summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIvan Kanakarakis <ivan.kanak@gmail.com>2020-11-13 18:15:08 +0200
committerIvan Kanakarakis <ivan.kanak@gmail.com>2020-11-13 18:15:08 +0200
commit07db486dee936c89e7918d5240a67c93c65a1130 (patch)
treea0d9272220314980fc3254392b2f427999d96b7e
parentf17ad8c2c03d265e9b0ec1205aab2a6fc4bfee18 (diff)
downloadpysaml2-07db486dee936c89e7918d5240a67c93c65a1130.tar.gz
Ignore duplicate RequestedAttribute entries when filtering attributes
Signed-off-by: Ivan Kanakarakis <ivan.kanak@gmail.com>
-rw-r--r--src/saml2/assertion.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/saml2/assertion.py b/src/saml2/assertion.py
index 3728c7b8..4a17c098 100644
--- a/src/saml2/assertion.py
+++ b/src/saml2/assertion.py
@@ -115,7 +115,9 @@ def filter_on_attributes(ava, required=None, optional=None, acs=None,
try:
res[_fn].extend(_filter_values(ava[_fn], values))
except KeyError:
- res[_fn] = _filter_values(ava[_fn], values)
+ # ignore duplicate RequestedAttribute entries
+ val = _filter_values(ava[_fn], values)
+ res[_fn] = val if val is not None else []
return _filter_values(ava[_fn], values, must)