Bugfix: resource can be an empty string

simplesamlphp · Feb 9, 2025 · 4bbfb95 · 4bbfb95
1 parent db1c237
commit 4bbfb95
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php b/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php
@@ -6,13 +6,14 @@
 
 use DOMElement;
 use SimpleSAML\Assert\Assert;
-use SimpleSAML\SAML11\Type\{AnyURIValue, StringValue};
+use SimpleSAML\SAML11\Type\StringValue;
 use SimpleSAML\XML\Exception\{
     InvalidDOMElementException,
     MissingElementException,
     SchemaViolationException,
     TooManyElementsException,
 };
+use SimpleSAML\XML\Type\AnyURIValue;
 
 use function strval;
 
@@ -34,6 +35,7 @@ abstract class AbstractAuthorizationDecisionStatementType extends AbstractSubjec
      */
     final public function __construct(
         Subject $subject,
+        // Uses the base AnyURIValue because the specification allows for this attribute to be empty
         protected AnyURIValue $resource,
         protected DecisionTypeEnum $decision,
         protected array $action = [],