redmine_omniauth_saml
redmine_omniauth_saml copied to clipboard
Use latest ruby-saml gem?
I don't know much about ruby, or gems (yet), but when reading a bit it struck me that the gemfile for this module currently specifies gem 'ruby-saml', '~> 0.9.2' while there seems to have been a lot of important updates since this version (according to https://github.com/onelogin/ruby-saml#clock-drift which is now listing 1.11 as the latest version since more than 6 months.
For security reasons, I guess it would be worth updating the module to work with the most recent ruby-saml version?
Kind regards Eskil
FYI: this works for me and fix some missing KeyDescriptor in metadata
gem 'ruby-saml', '>= 0.9.2'
gem 'omniauth', '>= 1.2.2'
gem 'omniauth-saml'