Revision: 1785
Author: olavmrk
Date: Fri Sep 25 00:53:39 2009
Log: saml: Change to use InResponseTo for the state id.
http://code.google.com/p/simplesamlphp/source/detail?r=1785
Modified:
/trunk/modules/saml/lib/Auth/Source/SP.php
/trunk/modules/saml/www/sp/saml2-acs.php
=======================================
--- /trunk/modules/saml/lib/Auth/Source/SP.php Thu Sep 24 04:54:29 2009
+++ /trunk/modules/saml/lib/Auth/Source/SP.php Fri Sep 25 00:53:39 2009
@@ -171,7 +171,7 @@
$ar->setProtocolBinding(SAML2_Const::BINDING_HTTP_POST);
$id = SimpleSAML_Auth_State::saveState($state,
'saml:sp:ssosent-saml2');
- $ar->setRelayState($id);
+ $ar->setId($id);
$b = new SAML2_HTTPRedirect();
$b->setDestination(sspmod_SAML2_Message::getDebugDestination());
=======================================
--- /trunk/modules/saml/www/sp/saml2-acs.php Thu Sep 24 04:54:29 2009
+++ /trunk/modules/saml/www/sp/saml2-acs.php Fri Sep 25 00:53:39 2009
@@ -13,10 +13,10 @@
throw new SimpleSAML_Error_BadRequest('Invalid message received to
AssertionConsumerService endpoint.');
}
-$relayState = $response->getRelayState();
-if (!empty($relayState)) {
+$stateId = $response->getInResponseTo();
+if (!empty($stateId)) {
/* This is a response to a request we sent earlier. */
- $state =
SimpleSAML_Auth_State::loadState($relayState, 'saml:sp:ssosent-saml2');
+ $state =
SimpleSAML_Auth_State::loadState($stateId, 'saml:sp:ssosent-saml2');
/* Check that the authentication source is correct. */
assert('array_key_exists("saml:sp:AuthId", $state)');
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en
-~----------~----~----~----~------~----~------~--~---
