ version_requirements: !ruby/object:Gem::Requirement
135
+ requirements:
136
+ - - "~>"
137
+ - !ruby/object:Gem::Version
138
+ version: '2'
139
+ - !ruby/object:Gem::Dependency
140
+ name: timecop
141
+ requirement: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - "<="
144
+ - !ruby/object:Gem::Version
100
145
  version: 0.6.0
101
146
  type: :development
102
- version_requirements: *id010
103
- - !ruby/object:Gem::Dependency
104
- name: ruby-debug
105
147
  prerelease: false
106
- requirement: &id011 !ruby/object:Gem::Requirement
107
- requirements:
108
- - - ~>
109
- - !ruby/object:Gem::Version
110
- version: 0.10.4
148
+ version_requirements: !ruby/object:Gem::Requirement
149
+ requirements:
150
+ - - "<="
151
+ - !ruby/object:Gem::Version
152
+ version: 0.6.0
153
+ - !ruby/object:Gem::Dependency
154
+ name: pry-byebug
155
+ requirement: !ruby/object:Gem::Requirement
156
+ requirements:
157
+ - - ">="
158
+ - !ruby/object:Gem::Version
159
+ version: '0'
111
160
  type: :development
112
- version_requirements: *id011
161
+ prerelease: false
162
+ version_requirements: !ruby/object:Gem::Requirement
163
+ requirements:
164
+ - - ">="
165
+ - !ruby/object:Gem::Version
166
+ version: '0'
113
167
  description: SAML toolkit for Ruby on Rails
114
168
  email: support@onelogin.com
115
169
  executables: []
116
-
117
170
  extensions: []
118
-
119
- extra_rdoc_files:
171
+ extra_rdoc_files:
120
172
  - LICENSE
121
173
  - README.md
122
- files:
123
- - .document
124
- - .gitignore
125
- - .travis.yml
174
+ files:
175
+ - ".document"
176
+ - ".gitignore"
177
+ - ".travis.yml"
126
178
  - Gemfile
127
179
  - LICENSE
128
180
  - README.md
@@ -142,6 +194,7 @@ files:
142
194
  - lib/onelogin/ruby-saml/metadata.rb
143
195
  - lib/onelogin/ruby-saml/response.rb
144
196
  - lib/onelogin/ruby-saml/saml_message.rb
197
+ - lib/onelogin/ruby-saml/setting_error.rb
145
198
  - lib/onelogin/ruby-saml/settings.rb
146
199
  - lib/onelogin/ruby-saml/slo_logoutrequest.rb
147
200
  - lib/onelogin/ruby-saml/slo_logoutresponse.rb
@@ -163,303 +216,28 @@ files:
163
216
  - lib/schemas/xmldsig-core-schema.xsd
164
217
  - lib/xml_security.rb
165
218
  - ruby-saml.gemspec
166
- - test/certificates/certificate.der
167
- - test/certificates/certificate1
168
- - test/certificates/certificate_without_head_foot
169
- - test/certificates/formatted_certificate
170
- - test/certificates/formatted_chained_certificate
171
- - test/certificates/formatted_private_key
172
- - test/certificates/formatted_rsa_private_key
173
- - test/certificates/invalid_certificate1
174
- - test/certificates/invalid_certificate2
175
- - test/certificates/invalid_certificate3
176
- - test/certificates/invalid_chained_certificate1
177
- - test/certificates/invalid_private_key1
178
- - test/certificates/invalid_private_key2
179
- - test/certificates/invalid_private_key3
180
- - test/certificates/invalid_rsa_private_key1
181
- - test/certificates/invalid_rsa_private_key2
182
- - test/certificates/invalid_rsa_private_key3
183
- - test/certificates/ruby-saml-2.crt
184
- - test/certificates/ruby-saml.crt
185
- - test/certificates/ruby-saml.key
186
- - test/idp_metadata_parser_test.rb
187
- - test/logging_test.rb
188
- - test/logout_requests/invalid_slo_request.xml
189
- - test/logout_requests/slo_request.xml
190
- - test/logout_requests/slo_request.xml.base64
191
- - test/logout_requests/slo_request_deflated.xml.base64
192
- - test/logout_requests/slo_request_with_name_id_format.xml
193
- - test/logout_requests/slo_request_with_session_index.xml
194
- - test/logout_responses/logoutresponse_fixtures.rb
195
- - test/logoutrequest_test.rb
196
- - test/logoutresponse_test.rb
197
- - test/metadata/idp_descriptor.xml
198
- - test/metadata/idp_descriptor_2.xml
199
- - test/metadata/idp_descriptor_3.xml
200
- - test/metadata/idp_descriptor_4.xml
201
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
202
- - test/metadata/idp_metadata_multi_certs.xml
203
- - test/metadata/idp_metadata_multi_signing_certs.xml
204
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
205
- - test/metadata/idp_multiple_descriptors.xml
206
- - test/metadata/idp_multiple_descriptors_2.xml
207
- - test/metadata/no_idp_descriptor.xml
208
- - test/metadata_test.rb
209
- - test/request_test.rb
210
- - test/response_test.rb
211
- - test/responses/adfs_response_sha1.xml
212
- - test/responses/adfs_response_sha256.xml
213
- - test/responses/adfs_response_sha384.xml
214
- - test/responses/adfs_response_sha512.xml
215
- - test/responses/adfs_response_xmlns.xml
216
- - test/responses/attackxee.xml
217
- - test/responses/invalids/duplicated_attributes.xml.base64
218
- - test/responses/invalids/empty_destination.xml.base64
219
- - test/responses/invalids/empty_nameid.xml.base64
220
- - test/responses/invalids/encrypted_new_attack.xml.base64
221
- - test/responses/invalids/invalid_audience.xml.base64
222
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
223
- - test/responses/invalids/invalid_issuer_message.xml.base64
224
- - test/responses/invalids/invalid_signature_position.xml.base64
225
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
226
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
227
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
228
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
229
- - test/responses/invalids/multiple_assertions.xml.base64
230
- - test/responses/invalids/multiple_signed.xml.base64
231
- - test/responses/invalids/no_authnstatement.xml.base64
232
- - test/responses/invalids/no_conditions.xml.base64
233
- - test/responses/invalids/no_id.xml.base64
234
- - test/responses/invalids/no_issuer_assertion.xml.base64
235
- - test/responses/invalids/no_issuer_response.xml.base64
236
- - test/responses/invalids/no_nameid.xml.base64
237
- - test/responses/invalids/no_saml2.xml.base64
238
- - test/responses/invalids/no_signature.xml.base64
239
- - test/responses/invalids/no_status.xml.base64
240
- - test/responses/invalids/no_status_code.xml.base64
241
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
242
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
243
- - test/responses/invalids/response_invalid_signed_element.xml.base64
244
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
245
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
246
- - test/responses/invalids/signature_wrapping_attack.xml.base64
247
- - test/responses/invalids/status_code_responder.xml.base64
248
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
249
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
250
- - test/responses/no_signature_ns.xml
251
- - test/responses/open_saml_response.xml
252
- - test/responses/response_assertion_wrapped.xml.base64
253
- - test/responses/response_audience_self_closed_tag.xml.base64
254
- - test/responses/response_double_status_code.xml.base64
255
- - test/responses/response_encrypted_attrs.xml.base64
256
- - test/responses/response_encrypted_nameid.xml.base64
257
- - test/responses/response_eval.xml
258
- - test/responses/response_no_cert_and_encrypted_attrs.xml
259
- - test/responses/response_node_text_attack.xml.base64
260
- - test/responses/response_node_text_attack2.xml.base64
261
- - test/responses/response_node_text_attack3.xml.base64
262
- - test/responses/response_unsigned_xml_base64
263
- - test/responses/response_with_ampersands.xml
