SAML 2.0 mtoa huduma juu ya OpenSAML - kila madai alisainiwa, Redis replay cache (ID3.3)

Shipped

15 Novemba 2026, 07:37 UTC

Author

Kamo

Commit

0e0194c

Namba hurejea miaka 315 KK na 315 BK kutoka Shibboleth releases repository): SP-initiated AuthnRequest (HTTP-Redirect), majibu ya kuthibitisha na OpenSaml4AuthenticationProvider (saini, mtoa, watazamaji, mpokeaji / marudio, NotBefore / NotOnOrAfter, InResponseTo) + kila madai lazima kusainiwa + SETNX replay cache katika Redis (kushindwa kufungwa); SP metadata; IdP metadata parse (XXE kukataa). OpenSAML initialises juu ya matumizi ya kwanza, kamwe katika mazingira kuanza, hivyo makosa maktaba inaweza gharama tu SAML.