Commit 14ca9e8

@@ -58,6 +58,7 @@ module Saml
           }
           return parameters[:SAMLRequest] if parameters[:SAMLRequest].present?
           return parameters[:SAMLResponse] if parameters[:SAMLResponse].present?
+
           message = 'SAMLRequest or SAMLResponse parameter is required.'
           raise ArgumentError, message
         end

@@ -52,6 +52,7 @@ module Saml
             decode(signature),
             canonicalize(params)
           )
+
           raise ArgumentError, 'Invalid Signature'
         end
 
@@ -87,6 +88,7 @@ module Saml
 
         def params_to_hash(value)
           return value unless value.is_a?(String)
+
           Hash[URI.parse(value).query.split('&').map { |xx| xx.split('=', 2) }]
         end
       end

@@ -35,6 +35,7 @@ module Saml
 
         def assertion_attributes
           return {} unless user.respond_to?(:assertion_attributes_for)
+
           user.assertion_attributes_for(request)
         end
 

@@ -30,6 +30,7 @@ module Saml
       def trusted?
         return true if signature_verified
         return false unless signed?
+
         signature.trusted?(provider)
       end
 
@@ -60,12 +61,14 @@ module Saml
       def must_be_registered
         return unless expected_type?
         return if provider.present?
+
         errors[:provider] << error_message(:unregistered)
       end
 
       def must_be_trusted
         return if trusted?
         return if provider.present? && !signed?
+
         errors[:fingerprint] << error_message(:invalid_fingerprint)
       end
     end

@@ -45,6 +45,7 @@ module Saml
       # @!visibility private
       def at_xpath(xpath)
         return unless present?
+
         to_nokogiri.at_xpath(xpath, NAMESPACES)
       end
 

@@ -20,6 +20,7 @@ module Saml
       # signing certificate is available via the configuration.
       def sign?
         return configuration.sign? if embed_signature.nil?
+
         (embed_signature && configuration.sign?) ||
           (embed_signature && signing_key_pair.present?)
       end

@@ -90,6 +90,7 @@ module Saml
 
       def decryptable?
         return true unless encrypted?
+
         !@cannot_decrypt
       end
 
@@ -103,6 +104,7 @@ module Saml
         encrypted_assertion = at_xpath('./xmlenc:EncryptedData')
         @encrypted = encrypted_assertion.present?
         return unless @encrypted
+
         @to_nokogiri = decryptor.decrypt_node(encrypted_assertion)
       rescue Xml::Kit::DecryptionError => error
         @cannot_decrypt = true
@@ -111,16 +113,19 @@ module Saml
 
       def must_match_issuer
         return if audiences.empty? || audiences.include?(configuration.entity_id)
+
         errors[:audience] << error_message(:must_match_issuer)
       end
 
       def must_be_active_session
         return if active?
+
         errors[:base] << error_message(:expired)
       end
 
       def must_have_valid_signature
         return if !signed? || signature.valid?
+
         signature.errors.each do |attribute, message|
           errors.add(attribute, message)
         end

@@ -111,6 +111,7 @@ module Saml
       def must_be_valid_version
         return unless expected_type?
         return if version == '2.0'
+
         errors[:version] << error_message(:invalid_version)
       end
     end

@@ -57,6 +57,7 @@ module Saml
         xpath = "/md:EntityDescriptor/md:#{name}"
         attribute = at_xpath(xpath).attribute('WantAuthnRequestsSigned')
         return true if attribute.nil?
+
         attribute.text.casecmp('true').zero?
       end
 

@@ -67,6 +67,7 @@ module Saml
 
       def single_logout_service
         return if provider.nil?
+
         urls = provider.single_logout_services
         urls.first
       end

@@ -191,6 +191,7 @@ module Saml
 
       def must_have_valid_signature
         return if !signature.present? || signature.valid?
+
         signature.errors.each do |attribute, error|
           errors[attribute] << error
         end

@@ -51,6 +51,7 @@ module Saml
 
       def must_contain_single_assertion
         return if assertion_nodes.count <= 1
+
         errors[:base] << error_message(:must_contain_single_assertion)
       end
 

@@ -28,6 +28,7 @@ module Saml
         element = at_xpath("/md:EntityDescriptor/md:#{name}")
         attribute = element.attribute('WantAssertionsSigned')
         return true if attribute.nil?
+
         attribute.text.casecmp('true').zero?
       end
 

@@ -24,6 +24,7 @@ module Saml
         xpath = './ds:KeyInfo/ds:X509Data/ds:X509Certificate'
         value = at_xpath(xpath).try(:text)
         return if value.nil?
+
         ::Xml::Kit::Certificate.new(value, use: :signing)
       end
 
@@ -31,6 +32,7 @@ module Saml
       # the certificates registered in the metadata.
       def trusted?(metadata)
         return false if metadata.nil?
+
         metadata.matches?(certificate.fingerprint, use: :signing).present?
       end
 
@@ -121,6 +123,7 @@ module Saml
 
       def at_xpath(xpath)
         return nil unless node
+
         node.at_xpath(xpath, Saml::Kit::Document::NAMESPACES)
       end