Bug #140
Mis à jour par Benjamin Dauvergne il y a plus de 8 ans
When the discovery service is the same as the IdP, lasso_server_get_assertion_issuer return the Server object itself as issuer of the assertion.
check_security_mechanism checks that issuer->role is LASSO_PROVIDER_ROLE_SP. Should be fixed to use issuer->private_data->roles if role is 0. Or only if issuer == profile->server.
check_security_mechanism checks that issuer->role is LASSO_PROVIDER_ROLE_SP. Should be fixed to use issuer->private_data->roles if role is 0. Or only if issuer == profile->server.