Skip to content

Releases: pressly/saml

Update AuthnReq signature generation

22 Nov 22:17
9a10555
Compare
Choose a tag to compare
  • Using spec recommendation for Canonicalization Method
  • Fixed AuthReqn marshaling issue

Custom time format XML marshalling.

05 Nov 19:32
380321c
Compare
Choose a tag to compare

Being compatible with Azure IdP when marshalling IssueInstant for AuthnRequests

Rename to github.com/pressly/saml

24 Oct 22:18
Compare
Choose a tag to compare

We renamed github.com/goware/saml to github.com/pressly/saml.

This is a breaking API change. But that's fine, since we haven't released v1.0 yet.

Signed SAML HTTP-POST AuthnRequests

16 Oct 21:20
c3c3b8d
Compare
Choose a tag to compare
Merge pull request #17 from goware/signed_saml_requests

Signing SAML HTTP-POST requests.

HTTP-POST Binding

18 Sep 16:10
6697646
Compare
Choose a tag to compare

This is an API breaking release.

It adds SP support for generating a HTTP-POST binding AuthnRequest.

Eg;

serviceProvider := &saml.ServiceProvider{}

// Parse IdP metadata
//
// from URL
serviceProvider.IdPMetadataURL = "http://idp.example.com/metadata.xml"
// or from XML file
serviceProvider.IdPMetadataXML = []byte("<xml>")
idpMetadata, _ := serviceProvider.ParseIdPMetadata()

// Get SSOService element for the selected binding
//
ssoService := idpMetadata.SSOService(saml.HTTPPostBinding)
serviceProvider.IdPSSOServiceBinding = ssoService.Binding
serviceProvider.IdPSSOServiceURL = ssoService.Location

// or set information from a different source
serviceProvider.IdPSSOServiceBinding = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
serviceProvider.IdPSSOServiceURL = "https://idp.example.com/sso",

// Generate SAML Response for HTTP-POST binding
samlReq, _ := serviceProvider.NewPostSAMLRequest()

Removes ServeSSO handler wrapper and introduces an explicit function to generate a SAML Response for a given AuthnRequest.

Removes http.Request dependency from IdPAuthnRequest

Makes IdP metadata parsing explicit

API breaking release

05 Sep 04:46
Compare
Choose a tag to compare

Drop magical HTTP handlers and middleware.

Instead, provide simple ServiceProvider methods, ie. to parse SAML response and get the assertion, serve Metadata XML and generate AuthnRequest URL.

Drop the custom logger, since we return explicit errors to the caller now instead of logging them.