diff options
| author | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2011-05-08 00:02:52 +0200 |
|---|---|---|
| committer | Benjamin Dauvergne <bdauvergne@entrouvert.com> | 2011-05-08 00:03:02 +0200 |
| commit | cbeecfe280f14eae27a3e0937e54945aa162e8a2 (patch) | |
| tree | e2e311bdac21708260273bad138626ab01b819c6 | |
| parent | 481aeef4e00c1c4193154674f15c8267f976641a (diff) | |
| download | lasso-cbeecfe280f14eae27a3e0937e54945aa162e8a2.tar.gz lasso-cbeecfe280f14eae27a3e0937e54945aa162e8a2.tar.xz lasso-cbeecfe280f14eae27a3e0937e54945aa162e8a2.zip | |
[saml2] fix build_request_msg for AuthzDecision assertion queries
The servicepoints and roles arrays did not match the provider role
enumerations.
| -rw-r--r-- | lasso/saml-2.0/assertion_query.c | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/lasso/saml-2.0/assertion_query.c b/lasso/saml-2.0/assertion_query.c index d8e349bb..27cf0401 100644 --- a/lasso/saml-2.0/assertion_query.c +++ b/lasso/saml-2.0/assertion_query.c @@ -223,16 +223,18 @@ lasso_assertion_query_build_request_msg(LassoAssertionQuery *assertion_query) const char *url; /* XXX: support only SOAP */ static const gchar *servicepoints[LASSO_ASSERTION_QUERY_REQUEST_TYPE_LAST] = { - "AssertionIDRequestService SOAP", + NULL, + NULL, "AuthnQueryService SOAP", + "AttributeService SOAP", "AuthzService SOAP", - "AttributeService SOAP" }; static const LassoProviderRole roles[LASSO_ASSERTION_QUERY_REQUEST_TYPE_LAST] = { - LASSO_PROVIDER_ROLE_ANY, + LASSO_PROVIDER_ROLE_NONE, + LASSO_PROVIDER_ROLE_NONE, LASSO_PROVIDER_ROLE_AUTHN_AUTHORITY, + LASSO_PROVIDER_ROLE_ATTRIBUTE_AUTHORITY, LASSO_PROVIDER_ROLE_AUTHZ_AUTHORITY, - LASSO_PROVIDER_ROLE_ATTRIBUTE_AUTHORITY }; type = assertion_query->private_data->query_request_type; @@ -240,7 +242,7 @@ lasso_assertion_query_build_request_msg(LassoAssertionQuery *assertion_query) return LASSO_ERROR_UNDEFINED; } if (type < LASSO_ASSERTION_QUERY_REQUEST_TYPE_ASSERTION_ID || - type >= LASSO_ASSERTION_QUERY_REQUEST_TYPE_AUTHZ_DECISION) { + type > LASSO_ASSERTION_QUERY_REQUEST_TYPE_AUTHZ_DECISION) { return LASSO_PARAM_ERROR_INVALID_VALUE; } url = lasso_provider_get_metadata_one_for_role(remote_provider, roles[type], servicepoints[type]); |