saml2

package module

Go to main page

Versions in this module

v0

v0.9.1

Mar 8, 2023

v0.9.0

Mar 1, 2023

Changes in this version

type SAMLServiceProvider

+ MaximumDecompressedBodySize int64

v0.8.1

Sep 21, 2022 GO-2023-1602

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.8.0

Jul 2, 2022 GO-2023-1602

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

Changes in this version

type SAMLServiceProvider

+ ForceAuthn bool

+ IsPassive bool

v0.7.0

Mar 2, 2022 GO-2023-1602

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.6.0

Dec 14, 2020 GO-2020-0046GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.5.0

Sep 29, 2020 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.4.0

Feb 4, 2020 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

Changes in this version

+ const StatusCodePartialLogout

+ const StatusCodeUnknownPrincipal

+ func DecodeUnverifiedLogoutResponse(encodedResponse string) (*types.LogoutResponse, error)

type AssertionInfo

+ SessionIndex string

+ type LogoutRequest struct

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer *types.Issuer

+ NameID *types.NameID

+ SignatureValidated bool

+ Version string

+ XMLName xml.Name

type SAMLServiceProvider

+ IdentityProviderSLOBinding string

+ IdentityProviderSLOURL string

+ IdentityProviderSSOBinding string

+ ServiceProviderSLOURL string

+ func (sp *SAMLServiceProvider) BuildAuthBodyPost(relayState string) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildAuthBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocument(nameID string, sessionIndex string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutRequestDocumentNoSig(nameID string, sessionIndex string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseBodyPostFromDocument(relayState string, doc *etree.Document) ([]byte, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocument(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutResponseDocumentNoSig(status string, reqID string) (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildLogoutURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) MetadataWithSLO(validityHours int64) (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) SignLogoutRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SignLogoutResponse(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutRequest(request *LogoutRequest) error

+ func (sp *SAMLServiceProvider) ValidateDecodedLogoutResponse(response *types.LogoutResponse) error

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutRequestPOST(encodedRequest string) (*LogoutRequest, error)

+ func (sp *SAMLServiceProvider) ValidateEncodedLogoutResponsePOST(encodedResponse string) (*types.LogoutResponse, error)

type Values

+ func (vals Values) GetAll(k string) []string

+ func (vals Values) GetSize(k string) int

v0.3.1

May 8, 2018 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.3.0

May 8, 2018 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

Changes in this version

+ func DecodeUnverifiedBaseResponse(encodedResponse string) (*types.UnverifiedBaseResponse, error)

v0.2.0

May 4, 2018 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

v0.1.0

Mar 6, 2018 GO-2020-0046GO-2021-0060GO-2023-1602

GO-2020-0046: Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

GO-2021-0060: Authentication bypass in github.com/russellhaering/gosaml2

GO-2023-1602: Denial of service via deflate decompression bomb in github.com/russellhaering/gosaml2

