picketlink/federation — pull request #158 by junxiong (2013-03-26 03:48:02+00:00)
Title: Avoid unmatched SAMLRequestMessage and bindingProfile

SAML request message is stored in session for later usage, but the binding type is got from current request every time.

This may introduce a possibility which cause the IDPWebRequestUtil instance to deal with a original post binding SAML request message as redirect binding. Since the format of the message between posting and redirect binding is different, the request message can not be pared correctly.