saml2 3.1.2 → 3.1.4
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Rakefile +6 -4
- data/exe/bulk_verify_responses +94 -0
- data/lib/saml2/assertion.rb +7 -7
- data/lib/saml2/attribute/x500.rb +31 -28
- data/lib/saml2/attribute.rb +53 -49
- data/lib/saml2/attribute_consuming_service.rb +29 -31
- data/lib/saml2/authn_request.rb +54 -47
- data/lib/saml2/authn_statement.rb +31 -20
- data/lib/saml2/base.rb +72 -63
- data/lib/saml2/bindings/http_post.rb +7 -7
- data/lib/saml2/bindings/http_redirect.rb +37 -33
- data/lib/saml2/bindings.rb +1 -1
- data/lib/saml2/conditions.rb +19 -16
- data/lib/saml2/contact.rb +19 -18
- data/lib/saml2/endpoint.rb +14 -11
- data/lib/saml2/entity.rb +27 -27
- data/lib/saml2/identity_provider.rb +13 -10
- data/lib/saml2/indexed_object.rb +15 -12
- data/lib/saml2/key.rb +43 -34
- data/lib/saml2/localized_name.rb +11 -10
- data/lib/saml2/logout_request.rb +8 -8
- data/lib/saml2/logout_response.rb +4 -4
- data/lib/saml2/message.rb +24 -20
- data/lib/saml2/name_id.rb +45 -41
- data/lib/saml2/namespaces.rb +8 -8
- data/lib/saml2/organization.rb +11 -10
- data/lib/saml2/organization_and_contacts.rb +5 -5
- data/lib/saml2/request.rb +3 -3
- data/lib/saml2/requested_authn_context.rb +4 -4
- data/lib/saml2/response.rb +45 -33
- data/lib/saml2/role.rb +11 -11
- data/lib/saml2/schemas.rb +13 -10
- data/lib/saml2/service_provider.rb +11 -12
- data/lib/saml2/signable.rb +23 -18
- data/lib/saml2/sso.rb +5 -5
- data/lib/saml2/status.rb +9 -7
- data/lib/saml2/status_response.rb +5 -5
- data/lib/saml2/subject.rb +28 -28
- data/lib/saml2/version.rb +1 -1
- data/lib/saml2.rb +7 -7
- metadata +78 -122
- data/spec/fixtures/FederationMetadata.xml +0 -670
- data/spec/fixtures/authnrequest.xml +0 -12
- data/spec/fixtures/certificate.pem +0 -24
- data/spec/fixtures/entities.xml +0 -13
- data/spec/fixtures/external-uri-reference-response.xml +0 -48
- data/spec/fixtures/identity_provider.xml +0 -46
- data/spec/fixtures/noconditions_response.xml +0 -1
- data/spec/fixtures/othercertificate.pem +0 -25
- data/spec/fixtures/privatekey.key +0 -27
- data/spec/fixtures/response_assertion_signed_reffed_from_response.xml +0 -6
- data/spec/fixtures/response_signed.xml +0 -46
- data/spec/fixtures/response_tampered_certificate.xml +0 -25
- data/spec/fixtures/response_tampered_signature.xml +0 -46
- data/spec/fixtures/response_with_attribute_signed.xml +0 -46
- data/spec/fixtures/response_with_encrypted_assertion.xml +0 -58
- data/spec/fixtures/response_with_rsa_key_value.xml +0 -1
- data/spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml +0 -116
- data/spec/fixtures/response_without_keyinfo.xml +0 -1
- data/spec/fixtures/service_provider.xml +0 -79
- data/spec/fixtures/test3-response.xml +0 -9
- data/spec/fixtures/test6-response.xml +0 -10
- data/spec/fixtures/test7-response.xml +0 -10
- data/spec/fixtures/xml_missigned_assertion.xml +0 -84
- data/spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml +0 -11
- data/spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml +0 -45
- data/spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml +0 -44
- data/spec/fixtures/xslt-transform-response.xml +0 -57
- data/spec/lib/attribute_consuming_service_spec.rb +0 -129
- data/spec/lib/attribute_spec.rb +0 -149
- data/spec/lib/authn_request_spec.rb +0 -52
- data/spec/lib/bindings/http_redirect_spec.rb +0 -183
- data/spec/lib/conditions_spec.rb +0 -74
- data/spec/lib/entity_spec.rb +0 -58
- data/spec/lib/identity_provider_spec.rb +0 -43
- data/spec/lib/indexed_object_spec.rb +0 -71
- data/spec/lib/key_spec.rb +0 -23
- data/spec/lib/logout_request_spec.rb +0 -33
- data/spec/lib/logout_response_spec.rb +0 -33
- data/spec/lib/message_spec.rb +0 -23
- data/spec/lib/response_spec.rb +0 -293
- data/spec/lib/service_provider_spec.rb +0 -76
- data/spec/lib/signable_spec.rb +0 -15
- data/spec/spec_helper.rb +0 -8
metadata
CHANGED
@@ -1,15 +1,35 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: saml2
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.1.
