Safe Haskell	None
Language	Haskell2010

Network.Wai.SAML2.Config

Description

Configuration types and smart constructors for the SAML2 middleware.

Synopsis

data SAML2Config = SAML2Config {
- saml2AssertionPath :: !ByteString
- saml2PrivateKey :: !PrivateKey
- saml2PublicKey :: !PublicKey
- saml2ExpectedIssuer :: !(Maybe Text)
- saml2ExpectedDestination :: !(Maybe Text)
- saml2DisableTimeValidation :: !Bool
}
saml2Config :: PrivateKey -> PublicKey -> SAML2Config

Documentation

data SAML2Config Source #

Represents configurations for the SAML2 middleware.

Constructors

SAML2Config

Fields

saml2AssertionPath :: !ByteString
The path relative to the root of the web application at which the middleware should listen for SAML2 assertions (e.g. ssoassert).
saml2PrivateKey :: !PrivateKey
The service provider's private key, used to decrypt data from the identity provider.
saml2PublicKey :: !PublicKey
The identity provider's public key, used to validate signatures.
saml2ExpectedIssuer :: !(Maybe Text)
The name of the entity we expect assertions from. If this is set to Nothing, the issuer name is not validated.
saml2ExpectedDestination :: !(Maybe Text)
The URL we expect the SAML2 response to contain as destination.
saml2DisableTimeValidation :: !Bool
A value indicating whether to disable time validity checks. This should not be set to True in a production environment, but may be useful for testing purposes.

saml2Config :: PrivateKey -> PublicKey -> SAML2Config Source #

saml2Config privateKey publicKey constructs a SAML2Config value with the most basic set of options possible using privateKey as the SP's private key and publicKey as the IdP's public key. You should almost certainly change the resulting settings.