Changes in this version

+ const AssertionTag

+ const AttributeStatementTag

+ const AttributeValueTag

+ const AudienceRestrictionTag

+ const AudienceTag

+ const AuthnContextPasswordProtectedTransport

+ const AuthnPolicyMatchBetter

+ const AuthnPolicyMatchExact

+ const AuthnPolicyMatchMaximum

+ const AuthnPolicyMatchMinimum

+ const BindingHttpPost

+ const BindingHttpRedirect

+ const ConditionsTag

+ const CountAttr

+ const DestinationAttr

+ const EncryptedAssertionTag

+ const IdAttr

+ const IssuerTag

+ const MethodAttr

+ const NameAttr

+ const NameIdFormatEmailAddress

+ const NameIdFormatPersistent

+ const NameIdFormatTransient

+ const NameIdFormatUnspecified

+ const NameIdFormatX509SubjectName

+ const NameIdTag

+ const NotBeforeAttr

+ const NotOnOrAfterAttr

+ const OneTimeUseTag

+ const ProxyRestrictionTag

+ const ReasonExpired

+ const ReasonUnsupported

+ const RecipientAttr

+ const ResponseTag

+ const SAMLAssertionNamespace

+ const SAMLProtocolNamespace

+ const StatusCodeSuccess

+ const StatusCodeTag

+ const StatusTag

+ const SubjMethodBearer

+ const SubjectConfirmationDataTag

+ const SubjectConfirmationTag

+ const SubjectTag

+ const VersionAttr

+ var ErrMissingAssertion = ErrMissingElement

+ type AssertionInfo struct

+ Assertions []types.Assertion

+ AuthnInstant *time.Time

+ NameID string

+ ResponseSignatureValidated bool

+ SessionNotOnOrAfter *time.Time

+ Values Values

+ WarningInfo *WarningInfo

+ type AuthNRequest struct

+ AssertionConsumerServiceURL string

+ Destination string

+ ID string

+ IssueInstant time.Time

+ Issuer string

+ ProtocolBinding string

+ Version string

+ type ErrInvalidValue struct

+ Actual string

+ Expected string

+ Key string

+ Reason string

+ func (e ErrInvalidValue) Error() string

+ type ErrMissingElement struct

+ Attribute string

+ Tag string

+ func (e ErrMissingElement) Error() string

+ type ErrParsing struct

+ Tag string

+ Type string

+ Value string

+ func (ep ErrParsing) Error() string

+ type ErrSaml struct

+ Message string

+ System error

+ func (serr ErrSaml) Error() string

+ type ErrVerification struct

+ Cause error

+ func (e ErrVerification) Error() string

+ type ProxyRestriction struct

+ Audience []string

+ Count int

+ type RequestedAuthnContext struct

+ Comparison string

+ Contexts []string

+ type SAMLServiceProvider struct

+ AllowMissingAttributes bool

+ AssertionConsumerServiceURL string

+ AudienceURI string

+ Clock *dsig.Clock

+ IDPCertificateStore dsig.X509CertificateStore

+ IdentityProviderIssuer string

+ IdentityProviderSSOURL string

+ NameIdFormat string

+ RequestedAuthnContext *RequestedAuthnContext

+ SPKeyStore dsig.X509KeyStore

+ SPSigningKeyStore dsig.X509KeyStore

+ ServiceProviderIssuer string

+ SignAuthnRequests bool

+ SignAuthnRequestsAlgorithm string

+ SignAuthnRequestsCanonicalizer dsig.Canonicalizer

+ SkipSignatureValidation bool

+ ValidateEncryptionCert bool

+ func (sp *SAMLServiceProvider) AuthRedirect(w http.ResponseWriter, r *http.Request, relayState string) (err error)

+ func (sp *SAMLServiceProvider) BuildAuthRequest() (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocument() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthRequestDocumentNoSig() (*etree.Document, error)

+ func (sp *SAMLServiceProvider) BuildAuthURL(relayState string) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLFromDocument(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) BuildAuthURLRedirect(relayState string, doc *etree.Document) (string, error)

+ func (sp *SAMLServiceProvider) GetEncryptionCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetEncryptionKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) GetSigningCertBytes() ([]byte, error)

+ func (sp *SAMLServiceProvider) GetSigningKey() dsig.X509KeyStore

+ func (sp *SAMLServiceProvider) Metadata() (*types.EntityDescriptor, error)

+ func (sp *SAMLServiceProvider) RetrieveAssertionInfo(encodedResponse string) (*AssertionInfo, error)

+ func (sp *SAMLServiceProvider) SignAuthnRequest(el *etree.Element) (*etree.Element, error)

+ func (sp *SAMLServiceProvider) SigningContext() *dsig.SigningContext

+ func (sp *SAMLServiceProvider) Validate(response *types.Response) error

+ func (sp *SAMLServiceProvider) ValidateEncodedResponse(encodedResponse string) (*types.Response, error)

+ func (sp *SAMLServiceProvider) VerifyAssertionConditions(assertion *types.Assertion) (*WarningInfo, error)

+ type Values map[string]types.Attribute

+ func (vals Values) Get(k string) string

+ type WarningInfo struct

+ InvalidTime bool

+ NotInAudience bool

+ OneTimeUse bool

+ ProxyRestriction *ProxyRestriction

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL