First steps on Assertion validation

src/Sustainsys.Saml2/Saml/SamlAssertion.cs

@@ -0,0 +1,18 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace Sustainsys.Saml2.Saml;
+
+/// <summary>
+/// A Saml assertion
+/// </summary>
+public class SamlAssertion
+{
+    /// <summary>
+    /// Issuer of the assertion.
+    /// </summary>
+    public NameId Issuer { get; set; } = default!;
+}

src/Sustainsys.Saml2/Validation/ISamlAssertionValidator.cs

@@ -0,0 +1,32 @@
+using Sustainsys.Saml2.Saml;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace Sustainsys.Saml2.Validation;
+
+/// <summary>
+/// Validates an asseriton
+/// </summary>
+public interface ISamlAssertionValidator
+{
+    /// <summary>
+    /// Validate a Saml assertion
+    /// </summary>
+    /// <param name="assertion"></param>
+    /// <param name="parameters"></param>
+    void Validate(SamlAssertion assertion, SamlAssertionValidationParameters parameters);
+}
+
+/// <summary>
+/// DTO carrying parameters for Saml assertion validation
+/// </summary>
+public class SamlAssertionValidationParameters
+{
+    /// <summary>
+    /// Valid issuer of the response and assertions
+    /// </summary>
+    public NameId? ValidIssuer { get; set; }
+}

src/Sustainsys.Saml2/Validation/ISamlResponseValidator.cs

@@ -28,7 +28,13 @@ public interface ISamlResponseValidator
 public class SamlResponseValidationParameters
 {
     /// <summary>
-    /// Valid issuer of the response and assertions
+    /// Validation parameters for assertions embedded in the response.
     /// </summary>
-    public NameId? ValidIssuer {  get; set; }
+    public required SamlAssertionValidationParameters AssertionValidationParameters { get; set; }
+
+    /// <summary>
+    /// Valid issuer of the response and assertions - returns the ValidIssuer
+    /// of the embedded SamlAssertionValidationParameters to ensure they are the same.
+    /// </summary>
+    public NameId? ValidIssuer { get => AssertionValidationParameters.ValidIssuer; }
 }

src/Sustainsys.Saml2/Validation/SamlAssertionValidator.cs

@@ -0,0 +1,22 @@
+using Sustainsys.Saml2.Saml;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace Sustainsys.Saml2.Validation;
+
+/// <summary>
+/// Saml Assertion validator
+/// </summary>
+public class SamlAssertionValidator : ISamlAssertionValidator
+{
+    /// <inheritdoc/>
+    public void Validate(
+        SamlAssertion assertion,
+        SamlAssertionValidationParameters parameters)
+    {
+        // TODO: Remember to validate issuer.
+    }
+}

src/Tests/Sustainsys.Saml2.Tests/Validators/SamlResponseValidatorTests.cs

@@ -24,7 +24,10 @@ SamlResponse CreateSamlResponse() =>
     SamlResponseValidationParameters CreateValidationParameters() =>
         new SamlResponseValidationParameters()
         {
-            ValidIssuer = "https://idp.example.com/Saml2"
+            AssertionValidationParameters = new()
+            {
+                ValidIssuer = "https://idp.example.com/Saml2"
+            }
         };
 
     // The happy path that should just validate the default response