4 commits

Author	SHA1	Message	Date
Eric Chiang	a97cffcd52	connector/saml: refactor tests and add self-signed responses ... Introduces SAML tests which execute full response processing and compare user attributes. tesdata now includes a full, self-signed CA and documents signed using xmlsec1. Adds deprication notices to existing tests, but don't remove them since they still provide coverage.	2017-04-04 11:11:35 -07:00
Phu Kieu	6f9ef961bb	Use etreeutils.NSSelectOne to select Assertion element	2017-03-24 11:20:53 -07:00
Holger Koser	e46f2ebe40	Improve SAML Signature and Response Validation ... * Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17). * Do not compress the AuthnRequest if `HTTP-POST` binding is used. * SAML Response is valid if the Message and/or the Assertion is signed. * Add `AssertionConsumerServiceURL` to `AuthnRequest` * Validate Status on the Response * Validate Conditions on the Assertion * Validation SubjectConfirmation on the Subject	2017-01-26 19:05:40 +01:00
Eric Chiang	31dfb54b6f	connector: add a SAML connector	2017-01-09 18:30:58 -08:00