spid-es 0.0.49 → 0.0.51

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 96b349fe25c4614fc0d793c64c10716be3c9594b08e8d73ff5c421c637ef3816
-  data.tar.gz: a959dbd5b0e47021ebfa2cd07c3d4642ff68b7477f4b2cf7d248c3487d7f4364
+  metadata.gz: a6f3772185b3430b84c5c85ea18dbd1a701795ff5a96c910a064ab6870926fde
+  data.tar.gz: 1a483c53ae1b70a24e32ce4eb9191b6cc05de1decc5bbd668befa30fff992566
 SHA512:
-  metadata.gz: 2a3bdf6a060e53b2e07e6376b59eb843be93366369f29ffd04cf28e89781b4be827003f9569286884e38b7183dbde805510ebd857d7528374cde8748aaac66a3
-  data.tar.gz: 1ffa3ab7753b1559bd6492165e6a3319e16d7b26b12afb644ee7a4bcd11dc4e83e91ebc22d3429b4d23347e2a60c5f611e4eac3a89933ce4a392319a81368683
+  metadata.gz: d4907d3a3ea8c5fd00962f1b53810f3a2034a53e65c8a93c782d1dffaf7866f19746cbb3ef7ad31f2014153406d51164f19fc1adf047a3150def07b245c96453
+  data.tar.gz: d461f228b2abcbe619bf7947d55c7c4b9d59bd345ed53b53904caf9679ac6eb356f66b59713a2e92effb17fabf8a106b28ea7e2610ec74a19c4fe27335bcbc41

data/lib/spid/ruby-saml/authrequest.rb

@@ -29,9 +29,8 @@ module Spid::Saml
       # Create AuthnRequest root element using REXML 
       request_doc = Spid::XMLSecurityNew::Document.new
       request_doc.context[:attribute_quote] = :quote
-      root = request_doc.add_element "saml2p:AuthnRequest", { "xmlns:saml2p" => "urn:oasis:names:tc:SAML:2.0:protocol", 
-                                                              "xmlns:saml2" => "urn:oasis:names:tc:SAML:2.0:assertion"
-                                                             }
+      root = request_doc.add_element "saml2p:AuthnRequest", { "xmlns:saml2p"  => "urn:oasis:names:tc:SAML:2.0:protocol", 
+                                                              "xmlns:saml2"   => "urn:oasis:names:tc:SAML:2.0:assertion" }
       root.attributes['ID'] = uuid
       root.attributes['IssueInstant'] = time
       root.attributes['Version'] = "2.0"
@@ -60,6 +59,15 @@ module Spid::Saml
         issuer.text = @settings.issuer #questo valore deve essere uguale al #entityID dei metadata che usa @settings.issuer
       end
 
+      #aggiunta tag purpose (DOPO ISSUER!) per persona giuridica o uso professionale
+      if @settings.tipo_accesso != nil
+        extension_context = root.add_element "saml2p:Extensions", { 
+          "xmlns:spid" => "https://spid.gov.it/saml-extensions"
+        }
+        spid_purpose_element = extension_context.add_element "spid:Purpose"
+        spid_purpose_element.text = @settings.tipo_accesso
+      end
+
       # #opzionale
       # unless @settings.sp_name_qualifier.blank?
       #   subject = root.add_element "saml:Subject"

data/lib/spid/ruby-saml/metadata.rb

@@ -458,7 +458,7 @@ module Spid
           #meta_text = response.body
           #testo_response = meta_text.sub!(' xmlns:xml="http://www.w3.org/XML/1998/namespace"', '') da errori
           #uso nokogiri per cercare il certificato, uso la funzione che rimuove tutti i namespace 
-          doc_noko = Nokogiri::XML(response.body.gsub(/\n/, "").gsub(/\t/, "")) #modifica per poste
+          doc_noko = Nokogiri::XML(response.body.gsub(/\n/, "").gsub(/\t/, "").gsub('>','>')) #modifica per poste e per myid
           doc_noko.remove_namespaces!
           #save
           @@cache[id] = doc_noko

data/lib/spid/ruby-saml/response.rb

@@ -160,6 +160,7 @@ module Spid
               return (soft ? false : validation_error("Issuer of the Assertion not found or multiple."))
             end
 
+
             issuer_response_nodes.each{ |iss|
               #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
               return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if !iss.attributes['Format'].nil? && iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
@@ -593,8 +594,9 @@ module Spid
               
               node_auth_stat_context_class_ref = xpath_first_from_signed_assertion('/a:AuthnStatement/a:AuthnContext/a:AuthnContextClassRef')
               #Spider.logger.error "\n\n node_auth_stat_context_class_ref #{node_auth_stat_context_class_ref.text}"
-              return soft ? false : validation_error("Errore su Asserzione: AuthnContextClassRef di AuthnContext su AuthnStatement vuoto o non L2") if node_auth_stat_context_class_ref.blank? || ( (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL2') && (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL3')) 
-              
+              unless settings.no_valid_agid
+                return soft ? false : validation_error("Errore su Asserzione: AuthnContextClassRef di AuthnContext su AuthnStatement vuoto o non L2") if node_auth_stat_context_class_ref.blank? || ( (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL2') && (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL3')) 
+              end
               node_attr_stmt_attribute_value = xpath_first_from_signed_assertion("/a:AttributeStatement/a:Attribute/a:AttributeValue")
               #Elemento AttributeStatement presente, ma sottoelemento Attribute non specificato, caso 99
               return soft ? false : validation_error("Errore su Asserzione: AttributeValue di Attribute su AttributeStatement vuoto") if node_attr_stmt_attribute_value.blank?

data/lib/spid/ruby-saml/settings.rb

@@ -10,7 +10,7 @@ module Spid
       attr_accessor :name_identifier_value, :name_identifier_format
       attr_accessor :sessionindex, :issuer, :destination_service_url, :authn_context, :requester_identificator
       attr_accessor :single_logout_service_url, :single_logout_service_binding, :single_logout_destination
-      attr_accessor :skip_validation, :aggregato, :hash_aggregatore
+      attr_accessor :skip_validation, :aggregato, :hash_aggregatore, :tipo_accesso, :no_valid_agid
     
       def initialize(config = {})
         config.each do |k,v|

data/lib/spid/xml_security_new.rb

@@ -70,6 +70,7 @@ module Spid
         algorithm = algorithm && algorithm =~ /(rsa-)?sha(.*?)$/i && $2.to_i
 
         case algorithm
+        when 256 then OpenSSL::Digest::SHA1
         when 256 then OpenSSL::Digest::SHA256
         when 384 then OpenSSL::Digest::SHA384
         when 512 then OpenSSL::Digest::SHA512

data/spid-es.gemspec

@@ -2,7 +2,7 @@ $LOAD_PATH.push File.expand_path('../lib', __FILE__)
 
 Gem::Specification.new do |s|
   s.name = 'spid-es'
-  s.version = '0.0.49'
+  s.version = '0.0.51'
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Fabiano Pavan"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spid-es
 version: !ruby/object:Gem::Version
-  version: 0.0.49
+  version: 0.0.51
 platform: ruby
 authors:
 - Fabiano Pavan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-21 00:00:00.000000000 Z
+date: 2024-11-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: canonix