-
Notifications
You must be signed in to change notification settings - Fork 13k
feat: select algorithm to use for signing SAML requests and responses #36037
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Looks like this PR is ready to merge! 🎉 |
🦋 Changeset detectedLatest commit: 6667c47 The changes in this PR will be included in the next version bump. This PR includes changesets to release 37 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## develop #36037 +/- ##
===========================================
+ Coverage 64.52% 64.54% +0.01%
===========================================
Files 3128 3129 +1
Lines 98325 98332 +7
Branches 18648 18653 +5
===========================================
+ Hits 63448 63466 +18
+ Misses 32055 32045 -10
+ Partials 2822 2821 -1
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
|
@pierre-lehnen-rc updating the branch to get the commit that fixes the flaky test |
MarcosSpessatto
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please add a description to the PR.
Proposed changes (including videos or screenshots)
Previously our SAML implementation could only sign requests using the SHA1 algorithm. This PR adds a new setting to choose between SHA1, SHA256, SHA384 and SHA512.
This setting only affects the signing of documents sent from Rocket.Chat to the IdP. It doesn't affect encryption nor the signatures of documents received from the IdP.
Issue(s)
CORE-1148
Steps to test or reproduce
Further comments