saml2 3.2.4 → 3.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05f37a8ab729b5a78b6b76c430ae6613d5852613b45980721510e60925b39872
-  data.tar.gz: 1e1ea950995d3deefa465c0fdb2c45c796327bf739633ec2e9b1d977931ee116
+  metadata.gz: 85037740a9c0952be723483bd4980b436f56acb94a71be4776118dbf1a8a87bf
+  data.tar.gz: 978a38a07d77b98f6054c98f404d1114a0715bc605ef2dd595319a3314abbe1f
 SHA512:
-  metadata.gz: 3f3f9d16794991653ebd7c779e5f325b4d0f48a94d90d08f225b82329ec448f09fb495a0028ab3b3b13bb7d9a797fc0c8a4ec0df8630822527e632303d54f408
-  data.tar.gz: 4e025a411a4dea50efa1377c3e2b09c1aa34f52db3ddb1e1e146041835dd392e9945e831751cc1f0b749c19e3c792af630d7b27dcbaaea3fe5544d8c15be4ccd
+  metadata.gz: 3b95a92d7d87bd51532a619f1ba37e76b95c34edc557fbe8b9ecd75e0eaa8b05ef68380ea47fe029a87d2bcd096330e09e12e4482833bf55b6c430e314ab20c7
+  data.tar.gz: 7d2d1d6b947f1183b0a35a804d25ff65124625903404d8d158ddc31c35494343db2418cbf56e193a2ff213a01fa18131639f2fabb7f83b1090750af676b3648d

data/lib/saml2/status.rb

@@ -7,24 +7,74 @@ module SAML2
     SUCCESS   = "urn:oasis:names:tc:SAML:2.0:status:Success"
     REQUESTER = "urn:oasis:names:tc:SAML:2.0:status:Requester"
     RESPONDER = "urn:oasis:names:tc:SAML:2.0:status:Responder"
+    VERSION_MISMATCH = "urn:oasis:names:tc:SAML:2.0:status:VersionMismatch"
 
+    AUTHN_FAILED = "urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"
+    INVALID_ATTR_NAME_OR_VALUE = "urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue"
+    INVALID_NAME_ID_POLICY = "urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy"
+    NO_AUTHN_CONTEXT = "urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext"
+    NO_AVAILABLE_IDP = "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP"
+    NO_PASSIVE = "urn:oasis:names:tc:SAML:2.0:status:NoPassive"
+    NO_SUPPORTED_IDP = "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP"
+    PARTIAL_LOGOUT = "urn:oasis:names:tc:SAML:2.0:status:PartialLogout"
+    PROXY_COUNT_EXCEEDED = "urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded"
+    REQUEST_DENIED = "urn:oasis:names:tc:SAML:2.0:status:RequestDenied"
+    REQUEST_UNSUPPORTED = "urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported"
+    REQUEST_VERSION_DEPRECATED = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated"
+    REQUEST_VERSION_TOO_HIGH = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh"
+    REQUEST_VERSION_TOO_LOW = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow"
+    RESOURCE_NOT_RECOGNIZED = "urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized"
+    TOO_MANY_RESPONSES = "urn:oasis:names:tc:SAML::2.0:status:TooManyResponses"
+    UNKNOWN_ATTR_PROFILE = "urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile"
+    UNKNOWN_PRINCIPAL = "urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal"
+    UNSUPPORTED_BINDING = "urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding"
+
+    TOP_LEVEL_STATUS_CODES = [SUCCESS, REQUESTER, RESPONDER, VERSION_MISMATCH].freeze
+
+    # @return [Array<String>]
+    attr_reader :codes
     # @return [String]
-    attr_accessor :code, :message
+    attr_accessor :message, :detail
 
     # @param code [String]
     # @param message [String, nil]
-    def initialize(code = SUCCESS, message = nil)
+    def initialize(code = SUCCESS, message = nil, detail = nil)
       super()
-      @code = code
+      self.codes = code
       @message = message
+      @detail = detail
     end
 
     # (see Base#from_xml)
     def from_xml(node)
       super
-      self.code = node.at_xpath("samlp:StatusCode", Namespaces::ALL)["Value"]
-      self.message = load_string_array(xml, "samlp:StatusMessage")
+
+      @codes.clear
+      code_node = node
+
+      loop do
+        code_node = code_node.at_xpath("samlp:StatusCode", Namespaces::ALL)
+        break unless code_node
+
+        codes << code_node["Value"]
+      end
+      self.message = xml.at_xpath("samlp:StatusMessage", Namespaces::ALL)&.content&.strip
+      self.detail = xml.at_xpath("samlp:StatusDetail", Namespaces::ALL)&.content&.strip
+    end
+
+    def code
+      codes.first
+    end
+
+    def codes=(value)
+      codes = Array.wrap(value)
+      unless TOP_LEVEL_STATUS_CODES.include?(codes.first)
+        raise ArgumentError, "Invalid top level status code #{codes.first.inspect}"
+      end
+
+      @codes = codes
     end
+    alias_method :code=, :codes=
 
     def success?
       code == SUCCESS
@@ -33,10 +83,20 @@ module SAML2
     # (see Base#build)
     def build(builder)
       builder["samlp"].Status do |status|
-        status["samlp"].StatusCode(Value: code)
-        Array(message).each do |m|
-          status["samlp"].StatusMessage(m)
-        end
+        build_code(status, codes, 0)
+
+        status["samlp"].StatusMessage(message) if message
+        status["samlp"].StatusDetail(detail) if detail
+      end
+    end
+
+    private
+
+    def build_code(builder, codes, idx)
+      return if idx >= codes.length
+
+      builder["samlp"].StatusCode(Value: codes[idx]) do |code_builder|
+        build_code(code_builder, codes, idx + 1)
       end
     end
   end

data/lib/saml2/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SAML2
-  VERSION = "3.2.4"
+  VERSION = "3.3.0"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: saml2
 version: !ruby/object:Gem::Version
-  version: 3.2.4
+  version: 3.3.0
 platform: ruby
 authors:
 - Cody Cutrer
 bindir: exe
 cert_chain: []
-date: 2025-10-13 00:00:00.000000000 Z
+date: 2025-10-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport