spid-es 0.0.3 → 0.0.4

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    YzY1ZTliNmI1YzlmMWRmZjFjMzM4MjE3MjA0ODAzYmVmZmZjMTAwZA==
+    MGU5OTQwOWU0MmMxYzc5ZGU3ZjJkNGI1N2U4MDU4ZWUwYzUzNDI3Mw==
   data.tar.gz: !binary |-
-    MzEyOGNmYTU5NTdhNGMyZTA4NTY1MDJjMjdmZmZjMWYyNmNlMzQ3ZQ==
+    M2Y2Y2NjYTE1NTc3YzZiMjk1ZDhiODAxYjc5OTE5ZWEyMTZmZGZiZQ==
 SHA512:
   metadata.gz: !binary |-
-    NGU1OWJkNjFiOWFmN2UyM2Y0NjkzOGFlOWQyYzA2ZjU4OGNiYWQzNDRhZjhi
-    ODExYzlmOTFmZDBkOTkzMDg5YjQ5MGVkYjRmN2VjOTViZTE0OWM1MTNlM2Yz
-    Nzg3NjUzZjAxNjBhZjQ1MDliZDY4MGRmZjU4YjU0OTc3ZjVlYzI=
+    MWYxMGM2ODE5YzdiM2NjNzk5YzhjOTQ1NzE0MTkxOGIwYzQ2OTkxYjM3MDU3
+    YWY5Y2FjZDI4MDk3ZDIyZmYzZTA0YTQ2MTFlYzQyN2UxMDc0NGM3N2QzMTcw
+    MmVjZDZmYTU3YjU0YmZjMWFkNDA4YTVmNzMzMGQ4NjYwZWI0NzY=
   data.tar.gz: !binary |-
-    NTE1Y2YyZWY1NjYyZWZhMjMyODA4MDg2ZWUzMDBhMmQ4YzViZGI1ZWQ4MDFh
-    MWE4OGZhZmFiYzlkYWY0MzgzNTU1MWIzNmIzNmVhMmUyMTIwYjUwMTAwZTMy
-    YWU5ZGJlMzRhMGUxNWNhNTk0MjZiN2E1YmNjMWQ5NmNiN2E2NTA=
+    YTNjZDBmMDk5YjJiNGQxMzk0OGRjZmEzOTFlYjI4NjkzZjYyYmNlNDgxY2I4
+    YzU4MjhmNmY5NDA2ZmE0MDQ2OTEyZTY5MTlmZjYyMzU1YzNiYjA5ODMwYWQz
+    OTQ3YjFiMWU3YmFhMGI4ZWFjYzdmMzA1MjFjYjg0NWY3MTM3YzQ=

data/README.md

@@ -17,9 +17,9 @@ This is the first request you will get from the identity provider. It will hit y
         # Based on the IdP metadata, select the appropriate binding 
         # and return the action to perform to the controller
         meta = Spid::Saml::Metadata.new(get_saml_settings)
-        signature = get_signature(auth_request.uuid,auth_request.request,"http://www.w3.org/2000/09/xmldsig#rsa-sha1")
+        signature = get_signature(auth_request.uuid,auth_request.request,"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256")
         redirect meta.create_sso_request( auth_request.request, {   :RelayState   => request.uuid,
-                                                                  :SigAlg       => "http://www.w3.org/2000/09/xmldsig#rsa-sha1",
+                                                                  :SigAlg       => "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",
                                                                   :Signature    => signature
                                                               } )
     end

data/lib/spid/ruby-saml/metadata.rb

@@ -5,7 +5,7 @@ require "uri"
 require "digest/md5"
 require "nokogiri"
 require "xml_security_new" #fa il require della nokogiri
-
+require "uuid"
 
 # Class to return SP metadata based on the settings requested.
 # Return this XML in a controller, then give that URL to the the 
@@ -20,6 +20,8 @@ module Spid
       HTTP_POST = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
       HTTP_GET = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
 
