saml2 3.1.2 → 3.1.4

Sign up to get free protection for your applications and to get access to all the features.
Files changed (85) hide show
  1. checksums.yaml +4 -4
  2. data/Rakefile +6 -4
  3. data/exe/bulk_verify_responses +94 -0
  4. data/lib/saml2/assertion.rb +7 -7
  5. data/lib/saml2/attribute/x500.rb +31 -28
  6. data/lib/saml2/attribute.rb +53 -49
  7. data/lib/saml2/attribute_consuming_service.rb +29 -31
  8. data/lib/saml2/authn_request.rb +54 -47
  9. data/lib/saml2/authn_statement.rb +31 -20
  10. data/lib/saml2/base.rb +72 -63
  11. data/lib/saml2/bindings/http_post.rb +7 -7
  12. data/lib/saml2/bindings/http_redirect.rb +37 -33
  13. data/lib/saml2/bindings.rb +1 -1
  14. data/lib/saml2/conditions.rb +19 -16
  15. data/lib/saml2/contact.rb +19 -18
  16. data/lib/saml2/endpoint.rb +14 -11
  17. data/lib/saml2/entity.rb +27 -27
  18. data/lib/saml2/identity_provider.rb +13 -10
  19. data/lib/saml2/indexed_object.rb +15 -12
  20. data/lib/saml2/key.rb +43 -34
  21. data/lib/saml2/localized_name.rb +11 -10
  22. data/lib/saml2/logout_request.rb +8 -8
  23. data/lib/saml2/logout_response.rb +4 -4
  24. data/lib/saml2/message.rb +24 -20
  25. data/lib/saml2/name_id.rb +45 -41
  26. data/lib/saml2/namespaces.rb +8 -8
  27. data/lib/saml2/organization.rb +11 -10
  28. data/lib/saml2/organization_and_contacts.rb +5 -5
  29. data/lib/saml2/request.rb +3 -3
  30. data/lib/saml2/requested_authn_context.rb +4 -4
  31. data/lib/saml2/response.rb +45 -33
  32. data/lib/saml2/role.rb +11 -11
  33. data/lib/saml2/schemas.rb +13 -10
  34. data/lib/saml2/service_provider.rb +11 -12
  35. data/lib/saml2/signable.rb +23 -18
  36. data/lib/saml2/sso.rb +5 -5
  37. data/lib/saml2/status.rb +9 -7
  38. data/lib/saml2/status_response.rb +5 -5
  39. data/lib/saml2/subject.rb +28 -28
  40. data/lib/saml2/version.rb +1 -1
  41. data/lib/saml2.rb +7 -7
  42. metadata +78 -122
  43. data/spec/fixtures/FederationMetadata.xml +0 -670
  44. data/spec/fixtures/authnrequest.xml +0 -12
  45. data/spec/fixtures/certificate.pem +0 -24
  46. data/spec/fixtures/entities.xml +0 -13
  47. data/spec/fixtures/external-uri-reference-response.xml +0 -48
  48. data/spec/fixtures/identity_provider.xml +0 -46
  49. data/spec/fixtures/noconditions_response.xml +0 -1
  50. data/spec/fixtures/othercertificate.pem +0 -25
  51. data/spec/fixtures/privatekey.key +0 -27
  52. data/spec/fixtures/response_assertion_signed_reffed_from_response.xml +0 -6
  53. data/spec/fixtures/response_signed.xml +0 -46
  54. data/spec/fixtures/response_tampered_certificate.xml +0 -25
  55. data/spec/fixtures/response_tampered_signature.xml +0 -46
  56. data/spec/fixtures/response_with_attribute_signed.xml +0 -46
  57. data/spec/fixtures/response_with_encrypted_assertion.xml +0 -58
  58. data/spec/fixtures/response_with_rsa_key_value.xml +0 -1
  59. data/spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml +0 -116
  60. data/spec/fixtures/response_without_keyinfo.xml +0 -1
  61. data/spec/fixtures/service_provider.xml +0 -79
  62. data/spec/fixtures/test3-response.xml +0 -9
  63. data/spec/fixtures/test6-response.xml +0 -10
  64. data/spec/fixtures/test7-response.xml +0 -10
  65. data/spec/fixtures/xml_missigned_assertion.xml +0 -84
  66. data/spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml +0 -11
  67. data/spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml +0 -45
  68. data/spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml +0 -44
  69. data/spec/fixtures/xslt-transform-response.xml +0 -57
  70. data/spec/lib/attribute_consuming_service_spec.rb +0 -129
