diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2021-05-04 18:28:58 +0300 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2021-05-04 18:28:58 +0300 |
| commit | 8afcb434dcfcc88ac2d3317aa686c7c21d52ffff (patch) | |
| tree | 4e89ad6994a35069290e25c41c30bf3176cf363a /lib/SAMLSettings.php | |
| parent | 6f51a9223d27ea7288b9efbddbc5043d8ac51907 (diff) | |
Allow setting of "retrieveParametersFromServer"
Some SAML servers require this type of decoding, otherwise the SLO request fails. Ideally the library would perform both verifications (https://github.com/onelogin/php-saml/issues/466), but it seems upstream doesn't want to perform this change.
Until we have considered a better solution for this, this adds a new checkbox that one can configure.
Ref https://github.com/nextcloud/user_saml/issues/403
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to 'lib/SAMLSettings.php')
| -rw-r--r-- | lib/SAMLSettings.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/lib/SAMLSettings.php b/lib/SAMLSettings.php index d25fa16a..29a68395 100644 --- a/lib/SAMLSettings.php +++ b/lib/SAMLSettings.php @@ -88,6 +88,10 @@ class SAMLSettings { return ($setting === '1' && $type === 'saml'); } + public function usesSloWebServerDecode() : bool { + return $this->config->getAppValue('user_saml', 'security-sloWebServerDecode', '0') === '1'; + } + /** * get config for given IDP * |