Skip to content

Audience validation with only a closing tag#444

Merged
pitbulk merged 3 commits intoSAML-Toolkits:masterfrom
Paradem:audience_validation
Feb 28, 2018
Merged

Audience validation with only a closing tag#444
pitbulk merged 3 commits intoSAML-Toolkits:masterfrom
Paradem:audience_validation

Conversation

@netikular
Copy link
Copy Markdown
Contributor

Status

READY

Migrations

NO

Description

There was a problem where the validation would fail if the IDP sent back an audience block with a self closing tag. I've included a new response that does just that and applied the fix discussed in: #443

It was discovered that self closing tags return "" now instead of nil.

Discussed the possible fixes on:
SAML-Toolkits#443
After discussion on:
SAML-Toolkits#443

We determined that it was related to the way that the text is being
returned and checked. In my previous commit I applied the change
discussed in the issue above.

This commit adds a new response and test that fails before the and
passes once the change is added.

I used a SAML tool to produce a new response that has the unexpected
selfclosing tag and included it in the test/responses folder.
In this commit I'm putting the tests back the way they were and
restoring the logic in the Utils.element_text.

Instead I'm applying the change that @brianswko suggested at the start
of SAML-Toolkits#443

This still allows for my new test to pass.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants