Skip to content

Commit 8d8aaa3

Browse files
committed
Merge pull request rubycas#10 from NIFA/issue8
Issue rubycas#8: single_sign_out requires URI.decode
2 parents b99bc3e + 2568dba commit 8d8aaa3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/rubycas-client-rails.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -288,7 +288,7 @@ def single_sign_out(controller)
288288

289289
if controller.request.post? &&
290290
controller.params['logoutRequest'] &&
291-
controller.params['logoutRequest'] =~
291+
URI.unescape(controller.params['logoutRequest']) =~
292292
%r{^<samlp:LogoutRequest.*?<samlp:SessionIndex>(.*)</samlp:SessionIndex>}m
293293
# TODO: Maybe check that the request came from the registered CAS server? Although this might be
294294
# pointless since it's easily spoofable...

0 commit comments

Comments
 (0)