RubyGems - saml2 - Versions diffs - 3.1.2 → 3.1.3 - Mend

saml2 3.1.2 → 3.1.3

Files changed (100) hide show

checksums.yaml +4 -4
data/Rakefile +6 -4
data/exe/bulk_verify_responses +94 -0
data/lib/saml2/assertion.rb +7 -7
data/lib/saml2/attribute/x500.rb +31 -28
data/lib/saml2/attribute.rb +53 -49
data/lib/saml2/attribute_consuming_service.rb +29 -31
data/lib/saml2/authn_request.rb +54 -47
data/lib/saml2/authn_statement.rb +31 -20
data/lib/saml2/base.rb +72 -63
data/lib/saml2/bindings/http_post.rb +7 -7
data/lib/saml2/bindings/http_redirect.rb +37 -33
data/lib/saml2/bindings.rb +1 -1
data/lib/saml2/conditions.rb +19 -16
data/lib/saml2/contact.rb +19 -18
data/lib/saml2/endpoint.rb +14 -11
data/lib/saml2/entity.rb +27 -27
data/lib/saml2/identity_provider.rb +13 -10
data/lib/saml2/indexed_object.rb +15 -12
data/lib/saml2/key.rb +43 -34
data/lib/saml2/localized_name.rb +11 -10
data/lib/saml2/logout_request.rb +8 -8
data/lib/saml2/logout_response.rb +4 -4
data/lib/saml2/message.rb +24 -20
data/lib/saml2/name_id.rb +45 -41
data/lib/saml2/namespaces.rb +8 -8
data/lib/saml2/organization.rb +11 -10
data/lib/saml2/organization_and_contacts.rb +5 -5
data/lib/saml2/request.rb +3 -3
data/lib/saml2/requested_authn_context.rb +4 -4
data/lib/saml2/response.rb +45 -33
data/lib/saml2/role.rb +11 -11
data/lib/saml2/schemas.rb +13 -10
data/lib/saml2/service_provider.rb +11 -12
data/lib/saml2/signable.rb +23 -18
data/lib/saml2/sso.rb +5 -5
data/lib/saml2/status.rb +9 -7
data/lib/saml2/status_response.rb +5 -5
data/lib/saml2/subject.rb +28 -28
data/lib/saml2/version.rb +1 -1
data/lib/saml2.rb +7 -7
metadata +78 -137
data/schemas/MetadataExchange.xsd +0 -112
data/schemas/metadata_combined.xsd +0 -13
data/schemas/oasis-200401-wss-wssecurity-secext-1.0.xsd +0 -195
data/schemas/oasis-200401-wss-wssecurity-utility-1.0.xsd +0 -108
data/schemas/saml-schema-assertion-2.0.xsd +0 -283
data/schemas/saml-schema-metadata-2.0.xsd +0 -339
data/schemas/saml-schema-protocol-2.0.xsd +0 -302
data/schemas/sstc-saml-metadata-ext-query.xsd +0 -66
data/schemas/ws-addr.xsd +0 -137
data/schemas/ws-authorization.xsd +0 -145
data/schemas/ws-federation.xsd +0 -471
data/schemas/ws-securitypolicy-1.2.xsd +0 -1205
data/schemas/xenc-schema.xsd +0 -136
data/schemas/xml.xsd +0 -287
data/schemas/xmldsig-core-schema.xsd +0 -309
data/spec/fixtures/FederationMetadata.xml +0 -670
data/spec/fixtures/authnrequest.xml +0 -12
data/spec/fixtures/certificate.pem +0 -24
data/spec/fixtures/entities.xml +0 -13
data/spec/fixtures/external-uri-reference-response.xml +0 -48
data/spec/fixtures/identity_provider.xml +0 -46
data/spec/fixtures/noconditions_response.xml +0 -1
data/spec/fixtures/othercertificate.pem +0 -25
data/spec/fixtures/privatekey.key +0 -27
data/spec/fixtures/response_assertion_signed_reffed_from_response.xml +0 -6
data/spec/fixtures/response_signed.xml +0 -46
data/spec/fixtures/response_tampered_certificate.xml +0 -25
data/spec/fixtures/response_tampered_signature.xml +0 -46
data/spec/fixtures/response_with_attribute_signed.xml +0 -46
data/spec/fixtures/response_with_encrypted_assertion.xml +0 -58
data/spec/fixtures/response_with_rsa_key_value.xml +0 -1
data/spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml +0 -116
data/spec/fixtures/response_without_keyinfo.xml +0 -1
data/spec/fixtures/service_provider.xml +0 -79
data/spec/fixtures/test3-response.xml +0 -9
data/spec/fixtures/test6-response.xml +0 -10
data/spec/fixtures/test7-response.xml +0 -10
data/spec/fixtures/xml_missigned_assertion.xml +0 -84
data/spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml +0 -11
data/spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml +0 -45
data/spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml +0 -44
data/spec/fixtures/xslt-transform-response.xml +0 -57
data/spec/lib/attribute_consuming_service_spec.rb +0 -129
data/spec/lib/attribute_spec.rb +0 -149
data/spec/lib/authn_request_spec.rb +0 -52
data/spec/lib/bindings/http_redirect_spec.rb +0 -183
data/spec/lib/conditions_spec.rb +0 -74
data/spec/lib/entity_spec.rb +0 -58
data/spec/lib/identity_provider_spec.rb +0 -43
data/spec/lib/indexed_object_spec.rb +0 -71
data/spec/lib/key_spec.rb +0 -23
data/spec/lib/logout_request_spec.rb +0 -33
data/spec/lib/logout_response_spec.rb +0 -33
data/spec/lib/message_spec.rb +0 -23
data/spec/lib/response_spec.rb +0 -293
data/spec/lib/service_provider_spec.rb +0 -76
data/spec/lib/signable_spec.rb +0 -15
data/spec/spec_helper.rb +0 -8

data/schemas/xenc-schema.xsd DELETED Viewed

@@ -1,136 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<schema xmlns='http://www.w3.org/2001/XMLSchema' version='1.0'
-        xmlns:xenc='http://www.w3.org/2001/04/xmlenc#'
-        xmlns:ds='http://www.w3.org/2000/09/xmldsig#'
-        targetNamespace='http://www.w3.org/2001/04/xmlenc#'
-        elementFormDefault='qualified'>
-  <import namespace='http://www.w3.org/2000/09/xmldsig#'
-          schemaLocation='xmldsig-core-schema.xsd'/>
-  <complexType name='EncryptedType' abstract='true'>
-    <sequence>
-      <element name='EncryptionMethod' type='xenc:EncryptionMethodType'
-       minOccurs='0'/>
-      <element ref='ds:KeyInfo' minOccurs='0'/>
-      <element ref='xenc:CipherData'/>
-      <element ref='xenc:EncryptionProperties' minOccurs='0'/>
-    </sequence>
-    <attribute name='Id' type='ID' use='optional'/>
-    <attribute name='Type' type='anyURI' use='optional'/>
-    <attribute name='MimeType' type='string' use='optional'/>
-    <attribute name='Encoding' type='anyURI' use='optional'/>
-  </complexType>
-  <complexType name='EncryptionMethodType' mixed='true'>
-    <sequence>
-      <element name='KeySize' minOccurs='0' type='xenc:KeySizeType'/>
-      <element name='OAEPparams' minOccurs='0' type='base64Binary'/>
-      <any namespace='##other' minOccurs='0' maxOccurs='unbounded'/>
-    </sequence>
-    <attribute name='Algorithm' type='anyURI' use='required'/>
-  </complexType>
-    <simpleType name='KeySizeType'>
-      <restriction base="integer"/>
-    </simpleType>
-  <element name='CipherData' type='xenc:CipherDataType'/>
-  <complexType name='CipherDataType'>
-     <choice>
-       <element name='CipherValue' type='base64Binary'/>
-       <element ref='xenc:CipherReference'/>
-     </choice>
-    </complexType>
-   <element name='CipherReference' type='xenc:CipherReferenceType'/>
-   <complexType name='CipherReferenceType'>
-       <choice>
-         <element name='Transforms' type='xenc:TransformsType' minOccurs='0'/>
-       </choice>
-       <attribute name='URI' type='anyURI' use='required'/>
-   </complexType>
-     <complexType name='TransformsType'>
-       <sequence>
-         <element ref='ds:Transform' maxOccurs='unbounded'/>
-       </sequence>
-     </complexType>
-  <element name='EncryptedData' type='xenc:EncryptedDataType'/>
-  <complexType name='EncryptedDataType'>
-    <complexContent>
-      <extension base='xenc:EncryptedType'>
-       </extension>
-    </complexContent>
-  </complexType>
-  <!-- Children of ds:KeyInfo -->
