fix authnresponse

maditya · Oct 7, 2016 · c1a4663 · c1a4663
1 parent 3acf8ec
commit c1a4663
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/authnresponse.go b/authnresponse.go
@@ -88,6 +88,9 @@ func (r *Response) Validate(s *ServiceProviderConfig) error {
 	if r.Assertion.Subject.SubjectConfirmation.SubjectConfirmationData.Recipient != s.AssertionConsumerServiceURL {
 		return errors.New("subject recipient mismatch, expected: " + s.AssertionConsumerServiceURL + " not " + r.Assertion.Subject.SubjectConfirmation.SubjectConfirmationData.Recipient)
 	}
+	if s.IDPCert == nil {
+		return errors.New("IDPCert is nil")
+	}
 
 	err := VerifyResponseSignature(r.originalString, s.IDPCert.Raw)
 	if err != nil {