Let's not break anything for now

saml-idp · Oct 28, 2024 · 4a3fe48 · 4a3fe48
1 parent be8a562
commit 4a3fe48
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/saml_idp/controller.rb b/lib/saml_idp/controller.rb
@@ -34,7 +34,10 @@ def acs_url
 
     def validate_saml_request(raw_saml_request = params[:SAMLRequest])
       decode_request(raw_saml_request, params[:Signature], params[:SigAlg], params[:RelayState])
-      valid_saml_request?
+      return true if valid_saml_request?
+
+      head :forbidden if defined?(::Rails)
+      false
     end
 
     def decode_request(raw_saml_request, signature, sig_algorithm, relay_state)