summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBenjamin Dauvergne <bdauvergne@entrouvert.com>2011-04-21 11:04:29 +0200
committerBenjamin Dauvergne <bdauvergne@entrouvert.com>2011-04-21 11:23:06 +0200
commit7016e7c4530916bb26bfc57dd9f0d4dea544bfbb (patch)
tree5c892c95414e8a7997c922f0c6c76a0ff02108cb
parentebd9266cb58f78d9647d76a9b8436ae58ce7fa14 (diff)
downloadlasso-7016e7c4530916bb26bfc57dd9f0d4dea544bfbb.tar.gz
lasso-7016e7c4530916bb26bfc57dd9f0d4dea544bfbb.tar.xz
lasso-7016e7c4530916bb26bfc57dd9f0d4dea544bfbb.zip
[saml2] for any RequestDenied SAML2 response return LASSO_PROFILE_ERROR_REQUEST_DENIED as error
-rw-r--r--lasso/saml-2.0/profile.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/lasso/saml-2.0/profile.c b/lasso/saml-2.0/profile.c
index ff1b67a3..8422eee9 100644
--- a/lasso/saml-2.0/profile.c
+++ b/lasso/saml-2.0/profile.c
@@ -1412,6 +1412,9 @@ lasso_saml20_profile_process_any_response(LassoProfile *profile,
if (!status_code2->Value)
goto cleanup;
/* FIXME: what to do with secondary status code ? */
+ if (lasso_strisequal(status_code2->Value, LASSO_SAML2_STATUS_CODE_REQUEST_DENIED)) {
+ rc = LASSO_PROFILE_ERROR_REQUEST_DENIED;
+ }
}
cleanup: