Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

saml2

package module

Go to main page

Versions in this module

v0

v0.1.7

Apr 12, 2019

v0.1.6

Oct 17, 2018

v0.1.5

Oct 16, 2018

v0.1.4

Sep 26, 2018

v0.1.3

Aug 23, 2018

v0.1.2

Jul 12, 2018

Changes in this version

type AssertionInfo

+ SessionIndex string

v0.1.0

Jul 9, 2018

Changes in this version

+ const AssertionTag

+ const AttributeStatementTag

+ const AttributeValueTag

+ const AudienceRestrictionTag

+ const AudienceTag

+ const AuthnContextPasswordProtectedTransport

+ const AuthnPolicyMatchBetter

+ const AuthnPolicyMatchExact

+ const AuthnPolicyMatchMaximum

+ const AuthnPolicyMatchMinimum

+ const BindingHttpPost

+ const BindingHttpRedirect

+ const ConditionsTag

+ const CountAttr

+ const DestinationAttr

+ const EncryptedAssertionTag

+ const IdAttr

+ const IssuerTag

+ const MethodAttr

+ const NameAttr

+ const NameIdFormatEmailAddress

+ const NameIdFormatPersistent

+ const NameIdFormatTransient

+ const NameIdFormatUnspecified

+ const NameIdFormatX509SubjectName

+ const NameIdTag

+ const NotBeforeAttr

+ const NotOnOrAfterAttr

+ const OneTimeUseTag

+ const ProxyRestrictionTag

+ const ReasonExpired

+ const ReasonUnsupported

+ const RecipientAttr

+ const ResponseTag

+ const SAMLAssertionNamespace

+ const SAMLProtocolNamespace

+ const StatusCodePartialLogout

+ const StatusCodeSuccess

+ const StatusCodeTag

+ const StatusCodeUnknownPrincipal

+ const StatusTag

+ const SubjMethodBearer

+ const SubjectConfirmationDataTag

+ const SubjectConfirmationTag

+ const SubjectTag

+ const VersionAttr

+ var ErrMissingAssertion = ErrMissingElement

+ func DecodeUnverifiedBaseResponse(encodedResponse string) (*types.UnverifiedBaseResponse, error)

+ func DecodeUnverifiedLogoutResponse(encodedResponse string) (*types.LogoutResponse, error)

+ type AssertionInfo struct

+ Assertions []types.Assertion

+ AuthnInstant *time.Time

+ NameID string

+ ResponseSignatureValidated bool

+ SessionNotOnOrAfter *time.Time

+ Values Values

+ WarningInfo *WarningInfo

+ type AuthNRequest struct

+ AssertionConsumerServiceURL string

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer string

+ ProtocolBinding string

+ Version string

+ type ErrInvalidValue struct

+ Actual string

+ Expected string

+ Key string

+ Reason string

+ func (e ErrInvalidValue) Error() string

+ type ErrMissingElement struct

+ Attribute string

+ Tag string

+ func (e ErrMissingElement) Error() string

+ type ErrParsing struct

+ Tag string

+ Type string

+ Value string

+ func (ep ErrParsing) Error() string

+ type ErrSaml struct

+ Message string

+ System error

+ func (serr ErrSaml) Error() string

+ type ErrVerification struct

+ Cause error

+ func (e ErrVerification) Error() string

+ type LogoutRequest struct

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer *types.Issuer

+ NameID *types.NameID

+ SignatureValidated bool

+ Version string

+ XMLName xml.Name

+ type ProxyRestriction struct

+ Audience []string

+ Count int

+ type RequestedAuthnContext struct

+ Comparison string

+ Contexts []string

+ type SAMLServiceProvider struct

+ AllowMissingAttributes bool

+ AssertionConsumerServiceURL string

+ AudienceURI string

+ Clock *dsig.Clock

+ IDPCertificateStore dsig.X509CertificateStore

+ IdentityProviderIssuer string

+ IdentityProviderSLOBinding string

+ IdentityProviderSLOURL string

+ IdentityProviderSSOBinding string

+ IdentityProviderSSOURL string

+ NameIdFormat string

+ RequestedAuthnContext *RequestedAuthnContext

+ SPKeyStore dsig.X509KeyStore

+ SPSigningKeyStore dsig.X509KeyStore

+ ServiceProviderIssuer string

+ ServiceProviderSLOURL string

+ SignAuthnRequests bool

+ SignAuthnRequestsAlgorithm string

+ SignAuthnRequestsCanonicalizer dsig.Canonicalizer

+ SkipSignatureValidation bool

+ ValidateEncryptionCert bool

+ func (sp *SAMLServiceProvider) AuthRedirect(w http.ResponseWriter, r *http.Request, relayState string) (err error)

+ func (sp *SAMLServiceProvider) BuildAuthBodyPost(relayState string) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildAuthBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequest() (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocument() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocumentNoSig() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthURL(relayState string) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLFromDocument(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) BuildLogoutBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocument(nameID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocumentNoSig(nameID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocument(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocumentNoSig(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) GetEncryptionCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetEncryptionKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) GetSigningCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetSigningKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) Metadata() (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) MetadataWithSLO() (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) RetrieveAssertionInfo(encodedResponse string) (*AssertionInfo, error)

+ func (sp *SAMLServiceProvider) SignAuthnRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SignLogoutRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SignLogoutResponse(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SigningContext() *dsig.SigningContext

+ func (sp *SAMLServiceProvider) Validate(response *types.Response) error

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutRequest(request *LogoutRequest) error

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutResponse(response *types.LogoutResponse) error

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutRequestPOST(encodedRequest string) (*LogoutRequest, error)

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutResponsePOST(encodedResponse string) (*types.LogoutResponse, error)

+ func (sp *SAMLServiceProvider) ValidateEncodedResponse(encodedResponse string) (*types.Response, error)

+ func (sp *SAMLServiceProvider) VerifyAssertionConditions(assertion *types.Assertion) (*WarningInfo, error)

+ type Values map[string]types.Attribute

+ func (vals Values) Get(k string) string

+ func (vals Values) GetAll(k string) []string

+ func (vals Values) GetSize(k string) int

+ type WarningInfo struct

+ InvalidTime bool

+ NotInAudience bool

+ OneTimeUse bool

+ ProxyRestriction *ProxyRestriction