Merge pull request SAML-Toolkits#67 from newrelic/add_destination_att…

…ribute

Added the Destination attribute to the AuthnRequest

lib/onelogin/ruby-saml/authrequest.rb

@@ -42,6 +42,7 @@ def create_authentication_xml_doc(settings)
         root.attributes['ID'] = uuid
         root.attributes['IssueInstant'] = time
         root.attributes['Version'] = "2.0"
+        root.attributes['Destination'] = settings.idp_sso_target_url unless settings.idp_sso_target_url.nil?
 
         # Conditionally defined elements based on settings
         if settings.assertion_consumer_service_url != nil

test/request_test.rb

@@ -19,6 +19,21 @@ class RequestTest < Test::Unit::TestCase
       assert_match /^<samlp:AuthnRequest/, inflated
     end
 
+    should "create the deflated SAMLRequest URL parameter including the Destination" do
+      settings = Onelogin::Saml::Settings.new
+      settings.idp_sso_target_url = "http://example.com"
+      auth_url = Onelogin::Saml::Authrequest.new.create(settings)
+      payload  = CGI.unescape(auth_url.split("=").last)
+      decoded  = Base64.decode64(payload)
+
+      zstream  = Zlib::Inflate.new(-Zlib::MAX_WBITS)
+      inflated = zstream.inflate(decoded)
+      zstream.finish
+      zstream.close
+
+      assert_match /<samlp:AuthnRequest[^<]* Destination='http:\/\/example.com'/, inflated
+    end
+
     should "create the SAMLRequest URL parameter without deflating" do
       settings = Onelogin::Saml::Settings.new
       settings.compress_request = false