Closed mateuszmandera closed 2 years ago
I think its ok to accept an status at the build method, and by default set the Success.
Do you have a PR for that? (please include unit tests)
@pitbulk I don't have a PR, but I'll try to find the time to work on one.
@pitbulk Opened #288 for this issue
Is there a recommended way of implementing
LogoutResponse
for communicating failure or any plans for bulding that functionality into the library? Currently the class appears to only support success responses:So it seems to me that the only way to make failure responses happen is to subclass it and override
build
to allow using differentstatus
codes and then generate, sign etc. the LogoutResponse in the application code by following the pattern of howOneLogin_Saml2_Auth.process_slo
does it - though perhaps I'm missing a better way of achieving that.This is needed due to the SAML spec requiring failure responses: https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf