dahn 0459833631 saml: reject signed SAMLResponse when IdP has no signing certificate registered ... When a SAML Response or EncryptedAssertion carries a ds:Signature element but the IdP metadata contains no signing certificate, the previous code silently skipped signature validation (the guard was `idpMetadata.getSigningCertificate() != null && sig != null`). An attacker could forge a SAMLResponse with an arbitrary bogus signature against a cert-less IdP and obtain a valid session — a full unauthenticated authentication bypass. Fix: when a signature IS present we now require a signing certificate to be registered. If none is found we immediately reject the request with an ACCOUNT_ERROR. The same guard is applied to the EncryptedAssertion signature block.		2026-08-18 18:15:23 +05:30
..
src	saml: reject signed SAMLResponse when IdP has no signing certificate registered	2026-08-18 18:15:23 +05:30
pom.xml	Updating pom.xml version numbers for release 4.20.4.0-SNAPSHOT	2026-04-13 15:48:18 +05:30