oasis | The chat and forums platform for communities | Collaboration library

I have an XML file I am reading from and trying to deserialize into an object. I get this error when I try:

System.InvalidOperationException: 'There is an error in XML document (2, 2).' InvalidOperationException: was not expected.

Here is the XML file:

I'm using FastAPI and I need to represent different STIX 2 objects (from MITRE ATT&CK) with a corresponding/equivalent Pydantic model in order to return them as a response JSON.

Let's consider the AttackPattern object.

Actually, we use Google IdP as a SSO / SAML authentication type for our application. We have configured it to connect our users to our application and it works fine. But recently, we have also wanted to ask a reauthentication to our users for different actions that could happen during the application lifecycle.

In deeper details, when we send a SAML request to the Google Idp, we add the attribute ForceAuthn="true" in the node "AuthnRequest" and we also add a AuthnContextClassRef to ask explicitly that we want a reauthentication by credentials.

When we send this SAML request to the Google IdP, the problem is that the IdP server doesn't ask credentials to the end user and redirect directly to the application with a successful response.

Is that normal ? Does the Google IdP support the attribute ForceAuthn="true" ? I didn't find any documentation on this topic.

Here is an example of the SAML request that has been sent to the IdP:

I have a Spring Boot app which uses Hibernate to generate the below query to a postgresql database. On a fast, local system (6 fast cores with HT, lots of ram, fast ssd) the query to the database runs at a reasonable 12-65 ms.

To my surprise, once I deployed to one of Digital Ocean's virtual servers, the response of the same query dropped to an unacceptable 150-250 ms or higher. Since this is still a test environment, with almost no data on or traffic to the server, I wasn't really expecting even the cheapest servers, with only 1 shared CPU and 2gb of ram, to have any problems with this query. Am I simply in the wrong here? Upgrading the CPU to something heavier increased the performance back to what I was expecting.

In any case, is there anything wrong with the below query? Can it be optimized further? Since it's an important part of the app, I want it to be as performant as possible. Since the joins are likely taking the majority of the execution time, I'm considering smashing all the tables together into one table, at which point I'd only need a large where clause to achieve the same but without the joins. Would that be faster?

I am implementing SSO using an external Identity provider to which I do not have access yet.

The IDP metadata IDPSSODescriptor has one SingleSignOnService tag with a binding value of: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST

Does this imply that I cannot initiate an authentication request to the SingleSignOnService location with a GET request or that the service will respond with a POST request?

I want to deploy the simple express application but I am stuck at a weird problem that I don't know how to solve. The problem is when I am writing the inline script in HTML file it is working perfectly fine but after using other js file instead of writing inline the Unexpected token: '<' error occurs.

This is working

I'm using the ITfoxtec Identity SAML2 library with Keycloak as IdP. When requesting the IdP metadata information, the ITfoxtec Identity SAML2 library seems not to recognize the tag and expects a as the top level element in the metadata xml. Use of is described in https://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf

Please how can I get value of attribute Value of element StatusCode in this XML: