Skip to content

Server SAML Auth. Logout support. #5417

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zibet27 wants to merge 5 commits into
base: zibet27/server-auth-saml-flow
Choose a base branch
from
Open

Server SAML Auth. Logout support. #5417

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
a01fcab
Server SAML Auth. Logout support.
zibet27 Mar 2, 2026
c57c368
always expect InResposeTo
zibet27 Mar 6, 2026
173e270
Merge branch 'zibet27/server-auth-saml-flow' into zibet27/server-auth…
zibet27 Mar 10, 2026
bb585b8
add test cerificate for idp metadata
zibet27 Mar 10, 2026
28ae100
improve RelayStateValidator
zibet27 Mar 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
186 changes: 93 additions & 93 deletions gradlew.bat
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

38 changes: 36 additions & 2 deletions ktor-server/ktor-server-plugins/ktor-server-auth-saml/api/ktor-server-auth-saml.api
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,36 @@ public final class io/ktor/server/auth/saml/NameIdFormat$Companion {
public final fun getUnspecified-yVcJgns ()Ljava/lang/String;
}

public abstract interface class io/ktor/server/auth/saml/RelayStateValidator {
public static final field Companion Lio/ktor/server/auth/saml/RelayStateValidator$Companion;
public abstract fun validate (Ljava/lang/String;)Z
}

public final class io/ktor/server/auth/saml/RelayStateValidator$AllowList : io/ktor/server/auth/saml/RelayStateValidator {
public fun <init> (Ljava/util/List;)V
public fun <init> ([Ljava/lang/String;)V
public fun validate (Ljava/lang/String;)Z
}

public final class io/ktor/server/auth/saml/RelayStateValidator$Companion {
public final fun containsDangerousPatterns (Ljava/lang/String;)Z
public final fun isAbsoluteUrlSafe (Ljava/lang/String;)Z
public final fun normalizeRelativePath (Ljava/lang/String;)Ljava/lang/String;
}

public final class io/ktor/server/auth/saml/RelayStateValidator$Custom : io/ktor/server/auth/saml/RelayStateValidator {
public fun <init> (Lkotlin/jvm/functions/Function1;)V
public fun validate (Ljava/lang/String;)Z
}

public final class io/ktor/server/auth/saml/RelayStateValidator$Default : io/ktor/server/auth/saml/RelayStateValidator {
public static final field INSTANCE Lio/ktor/server/auth/saml/RelayStateValidator$Default;
public fun equals (Ljava/lang/Object;)Z
public fun hashCode ()I
public fun toString ()Ljava/lang/String;
public fun validate (Ljava/lang/String;)Z
}

public final class io/ktor/server/auth/saml/SamlAlgorithms {
public static final field INSTANCE Lio/ktor/server/auth/saml/SamlAlgorithms;
public final fun getRECOMMENDED_DIGEST_ALGORITHMS ()Ljava/util/Set;
Expand All @@ -81,6 +111,10 @@ public final class io/ktor/server/auth/saml/SamlAuthKt {
public static final fun saml (Lio/ktor/server/auth/AuthenticationConfig;Ljava/lang/String;Lkotlin/jvm/functions/Function1;)V
public static synthetic fun saml$default (Lio/ktor/server/auth/AuthenticationConfig;Ljava/lang/String;Ljava/lang/String;Lkotlin/jvm/functions/Function1;ILjava/lang/Object;)V
public static synthetic fun saml$default (Lio/ktor/server/auth/AuthenticationConfig;Ljava/lang/String;Lkotlin/jvm/functions/Function1;ILjava/lang/Object;)V
public static final fun samlLogout (Lio/ktor/server/application/ApplicationCall;Lio/ktor/server/auth/saml/SamlPrincipal;Lio/ktor/server/auth/saml/SamlSpMetadata;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SignatureAlgorithm;)Lio/ktor/server/auth/saml/SamlRedirectResult;
public static final fun samlLogout (Lio/ktor/server/application/ApplicationCall;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SamlSpMetadata;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SignatureAlgorithm;)Lio/ktor/server/auth/saml/SamlRedirectResult;
public static synthetic fun samlLogout$default (Lio/ktor/server/application/ApplicationCall;Lio/ktor/server/auth/saml/SamlPrincipal;Lio/ktor/server/auth/saml/SamlSpMetadata;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SignatureAlgorithm;ILjava/lang/Object;)Lio/ktor/server/auth/saml/SamlRedirectResult;
public static synthetic fun samlLogout$default (Lio/ktor/server/application/ApplicationCall;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SamlSpMetadata;Ljava/lang/String;Ljava/lang/String;Lio/ktor/server/auth/saml/SignatureAlgorithm;ILjava/lang/Object;)Lio/ktor/server/auth/saml/SamlRedirectResult;
}

public final class io/ktor/server/auth/saml/SamlAuthenticationProvider : io/ktor/server/auth/AuthenticationProvider {
Expand Down Expand Up @@ -127,7 +161,6 @@ public final class io/ktor/server/auth/saml/SamlConfig : io/ktor/server/auth/Aut
public final fun challenge (Lkotlin/jvm/functions/Function3;)V
public final fun getAllowIdpInitiatedSso ()Z
public final fun getAllowedDigestAlgorithms ()Ljava/util/Set;
public final fun getAllowedRelayStateUrls ()Ljava/util/List;
public final fun getAllowedSignatureAlgorithms ()Ljava/util/Set;
public final fun getAuthnRequestBinding ()Lio/ktor/server/auth/saml/SamlBinding;
public final fun getClockSkew-UwyO8pc ()J
Expand All @@ -136,6 +169,7 @@ public final class io/ktor/server/auth/saml/SamlConfig : io/ktor/server/auth/Aut
public final fun getForceAuthn ()Z
public final fun getIdp ()Lio/ktor/server/auth/saml/IdPMetadata;
public final fun getNameIdFormat-W8VwlJw ()Ljava/lang/String;
public final fun getRelayStateValidator ()Lio/ktor/server/auth/saml/RelayStateValidator;
public final fun getRequestedAuthnContext-4ml6bek ()Ljava/lang/String;
public final fun getRequireDestination ()Z
public final fun getRequireSignedLogoutRequest ()Z
Expand All @@ -145,7 +179,6 @@ public final class io/ktor/server/auth/saml/SamlConfig : io/ktor/server/auth/Aut
public final fun replayCache (Lio/ktor/server/auth/saml/SamlReplayCache;)V
public final fun setAllowIdpInitiatedSso (Z)V
public final fun setAllowedDigestAlgorithms (Ljava/util/Set;)V
public final fun setAllowedRelayStateUrls (Ljava/util/List;)V
public final fun setAllowedSignatureAlgorithms (Ljava/util/Set;)V
public final fun setAuthnRequestBinding (Lio/ktor/server/auth/saml/SamlBinding;)V
public final fun setClockSkew-LRDsOJo (J)V
Expand All @@ -154,6 +187,7 @@ public final class io/ktor/server/auth/saml/SamlConfig : io/ktor/server/auth/Aut
public final fun setForceAuthn (Z)V
public final fun setIdp (Lio/ktor/server/auth/saml/IdPMetadata;)V
public final fun setNameIdFormat-eInvKLk (Ljava/lang/String;)V
public final fun setRelayStateValidator (Lio/ktor/server/auth/saml/RelayStateValidator;)V
public final fun setRequestedAuthnContext-Br-yMbY (Ljava/lang/String;)V
public final fun setRequireDestination (Z)V
public final fun setRequireSignedLogoutRequest (Z)V
Expand Down
Loading
Loading