Skip to content

relax client side entity descriptor validation#36602

Merged
flyinghermit merged 5 commits intomasterfrom
sshah/update-client-side-acs-filter
Jan 12, 2024
Merged

relax client side entity descriptor validation#36602
flyinghermit merged 5 commits intomasterfrom
sshah/update-client-side-acs-filter

Conversation

@flyinghermit
Copy link
Copy Markdown
Contributor

@flyinghermit flyinghermit commented Jan 12, 2024

  • only validates entity descriptor if it is provided.
  • issue warning instead of returning with FilterSAMLEntityDescriptor error.
  • update FilterSAMLEntityDescriptor to skip issuing warning on quiet operation.
  • filters HTTPArtifactBinding from Teleport generated descriptor as the binding is created by default when entity descriptor is generated using crewjam/saml .

closes #36597

@github-actions
Copy link
Copy Markdown
Contributor

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

@github-actions github-actions Bot added size/sm tctl tctl - Teleport admin tool labels Jan 12, 2024
@flyinghermit flyinghermit added the no-changelog Indicates that a PR does not require a changelog entry label Jan 12, 2024
@flyinghermit
Copy link
Copy Markdown
Contributor Author

no changelog as the original PR is not yet backported to older branch.

@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from nklaassen January 12, 2024 14:57
@flyinghermit flyinghermit added this pull request to the merge queue Jan 12, 2024
Merged via the queue into master with commit 62f9ea0 Jan 12, 2024
@flyinghermit flyinghermit deleted the sshah/update-client-side-acs-filter branch January 12, 2024 18:01
fspmarshall pushed a commit that referenced this pull request Jan 12, 2024
* - FilterSAMLEntityDescriptor only if entity descriptor is not empty.
- only issue warning on unsupported acs bindings.

* include HTTPArtifactBinding in supported acs bindings

* update TestFilterSAMLEntityDescriptor

* exclude HTTPArtifactBinding and filter them from generated entity descriptor

* remove HTTPArtifactBinding from test entity descriptor
github-merge-queue Bot pushed a commit that referenced this pull request Jan 17, 2024
* fix saml validation

* relax client side entity descriptor validation (#36602)

* - FilterSAMLEntityDescriptor only if entity descriptor is not empty.
- only issue warning on unsupported acs bindings.

* include HTTPArtifactBinding in supported acs bindings

* update TestFilterSAMLEntityDescriptor

* exclude HTTPArtifactBinding and filter them from generated entity descriptor

* remove HTTPArtifactBinding from test entity descriptor

---------

Co-authored-by: Sakshyam Shah <sshah@goteleport.com>
fspmarshall pushed a commit that referenced this pull request Jan 18, 2024
* - FilterSAMLEntityDescriptor only if entity descriptor is not empty.
- only issue warning on unsupported acs bindings.

* include HTTPArtifactBinding in supported acs bindings

* update TestFilterSAMLEntityDescriptor

* exclude HTTPArtifactBinding and filter them from generated entity descriptor

* remove HTTPArtifactBinding from test entity descriptor
github-merge-queue Bot pushed a commit that referenced this pull request Jan 18, 2024
* fix saml validation

* relax client side entity descriptor validation (#36602)

* - FilterSAMLEntityDescriptor only if entity descriptor is not empty.
- only issue warning on unsupported acs bindings.

* include HTTPArtifactBinding in supported acs bindings

* update TestFilterSAMLEntityDescriptor

* exclude HTTPArtifactBinding and filter them from generated entity descriptor

* remove HTTPArtifactBinding from test entity descriptor

---------

Co-authored-by: Sakshyam Shah <sshah@goteleport.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-changelog Indicates that a PR does not require a changelog entry size/sm tctl tctl - Teleport admin tool

Projects

None yet

Development

Successfully merging this pull request may close these issues.

filtering unsupported SAML ACS client side breaks SP creation without entity descriptor

3 participants