ContextWithSession returns a new context with session associated

CreateSession is called when we have received a valid SAML assertion and should create a new session and modify the http response accordingly, e.g. by

CreateSessionFromAssertion is invoked by ServeHTTP when we have a new, valid SAML assertion.

DefaultRequestTracker returns a new RequestTracker for the provided options, a CookieRequestTracker which uses cookies to track pending requests.

DefaultServiceProvider returns the default saml.ServiceProvider for the provided options.

DefaultTrackedRequestCodec returns a new TrackedRequestCodec for the provided options, a JWTTrackedRequestCodec that uses a JWT to encode TrackedReque

DeleteSession is called to modify the response such that it removed the current session, e.g. by deleting a cookie.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Fatal is equivalent to Print() followed by a call to os.Exit(1).

Fatalf is equivalent to Printf() followed by a call to os.Exit(1).

Fuzz is the go-fuzz fuzzing function

GetSession returns the *Session for this request. If the remote user has specified a username and password in the request then it is validated agains

GetTrackedRequest returns a pending tracked request.

GetTrackedRequests returns all the pending tracked requests

HandleStartAuthFlow is called to start the SAML authentication process.

InitializeHTTP sets up the HTTP handler for the server. (This function is called automatically for you by New, but you may need to call it yourself if

KeySize returns the length of the key required.

KeySize returns the length of the key required.

MakePostLogoutRequest creates a SAML authentication request using the HTTP-POST binding. It returns HTML text representing an HTML form that can be se

MakePostLogoutResponse creates a SAML LogoutResponse using the HTTP-POST binding. It returns HTML text representing an HTML form that can be sent pres

MakeRedirectLogoutResponse creates a SAML LogoutResponse using the HTTP-Redirect binding. It returns a URL that we will redirect the user to for Logou

PKCS1v15 returns a version of RSA that implements RSA in PKCS1v15 mode. By default the block cipher used is AES-256 CBC. The DigestMethod field is ign

ParseMetadata parses arbitrary SAML IDP metadata. Note: this is needed because IDP metadata is sometimes wrapped in an <EntitiesDescriptor>, and some

ParseRedirectResponse returns the decoded SAML LogoutResponse from an HTTP-Redirect URL

PostBinding creates the HTTP POST form information for this `IdpAuthnRequest`. If `Response` is not already set, it calls MakeResponse to produce it.

RegisterDigestMethod registers the specified digest method to that it can be used with Decrypt().

ServeACS handles requests for the SAML ACS endpoint.

SignArtifactResolve adds the `Signature` element to the `ArtifactResolve`.

SignAuthnRequest adds the `Signature` element to the `AuthnRequest`.

SignLogoutRequest adds the `Signature` element to the `LogoutRequest`.

SignLogoutResponse adds the `Signature` element to the `LogoutResponse`.

StopTrackingRequest stops tracking the SAML request given by index, which is a string previously returned from TrackRequest

TrackRequest starts tracking the SAML request with the given ID. It returns an `index` that should be used as the RelayState in the SAMl request flow.

UnmarshalText implements encoding.TextUnmarshaler

UnmarshalText implements the encoding.TextUnmarshaler interface.

ValidateLogoutResponseForm returns a nil error if the logout response is valid.

ValidateLogoutResponseRedirect returns a nil error if the logout response is valid. URL Binding appears to be gzip / flate encoded See https://www.oa

findChild finds the specified child element. Returns (nil, nil) of the element doesn't exist.

getIDPSigningCerts returns the certificates which we can use to verify things signed by the IDP in PEM format, or nil if no such certificate is found.

getSPEncryptionCert returns the certificate which we can use to encrypt things to the SP in PEM format, or nil if no such certificate is found.

initializeServices reads all the stored services and initializes the underlying identity provider to accept them.

sendLoginForm produces a form which requests a username and password and directs the user back to the IDP authorize URL to restart the SAML login flow

unmarshalEtreeHack parses `el` and sets values in the structure `v`. This is a hack -- it first serializes the element, then uses xml.Unmarshal.

Algorithm returns the name of the algorithm

Algorithm returns the name of the algorithm, as will be found in an xenc:EncryptionMethod element.

Algorithm returns the name of the algorithm, as will be found in an xenc:EncryptionMethod element.

CreateLink handles requests to create links

Decode returns a Tracked request from an encoded string.

Decode parses the serialized session that may have been returned by Encode and returns a Session.

Decode returns a Tracked request from an encoded string.

Decrypt implements Decryptor. `key` must be an *rsa.PrivateKey.

Decrypt decrypts an encrypted element with key. If the ciphertext contains an EncryptedKey element, then the type of `key` is determined by the regist

Decrypt decrypts an encrypted element with key. If the ciphertext contains an EncryptedKey element, then the type of `key` is determined by the regist

DefaultOnError is the default ErrorFunction implementation. It prints an message via the standard log package and returns a simple text "Forbidden" me

Deflate returns a compressed byte array of the LogoutRequest

Delete removes `key`

DeleteSession is called to modify the response such that it removed the current session, e.g. by deleting a cookie.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.

Element returns an etree.Element representing the object in XML form.