264
- - test/responses/response_with_ampersands.xml.base64
265
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
266
- - test/responses/response_with_multiple_attribute_statements.xml
267
- - test/responses/response_with_multiple_attribute_values.xml
268
- - test/responses/response_with_retrieval_method.xml
269
- - test/responses/response_with_saml2_namespace.xml.base64
270
- - test/responses/response_with_signed_assertion.xml.base64
271
- - test/responses/response_with_signed_assertion_2.xml.base64
272
- - test/responses/response_with_signed_assertion_3.xml
273
- - test/responses/response_with_signed_message_and_assertion.xml
274
- - test/responses/response_with_undefined_recipient.xml.base64
275
- - test/responses/response_without_attributes.xml.base64
276
- - test/responses/response_without_reference_uri.xml.base64
277
- - test/responses/response_wrapped.xml.base64
278
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
279
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
280
- - test/responses/signed_nameid_in_atts.xml
281
- - test/responses/signed_unqual_nameid_in_atts.xml
282
- - test/responses/simple_saml_php.xml
283
- - test/responses/starfield_response.xml.base64
284
- - test/responses/test_sign.xml
285
- - test/responses/unsigned_encrypted_adfs.xml
286
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
287
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
288
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
289
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
290
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
291
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
292
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
293
- - test/responses/valid_response.xml.base64
294
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
295
- - test/responses/valid_response_without_x509certificate.xml.base64
296
- - test/saml_message_test.rb
297
- - test/settings_test.rb
298
- - test/slo_logoutrequest_test.rb
299
- - test/slo_logoutresponse_test.rb
300
- - test/test_helper.rb
301
- - test/utils_test.rb
302
- - test/xml_security_test.rb
303
- homepage: http://github.com/onelogin/ruby-saml
304
- licenses:
219
+ homepage: https://github.com/onelogin/ruby-saml
220
+ licenses:
305
221
  - MIT
306
222
  metadata: {}
307
-
308
223
  post_install_message:
309
- rdoc_options:
310
- - --charset=UTF-8
311
- require_paths:
224
+ rdoc_options:
225
+ - "--charset=UTF-8"
226
+ require_paths:
312
227
  - lib
313
- required_ruby_version: !ruby/object:Gem::Requirement
314
- requirements:
228
+ required_ruby_version: !ruby/object:Gem::Requirement
229
+ requirements:
315
230
  - - ">="
316
- - !ruby/object:Gem::Version
231
+ - !ruby/object:Gem::Version
317
232
  version: 1.8.7
318
- required_rubygems_version: !ruby/object:Gem::Requirement
319
- requirements:
320
- - *id007
233
+ required_rubygems_version: !ruby/object:Gem::Requirement
234
+ requirements:
235
+ - - ">="
236
+ - !ruby/object:Gem::Version
237
+ version: '0'
321
238
  requirements: []
322
-
323
- rubyforge_project: http://www.rubygems.org/gems/ruby-saml
324
- rubygems_version: 2.7.7
239
+ rubygems_version: 3.0.8
325
240
  signing_key:
326
241
  specification_version: 4
327
242
  summary: SAML Ruby Tookit
328
- test_files:
329
- - test/certificates/certificate.der
330
- - test/certificates/certificate1
331
- - test/certificates/certificate_without_head_foot
332
- - test/certificates/formatted_certificate
333
- - test/certificates/formatted_chained_certificate
334
- - test/certificates/formatted_private_key
335
- - test/certificates/formatted_rsa_private_key
336
- - test/certificates/invalid_certificate1
337
