Mateusz Mandera 05913f5e3a saml: Extract logic for enabling wantMessagesSigned locally. ...

As explained in 158287f998,
wantMessagesSigned can't be enabled globally (as it'll break setups with
IdPs that sign SAMLResponse assertions) - but is needed for
LogoutRequests, and will be for LogoutResponses in the SP-initiated SLO
flow in future commits.

We extract a function with the necessary hacky logic for re-use in the
SP-initiated SLO implementation.

2022-11-02 21:58:46 -07:00

114 KiB

Raw Blame History

View Raw