This repository has been archived on 2023-08-14. You can view files and clone it, but cannot push or open issues or pull requests.
dex/connector
Holger Koser e46f2ebe40 Improve SAML Signature and Response Validation
* Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17).
* Do not compress the AuthnRequest if `HTTP-POST` binding is used.
* SAML Response is valid if the Message and/or the Assertion is signed.
* Add `AssertionConsumerServiceURL` to `AuthnRequest`
* Validate Status on the Response
* Validate Conditions on the Assertion
* Validation SubjectConfirmation on the Subject
2017-01-26 19:05:40 +01:00
..
github cmd/dex: add logging config and serve logger for different modules. 2016-12-12 15:56:50 -08:00
ldap connector/ldap: enable groupSearch to be empty 2016-12-27 11:07:03 -08:00
mock cmd/dex: add logging config and serve logger for different modules. 2016-12-12 15:56:50 -08:00
oidc cmd/dex: add logging config and serve logger for different modules. 2016-12-12 15:56:50 -08:00
saml Improve SAML Signature and Response Validation 2017-01-26 19:05:40 +01:00
connector.go connector: add a SAML connector 2017-01-09 18:30:58 -08:00