mirror of
https://github.com/casdoor/casdoor.git
synced 2025-09-07 11:00:28 +08:00
feat: use a more popular format for nameid to ensure compatibility in NewSamlResponse() (#4123)
This commit is contained in:
@@ -71,7 +71,11 @@ func NewSamlResponse(application *Application, user *User, host string, certific
|
||||
nameIDValue = user.Email
|
||||
}
|
||||
nameId := subject.CreateElement("saml:NameID")
|
||||
nameId.CreateAttr("Format", "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent")
|
||||
if application.UseEmailAsSamlNameId {
|
||||
nameId.CreateAttr("Format", "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress")
|
||||
} else {
|
||||
nameId.CreateAttr("Format", "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified")
|
||||
}
|
||||
nameId.SetText(nameIDValue)
|
||||
subjectConfirmation := subject.CreateElement("saml:SubjectConfirmation")
|
||||
subjectConfirmation.CreateAttr("Method", "urn:oasis:names:tc:SAML:2.0:cm:bearer")
|
||||
|
Reference in New Issue
Block a user