update saml gems

fixes CNVS-34925

and pass along a max message size setting

Change-Id: I9d61a9cecc130cdc94c0f3541f9dbefd347b83b6
Reviewed-on: https://gerrit.instructure.com/105752
Tested-by: Jenkins
Reviewed-by: Simon Williams <simon@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>

Gemfile.d/app.rb

@@ -76,8 +76,8 @@ gem 'ritex', '1.0.1', require: false
 gem 'rotp', '3.3.0', require: false
 gem 'net-ldap', '0.10.1', require: false
 gem 'ruby-duration', '3.2.3', require: false
-gem 'ruby-saml-mod', '0.3.2'
-gem 'saml2', '1.0.8', require: false
+gem 'ruby-saml-mod', '0.3.4'
+gem 'saml2', '1.0.10', require: false
   gem 'nokogiri-xmlsec-me-harder', '0.9.3pre', require: false, github: 'instructure/nokogiri-xmlsec-me-harder', ref: '57d071040cc4649db9f158e09bbcea028271a4a6'
 gem 'rubycas-client', '2.3.9', require: false
 gem 'rubyzip', '1.2.0', require: 'zip'

config/initializers/saml.rb

@@ -0,0 +1,12 @@
+Rails.configuration.to_prepare do
+  require 'saml2'
+  require 'onelogin/saml'
+
+  block = -> do
+    Onelogin::Saml.config[:max_message_size] =
+      SAML2.config[:max_message_size] =
+        Setting.get('saml_max_message_size', 1.megabyte).to_i
+  end
+  block.call
+  Canvas::Reloader.on_reload(&block)
+end