-  <element name='EncryptedKey' type='xenc:EncryptedKeyType'/>
-  <complexType name='EncryptedKeyType'>
-    <complexContent>
-      <extension base='xenc:EncryptedType'>
-        <sequence>
-          <element ref='xenc:ReferenceList' minOccurs='0'/>
-          <element name='CarriedKeyName' type='string' minOccurs='0'/>
-        </sequence>
-        <attribute name='Recipient' type='string'
-         use='optional'/>
-      </extension>
-    </complexContent>
-  </complexType>
-    <element name="AgreementMethod" type="xenc:AgreementMethodType"/>
-    <complexType name="AgreementMethodType" mixed="true">
-      <sequence>
-        <element name="KA-Nonce" minOccurs="0" type="base64Binary"/>
-        <!-- <element ref="ds:DigestMethod" minOccurs="0"/> -->
-        <any namespace="##other" minOccurs="0" maxOccurs="unbounded"/>
-        <element name="OriginatorKeyInfo" minOccurs="0" type="ds:KeyInfoType"/>
-        <element name="RecipientKeyInfo" minOccurs="0" type="ds:KeyInfoType"/>
-      </sequence>
-      <attribute name="Algorithm" type="anyURI" use="required"/>
-    </complexType>
-  <!-- End Children of ds:KeyInfo -->
-  <element name='ReferenceList'>
-    <complexType>
-      <choice minOccurs='1' maxOccurs='unbounded'>
-        <element name='DataReference' type='xenc:ReferenceType'/>
-        <element name='KeyReference' type='xenc:ReferenceType'/>
-      </choice>
-    </complexType>
-  </element>
-  <complexType name='ReferenceType'>
-    <sequence>
-      <any namespace='##other' minOccurs='0' maxOccurs='unbounded'/>
-    </sequence>
-    <attribute name='URI' type='anyURI' use='required'/>
-  </complexType>
-  <element name='EncryptionProperties' type='xenc:EncryptionPropertiesType'/>
-  <complexType name='EncryptionPropertiesType'>
-    <sequence>
-      <element ref='xenc:EncryptionProperty' maxOccurs='unbounded'/>
-    </sequence>
-    <attribute name='Id' type='ID' use='optional'/>
-  </complexType>
-    <element name='EncryptionProperty' type='xenc:EncryptionPropertyType'/>
-    <complexType name='EncryptionPropertyType' mixed='true'>
-      <choice maxOccurs='unbounded'>
-        <any namespace='##other' processContents='lax'/>
-      </choice>
-      <attribute name='Target' type='anyURI' use='optional'/>
-      <attribute name='Id' type='ID' use='optional'/>
-      <anyAttribute namespace="http://www.w3.org/XML/1998/namespace"/>
-    </complexType>
-</schema>

data/schemas/xml.xsd DELETED Viewed

@@ -1,287 +0,0 @@
-<?xml version='1.0'?>
-<?xml-stylesheet href="../2008/09/xsd.xsl" type="text/xsl"?>
-<xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace"
-  xmlns:xs="http://www.w3.org/2001/XMLSchema"
-  xmlns   ="http://www.w3.org/1999/xhtml"
-  xml:lang="en">
- <xs:annotation>
-  <xs:documentation>
-   <div>
-    <h1>About the XML namespace</h1>
-    <div class="bodytext">
-     <p>
-      This schema document describes the XML namespace, in a form
-      suitable for import by other schema documents.
-     </p>
-     <p>
-      See <a href="http://www.w3.org/XML/1998/namespace.html">
-      http://www.w3.org/XML/1998/namespace.html</a> and
-      <a href="http://www.w3.org/TR/REC-xml">
-      http://www.w3.org/TR/REC-xml</a> for information
-      about this namespace.
-     </p>
-     <p>
-      Note that local names in this namespace are intended to be
-      defined only by the World Wide Web Consortium or its subgroups.
-      The names currently defined in this namespace are listed below.
