From e6afa05c156d0f8818861807fee6cec72adff1e0 Mon Sep 17 00:00:00 2001 From: Andres Hermosilla <465024+rezen@users.noreply.github.com> Date: Wed, 29 Nov 2023 10:38:26 -0800 Subject: [PATCH] Update the SignatureMethod to default to RSASHA256SignatureMethod --- samlsp/new.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/samlsp/new.go b/samlsp/new.go index 81fa75f6..4efb3e3d 100644 --- a/samlsp/new.go +++ b/samlsp/new.go @@ -99,7 +99,7 @@ func DefaultServiceProvider(opts Options) saml.ServiceProvider { if opts.ForceAuthn { forceAuthn = &opts.ForceAuthn } - signatureMethod := dsig.RSASHA1SignatureMethod + signatureMethod := dsig.RSASHA256SignatureMethod if !opts.SignRequest { signatureMethod = "" }