+      attr_accessor :uuid
+
       def initialize(settings=nil)
         if settings
           @settings = settings
@@ -31,15 +33,18 @@ module Spid
         meta_doc = ::XMLSecurityNew::Document.new
         root = meta_doc.add_element "md:EntityDescriptor", { 
             "xmlns:md"        => "urn:oasis:names:tc:SAML:2.0:metadata",
-            "xmlns:xml"       => "http://www.w3.org/XML/1998/namespace",
-            "cacheDuration"   => "P1M" 
+            "xmlns:xml"       => "http://www.w3.org/XML/1998/namespace"
         }
         if settings.issuer != nil
           root.attributes["entityID"] = settings.issuer
         end
+        uuid = "_" + UUID.new.generate
+        self.uuid = uuid
+        root.attributes["ID"] = uuid
+
         sp_sso = root.add_element "md:SPSSODescriptor", { 
             "protocolSupportEnumeration" => "urn:oasis:names:tc:SAML:2.0:protocol",
-            #"WantAssertionsSigned"       => "true",
+            "WantAssertionsSigned"       => "true",
             "AuthnRequestSigned"         => "true"
 
         }
@@ -89,8 +94,11 @@ module Spid
           #AttributeConsumingService
           attr_cons_service = sp_sso.add_element "md:AttributeConsumingService", {
               "index" => "0",
-              "ServiceName" => "user_data"
           }
+          service_name = attr_cons_service.add_element "md:ServiceName", {
+                "xml:lang" => "it"
+            }
+          service_name.text = "User Data"
           settings.requested_attribute.each_with_index{ |attribute, index|
             attr_cons_service.add_element "md:RequestedAttribute", {
                 "Name" => attribute
@@ -145,7 +153,7 @@ module Spid
 
         ret = ""
         # pretty print the XML so IdP administrators can easily see what the SP supports
-        meta_doc.write(ret, 1)
+        meta_doc.write(ret)
 
         #Logging.debug "Generated metadata:\n#{ret}"
 

data/lib/xml_security_new.rb

@@ -113,7 +113,7 @@ module XMLSecurityNew
       #<KeyInfo />
       #<Object />
     #</Signature>
-    def sign_document(private_key, certificate, signature_method = RSA_SHA1, digest_method = SHA256)
+    def sign_document(private_key, certificate, signature_method = RSA_SHA256, digest_method = SHA256)
       noko = Nokogiri::XML(self.to_s) do |config|
         config.options = XMLSecurityNew::BaseDocument::NOKOGIRI_OPTIONS
       end

data/spid-es.gemspec

@@ -2,7 +2,7 @@ $LOAD_PATH.push File.expand_path('../lib', __FILE__)
 
 Gem::Specification.new do |s|
   s.name = 'spid-es'
-  s.version = '0.0.3'
+  s.version = '0.0.4'
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Fabiano Pavan"]
@@ -18,6 +18,6 @@ Gem::Specification.new do |s|
 
   s.add_runtime_dependency("canonix", ["0.1.1"])
   s.add_runtime_dependency("uuid", ["~> 2.3"])
-  s.add_runtime_dependency("nokogiri", '~> 1.6', '>= 1.6.7.2')
+  s.add_runtime_dependency("nokogiri", '>= 1.6.7.2')
   s.add_runtime_dependency("addressable", '~> 2.4', '>= 2.4.0')
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spid-es
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors:
 - Fabiano Pavan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-28 00:00:00.000000000 Z
+date: 2016-10-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: canonix
@@ -42,9 +42,6 @@ dependencies:
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: '1.6'
     - - ! '>='
       - !ruby/object:Gem::Version
         version: 1.6.7.2
@@ -52,9 +49,6 @@ dependencies:
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: '1.6'
     - - ! '>='
       - !ruby/object:Gem::Version
         version: 1.6.7.2