Do not store a name_id_name_qualifier or name_id_sp_name_qualifier if there is not (fixes #7680)

This commit is contained in:
Benjamin Dauvergne 2015-06-25 11:25:57 +02:00
parent d064fad15b
commit 1719127cae
1 changed files with 4 additions and 2 deletions

View File

@ -99,9 +99,11 @@ class LoginView(LogMixin, View):
attributes.update({
'name_id_content': name_id.content.decode('utf8'),
'name_id_format': unicode(name_id.format or lasso.SAML2_NAME_IDENTIFIER_FORMAT_UNSPECIFIED),
'name_id_name_qualifier': unicode(name_id.nameQualifier if name_id.nameQualifier else login.remoteProviderId),
'name_id_sp_name_qualifier': unicode(name_id.spNameQualifier if name_id.spNameQualifier else login.server.providerId),
})
if name_id.nameQualifier:
attributes['name_id_name_qualifier'] = unicode(name_id.nameQualifier)
if name_id.spNameQualifier:
attributes['name_id_sp_name_qualifier'] = unicode(name_id.spNameQualifier)
authn_statement = login.assertion.authnStatement[0]
if authn_statement.authnInstant:
attributes['authn_instant'] = utils.iso8601_to_datetime(authn_statement.authnInstant)