Add an option to ignore signature validation

PatrickRUG · PatrickRUG · commit ada4b1657648 · 2025-11-13T13:26:14.000+01:00
diff --git a/src/ProgressOnderwijsUtils/SingleSignOn/SsoProcessor.cs b/src/ProgressOnderwijsUtils/SingleSignOn/SsoProcessor.cs
@@ -44,7 +44,7 @@ static string EncodeQueryParameter(string key, string value)
         return null;
     }
 
-    public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse, X509Certificate2 certificate)
+    public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse, X509Certificate2 certificate, bool ignoreSignatureCheck = false)
     {
         byte[] bytes;
         try {
@@ -85,7 +85,7 @@ public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse,
             return Maybe.Error("Public key missing");
         }
 
-        if (!dsig.CheckSignature(key)) {
+        if (!dsig.CheckSignature(key) && !ignoreSignatureCheck) {
             return Maybe.Error("Signature invalid");
         }
 

Original file line number	Diff line number	Diff line change
`@@ -44,7 +44,7 @@ static string EncodeQueryParameter(string key, string value)`
`44`	`44`	`return null;`
`45`	`45`	`}`
`46`	`46`
`47`		`- public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse, X509Certificate2 certificate)`
	`47`	`+ public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse, X509Certificate2 certificate, bool ignoreSignatureCheck = false)`
`48`	`48`	`{`
`49`	`49`	`byte[] bytes;`
`50`	`50`	`try {`
`@@ -85,7 +85,7 @@ public static Maybe<SsoAttributes, string> GetAttributes(string rawSamlResponse,`
`85`	`85`	`return Maybe.Error("Public key missing");`
`86`	`86`	`}`
`87`	`87`
`88`		`- if (!dsig.CheckSignature(key)) {`
	`88`	`+ if (!dsig.CheckSignature(key) && !ignoreSignatureCheck) {`
`89`	`89`	`return Maybe.Error("Signature invalid");`
`90`	`90`	`}`
`91`	`91`