saml2

package module

Go to main page

Versions in this module

v0

v0.10.0

Jul 10, 2020

v0.9.0

Jul 10, 2020

v0.8.0

Jul 9, 2020

v0.7.0

Jul 9, 2020

v0.6.0

Jul 9, 2020

v0.5.0

Jul 9, 2020

Changes in this version

+ const StatusCodePartialLogout

+ const StatusCodeUnknownPrincipal

+ func DecodeUnverifiedLogoutResponse(encodedResponse string) (*types.LogoutResponse, error)

type AssertionInfo

+ SessionIndex string

+ type LogoutRequest struct

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer *types.Issuer

+ NameID *types.NameID

+ SignatureValidated bool

+ Version string

+ XMLName xml.Name

type SAMLServiceProvider

+ IdentityProviderSLOBinding string

+ IdentityProviderSLOURL string

+ IdentityProviderSSOBinding string

+ ServiceProviderSLOURL string

+ func (sp *SAMLServiceProvider) BuildAuthBodyPost(relayState string) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildAuthBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocument(nameID string, sessionIndex string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocumentNoSig(nameID string, sessionIndex string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocument(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocumentNoSig(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) MetadataWithSLO(validityHours int64) (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) SignLogoutRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SignLogoutResponse(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutRequest(request *LogoutRequest) error

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutResponse(response *types.LogoutResponse) error

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutRequestPOST(encodedRequest string) (*LogoutRequest, error)

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutResponsePOST(encodedResponse string) (*types.LogoutResponse, error)

type Values

+ func (vals Values) GetAll(k string) []string

+ func (vals Values) GetSize(k string) int

v0.3.1

May 8, 2018

v0.3.0

May 8, 2018

Changes in this version

+ func DecodeUnverifiedBaseResponse(encodedResponse string) (*types.UnverifiedBaseResponse, error)

v0.2.0

May 4, 2018

v0.1.0

Mar 6, 2018

Changes in this version

+ const AssertionTag

+ const AttributeStatementTag

+ const AttributeValueTag

+ const AudienceRestrictionTag

+ const AudienceTag

+ const AuthnContextPasswordProtectedTransport

+ const AuthnPolicyMatchBetter

+ const AuthnPolicyMatchExact

+ const AuthnPolicyMatchMaximum

+ const AuthnPolicyMatchMinimum

+ const BindingHttpPost

+ const BindingHttpRedirect

+ const ConditionsTag

+ const CountAttr

+ const DestinationAttr

+ const EncryptedAssertionTag

+ const IdAttr

+ const IssuerTag

+ const MethodAttr

+ const NameAttr

+ const NameIdFormatEmailAddress

+ const NameIdFormatPersistent

+ const NameIdFormatTransient

+ const NameIdFormatUnspecified

+ const NameIdFormatX509SubjectName

+ const NameIdTag

+ const NotBeforeAttr

+ const NotOnOrAfterAttr

+ const OneTimeUseTag

+ const ProxyRestrictionTag

+ const ReasonExpired

+ const ReasonUnsupported

+ const RecipientAttr

+ const ResponseTag

+ const SAMLAssertionNamespace

+ const SAMLProtocolNamespace

+ const StatusCodeSuccess

+ const StatusCodeTag

+ const StatusTag

+ const SubjMethodBearer

+ const SubjectConfirmationDataTag

+ const SubjectConfirmationTag

+ const SubjectTag

+ const VersionAttr

+ var ErrMissingAssertion = ErrMissingElement

+ type AssertionInfo struct

+ Assertions []types.Assertion

+ AuthnInstant *time.Time

+ NameID string

+ ResponseSignatureValidated bool

+ SessionNotOnOrAfter *time.Time

+ Values Values

+ WarningInfo *WarningInfo

+ type AuthNRequest struct

+ AssertionConsumerServiceURL string

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer string

+ ProtocolBinding string

+ Version string

+ type ErrInvalidValue struct

+ Actual string

+ Expected string

+ Key string

+ Reason string

+ func (e ErrInvalidValue) Error() string

+ type ErrMissingElement struct

+ Attribute string

+ Tag string

+ func (e ErrMissingElement) Error() string

+ type ErrParsing struct

+ Tag string

+ Type string

+ Value string

+ func (ep ErrParsing) Error() string

+ type ErrSaml struct

+ Message string

+ System error

+ func (serr ErrSaml) Error() string

+ type ErrVerification struct

+ Cause error

+ func (e ErrVerification) Error() string

+ type ProxyRestriction struct

+ Audience []string

+ Count int

+ type RequestedAuthnContext struct

+ Comparison string

+ Contexts []string

+ type SAMLServiceProvider struct

+ AllowMissingAttributes bool

+ AssertionConsumerServiceURL string

+ AudienceURI string

+ Clock *dsig.Clock

+ IDPCertificateStore dsig.X509CertificateStore

+ IdentityProviderIssuer string

+ IdentityProviderSSOURL string

+ NameIdFormat string

+ RequestedAuthnContext *RequestedAuthnContext

+ SPKeyStore dsig.X509KeyStore

+ SPSigningKeyStore dsig.X509KeyStore

+ ServiceProviderIssuer string

+ SignAuthnRequests bool

+ SignAuthnRequestsAlgorithm string

+ SignAuthnRequestsCanonicalizer dsig.Canonicalizer

+ SkipSignatureValidation bool

+ ValidateEncryptionCert bool

+ func (sp *SAMLServiceProvider) AuthRedirect(w http.ResponseWriter, r *http.Request, relayState string) (err error)

+ func (sp *SAMLServiceProvider) BuildAuthRequest() (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocument() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocumentNoSig() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthURL(relayState string) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLFromDocument(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) GetEncryptionCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetEncryptionKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) GetSigningCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetSigningKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) Metadata() (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) RetrieveAssertionInfo(encodedResponse string) (*AssertionInfo, error)

+ func (sp *SAMLServiceProvider) SignAuthnRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SigningContext() *dsig.SigningContext

+ func (sp *SAMLServiceProvider) Validate(response *types.Response) error

+ func (sp *SAMLServiceProvider) ValidateEncodedResponse(encodedResponse string) (*types.Response, error)

+ func (sp *SAMLServiceProvider) VerifyAssertionConditions(assertion *types.Assertion) (*WarningInfo, error)

+ type Values map[string]types.Attribute

+ func (vals Values) Get(k string) string

+ type WarningInfo struct

+ InvalidTime bool

+ NotInAudience bool

+ OneTimeUse bool

+ ProxyRestriction *ProxyRestriction

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL