Feature/xsd types

composer.json

@@ -18,8 +18,8 @@
         "psr/clock": "^1.0",
         "psr/log": "^2.0 | ^3.0",
         "simplesamlphp/assert": "^1.8",
-        "simplesamlphp/xml-common": "~1.24.0",
-        "simplesamlphp/xml-security": "~1.13.0"
+        "simplesamlphp/xml-common": "dev-feature/xsd-types",
+        "simplesamlphp/xml-security": "dev-feature/xsd-types"
     },
     "require-dev": {
         "beste/clock": "^3.0",

phpstan.neon

@@ -2,5 +2,3 @@ parameters:
   level: 1
   paths:
     - src
-includes:
-  - phpstan-baseline.neon

src/SAML11/Assert/AnyURITrait.php

@@ -0,0 +1,39 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\SAML11\Assert;
+
+use SimpleSAML\Assert\AssertionFailedException;
+use SimpleSAML\SAML11\Exception\ProtocolViolationException;
+
+/**
+ * @package simplesamlphp/saml11
+ */
+trait AnyURITrait
+{
+    /**
+     * @param string $value
+     * @param string $message
+     */
+    protected static function validAnyURI(string $value, string $message = ''): void
+    {
+        parent::validAnyURI($value, $message);
+
+        try {
+            /**
+             * 1.2.1 String and URI Values
+             *
+             * Unless otherwise indicated in this specification, all URI reference values MUST consist
+             * of at least one non-whitespace character
+             */
+            static::notWhitespaceOnly(
+                $value,
+                $message ?: '%s is not a SAML1.1-compliant URI',
+                ProtocolViolationException::class,
+            );
+        } catch (AssertionFailedException $e) {
+            throw new ProtocolViolationException($e->getMessage());
+        }
+    }
+}

src/SAML11/Assert/Assert.php

@@ -12,16 +12,18 @@
  * @package simplesamlphp/saml11
  *
  * @method static void validDateTime(mixed $value, string $message = '', string $exception = '')
- * @method static void validURI(mixed $value, string $message = '', string $exception = '')
  * @method static void validEntityID(mixed $value, string $message = '', string $exception = '')
+ * @method static void validURI(mixed $value, string $message = '', string $exception = '')
  * @method static void nullOrValidDateTime(mixed $value, string $message = '', string $exception = '')
- * @method static void nullOrValidURI(mixed $value, string $message = '', string $exception = '')
  * @method static void nullOrValidEntityID(mixed $value, string $message = '', string $exception = '')
+ * @method static void nullOrValidURI(mixed $value, string $message = '', string $exception = '')
  * @method static void allValidDateTime(mixed $value, string $message = '', string $exception = '')
- * @method static void allValidURI(mixed $value, string $message = '', string $exception = '')
  * @method static void allValidEntityID(mixed $value, string $message = '', string $exception = '')
+ * @method static void allValidURI(mixed $value, string $message = '', string $exception = '')
  */
 class Assert extends BaseAssert
 {
-    use CustomAssertionTrait;
+    use AnyURITrait;
+    use DateTimeTrait;
+    use StringTrait;
 }

src/SAML11/Assert/DateTimeTrait.php

@@ -0,0 +1,39 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\SAML11\Assert;
+
+use SimpleSAML\Assert\AssertionFailedException;
+use SimpleSAML\SAML11\Exception\ProtocolViolationException;
+
+/**
+ * @package simplesamlphp/saml11
+ */
+trait DateTimeTrait
+{
+    /**
+     * @param string $value
+     * @param string $message
+     */
+    protected static function validDateTime(string $value, string $message = ''): void
+    {
+        parent::validDateTime($value, $message);
+
+        try {
+            /**
+             * 1.2.2 Time Values
+             *
+             * All SAML time values have the type xsd:dateTime, which is built in to the W3C XML Schema Datatypes
+             * specification [Schema2], and MUST be expressed in UTC form
+             */
+            static::endsWith(
+                $value,
+                'Z',
+                $message ?: '%s is not a DateTime expressed in the UTC timezone using the \'Z\' timezone identifier.',
+            );
+        } catch (AssertionFailedException $e) {
+            throw new ProtocolViolationException($e->getMessage());
+        }
+    }
+}

src/SAML11/Assert/StringTrait.php

@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\SAML11\Assert;
+
+use SimpleSAML\Assert\AssertionFailedException;
+use SimpleSAML\SAML11\Exception\ProtocolViolationException;
+use SimpleSAML\XML\Exception\SchemaViolationException;
+
+/**
+ * @package simplesamlphp/saml11
+ */
+trait StringTrait
+{
+    /**
+     * @param string $value
+     * @param string $message
+     */
+    protected static function validString(string $value, string $message = ''): void
+    {
+        parent::validString($value, $message, SchemaViolationException::class);
+
+        try {
+            /**
+             * 1.2.1 String and URI Values
+             *
+             * All strings in SAML messages MUST consist of at least one non-whitespace character
+             * (whitespace is defined in the XML Recommendation [XML] §2.3).
+             * Empty and whitespace-only values are disallowed.
+             */
+            static::notWhitespaceOnly($value, $message ?: '%s is not a SAML1.1-compliant string');
+        } catch (AssertionFailedException $e) {
+            throw new ProtocolViolationException($e->getMessage());
+        }
+    }
+}