From 667e04fb8928179e2e1e32c182e2e58407bd9aad Mon Sep 17 00:00:00 2001 From: Livio Spring Date: Thu, 29 Aug 2024 15:16:14 +0200 Subject: [PATCH] fix(saml): correctly parse certificate (#8470) # Which Problems Are Solved When using a SAML provider, which listed the `X509Certificate` as base64 encoded PEM, the SAMLResponse validation would fail with an error: `malformed certificate`. zitadel/saml has been fixed to handle this as well. # How the Problems Are Solved Update to zitadel/saml v0.2.0. # Additional Changes None # Additional Context closes https://github.com/zitadel/zitadel/issues/8039 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index e514c62f7..49fe4df24 100644 --- a/go.mod +++ b/go.mod @@ -61,7 +61,7 @@ require ( github.com/zitadel/logging v0.6.0 github.com/zitadel/oidc/v3 v3.28.1 github.com/zitadel/passwap v0.6.0 - github.com/zitadel/saml v0.1.3 + github.com/zitadel/saml v0.2.0 github.com/zitadel/schema v1.3.0 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.53.0 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 diff --git a/go.sum b/go.sum index aef33fe16..416161b72 100644 --- a/go.sum +++ b/go.sum @@ -727,8 +727,8 @@ github.com/zitadel/oidc/v3 v3.28.1 h1:PsbFm5CzEMQq9HBXUNJ8yvnWmtVYxpwV5Cinj7TTsH github.com/zitadel/oidc/v3 v3.28.1/go.mod h1:WmDFu3dZ9YNKrIoZkmxjGG8QyUR4PbbhsVVSY+rpojM= github.com/zitadel/passwap v0.6.0 h1:m9F3epFC0VkBXu25rihSLGyHvWiNlCzU5kk8RoI+SXQ= github.com/zitadel/passwap v0.6.0/go.mod h1:kqAiJ4I4eZvm3Y6oAk6hlEqlZZOkjMHraGXF90GG7LI= -github.com/zitadel/saml v0.1.3 h1:LI4DOCVyyU1qKPkzs3vrGcA5J3H4pH3+CL9zr9ShkpM= -github.com/zitadel/saml v0.1.3/go.mod h1:MdkjyU3mwnTuh4lNnhPG+RyZL/VfzD72wUG/eWWBaXc= +github.com/zitadel/saml v0.2.0 h1:vv7r+Xz43eAPCb+fImMaospD+TWRZQDkb78AbSJRcL4= +github.com/zitadel/saml v0.2.0/go.mod h1:QqKcguOt7mMVI6tkEfpkyzwnYRdlmn3kYQj3VTPUw1g= github.com/zitadel/schema v1.3.0 h1:kQ9W9tvIwZICCKWcMvCEweXET1OcOyGEuFbHs4o5kg0= github.com/zitadel/schema v1.3.0/go.mod h1:NptN6mkBDFvERUCvZHlvWmmME+gmZ44xzwRXwhzsbtc= go.etcd.io/bbolt v1.3.3/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=