Fixes for ORIGIN gem

saml-idp · Nov 1, 2024 · 26abd94 · 26abd94
1 parent 5ae908d
commit 26abd94
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/gemfiles/rails_dev.gemfile b/gemfiles/rails_dev.gemfile
@@ -2,7 +2,7 @@
 
 source "https://rubygems.org"
 
-gem "rails", "~> 7.2.1"
+gem "rails", github: "rails/rails", branch: "main"
 gem "activeresource", github: "rails/activeresource", branch: "main"
 
 gemspec path: "../"
diff --git a/lib/saml_idp/controller.rb b/lib/saml_idp/controller.rb
@@ -34,7 +34,10 @@ def acs_url
 
     def validate_saml_request(raw_saml_request = params[:SAMLRequest])
       decode_request(raw_saml_request, params[:Signature], params[:SigAlg], params[:RelayState])
-      valid_saml_request?
+      return true if valid_saml_request?
+
+      head :forbidden if defined?(::Rails)
+      false
     end
 
     def decode_request(raw_saml_request, signature, sig_algorithm, relay_state)