omerkarj comments

Repositories
Issues
Comments

Results 2 comments of


                                            omerkarj

Implement query signature verification

I can confirm this does work properly. Also passes verification with this tool (which master does not): - sign a login request with the library and validate here: https://www.samltool.com/validate_authn_req.php -...

bug: make logout request need add signature logic if `sp.SignatureMethod` is not empty.

Note that when using `urn:oasis:names:tc:SAML:2.0:bindings:URL-Encoding:DEFLATE`, which is the default unless a different value is provided with `SAMLEncoding` query param, is that the SAML message itself must not include any signature...