Merge pull request #120 from samuelcampos/master

pitbulk · web-flow · commit 667c7d882277 · 2017-09-01T19:29:42.000+02:00
Check the correct setting before signing Logout responses
diff --git a/toolkit/src/main/java/com/onelogin/saml2/Auth.java b/toolkit/src/main/java/com/onelogin/saml2/Auth.java
@@ -626,7 +626,7 @@ public void processSLO(Boolean keepLocalSession, String requestId) throws Except
 					parameters.put("RelayState", relayState);
 				}
 
-				if (settings.getLogoutRequestSigned()) {
+				if (settings.getLogoutResponseSigned()) {
 					String sigAlg = settings.getSignatureAlgorithm();
 					String signature = this.buildResponseSignature(samlLogoutResponse, relayState, sigAlg);
 

Original file line number	Diff line number	Diff line change
`@@ -626,7 +626,7 @@ public void processSLO(Boolean keepLocalSession, String requestId) throws Except`
`626`	`626`	`parameters.put("RelayState", relayState);`
`627`	`627`	`}`
`628`	`628`
`629`		`- if (settings.getLogoutRequestSigned()) {`
	`629`	`+ if (settings.getLogoutResponseSigned()) {`
`630`	`630`	`String sigAlg = settings.getSignatureAlgorithm();`
`631`	`631`	`String signature = this.buildResponseSignature(samlLogoutResponse, relayState, sigAlg);`
`632`	`632`