  71. data/spec/lib/attribute_spec.rb +0 -149
  72. data/spec/lib/authn_request_spec.rb +0 -52
  73. data/spec/lib/bindings/http_redirect_spec.rb +0 -183
  74. data/spec/lib/conditions_spec.rb +0 -74
  75. data/spec/lib/entity_spec.rb +0 -58
  76. data/spec/lib/identity_provider_spec.rb +0 -43
  77. data/spec/lib/indexed_object_spec.rb +0 -71
  78. data/spec/lib/key_spec.rb +0 -23
  79. data/spec/lib/logout_request_spec.rb +0 -33
  80. data/spec/lib/logout_response_spec.rb +0 -33
  81. data/spec/lib/message_spec.rb +0 -23
  82. data/spec/lib/response_spec.rb +0 -293
  83. data/spec/lib/service_provider_spec.rb +0 -76
  84. data/spec/lib/signable_spec.rb +0 -15
  85. data/spec/spec_helper.rb +0 -8
metadata CHANGED
@@ -1,15 +1,35 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: saml2
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.1.2
4
+ version: 3.1.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Cody Cutrer
8
8
  autorequire:
9
- bindir: bin
9
+ bindir: exe
10
10
  cert_chain: []
11
- date: 2022-03-21 00:00:00.000000000 Z
11
+ date: 2023-10-06 00:00:00.000000000 Z
12
12
  dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: activesupport
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - ">="
18
+ - !ruby/object:Gem::Version
19
+ version: '3.2'
20
+ - - "<"
21
+ - !ruby/object:Gem::Version
22
+ version: '7.2'
23
+ type: :runtime
24
+ prerelease: false
25
+ version_requirements: !ruby/object:Gem::Requirement
26
+ requirements:
27
+ - - ">="
28
+ - !ruby/object:Gem::Version
29
+ version: '3.2'
30
+ - - "<"
31
+ - !ruby/object:Gem::Version
32
+ version: '7.2'
13
33
  - !ruby/object:Gem::Dependency
14
34
  name: nokogiri
15
35
  requirement: !ruby/object:Gem::Requirement
@@ -51,83 +71,104 @@ dependencies:
51
71
  - !ruby/object:Gem::Version
52
72
  version: 0.9.5
53
73
  - !ruby/object:Gem::Dependency
54
- name: activesupport
74
+ name: byebug
55
75
  requirement: !ruby/object:Gem::Requirement
56
76
  requirements:
57
- - - ">="
77
+ - - "~>"
58
78
  - !ruby/object:Gem::Version
59
- version: '3.2'
60
- - - "<"
79
+ version: '11.0'
80
+ type: :development
81
+ prerelease: false
82
+ version_requirements: !ruby/object:Gem::Requirement
83
+ requirements:
84
+ - - "~>"
61
85
  - !ruby/object:Gem::Version
62
- version: '7.1'
63
- type: :runtime
86
+ version: '11.0'
87
+ - !ruby/object:Gem::Dependency
88
+ name: rake
89
+ requirement: !ruby/object:Gem::Requirement
90
+ requirements:
91
+ - - "~>"
92
+ - !ruby/object:Gem::Version
93
+ version: '12.0'
94
+ type: :development
64
95
  prerelease: false
65
96
  version_requirements: !ruby/object:Gem::Requirement
66
97
  requirements:
67
- - - ">="
98
+ - - "~>"
68
99
  - !ruby/object:Gem::Version
69
- version: '3.2'
70
- - - "<"
100
+ version: '12.0'
101
+ - !ruby/object:Gem::Dependency
102
+ name: rspec
103
+ requirement: !ruby/object:Gem::Requirement
104
+ requirements:
105
+ - - "~>"
106
+ - !ruby/object:Gem::Version
107
+ version: '3.5'
108
+ type: :development
109
+ prerelease: false
110
+ version_requirements: !ruby/object:Gem::Requirement
111
+ requirements:
112
+ - - "~>"
71
113
  - !ruby/object:Gem::Version
72
- version: '7.1'
114
+ version: '3.5'
73
115
  - !ruby/object:Gem::Dependency
74
- name: byebug
116
+ name: rubocop-inst
75
117
  requirement: !ruby/object:Gem::Requirement
76
118
  requirements:
77
119
  - - "~>"
78
120
  - !ruby/object:Gem::Version
79
- version: '11.0'
121
+ version: '1'
80
122
  type: :development
81
123
  prerelease: false
82
124
  version_requirements: !ruby/object:Gem::Requirement
83
125
  requirements:
84
