saml-kit 1.0.4 → 1.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a7e1e99c8973fbde439b32b773786eab01bdd0fa9ed35dd80bf670f82ac49017
-  data.tar.gz: 952944cc544a83832b607a4eb61160a1f62cad07c8547130dfdd2dee00a99d21
+  metadata.gz: b2492d44c647c9dad4c879ad4c4ee0386a1ac47064ee1bd32361fd78a0dae463
+  data.tar.gz: 04d41916481b1b6c85ac10805bdf30f40fd516fa684575302f0bc5e0c8b282c9
 SHA512:
-  metadata.gz: 71edf453a7ad88a96d211e47a14935cdbb246edbd3b82b5ecf4757a1b5894a379222051f3b9bb78f310dc3485fb9243571535b3f96a61c4da3babf59e6530886
-  data.tar.gz: 80278ceca2cd260b9f6f60ba441bc493b72778c3a436b3cc671601bd33d2b254facb5a80a9665d8d73b8347e36f75b3e4f8a2958836f71de66e11e676d3d9bc3
+  metadata.gz: 5d0cfb62a014c2d7daa43f0f1018d440063c4ef6c4bfe011c11fccf59d7872a0939baa9451095b4237682c8c472d0bd54748a96d82faab0d7e8ef5a47b3cff1e
+  data.tar.gz: 2538d1eac3597a1c53b0d4b777cf93770e19b25fbaf8a6590ad0e926aec0d6f8e038cfa21b3247e53818f0c3c7d4f07f2c7d73f8c24060c35ca955a138110315

data/lib/saml/kit/assertion.rb

@@ -36,7 +36,8 @@ module Saml
       end
 
       def active?(now = Time.current)
-        now > configuration.clock_drift.seconds.before(started_at) && !expired?
+        drifted_started_at = started_at - configuration.clock_drift.to_i.seconds
+        now > drifted_started_at && !expired?
       end
 
       def attributes

data/lib/saml/kit/default_registry.rb

@@ -90,6 +90,7 @@ module Saml
           http.read_timeout = 30
           http.use_ssl = uri.is_a?(URI::HTTPS)
           http.verify_mode = OpenSSL::SSL::VERIFY_NONE unless verify_ssl
+          http.set_debug_output(Saml::Kit.logger)
           http
         end
       end

data/lib/saml/kit/namespaces.rb

@@ -1,25 +1,32 @@
 module Saml
   module Kit
     module Namespaces
-      ASSERTION = "urn:oasis:names:tc:SAML:2.0:assertion"
-      ATTR_SPLAT = "urn:oasis:names:tc:SAML:2.0:attrname-format:*"
-      BASIC = "urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
-      BEARER = "urn:oasis:names:tc:SAML:2.0:cm:bearer"
-      EMAIL_ADDRESS = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
-      INVALID_NAME_ID_POLICY = "urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy"
-      METADATA = "urn:oasis:names:tc:SAML:2.0:metadata"
-      PASSWORD = "urn:oasis:names:tc:SAML:2.0:ac:classes:Password"
-      PASSWORD_PROTECTED = "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"
-      PERSISTENT = "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
-      PROTOCOL = "urn:oasis:names:tc:SAML:2.0:protocol"
-      REQUESTER_ERROR = "urn:oasis:names:tc:SAML:2.0:status:Requester"
-      RESPONDER_ERROR = "urn:oasis:names:tc:SAML:2.0:status:Responder"
-      SUCCESS = "urn:oasis:names:tc:SAML:2.0:status:Success"
-      TRANSIENT = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
-      UNSPECIFIED = "urn:oasis:names:tc:SAML:2.0:consent:unspecified"
-      UNSPECIFIED_NAMEID = "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
-      URI = "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
-      VERSION_MISMATCH_ERROR = "urn:oasis:names:tc:SAML:2.0:status:VersionMismatch"
+      SAML_2_0 = "urn:oasis:names:tc:SAML:2.0"
+      SAML_1_1 = "urn:oasis:names:tc:SAML:1.1"
+      ATTR_NAME_FORMAT = "#{SAML_2_0}:attrname-format"
+      NAME_ID_FORMAT_1_1 = "#{SAML_1_1}:nameid-format"
+      NAME_ID_FORMAT_2_0 = "#{SAML_2_0}:nameid-format"
+      STATUS = "#{SAML_2_0}:status"
+
+      ASSERTION = "#{SAML_2_0}:assertion"
+      ATTR_SPLAT = "#{ATTR_NAME_FORMAT}:*"
+      BASIC = "#{ATTR_NAME_FORMAT}:basic"
+      BEARER = "#{SAML_2_0}:cm:bearer"
+      EMAIL_ADDRESS = "#{NAME_ID_FORMAT_1_1}:emailAddress"
+      INVALID_NAME_ID_POLICY = "#{STATUS}:InvalidNameIDPolicy"
+      METADATA = "#{SAML_2_0}:metadata"
+      PASSWORD = "#{SAML_2_0}:ac:classes:Password"
+      PASSWORD_PROTECTED = "#{SAML_2_0}:ac:classes:PasswordProtectedTransport"
+      PERSISTENT = "#{NAME_ID_FORMAT_2_0}:persistent"
+      PROTOCOL = "#{SAML_2_0}:protocol"
+      REQUESTER_ERROR = "#{STATUS}:Requester"
+      RESPONDER_ERROR = "#{STATUS}:Responder"
+      SUCCESS = "#{STATUS}:Success"
+      TRANSIENT = "#{NAME_ID_FORMAT_2_0}:transient"
+      UNSPECIFIED = "#{SAML_2_0}:consent:unspecified"
+      UNSPECIFIED_NAMEID = "#{NAME_ID_FORMAT_1_1}:unspecified"
+      URI = "#{ATTR_NAME_FORMAT}:uri"
+      VERSION_MISMATCH_ERROR = "#{STATUS}:VersionMismatch"
     end
   end
 end

data/lib/saml/kit/signature.rb

@@ -1,6 +1,8 @@
 module Saml
   module Kit
     class Signature
+      include ActiveModel::Validations
+
       def initialize(xml_hash)
         @xml_hash = xml_hash
       end

data/lib/saml/kit/version.rb

@@ -1,5 +1,5 @@
 module Saml
   module Kit
-    VERSION = "1.0.4"
+    VERSION = "1.0.5"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: saml-kit
 version: !ruby/object:Gem::Version
-  version: 1.0.4
+  version: 1.0.5
 platform: ruby
 authors:
 - mo khan
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-02-09 00:00:00.000000000 Z
+date: 2018-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemodel
@@ -246,7 +246,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.3
+rubygems_version: 2.7.5
 signing_key: 
 specification_version: 4
 summary: A simple toolkit for working with SAML.