saml-kit 1.4.0 → 1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cf6c86073d43c4c6b2f55aa091d71e1fb9e58d823e1e25936ba598c9db8c2304
-  data.tar.gz: 1896cf94e32bd938a3b4c3ae96c5e5b88a1433c8988866fa6d12e64a035812d5
+  metadata.gz: ce0f7fc307eddfbefa35cbf90a0efba6d38782e51c20e7aa16144e774d6a97d8
+  data.tar.gz: fd22e8f11f3b57d8dd7a305367362874eb5073d0b5ee1ffb0ae490a5a5a8fe43
 SHA512:
-  metadata.gz: 1287fa37a0daaf27d591dcdfd03241897ef7b8773c4d1e9a4cab96c9940b5b475e54691062e76916e44e030c494aa34f32fa5a3496d295366f8a16b01e5333c2
-  data.tar.gz: 10b7edcc0ed623d9a84fbe03926306e0d224eb20fde850ca2900086882f518b77029952f2f35ca33a33b80412513c0669c6a1296d72eaecb12f9bef38afe9e80
+  metadata.gz: 58984c2369ed1dc697d634cdde413d3f780de83759bcefd5b7354d1bbbf7ec4cc477ef6821d67915a00bc6b92c8477c2e4dfa991d83727fb1525bcfeb4b114c5
+  data.tar.gz: c7c3b3bb94cff25d9d9bb17b2d0e66600763cd302053f0182a261cba4a704af561e6f85167dd330ef2f4deef5c7e06e8eda19858749889c9f8859f24d03798c1

data/CHANGELOG.md

@@ -1,4 +1,4 @@
-Version 1.4.0
+Version 1.4.1
 
 # Changelog
 All notable changes to this project will be documented in this file.
@@ -8,6 +8,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.4.1] - 2026-08-14
+### Changed
+- fix: decode encoded signature
+
 ## [1.4.0] - 2025-03-26
 ### Added
 - Add support for converting `Assertion` xml to `Saml::Document`
@@ -106,7 +110,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Removed
 - Removed optional SessionNotOnOrAfter attribute from AuthnStatement.
 
-[Unreleased]: https://github.com/xlgmokha/saml-kit/compare/v1.4.0...HEAD
+[Unreleased]: https://github.com/xlgmokha/saml-kit/compare/v1.4.1...HEAD
+[1.4.1]: https://github.com/xlgmokha/saml-kit/compare/v1.4.0...v1.4.1
 [1.4.0]: https://github.com/xlgmokha/saml-kit/compare/v1.3.0...v1.4.0
 [1.3.0]: https://github.com/xlgmokha/saml-kit/compare/v1.2.0...v1.3.0
 [1.2.0]: https://github.com/xlgmokha/saml-kit/compare/v1.1.0...v1.2.0

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    saml-kit (1.4.0)
+    saml-kit (1.4.1)
       activemodel (>= 5.1)
       base64 (~> 0.1)
       cgi (~> 0.1)
@@ -16,66 +16,84 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    activemodel (7.2.2.1)
-      activesupport (= 7.2.2.1)
-    activesupport (7.2.2.1)
+    activemodel (8.1.3.1)
+      activesupport (= 8.1.3.1)
+    activesupport (8.1.3.1)
       base64
-      benchmark (>= 0.3)
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.3.1)
       connection_pool (>= 2.2.5)
       drb
       i18n (>= 1.6, < 2)
+      json
       logger (>= 1.4.2)
       minitest (>= 5.1)
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
-    addressable (2.8.7)
-      public_suffix (>= 2.0.2, < 7.0)
+      uri (>= 0.13.1)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.3)
-    base64 (0.2.0)
-    benchmark (0.4.0)
+    base64 (0.3.0)
     benchmark-malloc (0.2.0)
     benchmark-perf (0.6.0)
     benchmark-trend (0.4.0)
-    bigdecimal (3.1.9)
+    bigdecimal (4.1.2)
     builder (3.3.0)
     bundler-audit (0.9.2)
       bundler (>= 1.2.0, < 3)
       thor (~> 1.0)
-    cgi (0.4.2)
-    concurrent-ruby (1.3.5)
-    connection_pool (2.5.0)
+    cgi (0.5.2)
+    concurrent-ruby (1.3.8)
+    connection_pool (3.0.2)
     crack (1.0.0)
       bigdecimal
       rexml
     date (3.4.1)
     diff-lcs (1.6.1)
     docile (1.4.1)
-    drb (2.2.1)
-    erb (4.0.4)
+    drb (2.2.3)
+    erb (4.0.4.1)
       cgi (>= 0.3.3)
     ffaker (2.24.0)
     forwardable (1.3.3)
     hashdiff (1.1.2)
-    i18n (1.14.7)
+    i18n (1.15.2)
       concurrent-ruby (~> 1.0)
     io-console (0.8.0)
     irb (1.15.1)
       pp (>= 0.6.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
-    json (2.10.2)
+    json (2.21.2)
     language_server-protocol (3.17.0.4)
     lint_roller (1.1.0)
-    logger (1.6.6)
-    mini_portile2 (2.8.8)
-    minitest (5.25.5)
+    logger (1.7.0)
+    mini_portile2 (2.8.9)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
     net-hippie (1.2.0)
       logger (~> 1.0)
-    nokogiri (1.18.6)
+    nokogiri (1.19.4)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
+    nokogiri (1.19.4-aarch64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.4-aarch64-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.4-arm-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.4-arm-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.4-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.4-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.4-x86_64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.4-x86_64-linux-musl)
+      racc (~> 1.4)
     parallel (1.26.3)
     parser (3.3.7.3)
       ast (~> 2.4.1)
@@ -83,11 +101,11 @@ GEM
     pp (0.6.2)
       prettyprint
     prettyprint (0.2.0)
-    prism (1.4.0)
+    prism (1.9.0)
     psych (5.2.3)
       date
       stringio
-    public_suffix (6.0.1)
+    public_suffix (7.0.5)
     racc (1.8.1)
     rainbow (3.1.1)
     rake (13.2.1)
@@ -96,7 +114,7 @@ GEM
     regexp_parser (2.10.0)
     reline (0.6.0)
       io-console (~> 0.5)
-    rexml (3.4.1)
+    rexml (3.4.4)
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
@@ -141,15 +159,15 @@ GEM
       simplecov_json_formatter (~> 0.1)
     simplecov-html (0.13.1)
     simplecov_json_formatter (0.1.4)
-    stringio (3.1.6)
+    stringio (3.2.0)
     thor (1.3.2)
     tilt (2.6.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (3.1.4)
       unicode-emoji (~> 4.0, >= 4.0.4)
-    unicode-emoji (4.0.4)
-    uri (1.0.3)
+    unicode-emoji (4.2.0)
+    uri (1.1.1)
     webmock (3.25.1)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
@@ -164,7 +182,15 @@ GEM
       nokogiri (>= 1.6.8, < 2.0.0)
 
