cloudtrust / keycloak-wsfed

WS-Federation implementation for keycloak
GNU Affero General Public License v3.0
37 stars 30 forks source link

Define and implement security tests for WS-FED based on known exploits #15

Open AlistairDoswald opened 6 years ago

AlistairDoswald commented 6 years ago

The WS-Fed module is currently functional, but no tests exist to ensure that the code is secure. There have been known exploits against the WS-Fed protocol for which the implementation was incorrect.

A set of tests should be written and then translated into automatic tests (unit, functional), to be run against the keycloak-wsfed implementation.