From 5f476db5c00aa49bf38da7b8f589e083eaef0dcb Mon Sep 17 00:00:00 2001 From: Alexander Zobnin Date: Fri, 3 Feb 2023 12:30:12 +0100 Subject: [PATCH] Only fail if no signature present at all --- service_provider.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/service_provider.go b/service_provider.go index c5e15c1a..14f2a114 100644 --- a/service_provider.go +++ b/service_provider.go @@ -1547,7 +1547,7 @@ func (sp *ServiceProvider) ValidateLogoutResponseRedirect(query url.Values) erro } if err := sp.validateSignature(doc.Root()); err != nil { - if err != errSignatureElementNotPresent && !hasValidSignature { + if err != errSignatureElementNotPresent || !hasValidSignature { retErr.PrivateErr = err return retErr }