diff options
| author | John Dennis <jdennis@redhat.com> | 2015-03-18 17:14:07 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2015-03-18 17:49:43 -0400 |
| commit | b5730c293fc532fffd3f3300a14813027c4242ae (patch) | |
| tree | 7fb66e300fafb0292b3637e4a401b080caa401f7 /ipsilon/util/endpoint.py | |
| parent | 7f146bcbe3ae20db27e2daf294c19a40ccd419e6 (diff) | |
| download | ipsilon-b5730c293fc532fffd3f3300a14813027c4242ae.tar.gz ipsilon-b5730c293fc532fffd3f3300a14813027c4242ae.tar.xz ipsilon-b5730c293fc532fffd3f3300a14813027c4242ae.zip | |
Assertion AttributeStatements must be non-empty
The saml-core-2.0-os specification section 2.7.3 requires
the AttributeStatement element to be non-empty. Shibboleth verifies
this and rejects assertions that do not comply. We gather attributes
into a local dict first before adding them to the AttributeStatement
so the fix is easy. Test if the dict is empty, move the initialization
of the assertion AttributeStatement inside the test so it's
conditional on whether the dict has members.
https://fedorahosted.org/ipsilon/ticket/61
Signed-off-by: John Dennis <jdennis@redhat.com>
Reviewed-by: Nathan Kinder <nkinder@redhat.com>
Diffstat (limited to 'ipsilon/util/endpoint.py')
0 files changed, 0 insertions, 0 deletions