-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
feat(validation): accept response-level signature covering the assertion (want_assertions_signed=False)
enhancementNew feature or requestNew feature or requestStatus: Open.#52 In mozilla-ai/apron-saml;refactor(models): share + harden acs_url/sso_url authority validation (reject bad ports; domain message for malformed IPv6)
securitySecurity-critical: assertion validation / cryptoSecurity-critical: assertion validation / cryptoStatus: Open.#49 In mozilla-ai/apron-saml;docs: complete docstrings flagged by python-style (SamlConfig.__post_init__ Raises:)
documentationImprovements or additions to documentationImprovements or additions to documentationgood first issueGood for newcomersGood for newcomersStatus: Open.#36 In mozilla-ai/apron-saml;docs: security model + config guide (SP-initiated vs IdP-initiated tradeoffs; what onoma must enforce)
documentationImprovements or additions to documentationImprovements or additions to documentationsecuritySecurity-critical: assertion validation / cryptoSecurity-critical: assertion validation / cryptoStatus: Open.#30 In mozilla-ai/apron-saml;test(integration): optional live SP round-trip, gated by APRON_SAML_INTEGRATION_TESTS
enhancementNew feature or requestNew feature or requestStatus: Open.#29 In mozilla-ai/apron-saml;test: adversarial suite — all inputs must REJECT
securitySecurity-critical: assertion validation / cryptoSecurity-critical: assertion validation / cryptovalidationAssertion validation checksAssertion validation checksStatus: Open.#28 In mozilla-ai/apron-saml;test: golden-vector fixtures — locally-signed Responses (shapes modelled on Okta/Entra/Ping); assert successful validation
idp:entraMicrosoft Entra IdP relatedMicrosoft Entra IdP relatedidp:oktaOkta IdP relatedOkta IdP relatedidp:pingPing IdP relatedPing IdP relatedStatus: Open.#27 In mozilla-ai/apron-saml;feat(sp): assemble validated assertion → SamlIdentity
enhancementNew feature or requestNew feature or requestStatus: Open.#26 In mozilla-ai/apron-saml;feat(validation): encrypted-assertion decryption with SP key (optional, behind config)
securitySecurity-critical: assertion validation / cryptoSecurity-critical: assertion validation / cryptovalidationAssertion validation checksAssertion validation checksStatus: Open.#25 In mozilla-ai/apron-saml;feat(validation): replay prevention via AssertionStore protocol (+ MemoryAssertionStore reference)
securitySecurity-critical: assertion validation / cryptoSecurity-critical: assertion validation / cryptovalidationAssertion validation checksAssertion validation checksStatus: Open.#24 In mozilla-ai/apron-saml;- Status: Open.#9 In mozilla-ai/apron-saml;
- Status: Open.#8 In mozilla-ai/apron-saml;