From 7016e7c4530916bb26bfc57dd9f0d4dea544bfbb Mon Sep 17 00:00:00 2001
From: Benjamin Dauvergne <bdauvergne@entrouvert.com>
Date: Thu, 21 Apr 2011 11:04:29 +0200
Subject: [saml2] for any RequestDenied SAML2 response return
 LASSO_PROFILE_ERROR_REQUEST_DENIED as error

---
 lasso/saml-2.0/profile.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lasso/saml-2.0/profile.c b/lasso/saml-2.0/profile.c
index ff1b67a3..8422eee9 100644
--- a/lasso/saml-2.0/profile.c
+++ b/lasso/saml-2.0/profile.c
@@ -1412,6 +1412,9 @@ lasso_saml20_profile_process_any_response(LassoProfile *profile,
 		if (!status_code2->Value)
 			goto cleanup;
 		/* FIXME: what to do with secondary status code ? */
+		if (lasso_strisequal(status_code2->Value, LASSO_SAML2_STATUS_CODE_REQUEST_DENIED)) {
+			rc = LASSO_PROFILE_ERROR_REQUEST_DENIED;
+		}
 	}
 
 cleanup:
-- 
cgit