diff options
| author | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2010-05-11 08:54:47 +0000 |
|---|---|---|
| committer | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2010-05-11 08:54:47 +0000 |
| commit | 23c604b268a89bc20772603c7cf5436ddd51ec44 (patch) | |
| tree | 7fa57f92afb9a3132c689cabb13584f648647a99 | |
| parent | c2fff8b5f13d7e6b5210d905b79f96269cc49848 (diff) | |
| download | lasso-23c604b268a89bc20772603c7cf5436ddd51ec44.tar.gz lasso-23c604b268a89bc20772603c7cf5436ddd51ec44.tar.xz lasso-23c604b268a89bc20772603c7cf5436ddd51ec44.zip | |
SAMLv2: conflate Responder and Requester when checking second level status code
* lasso/saml-2.0/login.c:
I'm not sure that most IdP really make the semantic distinction
between those two first level status codes, so just conflate them.
| -rw-r--r-- | lasso/saml-2.0/login.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lasso/saml-2.0/login.c b/lasso/saml-2.0/login.c index 0a7bb28b..c7ea2409 100644 --- a/lasso/saml-2.0/login.c +++ b/lasso/saml-2.0/login.c @@ -1242,7 +1242,8 @@ lasso_saml20_login_process_response_status_and_assertion(LassoLogin *login) if (status_value && g_strcmp0(status_value, LASSO_SAML2_STATUS_CODE_SUCCESS) != 0) { if (g_strcmp0(status_value, LASSO_SAML2_STATUS_CODE_REQUEST_DENIED) == 0) return LASSO_LOGIN_ERROR_REQUEST_DENIED; - if (g_strcmp0(status_value, LASSO_SAML2_STATUS_CODE_RESPONDER) == 0) { + if (g_strcmp0(status_value, LASSO_SAML2_STATUS_CODE_RESPONDER) == 0 || + g_strcmp0(status_value, LASSO_SAML2_STATUS_CODE_REQUESTER)) { /* samlp:Responder */ if (response->Status->StatusCode->StatusCode && response->Status->StatusCode->StatusCode->Value) { |