mirror/misskey
1
0
Fork 1
mirror of https://github.com/misskey-dev/misskey.git synced 2025-01-14 01:21:04 +09:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(SSO): SAML認証のパラメータを修正

Browse Source
This commit is contained in:
まっちゃとーにゅ 2024-03-17 23:34:59 +09:00
parent beab1e09bb
commit fa4db2c420
No known key found for this signature in database
GPG Key ID: 6AFBBF529601C1DB
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/backend/src/server/sso/SAMLIdentifyProviderService.ts
View File

@ -81,7 +81,7 @@ export class SAMLIdentifyProviderService {
const nodes = { const nodes = {
'md:EntityDescriptor': { 'md:EntityDescriptor': {
'@xmlns:md': 'urn:oasis:names:tc:SAML:2.0:metadata', '@xmlns:md': 'urn:oasis:names:tc:SAML:2.0:metadata',
'@entityID': this.config.url, '@entityID': `${this.config.url}/sso/saml/${provider.id}/metadata`,
'@validUntil': tenYearsLater, '@validUntil': tenYearsLater,
'md:IDPSSODescriptor': { 'md:IDPSSODescriptor': {
'@WantAuthnRequestsSigned': provider.wantAuthnRequestsSigned, '@WantAuthnRequestsSigned': provider.wantAuthnRequestsSigned,
@ -460,7 +460,7 @@ export class SAMLIdentifyProviderService {
'@Destination': ssoServiceProvider.acsUrl, '@Destination': ssoServiceProvider.acsUrl,
'@InResponseTo': this.get(flowResult, 'extract.request.id', ''), '@InResponseTo': this.get(flowResult, 'extract.request.id', ''),
'saml:Issuer': { 'saml:Issuer': {
'#text': ssoServiceProvider.issuer, '#text': `${this.config.url}/sso/saml/${ssoServiceProvider.id}/metadata`,
}, },
'samlp:Status': { 'samlp:Status': {
'samlp:StatusCode': { 'samlp:StatusCode': {
@ -474,7 +474,7 @@ export class SAMLIdentifyProviderService {
'@Version': '2.0', '@Version': '2.0',
'@IssueInstant': now, '@IssueInstant': now,
'saml:Issuer': { 'saml:Issuer': {
'#text': ssoServiceProvider.issuer, '#text': `${this.config.url}/sso/saml/${ssoServiceProvider.id}/metadata`,
}, },
'saml:Subject': { 'saml:Subject': {
'saml:NameID': profile.emailVerified 'saml:NameID': profile.emailVerified