How to verify AuthnRequest's signature in HTTP Redirect binding?

[Adam Dong]

Brent,
Thanks a lot for the clues. I'll check them out.
Adam
On Aug 7, 2015 10:06 AM, "Brent Putman" <putmanb at georgetown.edu> wrote:

>
>
> On 8/6/15 11:15 PM, Adam Dong wrote:
>
> I found examples for post binding (enveloped signature), but could not
> find anything for redirect binding where the signature is separate from
> AuthnRequest itself.
>
>
> You didn't mention whether you are working with OpenSAML v2 or v3, but:
>
> v2:  It's a SecurityPolicyRule:
> org.opensaml.saml2.binding.security.SAML2HTTPRedirectDeflateSignatureRule
>
> SecurityPolicyRules generally run as part of the SecurityPolicy executed
> within a MessageDecoder.
>
>
>
> v3: It's a MessageHandler:
> org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler
>
> Those typically run stand-alone on the MessageContext output by a
> MessageDecoder.
>
>
>
> We don't really have good usage docs on those, unfortunately.  The best
> thing would be to just look at the unit tests to get an idea of how to use,
> and ask questions here if things are unclear.
>
> --Brent
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150807/7e96a53a/attachment.html>