pub struct SpValidationPolicy {
pub assertions: AssertionSignaturePolicy,
pub responses: ResponseSignaturePolicy,
pub xml_signatures: XmlSignatureProfile,
pub authn_requests: AuthnRequestSigningPolicy,
pub audience: AudienceValidationPolicy,
pub name_id_creation: NameIdCreationPolicy,
pub logout: LogoutPolicy,
}Expand description
SP-side validation and outbound signing policy.
Self::recommended is the preset for claimed Web Browser SSO and Single
Logout features. Self::compatibility is the legacy permissive preset.
strict() is deprecated and keeps its current bundle. Field classification
is in docs/conformance/.
Fields§
§assertions: AssertionSignaturePolicyAssertion signature requirement.
responses: ResponseSignaturePolicyTop-level SAML Response signature requirement.
xml_signatures: XmlSignatureProfileEmbedded XML-signature algorithm and reference requirements.
authn_requests: AuthnRequestSigningPolicyOutbound AuthnRequest signing behavior.
audience: AudienceValidationPolicyAudience validation behavior.
name_id_creation: NameIdCreationPolicyNameID creation behavior for AuthnRequests.
logout: LogoutPolicyLogout signature validation behavior.
Implementations§
Source§impl SpValidationPolicy
impl SpValidationPolicy
Sourcepub fn recommended() -> SpValidationPolicy
pub fn recommended() -> SpValidationPolicy
Validation preset for claimed Web Browser SSO and Single Logout features.
Recommendations start enabled. Optional capabilities and library hardening stay off until a caller replaces one field.
§Examples
use saml_rs::{AssertionSignaturePolicy, SpValidationPolicy, XmlSignatureProfile};
let with_assertion_signature = SpValidationPolicy {
assertions: AssertionSignaturePolicy::RequireSigned,
..SpValidationPolicy::recommended()
};
assert_eq!(
with_assertion_signature.xml_signatures,
XmlSignatureProfile::AllowProviderSupportedForCompatibility
);Sourcepub fn strict() -> SpValidationPolicy
👎Deprecated: removed in the following release; start from recommended() and add only the named hardenings you want
pub fn strict() -> SpValidationPolicy
removed in the following release; start from recommended() and add only the named hardenings you want
Deprecated bundle of SP validation choices.
Removed in the following release. Start from Self::recommended and
add only the named hardenings you want. The returned fields are
unchanged from earlier releases.
Sourcepub fn compatibility() -> SpValidationPolicy
pub fn compatibility() -> SpValidationPolicy
Legacy permissive preset: samlify-port behavior for a caller leaving the raw API.
Trait Implementations§
Source§impl Clone for SpValidationPolicy
impl Clone for SpValidationPolicy
Source§fn clone(&self) -> SpValidationPolicy
fn clone(&self) -> SpValidationPolicy
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more