[java-identity-provider] branch main updated: Fix up Response-only POST-SimpleSign parameter rules.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=c12be6184de4926930d6aba8eaefab34aaf29248

The following commit(s) were added to refs/heads/main by this push:
     new c12be6184 Fix up Response-only POST-SimpleSign parameter rules.
c12be6184 is described below

commit c12be6184de4926930d6aba8eaefab34aaf29248
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Apr 2 16:51:46 2025 -0400

    Fix up Response-only POST-SimpleSign parameter rules.
---
 .../resources/net/shibboleth/idp/conf/saml-binding-config.xml    | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
index 54fbba717..e9c435422 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
@@ -303,7 +303,6 @@
         <property name="requiredParameters">
             <set>
                 <value>SAMLResponse</value>
-                <value>Signature</value>
             </set>
         </property>
         <property name="uniqueParameters">
@@ -315,6 +314,14 @@
                 <value>KeyInfo</value>
             </set>
         </property>
+        <property name="mutuallyExclusiveParameters">
+            <set>
+                <set>
+                    <value>SAMLRequest</value>
+                    <value>SAMLResponse</value>
+                </set>
+            </set>
+        </property>
     </bean>
     
     <bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.POST"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.