Estrapolazione dati da Response

[alexminichino]

Come ottengo i dati dell'utente una volta effettuato il login tramite l'IDP?
Allego response dell'IDP (https://github.com/italia/spid-testenv), ho notato che manca AttributeStatement. Ho tralasciato qualcosa ?
Grazie in anticipo. :)

<?xml version=\"1.0\" encoding=\"UTF-8\"?> <saml2p:Response Destination=\"http://localhost:3000/spid/sso\" ID=\"_1456e3c70befc4cfcb993ed4b8f1b534\" InResponseTo=\"_1dcd1dd4-80fe-4552-94c9-bfb6e6859e43\" IssueInstant=\"2018-01-10T14:58:46.668Z\" Version=\"2.0\" xmlns:saml2p=\"urn:oasis:names:tc:SAML:2.0:protocol\"> <saml2:Issuer Format=\"urn:oasis:names:tc:SAML:2.0:nameid-format:entity\" xmlns:saml2=\"urn:oasis:names:tc:SAML:2.0:assertion\">spid-testenv-identityserver </saml2:Issuer> <saml2p:Status> <saml2p:StatusCode Value=\"urn:oasis:names:tc:SAML:2.0:status:Success\"/> </saml2p:Status> <saml2:Assertion ID=\"_9a2508a838b21a94fe11a2845bbf34e6\" IssueInstant=\"2018-01-10T14:58:46.668Z\" Version=\"2.0\" xmlns:saml2=\"urn:oasis:names:tc:SAML:2.0:assertion\"> <saml2:Issuer Format=\"urn:oasis:names:tc:SAML:2.0:nameid-format:entity\">spid-testenv-identityserver</saml2:Issuer> <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/> <ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/> <ds:Reference URI=\"#_9a2508a838b21a94fe11a2845bbf34e6\"> <ds:Transforms> <ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/> <ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/> </ds:Transforms> <ds:DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"/> <ds:DigestValue>cTj3/+EUhJMxhX6Tynew4u6chu/P6rD4dzKIB9LOfrk=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue>\nOan0pWjHVb4Z34T5+QicNWh6RdXa96HLafh7aX+PXyeUgwqdIOtfhSAmxUgcL1JRdiSverFqYD73\nOixvFclfRjxJCUgjDyLXqPfIsAxtF5tlEfUmzdzOAcEtziorRo5e2nWVYgITexzMo1ktW5sZMHcQ\nJWeI7d8hx5tVtRE6+qE=</ds:SignatureValue> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>MIICNTCCAZ6gAwIBAgIES343gjANBgkqhkiG9w0BAQUFADBVMQswCQYDVQQGEwJVUzELMAkGA1UE\nCAwCQ0ExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxDTALBgNVBAoMBFdTTzIxEjAQBgNVBAMMCWxv\nY2FsaG9zdDAeFw0xMDAyMTkwNzAyMjZaFw0zNTAyMTMwNzAyMjZaMFUxCzAJBgNVBAYTAlVTMQsw\nCQYDVQQIDAJDQTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzENMAsGA1UECgwEV1NPMjESMBAGA1UE\nAwwJbG9jYWxob3N0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUp/oV1vWc8/TkQSiAvTou\nsMzOM4asB2iltr2QKozni5aVFu818MpOLZIr8LMnTzWllJvvaA5RAAdpbECb+48FjbBe0hseUdN5\nHpwvnH/DW8ZccGvk53I6Orq7hLCv1ZHtuOCokghz/ATrhyPq+QktMfXnRS4HrKGJTzxaCcU7OQID\nAQABoxIwEDAOBgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADgYEAW5wPR7cr1LAdq+IrR44i\nQlRG5ITCZXY9hI0PygLP2rHANh+PYfTmxbuOnykNGyhM6FjFLbW2uZHQTY1jMrPprjOrmyK5sjJR\nO4d1DeGHT/YnIjs9JogRKv4XHECwLtIVdAbIdWHEtVZJyMSktcyysFcvuhPQK8Qc/E/Wq8uHSCo=</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </ds:Signature> <saml2:Subject> <saml2:NameID Format=\"urn:oasis:names:tc:SAML:2.0:nameid-format:transient\">ettore</saml2:NameID> <saml2:SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\"> <saml2:SubjectConfirmationData InResponseTo=\"_1dcd1dd4-80fe-4552-94c9-bfb6e6859e43\" NotOnOrAfter=\"2018-01-10T15:03:46.668Z\" Recipient=\"http://localhost:3000/spid/sso\"/> </saml2:SubjectConfirmation> </saml2:Subject> <saml2:Conditions NotBefore=\"2018-01-10T14:58:46.668Z\" NotOnOrAfter=\"2018-01-10T15:03:46.668Z\"> <saml2:AudienceRestriction> <saml2:Audience>http://localhost:3000/spid/metadata</saml2:Audience> </saml2:AudienceRestriction> </saml2:Conditions> <saml2:AuthnStatement AuthnInstant=\"2018-01-10T14:58:46.668Z\" SessionIndex=\"d0bb53be-7380-4abd-9744-ca8d89f56fc9\"> <saml2:AuthnContext> <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef> </saml2:AuthnContext> </saml2:AuthnStatement> </saml2:Assertion> </saml2p:Response>

[Jecko-o]

Ciao, il repository ufficiale della gemma è https://github.com/italia/spid-rails.
Scusa se rispondo solo ora, non avevo attive le notifiche per qesto repository, che è semplicemente una app dimostrativa che utilizza la gemma stessa.
Gli attributi utente desiderati non sono ancora configurabili alla creazione della richiesta dell'SP, ragione per cui allo stato attuale l'unico dato con cui risponde l'IDP è il successo o meno dell'operazione di login.
Prima di portare avanti la personalizzazione lato SP della richiesta, al momento sto facendo un refactor della parte completata fino ad ora.