nordisk/edda

crates/nornir-auth-saml/tests/fixtures/b2_both_signed.xml

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_resp1" Version="2.0" IssueInstant="2024-01-01T00:00:00Z" Destination="https://sp.example.com/acs" InResponseTo="_req1">
  <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://idp.example.com/</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_resp1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>xMT3v4VFLD+lrQqZ5WL9U3VRKHMUsMAnXeV6eIGYac4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>CjimIrAMiW/806heKwaqjm2xxZi2OZjVWYId3EPuqdaz4ThecUrtxttqa0RFg4ySqOfOvZAVO649Gyzu7pGlMIc12ISp+CRuJbUPgAyIwltJYmbyqeW/Ven8aJz3Xz3Dt5NvRO7HU8aaS39/GB5ggZrH4dGudE/QO2k6mWkgsl1oZsv75Uu8qKxG4hSwgmpMz1iqMExNv19usIkWpO9BypyclFlRwKKyDWXUBXnIvD/Uwg7o4aSUD/Nd/z2wWxZAhozOSSPWDaXnfn674pn/OEGg7jCYMBQ0rIR5J1iIcUV7gA3lpR9tZZ8zBS1rSncJF32cTssFJIBGqcSshrtbUQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICyDCCAbCgAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UEAwwbaW50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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
  <samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status>
  <saml:Assertion ID="_assert1" Version="2.0" IssueInstant="2024-01-01T00:00:00Z">
    <saml:Issuer>https://idp.example.com/</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_assert1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>2t4DUjumXjpxzvK9wvs0nt0eawY+c4q6jySRDh6j6HA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>P1CtILdRWRIHeKB+F/GLvXETs3z4ywvqNtHb5EvBkQcfH0AVChEPxbNtuNr9wH1owC3aCRgAA06ssZxlMGJkVh5FcuyCVcqvO2aselwKBz0wfM7Mi7qAjstyFxpxU/B53AJFnQTAMqjDG2gmfcOtO6Dh9ze04fyfHHFOoTQX/WqoxNNbV25Q1DNRw+U/Xy0N5vSIA818Y1S53kVjVwpbNA96Mh8v7qz0fBoUbQfC7KdQCJbYzGF0ylcoKbUZO96kjH+vFxSzQaE1dPTfn52v2Hg6xeP/j/l+zzj4CLP1eELDxoBmLzd1Uo31dM2I8+fR2E3eiq3nK4Lx4j4DprV1Vg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICyDCCAbCgAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UEAwwbaW50
ZXJvcCBSU0EgSWRQIChURVNUIE9OTFkpMCAXDTIwMDEwMTAwMDAwMFoYDzIwNjAw
MTAxMDAwMDAwWjAmMSQwIgYDVQQDDBtpbnRlcm9wIFJTQSBJZFAgKFRFU1QgT05M
WSkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprPzv7A4Uay4fXLYi
83epx8asxb+dPOMcRs8jFjT0+zsdGqLZYRkYOZswO77cDuF+nmU74K0XEUvGqqyB
qvr6lqjHXyqBxVd1iyIWSJbG8nDD8B01IzcQRWira+J0FX1DYCXy4OfzuFQwCK66
PvFH0kCiSvs307N1ggivIYeZP3vjg9qaYIBLUZXODcYqwiDB/Yt78PX5AhbNc0J1
sGPrey7IXuLHAf4UIll1eGA9p/RbZMZW2jeLbJ3F6PqjET8HUqZDvCT5I31UW8EW
jpRXN9K60DeFL541wvwO7O0WlD8tXylZeiSs4+q+XuMO4annGZFbOUQT9/AiLgZI
r2aLAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAGSxMrRwx92djXFooOZDDJ8rbxVt
XIi5JURGxC4GnGp9Wa5v2N4ailgs7ttXcgp6MS3EQRvLIIZ0jUwjWLf44UIBzKMj
i9UKxCyIYHcws7yXRwcqO3LNViK1G/zOlkmgAG2MVlSCm0eSweZsCgUGdhAXmsRN
LHPtjIlxWERr3QJhTlrQ4OZzntyDzRH4HuXGJsls3IH1A42KSHiaBbctysR5J/3Z
lbShjBfPQoAPBcIsjhkCsD7MaVVvv3NrqUeDkPCLcx8GwJe798nLqcT3nA2dWpDD
Vkn1IVBBhRoIcJSPonFVgI6tflLkw4Umli4jy8MHpjCUJ+43H1anvvqfSHs=
</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">alice@example.com</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-01T00:05:00Z" Recipient="https://sp.example.com/acs" InResponseTo="_req1"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2024-01-01T00:00:00Z" NotOnOrAfter="2024-01-01T00:10:00Z">
      <saml:AudienceRestriction><saml:Audience>https://sp.example.com/metadata</saml:Audience></saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2024-01-01T00:00:00Z" SessionIndex="_sess1"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="email"><saml:AttributeValue>alice@example.com</saml:AttributeValue></saml:Attribute>
      <saml:Attribute Name="groups"><saml:AttributeValue>eng</saml:AttributeValue><saml:AttributeValue>ops &amp; on-call</saml:AttributeValue></saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>