entrouvert
/
modmellon
17
0
Fork 0
Code Issues Pull Requests Releases Activity

Improve formatting of metadatas, fix endpoints 

- NameIdManagement endpoint is incorrectly listed (and useless if only
  transient federation are expected).
- an HTTP-Artifact endpoint for the AssertionConsumerService was added,
  letting HTTP-Post as the default binding.

git-svn-id: https://modmellon.googlecode.com/svn/trunk/mod_mellon2@105 a716ebb1-153a-0410-b759-cfb97c6a1b53
This commit is contained in:
benjamin.dauvergne 2010-09-28 15:54:17 +00:00
parent 6bc02fab27
commit 8b0dca405f
1 changed files with 28 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
auth_mellon_handler.c
View File

@ -169,35 +169,34 @@ static char *am_generate_metadata(apr_pool_t *p, request_rec *r)
}
return apr_psprintf(p,
"<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>"
"<EntityDescriptor "
"entityID=\"%smetadata\" "
"xmlns=\"urn:oasis:names:tc:SAML:2.0:metadata\">"
"<SPSSODescriptor "
"AuthnRequestsSigned=\"true\" "
"WantAssertionsSigned=\"true\" "
"protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\">"
"%s"
"<SingleLogoutService "
"Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:SOAP\" "
"Location=\"%slogout\" />"
"<SingleLogoutService "
"Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" "
"Location=\"%slogout\" />"
"<ManageNameIDService "
"Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:SOAP\" "
"Location=\"%slogoutRequest\"/>"
"<NameIDFormat>"
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
"</NameIDFormat>"
"<AssertionConsumerService "
"index=\"0\" "
"isDefault=\"true\" "
"Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" "
"Location=\"%spostResponse\" />"
"</SPSSODescriptor>"
"%s"
"</EntityDescriptor>",
"<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n\
<EntityDescriptor\n\
entityID=\"%smetadata\"\n\
xmlns=\"urn:oasis:names:tc:SAML:2.0:metadata\">\n\
<SPSSODescriptor\n\
AuthnRequestsSigned=\"true\"\n\
WantAssertionsSigned=\"true\"\n\
protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\">\n\
%s\
<SingleLogoutService\n\
Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:SOAP\"\n\
Location=\"%slogout\" />\n\
<SingleLogoutService\n\
Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\"\n\
Location=\"%slogout\" />\n\
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>\n\
<AssertionConsumerService\n\
index=\"0\"\n\
isDefault=\"true\"\n\
Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\"\n\
Location=\"%spostResponse\" />\n\
<AssertionConsumerService\n\
index=\"1\"\n\
Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact\"\n\
Location=\"%sartifactResponse\" />\n\
</SPSSODescriptor>\n\
%s\n\
</EntityDescriptor>",
url, cert, url, url, url, url, am_optional_metadata(p, r));
}
#endif /* HAVE_lasso_server_new_from_buffers */