passport-saml/test/static/signatures/valid/response.root-signed.assertion-signed.2advice-signed.xml

<?xml version="1.0" encoding="UTF-8"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Destination="https://evil-corp.madness.com/sso/callback" ID="_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" InResponseTo="_e8df3fe5f04237d25670" IssueInstant="2015-08-31T08:54:06+00:00" Version="2.0">
    <saml:Issuer>https://evil-corp.com</saml:Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </samlp:Status>
    <saml:Assertion ID="_bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" IssueInstant="2020-09-25T16:00:00+00:00" Version="2.0">
        <saml:Issuer>https://evil-corp.com</saml:Issuer>
        <saml:Subject>
            <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">[email protected]
            </saml:NameID>
            <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml:SubjectConfirmationData InResponseTo="_e8df3fe5f04237d25670" NotOnOrAfter="2020-09-25T17:00:00+00:00" Recipient="https://evil-corp.madness.com/sso/callback"/>
            </saml:SubjectConfirmation>
        </saml:Subject>
        <saml:Conditions NotBefore="2020-09-25T16:00:00+00:00" NotOnOrAfter="2020-09-25T17:00:00+00:00"/>
        <saml:Advice>
            <saml:Assertion ID="_cccccccccccccccccccccccccccccccc" IssueInstant="2020-09-25T16:00:00+00:00" Version="2.0">
                <saml:Issuer>https://evil-corp.com</saml:Issuer>
                <saml:Subject>
                    <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">
                        [email protected]
                    </saml:NameID>
                    <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                        <saml:SubjectConfirmationData InResponseTo="_e8df3fe5f04237d25670" NotOnOrAfter="2020-09-25T17:00:00+00:00" Recipient="https://evil-corp.madness.com/sso/callback"/>
                    </saml:SubjectConfirmation>
                </saml:Subject>
                <saml:Conditions NotBefore="2020-09-25T16:00:00+00:00" NotOnOrAfter="2020-09-25T17:00:00+00:00"/>
                <saml:AuthnStatement AuthnInstant="2020-09-25T16:00:00+00:00" SessionIndex="_9e315bdf7b1b6732be33c377cf6f5c4f">
                    <saml:AuthnContext>
                        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
                        </saml:AuthnContextClassRef>
                    </saml:AuthnContext>
                </saml:AuthnStatement>
                <saml:AttributeStatement>
                    <saml:Attribute Name="evil-corp.partner">
                        <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                            Jules Winnfield
                        </saml:AttributeValue>
                    </saml:Attribute>
                </saml:AttributeStatement>
            <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_cccccccccccccccccccccccccccccccc"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>iu2GOAhBCOzYaMDtEgXXt0wh0WmAjbmU5hndLXnEKmA=</ds:DigestValue></ds:Reference><ds:Reference URI="#_dddddddddddddddddddddddddddddddd"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>VR+yKd4j4tZ4y5jyEcGdnoLzRUswZG7jzDgo8KUqUYc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>txCUnBcJjDjdMVzwo9nGwnc6FPYRLud2Gdv7hhOKC3/MFEOJXRzOp/8/oqSX4vZRz2q1wy9iB2KeuPD4qCaQ11HqoKRDo6Wsh0FElUQwn65CGdxU/M5i9b+p9V6IA3ICZPJusNTiongj3P5QSgMct78VITXu6aPXytcl4msLBP8mN0uWm1vQ3MqQx55WUVh3Ak9sLqDuN7AMSLbxhUhj7DLPiM7Fp8m2K3ujxYd6Bu/3VasybzRMPT23l4PtK+6l3mx3fcQCa06J8lSAQu6ftYM88UZSqk1qb1VuXE3fRDhX5RhxgZYu7s2nbtRLa7UeHlPxsTF1/1sLcGo6qICJ9g==</ds:SignatureValue></ds:Signature></saml:Assertion>
            <saml:Assertion ID="_dddddddddddddddddddddddddddddddd" IssueInstant="2020-09-25T16:00:00+00:00" Version="2.0">
                <saml:Issuer>https://evil-daughter-corp.com</saml:Issuer>
                <saml:Subject>
                    <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">
                        [email protected]
                    </saml:NameID>
                    <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                        <saml:SubjectConfirmationData InResponseTo="_e8df3fe5f04237d25670" NotOnOrAfter="2020-09-25T17:00:00+00:00" Recipient="https://evil-corp.madness.com/sso/callback"/>
                    </saml:SubjectConfirmation>
                </saml:Subject>
                <saml:Conditions NotBefore="2020-09-25T16:00:00+00:00" NotOnOrAfter="2020-09-25T17:00:00+00:00"/>
                <saml:AuthnStatement AuthnInstant="2020-09-25T16:00:00+00:00" SessionIndex="_9e315bdf7b1b6732be33c377cf6f5c4f">
                    <saml:AuthnContext>
                        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
                        </saml:AuthnContextClassRef>
                    </saml:AuthnContext>
                </saml:AuthnStatement>
                <saml:AttributeStatement>
                    <saml:Attribute Name="evil-corp.real.name">
                        <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                            John Travolta
                        </saml:AttributeValue>
                    </saml:Attribute>
                </saml:AttributeStatement>
            </saml:Assertion>
        </saml:Advice>
        <saml:AuthnStatement AuthnInstant="2020-09-25T16:00:00+00:00" SessionIndex="_9e315bdf7b1b6732be33c377cf6f5c4f">
            <saml:AuthnContext>
                <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
                </saml:AuthnContextClassRef>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement>
            <saml:Attribute Name="evil-corp.egroupid">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                    [email protected]
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="evilcorp.givenname">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Vincent
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="evilcorp.sn">
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">VEGA
                </saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>N9Gq1ZJYURJicBmT3A4Gd/EWE6Vr7LHqC0id8jpYnUI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>S+0tov1bKXu8aE775Wz9I0mcvGQ3epXRKYczqGylWqUgx+jQGE/mDjZJ5Rb5nxirHdfWeAdDGCGJsGxd4Brv54ju42N6hsCiu1shlY/TPgiqsDmEETFt9/THxQ4mwBAZTnNkEy5WNEZyH2lryZwDpQgJdY++Kn/clsp/6HJBXloB0iYfuON961CAi/mnnawaK61gG1d2UtudNdlJlV9XMIpnJz2dhSceWwKbc/9VFXezQIlRs7LM35FhRCeG0SCIVLG+X286dI6blQ697nQUr1MrkF1j4AnNfHyMeomB6RLTHSRd+uvO0PT1rRma6os975WKE0zH+MlLDjNzaDHQww==</ds:SignatureValue></ds:Signature></saml:Assertion>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>qr6Hn6//rOpj+a3hfmFBymXCxGENT6x2mUfXeLTDTLk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>hnek1KP5F4xLeEeIznvPXu+nVcsycTGn4x9ju8GkDqWb8KEYMD8mVnTJjoU59u5sP8U5naQKLeWr3ULuZkM4QYZ7+JHZOBwLo8ryGfRF3ADL+LtvIJEwQJwWRCikfGLJk4BZYvTHF5h3qqBY4nHKsqebFo1BsE1lWTATQNk8rIlsTC5ZVnV+JnS1XGaqHQ2adCQ3ZEfvsPEJD0ZQJOHIqqTFhYszwpOX6Szjlag3O91HLFTTrNgQzkhNNvMBGhthV7LUvE27I8sXhNXqTf6nD1jIKB8sbWWMDmuemvLfJeEcpivi3PAgE7sbK36OeIavjofrXyxxFyA613pj3NJkbg==</ds:SignatureValue></ds:Signature></samlp:Response>