markstos
commented
6 years ago Support requests are better addressed through StackOverflow with the passport-saml tag. No one is monitoring this queue to answer support requests.
Closed einarjohnson closed 6 years ago
markstos
commented
6 years ago Support requests are better addressed through StackOverflow with the passport-saml tag. No one is monitoring this queue to answer support requests.
Hi. I am trying to verify a SAML2 response by sending a POST request to my SP setup. The token has a SignatureValue in it. It seems that the validateSignature function inside passport-saml/lib/passport-saml/saml.is never finds the needed signature object and returns false `var xpathSigQuery = ".//*[local-name(.)='Signature' and " + "namespace-uri(.)='http://www.w3.org/2000/09/xmldsig#']";
var signatures = xpath(currentNode, xpathSigQuery);
// This function is expecting to validate exactly one signature, so if we find more or fewer // than that, reject. if (signatures.length != 1) return false;`
My token looks like this `<?xml version="1.0" encoding="UTF-8"?>