From 4bbfb95c9fbf3633611a7793eaa35635fc598977 Mon Sep 17 00:00:00 2001
From: Tim van Dijen <tvdijen@gmail.com>
Date: Sun, 9 Feb 2025 18:51:13 +0100
Subject: [PATCH] Bugfix: resource can be an empty string

---
 .../XML/saml/AbstractAuthorizationDecisionStatementType.php   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php b/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php
index 25ca59d..b6bd2e9 100644
--- a/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php
+++ b/src/SAML11/XML/saml/AbstractAuthorizationDecisionStatementType.php
@@ -6,13 +6,14 @@
 
 use DOMElement;
 use SimpleSAML\Assert\Assert;
-use SimpleSAML\SAML11\Type\{AnyURIValue, StringValue};
+use SimpleSAML\SAML11\Type\StringValue;
 use SimpleSAML\XML\Exception\{
     InvalidDOMElementException,
     MissingElementException,
     SchemaViolationException,
     TooManyElementsException,
 };
+use SimpleSAML\XML\Type\AnyURIValue;
 
 use function strval;
 
@@ -34,6 +35,7 @@ abstract class AbstractAuthorizationDecisionStatementType extends AbstractSubjec
      */
     final public function __construct(
         Subject $subject,
+        // Uses the base AnyURIValue because the specification allows for this attribute to be empty
         protected AnyURIValue $resource,
         protected DecisionTypeEnum $decision,
         protected array $action = [],