From e018cc5f8cf0e433d3ca39661fbd01d20d8e5fbed21a02e943729eaedc9ef8ed Mon Sep 17 00:00:00 2001 From: Matej Cepl Date: Thu, 8 Jul 2021 15:27:30 +0000 Subject: [PATCH] - Update to 1.10.1: - Fix bug on LogoutRequest class, get_idp_slo_response_url was used instead get_idp_slo_url - Added custom lxml parser based on the one defined at xmldefused. Parser will ignore comments and processing instructions and by default have deactivated huge_tree, DTD and access to external documents - Destination URL Comparison is now case-insensitive for netloc - Support single-label-domains as valid. New security parameter allowSingleLabelDomains - Added get_idp_sso_url, get_idp_slo_url and get_idp_slo_response_url methods to the Settings class and use it in the toolkit - #212 Overridability enhancements. Made classes overridable by subclassing. Use of classmethods instead staticmethods - Add get_friendlyname_attributes support - Remove external lib method get_ext_lib_path. Add set_cert_path in order to allow set the cert path in a different folder than the toolkit - Add sha256 instead sha1 algorithm for sign/digest as recommended value on documentation and settings - #178 Support for adding idp.crt from filesystem - Add samlUserdata to demo-flask session - Fix autoreloading in demo-tornado OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python3-saml?expand=0&rev=8 --- bug-testDecryptElement.patch | 13 ------------- python-python3-saml.changes | 28 ++++++++++++++++++++++++++++ python-python3-saml.spec | 18 ++++++++++-------- python3-saml-1.10.1.tar.gz | 3 +++ python3-saml-1.9.0.tar.gz | 3 --- 5 files changed, 41 insertions(+), 24 deletions(-) delete mode 100644 bug-testDecryptElement.patch create mode 100644 python3-saml-1.10.1.tar.gz delete mode 100644 python3-saml-1.9.0.tar.gz diff --git a/bug-testDecryptElement.patch b/bug-testDecryptElement.patch deleted file mode 100644 index 4b87da2..0000000 --- a/bug-testDecryptElement.patch +++ /dev/null @@ -1,13 +0,0 @@ -Index: python3-saml-1.6.0/tests/src/OneLogin/saml2_tests/utils_test.py -=================================================================== ---- python3-saml-1.6.0.orig/tests/src/OneLogin/saml2_tests/utils_test.py -+++ python3-saml-1.6.0/tests/src/OneLogin/saml2_tests/utils_test.py -@@ -625,7 +625,7 @@ class OneLogin_Saml2_Utils_Test(unittest - encrypted_nameid_nodes = dom_nameid_enc.find('.//saml:EncryptedID', namespaces=OneLogin_Saml2_Constants.NSMAP) - encrypted_data = encrypted_nameid_nodes[0] - decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key) -- self.assertEqual('saml:NameID', decrypted_nameid.tag) -+ self.assertEqual('NameID', decrypted_nameid.tag) - self.assertEqual('2de11defd199f8d5bb63f9b7deb265ba5c675c10', decrypted_nameid.text) - - xml_assertion_enc = b64decode(self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion_encrypted_nameid.xml.base64'))) diff --git a/python-python3-saml.changes b/python-python3-saml.changes index bfbea57..d605f5f 100644 --- a/python-python3-saml.changes +++ b/python-python3-saml.changes @@ -1,3 +1,31 @@ +------------------------------------------------------------------- +Thu Jul 8 09:57:53 UTC 2021 - Matej Cepl + +- Update to 1.10.1: + - Fix bug on LogoutRequest class, get_idp_slo_response_url was + used instead get_idp_slo_url + - Added custom lxml parser based on the one defined at + xmldefused. Parser will ignore comments and processing + instructions and by default have deactivated huge_tree, DTD + and access to external documents + - Destination URL Comparison is now case-insensitive