feat(saml-response): whitelist more response options

omniauth · Mar 1, 2018 · 575198d · 575198d
1 parent 2d50dba
commit 575198d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/omniauth/strategies/saml.rb b/lib/omniauth/strategies/saml.rb
@@ -10,7 +10,10 @@ def self.inherited(subclass)
         OmniAuth::Strategy.included(subclass)
       end
 
-      OTHER_REQUEST_OPTIONS = [:skip_conditions, :allowed_clock_drift, :matches_request_id, :skip_subject_confirmation].freeze
+      OTHER_REQUEST_OPTIONS = [
+        :skip_conditions, :allowed_clock_drift, :matches_request_id,
+        :skip_subject_confirmation, :skip_destination, :skip_recipient_check
+      ].freeze
 
       option :name_identifier_format, nil
       option :idp_sso_target_url_runtime_params, {}