Incorrect HTTP Redirect binding signature
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 38/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- php
- Domain
- authentication, security
Research direction
Start by reviewing commit 7b785a83a552e225c34adc84040a9268bbc3d4dd and the HTTP Redirect binding signature implementation, then compare the signature input with the SAML binding requirements. Done means the implementation signs the correct combined query parameters and a regression check demonstrates the corrected behavior.
Written by the indexing model from the issue text.
Description
The signature of the HTTP Redirect binding appears to be incorrect since this commit: https://github.com/simplesamlphp/saml2/commit/7b785a83a552e225c34adc84040a9268bbc3d4dd#diff-6a2c4640d940f28e0b49947ffbafd6d2726f92c9fba5fdad8202234083daff57
The signature is now set to the value of signature in the AuthnRequest, but (please correct me if I'm wrong) the signature should be based on the combined query parameters (As it was before the above commit)
- Dominant language
- PHP
- Stars
- 306
- Forks
- 138
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from simplesamlphp/saml2
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
simplesamlphp/saml2#408 · 4 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
simplesamlphp/saml2#397 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
simplesamlphp/saml2#360 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
simplesamlphp/saml2#309 · 18 comments ·
-
Why doesn't the package support multiple NameFormat attributes for the <saml:Attribute> element? Open
Difficulty 4/5 3-5 days Newbie friendliness 42/100
simplesamlphp/saml2#286 · 3 comments ·
All issues in simplesamlphp/saml2
Similar issues
-
Bug
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Automattic/safe-publish#594 ·
-
needs-triage Platform(Default)
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
HttpClient
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
symfony/symfony-docs#23092 ·
-
sync-en
Difficulty 1/5 Under an hour Newbie friendliness 90/100
-
sync-en
Difficulty 1/5 Under an hour Newbie friendliness 95/100