Support for lowercase encoding in LogoutResponse redirect
timlegge opened this issue · 1 comments
timlegge commented
Someone at Microsoft must think up ways to be incompatible with everyone else. The Azure redirect for SAML LogoutResponse is url encoded with lowercase percent hex codes. %2f instead of %2F for instance. This means that when the signature is verified it requires the % escape coded to be in lowercase.
This is a bit of a problem since everyone else seems to standardize on uppercase. The issue is most easily seen in the xt/testapp/lib/Saml2Test.pm as it is Dancer based the request-uri is processed by Dancer initially and returned as uppercase. There does not appear to be a method to get the original lowercase values from the Dancer request
timlegge commented
fixed 0.43