Merge pull request #50 from timlegge/issue-38

timlegge · web-flow · commit dd9776e51257 · 2021-11-25T21:45:36.000-04:00
Fixes for Issue 38
diff --git a/lib/Net/SAML2.pm b/lib/Net/SAML2.pm
@@ -1,6 +1,6 @@
-package Net::SAML2;
 use strict;
 use warnings;
+package Net::SAML2;
 
 require 5.008_001;
 
diff --git a/lib/Net/SAML2/Binding/POST.pm b/lib/Net/SAML2/Binding/POST.pm
@@ -1,7 +1,6 @@
-package Net::SAML2::Binding::POST;
-
 use strict;
 use warnings;
+package Net::SAML2::Binding::POST;
 
 use Moose;
 
diff --git a/lib/Net/SAML2/Binding/Redirect.pm b/lib/Net/SAML2/Binding/Redirect.pm
@@ -1,7 +1,6 @@
-package Net::SAML2::Binding::Redirect;
-
 use strict;
 use warnings;
+package Net::SAML2::Binding::Redirect;
 
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/Binding/SOAP.pm b/lib/Net/SAML2/Binding/SOAP.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Binding::SOAP;
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/IdP.pm b/lib/Net/SAML2/IdP.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::IdP;
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/Protocol/ArtifactResolve.pm b/lib/Net/SAML2/Protocol/ArtifactResolve.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Protocol::ArtifactResolve;
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/Protocol/Assertion.pm b/lib/Net/SAML2/Protocol/Assertion.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Protocol::Assertion;
 use Moose;
 use MooseX::Types::DateTime qw/ DateTime /;
diff --git a/lib/Net/SAML2/Protocol/AuthnRequest.pm b/lib/Net/SAML2/Protocol/AuthnRequest.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Protocol::AuthnRequest;
 
 use Moose;
diff --git a/lib/Net/SAML2/Protocol/LogoutRequest.pm b/lib/Net/SAML2/Protocol/LogoutRequest.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Protocol::LogoutRequest;
 use Moose;
 use MooseX::Types::Common::String qw/ NonEmptySimpleStr /;
diff --git a/lib/Net/SAML2/Protocol/LogoutResponse.pm b/lib/Net/SAML2/Protocol/LogoutResponse.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Protocol::LogoutResponse;
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/Role/ProtocolMessage.pm b/lib/Net/SAML2/Role/ProtocolMessage.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::Role::ProtocolMessage;
 
 use Moose::Role;
diff --git a/lib/Net/SAML2/SP.pm b/lib/Net/SAML2/SP.pm
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 package Net::SAML2::SP;
 use Moose;
 use MooseX::Types::URI qw/ Uri /;
diff --git a/lib/Net/SAML2/Util.pm b/lib/Net/SAML2/Util.pm
@@ -1,7 +1,6 @@
-package Net::SAML2::Util;
-
 use strict;
 use warnings;
+package Net::SAML2::Util;
 
 our $VERSION = '0.40';
 
diff --git a/lib/Net/SAML2/XML/Sig.pm b/lib/Net/SAML2/XML/Sig.pm
@@ -1,7 +1,6 @@
-package Net::SAML2::XML::Sig;
-
 use strict;
 use warnings;
+package Net::SAML2::XML::Sig;
 
 # ABSTRACT: Net::SAML2::XML::Sig - A toolkit to help sign and verify XML Digital Signatures
 
@@ -78,6 +77,7 @@ use XML::LibXML;
 use Net::SAML2::XML::Util qw/ no_comments /;
 use MIME::Base64;
 use Carp;
+use Encode;
 
 =head1 USAGE
 
@@ -344,7 +344,7 @@ sub sign {
         }
 
         # Calculate the digest of the XML being signed
-        my $bin_digest    = $self->{digest_method}->( $xml_canon );
+        my $bin_digest    = $self->{digest_method}->( Encode::encode_utf8( $xml_canon ) );
         my $digest        = encode_base64( $bin_digest, '' );
         print ("   Digest: $digest\n") if $DEBUG;
 
@@ -614,8 +614,10 @@ sub verify {
         # signatures to be validated if they exist
         $signed_xml->addChild( $signature_node );
 
