OpenSearch/x-pack/plugin/security
Ioannis Kakavas 8c624e5a20 Enhance parsing of StatusCode in SAML Responses (#38628)
* Enhance parsing of StatusCode in SAML Responses

<Status> elements in a failed response might contain two nested
<StatusCode> elements. We currently only parse the first one in
order to create a message that we attach to the Exception we return
and log. However this is generic and only gives out informarion
about whether the SAML IDP believes it's an error with the
request or if it couldn't handle the request for other reasons. The
encapsulated StatusCode has a more interesting error message that
potentially gives out the actual error as in Invalid nameid policy,
authentication failure etc.

This change ensures that we print that information also, and removes
Message and Details fields from the message when these are not
part of the Status element (which quite often is the case)
2019-02-11 11:55:26 +02:00
..
cli XPack: core/ccr/Security-cli migration to java-time (#38415) 2019-02-05 22:09:32 +01:00
forbidden Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
licenses Update httpclient for JDK 11 TLS engine (#37994) 2019-01-30 14:24:29 -07:00
src Enhance parsing of StatusCode in SAML Responses (#38628) 2019-02-11 11:55:26 +02:00
build.gradle Split third party audit exclusions by type (#36763) 2019-01-07 17:24:19 +02:00