<Issuer xmlns ='urn：oasis：names：tc：SAML：2.0：assertion'> was not expected

我正在开发解决方案deserializeSAMLxml。但是，面对一个错误说<Issuer xmlns ='urn：oasis：names：tc：SAML：2.0：assertion'> was not expected

“发行人的xmlns = '金塔：绿洲：名称：TC：SAML：2.0：断言' 没有预期”

代码

 XmlNamespaceManager ns = new XmlNamespaceManager(SAMLXML.NameTable); 
     ns.AddNamespace("saml", "urn:oasis:names:tc:SAML:2.0:assertion"); 

     XmlElement xeAssertion = SAMLXML.DocumentElement.SelectSingleNode("saml:Assertion",ns) as XmlElement; 

     AssertionType assertionType = new AssertionType(); 
     XmlSerializer serializer = new XmlSerializer(assertionType.GetType(),ns.DefaultNamespace); 

     MemoryStream ms = new MemoryStream(Encoding.UTF32.GetBytes(xeAssertion.InnerXml.ToString())); 
     ms.Position = 0; 
     ms.Seek(0, SeekOrigin.Begin); 

     AssertionType assertion = (AssertionType)serializer.Deserialize(ms); 

     return assertion;

来源

2015-04-22 abn

是'从某些库AssertionType'？或者是你自己的班级？看起来它不处理''元素。 –

这是一个基于SAML XML响应的XSD.exe生成的类。点击https://rnd.feide.no/2007/12/10/example_saml_2_0_request_and_response/举例 – abn

您可以粘贴SAMLXML的内容 –

终于找到了解决办法

代码

  XmlNamespaceManager ns = new XmlNamespaceManager(SAMLXML.NameTable); 
      ns.AddNamespace("saml", "urn:oasis:names:tc:SAML:2.0:assertion"); 

      XmlElement xeAssertion = SAMLXML.DocumentElement.SelectSingleNode("saml:Assertion", ns) as XmlElement; 


      string xml = null; 
      var memoryStream = new MemoryStream(); 
      var serializer = new XmlSerializer(xeAssertion.GetType()); 
      var streamWriter = new StreamWriter(memoryStream, Encoding.UTF8); 
      serializer.Serialize(streamWriter, xeAssertion); 
      memoryStream = (MemoryStream)streamWriter.BaseStream; 

      xml = memoryStream.ToArray().Utf8ByteArrayToString(); 


      var serializer = new XmlSerializer(typeof(AssertionType)); 
      var memoryStream = new MemoryStream(xml.StringToUtf8ByteArray()); 


      AssertionType assertion = (AssertionType)serializer.Deserialize(memoryStream); 

      return assertion; 


**SAML** 

    <Response xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="" Version="2.0" IssueInstant="" Destination="Recipient" xmlns="urn:oasis:names:tc:SAML:2.0:protocol"> 
    <saml:Issuer>abnTest</saml:Issuer> 
    <Status> 
    <StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /> 
    </Status> 
    <saml:Assertion Version="2.0" ID=""> 
    <saml:Issuer></saml:Issuer> 
    <saml:Subject> 
     <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">Subject</saml:NameID> 
     <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"> 
     <saml:SubjectConfirmationData Recipient="Recipient" NotOnOrAfter="" /> 
     </saml:SubjectConfirmation> 
    </saml:Subject> 
    <saml:Conditions NotBefore="" NotOnOrAfter=""> 
     <saml:AudienceRestriction> 
     <saml:Audience>Audience</saml:Audience> 
     </saml:AudienceRestriction> 
    </saml:Conditions> 
    <saml:AuthnStatement AuthnInstant="" SessionIndex=""> 
     <saml:AuthnContext> 
     <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef> 
     </saml:AuthnContext> 
    </saml:AuthnStatement> 
    <saml:AttributeStatement> 
     <saml:Attribute Name="SessionKey" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"> 
     <saml:AttributeValue xsi:type="xsd:string">{}</saml:AttributeValue> 
     </saml:Attribute>  
     <saml:Attribute Name="Username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"> 
     <saml:AttributeValue xsi:type="xsd:string"></saml:AttributeValue> 
     </saml:Attribute>  
    </saml:AttributeStatement> 
    </saml:Assertion> 
    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> 
    <SignedInfo> 
     <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> 
     <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> 
     <Reference URI="#_4-90d7-cbc23ca53255"> 
     <Transforms> 
      <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> 
      <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> 
     </Transforms> 
     <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> 
     <DigestValue>=</DigestValue> 
     </Reference> 
    </SignedInfo> 
    <SignatureValue>GVRL/+q=</SignatureValue> 
    </Signature> 
</Response>

来源

2015-04-22 09:00:32 abn

如果这是您的实际SAML内容，您有几个问题。我建议使用SAML的现有库，而不是自己解析XML。 SAML响应/断言的正确验证有*许多细节。 –

<Issuer xmlns ='urn：oasis：names：tc：SAML：2.0：assertion'> was not expected

回答

相关问题