- - test/certificates/invalid_certificate2
338
- - test/certificates/invalid_certificate3
339
- - test/certificates/invalid_chained_certificate1
340
- - test/certificates/invalid_private_key1
341
- - test/certificates/invalid_private_key2
342
- - test/certificates/invalid_private_key3
343
- - test/certificates/invalid_rsa_private_key1
344
- - test/certificates/invalid_rsa_private_key2
345
- - test/certificates/invalid_rsa_private_key3
346
- - test/certificates/ruby-saml-2.crt
347
- - test/certificates/ruby-saml.crt
348
- - test/certificates/ruby-saml.key
349
- - test/idp_metadata_parser_test.rb
350
- - test/logging_test.rb
351
- - test/logout_requests/invalid_slo_request.xml
352
- - test/logout_requests/slo_request.xml
353
- - test/logout_requests/slo_request.xml.base64
354
- - test/logout_requests/slo_request_deflated.xml.base64
355
- - test/logout_requests/slo_request_with_name_id_format.xml
356
- - test/logout_requests/slo_request_with_session_index.xml
357
- - test/logout_responses/logoutresponse_fixtures.rb
358
- - test/logoutrequest_test.rb
359
- - test/logoutresponse_test.rb
360
- - test/metadata/idp_descriptor.xml
361
- - test/metadata/idp_descriptor_2.xml
362
- - test/metadata/idp_descriptor_3.xml
363
- - test/metadata/idp_descriptor_4.xml
364
- - test/metadata/idp_metadata_different_sign_and_encrypt_cert.xml
365
- - test/metadata/idp_metadata_multi_certs.xml
366
- - test/metadata/idp_metadata_multi_signing_certs.xml
367
- - test/metadata/idp_metadata_same_sign_and_encrypt_cert.xml
368
- - test/metadata/idp_multiple_descriptors.xml
369
- - test/metadata/idp_multiple_descriptors_2.xml
370
- - test/metadata/no_idp_descriptor.xml
371
- - test/metadata_test.rb
372
- - test/request_test.rb
373
- - test/response_test.rb
374
- - test/responses/adfs_response_sha1.xml
375
- - test/responses/adfs_response_sha256.xml
376
- - test/responses/adfs_response_sha384.xml
377
- - test/responses/adfs_response_sha512.xml
378
- - test/responses/adfs_response_xmlns.xml
379
- - test/responses/attackxee.xml
380
- - test/responses/invalids/duplicated_attributes.xml.base64
381
- - test/responses/invalids/empty_destination.xml.base64
382
- - test/responses/invalids/empty_nameid.xml.base64
383
- - test/responses/invalids/encrypted_new_attack.xml.base64
384
- - test/responses/invalids/invalid_audience.xml.base64
385
- - test/responses/invalids/invalid_issuer_assertion.xml.base64
386
- - test/responses/invalids/invalid_issuer_message.xml.base64
387
- - test/responses/invalids/invalid_signature_position.xml.base64
388
- - test/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64
389
- - test/responses/invalids/invalid_subjectconfirmation_nb.xml.base64
390
- - test/responses/invalids/invalid_subjectconfirmation_noa.xml.base64
391
- - test/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64
392
- - test/responses/invalids/multiple_assertions.xml.base64
393
- - test/responses/invalids/multiple_signed.xml.base64
394
- - test/responses/invalids/no_authnstatement.xml.base64
395
- - test/responses/invalids/no_conditions.xml.base64
396
- - test/responses/invalids/no_id.xml.base64
397
- - test/responses/invalids/no_issuer_assertion.xml.base64
398
- - test/responses/invalids/no_issuer_response.xml.base64
399
- - test/responses/invalids/no_nameid.xml.base64
400
- - test/responses/invalids/no_saml2.xml.base64
401
- - test/responses/invalids/no_signature.xml.base64
402
- - test/responses/invalids/no_status.xml.base64
403
- - test/responses/invalids/no_status_code.xml.base64
404
- - test/responses/invalids/no_subjectconfirmation_data.xml.base64
405
- - test/responses/invalids/no_subjectconfirmation_method.xml.base64
406
