saml_idp 0.7.2 → 0.16.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (57) hide show
  1. checksums.yaml +5 -5
  2. data/Gemfile +1 -1
  3. data/README.md +59 -52
  4. data/lib/saml_idp/assertion_builder.rb +28 -3
  5. data/lib/saml_idp/configurator.rb +7 -1
  6. data/lib/saml_idp/controller.rb +21 -13
  7. data/lib/saml_idp/encryptor.rb +0 -1
  8. data/lib/saml_idp/fingerprint.rb +19 -0
  9. data/lib/saml_idp/incoming_metadata.rb +22 -1
  10. data/lib/saml_idp/metadata_builder.rb +23 -8
  11. data/lib/saml_idp/persisted_metadata.rb +4 -0
  12. data/lib/saml_idp/request.rb +26 -6
  13. data/lib/saml_idp/response_builder.rb +26 -6
  14. data/lib/saml_idp/saml_response.rb +62 -28
  15. data/lib/saml_idp/service_provider.rb +15 -6
  16. data/lib/saml_idp/signable.rb +1 -2
  17. data/lib/saml_idp/version.rb +1 -1
  18. data/lib/saml_idp/xml_security.rb +1 -1
  19. data/lib/saml_idp.rb +2 -1
  20. data/saml_idp.gemspec +45 -42
  21. data/spec/acceptance/idp_controller_spec.rb +5 -4
  22. data/spec/lib/saml_idp/algorithmable_spec.rb +6 -6
  23. data/spec/lib/saml_idp/assertion_builder_spec.rb +151 -8
  24. data/spec/lib/saml_idp/attribute_decorator_spec.rb +8 -8
  25. data/spec/lib/saml_idp/configurator_spec.rb +9 -7
  26. data/spec/lib/saml_idp/controller_spec.rb +53 -20
  27. data/spec/lib/saml_idp/encryptor_spec.rb +4 -4
  28. data/spec/lib/saml_idp/fingerprint_spec.rb +14 -0
  29. data/spec/lib/saml_idp/incoming_metadata_spec.rb +60 -0
  30. data/spec/lib/saml_idp/metadata_builder_spec.rb +30 -17
  31. data/spec/lib/saml_idp/name_id_formatter_spec.rb +3 -3
  32. data/spec/lib/saml_idp/request_spec.rb +78 -27
  33. data/spec/lib/saml_idp/response_builder_spec.rb +5 -3
  34. data/spec/lib/saml_idp/saml_response_spec.rb +127 -12
  35. data/spec/lib/saml_idp/service_provider_spec.rb +2 -2
  36. data/spec/lib/saml_idp/signable_spec.rb +1 -1
  37. data/spec/lib/saml_idp/signature_builder_spec.rb +2 -2
  38. data/spec/lib/saml_idp/signed_info_builder_spec.rb +3 -3
  39. data/spec/rails_app/app/controllers/saml_controller.rb +1 -1
  40. data/spec/rails_app/app/controllers/saml_idp_controller.rb +55 -3
  41. data/{app → spec/rails_app/app}/views/saml_idp/idp/new.html.erb +1 -5
  42. data/{app → spec/rails_app/app}/views/saml_idp/idp/saml_post.html.erb +1 -1
  43. data/spec/rails_app/config/application.rb +1 -6
  44. data/spec/rails_app/config/boot.rb +1 -1
  45. data/spec/rails_app/config/environments/development.rb +2 -5
  46. data/spec/rails_app/config/environments/production.rb +1 -0
  47. data/spec/rails_app/config/environments/test.rb +1 -0
  48. data/spec/spec_helper.rb +23 -1
  49. data/spec/support/certificates/sp_cert_req.csr +12 -0
  50. data/spec/support/certificates/sp_private_key.pem +16 -0
  51. data/spec/support/certificates/sp_x509_cert.crt +18 -0
  52. data/spec/support/saml_request_macros.rb +66 -4
  53. data/spec/support/security_helpers.rb +10 -0
  54. data/spec/xml_security_spec.rb +12 -12
  55. metadata +135 -81
  56. data/app/controllers/saml_idp/idp_controller.rb +0 -59
  57. data/spec/lib/saml_idp/.assertion_builder_spec.rb.swp +0 -0
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: saml_idp
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.7.2
4
+ version: 0.16.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jon Phenow
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2017-08-28 00:00:00.000000000 Z
11
+ date: 2024-01-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,169 +16,211 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: '3.2'
19
+ version: '5.2'
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - ">="
25
25
  - !ruby/object:Gem::Version
26
- version: '3.2'
26
+ version: '5.2'
27
27
  - !ruby/object:Gem::Dependency
28
- name: uuid
28
+ name: builder
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
- - - "~>"
31
+ - - ">="
32
32
  - !ruby/object:Gem::Version
33
- version: '2.3'
33
+ version: '3.0'
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
- - - "~>"
38
+ - - ">="
39
39
  - !ruby/object:Gem::Version
40
- version: '2.3'
40
+ version: '3.0'
41
41
  - !ruby/object:Gem::Dependency
42
- name: builder
42
+ name: nokogiri
43
43
  requirement: !ruby/object:Gem::Requirement
44
44
  requirements:
45
- - - "~>"
45
+ - - ">="
46
46
  - !ruby/object:Gem::Version
47
- version: '3.0'
47
+ version: 1.6.2
48
48
  type: :runtime
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
- - - "~>"
52
+ - - ">="
53
53
  - !ruby/object:Gem::Version
54
- version: '3.0'
54
+ version: 1.6.2
55
55
  - !ruby/object:Gem::Dependency
56
- name: nokogiri
56
+ name: rexml
57
57
  requirement: !ruby/object:Gem::Requirement
58
58
  requirements:
59
59
  - - ">="
60
60
  - !ruby/object:Gem::Version
61
- version: 1.6.2
61
+ version: '0'
62
62
  type: :runtime
63
63
  prerelease: false
64
64
  version_requirements: !ruby/object:Gem::Requirement
65
65
  requirements:
66
66
  - - ">="
67
67
  - !ruby/object:Gem::Version
68
- version: 1.6.2
68
+ version: '0'
69
69
  - !ruby/object:Gem::Dependency
70
- name: rake
70
+ name: xmlenc
71
+ requirement: !ruby/object:Gem::Requirement
72
+ requirements:
73
+ - - ">="
74
+ - !ruby/object:Gem::Version
75
+ version: 0.7.1
76
+ type: :runtime
77
+ prerelease: false
78
+ version_requirements: !ruby/object:Gem::Requirement
79
+ requirements:
80
+ - - ">="
81
+ - !ruby/object:Gem::Version
82
+ version: 0.7.1
83
+ - !ruby/object:Gem::Dependency
84
+ name: activeresource
71
85
  requirement: !ruby/object:Gem::Requirement
72
86
  requirements:
73
- - - "~>"
87
+ - - ">="
74
88
  - !ruby/object:Gem::Version
75
- version: 10.4.2
89
+ version: '5.1'
76
90
  type: :development
77
91
  prerelease: false
78
92
  version_requirements: !ruby/object:Gem::Requirement
79
93
  requirements:
80
- - - "~>"
94
+ - - ">="
81
95
  - !ruby/object:Gem::Version
82
- version: 10.4.2
96
+ version: '5.1'
83
97
  - !ruby/object:Gem::Dependency
84
- name: simplecov
98
