saml-kit 1.0.28 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6ba1becc4ca2c588a6f2ff3c791665fc0b540e1bc267924237b00bcf59abb201
-  data.tar.gz: 7dce5cdd4aa10aeef2e04c414145a784589dc26b9a3ff366bf1c99574b915696
+  metadata.gz: d77013b5cfdff5bcf857a48182eacafc9a8683cb0171c4cd383a8d53f522f5ea
+  data.tar.gz: 4a56b20855f4e83f47545b7fce9c31f47216b0bdc51bacdab6a29ba1e410f3d9
 SHA512:
-  metadata.gz: 8564943891c8e22171d8278da353626a78c96bccb3699586f436b6d58388c1b15c079379fb33d1efabeeea6dc703727f79c8bf393be93274f694ec2546294f80
-  data.tar.gz: d01dba5f9d4f60747dd611ffdcb6c41064ce62d89b86fa503149ed620fcd194c678d01aabe9c6b7acf642a841784f99b42aed074ad61e5ec9e382740d262832b
+  metadata.gz: f7eed807fd7d0a00de9fa669e6b52ae65f5487bcc1b408065d3c510d6323a7879d4412c67abe2a79a5fe7a08a38fa17296112586b4cd960dd4c13e1ca30ba7fa
+  data.tar.gz: 2832e9ba9fc7453ea1db370b69153db556b72cb2d0e0990e3216412669fb6212c73145654ae4edd0f2c4d04b5b464979a342a11343bc3c2bff4963b877379590