|
4
|
+
version: 3.1.4
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Cody Cutrer
|
8
8
|
autorequire:
|
9
|
-
bindir:
|
9
|
+
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2023-10-06 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
|
+
- !ruby/object:Gem::Dependency
|
14
|
+
name: activesupport
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
16
|
+
requirements:
|
17
|
+
- - ">="
|
18
|
+
- !ruby/object:Gem::Version
|
19
|
+
version: '3.2'
|
20
|
+
- - "<"
|
21
|
+
- !ruby/object:Gem::Version
|
22
|
+
version: '7.2'
|
23
|
+
type: :runtime
|
24
|
+
prerelease: false
|
25
|
+
version_requirements: !ruby/object:Gem::Requirement
|
26
|
+
requirements:
|
27
|
+
- - ">="
|
28
|
+
- !ruby/object:Gem::Version
|
29
|
+
version: '3.2'
|
30
|
+
- - "<"
|
31
|
+
- !ruby/object:Gem::Version
|
32
|
+
version: '7.2'
|
13
33
|
- !ruby/object:Gem::Dependency
|
14
34
|
name: nokogiri
|
15
35
|
requirement: !ruby/object:Gem::Requirement
|
@@ -51,83 +71,104 @@ dependencies:
|
|
51
71
|
- !ruby/object:Gem::Version
|
52
72
|
version: 0.9.5
|
53
73
|
- !ruby/object:Gem::Dependency
|
54
|
-
name:
|
74
|
+
name: byebug
|
55
75
|
requirement: !ruby/object:Gem::Requirement
|
56
76
|
requirements:
|
57
|
-
- - "
|
77
|
+
- - "~>"
|
58
78
|
- !ruby/object:Gem::Version
|
59
|
-
version: '
|
60
|
-
|
79
|
+
version: '11.0'
|
80
|
+
type: :development
|
81
|
+
prerelease: false
|
82
|
+
version_requirements: !ruby/object:Gem::Requirement
|
83
|
+
requirements:
|
84
|
+
- - "~>"
|
61
85
|
- !ruby/object:Gem::Version
|
62
|
-
version: '
|
63
|
-
|
86
|
+
version: '11.0'
|
87
|
+
- !ruby/object:Gem::Dependency
|
88
|
+
name: rake
|
89
|
+
requirement: !ruby/object:Gem::Requirement
|
90
|
+
requirements:
|
91
|
+
- - "~>"
|
92
|
+
- !ruby/object:Gem::Version
|
93
|
+
version: '12.0'
|
94
|
+
type: :development
|
64
95
|
prerelease: false
|
65
96
|
version_requirements: !ruby/object:Gem::Requirement
|
66
97
|
requirements:
|
67
|
-
- - "
|
98
|
+
- - "~>"
|
68
99
|
- !ruby/object:Gem::Version
|
69
|
-
version: '
|
70
|
-
|
100
|
+
version: '12.0'
|
101
|
+
- !ruby/object:Gem::Dependency
|
102
|
+
name: rspec
|
103
|
+
requirement: !ruby/object:Gem::Requirement
|
104
|
+
requirements:
|
105
|
+
- - "~>"
|
106
|
+
- !ruby/object:Gem::Version
|
107
|
+
version: '3.5'
|
108
|
+
type: :development
|
109
|
+
prerelease: false
|
110
|
+
version_requirements: !ruby/object:Gem::Requirement
|
111
|
+
requirements:
|
112
|
+
- - "~>"
|
71
113
|
- !ruby/object:Gem::Version
|
72
|
-
version: '
|
114
|
+
version: '3.5'
|
73
115
|
- !ruby/object:Gem::Dependency
|
74
|
-
name:
|
116
|
+
name: rubocop-inst
|
75
117
|
requirement: !ruby/object:Gem::Requirement
|
76
118
|
requirements:
|
77
119
|
- - "~>"
|
78
120
|
- !ruby/object:Gem::Version
|
79
|
-
version: '
|
121
|
+
version: '1'
|
80
122
|
type: :development
|
81
123
|
prerelease: false
|
82
124
|
version_requirements: !ruby/object:Gem::Requirement
|
83
125
|
requirements:
|
84
126
|
- - "~>"
|
85
127
|
- !ruby/object:Gem::Version
|
86
|
-
version: '
|
128
|
+
version: '1'
|
87
129
|
- !ruby/object:Gem::Dependency
|
88
|
-
name: rake
|
130
|
+
name: rubocop-rake
|
89
131
|
requirement: !ruby/object:Gem::Requirement
|
90
132
|
requirements:
|
91
133
|
- - "~>"
|
92
134
|
- !ruby/object:Gem::Version
|
93
|
-
version: '
|
135
|
+
version: '0.6'
|
94
136
|
type: :development
|
95
137
|
prerelease: false
|
96
138
|
version_requirements: !ruby/object:Gem::Requirement
|
97
139
|
requirements:
|
98
140
|
- - "~>"
|
99
141
|
- !ruby/object:Gem::Version
|
100
|
-
version: '
|
142
|
+
version: '0.6'
|
101
143
|
- !ruby/object:Gem::Dependency
|
102
|
-
name: rspec
|
144
|
+
name: rubocop-rspec
|
103
145
|
requirement: !ruby/object:Gem::Requirement
|
104
146
|
requirements:
|
105
147
|
- - "~>"
|
106
148
|
- !ruby/object:Gem::Version
|
107
|
-
version: '
|
149
|
+
version: '2.20'
|
108
150
|
type: :development
|
109
151
|
prerelease: false
|
110
152
|
version_requirements: !ruby/object:Gem::Requirement
|
111
153
|
requirements:
|
112
154
|
- - "~>"
|
113
155
|
- !ruby/object:Gem::Version
|
114
|
-
version: '
|
115
|
-
description: |
|
116
|
-
|
117
|
-
|
118
|
-
|
119
|
-
|
120
|
-
|
121
|
-
|
122
|
-
For now, it provides a clean interface for implementing an IdP,
|
123
|
-
but not an SP.
|
156
|
+
version: '2.20'
|
157
|
+
description: |
|
158
|
+
The saml2 library is yet another SAML library for Ruby, with
|
159
|
+
an emphasis on _not_ re-implementing XML, especially XML Security,
|
160
|
+
_not_ parsing via Regex or generating XML by string concatenation,
|
161
|
+
_not_ serializing/re-parsing multiple times just to get it into
|
162
|
+
the correct format to sign or validate.
|
124
163
|
email: cody@instructure.com'
|
125
|
-
executables:
|
164
|
+
executables:
|
165
|
+
- bulk_verify_responses
|
126
166
|
extensions: []
|
127
167
|
extra_rdoc_files: []
|
128
168
|
files:
|
129
169
|
- Rakefile
|
130
170
|
- app/views/saml2/http_post.html.erb
|
171
|
+
- exe/bulk_verify_responses
|
131
172
|
- lib/saml2.rb
|
132
173
|
- lib/saml2/assertion.rb
|
133
174
|
- lib/saml2/attribute.rb
|
@@ -182,53 +223,11 @@ files:
|
|
182
223
|
- schemas/xenc-schema.xsd
|
183
224
|
- schemas/xml.xsd
|
184
225
|
- schemas/xmldsig-core-schema.xsd
|
185
|
-
- spec/fixtures/FederationMetadata.xml
|
186
|
-
- spec/fixtures/authnrequest.xml
|
187
|
-
- spec/fixtures/certificate.pem
|
188
|
-
- spec/fixtures/entities.xml
|
189
|
-
- spec/fixtures/external-uri-reference-response.xml
|
190
|
-
- spec/fixtures/identity_provider.xml
|
191
|
-
- spec/fixtures/noconditions_response.xml
|
192
|
-
- spec/fixtures/othercertificate.pem
|
193
|
-
- spec/fixtures/privatekey.key
|
194
|
-
- spec/fixtures/response_assertion_signed_reffed_from_response.xml
|
195
|
-
- spec/fixtures/response_signed.xml
|
196
|
-
- spec/fixtures/response_tampered_certificate.xml
|
197
|
-
- spec/fixtures/response_tampered_signature.xml
|
198
|
-
- spec/fixtures/response_with_attribute_signed.xml
|
199
|
-
- spec/fixtures/response_with_encrypted_assertion.xml
|
200
|
-
- spec/fixtures/response_with_rsa_key_value.xml
|
201
|
-
- spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
|
202
|
-
- spec/fixtures/response_without_keyinfo.xml
|
203
|
-
- spec/fixtures/service_provider.xml
|
204
|
-
- spec/fixtures/test3-response.xml
|
205
|
-
- spec/fixtures/test6-response.xml
|
206
|
-
- spec/fixtures/test7-response.xml
|
207
|
-
- spec/fixtures/xml_missigned_assertion.xml
|
208
|
-
- spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
|
209
|
-
- spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
|
210
|
-
- spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
|
211
|
-
- spec/fixtures/xslt-transform-response.xml
|
212
|
-
- spec/lib/attribute_consuming_service_spec.rb
|
213
|
-
- spec/lib/attribute_spec.rb
|
214
|
-
- spec/lib/authn_request_spec.rb
|
215
|
-
- spec/lib/bindings/http_redirect_spec.rb
|
216
|
-
- spec/lib/conditions_spec.rb
|
217
|
-
- spec/lib/entity_spec.rb
|
218
|
-
- spec/lib/identity_provider_spec.rb
|
219
|
-
- spec/lib/indexed_object_spec.rb
|
220
|
-
- spec/lib/key_spec.rb
|
221
|
-
- spec/lib/logout_request_spec.rb
|
222
|
-
- spec/lib/logout_response_spec.rb
|
223
|
-
- spec/lib/message_spec.rb
|
224
|
-
- spec/lib/response_spec.rb
|
225
|
-
- spec/lib/service_provider_spec.rb
|
226
|
-
- spec/lib/signable_spec.rb
|
227
|
-