+ name: appraisal
85
99
  requirement: !ruby/object:Gem::Requirement
86
100
  requirements:
87
- - - "~>"
101
+ - - ">="
88
102
  - !ruby/object:Gem::Version
89
- version: '0.12'
103
+ version: '0'
90
104
  type: :development
91
105
  prerelease: false
92
106
  version_requirements: !ruby/object:Gem::Requirement
93
107
  requirements:
94
- - - "~>"
108
+ - - ">="
95
109
  - !ruby/object:Gem::Version
96
- version: '0.12'
110
+ version: '0'
97
111
  - !ruby/object:Gem::Dependency
98
- name: rspec
112
+ name: byebug
99
113
  requirement: !ruby/object:Gem::Requirement
100
114
  requirements:
101
- - - "~>"
115
+ - - ">="
102
116
  - !ruby/object:Gem::Version
103
- version: '2.5'
117
+ version: '0'
104
118
  type: :development
105
119
  prerelease: false
106
120
  version_requirements: !ruby/object:Gem::Requirement
107
121
  requirements:
108
- - - "~>"
122
+ - - ">="
109
123
  - !ruby/object:Gem::Version
110
- version: '2.5'
124
+ version: '0'
111
125
  - !ruby/object:Gem::Dependency
112
- name: ruby-saml
126
+ name: capybara
113
127
  requirement: !ruby/object:Gem::Requirement
114
128
  requirements:
115
- - - "~>"
129
+ - - ">="
116
130
  - !ruby/object:Gem::Version
117
- version: '1.3'
131
+ version: '2.16'
118
132
  type: :development
119
133
  prerelease: false
120
134
  version_requirements: !ruby/object:Gem::Requirement
121
135
  requirements:
122
- - - "~>"
136
+ - - ">="
123
137
  - !ruby/object:Gem::Version
124
- version: '1.3'
138
+ version: '2.16'
125
139
  - !ruby/object:Gem::Dependency
126
140
  name: rails
127
141
  requirement: !ruby/object:Gem::Requirement
128
142
  requirements:
129
- - - "~>"
143
+ - - ">="
130
144
  - !ruby/object:Gem::Version
131
- version: '3.2'
145
+ version: '5.2'
132
146
  type: :development
133
147
  prerelease: false
134
148
  version_requirements: !ruby/object:Gem::Requirement
135
149
  requirements:
136
- - - "~>"
150
+ - - ">="
137
151
  - !ruby/object:Gem::Version
138
- version: '3.2'
152
+ version: '5.2'
139
153
  - !ruby/object:Gem::Dependency
140
- name: capybara
154
+ name: rake
141
155
  requirement: !ruby/object:Gem::Requirement
142
156
  requirements:
143
- - - "~>"
157
+ - - ">="
144
158
  - !ruby/object:Gem::Version
145
- version: 2.11.0
159
+ version: '0'
146
160
  type: :development
147
161
  prerelease: false
148
162
  version_requirements: !ruby/object:Gem::Requirement
149
163
  requirements:
150
- - - "~>"
164
+ - - ">="
151
165
  - !ruby/object:Gem::Version
152
- version: 2.11.0
166
+ version: '0'
153
167
  - !ruby/object:Gem::Dependency
154
- name: timecop
168
+ name: rspec
155
169
  requirement: !ruby/object:Gem::Requirement
156
170
  requirements:
157
- - - "~>"
171
+ - - ">="
158
172
  - !ruby/object:Gem::Version
159
- version: '0.8'
173
+ version: 3.7.0
160
174
  type: :development
161
175
  prerelease: false
162
176
  version_requirements: !ruby/object:Gem::Requirement
163
177
  requirements:
164
- - - "~>"
178
+ - - ">="
165
179
  - !ruby/object:Gem::Version
166
- version: '0.8'
180
+ version: 3.7.0
167
181
  - !ruby/object:Gem::Dependency
168
- name: xmlenc
182
+ name: ruby-saml
169
183
  requirement: !ruby/object:Gem::Requirement
170
184
  requirements:
171
185
  - - ">="
172
186
  - !ruby/object:Gem::Version
173
- version: 0.6.4
187
+ version: 1.7.2
174
188
  type: :development
175
189
  prerelease: false
176
190
  version_requirements: !ruby/object:Gem::Requirement
177
191
  requirements:
178
192
  - - ">="
179
193
  - !ruby/object:Gem::Version
180
- version: 0.6.4
181
- description: SAML IdP (Identity Provider) library in ruby
194
+ version: 1.7.2
195
+ - !ruby/object:Gem::Dependency
196
+ name: simplecov
197
+ requirement: !ruby/object:Gem::Requirement
198
+ requirements:
199
+ - - ">="
200
+ - !ruby/object:Gem::Version
201
+ version: '0'
202
+ type: :development
203
+ prerelease: false
204
+ version_requirements: !ruby/object:Gem::Requirement
205
+ requirements:
206
+ - - ">="
207
+ - !ruby/object:Gem::Version
208
+ version: '0'
209
+ - !ruby/object:Gem::Dependency
210
+ name: timecop
211
+ requirement: !ruby/object:Gem::Requirement
212
+ requirements:
213
+ - - ">="
214
+ - !ruby/object:Gem::Version
215
+ version: '0.8'
216
+ type: :development
217
+ prerelease: false
218
+ version_requirements: !ruby/object:Gem::Requirement
219
+ requirements:
220
+ - - ">="
221
+ - !ruby/object:Gem::Version
222
+ version: '0.8'
223
+ description: SAML IdP (Identity Provider) Library for Ruby
182
224
  email: jon.phenow@sportngin.com
183
225
  executables: []
184
226
  extensions: []
@@ -187,9 +229,6 @@ files:
187
229
  - Gemfile
188
230
  - LICENSE
189
231
  - README.md
190
- - app/controllers/saml_idp/idp_controller.rb
191
- - app/views/saml_idp/idp/new.html.erb
192
- - app/views/saml_idp/idp/saml_post.html.erb
193
232
  - lib/saml_idp.rb
194
233
  - lib/saml_idp/algorithmable.rb
195
234
  - lib/saml_idp/assertion_builder.rb
@@ -200,6 +239,7 @@ files:
200
239
  - lib/saml_idp/default.rb
201
240
  - lib/saml_idp/encryptor.rb
202
241
  - lib/saml_idp/engine.rb
242
+ - lib/saml_idp/fingerprint.rb
203
243
  - lib/saml_idp/hashable.rb
204
244
  - lib/saml_idp/incoming_metadata.rb
205
245
  - lib/saml_idp/logout_builder.rb
@@ -220,13 +260,14 @@ files:
220
260
  - saml_idp.gemspec
221
261
  - spec/acceptance/acceptance_helper.rb
222
262
  - spec/acceptance/idp_controller_spec.rb
223
- - spec/lib/saml_idp/.assertion_builder_spec.rb.swp
224
263
  - spec/lib/saml_idp/algorithmable_spec.rb
225
264
  - spec/lib/saml_idp/assertion_builder_spec.rb
226
265
  - spec/lib/saml_idp/attribute_decorator_spec.rb
227
266
  - spec/lib/saml_idp/configurator_spec.rb
228
267
  - spec/lib/saml_idp/controller_spec.rb
229
268
  - spec/lib/saml_idp/encryptor_spec.rb
269
+ - spec/lib/saml_idp/fingerprint_spec.rb
270
+ - spec/lib/saml_idp/incoming_metadata_spec.rb
230
271
  - spec/lib/saml_idp/logout_request_builder_spec.rb
231
272
  - spec/lib/saml_idp/logout_response_builder_spec.rb
232
273