data/CHANGELOG.md

@@ -0,0 +1,149 @@
+Version 1.2.0
+
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.2.0] - 2021-02-04
+### Changed
+- Use [ActiveModel::Errors#add](https://www.rubydoc.info/docs/rails/ActiveModel%2FErrors:add)
+- Update minimum activemodel version to `5.1`.
+
+## [1.1.0] - 2019-04-30
+### Added
+- Add support for ForceAuthn attribute on AuthnRequest
+
+### Removed
+- Drop support for ruby 2.2
+- Drop support for ruby 2.3
+
+### Changed
+- Rescue from invalid signature validation
+- Change minimum ruby version to 2.4
+- Change minimum bundler to 2.0
+
+## [1.0.31] - 2019-04-17
+### Changed
+- Rescue from all decryption errors
+
+## [1.0.30] - 2019-04-07
+### Changed
+- change xml-kit dependency to minimum 0.3.0
+- use `encrypt_data_for` instead of `encryption_for`.
+
+## [1.0.29] - 2018-12-04
+### Changed
+- change xml-kit dependency to ~> 0.2.
+
+## [1.0.28] - 2018-12-04
+### Changed
+- Parse attribute arrays from SAML assertion.
+
+## [1.0.27] - 2018-11-08
+### Changed
+- Evict expired key pairs from configuration.
+
+## [1.0.26] - 2018-10-22
+### Changed
+- Forward destination, issuer, now, embed\_signature to assertion.
+
+## [1.0.25] - 2018-10-17
+### Changed
+- Allow multi valued attributes in response assertion.
+
+## [1.0.24] - 2018-09-18
+### Added
+- Parse ID from assertion.
+- Parse version from assertion.
+- Parse version from assertion.
+- Add missing English translations.
+
+### Changed
+- Moved backing fields from response builder to assertion.
+
+## [1.0.23] - 2018-08-23
+### Added
+- Add NotOnOrAfter attribute to SubjectConfirmationData.
+
+## [1.0.22] - 2018-08-13
+### Added
+- Allow using a custom NameID Format in Assertion.
+
+## [1.0.21] - 2018-08-13
+### Changed
+- Use net/hippie instead of net/http.
+
+### Removed
+- remove optional NotOnOrAfter attribute from SubjectConfirmationData.
+
+## [1.0.20] - 2018-08-11
+### Changed
+- Synchronize NotOnOrAfter between AuthnStatement and SubjectConfirmationData.
+
+### Removed
+- Removed optional SessionNotOnOrAfter attribute from AuthnStatement.
+
+[Unreleased]: https://github.com/xlgmokha/saml-kit/compare/v1.2.0...HEAD
+[1.2.0]: https://github.com/xlgmokha/saml-kit/compare/v1.1.0...v1.2.0
+[1.1.0]: https://github.com/xlgmokha/saml-kit/compare/v1.0.31...v1.1.0
+[1.0.31]: https://github.com/xlgmokha/saml-kit/compare/v1.0.30...v1.0.31
+[1.0.30]: https://github.com/xlgmokha/saml-kit/compare/v1.0.29...v1.0.30
+[1.0.29]: https://github.com/xlgmokha/saml-kit/compare/v1.0.28...v1.0.29
+[1.0.28]: https://github.com/xlgmokha/saml-kit/compare/v1.0.27...v1.0.28
+[1.0.27]: https://github.com/xlgmokha/saml-kit/compare/v1.0.26...v1.0.27
+[1.0.26]: https://github.com/xlgmokha/saml-kit/compare/v1.0.25...v1.0.26
+[1.0.25]: https://github.com/xlgmokha/saml-kit/compare/v1.0.24...v1.0.25
+[1.0.24]: https://github.com/xlgmokha/saml-kit/compare/v1.0.23...v1.0.24
+[1.0.23]: https://github.com/xlgmokha/saml-kit/compare/v1.0.22...v1.0.23
+[1.0.22]: https://github.com/xlgmokha/saml-kit/compare/v1.0.21...v1.0.22
+[1.0.21]: https://github.com/xlgmokha/saml-kit/compare/v1.0.20...v1.0.21
+[1.0.20]: https://github.com/xlgmokha/saml-kit/compare/v1.0.19...v1.0.20
+[1.0.19]: https://github.com/xlgmokha/saml-kit/compare/v1.0.18...v1.0.19
+[1.0.18]: https://github.com/xlgmokha/saml-kit/compare/v1.0.17...v1.0.18
+[1.0.17]: https://github.com/xlgmokha/saml-kit/compare/v1.0.16...v1.0.17
+[1.0.16]: https://github.com/xlgmokha/saml-kit/compare/v1.0.15...v1.0.16
+[1.0.15]: https://github.com/xlgmokha/saml-kit/compare/v1.0.14...v1.0.15
+[1.0.14]: https://github.com/xlgmokha/saml-kit/compare/v1.0.13...v1.0.14
+[1.0.13]: https://github.com/xlgmokha/saml-kit/compare/v1.0.12...v1.0.13
+[1.0.12]: https://github.com/xlgmokha/saml-kit/compare/v1.0.11...v1.0.12
+[1.0.11]: https://github.com/xlgmokha/saml-kit/compare/v1.0.10...v1.0.11
+[1.0.10]: https://github.com/xlgmokha/saml-kit/compare/v1.0.9...v1.0.10
+[1.0.9]: https://github.com/xlgmokha/saml-kit/compare/v1.0.8...v1.0.9
+[1.0.8]: https://github.com/xlgmokha/saml-kit/compare/v1.0.7...v1.0.8
+[1.0.7]: https://github.com/xlgmokha/saml-kit/compare/v1.0.6...v1.0.7
+[1.0.6]: https://github.com/xlgmokha/saml-kit/compare/v1.0.5...v1.0.6
+[1.0.5]: https://github.com/xlgmokha/saml-kit/compare/v1.0.4...v1.0.5
+[1.0.4]: https://github.com/xlgmokha/saml-kit/compare/v1.0.3...v1.0.4
+[1.0.3]: https://github.com/xlgmokha/saml-kit/compare/v1.0.2...v1.0.3
+[1.0.2]: https://github.com/xlgmokha/saml-kit/compare/v1.0.1...v1.0.2
+[1.0.1]: https://github.com/xlgmokha/saml-kit/compare/v1.0.0...v1.0.1
+[1.0.0]: https://github.com/xlgmokha/saml-kit/compare/v0.3.6...v1.0.0
+[0.3.6]: https://github.com/xlgmokha/saml-kit/compare/v0.3.5...v0.3.6
+[0.3.5]: https://github.com/xlgmokha/saml-kit/compare/v0.3.4...v0.3.5
+[0.3.4]: https://github.com/xlgmokha/saml-kit/compare/v0.3.3...v0.3.4
+[0.3.3]: https://github.com/xlgmokha/saml-kit/compare/v0.3.2...v0.3.3
+[0.3.2]: https://github.com/xlgmokha/saml-kit/compare/v0.3.1...v0.3.2
+[0.3.1]: https://github.com/xlgmokha/saml-kit/compare/v0.3.0...v0.3.1
+[0.3.0]: https://github.com/xlgmokha/saml-kit/compare/v0.2.18...v0.3.0
+[0.2.18]: https://github.com/xlgmokha/saml-kit/compare/v0.2.17...v0.2.18
+[0.2.17]: https://github.com/xlgmokha/saml-kit/compare/v0.2.16...v0.2.17
+[0.2.16]: https://github.com/xlgmokha/saml-kit/compare/v0.2.15...v0.2.16
+[0.2.15]: https://github.com/xlgmokha/saml-kit/compare/v0.2.14...v0.2.15
+[0.2.14]: https://github.com/xlgmokha/saml-kit/compare/v0.2.13...v0.2.14
+[0.2.13]: https://github.com/xlgmokha/saml-kit/compare/v0.2.12...v0.2.13
+[0.2.12]: https://github.com/xlgmokha/saml-kit/compare/v0.2.11...v0.2.12
+[0.2.11]: https://github.com/xlgmokha/saml-kit/compare/v0.2.10...v0.2.11
+[0.2.10]: https://github.com/xlgmokha/saml-kit/compare/v0.2.9...v0.2.10
+[0.2.9]: https://github.com/xlgmokha/saml-kit/compare/v0.2.8...v0.2.9
+[0.2.8]: https://github.com/xlgmokha/saml-kit/compare/v0.2.7...v0.2.8
+[0.2.7]: https://github.com/xlgmokha/saml-kit/compare/v0.2.6...v0.2.7
+[0.2.6]: https://github.com/xlgmokha/saml-kit/compare/v0.2.5...v0.2.6
+[0.2.5]: https://github.com/xlgmokha/saml-kit/compare/v0.2.4...v0.2.5
+[0.2.4]: https://github.com/xlgmokha/saml-kit/compare/v0.2.3...v0.2.4
+[0.2.3]: https://github.com/xlgmokha/saml-kit/compare/v0.2.2...v0.2.3
+[0.2.2]: https://github.com/xlgmokha/saml-kit/compare/v0.2.1...v0.2.2
+[0.2.1]: https://github.com/xlgmokha/saml-kit/compare/v0.1.0...v0.2.1

data/Gemfile.lock

@@ -0,0 +1,128 @@
+PATH
+  remote: .
+  specs:
+    saml-kit (1.2.0)
+      activemodel (~> 5.1)
+      net-hippie (~> 0.1)
+      xml-kit (~> 0.4)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    activemodel (5.2.4.4)
+      activesupport (= 5.2.4.4)
+    activesupport (5.2.4.4)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 0.7, < 2)
+      minitest (~> 5.1)
+      tzinfo (~> 1.1)
+    addressable (2.7.0)
+      public_suffix (>= 2.0.2, < 5.0)
+    ast (2.4.2)
+    benchmark-malloc (0.2.0)
+    benchmark-perf (0.6.0)
+    benchmark-trend (0.4.0)
+    builder (3.2.4)
+    bundler-audit (0.7.0.1)
+      bundler (>= 1.2.0, < 3)
+      thor (>= 0.18, < 2)
+    concurrent-ruby (1.1.8)
+    crack (0.4.5)
+      rexml
+    diff-lcs (1.4.4)
+    docile (1.3.5)
+    ffaker (2.17.0)
+    hashdiff (1.0.1)
+    i18n (1.8.8)
+      concurrent-ruby (~> 1.0)
+    minitest (5.14.3)
+    net-hippie (0.3.2)
+    nokogiri (1.11.1-x86_64-linux)
+      racc (~> 1.4)
+    parallel (1.20.1)
+    parser (3.0.0.0)
+      ast (~> 2.4.1)
+    public_suffix (4.0.6)
+    racc (1.5.2)
+    rainbow (3.0.0)
+    rake (13.0.3)
+    regexp_parser (2.0.3)
+    rexml (3.2.4)
+    rspec (3.10.0)
+      rspec-core (~> 3.10.0)
+      rspec-expectations (~> 3.10.0)
+      rspec-mocks (~> 3.10.0)
+    rspec-benchmark (0.6.0)
+      benchmark-malloc (~> 0.2)
+      benchmark-perf (~> 0.6)
+      benchmark-trend (~> 0.4)
+      rspec (>= 3.0)
+    rspec-core (3.10.1)
+      rspec-support (~> 3.10.0)
+    rspec-expectations (3.10.1)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.10.0)
+    rspec-mocks (3.10.2)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.10.0)
+    rspec-support (3.10.2)
+    rubocop (0.93.1)
+      parallel (~> 1.10)
+      parser (>= 2.7.1.5)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8)
+      rexml
+      rubocop-ast (>= 0.6.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 1.4.0, < 2.0)
+    rubocop-ast (1.4.1)
+      parser (>= 2.7.1.5)
+    rubocop-rspec (1.44.1)
+      rubocop (~> 0.87)
+      rubocop-ast (>= 0.7.1)
+    ruby-prof (1.4.2)
+    ruby-progressbar (1.11.0)
+    simplecov (0.21.2)
+      docile (~> 1.1)
+      simplecov-html (~> 0.11)
+      simplecov_json_formatter (~> 0.1)
+    simplecov-html (0.12.3)
+    simplecov_json_formatter (0.1.2)
+    thor (1.1.0)
+    thread_safe (0.3.6)
+    tilt (2.0.10)
+    tzinfo (1.2.9)
+      thread_safe (~> 0.1)
+    unicode-display_width (1.7.0)
+    webmock (3.11.2)
+      addressable (>= 2.3.6)
+      crack (>= 0.3.2)
+      hashdiff (>= 0.4.0, < 2.0.0)
+    xml-kit (0.5.0)
+      activemodel (>= 4.2.0)
+      builder (~> 3.2)
+      nokogiri (~> 1.10)
+      tilt (>= 1.4.1)
+      xmldsig (~> 0.6)
+    xmldsig (0.6.6)
+      nokogiri (>= 1.6.8, < 2.0.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 2.0)
+  bundler-audit (~> 0.6)
+  ffaker (~> 2.7)
+  rake (~> 13.0)
+  rspec (~> 3.0)
+  rspec-benchmark (~> 0.3)
+  rubocop (~> 0.52)
+  rubocop-rspec (~> 1.22)
+  ruby-prof
+  saml-kit!
+  simplecov (~> 0.15)
+  webmock (~> 3.1)
+
+BUNDLED WITH
+   2.1.4

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2017 mo
+Copyright (c) 2017 mo khan
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -1,17 +1,13 @@
-![SAML-Kit](https://github.com/saml-kit/saml-kit/raw/master/spec/examples/saml-kit.gif)
+![SAML-Kit](https://github.com/xlgmokha/saml-kit/raw/main/spec/examples/saml-kit.gif)
 
 *Logo courtesy of [@speasley](https://github.com/speasley)*
 
-[![Build Status](https://travis-ci.org/saml-kit/saml-kit.svg?branch=master)](https://travis-ci.org/saml-kit/saml-kit)
-[![Code Climate](https://codeclimate.com/github/saml-kit/saml-kit.svg)](https://codeclimate.com/github/saml-kit/saml-kit)
 [![Gem Version](https://badge.fury.io/rb/saml-kit.svg)](https://rubygems.org/gems/saml-kit)
-[![Security](https://hakiri.io/github/saml-kit/saml-kit/master.svg)](https://hakiri.io/github/saml-kit/saml-kit/master)
-[![Test Coverage](https://api.codeclimate.com/v1/badges/32583dc119cf05ff4080/test_coverage)](https://codeclimate.com/github/saml-kit/saml-kit/test_coverage)
 
 Saml::Kit is a library with the purpose of creating and consuming SAML
 documents. It supports the HTTP Post and HTTP Redirect bindings. It can
 create Service Provider Metadata, Identity Provider Metadata,
-AuthnRequest, Response, LogoutRequest, LogoutResponse documents.  
+AuthnRequest, Response, LogoutRequest, LogoutResponse documents.
 It also supports generating signed and encrypted assertions.
 