for netloc + - Support single-label-domains as valid. New security parameter + allowSingleLabelDomains + - Added get_idp_sso_url, get_idp_slo_url and + get_idp_slo_response_url methods to the Settings class and + use it in the toolkit + - #212 Overridability enhancements. Made classes overridable by + subclassing. Use of classmethods instead staticmethods + - Add get_friendlyname_attributes support + - Remove external lib method get_ext_lib_path. Add + set_cert_path in order to allow set the cert path in a + different folder than the toolkit + - Add sha256 instead sha1 algorithm for sign/digest as + recommended value on documentation and settings + - #178 Support for adding idp.crt from filesystem + - Add samlUserdata to demo-flask session + - Fix autoreloading in demo-tornado + ------------------------------------------------------------------- Fri Mar 20 10:36:31 UTC 2020 - pgajdos@suse.com diff --git a/python-python3-saml.spec b/python-python3-saml.spec index d363e42..f968568 100644 --- a/python-python3-saml.spec +++ b/python-python3-saml.spec @@ -1,7 +1,7 @@ # # spec file for package python-python3-saml # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,19 +18,20 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-python3-saml -Version: 1.9.0 +Version: 1.10.1 Release: 0 Summary: Python SAML support License: MIT Group: Development/Languages/Python URL: https://github.com/onelogin/python3-saml Source: https://github.com/onelogin/python3-saml/archive/v%{version}.tar.gz#/python3-saml-%{version}.tar.gz -Patch0: bug-testDecryptElement.patch BuildRequires: %{python_module defusedxml >= 0.5.0} BuildRequires: %{python_module freezegun >= 0.3.11} BuildRequires: %{python_module isodate >= 0.5.0} +BuildRequires: %{python_module lxml >= 3.3.5} +BuildRequires: %{python_module pytest} BuildRequires: %{python_module setuptools} -BuildRequires: %{python_module xmlsec >= 0.6.0} +BuildRequires: %{python_module xmlsec >= 1.0.5} BuildRequires: fdupes BuildRequires: libxmlsec1-openssl1 BuildRequires: python-rpm-macros @@ -39,7 +40,7 @@ BuildRequires: python-rpm-macros Requires: libxmlsec1-openssl1 Requires: python-defusedxml >= 0.5.0 Requires: python-isodate >= 0.5.0 -Requires: python-xmlsec >= 0.6.0 +Requires: python-xmlsec >= 1.0.5 BuildArch: noarch %python_subpackages @@ -50,8 +51,8 @@ SAML is an XML-based standard for web browser single sign-on and is defined by the OASIS Security Services Technical Committee. %prep -%setup -q -n python3-saml-%{version} -%patch0 -p1 +%autosetup -p1 -n python3-saml-%{version} + sed -i 's/==/>=/;/dependency_links/d' setup.py %build @@ -62,7 +63,8 @@ sed -i 's/==/>=/;/dependency_links/d' setup.py %python_expand %fdupes %{buildroot}%{$python_sitelib}/onelogin %check -%python_exec setup.py test +# gh#onelogin/python3-saml#271 +%pytest -k 'not (testIsInValidAudience or testIsInValidEncAttrs or testIsInValidIssuer or testIsInValidSessionIndex or testIsInValidSubjectConfirmation)' %files %{python_files} %license LICENSE diff --git a/python3-saml-1.10.1.tar.gz b/python3-saml-1.10.1.tar.gz new file mode 100644 index 0000000..0119158 --- /dev/null +++ b/python3-saml-1.10.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2485cf4494230e9e3fede28fe99b588bf12bc6b74bcebe3e171db5436e421fd3 +size 503178 diff --git a/python3-saml-1.9.0.tar.gz b/python3-saml-1.9.0.tar.gz deleted file mode 100644 index 26257e2..0000000 --- a/python3-saml-1.9.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:00809abf11c72787a5f74ce34860e02b6e53a34609cba4e4a54b1f69b931f3ce -size 497106