Merge branch 'master' into v2_saml-logout_sf5.1

Author: hslavich

DependencyInjection/Configuration.php

@@ -120,6 +120,11 @@ public function getConfigTreeBuilder()
                         ->end()
                         ->booleanNode('signMetadata')->end()
                         ->booleanNode('wantXMLValidation')->end()
+                        ->booleanNode('relaxDestinationValidation')->end()
+                        ->booleanNode('destinationStrictlyMatches')
+                            ->defaultTrue()
+                        ->end()
+                        ->booleanNode('rejectUnsolicitedResponsesWithInResponseTo')->end()
                         ->booleanNode('lowercaseUrlencoding')->end()
                         ->scalarNode('signatureAlgorithm')->end()
                         ->scalarNode('digestAlgorithm')->end()

Tests/DependencyInjection/Fixtures/full.yaml

@@ -38,6 +38,9 @@ hslavich_onelogin_saml:
         requestedAuthnContext: true
         signMetadata: false
         wantXMLValidation: false
+        relaxDestinationValidation: false
+        destinationStrictlyMatches: true
+        rejectUnsolicitedResponsesWithInResponseTo: false
         signatureAlgorithm: 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
     contactPerson:
         technical:

Tests/DependencyInjection/HslavichOneloginSamlExtensionTest.php

@@ -58,7 +58,10 @@ public function testLoadSecuritySettings(): void
         self::assertTrue($settings['security']['requestedAuthnContext']);
         self::assertFalse($settings['security']['signMetadata']);
         self::assertFalse($settings['security']['wantXMLValidation']);
-        self::assertEquals('http://www.w3.org/2000/09/xmldsig#rsa-sha1', $settings['security']['signatureAlgorithm']);
+        self::assertEquals('http://www.w3.org/2000/09/xmldsig#rsa-sha1', $settings['security']['signatureAlgorithm']);       
+        self::assertFalse($settings['security']['relaxDestinationValidation']);
+        self::assertTrue($settings['security']['destinationStrictlyMatches']);
+        self::assertFalse($settings['security']['rejectUnsolicitedResponsesWithInResponseTo']);
     }
 
     public function testLoadBasicSettings(): void