 ## Installation
@@ -249,13 +245,13 @@ puts [url, saml_params].inspect
 
 ## Development
 
-After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `bin/test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
 
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
 ## Contributing
 
-Bug reports and pull requests are welcome on Github at https://github.com/saml-kit/saml-kit.
+Bug reports and pull requests are welcome on Github at https://github.com/xlgmokha/saml-kit.
 
 ## License
 

data/Rakefile

@@ -9,5 +9,4 @@ RSpec::Core::RakeTask.new(:spec)
 RuboCop::RakeTask.new(:rubocop)
 Bundler::Audit::Task.new
 
-task lint: [:rubocop, 'bundle:audit']
 task default: :spec

data/lib/saml/kit/assertion.rb

@@ -106,7 +106,7 @@ module Saml
         return unless @encrypted
 
         @to_nokogiri = decryptor.decrypt_node(encrypted_assertion)
-      rescue Xml::Kit::DecryptionError => error
+      rescue StandardError => error
         @cannot_decrypt = true
         Saml::Kit.logger.error(error)
       end
@@ -114,13 +114,13 @@ module Saml
       def must_match_issuer
         return if audiences.empty? || audiences.include?(configuration.entity_id)
 
-        errors[:audience] << error_message(:must_match_issuer)
+        errors.add(:audience, error_message(:must_match_issuer))
       end
 
       def must_be_active_session
         return if active?
 
-        errors[:base] << error_message(:expired)
+        errors.add(:base, error_message(:expired))
       end
 
       def must_have_valid_signature

data/lib/saml/kit/authentication_request.rb

@@ -47,6 +47,11 @@ module Saml
         at_xpath('./*/@AssertionConsumerServiceURL').try(:value)
       end
 
+      # Returns the ForceAuthn attribute as a boolean.
+      def force_authn
+        at_xpath('./*/@ForceAuthn').try(:value) == 'true'
+      end
+
       def name_id_format
         name_id_policy
       end

data/lib/saml/kit/bindings.rb

@@ -11,10 +11,10 @@ module Saml
     # the different SAML bindings that are
     # supported by this gem.
     module Bindings
-      BINDINGS_2_0 = 'urn:oasis:names:tc:SAML:2.0:bindings'.freeze
-      HTTP_ARTIFACT = "#{BINDINGS_2_0}:HTTP-Artifact".freeze
-      HTTP_POST = "#{BINDINGS_2_0}:HTTP-POST".freeze
-      HTTP_REDIRECT = "#{BINDINGS_2_0}:HTTP-Redirect".freeze
+      BINDINGS_2_0 = 'urn:oasis:names:tc:SAML:2.0:bindings'
+      HTTP_ARTIFACT = "#{BINDINGS_2_0}:HTTP-Artifact"
+      HTTP_POST = "#{BINDINGS_2_0}:HTTP-POST"
+      HTTP_REDIRECT = "#{BINDINGS_2_0}:HTTP-Redirect"
       ALL = {
         http_post: HTTP_POST,
         http_redirect: HTTP_REDIRECT,

data/lib/saml/kit/builders/authentication_request.rb

@@ -10,6 +10,7 @@ module Saml
         attr_accessor :id, :now, :issuer, :assertion_consumer_service_url
         attr_accessor :name_id_format, :destination
         attr_accessor :version
+        attr_accessor :force_authn
         attr_reader :configuration
 
         def initialize(configuration: Saml::Kit.configuration)
@@ -36,10 +37,8 @@ module Saml
             IssueInstant: now.utc.iso8601,
             Destination: destination,
           }
-          if assertion_consumer_service_url.present?
-            options[:AssertionConsumerServiceURL] =
-              assertion_consumer_service_url
-          end
+          options[:ForceAuthn] = force_authn unless force_authn.nil?
+          options[:AssertionConsumerServiceURL] = assertion_consumer_service_url if assertion_consumer_service_url.present?
           options
         end
       end

