From 30243a89c43872bb6523478b614ff0a205a01279 Mon Sep 17 00:00:00 2001 From: Vlad Mencl Date: Mon, 23 Jan 2023 16:48:43 +1300 Subject: fix: metadata: process extensions also for aa, aq and pdp descriptors --- src/saml2/metadata.py | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/src/saml2/metadata.py b/src/saml2/metadata.py index ff4450a8..4266ca6e 100644 --- a/src/saml2/metadata.py +++ b/src/saml2/metadata.py @@ -589,6 +589,17 @@ def do_aa_descriptor(conf, cert=None, enc_cert=None): aad = md.AttributeAuthorityDescriptor() aad.protocol_support_enumeration = samlp.NAMESPACE + exts = conf.getattr("extensions", "aa") + if exts: + if aad.extensions is None: + aad.extensions = md.Extensions() + + for key, val in exts.items(): + _ext = do_extensions(key, val) + if _ext: + for _e in _ext: + aad.extensions.add_extension_element(_e) + endps = conf.getattr("endpoints", "aa") if endps: @@ -617,6 +628,17 @@ def do_aq_descriptor(conf, cert=None, enc_cert=None): aqs = md.AuthnAuthorityDescriptor() aqs.protocol_support_enumeration = samlp.NAMESPACE + exts = conf.getattr("extensions", "aa") + if exts: + if aqs.extensions is None: + aqs.extensions = md.Extensions() + + for key, val in exts.items(): + _ext = do_extensions(key, val) + if _ext: + for _e in _ext: + aqs.extensions.add_extension_element(_e) + endps = conf.getattr("endpoints", "aq") if endps: @@ -637,6 +659,17 @@ def do_pdp_descriptor(conf, cert=None, enc_cert=None): pdp.protocol_support_enumeration = samlp.NAMESPACE + exts = conf.getattr("extensions", "pdp") + if exts: + if pdp.extensions is None: + pdp.extensions = md.Extensions() + + for key, val in exts.items(): + _ext = do_extensions(key, val) + if _ext: + for _e in _ext: + pdp.extensions.add_extension_element(_e) + endps = conf.getattr("endpoints", "pdp") if endps: -- cgit v1.2.1