mirror of
https://github.com/zitadel/zitadel.git
synced 2025-12-24 03:47:09 +00:00
a3dac4d5cd
# Which Problems Are Solved
When a SAML IDP is created, the signing algorithm defaults to
`RSA-SHA1`.
This PR adds the functionality to configure the signing algorithm while
creating or updating a SAML IDP. When nothing is specified, `RSA-SHA1`
is the default.
Available options:
* RSA_SHA1
* RSA_SHA256
* RSA_SHA512
# How the Problems Are Solved
By introducing a new optional config to specify the Signing Algorithm.
# Additional Changes
N/A
# Additional Context
- Closes #9842
An existing bug in the UpdateSAMLProvider API will be fixed as a
followup in a different
[PR](https://github.com/zitadel/zitadel/pull/10557).
---------
Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
(cherry picked from commit 255d42da65)
28 lines
596 B
Go
28 lines
596 B
Go
package setup
|
|
|
|
import (
|
|
"context"
|
|
_ "embed"
|
|
|
|
"github.com/zitadel/zitadel/internal/database"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
)
|
|
|
|
var (
|
|
//go:embed 61.sql
|
|
addSAMLSignatureAlgorithm string
|
|
)
|
|
|
|
type IDPTemplate6SAMLSignatureAlgorithm struct {
|
|
dbClient *database.DB
|
|
}
|
|
|
|
func (mig *IDPTemplate6SAMLSignatureAlgorithm) Execute(ctx context.Context, _ eventstore.Event) error {
|
|
_, err := mig.dbClient.ExecContext(ctx, addSAMLSignatureAlgorithm)
|
|
return err
|
|
}
|
|
|
|
func (mig *IDPTemplate6SAMLSignatureAlgorithm) String() string {
|
|
return "61_idp_templates6_add_saml_signature_algorithm"
|
|
}
|