Process nested StatusCode

Author: pitbulk

src/onelogin/saml2/authn_request.py

@@ -59,8 +59,8 @@ def __init__(self, settings):
                 provider_name_str = 'ProviderName="%s"' % organization_data[lang]['displayname']
 
         requested_authn_context_str = ''
-        if 'requestedAuthnContext' in security.keys() and security['requestedAuthnContext'] != False:
-            if security['requestedAuthnContext'] == True:
+        if 'requestedAuthnContext' in security.keys() and security['requestedAuthnContext'] is not False:
+            if security['requestedAuthnContext'] is True:
                 requested_authn_context_str = """    <samlp:RequestedAuthnContext Comparison="exact">
         <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
     </samlp:RequestedAuthnContext>"""

src/onelogin/saml2/utils.py

@@ -684,7 +684,11 @@ def get_status(dom):
 
         message_entry = OneLogin_Saml2_Utils.query(dom, '/samlp:Response/samlp:Status/samlp:StatusMessage', status_entry[0])
         if len(message_entry) == 0:
-            status['msg'] = ''
+            subcode_entry = OneLogin_Saml2_Utils.query(dom, '/samlp:Response/samlp:Status/samlp:StatusCode/samlp:StatusCode', status_entry[0])
+            if len(subcode_entry) > 0:
+                status['msg'] = subcode_entry[0].values()[0]
+            else:
+                status['msg'] = ''
         else:
             status['msg'] = message_entry[0].text