Validate method is now called idp_cert_fingerprint_validator and is a…

… lambda.
omniauth · Oct 14, 2014 · b4d920a · b4d920a
1 parent de18afd
commit b4d920a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/omniauth/strategies/saml.rb b/lib/omniauth/strategies/saml.rb
@@ -30,8 +30,8 @@ def callback_phase
         end
 
         # Call a fingerprint validation method if there's one
-        if options.idp_cert_fingerprint_validate_method
-          fingerprint_exists = eval(options.idp_cert_fingerprint_validate_method << '(\'' << response_fingerprint << '\')')
+        if options.idp_cert_fingerprint_validator
+          fingerprint_exists = options.idp_cert_fingerprint_validator[response_fingerprint]
           unless fingerprint_exists
             raise OmniAuth::Strategies::SAML::ValidationError.new("Non-existent fingerprint")
           end