spid-es 0.0.50 → 0.0.51

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1da690cbc5b4e743cd4d5f536f1b4ed7e39c9d712fc95d6f162374c4a9271996
-  data.tar.gz: c842a2b8db198ab83242cce59afab8c98b80ed27c477baa9595add473bef937f
+  metadata.gz: a6f3772185b3430b84c5c85ea18dbd1a701795ff5a96c910a064ab6870926fde
+  data.tar.gz: 1a483c53ae1b70a24e32ce4eb9191b6cc05de1decc5bbd668befa30fff992566
 SHA512:
-  metadata.gz: b2abf35831376b348a6ea317987d90423a7d503f75becdf3325df12a4306c7ea7b9154310215f95e7a57c91e3a58f035953b7b390dcc977bc7eec11536b8a121
-  data.tar.gz: 62c15cf73a3f0838586e96eae0ac44c06eb9a86a27685b72e0cd25aafbd1c7fa439f07a719d64b735c787013b2c7b739f1c2a6b34cba946b505b2fe45d0cc100
+  metadata.gz: d4907d3a3ea8c5fd00962f1b53810f3a2034a53e65c8a93c782d1dffaf7866f19746cbb3ef7ad31f2014153406d51164f19fc1adf047a3150def07b245c96453
+  data.tar.gz: d461f228b2abcbe619bf7947d55c7c4b9d59bd345ed53b53904caf9679ac6eb356f66b59713a2e92effb17fabf8a106b28ea7e2610ec74a19c4fe27335bcbc41

data/lib/spid/ruby-saml/metadata.rb

@@ -458,7 +458,7 @@ module Spid
           #meta_text = response.body
           #testo_response = meta_text.sub!(' xmlns:xml="http://www.w3.org/XML/1998/namespace"', '') da errori
           #uso nokogiri per cercare il certificato, uso la funzione che rimuove tutti i namespace 
-          doc_noko = Nokogiri::XML(response.body.gsub(/\n/, "").gsub(/\t/, "")) #modifica per poste
+          doc_noko = Nokogiri::XML(response.body.gsub(/\n/, "").gsub(/\t/, "").gsub('>','>')) #modifica per poste e per myid
           doc_noko.remove_namespaces!
           #save
           @@cache[id] = doc_noko

data/lib/spid/ruby-saml/response.rb

@@ -160,6 +160,7 @@ module Spid
               return (soft ? false : validation_error("Issuer of the Assertion not found or multiple."))
             end
 
+
             issuer_response_nodes.each{ |iss|
               #controllo: L'attributo Format di Issuer deve essere presente con il valore urn:oasis:names:tc:SAML:2.0:nameid-format:entity
               return (soft ? false : validation_error("Elemento Issuer non ha formato corretto ")) if !iss.attributes['Format'].nil? && iss.attributes['Format'] != 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
@@ -593,8 +594,9 @@ module Spid
               
               node_auth_stat_context_class_ref = xpath_first_from_signed_assertion('/a:AuthnStatement/a:AuthnContext/a:AuthnContextClassRef')
               #Spider.logger.error "\n\n node_auth_stat_context_class_ref #{node_auth_stat_context_class_ref.text}"
-              return soft ? false : validation_error("Errore su Asserzione: AuthnContextClassRef di AuthnContext su AuthnStatement vuoto o non L2") if node_auth_stat_context_class_ref.blank? || ( (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL2') && (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL3')) 
-              
+              unless settings.no_valid_agid
+                return soft ? false : validation_error("Errore su Asserzione: AuthnContextClassRef di AuthnContext su AuthnStatement vuoto o non L2") if node_auth_stat_context_class_ref.blank? || ( (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL2') && (node_auth_stat_context_class_ref.text != 'https://www.spid.gov.it/SpidL3')) 
+              end
               node_attr_stmt_attribute_value = xpath_first_from_signed_assertion("/a:AttributeStatement/a:Attribute/a:AttributeValue")
               #Elemento AttributeStatement presente, ma sottoelemento Attribute non specificato, caso 99
               return soft ? false : validation_error("Errore su Asserzione: AttributeValue di Attribute su AttributeStatement vuoto") if node_attr_stmt_attribute_value.blank?

data/lib/spid/ruby-saml/settings.rb

@@ -10,7 +10,7 @@ module Spid
       attr_accessor :name_identifier_value, :name_identifier_format
       attr_accessor :sessionindex, :issuer, :destination_service_url, :authn_context, :requester_identificator
       attr_accessor :single_logout_service_url, :single_logout_service_binding, :single_logout_destination
-      attr_accessor :skip_validation, :aggregato, :hash_aggregatore, :tipo_accesso
+      attr_accessor :skip_validation, :aggregato, :hash_aggregatore, :tipo_accesso, :no_valid_agid
     
       def initialize(config = {})
         config.each do |k,v|

data/lib/spid/xml_security_new.rb

@@ -70,6 +70,7 @@ module Spid
         algorithm = algorithm && algorithm =~ /(rsa-)?sha(.*?)$/i && $2.to_i
 
         case algorithm
+        when 256 then OpenSSL::Digest::SHA1
         when 256 then OpenSSL::Digest::SHA256
         when 384 then OpenSSL::Digest::SHA384
         when 512 then OpenSSL::Digest::SHA512

data/spid-es.gemspec

@@ -2,7 +2,7 @@ $LOAD_PATH.push File.expand_path('../lib', __FILE__)
 
 Gem::Specification.new do |s|
   s.name = 'spid-es'
-  s.version = '0.0.50'
+  s.version = '0.0.51'
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Fabiano Pavan"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spid-es
 version: !ruby/object:Gem::Version
-  version: 0.0.50
+  version: 0.0.51
 platform: ruby
 authors:
 - Fabiano Pavan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-10 00:00:00.000000000 Z
+date: 2024-11-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: canonix