diff --git a/go.mod b/go.mod index 307b489981..110b965c0d 100644 --- a/go.mod +++ b/go.mod @@ -24,7 +24,6 @@ require ( github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/consensys/gnark-crypto v0.18.1 // indirect github.com/crate-crypto/go-eth-kzg v1.4.0 // indirect - github.com/crewjam/httperr v0.2.0 // indirect github.com/davecgh/go-spew v1.1.1 // indirect github.com/decred/dcrd/dcrec/secp256k1/v4 v4.3.0 // indirect github.com/ethereum/c-kzg-4844/v2 v2.1.5 // indirect @@ -82,7 +81,6 @@ require ( github.com/prometheus/common v0.48.0 // indirect github.com/prometheus/procfs v0.12.0 // indirect github.com/rogpeppe/go-internal v1.14.1 // indirect - github.com/russellhaering/goxmldsig v1.6.0 // indirect github.com/segmentio/asm v1.2.0 // indirect github.com/sergi/go-diff v1.2.0 // indirect github.com/sourcegraph/annotate v0.0.0-20160123013949-f4cad6c6324d // indirect @@ -120,7 +118,7 @@ require ( github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc github.com/btcsuite/btcutil v1.0.2 github.com/coreos/go-oidc/v3 v3.20.0 - github.com/crewjam/saml v0.4.14 + github.com/crewjam/saml v0.5.1 github.com/didip/tollbooth/v5 v5.1.1 github.com/ethereum/go-ethereum v1.17.0 github.com/fatih/structs v1.1.0 @@ -145,6 +143,7 @@ require ( github.com/pquerna/otp v1.4.0 github.com/prometheus/client_golang v1.19.0 github.com/rs/cors v1.11.0 + github.com/russellhaering/goxmldsig v1.6.0 github.com/sebest/xff v0.0.0-20160910043805-6c115e0ffa35 github.com/sethvargo/go-password v0.2.0 github.com/sirupsen/logrus v1.9.3 diff --git a/go.sum b/go.sum index ed729eb14b..e727fdddbc 100644 --- a/go.sum +++ b/go.sum @@ -92,10 +92,8 @@ github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46t github.com/crate-crypto/go-eth-kzg v1.4.0 h1:WzDGjHk4gFg6YzV0rJOAsTK4z3Qkz5jd4RE3DAvPFkg= github.com/crate-crypto/go-eth-kzg v1.4.0/go.mod h1:J9/u5sWfznSObptgfa92Jq8rTswn6ahQWEuiLHOjCUI= github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY= -github.com/crewjam/httperr v0.2.0 h1:b2BfXR8U3AlIHwNeFFvZ+BV1LFvKLlzMjzaTnZMybNo= -github.com/crewjam/httperr v0.2.0/go.mod h1:Jlz+Sg/XqBQhyMjdDiC+GNNRzZTD7x39Gu3pglZ5oH4= -github.com/crewjam/saml v0.4.14 h1:g9FBNx62osKusnFzs3QTN5L9CVA/Egfgm+stJShzw/c= -github.com/crewjam/saml v0.4.14/go.mod h1:UVSZCf18jJkk6GpWNVqcyQJMD5HsRugBPf4I1nl2mME= +github.com/crewjam/saml v0.5.1 h1:g+mfp0CrLuLRZCK793PgJcZeg5dS/0CDwoeAX2zcwNI= +github.com/crewjam/saml v0.5.1/go.mod h1:r0fDkmFe5URDgPrmtH0IYokva6fac3AUdstiPhyEolQ= github.com/davecgh/go-spew v0.0.0-20171005155431-ecdeabc65495/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= diff --git a/internal/api/saml.go b/internal/api/saml.go index bba7605eda..0bc61c5326 100644 --- a/internal/api/saml.go +++ b/internal/api/saml.go @@ -12,6 +12,7 @@ import ( "github.com/crewjam/saml" "github.com/crewjam/saml/samlsp" + dsig "github.com/russellhaering/goxmldsig" ) // newSAMLServiceProvider constructs a ServiceProvider for the given IdP @@ -41,6 +42,7 @@ func (a *API) newSAMLServiceProvider(identityProvider *saml.EntityDescriptor, id }) provider.AuthnNameIDFormat = saml.PersistentNameIDFormat + provider.SignatureMethod = dsig.RSASHA256SignatureMethod return &provider }