Get fetches the data stored in `key` and unmarshals it into `value`.

ParseResponse extracts the SAML IDP response received in req, resolves artifacts when necessary, validates it, and returns the verified assertion.

ServeHTTP implements http.Handler and serves the SAML-specific HTTP endpoints on the URIs specified by m.ServiceProvider.MetadataURL and m.ServiceProv

Encode returns a serialized version of the Session. Note: When implementing this function, it is reasonable to expect that Session is of the exact ty

New creates a Session from the SAML assertion.

Element returns an etree.Element representing the object in XML form.

Bytes returns a byte array representation of the LogoutRequest

Decode parses the serialized session that may have been returned by Encode and returns a Session.

Validate checks that the authentication request is valid and assigns the AuthnRequest and Metadata properties. Returns a non-nil error if the request

Metadata returns the service provider metadata

Printf prints to the logger using the format.

RequireAccount is HTTP middleware that requires that each request be associated with a valid session. If the request is not associated with a valid se

ParseRedirectRequest returns the decoded SAML AuthnRequest from an HTTP-Redirect URL

MakeAssertion constructs an assertion from session and the request and assigns it to req.Assertion.

Decrypt decrypts the encrypted data using the provided key. If the data are encrypted using AES or 3DEC, then the key should be a []byte. If the data

MakeRedirectAuthenticationRequest creates a SAML authentication request using the HTTP-Redirect binding. It returns a URL that we will redirect the us

FetchMetadata returns metadata from an IDP metadata URL.

Post returns an HTML form suitable for using the HTTP-POST binding with the request

Put marshals `value` and stores it in `key`.

Redirect returns a URL suitable for using the redirect binding with the request

Delete removes `key`

Element returns an etree.Element representing the object in XML form.

GetSSOBindingLocation returns URL for the IDP's Single Sign On Service binding of the specified type (HTTPRedirectBinding or HTTPPostBinding)

List returns all the keys that start with `prefix`. The prefix is stripped from each returned value. So if keys are ["aa", "ab", "cd"] then List("a")

MakeAssertionEl sets `AssertionEl` to a signed, possibly encrypted, version of `Assertion`.

MakeAuthenticationRequest produces a new AuthnRequest object to send to the idpURL that uses the specified binding (HTTPRedirectBinding or HTTPPostBin

ServeSSO handles SAML auth requests. When it gets a request for a user that does not have a valid session, then it prompts the user via XXX. If the

unmarshalElement serializes el into v by serializing el and then parsing it with xml.Unmarshal.

validateSignature returns nil iff the Signature embedded in the element is valid

DefaultSessionProvider returns the default SessionProvider for the provided options, a CookieSessionProvider configured to store sessions in a cookie.

Element returns an XML element representation of n.

GetSLOBindingLocation returns URL for the IDP's Single Log Out Service binding of the specified type (HTTPRedirectBinding or HTTPPostBinding)

MakeArtifactResolveRequest produces a new ArtifactResolve object to send to the idp's Artifact resolver

MakeResponse creates and assigns a new SAML response in ResponseEl. `Assertion` must be non-nil. If MakeAssertionEl() has not been called, this functi

New creates a new Middleware with the default providers for the given options. You can customize the behavior of the middleware in more detail by rep

NewIdpAuthnRequest returns a new IdpAuthnRequest for the given HTTP request to the authorization service.

RequireAttribute returns a middleware function that requires that the SAML attribute `name` be set to `value`. This can be used to require that a remo

ServeIDPInitiated handes an IDP-initiated authorization request. Requests of this type require us to know a registered service provider and (optionall

CreateSession is called when we have received a valid SAML assertion and should create a new session and modify the http response accordingly, e.g. by

GetSession returns the current Session associated with the request, or ErrNoSession if there is no valid session.

GetSigningContext returns a dsig.SigningContext initialized based on the Service Provider's configuration

Handler returns an http.Handler that serves the metadata and SSO URLs

Metadata returns the metadata structure for this identity provider.

OAEP returns a version of RSA that implements RSA in OAEP-MGF1P mode. By default the block cipher used is AES-256 CBC and the digest method is SHA-256

ParseXMLArtifactResponse validates the SAML Artifact resolver response and returns the verified assertion. This function handles verifying the digita

Println prints new line.

RegisterDecrypter registers the specified decrypter to that it can be used with Decrypt().

SessionFromContext returns the session associated with ctx, or nil if no session are associated

WriteResponse writes the `Response` to the http.ResponseWriter. If `Response` is not already set, it calls MakeResponse to produce it.

findChildren returns all the elements matching childNS/childTag that are direct children of parentEl.

findOneChild finds the specified child element. Returns an error if the element doesn't exist.

AttributeFromContext is a convenience method that returns the named attribute from the session, if available.

DefaultSessionCodec returns the default SessionCodec for the provided options, a JWTSessionCodec configured to issue signed tokens.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

GetArtifactBindingLocation returns URL for the IDP's Artifact binding of the specified type

GetServiceProvider returns the Service Provider metadata for the service provider ID, which is typically the service provider's metadata URL. If an ap

MakeLogoutRequest produces a new LogoutRequest object for idpURL.

MakeLogoutResponse produces a new LogoutResponse object for idpURL and logoutRequestID.

MakePostAuthenticationRequest creates a SAML authentication request using the HTTP-POST binding. It returns HTML text representing an HTML form that c

MakeRedirectLogoutRequest creates a SAML authentication request using the HTTP-Redirect binding. It returns a URL that we will redirect the user to in

MarshalText implements encoding.TextMarshaler

New returns a new Server

ParseXMLResponse parses and validates the SAML IDP response and returns the verified assertion. This function handles decrypting the message, verifyi

ServeMetadata handles requests for the SAML metadata endpoint.

SoapRequest returns a SOAP Envelope contining the ArtifactResolve request

10MB

validateXMLResponse validates the SAML IDP response and returns the verified assertion. This function handles decrypting the message, verifying the d

validateAssertion checks that the conditions specified in assertion match the requirements to accept. If validation fails, it returns an error describ

validateLogoutResponse validates the LogoutResponse fields. Returns a nil error if the LogoutResponse is valid.