From 0cc17e46d23e0cf76000d92141b6c9236fb60df9 Mon Sep 17 00:00:00 2001
From: ahacker1 <alex@securesaml.com>
Date: Mon, 7 Jul 2025 14:43:04 -0400
Subject: [PATCH] samlcontent should be decrypted SAML response (sign then
 encrypt)

---
 src/flow.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/flow.ts b/src/flow.ts
index d154996a..125810b6 100644
--- a/src/flow.ts
+++ b/src/flow.ts
@@ -225,6 +225,7 @@ async function postFlow(options): Promise<FlowResult> {
       // Encrypted Assertion, the assertion is signed
       const result = await libsaml.decryptAssertion(self, samlContent);
       const decryptedDoc = result[0];
+      samlContent = decryptedDoc;
       const [decryptedDocVerified, verifiedDecryptedAssertion] = libsaml.verifySignature(decryptedDoc, verificationOptions);
       if (decryptedDocVerified) {
         // extractor depends on signed content