Opensaml - tamper saml response for testing

Question

I need to test a service provider implementation and we are using opensaml. I want to alter a given saml response and do permutation of assertion s elements , inject more assertion and so on. I was able to cover some cases by using opensaml method itself like getassertions on saml response object. But i see that if i want to move elements around or do more complex manipulation i would need to play with the respone as dom document . Does opensaml provide such funcutionality? If not how i can create an encoded response from the modified xml?.thanks

Answer 1

如果您想以不符合SAML标准的方式处理XML，那么您就无法使用OpenSAML，“移动元素”意味着这一点。在这种情况下，我会尝试手动制作XML，然后根据SAML规范中的信息编写手动编码器。