search

handnot2 / esaml

Erlang SAML library, SSO and SLO, with Cowboy integration
BSD 2-Clause "Simplified" License
19 stars 49 forks source link

InResponseTo - make this available #4

Closed handnot2 closed 6 years ago

handnot2 commented 6 years ago

The auth response for SP initiated requests include the request ID (InResponseTo). Make this available in the esaml records. Expose the request ID in the assertion subject InResponseTo attribute. Make this available in the assertion subject record.

-record(esaml_subject, {
....
    notonorafter = "" :: esaml:datetime(),
    in_response_to = "" :: string()}).

This combined with notonorafter can be used during validations. This new field will be an empty string in case of IDP initiated flows.