SubjectConfirmationRecipientMatches.php

Go to the documentation of this file.

<?php

namespace SAML2\Assertion\Validation\ConstraintValidator;

use SAML2\Assertion\Validation\Result;
use SAML2\Assertion\Validation\SubjectConfirmationConstraintValidator;
use SAML2\Configuration\Destination;
use SAML2\XML\saml\SubjectConfirmation;

class SubjectConfirmationRecipientMatches implements
    SubjectConfirmationConstraintValidator
{
    private $destination;

    public function __construct(Destination $destination)
    {
        $this->destination = $destination;
    }

    public function validate(
        SubjectConfirmation $subjectConfirmation,
        Result $result
    ) {
        $recipient = $subjectConfirmation->SubjectConfirmationData->Recipient;
        if ($recipient && !$this->destination->equals(new Destination($recipient))) {
            $result->addError(sprintf(
                'Recipient in SubjectConfirmationData ("%s") does not match the current destination ("%s")',
                $recipient,
                $this->destination
            ));
        }
    }
}