SLS-25 - Assertion Signature Verification

[alessio-cialini]

List of Changes

• Retrieved IDP data in the assertion verification flow
• Introduced assertion signature validation
• Removed tag list exception from core
• Added assertion instant timestamp conversion

Motivation and Context

Completed the assertion verification flow by adding the signature validation

How Has This Been Tested?

Added unit test

Screenshots (if appropriate):

Types of changes

• Chore (nothing changes by a user perspective)
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

• My change requires a change to the documentation.
• I have updated the documentation accordingly.

[github-actions]

File	Coverage [93.16%]	🍏
LollipopSamlAssertionWrapper.java	100%	🍏
HttpVerifierHandlerInterceptorIntegrationTest.java	100%	🍏
AssertionVerificationResultCode.java	100%	🍏
ErrorRetrievingIdpCertDataException.java	100%	🍏
ErrorValidatingAssertionSignature.java	100%	🍏
LollipopConsumerCommandImplTest.java	99.57%	🍏
AssertionVerifierServiceImpl.java	98.45%	🍏
LollipopConsumerCommandImpl.java	94.75%	🍏
IdpCertSimpleClient.java	92.14%	🍏
AssertionVerifierServiceImplTest.java	91.06%	🍏
IdpCertSimpleClientTest.java	75.2%	🍏
LollipopConsumerFactoryHelper.java	66.99%	🍏
IdpCertProviderImpl.java	55%	❌
TestUtils.java	0%	❌

Total Project Coverage	88.52%	🍏

[github-actions]

File	Coverage [93.11%]	🍏
IdpCertProviderImpl.java	100%	🍏
LollipopSamlAssertionWrapper.java	100%	🍏
HttpVerifierHandlerInterceptorIntegrationTest.java	100%	🍏
AssertionVerificationResultCode.java	100%	🍏
ErrorRetrievingIdpCertDataException.java	100%	🍏
ErrorValidatingAssertionSignature.java	100%	🍏
LollipopConsumerCommandImplTest.java	99.57%	🍏
AssertionVerifierServiceImpl.java	98.64%	🍏
LollipopConsumerCommandImpl.java	93.41%	🍏
LollipopConsumerRequestValidationServiceImplTest.java	93.01%	🍏
IdpCertSimpleClient.java	92.14%	🍏
AssertionVerifierServiceImplTest.java	91.29%	🍏
IdpCertProviderImplTest.java	76.86%	🍏
IdpCertSimpleClientTest.java	75.2%	🍏
LollipopConsumerFactoryHelper.java	66.99%	🍏
TagListSearchOutOfBoundException.java	0%	❌

Total Project Coverage	88.64%	🍏

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

93.3% Coverage
0.0% Duplication