+        print ( "    Canonical XML:  " . $canonical ."\n") if $DEBUG;
+
         # Obtain the DigestValue of the Canonical XML
-        my $digest = $self->{digest_method}->($canonical);
+        my $digest = $self->{digest_method}->( Encode::encode_utf8( $canonical ) );
 
         print ( "    Reference Digest:  " . _trim($refdigest) ."\n") if $DEBUG;
 
diff --git a/lib/Net/SAML2/XML/Util.pm b/lib/Net/SAML2/XML/Util.pm
@@ -1,7 +1,6 @@
-package Net::SAML2::XML::Util;
-
 use strict;
 use warnings;
+package Net::SAML2::XML::Util;
 
 use XML::LibXML;
 
diff --git a/t/00-basic.t b/t/00-basic.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::More;
 
 use_ok('Net::SAML2');
diff --git a/t/01-create-idp.t b/t/01-create-idp.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 use Net::SAML2::IdP;
diff --git a/t/02-create-sp.t b/t/02-create-sp.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/03-assertions.t b/t/03-assertions.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/04-response.t b/t/04-response.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/05-soap-binding.t b/t/05-soap-binding.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/06-redirect-binding.t b/t/06-redirect-binding.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/07-logout-request.t b/t/07-logout-request.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/08-logout-response.t b/t/08-logout-response.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/09-authn-request.t b/t/09-authn-request.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/10-artifact-resolve.t b/t/10-artifact-resolve.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 
diff --git a/t/11-more-metadata.t b/t/11-more-metadata.t
@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::Lib;
 use Test::Net::SAML2;
 use Net::SAML2::IdP;
diff --git a/t/13-verify-issues.t b/t/13-verify-issues.t
@@ -0,0 +1,32 @@
+# -*- perl -*-
+
+use strict;
+use warnings;
+
+use Test::More;
+use Test::Exception;
+use MIME::Base64;
+
+BEGIN {
+    use_ok( 'Net::SAML2::XML::Sig' );
+}
+
+my %issues = (
+    "Issue 49 - Wide Characters" => "49",
+);
+
+for my $issue (keys %issues) {
+    my $filename = "t/issues/issue-$issues{$issue}.xml";
+    open my $file, $filename or die "$filename not found!";
+    my $xml;
+    {
+        local undef $/;
+        $xml = <$file>;
+    }
+    my $sig = Net::SAML2::XML::Sig->new({ x509 => 1 });
+    my $ret = $sig->verify($xml);
+    ok($ret, "Successfully Verified " . $issue);
+    ok($sig->signer_cert);
+}
+
+done_testing;
diff --git a/t/issues/issue-49.xml b/t/issues/issue-49.xml
@@ -0,0 +1,156 @@
+<?xml version="1.0" encoding="utf-8"?>
+<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" ID="_dc503975-dcc8-4b3a-ae2e-0c6642f9e1e8" Version="2.0" IssueInstant="2021-11-25T14:17:26.184Z" Destination="http://localhost:3000/consumer-post" InResponseTo="NETSAML2_6c11b211b1857bd1f3833ad50392fe1c">
+  <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://sts.windows.net/someguid</Issuer>
+  <samlp:Status>
+    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
+  </samlp:Status>
+  <Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" ID="_some_guid" IssueInstant="2021-11-25T14:17:26.168Z" Version="2.0">
+    <Issuer>https://sts.windows.net/some_guid/</Issuer>
+    <Subject>
+      <NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">myuser@netsaml2</NameID>
+      <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
