passport-saml - npm Package Compare versions

Comparing version 0.11.0 to 0.11.1

lib/passport-saml/saml.js

@@ -710,2 +710,3 @@ var zlib = require('zlib');
   var xml = new Buffer(container.SAMLRequest, 'base64').toString('utf8');
+  var dom = new xmldom.DOMParser().parseFromString(xml);
   var parserConfig = {
@@ -722,3 +723,3 @@ explicitRoot: true,
     // Check if this document has a valid top-level signature
-    if (self.options.cert && !self.validateSignature(xml, self.options.cert)) {
+    if (self.options.cert && !self.validateSignature(xml, dom.documentElement, self.options.cert)) {
       return callback(new Error('Invalid signature'));
@@ -757,2 +758,6 @@ }
       }
+      var sessionIndex = request.SessionIndex;
+      if (sessionIndex) {
+        profile.sessionIndex = sessionIndex[0];
+      }
 
@@ -759,0 +764,0 @@ callback(null, profile, true);

package.json

 {
   "name": "passport-saml",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "licenses": [
@@ -5,0 +5,0 @@ {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

249562

increased by6.21%

Number of package files

22

increased by29.41%

Lines of code

2466

increased by2.62%

No dependency changes