Projet

Général

Profil

Development #45

Add an utility function to complete an AuthnResponse with the IP adresse of the client

Ajouté par Benjamin Dauvergne il y a presque 14 ans. Mis à jour il y a plus de 8 ans.

Statut:
Nouveau
Priorité:
Normal
Assigné à:
-
Catégorie:
SAMLv2
Version cible:
Début:
21 mai 2010
Echéance:
% réalisé:

0%

Temps estimé:
2:00 h
Patch proposed:
Planning:

Description

See page 19 of document saml-core-2.0-os.pdf ("Assertions and Protocols for the
OASIS Security Assertion Markup Language (SAML) V2.0")

Extracted from the referenced page (page 19 of document saml-core-2.0-os.pdf)

Attributes:
« Address [Optional]
733
The network address/location from which an attesting entity can present
the assertion. For example,
734
this attribute might be used to bind the assertion to particular client
addresses to prevent an attacker
735
from easily stealing and presenting the assertion from another location.
IPv4 addresses SHOULD be
736
represented in the usual dotted-decimal format (e.g., "1.2.3.4"). IPv6
addresses SHOULD be
737
represented as defined by Section 2.2 of IETF RFC 3513 [RFC 3513] (e.g.,
738
"FEDC:BA98:7654:3210:FEDC:BA98:7654:3210").
739 »

Historique

#1

Mis à jour par Benjamin Dauvergne il y a plus de 13 ans

The API should be

void lasso_saml2_authn_statement_set_subject_locality_address(LassoSaml2AuthnStatement *authn_statement, const char *address);
void lasso_saml2_authn_statement_set_subject_locatlity_dnsname(LassoSaml2AuthnStatement *authn_statement, const char *dnsname);

on the checking side there is a need for:

LassoSaml2ValidationState lasso_saml2_authn_statement_check_subject_locality_address(LassoSaml2AuthnStatement *authn_statement, const char *address;
LassoSaml2ValidationState lasso_saml2_authn_statement_check_subject_locality_dnsname(LassoSaml2AuthnStatement *authn_statement, const char *address;
#2

Mis à jour par Benjamin Dauvergne il y a plus de 13 ans

  • Catégorie mis à SAMLv2
  • Version cible changé de future à 2.4.0
#3

Mis à jour par Benjamin Dauvergne il y a presque 12 ans

  • Assigné à Benjamin Dauvergne supprimé
#4

Mis à jour par Benjamin Dauvergne il y a plus de 8 ans

  • Version cible changé de 2.4.0 à future

Formats disponibles : Atom PDF