Provide KeyInfo as part of the Signature object when an object is signed

[fhanik]

KeyInfo is typically provided as part of a SAML objects signature.

Example: https://login.run.pivotal.io/saml/metadata (check the child elements, //ds:Signature/ds:KeyInfo

Also mentioned on stack overflow: https://stackoverflow.com/questions/66369794/no-keyinfo-generator-provided-for-spring-security-saml2-service-provider

[jzheaux]

Thanks, @fhanik, for the PR! This is now merged into main via adad2da. Because the directory structure was refactored since the PR was submitted, I also did a rebase in 8e0a91d

[surkoff-v]

After this commit it has KeyInfo for AuthRequest but it still hasn't for Logout request initiated from RP side

[surkoff-v]

After this commit it has KeyInfo for AuthRequest but it still hasn't for Logout request initiated from RP side

There are two versions org.springframework.security.saml2.provider.service.web.authentication.logoutOpenSamlSigningUtils and org.springframework.security.saml2.provider.service.web.authentication.logout.OpenSamlSigningUtils the first one has signingConfiguration.setKeyInfoGeneratorManager(buildSignatureKeyInfoGeneratorManager()); but the second don't. (5.6.0-RC1)