-      They should not be used with conflicting semantics by any Working
-      Group, specification, or document instance.
-     </p>
-     <p>
-      See further below in this document for more information about <a
-      href="#usage">how to refer to this schema document from your own
-      XSD schema documents</a> and about <a href="#nsversioning">the
-      namespace-versioning policy governing this schema document</a>.
-     </p>
-    </div>
-   </div>
-  </xs:documentation>
- </xs:annotation>
- <xs:attribute name="lang">
-  <xs:annotation>
-   <xs:documentation>
-    <div>
-      <h3>lang (as an attribute name)</h3>
-      <p>
-       denotes an attribute whose value
-       is a language code for the natural language of the content of
-       any element; its value is inherited.  This name is reserved
-       by virtue of its definition in the XML specification.</p>
-    </div>
-    <div>
-     <h4>Notes</h4>
-     <p>
-      Attempting to install the relevant ISO 2- and 3-letter
-      codes as the enumerated possible values is probably never
-      going to be a realistic possibility.
-     </p>
-     <p>
-      See BCP 47 at <a href="http://www.rfc-editor.org/rfc/bcp/bcp47.txt">
-       http://www.rfc-editor.org/rfc/bcp/bcp47.txt</a>
-      and the IANA language subtag registry at
-      <a href="http://www.iana.org/assignments/language-subtag-registry">
-       http://www.iana.org/assignments/language-subtag-registry</a>
-      for further information.
-     </p>
-     <p>
-      The union allows for the 'un-declaration' of xml:lang with
-      the empty string.
-     </p>
-    </div>
-   </xs:documentation>
-  </xs:annotation>
-  <xs:simpleType>
-   <xs:union memberTypes="xs:language">
-    <xs:simpleType>
-     <xs:restriction base="xs:string">
-      <xs:enumeration value=""/>
-     </xs:restriction>
-    </xs:simpleType>
-   </xs:union>
-  </xs:simpleType>
- </xs:attribute>
- <xs:attribute name="space">
-  <xs:annotation>
-   <xs:documentation>
-    <div>
-      <h3>space (as an attribute name)</h3>
-      <p>
-       denotes an attribute whose
-       value is a keyword indicating what whitespace processing
-       discipline is intended for the content of the element; its
-       value is inherited.  This name is reserved by virtue of its
-       definition in the XML specification.</p>
-    </div>
-   </xs:documentation>
-  </xs:annotation>
-  <xs:simpleType>
-   <xs:restriction base="xs:NCName">
-    <xs:enumeration value="default"/>
-    <xs:enumeration value="preserve"/>
-   </xs:restriction>
-  </xs:simpleType>
- </xs:attribute>
- <xs:attribute name="base" type="xs:anyURI"> <xs:annotation>
-   <xs:documentation>
-    <div>
-      <h3>base (as an attribute name)</h3>
-      <p>
-       denotes an attribute whose value
-       provides a URI to be used as the base for interpreting any
-       relative URIs in the scope of the element on which it
-       appears; its value is inherited.  This name is reserved
-       by virtue of its definition in the XML Base specification.</p>
-     <p>
-      See <a
-      href="http://www.w3.org/TR/xmlbase/">http://www.w3.org/TR/xmlbase/</a>
-      for information about this attribute.
-     </p>
-    </div>
-   </xs:documentation>
-  </xs:annotation>
- </xs:attribute>
- <xs:attribute name="id" type="xs:ID">
-  <xs:annotation>
-   <xs:documentation>
-    <div>
-      <h3>id (as an attribute name)</h3>
-      <p>
-       denotes an attribute whose value
-       should be interpreted as if declared to be of type ID.
-       This name is reserved by virtue of its definition in the
-       xml:id specification.</p>
-     <p>
-      See <a
-      href="http://www.w3.org/TR/xml-id/">http://www.w3.org/TR/xml-id/</a>
-      for information about this attribute.
