search

OTA-Insight / djangosaml2idp

SAML 2.0 Identity Provider in Django
Apache License 2.0
104 stars 96 forks source link

Assersion Signature Verification #104

Closed HacKeD0x90 closed 3 years ago

HacKeD0x90 commented 4 years ago

Hello can you point me on where exactly in the example project , the signature verification on the SAMLResponse content is being done? I know you are using xmlsecurity but can't identify where this check is done in the code, i only find the import of xmlsec in settings.py

Thanks

peppelinux commented 4 years ago

We have It in pysaml2 internals, look at there

HacKeD0x90 commented 4 years ago

so if i understand correctly , the code is not here in this repository?

peppelinux commented 4 years ago

Yes sir, It's in pysaml2