ahacker1

Add .signedReferences API

1

cc @cjbarth Unfortunately, I've decided that the best way is to backport the API. Because we still want other libraries to use the API even if they are still on...

Fix saml signature verification

4

#### Overview - Update verifyResponseSig, so that it returns only signed assertion contents - Update saml.go to parse identity from solely the verified assertion i.e. return value in verifyResponseSig ####...

Refactor to support encrypted assertions

10

Support encrypted assertions which was broken during security patch