-     </p>
-    </div>
-   </xs:documentation>
-  </xs:annotation>
- </xs:attribute>
- <xs:attributeGroup name="specialAttrs">
-  <xs:attribute ref="xml:base"/>
-  <xs:attribute ref="xml:lang"/>
-  <xs:attribute ref="xml:space"/>
-  <xs:attribute ref="xml:id"/>
- </xs:attributeGroup>
- <xs:annotation>
-  <xs:documentation>
-   <div>
-    <h3>Father (in any context at all)</h3>
-    <div class="bodytext">
-     <p>
-      denotes Jon Bosak, the chair of
-      the original XML Working Group.  This name is reserved by
-      the following decision of the W3C XML Plenary and
-      XML Coordination groups:
-     </p>
-     <blockquote>
-       <p>
-	In appreciation for his vision, leadership and
-	dedication the W3C XML Plenary on this 10th day of
-	February, 2000, reserves for Jon Bosak in perpetuity
-	the XML name "xml:Father".
-       </p>
-     </blockquote>
-    </div>
-   </div>
-  </xs:documentation>
- </xs:annotation>
- <xs:annotation>
-  <xs:documentation>
-   <div xml:id="usage" id="usage">
-    <h2><a name="usage">About this schema document</a></h2>
-    <div class="bodytext">
-     <p>
-      This schema defines attributes and an attribute group suitable
-      for use by schemas wishing to allow <code>xml:base</code>,
-      <code>xml:lang</code>, <code>xml:space</code> or
-      <code>xml:id</code> attributes on elements they define.
-     </p>
-     <p>
-      To enable this, such a schema must import this schema for
-      the XML namespace, e.g. as follows:
-     </p>
-     <pre>
-          &lt;schema . . .>
-           . . .
-           &lt;import namespace="http://www.w3.org/XML/1998/namespace"
-                      schemaLocation="http://www.w3.org/2001/xml.xsd"/>
-     </pre>
-     <p>
-      or
-     </p>
-     <pre>
-           &lt;import namespace="http://www.w3.org/XML/1998/namespace"
-                      schemaLocation="http://www.w3.org/2009/01/xml.xsd"/>
-     </pre>
-     <p>
-      Subsequently, qualified reference to any of the attributes or the
-      group defined below will have the desired effect, e.g.
-     </p>
-     <pre>
-          &lt;type . . .>
-           . . .
-           &lt;attributeGroup ref="xml:specialAttrs"/>
-     </pre>
-     <p>
-      will define a type which will schema-validate an instance element
-      with any of those attributes.
-     </p>
-    </div>
-   </div>
-  </xs:documentation>
- </xs:annotation>
- <xs:annotation>
-  <xs:documentation>
-   <div id="nsversioning" xml:id="nsversioning">
-    <h2><a name="nsversioning">Versioning policy for this schema document</a></h2>
-    <div class="bodytext">
-     <p>
-      In keeping with the XML Schema WG's standard versioning
-      policy, this schema document will persist at
-      <a href="http://www.w3.org/2009/01/xml.xsd">
-       http://www.w3.org/2009/01/xml.xsd</a>.
-     </p>
-     <p>
-      At the date of issue it can also be found at
-      <a href="http://www.w3.org/2001/xml.xsd">
-       http://www.w3.org/2001/xml.xsd</a>.
-     </p>
-     <p>
-      The schema document at that URI may however change in the future,
-      in order to remain compatible with the latest version of XML
-      Schema itself, or with the XML namespace itself.  In other words,
-      if the XML Schema or XML namespaces change, the version of this
-      document at <a href="http://www.w3.org/2001/xml.xsd">
-       http://www.w3.org/2001/xml.xsd
-      </a>
-      will change accordingly; the version at
-      <a href="http://www.w3.org/2009/01/xml.xsd">
-       http://www.w3.org/2009/01/xml.xsd
-      </a>
-      will not change.
-     </p>
-     <p>
-      Previous dated (and unchanging) versions of this schema
-      document are at:
-     </p>
-     <ul>
-      <li><a href="http://www.w3.org/2009/01/xml.xsd">
-	http://www.w3.org/2009/01/xml.xsd</a></li>
-      <li><a href="http://www.w3.org/2007/08/xml.xsd">
-	http://www.w3.org/2007/08/xml.xsd</a></li>
-      <li><a href="http://www.w3.org/2004/10/xml.xsd">
-	http://www.w3.org/2004/10/xml.xsd</a></li>
-      <li><a href="http://www.w3.org/2001/03/xml.xsd">
-	http://www.w3.org/2001/03/xml.xsd</a></li>
-     </ul>
-    </div>
-   </div>
-  </xs:documentation>
- </xs:annotation>
-</xs:schema>