BSR

OpenConext · Nov 7, 2023 · 6c1e0a1 · 6c1e0a1
1 parent d33cbc9
commit 6c1e0a1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/myconext-server/src/main/java/myconext/security/GuestIdpAuthenticationRequestFilter.java b/myconext-server/src/main/java/myconext/security/GuestIdpAuthenticationRequestFilter.java
@@ -4,7 +4,6 @@
 import myconext.exceptions.UserNotFoundException;
 import myconext.geo.GeoLocation;
 import myconext.mail.MailBox;
-import myconext.manage.MockServiceProviderResolver;
 import myconext.manage.ServiceProviderHolder;
 import myconext.manage.ServiceProviderResolver;
 import myconext.model.*;
@@ -73,7 +72,7 @@ public class GuestIdpAuthenticationRequestFilter extends OncePerRequestFilter im
     private final AntPathRequestMatcher continueAfterloginSamlRequestMatcher;
     private final String redirectUrl;
     private final AuthenticationRequestRepository authenticationRequestRepository;
-    private  UserRepository userRepository;
+    private UserRepository userRepository;
     private final UserLoginRepository userLoginRepository;
     private final List<String> accountLinkingContextClassReferences;
     private final GeoLocation geoLocation;
@@ -82,7 +81,7 @@ public class GuestIdpAuthenticationRequestFilter extends OncePerRequestFilter im
     private final boolean secureCookie;
     private final String magicLinkUrl;
     private final MailBox mailBox;
-    private  ServiceProviderResolver serviceProviderResolver;
+    private ServiceProviderResolver serviceProviderResolver;
     private final ExecutorService executor;
     private final int nudgeAppDays;
     private final int rememberMeQuestionAskedDays;

diff --git a/myconext-server/src/main/java/myconext/security/SecurityConfiguration.java b/myconext-server/src/main/java/myconext/security/SecurityConfiguration.java
@@ -93,7 +93,7 @@ public SamlSecurity(@Value("${private_key_path}") Resource privateKeyPath,
             SAMLConfiguration configuration = new SAMLConfiguration(
                     new SAMLIdentityProvider(keys[0], keys[1], idpEntityId),
                     serviceProviders,
-                    false
+                    requiresSignedAuthnRequest
             );
             this.guestIdpAuthenticationRequestFilter = new GuestIdpAuthenticationRequestFilter(
                     redirectUrl,