126
  - - "~>"
85
127
  - !ruby/object:Gem::Version
86
- version: '11.0'
128
+ version: '1'
87
129
  - !ruby/object:Gem::Dependency
88
- name: rake
130
+ name: rubocop-rake
89
131
  requirement: !ruby/object:Gem::Requirement
90
132
  requirements:
91
133
  - - "~>"
92
134
  - !ruby/object:Gem::Version
93
- version: '12.0'
135
+ version: '0.6'
94
136
  type: :development
95
137
  prerelease: false
96
138
  version_requirements: !ruby/object:Gem::Requirement
97
139
  requirements:
98
140
  - - "~>"
99
141
  - !ruby/object:Gem::Version
100
- version: '12.0'
142
+ version: '0.6'
101
143
  - !ruby/object:Gem::Dependency
102
- name: rspec
144
+ name: rubocop-rspec
103
145
  requirement: !ruby/object:Gem::Requirement
104
146
  requirements:
105
147
  - - "~>"
106
148
  - !ruby/object:Gem::Version
107
- version: '3.5'
149
+ version: '2.20'
108
150
  type: :development
109
151
  prerelease: false
110
152
  version_requirements: !ruby/object:Gem::Requirement
111
153
  requirements:
112
154
  - - "~>"
113
155
  - !ruby/object:Gem::Version
114
- version: '3.5'
115
- description: |2
116
- The saml2 library is yet another SAML library for Ruby, with
117
- an emphasis on _not_ re-implementing XML, especially XML Security,
118
- _not_ parsing via Regex or generating XML by string concatenation,
119
- _not_ serializing/re-parsing multiple times just to get it into
120
- the correct format to sign or validate.
121
-
122
- For now, it provides a clean interface for implementing an IdP,
123
- but not an SP.
156
+ version: '2.20'
157
+ description: |
158
+ The saml2 library is yet another SAML library for Ruby, with
159
+ an emphasis on _not_ re-implementing XML, especially XML Security,
160
+ _not_ parsing via Regex or generating XML by string concatenation,
161
+ _not_ serializing/re-parsing multiple times just to get it into
162
+ the correct format to sign or validate.
124
163
  email: cody@instructure.com'
125
- executables: []
164
+ executables:
165
+ - bulk_verify_responses
126
166
  extensions: []
127
167
  extra_rdoc_files: []
128
168
  files:
129
169
  - Rakefile
130
170
  - app/views/saml2/http_post.html.erb
171
+ - exe/bulk_verify_responses
131
172
  - lib/saml2.rb
132
173
  - lib/saml2/assertion.rb
133
174
  - lib/saml2/attribute.rb
@@ -182,53 +223,11 @@ files:
182
223
  - schemas/xenc-schema.xsd
183
224
  - schemas/xml.xsd
184
225
  - schemas/xmldsig-core-schema.xsd
185
- - spec/fixtures/FederationMetadata.xml
186
- - spec/fixtures/authnrequest.xml
187
- - spec/fixtures/certificate.pem
188
- - spec/fixtures/entities.xml
189
- - spec/fixtures/external-uri-reference-response.xml
190
- - spec/fixtures/identity_provider.xml
191
- - spec/fixtures/noconditions_response.xml
192
- - spec/fixtures/othercertificate.pem
193
- - spec/fixtures/privatekey.key
194
- - spec/fixtures/response_assertion_signed_reffed_from_response.xml
195
- - spec/fixtures/response_signed.xml
196
- - spec/fixtures/response_tampered_certificate.xml
197
- - spec/fixtures/response_tampered_signature.xml
198
- - spec/fixtures/response_with_attribute_signed.xml
199
- - spec/fixtures/response_with_encrypted_assertion.xml
200
- - spec/fixtures/response_with_rsa_key_value.xml
201
- - spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
202
- - spec/fixtures/response_without_keyinfo.xml
203
- - spec/fixtures/service_provider.xml
204
- - spec/fixtures/test3-response.xml
205
- - spec/fixtures/test6-response.xml
206
- - spec/fixtures/test7-response.xml
207
- - spec/fixtures/xml_missigned_assertion.xml
208
- - spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
