SAML Request ID is not used in AuthnResponse about node-samlp HOT 9 CLOSED

I can reproduce the issue, we'll work on it. In the meantime, you can apply your workaround (if (id) opts.inResponseTo = id;)

from node-samlp.

Hello @yesvivek

I was reviewing the implementation of the auth function and the ID used as InResponseTo in the SAMLResponse is taken from the SAMLRequest unless you explicit set it as an option

https://github.com/auth0/node-samlp/blob/master/lib/samlp.js#L174-L175

Can you check the following:

• You are not explicitly setting the InResponseTo when calling samlp.auth(options)
• Your SAMLRequest has different IDs

from node-samlp.

@mcastany , My SAMLRequest has different IDs for each request. Am setting destination and all REQUIRED options when calling samlp.auth.

https://github.com/auth0/node-samlp/blob/master/lib/samlp.js#L175
This seems to be causing this issue for me. Changing it to if (id) opts.inResponseTo = id; works for me.
What do you suggest?

from node-samlp.

Could you please check the value of opts.inResponseTo before line 175? https://github.com/auth0/node-samlp/blob/master/lib/samlp.js#L175

from node-samlp.

Have added the below line as recommended in above comment.
console.log( "Dom ID: " + id + " VS opts.inResponseTo: " + opts.inResponseTo);

Results after multiple SAMLRequests:

1. Dom ID: id175479885406247111143820862 VS opts.inResponseTo: undefined
2. Dom ID: id13229522944305032913039188 VS opts.inResponseTo: id175479885406247111143820862
3. Dom ID: id175429005758588441628725185 VS opts.inResponseTo: id175479885406247111143820862
4. Dom ID: id175496083313503221789498695 VS opts.inResponseTo: id175479885406247111143820862

from node-samlp.

try with [email protected]

thanks for reporting!

from node-samlp.

Thanks for the quick patch! It works awesome now.

from node-samlp.

But this is incompatible with my Service Provider

do you know why? InResponseTo contains the ID of the initial SAMLRequest.

from node-samlp.

Don't know. But I close the issue since I saw what creates this id. Thanks.

from node-samlp.