feat(saml-response): whitelist more response options

CoffeeAndCode · Mar 1, 2018 · 575198d · 575198d
1 parent 2d50dba
commit 575198d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/omniauth/strategies/saml.rb b/lib/omniauth/strategies/saml.rb
@@ -10,7 +10,10 @@ def self.inherited(subclass)
  OmniAuth::Strategy.included(subclass)
  end
 
- OTHER_REQUEST_OPTIONS = [:skip_conditions, :allowed_clock_drift, :matches_request_id, :skip_subject_confirmation].freeze
+ OTHER_REQUEST_OPTIONS = [
+ :skip_conditions, :allowed_clock_drift, :matches_request_id,
+ :skip_subject_confirmation, :skip_destination, :skip_recipient_check
+ ].freeze
 
  option :name_identifier_format, nil
  option :idp_sso_target_url_runtime_params, {}