209
- - spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
210
- - spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
211
- - spec/fixtures/xslt-transform-response.xml
212
- - spec/lib/attribute_consuming_service_spec.rb
213
- - spec/lib/attribute_spec.rb
214
- - spec/lib/authn_request_spec.rb
215
- - spec/lib/bindings/http_redirect_spec.rb
216
- - spec/lib/conditions_spec.rb
217
- - spec/lib/entity_spec.rb
218
- - spec/lib/identity_provider_spec.rb
219
- - spec/lib/indexed_object_spec.rb
220
- - spec/lib/key_spec.rb
221
- - spec/lib/logout_request_spec.rb
222
- - spec/lib/logout_response_spec.rb
223
- - spec/lib/message_spec.rb
224
- - spec/lib/response_spec.rb
225
- - spec/lib/service_provider_spec.rb
226
- - spec/lib/signable_spec.rb
227
- - spec/spec_helper.rb
228
226
  homepage: https://github.com/instructure/ruby-saml2
229
227
  licenses:
230
228
  - MIT
231
- metadata: {}
229
+ metadata:
230
+ rubygems_mfa_required: 'true'
232
231
  post_install_message:
233
232
  rdoc_options: []
234
233
  require_paths:
@@ -237,58 +236,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
237
236
  requirements:
238
237
  - - ">="
239
238
  - !ruby/object:Gem::Version
240
- version: '0'
239
+ version: '2.7'
241
240
  required_rubygems_version: !ruby/object:Gem::Requirement
242
241
  requirements:
243
242
  - - ">="
244
243
  - !ruby/object:Gem::Version
245
244
  version: '0'
246
245
  requirements: []
247
- rubygems_version: 3.1.4
246
+ rubygems_version: 3.4.19
248
247
  signing_key:
249
248
  specification_version: 4
250
249
  summary: SAML 2.0 Library
251
- test_files:
252
- - spec/spec_helper.rb
253
- - spec/lib/logout_response_spec.rb
254
- - spec/lib/indexed_object_spec.rb
255
- - spec/lib/attribute_spec.rb
256
- - spec/lib/signable_spec.rb
257
- - spec/lib/entity_spec.rb
258
- - spec/lib/attribute_consuming_service_spec.rb
259
- - spec/lib/key_spec.rb
260
- - spec/lib/message_spec.rb
261
- - spec/lib/response_spec.rb
262
- - spec/lib/logout_request_spec.rb
263
- - spec/lib/conditions_spec.rb
264
- - spec/lib/bindings/http_redirect_spec.rb
265
- - spec/lib/service_provider_spec.rb
266
- - spec/lib/identity_provider_spec.rb
267
- - spec/lib/authn_request_spec.rb
268
- - spec/fixtures/test3-response.xml
269
- - spec/fixtures/service_provider.xml
270
- - spec/fixtures/response_with_attribute_signed.xml
271
- - spec/fixtures/response_signed.xml
272
- - spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
273
- - spec/fixtures/response_tampered_signature.xml
274
- - spec/fixtures/xml_missigned_assertion.xml
275
- - spec/fixtures/certificate.pem
276
- - spec/fixtures/noconditions_response.xml
277
- - spec/fixtures/response_with_rsa_key_value.xml
278
- - spec/fixtures/entities.xml
279
- - spec/fixtures/response_assertion_signed_reffed_from_response.xml
280
- - spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
281
- - spec/fixtures/response_without_keyinfo.xml
282
- - spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
283
- - spec/fixtures/othercertificate.pem
284
- - spec/fixtures/xslt-transform-response.xml
285
- - spec/fixtures/response_with_encrypted_assertion.xml
286
- - spec/fixtures/external-uri-reference-response.xml
287
- - spec/fixtures/authnrequest.xml
288
- - spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
289
- - spec/fixtures/FederationMetadata.xml
290
- - spec/fixtures/identity_provider.xml
291
- - spec/fixtures/response_tampered_certificate.xml
292
- - spec/fixtures/test7-response.xml
293
- - spec/fixtures/test6-response.xml
294
- - spec/fixtures/privatekey.key
250
+ test_files: []