SAML2 conditions/audience/subject confirmation technical model. Reconstruct the ...

{ "body": { "artifact": { "samlConditions": { "claim": null, "data": { "assertion_id": "assertion", "audience_restrictions": [ [ "urn:a", "urn:b" ] ], "clock_skew_ms": 0, "expected_in_response_to": "request", "expected_recipient": "https://example.test/acs", "not_before": 1000, "not_on_or_after": 2000, "now": 1000, "one_time_use": false, "prior_assertion_ids": [], "proxy_restriction_present": false, "requester_address": null, "service_audiences": [ "urn:a" ], "subject_confirmations": [ { "address": null, "in_response_to": "request", "method": "bearer", "not_before": null, "not_on_or_after": 3000, "recipient": "https://example.test/acs" } ], "unknown_condition_present": false } } } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 1, "evidence": [ { "page_indices": [], "page_url": null, "pattern": "saml20-decoded-time-audience-oneuse-bearer-condition-correspondence_scoped_evidence", "type": "artifact" } ], "limits": [ "Complete bounded supplied artifact only. computed uses 6dp numbers; full result SHA256 uses UTF16-sorted compact JSON, scalar Unicode unchanged and -0=0. No external lookup, trust/identity or legal verdict." ], "module": "saml20-decoded-time-audience-oneuse-bearer-condition-correspondence", "state": "observed", "value": { "claim_matches": false, "computed": { "any_subject_confirmation_satisfied": true, "audience_restrictions": [ { "index": 0, "matched": true } ], "condition_failures": [], "conditions_satisfied": true, "subject_confirmations": [ { "index": 0, "satisfied": true, "violations": [] } ] }, "computed_sha256": "ab8c900838782c6339d4f669fac87bd690112cc06a707cb2251af423df0cb3c9" }, "warnings": [] } ], "known_count": 1, "scope": { "contact_values_returned": false, "network": false, "supplied_artifact_only": true }, "warnings": [] }, "type": "json" }