perl-net-saml2/perl-Net-SAML2

Support for lowercase encoding in LogoutResponse redirect

timlegge opened this issue · 1 comments

Someone at Microsoft must think up ways to be incompatible with everyone else. The Azure redirect for SAML LogoutResponse is url encoded with lowercase percent hex codes. %2f instead of %2F for instance. This means that when the signature is verified it requires the % escape coded to be in lowercase.

This is a bit of a problem since everyone else seems to standardize on uppercase. The issue is most easily seen in the xt/testapp/lib/Saml2Test.pm as it is Dancer based the request-uri is processed by Dancer initially and returned as uppercase. There does not appear to be a method to get the original lowercase values from the Dancer request

fixed 0.43