dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SAML: get SessionIndex before validating SLO request (closes #64)

Browse Source
This commit is contained in:
Clément Oudot 2010-05-20 08:59:59 +00:00
parent ef3faf7d3e
commit fdc84aac52
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/IssuerDBSAML.pm
View File

@ -829,6 +829,10 @@ sub issuerForAuthUser {
# Do we check signature?
# TODO
# Get session index
my $session_index;
eval { $session_index = $logout->request()->SessionIndex; };
# Proceed to logout on all others SP
my $logout_dump = $logout->dump;
my $provider_nb =
@ -851,10 +855,6 @@ sub issuerForAuthUser {
$self->lmLog( "Set $relaystate in RelayState", 'debug' );
}
# Get session index
my $session_index;
eval { $session_index = $logout->request()->SessionIndex; };
# SLO requests without session index are not accepted
if ( $@ or !defined $session_index ) {
$self->lmLog(