nordisk/edda

crates/nornir-auth-saml/tests/fixtures/e_ecdsa_p256.xml

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_resp1" Version="2.0" IssueInstant="2024-01-01T00:00:00Z" Destination="https://sp.example.com/acs" InResponseTo="_req1">
  <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://idp.example.com/</saml:Issuer>
  <samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status>
  <saml:Assertion ID="_assert1" Version="2.0" IssueInstant="2024-01-01T00:00:00Z">
    <saml:Issuer>https://idp.example.com/</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/><ds:Reference URI="#_assert1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>2t4DUjumXjpxzvK9wvs0nt0eawY+c4q6jySRDh6j6HA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>xpl9GXcgL6wfhwud3p1mpo0xcu/Hi8xy0miUfkOEFaUoIT5jbMyzG/pWnnibfg7ZfLas0LGHz5P8KJngxmjyIw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIBQDCB5qADAgECAgIQkjAKBggqhkjOPQQDAjAoMSYwJAYDVQQDDB1pbnRlcm9w
IFAtMjU2IElkUCAoVEVTVCBPTkxZKTAgFw0yMDAxMDEwMDAwMDBaGA8yMDYwMDEw
MTAwMDAwMFowKDEmMCQGA1UEAwwdaW50ZXJvcCBQLTI1NiBJZFAgKFRFU1QgT05M
WSkwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQZKzjwSLoiPsYYlZKS7L5V1s/Z
Vh6z3myhkNAa1AH0S4VM80H/1E84hwn1+2X3+aQ3LjcWIMWsfEjV/hGPdiToMAoG
CCqGSM49BAMCA0kAMEYCIQDRl534/IPNxosozVjDEpoRJd+eCwpNJfKwBIq0oTyy
zgIhAOFn3XBg39FRE44gLB1GvC3YqmzEEib15uLWZWsvcmvW
</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
    <saml:Subject>
      <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">alice@example.com</saml:NameID>
      <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData NotOnOrAfter="2024-01-01T00:05:00Z" Recipient="https://sp.example.com/acs" InResponseTo="_req1"/>
      </saml:SubjectConfirmation>
    </saml:Subject>
    <saml:Conditions NotBefore="2024-01-01T00:00:00Z" NotOnOrAfter="2024-01-01T00:10:00Z">
      <saml:AudienceRestriction><saml:Audience>https://sp.example.com/metadata</saml:Audience></saml:AudienceRestriction>
    </saml:Conditions>
    <saml:AuthnStatement AuthnInstant="2024-01-01T00:00:00Z" SessionIndex="_sess1"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement>
    <saml:AttributeStatement>
      <saml:Attribute Name="email"><saml:AttributeValue>alice@example.com</saml:AttributeValue></saml:Attribute>
      <saml:Attribute Name="groups"><saml:AttributeValue>eng</saml:AttributeValue><saml:AttributeValue>ops &amp; on-call</saml:AttributeValue></saml:Attribute>
    </saml:AttributeStatement>
  </saml:Assertion>
</samlp:Response>