How to verify AuthnRequest's signature in HTTP Redirect binding?

[Brent Putman]

On 8/6/15 11:15 PM, Adam Dong wrote:
>
> I found examples for post binding (enveloped signature), but could
> not find anything for redirect binding where the signature is
> separate from AuthnRequest itself.
>
>

You didn't mention whether you are working with OpenSAML v2 or v3, but:

v2:  It's a SecurityPolicyRule: 
org.opensaml.saml2.binding.security.SAML2HTTPRedirectDeflateSignatureRule

SecurityPolicyRules generally run as part of the SecurityPolicy
executed within a MessageDecoder.



v3: It's a MessageHandler:
org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler

Those typically run stand-alone on the MessageContext output by a
MessageDecoder.



We don't really have good usage docs on those, unfortunately.  The best
thing would be to just look at the unit tests to get an idea of how to
use, and ask questions here if things are unclear.

--Brent

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150807/c507e31c/attachment.html>