- - test/responses/invalids/response_invalid_signed_element.xml.base64
407
- - test/responses/invalids/response_with_concealed_signed_assertion.xml
408
- - test/responses/invalids/response_with_doubled_signed_assertion.xml
409
- - test/responses/invalids/signature_wrapping_attack.xml.base64
410
- - test/responses/invalids/status_code_responder.xml.base64
411
- - test/responses/invalids/status_code_responer_and_msg.xml.base64
412
- - test/responses/invalids/wrong_spnamequalifier.xml.base64
413
- - test/responses/no_signature_ns.xml
414
- - test/responses/open_saml_response.xml
415
- - test/responses/response_assertion_wrapped.xml.base64
416
- - test/responses/response_audience_self_closed_tag.xml.base64
417
- - test/responses/response_double_status_code.xml.base64
418
- - test/responses/response_encrypted_attrs.xml.base64
419
- - test/responses/response_encrypted_nameid.xml.base64
420
- - test/responses/response_eval.xml
421
- - test/responses/response_no_cert_and_encrypted_attrs.xml
422
- - test/responses/response_node_text_attack.xml.base64
423
- - test/responses/response_node_text_attack2.xml.base64
424
- - test/responses/response_node_text_attack3.xml.base64
425
- - test/responses/response_unsigned_xml_base64
426
- - test/responses/response_with_ampersands.xml
427
- - test/responses/response_with_ampersands.xml.base64
428
- - test/responses/response_with_ds_namespace_at_the_root.xml.base64
429
- - test/responses/response_with_multiple_attribute_statements.xml
430
- - test/responses/response_with_multiple_attribute_values.xml
431
- - test/responses/response_with_retrieval_method.xml
432
- - test/responses/response_with_saml2_namespace.xml.base64
433
- - test/responses/response_with_signed_assertion.xml.base64
434
- - test/responses/response_with_signed_assertion_2.xml.base64
435
- - test/responses/response_with_signed_assertion_3.xml
436
- - test/responses/response_with_signed_message_and_assertion.xml
437
- - test/responses/response_with_undefined_recipient.xml.base64
438
- - test/responses/response_without_attributes.xml.base64
439
- - test/responses/response_without_reference_uri.xml.base64
440
- - test/responses/response_wrapped.xml.base64
441
- - test/responses/signed_message_encrypted_signed_assertion.xml.base64
442
- - test/responses/signed_message_encrypted_unsigned_assertion.xml.base64
443
- - test/responses/signed_nameid_in_atts.xml
444
- - test/responses/signed_unqual_nameid_in_atts.xml
445
- - test/responses/simple_saml_php.xml
446
- - test/responses/starfield_response.xml.base64
447
- - test/responses/test_sign.xml
448
- - test/responses/unsigned_encrypted_adfs.xml
449
- - test/responses/unsigned_message_aes128_encrypted_signed_assertion.xml.base64
450
- - test/responses/unsigned_message_aes192_encrypted_signed_assertion.xml.base64
451
- - test/responses/unsigned_message_aes256_encrypted_signed_assertion.xml.base64
452
- - test/responses/unsigned_message_des192_encrypted_signed_assertion.xml.base64
453
- - test/responses/unsigned_message_encrypted_assertion_without_saml_namespace.xml.base64
454
- - test/responses/unsigned_message_encrypted_signed_assertion.xml.base64
455
- - test/responses/unsigned_message_encrypted_unsigned_assertion.xml.base64
456
- - test/responses/valid_response.xml.base64
457
- - test/responses/valid_response_with_formatted_x509certificate.xml.base64
458
- - test/responses/valid_response_without_x509certificate.xml.base64
459
- - test/saml_message_test.rb
460
- - test/settings_test.rb
461
- - test/slo_logoutrequest_test.rb
462
- - test/slo_logoutresponse_test.rb
463
- - test/test_helper.rb
464
- - test/utils_test.rb
465
- - test/xml_security_test.rb
243
+ test_files: []