Add code comments to for internal documentation for validateSignature()

krakenjs / passport-saml-encrypted

A strategy for Passport authentication that supports encrypted SAML responses

MIT License

14 stars 26 forks source link

Closed markstos closed 8 years ago

markstos commented 8 years ago

I thinks it's significant to note that:

This is used both for top-level XML and assertions
Where in the XML we expect to find the signature (for this who don't immediately recognize Xpath syntax)
What happens in case there happen to be multiple signatures
What the return value is (which is obscured because control flow is passed to checkSignature.

lmarkus commented 8 years ago

Thanks :)