search

clegaspi / saml_reader

A tool to parse and verify SAML response data for MongoDB Cloud.
MIT License
7 stars 2 forks source link

NameID fails validation if not trimmed of whitespace #81

Open clegaspi opened 2 years ago

clegaspi commented 2 years ago

If there is something like this:

            <NameID 
                Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">foo@bar.com
            </NameID>

In XML format, this reads as having a newline (and tab?) in the value, which is not valid, and is probably just a formatting issue. Should look into whether we can explicitly remove all newlines and tabs from XML to clean it up?