data/lib/saml/kit/builders/templates/encrypted_assertion.builder

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 xml.EncryptedAssertion xmlns: Saml::Kit::Namespaces::ASSERTION do
-  encryption_for(xml: xml) do |xml|
+  encrypt_data_for(xml: xml) do |xml|
     render assertion, xml: xml
   end
 end

data/lib/saml/kit/builders/templates/logout_request.builder

@@ -2,7 +2,7 @@
 
 xml.instruct!
 xml.LogoutRequest logout_request_options do
-  xml.Issuer({ xmlns: Saml::Kit::Namespaces::ASSERTION }, issuer)
+  xml.Issuer(issuer, xmlns: Saml::Kit::Namespaces::ASSERTION)
   signature_for(reference_id: id, xml: xml)
   xml.NameID name_id_options, user.name_id_for(name_id_format)
 end

data/lib/saml/kit/concerns/respondable.rb

@@ -45,7 +45,7 @@ module Saml
         return if request_id.nil?
         return if in_response_to == request_id
 
-        errors[:in_response_to] << error_message(:invalid_response_to)
+        errors.add(:in_response_to, error_message(:invalid_response_to))
       end
     end
   end

data/lib/saml/kit/concerns/trustable.rb

@@ -54,7 +54,7 @@ module Saml
 
         signature.valid?
         signature.errors.each do |attribute, error|
-          errors[attribute] << error
+          errors.add(attribute, error)
         end
       end
 
@@ -62,14 +62,14 @@ module Saml
         return unless expected_type?
         return if provider.present?
 
-        errors[:provider] << error_message(:unregistered)
+        errors.add(:provider, error_message(:unregistered))
       end
 
       def must_be_trusted
         return if trusted?
         return if provider.present? && !signed?
 
-        errors[:fingerprint] << error_message(:invalid_fingerprint)
+        errors.add(:fingerprint, error_message(:invalid_fingerprint))
       end
     end
   end

data/lib/saml/kit/concerns/xsd_validatable.rb

@@ -20,7 +20,7 @@ module Saml
         Dir.chdir(File.dirname(xsd)) do
           xsd = Nokogiri::XML::Schema(IO.read(xsd))
           xsd.validate(to_nokogiri.document).each do |error|
-            errors[:base] << error.message
+            errors.add(:base, error.message)
           end
         end
       end

data/lib/saml/kit/deprecated/metadata.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module Saml
   module Kit
     class Metadata

data/lib/saml/kit/document.rb

@@ -101,7 +101,7 @@ module Saml
       end
 
       def must_be_expected_type
-        errors[:base] << error_message(:invalid) unless expected_type?
+        errors.add(:base, error_message(:invalid)) unless expected_type?
       end
 
       def expected_type?
@@ -112,7 +112,7 @@ module Saml
         return unless expected_type?
         return if version == '2.0'
 
-        errors[:version] << error_message(:invalid_version)
+        errors.add(:version, error_message(:invalid_version))
       end
     end
   end

data/lib/saml/kit/invalid_document.rb

@@ -7,7 +7,7 @@ module Saml
     # {include:file:spec/saml/kit/invalid_document_spec.rb}
     class InvalidDocument < Document
       validate do |model|
-        model.errors[:base] << model.error_message(:invalid)
+        model.errors.add(:base, model.error_message(:invalid))
       end
 
       def initialize(xml, *)

data/lib/saml/kit/metadata.rb

@@ -182,7 +182,7 @@ module Saml
       end
 
       def must_contain_descriptor
-        errors[:base] << error_message(:invalid) unless metadata
+        errors.add(:base, error_message(:invalid)) unless metadata
       end
 
       def must_match_xsd
@@ -193,7 +193,7 @@ module Saml
         return if !signature.present? || signature.valid?
 
         signature.errors.each do |attribute, error|
-          errors[attribute] << error
+          errors.add(attribute, error)
         end
       end
     end

data/lib/saml/kit/namespaces.rb

@@ -3,33 +3,33 @@
 module Saml
   module Kit
     module Namespaces
-      SAML_2_0 = 'urn:oasis:names:tc:SAML:2.0'.freeze
-      SAML_1_1 = 'urn:oasis:names:tc:SAML:1.1'.freeze
-      ATTR_NAME_FORMAT = "#{SAML_2_0}:attrname-format".freeze
-      NAME_ID_FORMAT_1_1 = "#{SAML_1_1}:nameid-format".freeze
-      NAME_ID_FORMAT_2_0 = "#{SAML_2_0}:nameid-format".freeze
-      STATUS = "#{SAML_2_0}:status".freeze
+      SAML_2_0 = 'urn:oasis:names:tc:SAML:2.0'
+      SAML_1_1 = 'urn:oasis:names:tc:SAML:1.1'
+      ATTR_NAME_FORMAT = "#{SAML_2_0}:attrname-format"
+      NAME_ID_FORMAT_1_1 = "#{SAML_1_1}:nameid-format"
+      NAME_ID_FORMAT_2_0 = "#{SAML_2_0}:nameid-format"
+      STATUS = "#{SAML_2_0}:status"
 
-      ASSERTION = "#{SAML_2_0}:assertion".freeze
-      ATTR_SPLAT = "#{ATTR_NAME_FORMAT}:*".freeze
-      BASIC = "#{ATTR_NAME_FORMAT}:basic".freeze
-      BEARER = "#{SAML_2_0}:cm:bearer".freeze
-      EMAIL_ADDRESS = "#{NAME_ID_FORMAT_1_1}:emailAddress".freeze
-      INVALID_NAME_ID_POLICY = "#{STATUS}:InvalidNameIDPolicy".freeze
-      METADATA = "#{SAML_2_0}:metadata".freeze
-      PASSWORD = "#{SAML_2_0}:ac:classes:Password".freeze
+      ASSERTION = "#{SAML_2_0}:assertion"
+      ATTR_SPLAT = "#{ATTR_NAME_FORMAT}:*"
+      BASIC = "#{ATTR_NAME_FORMAT}:basic"
+      BEARER = "#{SAML_2_0}:cm:bearer"
+      EMAIL_ADDRESS = "#{NAME_ID_FORMAT_1_1}:emailAddress"
+      INVALID_NAME_ID_POLICY = "#{STATUS}:InvalidNameIDPolicy"
+      METADATA = "#{SAML_2_0}:metadata"
+      PASSWORD = "#{SAML_2_0}:ac:classes:Password"
       PASSWORD_PROTECTED =
-        "#{SAML_2_0}:ac:classes:PasswordProtectedTransport".freeze
-      PERSISTENT = "#{NAME_ID_FORMAT_2_0}:persistent".freeze
-      PROTOCOL = "#{SAML_2_0}:protocol".freeze
-      REQUESTER_ERROR = "#{STATUS}:Requester".freeze
-      RESPONDER_ERROR = "#{STATUS}:Responder".freeze
-      SUCCESS = "#{STATUS}:Success".freeze
-      TRANSIENT = "#{NAME_ID_FORMAT_2_0}:transient".freeze
-      UNSPECIFIED = "#{SAML_2_0}:consent:unspecified".freeze
-      UNSPECIFIED_NAMEID = "#{NAME_ID_FORMAT_1_1}:unspecified".freeze
-      URI = "#{ATTR_NAME_FORMAT}:uri".freeze
-      VERSION_MISMATCH_ERROR = "#{STATUS}:VersionMismatch".freeze
+        "#{SAML_2_0}:ac:classes:PasswordProtectedTransport"
+      PERSISTENT = "#{NAME_ID_FORMAT_2_0}:persistent"
+      PROTOCOL = "#{SAML_2_0}:protocol"
+      REQUESTER_ERROR = "#{STATUS}:Requester"
+      RESPONDER_ERROR = "#{STATUS}:Responder"
+      SUCCESS = "#{STATUS}:Success"
+      TRANSIENT = "#{NAME_ID_FORMAT_2_0}:transient"
+      UNSPECIFIED = "#{SAML_2_0}:consent:unspecified"
+      UNSPECIFIED_NAMEID = "#{NAME_ID_FORMAT_1_1}:unspecified"
+      URI = "#{ATTR_NAME_FORMAT}:uri"
+      VERSION_MISMATCH_ERROR = "#{STATUS}:VersionMismatch"
     end
   end
 end

