saml2 3.1.2 → 3.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. checksums.yaml +4 -4
  2. data/Rakefile +6 -4
  3. data/exe/bulk_verify_responses +94 -0
  4. data/lib/saml2/assertion.rb +7 -7
  5. data/lib/saml2/attribute/x500.rb +31 -28
  6. data/lib/saml2/attribute.rb +53 -49
  7. data/lib/saml2/attribute_consuming_service.rb +29 -31
  8. data/lib/saml2/authn_request.rb +54 -47
  9. data/lib/saml2/authn_statement.rb +31 -20
  10. data/lib/saml2/base.rb +72 -63
  11. data/lib/saml2/bindings/http_post.rb +7 -7
  12. data/lib/saml2/bindings/http_redirect.rb +37 -33
  13. data/lib/saml2/bindings.rb +1 -1
  14. data/lib/saml2/conditions.rb +19 -16
  15. data/lib/saml2/contact.rb +19 -18
  16. data/lib/saml2/endpoint.rb +14 -11
  17. data/lib/saml2/entity.rb +27 -27
  18. data/lib/saml2/identity_provider.rb +13 -10
  19. data/lib/saml2/indexed_object.rb +15 -12
  20. data/lib/saml2/key.rb +43 -34
  21. data/lib/saml2/localized_name.rb +11 -10
  22. data/lib/saml2/logout_request.rb +8 -8
  23. data/lib/saml2/logout_response.rb +4 -4
  24. data/lib/saml2/message.rb +24 -20
  25. data/lib/saml2/name_id.rb +45 -41
  26. data/lib/saml2/namespaces.rb +8 -8
  27. data/lib/saml2/organization.rb +11 -10
  28. data/lib/saml2/organization_and_contacts.rb +5 -5
  29. data/lib/saml2/request.rb +3 -3
  30. data/lib/saml2/requested_authn_context.rb +4 -4
  31. data/lib/saml2/response.rb +45 -33
  32. data/lib/saml2/role.rb +11 -11
  33. data/lib/saml2/schemas.rb +13 -10
  34. data/lib/saml2/service_provider.rb +11 -12
  35. data/lib/saml2/signable.rb +23 -18
  36. data/lib/saml2/sso.rb +5 -5
  37. data/lib/saml2/status.rb +9 -7
  38. data/lib/saml2/status_response.rb +5 -5
  39. data/lib/saml2/subject.rb +28 -28
  40. data/lib/saml2/version.rb +1 -1
  41. data/lib/saml2.rb +7 -7
  42. metadata +78 -122
  43. data/spec/fixtures/FederationMetadata.xml +0 -670
  44. data/spec/fixtures/authnrequest.xml +0 -12
  45. data/spec/fixtures/certificate.pem +0 -24
  46. data/spec/fixtures/entities.xml +0 -13
  47. data/spec/fixtures/external-uri-reference-response.xml +0 -48
  48. data/spec/fixtures/identity_provider.xml +0 -46
  49. data/spec/fixtures/noconditions_response.xml +0 -1
  50. data/spec/fixtures/othercertificate.pem +0 -25
  51. data/spec/fixtures/privatekey.key +0 -27
  52. data/spec/fixtures/response_assertion_signed_reffed_from_response.xml +0 -6
  53. data/spec/fixtures/response_signed.xml +0 -46
  54. data/spec/fixtures/response_tampered_certificate.xml +0 -25
  55. data/spec/fixtures/response_tampered_signature.xml +0 -46
  56. data/spec/fixtures/response_with_attribute_signed.xml +0 -46
  57. data/spec/fixtures/response_with_encrypted_assertion.xml +0 -58
  58. data/spec/fixtures/response_with_rsa_key_value.xml +0 -1
  59. data/spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml +0 -116
  60. data/spec/fixtures/response_without_keyinfo.xml +0 -1
  61. data/spec/fixtures/service_provider.xml +0 -79
  62. data/spec/fixtures/test3-response.xml +0 -9
  63. data/spec/fixtures/test6-response.xml +0 -10
  64. data/spec/fixtures/test7-response.xml +0 -10
  65. data/spec/fixtures/xml_missigned_assertion.xml +0 -84
  66. data/spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml +0 -11
  67. data/spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml +0 -45
  68. data/spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml +0 -44
  69. data/spec/fixtures/xslt-transform-response.xml +0 -57
  70. data/spec/lib/attribute_consuming_service_spec.rb +0 -129
  71. data/spec/lib/attribute_spec.rb +0 -149
  72. data/spec/lib/authn_request_spec.rb +0 -52
  73. data/spec/lib/bindings/http_redirect_spec.rb +0 -183
  74. data/spec/lib/conditions_spec.rb +0 -74
  75. data/spec/lib/entity_spec.rb +0 -58
  76. data/spec/lib/identity_provider_spec.rb +0 -43
  77. data/spec/lib/indexed_object_spec.rb +0 -71
  78. data/spec/lib/key_spec.rb +0 -23
  79. data/spec/lib/logout_request_spec.rb +0 -33
  80. data/spec/lib/logout_response_spec.rb +0 -33
  81. data/spec/lib/message_spec.rb +0 -23
  82. data/spec/lib/response_spec.rb +0 -293
  83. data/spec/lib/service_provider_spec.rb +0 -76
  84. data/spec/lib/signable_spec.rb +0 -15
  85. data/spec/spec_helper.rb +0 -8
metadata CHANGED
@@ -1,15 +1,35 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: saml2
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.1.2
4
+ version: 3.1.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Cody Cutrer
8
8
  autorequire:
9
- bindir: bin
9
+ bindir: exe
10
10
  cert_chain: []
11
- date: 2022-03-21 00:00:00.000000000 Z
11
+ date: 2023-10-06 00:00:00.000000000 Z
12
12
  dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: activesupport
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - ">="
18
+ - !ruby/object:Gem::Version
19
+ version: '3.2'
20
+ - - "<"
21
+ - !ruby/object:Gem::Version
22
+ version: '7.2'
23
+ type: :runtime
24
+ prerelease: false
25
+ version_requirements: !ruby/object:Gem::Requirement
26
+ requirements:
27
+ - - ">="
28
+ - !ruby/object:Gem::Version
29
+ version: '3.2'
30
+ - - "<"
31
+ - !ruby/object:Gem::Version
32
+ version: '7.2'
13
33
  - !ruby/object:Gem::Dependency
14
34
  name: nokogiri
15
35
  requirement: !ruby/object:Gem::Requirement
@@ -51,83 +71,104 @@ dependencies:
51
71
  - !ruby/object:Gem::Version
52
72
  version: 0.9.5
53
73
  - !ruby/object:Gem::Dependency
54
- name: activesupport
74
+ name: byebug
55
75
  requirement: !ruby/object:Gem::Requirement
56
76
  requirements:
57
- - - ">="
77
+ - - "~>"
58
78
  - !ruby/object:Gem::Version
59
- version: '3.2'
60
- - - "<"
79
+ version: '11.0'
80
+ type: :development
81
+ prerelease: false
82
+ version_requirements: !ruby/object:Gem::Requirement
83
+ requirements:
84
+ - - "~>"
61
85
  - !ruby/object:Gem::Version
62
- version: '7.1'
63
- type: :runtime
86
+ version: '11.0'
87
+ - !ruby/object:Gem::Dependency
88
+ name: rake
89
+ requirement: !ruby/object:Gem::Requirement
90
+ requirements:
91
+ - - "~>"
92
+ - !ruby/object:Gem::Version
93
+ version: '12.0'
94
+ type: :development
64
95
  prerelease: false
65
96
  version_requirements: !ruby/object:Gem::Requirement
66
97
  requirements:
67
- - - ">="
98
+ - - "~>"
68
99
  - !ruby/object:Gem::Version
69
- version: '3.2'
70
- - - "<"
100
+ version: '12.0'
101
+ - !ruby/object:Gem::Dependency
102
+ name: rspec
103
+ requirement: !ruby/object:Gem::Requirement
104
+ requirements:
105
+ - - "~>"
106
+ - !ruby/object:Gem::Version
107
+ version: '3.5'
108
+ type: :development
109
+ prerelease: false
110
+ version_requirements: !ruby/object:Gem::Requirement
111
+ requirements:
112
+ - - "~>"
71
113
  - !ruby/object:Gem::Version
72
- version: '7.1'
114
+ version: '3.5'
73
115
  - !ruby/object:Gem::Dependency
74
- name: byebug
116
+ name: rubocop-inst
75
117
  requirement: !ruby/object:Gem::Requirement
76
118
  requirements:
77
119
  - - "~>"
78
120
  - !ruby/object:Gem::Version
79
- version: '11.0'
121
+ version: '1'
80
122
  type: :development
81
123
  prerelease: false
82
124
  version_requirements: !ruby/object:Gem::Requirement
83
125
  requirements:
84
126
  - - "~>"
85
127
  - !ruby/object:Gem::Version