  - spec/lib/saml_idp/metadata_builder_spec.rb
@@ -251,6 +292,8 @@ files:
251
292
  - spec/rails_app/app/mailers/.gitkeep
252
293
  - spec/rails_app/app/models/.gitkeep
253
294
  - spec/rails_app/app/views/layouts/application.html.erb
295
+ - spec/rails_app/app/views/saml_idp/idp/new.html.erb
296
+ - spec/rails_app/app/views/saml_idp/idp/saml_post.html.erb
254
297
  - spec/rails_app/config.ru
255
298
  - spec/rails_app/config/application.rb
256
299
  - spec/rails_app/config/boot.rb
@@ -291,6 +334,9 @@ files:
291
334
  - spec/spec_helper.rb
292
335
  - spec/support/certificates/certificate1
293
336
  - spec/support/certificates/r1_certificate2_base64
337
+ - spec/support/certificates/sp_cert_req.csr
338
+ - spec/support/certificates/sp_private_key.pem
339
+ - spec/support/certificates/sp_x509_cert.crt
294
340
  - spec/support/responses/adfs_response_sha1.xml
295
341
  - spec/support/responses/adfs_response_sha256.xml
296
342
  - spec/support/responses/adfs_response_sha384.xml
@@ -312,25 +358,28 @@ files:
312
358
  - spec/support/saml_request_macros.rb
313
359
  - spec/support/security_helpers.rb
314
360
  - spec/xml_security_spec.rb
315
- homepage: http://github.com/sportngin/saml_idp
361
+ homepage: https://github.com/saml-idp/saml_idp
316
362
  licenses:
317
- - LICENSE
318
- metadata: {}
319
- post_install_message: |
320
- If you're just recently updating saml_idp - please be aware we've changed the default
321
- certificate. See the PR and a description of why we've done this here:
322
- https://github.com/sportngin/saml_idp/pull/29
323
-
324
- If you just need to see the certificate `bundle open saml_idp` and go to
325
- `lib/saml_idp/default.rb`
363
+ - MIT
364
+ metadata:
365
+ homepage_uri: https://github.com/saml-idp/saml_idp
366
+ source_code_uri: https://github.com/saml-idp/saml_idp
367
+ bug_tracker_uri: https://github.com/saml-idp/saml_idp/issues
368
+ documentation_uri: http://rdoc.info/gems/saml_idp/0.16.0
369
+ post_install_message: |2
370
+ If you're just recently updating saml_idp - please be aware we've changed the default
371
+ certificate. See the PR and a description of why we've done this here:
372
+ https://github.com/saml-idp/saml_idp/pull/29
326
373
 
327
- Similarly, please see the README about certificates - you should avoid using the
328
- defaults in a Production environment. Post any issues you to github.
374
+ If you just need to see the certificate `bundle open saml_idp` and go to
375
+ `lib/saml_idp/default.rb`
329
376
 
330
- ** New in Version 0.3.0 **
377
+ Similarly, please see the README about certificates - you should avoid using the
378
+ defaults in a Production environment. Post any issues you to github.
331
379
 
332
- Encrypted Assertions require the xmlenc gem. See the example in the Controller
333
- section of the README.
380
+ ** New in Version 0.3.0 **
381
+ Encrypted Assertions require the xmlenc gem. See the example in the Controller
382
+ section of the README.
