supabase / auth

A JWT based API for managing users and issuing JWT tokens
https://supabase.com/docs/guides/auth
MIT License
1.55k stars 375 forks source link

feat: add support for saml encrypted assertions #1752

Closed hf closed 2 months ago

hf commented 2 months ago

By setting the GOTRUE_SAML_ALLOW_ENCRYPTED_ASSERTIONS to true the SAML private key will be advertised as usable with encryption too.

Encrypted assertions are fairly rare these days because:

Why not use a separate key?

The underlying library does not support it and there are no significant cryptological issues using the same RSA key for signatures and encryption, especially in a limited setting like this.

coveralls commented 2 months ago

Pull Request Test Coverage Report for Build 10663458667

Details


Changes Missing Coverage Covered Lines Changed/Added Lines %
internal/conf/saml.go 1 3 33.33%
<!-- Total: 3 5 60.0% -->
Totals Coverage Status
Change from base Build 10605980831: -0.002%
Covered Lines: 9125
Relevant Lines: 15769

💛 - Coveralls