86
- version: '11.0'
128
+ version: '1'
87
129
  - !ruby/object:Gem::Dependency
88
- name: rake
130
+ name: rubocop-rake
89
131
  requirement: !ruby/object:Gem::Requirement
90
132
  requirements:
91
133
  - - "~>"
92
134
  - !ruby/object:Gem::Version
93
- version: '12.0'
135
+ version: '0.6'
94
136
  type: :development
95
137
  prerelease: false
96
138
  version_requirements: !ruby/object:Gem::Requirement
97
139
  requirements:
98
140
  - - "~>"
99
141
  - !ruby/object:Gem::Version
100
- version: '12.0'
142
+ version: '0.6'
101
143
  - !ruby/object:Gem::Dependency
102
- name: rspec
144
+ name: rubocop-rspec
103
145
  requirement: !ruby/object:Gem::Requirement
104
146
  requirements:
105
147
  - - "~>"
106
148
  - !ruby/object:Gem::Version
107
- version: '3.5'
149
+ version: '2.20'
108
150
  type: :development
109
151
  prerelease: false
110
152
  version_requirements: !ruby/object:Gem::Requirement
111
153
  requirements:
112
154
  - - "~>"
113
155
  - !ruby/object:Gem::Version
114
- version: '3.5'
115
- description: |2
116
- The saml2 library is yet another SAML library for Ruby, with
117
- an emphasis on _not_ re-implementing XML, especially XML Security,
118
- _not_ parsing via Regex or generating XML by string concatenation,
119
- _not_ serializing/re-parsing multiple times just to get it into
120
- the correct format to sign or validate.
121
-
122
- For now, it provides a clean interface for implementing an IdP,
123
- but not an SP.
156
+ version: '2.20'
157
+ description: |
158
+ The saml2 library is yet another SAML library for Ruby, with
159
+ an emphasis on _not_ re-implementing XML, especially XML Security,
160
+ _not_ parsing via Regex or generating XML by string concatenation,
161
+ _not_ serializing/re-parsing multiple times just to get it into
162
+ the correct format to sign or validate.
124
163
  email: cody@instructure.com'
125
- executables: []
164
+ executables:
165
+ - bulk_verify_responses
126
166
  extensions: []
127
167
  extra_rdoc_files: []
128
168
  files:
129
169
  - Rakefile
130
170
  - app/views/saml2/http_post.html.erb
171
+ - exe/bulk_verify_responses
131
172
  - lib/saml2.rb
132
173
  - lib/saml2/assertion.rb
133
174
  - lib/saml2/attribute.rb
@@ -182,53 +223,11 @@ files:
182
223
  - schemas/xenc-schema.xsd
183
224
  - schemas/xml.xsd
184
225
  - schemas/xmldsig-core-schema.xsd
185
- - spec/fixtures/FederationMetadata.xml
186
- - spec/fixtures/authnrequest.xml
187
- - spec/fixtures/certificate.pem
188
- - spec/fixtures/entities.xml
189
- - spec/fixtures/external-uri-reference-response.xml
190
- - spec/fixtures/identity_provider.xml
191
- - spec/fixtures/noconditions_response.xml
192
- - spec/fixtures/othercertificate.pem
193
- - spec/fixtures/privatekey.key
194
- - spec/fixtures/response_assertion_signed_reffed_from_response.xml
195
- - spec/fixtures/response_signed.xml
196
- - spec/fixtures/response_tampered_certificate.xml
197
- - spec/fixtures/response_tampered_signature.xml
198
- - spec/fixtures/response_with_attribute_signed.xml
199
- - spec/fixtures/response_with_encrypted_assertion.xml
200
- - spec/fixtures/response_with_rsa_key_value.xml
201
- - spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
202
- - spec/fixtures/response_without_keyinfo.xml
203
- - spec/fixtures/service_provider.xml
204
- - spec/fixtures/test3-response.xml
205
- - spec/fixtures/test6-response.xml
206
- - spec/fixtures/test7-response.xml
207
- - spec/fixtures/xml_missigned_assertion.xml
208
- - spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
209
- - spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
210
- - spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
211
- - spec/fixtures/xslt-transform-response.xml
212
- - spec/lib/attribute_consuming_service_spec.rb
213
- - spec/lib/attribute_spec.rb
214
- - spec/lib/authn_request_spec.rb
215
- - spec/lib/bindings/http_redirect_spec.rb
216
- - spec/lib/conditions_spec.rb
217
- - spec/lib/entity_spec.rb
218
- - spec/lib/identity_provider_spec.rb
219
- - spec/lib/indexed_object_spec.rb
220
- - spec/lib/key_spec.rb
221
- - spec/lib/logout_request_spec.rb
222
- - spec/lib/logout_response_spec.rb
223
- - spec/lib/message_spec.rb
224
- - spec/lib/response_spec.rb
225
- - spec/lib/service_provider_spec.rb
226
- - spec/lib/signable_spec.rb
227
- - spec/spec_helper.rb
228
226
  homepage: https://github.com/instructure/ruby-saml2
229
227
  licenses:
230
228
  - MIT
231
- metadata: {}
229
+ metadata:
230
+ rubygems_mfa_required: 'true'
232
231
  post_install_message:
233
232
  rdoc_options: []
234
233
  require_paths:
@@ -237,58 +236,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
237
236
  requirements:
238
237
  - - ">="
239
238
  - !ruby/object:Gem::Version
240
- version: '0'
239
+ version: '2.7'
241
240
  required_rubygems_version: !ruby/object:Gem::Requirement
242
241
  requirements:
243
242
  - - ">="
244
243
  - !ruby/object:Gem::Version
245
244
  version: '0'
246
245
  requirements: []
247
- rubygems_version: 3.1.4
246
+ rubygems_version: 3.4.19
248
247
  signing_key:
249
248
  specification_version: 4
250
249
  summary: SAML 2.0 Library
251
- test_files:
252
- - spec/spec_helper.rb
253
- - spec/lib/logout_response_spec.rb
254
- - spec/lib/indexed_object_spec.rb
255
- - spec/lib/attribute_spec.rb
256
- - spec/lib/signable_spec.rb
257
- - spec/lib/entity_spec.rb
258
- - spec/lib/attribute_consuming_service_spec.rb
259
- - spec/lib/key_spec.rb
260
- - spec/lib/message_spec.rb
261
- - spec/lib/response_spec.rb
262
- - spec/lib/logout_request_spec.rb
263
- - spec/lib/conditions_spec.rb
264
- - spec/lib/bindings/http_redirect_spec.rb
265
- - spec/lib/service_provider_spec.rb
266
- - spec/lib/identity_provider_spec.rb
267
- - spec/lib/authn_request_spec.rb
268
- - spec/fixtures/test3-response.xml
269
- - spec/fixtures/service_provider.xml
270
- - spec/fixtures/response_with_attribute_signed.xml
271
- - spec/fixtures/response_signed.xml
272
- - spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
273
- - spec/fixtures/response_tampered_signature.xml
274
- - spec/fixtures/xml_missigned_assertion.xml
275
- - spec/fixtures/certificate.pem
276
- - spec/fixtures/noconditions_response.xml
277
- - spec/fixtures/response_with_rsa_key_value.xml
278
- - spec/fixtures/entities.xml
279
- - spec/fixtures/response_assertion_signed_reffed_from_response.xml
280
- - spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
281
- - spec/fixtures/response_without_keyinfo.xml
282
- - spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
283
- - spec/fixtures/othercertificate.pem
284
- - spec/fixtures/xslt-transform-response.xml
285
- - spec/fixtures/response_with_encrypted_assertion.xml
286
- - spec/fixtures/external-uri-reference-response.xml
287
- - spec/fixtures/authnrequest.xml
288
- - spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
289
- - spec/fixtures/FederationMetadata.xml
290
- - spec/fixtures/identity_provider.xml
291
- - spec/fixtures/response_tampered_certificate.xml
292
- - spec/fixtures/test7-response.xml
293
- - spec/fixtures/test6-response.xml
294
- - spec/fixtures/privatekey.key
250
+ test_files: []