Enum ResponseSignaturePolicy 

pub enum ResponseSignaturePolicy {
    AllowUnsignedEncryptedCbc,
    RequireForEncryptedCbc,
    RequireSigned,
}

Whether an accepting service provider requires a signature on the <Response>.

Self::RequireForEncryptedCbc follows the recommendation for a CBC-encrypted assertion. Self::AllowUnsignedEncryptedCbc relaxes that recommendation alone and is not the legacy permissive preset. Self::RequireSigned requires a signature on every response and is library hardening. The accept combination is classified in docs/conformance/web-browser-sso-acceptance.md.

Variants

AllowUnsignedEncryptedCbc

Accept a CBC EncryptedAssertion without a Response signature.

RequireForEncryptedCbc

Require a signed Response when an <EncryptedAssertion> uses CBC.

Plaintext responses are unchanged.

RequireSigned

Require a Response signature on every response.

Library hardening. Also rejects a response signed only on the Assertion.

Trait Implementations

impl Clone for ResponseSignaturePolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ResponseSignaturePolicy

impl Debug for ResponseSignaturePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ResponseSignaturePolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for ResponseSignaturePolicy

impl PartialEq for ResponseSignaturePolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ResponseSignaturePolicy