Skip to content

Commit a624f35

Browse files
Merge pull request #195 from RomanKosovnenko/fix/logout_request_signature_validation
fix: Signature validation on IdP initiated SLO
2 parents ee5ea2f + c271a37 commit a624f35

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/omniauth/strategies/saml.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -177,7 +177,7 @@ def handle_logout_response(raw_response, settings)
177177
end
178178

179179
def handle_logout_request(raw_request, settings)
180-
logout_request = OneLogin::RubySaml::SloLogoutrequest.new(raw_request)
180+
logout_request = OneLogin::RubySaml::SloLogoutrequest.new(raw_request, {}.merge(settings: settings).merge(get_params: @request.params))
181181

182182
if logout_request.is_valid? &&
183183
logout_request.name_id == session["saml_uid"]

0 commit comments

Comments
 (0)