kaslo/synapse
1
0
Fork 0
Code Wiki Activity

back to black

Browse Source
This commit is contained in:
David Baker
2019-09-09 16:28:52 +01:00
parent 4c9b1411a4
commit 995b4465bc
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
synapse/config/saml2_config.py
View File

@@ -48,8 +48,12 @@ class SAML2Config(Config):
saml2_config.get("saml_session_lifetime", "5m")
)
self.saml2_username_attestation = saml2_config.get("username_attestation", "uid")
self.saml2_displayname_attestation = saml2_config.get("displayname_attestation", "displayName")
self.saml2_username_attestation = saml2_config.get(
"username_attestation", "uid"
)
self.saml2_displayname_attestation = saml2_config.get(
"displayname_attestation", "displayName"
)
def _default_saml_config_dict(self):
import saml2

5
synapse/handlers/saml_handler.py
View File

@@ -94,7 +94,10 @@ class SamlHandler:
raise SynapseError(400, "SAML2 response was not signed")
if self.saml2_username_attestation not in saml2_auth.ava:
logger.warning("SAML2 response lacks a '%s' attestation", self.saml2_username_attestation)
logger.warning(
"SAML2 response lacks a '%s' attestation",
self.saml2_username_attestation,
)
raise SynapseError(400, "username attestation not in SAML2 response")
self._outstanding_requests_dict.pop(saml2_auth.in_response_to, None)