testapp: Don't show POST button for login if IdP does not support

Author: timlegge

xt/testapp/lib/Saml2Test.pm

@@ -100,6 +100,10 @@ sub get_sso_post_url {
     load_config($idp_name);
     my $idp = _idp();
 
+    if ( ! defined $idp->sso_url('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST') ) {
+        return "NotSupported";
+    }
+
     return $idp->sso_url('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST');
 }
 
@@ -108,6 +112,9 @@ sub get_login_post {
 
     load_config($idp_name);
     my $idp = _idp();
+    if ( ! defined $idp->sso_url('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST') ) {
+        return "NotSupported";
+    }
     my $sp  = _sp();
 
     my %params = (
@@ -137,6 +144,9 @@ sub get_logout_post {
 
     load_config($idp_name);
     my $idp = _idp();
+    if ( ! defined $idp->sso_url('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST') ) {
+        return "NotSupported";
+    }
     my $sp  = _sp();
 
     my %logout_params = (

xt/testapp/views/index.tt

@@ -4,12 +4,13 @@
         <% FOREACH provider IN idps %>
             <tr>
                 <td><b><a href ="/login?idp=<% provider.idp %>"><% provider.idp %></a></b></td>
-                <td><form action="<% get_sso_post_url(provider.idp) %>" method="POST">
+                <td><% if get_sso_post_url(provider.idp) != 'NotSupported' %>
+                    <form action="<% get_sso_post_url(provider.idp) %>" method="POST">
                         <input type="hidden" name="SAMLRequest" value="<% get_login_post(provider.idp) %>">
                         <input type="hidden" name="RelayState" value="<% provider.idp %>">
                         <input type="submit" value="POST">
                     </form>
-                </td>
+                <% end %></td>
             <% if provider.metadata == 'missing' %>metadata missing <% end %>
             <% if provider.cacert == 'missing' %>cacert missing<% end %>
             </tr>