From 88cc927f7e7b1f85972c00871f628c6b2aa34b03 Mon Sep 17 00:00:00 2001 From: Chris Mordue Date: Wed, 13 Dec 2017 16:11:55 -0300 Subject: [PATCH] Fix issue where SAML assertion validation fails if namespace is not defined on Signature node. Remove namespace-breaking reserialization of signature which used to be in the documented example from xml-crypto but was removed due to this bug See: https://github.com/yaronn/xml-crypto/pull/105 --- lib/validateSignature.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/validateSignature.js b/lib/validateSignature.js index b79fb9c..bdd0b5a 100644 --- a/lib/validateSignature.js +++ b/lib/validateSignature.js @@ -35,7 +35,7 @@ module.exports = function(xml, cert, certThumbprint) { } }; - signed.loadSignature(signature.toString()); + signed.loadSignature(signature); var valid = signed.checkSignature(xml);