 PLATFORMS
+  aarch64-linux-gnu
+  aarch64-linux-musl
+  arm-linux-gnu
+  arm-linux-musl
+  arm64-darwin
   ruby
+  x86_64-darwin
+  x86_64-linux-gnu
+  x86_64-linux-musl
 
 DEPENDENCIES
   bundler (~> 2.0)

data/lib/saml/kit/bindings/http_redirect.rb

@@ -49,13 +49,24 @@ module Saml
 
           return document.signature_verified! if provider.verify(
             algorithm_for(params[:SigAlg]),
-            decode(signature),
+            decode(signature_from(signature)),
             canonicalize(params)
           )
 
           raise ArgumentError, 'Invalid Signature'
         end
 
+        # The signature arrives percent encoded from any conformant peer, but
+        # versions of this library before 1.4.1 emitted it raw. A percent sign
+        # is not in the base64 alphabet, so its presence distinguishes the two
+        # without a guess. Unescaping unconditionally would corrupt a raw
+        # signature, because CGI.unescape turns + into a space.
+        #
+        # @param signature [String] the Signature query parameter.
+        def signature_from(signature)
+          signature.include?('%') ? unescape(signature) : signature
+        end
+
         def canonicalize(params)
           %i[SAMLRequest SAMLResponse RelayState SigAlg].map do |key|
             value = params[key]

data/lib/saml/kit/bindings/url_builder.rb

@@ -21,7 +21,7 @@ module Saml
           destination = document.destination
           if configuration.sign?
             payload = canonicalize(document, relay_state)
-            "#{destination}?#{payload}&Signature=#{signature_for(payload)}"
+            "#{destination}?#{payload}&Signature=#{escape(signature_for(payload))}"
           else
             "#{destination}?" + to_query_string(
               document.query_string_parameter => serialize(document.to_xml),

data/lib/saml/kit/version.rb

@@ -2,6 +2,6 @@
 
 module Saml
   module Kit
-    VERSION = '1.4.0'
+    VERSION = '1.4.1'
   end
 end

data/saml-kit.gemspec

@@ -14,7 +14,7 @@ Gem::Specification.new do |spec|
   spec.description   = 'A simple toolkit for working with SAML.'
   spec.homepage      = 'https://github.com/xlgmokha/saml-kit'
   spec.license       = 'MIT'
-  spec.required_ruby_version = '>= 3.1.0'
+  spec.required_ruby_version = '>= 3.2.0'
 
   spec.files = `git ls-files -z`.split("\x0").reject do |f|
     (

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: saml-kit
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.4.1
 platform: ruby
 authors:
 - mo khan
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-03-26 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemodel
@@ -448,7 +447,6 @@ licenses:
 - MIT
 metadata:
   yard.run: yri
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -456,15 +454,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.0
+      version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.27
-signing_key:
+rubygems_version: 4.0.18
 specification_version: 4
 summary: A simple toolkit for working with SAML.
 test_files: []