data/lib/saml/kit/null_assertion.rb

@@ -53,7 +53,7 @@ module Saml
       end
 
       def invalid
-        errors[:assertion].push(error_message(:invalid))
+        errors.add(:assertion, error_message(:invalid))
       end
 
       def name

data/lib/saml/kit/organization.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module Saml
   module Kit
     class Organization

data/lib/saml/kit/response.rb

@@ -45,14 +45,14 @@ module Saml
         assertion.valid?
         assertion.errors.each do |attribute, error|
           attribute = :assertion if attribute == :base
-          errors[attribute] << error
+          errors.add(attribute, error)
         end
       end
 
       def must_contain_single_assertion
         return if assertion_nodes.count <= 1
 
-        errors[:base] << error_message(:must_contain_single_assertion)
+        errors.add(:base, error_message(:must_contain_single_assertion))
       end
 
       def assertion_nodes

data/lib/saml/kit/signature.rb

@@ -105,7 +105,7 @@ module Saml
         dsignature.errors.each do |attribute|
           errors.add(attribute, error_message(attribute))
         end
-      rescue Xmldsig::SchemaError => error
+      rescue StandardError => error
         errors.add(:base, error.message)
       end
 

data/lib/saml/kit/version.rb

@@ -2,6 +2,6 @@
 
 module Saml
   module Kit
-    VERSION = '1.0.28'.freeze
+    VERSION = '1.2.0'
   end
 end

data/saml-kit.gemspec

@@ -12,9 +12,9 @@ Gem::Specification.new do |spec|
 
   spec.summary       = 'A simple toolkit for working with SAML.'
   spec.description   = 'A simple toolkit for working with SAML.'
-  spec.homepage      = 'https://github.com/saml-kit/saml-kit'
+  spec.homepage      = 'https://github.com/xlgmokha/saml-kit'
   spec.license       = 'MIT'
-  spec.required_ruby_version = '>= 2.2.0'
+  spec.required_ruby_version = '~> 2.5'
 
   spec.files = `git ls-files -z`.split("\x0").reject do |f|
     (
@@ -28,13 +28,13 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'activemodel', '>= 4.2.0'
-  spec.add_dependency 'net-hippie', '~> 0.1.8'
-  spec.add_dependency 'xml-kit', '>= 0.1.13', '<= 1.0.0'
-  spec.add_development_dependency 'bundler', '~> 1.15'
+  spec.add_dependency 'activemodel', '~> 5.1'
+  spec.add_dependency 'net-hippie', '~> 0.1'
+  spec.add_dependency 'xml-kit', '~> 0.4'
+  spec.add_development_dependency 'bundler', '~> 2.0'
   spec.add_development_dependency 'bundler-audit', '~> 0.6'
   spec.add_development_dependency 'ffaker', '~> 2.7'
-  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rake', '~> 13.0'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rspec-benchmark', '~> 0.3'
   spec.add_development_dependency 'rubocop', '~> 0.52'

metadata

@@ -1,77 +1,71 @@
 --- !ruby/object:Gem::Specification
 name: saml-kit
 version: !ruby/object:Gem::Version
-  version: 1.0.28
+  version: 1.2.0
 platform: ruby
 authors:
 - mo khan
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-12-04 00:00:00.000000000 Z
+date: 2021-02-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 4.2.0
+        version: '5.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 4.2.0
+        version: '5.1'
 - !ruby/object:Gem::Dependency
   name: net-hippie
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.8
+        version: '0.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.8
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: xml-kit
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.1.13
-    - - "<="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '0.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.1.13
-    - - "<="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '0.4'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.15'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.15'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -106,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -222,7 +216,9 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - Gemfile
+- Gemfile.lock
 - LICENSE.txt
 - README.md
 - Rakefile
@@ -321,7 +317,7 @@ files:
 - spec/examples/response_spec.rb
 - spec/examples/saml-kit.gif
 - spec/examples/service_provider_metadata_spec.rb
-homepage: https://github.com/saml-kit/saml-kit
+homepage: https://github.com/xlgmokha/saml-kit
 licenses:
 - MIT
 metadata:
@@ -332,17 +328,16 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - "~>"
     - !ruby/object:Gem::Version
-      version: 2.2.0
+      version: '2.5'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: A simple toolkit for working with SAML.