saml2

saml2 copied to clipboard

Check for key mismatch in signature before verifying signature

6

So often I've had to debug a signature failure to discover the wrong key had been used. It would be nice if the KeyInfo from the Signature was used to...

relaxnow

Refactor BaseID/NameIDTypeBaseidtype

1

This PR brings back the AbstractBaseIDType that is a mutual ancestor between BaseID and NameIDType. It also fixes the fact that we could encrypt Issuer, because encryption was implemented on...

tvdijen

Continuation of #305

tvdijen

tvdijen

Cannot verify peer certificate when receiving HTTPArtifact

18

Hi, When receiving a HTTP Artifact, I need to use a certificate which is signed with a private certificate authority. I found a section of code in SAML2\SOAPClient::send method, which...

marek-binkowski-sim

- We cannot sign messages without knowledge of the keys. Leave it up to the implementation. - Move RelayState from messages to bindings

tvdijen

Incorrect HTTP Redirect binding signature

1

The signature of the HTTP Redirect binding appears to be incorrect since this commit: https://github.com/simplesamlphp/saml2/commit/7b785a83a552e225c34adc84040a9268bbc3d4dd#diff-6a2c4640d940f28e0b49947ffbafd6d2726f92c9fba5fdad8202234083daff57 The signature is now set to the value of signature in the AuthnRequest, but (please...

Prusias

WIP: Create classes for SAML entities + metadata

1

tvdijen

This needs fixing ``` [Zero or More] Wrapped decryption keys, as defined by [XMLEnc]. Each wrapped key SHOULD include a Recipient attribute that specifies the entity for whom the key...

tvdijen

Updates the requirements on [simplesamlphp/xml-common](https://github.com/simplesamlphp/xml-common) to permit the latest version. Updates `simplesamlphp/xml-common` to 1.25.0 Commits 2250c05 Merge pull request #33 from simplesamlphp/feature/xpath-assert eae1f25 Refactor 4f66ed1 Fix phpdocs bed821b Throw library-exception...

dependabot[bot]