Let CanReadToken return True for EncyptedAssertion

EncryptedAssertions will be supported so CanRead token shoud return true if a SAML2 token has an EncryptedAssertion element.
AzureAD · May 27, 2020 · bd54a1c · bd54a1c
1 parent a9a4da0
commit bd54a1c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/Microsoft.IdentityModel.Tokens.Saml/Saml2/Saml2SecurityTokenHandler.cs b/src/Microsoft.IdentityModel.Tokens.Saml/Saml2/Saml2SecurityTokenHandler.cs
@@ -128,7 +128,8 @@ public override bool CanReadToken(XmlReader reader)
             if (reader == null)
                 return false;
 
-            return reader.IsStartElement(Saml2Constants.Elements.Assertion, Saml2Constants.Namespace);
+            return (reader.IsStartElement(Saml2Constants.Elements.Assertion, Saml2Constants.Namespace)
+                   || reader.IsStartElement(Saml2Constants.Elements.EncryptedAssertion, Saml2Constants.Namespace));
         }
 
         /// <summary>