api7/lua-resty-saml

View on GitHub

Stars: 2
Forks: 3
Open beginner issues: 0
Indexed issues: 17
Avg merge: 2d 20h
Merged PRs (30d): 3

Dominant language: Perl
License: Apache-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

17 open issues indexed

Loading resty.saml replaces the host's random seed with time + pid Open

api7/lua-resty-saml#61 · 1 assignee · Opened Sep 17, 2026
Makefile: single-run archive bootstrap and honest dependencies Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

api7/lua-resty-saml#59 · Opened Sep 1, 2026
Unify the three OneTimeUse diagnostics Open

api7/lua-resty-saml#57 · 1 comment · 1 assignee · Opened Aug 31, 2026
Replay record: fallback shorter than known closes, and non-bearer confirmations shrink it Open

api7/lua-resty-saml#56 · 2 comments · 1 assignee · Opened Aug 31, 2026
Refuse more than one OneTimeUse or ProxyRestriction in a Conditions Open

api7/lua-resty-saml#55 · 1 assignee · Opened Aug 27, 2026
Conditions spelled through xsi:type are refused, and the refusal does not say which Open

api7/lua-resty-saml#54 · 1 assignee · Opened Aug 27, 2026
login_callback ignores sess:save() failure, redirecting a user who got no session Open

Difficulty 3/5 1-2 days Newbie friendliness 62/100

api7/lua-resty-saml#52 · Opened Aug 27, 2026
Replay tracking is per instance, and a complete guarantee needs a shared record Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

api7/lua-resty-saml#51 · Opened Aug 26, 2026
idp_issuers is enforced on login but not on logout Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

api7/lua-resty-saml#49 · 1 comment · 1 reaction · Opened Aug 20, 2026
The issuer allow-list is not weighed again when a session resumes Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

api7/lua-resty-saml#48 · 1 comment · 1 reaction · Opened Aug 20, 2026
Values from the network are logged unescaped, so log lines can be forged Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

api7/lua-resty-saml#47 · Opened Aug 20, 2026
SubjectConfirmation Method is read but never checked Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

api7/lua-resty-saml#45 · 1 comment · 1 reaction · Opened Aug 19, 2026
saml.verify_doc is exported without the identity-coverage check Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

api7/lua-resty-saml#35 · 1 comment · 1 reaction · Opened Aug 12, 2026
Anchor the identity XPaths to the root Response Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

api7/lua-resty-saml#34 · 1 comment · 1 reaction · Opened Aug 12, 2026
invalid signature algorithm Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

api7/lua-resty-saml#22 · Opened Aug 19, 2023
feat: remove xsd files from luarocks install Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

api7/lua-resty-saml#13 · Opened Sep 4, 2022
feat: return exception status and info Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

api7/lua-resty-saml#12 · Opened Sep 2, 2022

api7/lua-resty-saml

Get new issues in your inbox