+        <SubjectConfirmationData InResponseTo="NETSAML2_6c11b211b1857bd1f3833ad50392fe1c" NotOnOrAfter="2021-11-25T15:17:26.059Z" Recipient="http://localhost:3000/consumer-post"/>
+      </SubjectConfirmation>
+    </Subject>
+    <Conditions NotBefore="2021-11-25T14:12:26.059Z" NotOnOrAfter="2021-11-25T15:17:26.059Z">
+      <AudienceRestriction>
+        <Audience>http://localhost:3000</Audience>
+      </AudienceRestriction>
+    </Conditions>
+    <AttributeStatement>
+      <Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
+        <AttributeValue>some_guid</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.microsoft.com/identity/claims/objectidentifier">
+        <AttributeValue>some_guid</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.microsoft.com/identity/claims/displayname">
+        <AttributeValue>パスワードをお忘れの方</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.microsoft.com/identity/claims/identityprovider">
+        <AttributeValue>https://sts.windows.net/some_guid/</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.microsoft.com/claims/authnmethodsreferences">
+        <AttributeValue>http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
+        <AttributeValue>Net</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
+        <AttributeValue>SAML2</AttributeValue>
+      </Attribute>
+      <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
+        <AttributeValue>myuser@netsaml2</AttributeValue>
+      </Attribute>
+    </AttributeStatement>
+    <AuthnStatement AuthnInstant="2021-11-25T08:29:25.523Z" SessionIndex="_someguid">
+      <AuthnContext>
+        <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>
+      </AuthnContext>
+    </AuthnStatement>
+  <dsig:Signature>
+            <dsig:SignedInfo xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
+                <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+                <dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+                <dsig:Reference URI="#_some_guid">
+                        <dsig:Transforms>
+                            <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+                            <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+                        </dsig:Transforms>
+                        <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+                        <dsig:DigestValue>E400yOK9ce0mM6X862B0BCImA6E=</dsig:DigestValue>
+                    </dsig:Reference>
+            </dsig:SignedInfo>
+            <dsig:SignatureValue>K/NGRTKfRn8aOUKlRcJL5mzsL2kqRLsuOihCQuqZiS/6OxU2pVFllP31y9AF+DO7NpNC/kutCsFD
+GjdrT7LQqNK4lcrJYA3gYdxjmhU8BqEztb+KVQ5PAQY/LvC5v8WQBYBJXo5gpHwnRBgW2C/KCYcg
+0dT27e4fkuxfLzrsLjNYAl7zvPUwb59iOa/B1TnHk54HbfBmIlfZLdRqdBkkopKD97zhhBswkFwQ
+8AjmNvHneUpSMLAE70SMcBT3P9ryI3aIIGCVqmU+72Jp8Tdx7Aa65ZaPgGWtlR69PEL0HqKfkZfk
+/4toAb6fx0TjxfdzWqmQJgm9hZsph7rh5SR0uw==
+</dsig:SignatureValue>
+            <dsig:KeyInfo><dsig:X509Data><dsig:X509Certificate>
+MIIFuDCCA6CgAwIBAgICEAMwDQYJKoZIhvcNAQELBQAwezELMAkGA1UEBhMCQ0Ex
+FjAUBgNVBAgMDU5ldyBCcnVuc3dpY2sxHTAbBgNVBAoMFENyeXB0LU9wZW5TU0wt
+VmVyaWZ5MTUwMwYDVQQDDCxDcnlwdC1PcGVuU1NMLVZlcmlmeSBTSEEtMjU2IElu
+dGVybWVkaWF0ZSBDQTAeFw0yMTA3MDMyMTAyMjRaFw0zMTA3MDEyMTAyMjRaMGcx
+CzAJBgNVBAYTAkNBMRYwFAYDVQQIDA1OZXcgQnJ1bnN3aWNrMRAwDgYDVQQHDAdN
+b25jdG9uMRAwDgYDVQQKDAdYTUwtU2lnMRwwGgYDVQQDDBN4bWwtc2lnLmV4YW1w
+bGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkqxhCTOB2Xx
+FxCNWJt0bLWRQva6qOAPKiqlLfgJjG+YY2JaPtpO7WNV5oVqv9F21V/wgOkcQTZZ
+QQQl/L/eXlnFpJeSpF31dupLnzrBU29qWjedNCkj+y01sprJG+c++2d2jV8Qccp5
+5SklALtXYZ3K5OfILy4dFEqUyW0/Bk7Y/PdrAacAazumdNW2nw/ajbiXbUfm55Qe
+bQd/61emGettQBT9EUPOxMQrrtxHHxwyvrtsa9KyRPCamYEamOA0Al2Eya5dPWzE
+bndbVpRx1jz8Ec6ANk8wJHTkggJOUXWem7HL4x8v9hEQeaHEy5CwxKzodDpV2bA/
+Adr+NCYhsQIDAQABo4IBWDCCAVQwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMC
+BkAwMwYJYIZIAYb4QgENBCYWJE9wZW5TU0wgR2VuZXJhdGVkIFNlcnZlciBDZXJ0
+aWZpY2F0ZTAdBgNVHQ4EFgQUDYY0sUvDD+ttN7MKzQzVgg25D94wgboGA1UdIwSB
+sjCBr4AUzVMiKnV2P0l/W5nowtx2oIRM0S2hgZKkgY8wgYwxCzAJBgNVBAYTAkNB
+MRYwFAYDVQQIDA1OZXcgQnJ1bnN3aWNrMRAwDgYDVQQHDAdNb25jdG9uMR0wGwYD
+VQQKDBRDcnlwdC1PcGVuU1NMLVZlcmlmeTE0MDIGA1UEAwwrQ3J5cHQtT3BlblNT
+TC1WZXJpZnkgU0hBLTI1NiBSb290IEF1dGhvcml0eYICEAAwDgYDVR0PAQH/BAQD
+AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQAlDY7m
+1wwRB/X8NSeQ/Hvxg9dG4OofLFaC4e7dlC5kOT/ZIHQ6NIdzkQ2yOY1piKKYEYuO
+G/adtWAt8zRoejFob8W5aCA36uNoQLvdaMwXYNsJkzDNEmCB6vf3A28bVI+mlnt1
++h3f0bkwxwHP2qYL8RneCL65GG+SWXHIipS/ZA5225mmT1oLo9xKeGK6vBgsOUum
+vxDgzmYyeGZYKpACWbOI7lR3C6PMR0oLKManLdb+ymngIk0bKB+Y2gr5cq/zURv8
+casiikjZT3MycPRV1AfQ3MYuXg6z4izkcG1U98E9Hr5p1gFsITmaY0aeK01a6xhx
+XkWKFTbraDn5ouTVMutW8xaVPU60zpYOcynxtRdgnYdmRR+c9dcD2xQmjtohuLxq
+RASCBC9iO7qTYkQvNW+yb63xbPDG05nokAfXpbp5hYVU8FYZHi8qOPtiaWiN9wbt
+ijsxDKZEcfiSGH5AEnkoaRCEqvbSNdtlbfYeDEnonsOZi9c+Kdl6A4PvOzTexwmi
+KPVgT8evWpQbubENw66vUOTqgkI+Bhbn87e1VELNUy+Uwz2OOcLEVvNkx0owswrH
+ujwb1+y1SYnlalLUt7PzEW85RNqVewGsHE8SD/1s70eYNYp7YJwLGPKJfyr3LvSl
+0qRfrYNhlewPc1MSVx7IFCZ4Qg+GFhg8TnEELQ==
+</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo>
+        </dsig:Signature></Assertion>
+<dsig:Signature>
+            <dsig:SignedInfo xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
+                <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+                <dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+                <dsig:Reference URI="#_dc503975-dcc8-4b3a-ae2e-0c6642f9e1e8">
+                        <dsig:Transforms>
+                            <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+                            <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+                        </dsig:Transforms>
+                        <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+                        <dsig:DigestValue>hkVXxlRVP4FeVnxBFgE0EX9pnsE=</dsig:DigestValue>
+                    </dsig:Reference>
+            </dsig:SignedInfo>
+            <dsig:SignatureValue>f1Q6uq4fvvcgLVt0rIdrqpAsRYEFcksLY0Mbo/fVlZVgB9ucXTviceXhkhQgMWmg188Zy4NHbClc
+Qryr/Dj0U4fzR/VYDvDy1jsczCMm1uPa2D2BeikmLEGugBE/qiG9ftH/K3gnYgznVBt26gEqUeYr
+m4+c8dlpxsaXnSw3EUY8aZTU+tl1JvjhAnI53rHII1WoUSBZwt7RpY9uXQed0aGA0OJreLzoQa2k
+Rs6z74ois2MKMicKCqW5/eokwfEyccqXW8uFYQ+EkuqZVNxOL0tmu4MrpSQVZ2NC/osBtCWMK7oc
+nlqaMqytPkTO4rcweMGGmybtqiwiL3y3GLYbWg==
+</dsig:SignatureValue>
+            <dsig:KeyInfo><dsig:X509Data><dsig:X509Certificate>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+</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo>
+        </dsig:Signature></samlp:Response>
diff --git a/xt/testapp/config.yml b/xt/testapp/config.yml

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,5 @@`
	`1`	`+use strict;`
	`2`	`+use warnings;`
`1`	`3`	`package Net::SAML2::Binding::SOAP;`
`2`	`4`	`use Moose;`
`3`	`5`	`use MooseX::Types::URI qw/ Uri /;`