opensaml 0.1.1

SAML 2.0 Service Provider library (bergshamra for XML crypto).
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

//! `bergshamra`-backed XML security (feature `crypto-bergshamra`).

use crate::crypto::backend::XmlSecurityBackend;
use crate::error::OpenSamlError;

/// [`XmlSecurityBackend`] implementation backed by the `bergshamra` crate.
///
/// Verifies enveloped XML-DSig signatures against a metadata certificate using
/// `trusted_keys_only` + `strict_verification` (see [`crate::crypto::verify`]).
#[derive(Debug, Default)]
#[non_exhaustive]
pub struct BergshamraBackend;

impl XmlSecurityBackend for BergshamraBackend {
    fn verify_signature(&self, xml: &str, cert_pem: &str) -> Result<(), OpenSamlError> {
        match crate::crypto::verify::verify_signature(xml, &[cert_pem.to_string()])? {
            (true, _) => Ok(()),
            (false, _) => Err(OpenSamlError::FailedToVerifySignature),
        }
    }
}