supabase / auth / 10663558264

69%

push

github

feat: add support for saml encrypted assertions (#1752)

By setting the `GOTRUE_SAML_ALLOW_ENCRYPTED_ASSERTIONS` to `true` the
SAML private key will be advertised as usable with encryption too.

Encrypted assertions are fairly rare these days because:

- They make it very hard to debug what's going on.
- HTTPS is the default protocol on the web for over 10 years, including
in intranets.

**Why not use a separate key?**

The underlying library [does not support
it](https://pkg.go.dev/github.com/crewjam/saml@v0.4.14/samlsp#Options)
and there are no significant cryptological issues using the same RSA key
for signatures and encryption, especially in a limited setting like
this.

3 of 5 new or added lines in 2 files covered. (60.0%)

9125 of 15769 relevant lines covered (57.87%)

55.62 hits per line