- spec/spec_helper.rb
|
228
226
|
homepage: https://github.com/instructure/ruby-saml2
|
229
227
|
licenses:
|
230
228
|
- MIT
|
231
|
-
metadata:
|
229
|
+
metadata:
|
230
|
+
rubygems_mfa_required: 'true'
|
232
231
|
post_install_message:
|
233
232
|
rdoc_options: []
|
234
233
|
require_paths:
|
@@ -237,58 +236,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
237
236
|
requirements:
|
238
237
|
- - ">="
|
239
238
|
- !ruby/object:Gem::Version
|
240
|
-
version: '
|
239
|
+
version: '2.7'
|
241
240
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
242
241
|
requirements:
|
243
242
|
- - ">="
|
244
243
|
- !ruby/object:Gem::Version
|
245
244
|
version: '0'
|
246
245
|
requirements: []
|
247
|
-
rubygems_version: 3.
|
246
|
+
rubygems_version: 3.4.19
|
248
247
|
signing_key:
|
249
248
|
specification_version: 4
|
250
249
|
summary: SAML 2.0 Library
|
251
|
-
test_files:
|
252
|
-
- spec/spec_helper.rb
|
253
|
-
- spec/lib/logout_response_spec.rb
|
254
|
-
- spec/lib/indexed_object_spec.rb
|
255
|
-
- spec/lib/attribute_spec.rb
|
256
|
-
- spec/lib/signable_spec.rb
|
257
|
-
- spec/lib/entity_spec.rb
|
258
|
-
- spec/lib/attribute_consuming_service_spec.rb
|
259
|
-
- spec/lib/key_spec.rb
|
260
|
-
- spec/lib/message_spec.rb
|
261
|
-
- spec/lib/response_spec.rb
|
262
|
-
- spec/lib/logout_request_spec.rb
|
263
|
-
- spec/lib/conditions_spec.rb
|
264
|
-
- spec/lib/bindings/http_redirect_spec.rb
|
265
|
-
- spec/lib/service_provider_spec.rb
|
266
|
-
- spec/lib/identity_provider_spec.rb
|
267
|
-
- spec/lib/authn_request_spec.rb
|
268
|
-
- spec/fixtures/test3-response.xml
|
269
|
-
- spec/fixtures/service_provider.xml
|
270
|
-
- spec/fixtures/response_with_attribute_signed.xml
|
271
|
-
- spec/fixtures/response_signed.xml
|
272
|
-
- spec/fixtures/xml_signature_wrapping_attack_response_nameid.xml
|
273
|
-
- spec/fixtures/response_tampered_signature.xml
|
274
|
-
- spec/fixtures/xml_missigned_assertion.xml
|
275
|
-
- spec/fixtures/certificate.pem
|
276
|
-
- spec/fixtures/noconditions_response.xml
|
277
|
-
- spec/fixtures/response_with_rsa_key_value.xml
|
278
|
-
- spec/fixtures/entities.xml
|
279
|
-
- spec/fixtures/response_assertion_signed_reffed_from_response.xml
|
280
|
-
- spec/fixtures/xml_signature_wrapping_attack_duplicate_ids.xml
|
281
|
-
- spec/fixtures/response_without_keyinfo.xml
|
282
|
-
- spec/fixtures/response_with_signed_assertion_and_encrypted_subject.xml
|
283
|
-
- spec/fixtures/othercertificate.pem
|
284
|
-
- spec/fixtures/xslt-transform-response.xml
|
285
|
-
- spec/fixtures/response_with_encrypted_assertion.xml
|
286
|
-
- spec/fixtures/external-uri-reference-response.xml
|
287
|
-
- spec/fixtures/authnrequest.xml
|
288
|
-
- spec/fixtures/xml_signature_wrapping_attack_response_attributes.xml
|
289
|
-
- spec/fixtures/FederationMetadata.xml
|
290
|
-
- spec/fixtures/identity_provider.xml
|
291
|
-
- spec/fixtures/response_tampered_certificate.xml
|
292
|
-
- spec/fixtures/test7-response.xml
|
293
|
-
- spec/fixtures/test6-response.xml
|
294
|
-
- spec/fixtures/privatekey.key
|
250
|
+
test_files: []
|