334
383
  rdoc_options:
335
384
  - "--charset=UTF-8"
336
385
  require_paths:
@@ -339,28 +388,28 @@ required_ruby_version: !ruby/object:Gem::Requirement
339
388
  requirements:
340
389
  - - ">="
341
390
  - !ruby/object:Gem::Version
342
- version: '2.2'
391
+ version: '2.5'
343
392
  required_rubygems_version: !ruby/object:Gem::Requirement
344
393
  requirements:
345
394
  - - ">="
346
395
  - !ruby/object:Gem::Version
347
396
  version: '0'
348
397
  requirements: []
349
- rubyforge_project:
350
- rubygems_version: 2.4.5.2
351
- signing_key:
398
+ rubygems_version: 3.3.7
399
+ signing_key:
352
400
  specification_version: 4
353
- summary: SAML Indentity Provider in ruby
401
+ summary: SAML Indentity Provider for Ruby
354
402
  test_files:
355
403
  - spec/acceptance/acceptance_helper.rb
356
404
  - spec/acceptance/idp_controller_spec.rb
357
- - spec/lib/saml_idp/.assertion_builder_spec.rb.swp
358
405
  - spec/lib/saml_idp/algorithmable_spec.rb
359
406
  - spec/lib/saml_idp/assertion_builder_spec.rb
360
407
  - spec/lib/saml_idp/attribute_decorator_spec.rb
361
408
  - spec/lib/saml_idp/configurator_spec.rb
362
409
  - spec/lib/saml_idp/controller_spec.rb
363
410
  - spec/lib/saml_idp/encryptor_spec.rb
411
+ - spec/lib/saml_idp/fingerprint_spec.rb
412
+ - spec/lib/saml_idp/incoming_metadata_spec.rb
364
413
  - spec/lib/saml_idp/logout_request_builder_spec.rb
365
414
  - spec/lib/saml_idp/logout_response_builder_spec.rb
366
415
  - spec/lib/saml_idp/metadata_builder_spec.rb
@@ -385,6 +434,8 @@ test_files:
385
434
  - spec/rails_app/app/mailers/.gitkeep
386
435
  - spec/rails_app/app/models/.gitkeep
387
436
  - spec/rails_app/app/views/layouts/application.html.erb
437
+ - spec/rails_app/app/views/saml_idp/idp/new.html.erb
438
+ - spec/rails_app/app/views/saml_idp/idp/saml_post.html.erb
388
439
  - spec/rails_app/config.ru
389
440
  - spec/rails_app/config/application.rb
390
441
  - spec/rails_app/config/boot.rb
@@ -425,6 +476,9 @@ test_files:
425
476
  - spec/spec_helper.rb
426
477
  - spec/support/certificates/certificate1
427
478
  - spec/support/certificates/r1_certificate2_base64
479
+ - spec/support/certificates/sp_cert_req.csr
480
+ - spec/support/certificates/sp_private_key.pem
481
+ - spec/support/certificates/sp_x509_cert.crt
428
482
  - spec/support/responses/adfs_response_sha1.xml
429
483
  - spec/support/responses/adfs_response_sha256.xml
430
484
  - spec/support/responses/adfs_response_sha384.xml
data/app/controllers/saml_idp/idp_controller.rb DELETED
@@ -1,59 +0,0 @@
1
- # encoding: utf-8
2
-
3
- module SamlIdp
4
- class IdpController < ActionController::Base
5
- include SamlIdp::Controller
6
-
7
- unloadable unless Rails::VERSION::MAJOR >= 4
8
- protect_from_forgery
9
-
10
- if Rails::VERSION::MAJOR >= 4
11
- before_action :validate_saml_request, only: [:new, :create]
12
- else
13
- before_filter :validate_saml_request, only: [:new, :create]
14
- end
15
-
16
- def new
17
- render template: "saml_idp/idp/new"
18
- end
19
-
20
- def show
21
- render xml: SamlIdp.metadata.signed
22
- end
23
-
24
- def create
25
- unless params[:email].blank? && params[:password].blank?
26
- person = idp_authenticate(params[:email], params[:password])
27
- if person.nil?
28
- @saml_idp_fail_msg = "Incorrect email or password."
29
- else
30
- @saml_response = idp_make_saml_response(person)
31
- render :template => "saml_idp/idp/saml_post", :layout => false
32
- return
33
- end
34
- end
35
- render :template => "saml_idp/idp/new"
36
- end
37
-
38
- def logout
39
- idp_logout
40
- @saml_response = idp_make_saml_response(nil)
41
- render :template => "saml_idp/idp/saml_post", :layout => false
42
- end
43
-
44
- def idp_logout
45
- raise NotImplementedError
46
- end
47
- private :idp_logout
48
-
49
- def idp_authenticate(email, password)
50
- raise NotImplementedError
51
- end
52
- protected :idp_authenticate
53
-
54
- def idp_make_saml_response(person)
55
- raise NotImplementedError
56
- end
57
- protected :idp_make_saml_response
58
- end
59
- end