Add SubjectConfirmationData to response (#218)

- Using bearer method Co-authored-by: Russell Johnson-Bade <russell.johnson-bade@corrivium.com>
2023-08-02 03:22:43 +10:00 · 2023-08-02 03:22:43 +10:00 · 5f0d985ad8
commit 5f0d985ad8
parent 4c91b63249
1 changed files with 8 additions and 0 deletions
--- a/utils/response.ts
+++ b/utils/response.ts
@ -108,6 +108,14 @@ const createResponseXML = async (params: {
            '@Format': 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
            '#text': user.email,
          },
+          'saml:SubjectConfirmation': {
+            '@Method': 'urn:oasis:names:tc:SAML:2.0:cm:bearer',
+            'saml:SubjectConfirmationData': {
+              '@InResponseTo': inResponseTo,
+              '@NotOnOrAfter': notAfter,
+              '@Recipient': acsUrl,
+            },
+          },
        },
        'saml:Conditions': {
          '@NotBefore': notBefore,