diff options
| author | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2013-09-08 21:21:41 +0200 |
|---|---|---|
| committer | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2013-09-08 21:34:12 +0200 |
| commit | 9adc9bfaadac2bb4f450b77146dfa3f72c46084c (patch) | |
| tree | 0b11a865fdcb1c203f83df3a7efda934f6a9fc3e | |
| parent | 53f6f5c5ef0e4b0564efbcf438ffb6a9dab65b65 (diff) | |
| download | lasso-9adc9bfaadac2bb4f450b77146dfa3f72c46084c.tar.gz lasso-9adc9bfaadac2bb4f450b77146dfa3f72c46084c.tar.xz lasso-9adc9bfaadac2bb4f450b77146dfa3f72c46084c.zip | |
saml2/login: fix role of providers in process_authn_request() and idp_initiated_authn_request()
It is necessary for endpoint resolution to know the role of providers.
| -rw-r--r-- | lasso/saml-2.0/login.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/lasso/saml-2.0/login.c b/lasso/saml-2.0/login.c index 02a659f6..b1b79ddc 100644 --- a/lasso/saml-2.0/login.c +++ b/lasso/saml-2.0/login.c @@ -260,6 +260,7 @@ lasso_saml20_login_process_authn_request_msg(LassoLogin *login, const char *auth LassoSamlp2StatusResponse *response = NULL; LassoSamlp2AuthnRequest *authn_request = NULL; LassoProvider *remote_provider = NULL; + LassoServer *server = NULL; const gchar *protocol_binding = NULL; const char *status1 = LASSO_SAML2_STATUS_CODE_RESPONDER; const char *status2 = NULL; @@ -298,6 +299,10 @@ lasso_saml20_login_process_authn_request_msg(LassoLogin *login, const char *auth rc = LASSO_PROFILE_ERROR_UNKNOWN_PROVIDER; goto cleanup; } + lasso_extract_node_or_fail(server, lasso_profile_get_server(&login->parent), SERVER, + LASSO_PROFILE_ERROR_MISSING_SERVER); + remote_provider->role = LASSO_PROVIDER_ROLE_SP; + server->parent.role = LASSO_PROVIDER_ROLE_IDP; /* all those attributes are mutually exclusive */ if (((authn_request->ProtocolBinding != NULL) || @@ -1501,6 +1506,10 @@ lasso_saml20_login_init_idp_initiated_authn_request(LassoLogin *login, if (! LASSO_IS_PROVIDER(provider)) return LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND; + /* fix roles */ + server->parent.role = LASSO_PROVIDER_ROLE_IDP; + provider->role = LASSO_PROVIDER_ROLE_SP; + lasso_assign_string(profile->remote_providerID, remote_providerID); lasso_assign_new_gobject(profile->request, lasso_samlp2_authn_request_new()); lasso_assign_new_gobject(LASSO_SAMLP2_AUTHN_REQUEST(profile->request)->NameIDPolicy, |