simplesamlphp / saml2 / 545

66%

Pull #120

travis-ci

Fix broken handling of unsigned response with encrypted assertions

The response processor currently assumes all assertions are decrypted,
and causes a fatal error when the response is unsigned:

    Call to undefined method SAML2\EncryptedAssertion::getWasSignedAtConstruction()

Whether the assertion is signed can only be determined after
decryption. This fix decrypts the assertions before checking if
the response or assertion is signed.

3 of 3 new or added lines in 1 file covered. (100.0%)

2991 of 4386 relevant lines covered (68.19%)

7.57 hits per line