What does wantAssertionsSigned / wantMessageSigned do

[LouisStairwage]

Hi,

I noticed while testing the lib inside my application that whatever value was assigned to wantAssertionsSigned or wantMessageSigned the response would be accepted as long as there is a signature (whether the signature is for the message or the assertion).

Here are the results with the following values for respectively wantAssertionsSigned and wantMessageSigned :

• true, true -> the response is rejected if there is no signature, the response is accepted whatever is signed
• false, false -> same
• true, false -> same
• false, true -> same

Is this the expected behaviour of the lib ? What are these parameters for?

Thanks in advance!