@absolutejs/auth 0.45.7 → 0.45.8

package/dist/index.d.ts

@@ -15266,6 +15266,7 @@ export { ssoDiscoveryRoute } from './sso/discoveryRoute';
 export { oidcSsoRoutes } from './sso/oidcRoutes';
 export { samlIdpRoutes } from './sso/samlIdpRoutes';
 export { samlSsoRoutes } from './sso/samlRoutes';
+export { createNodeSamlAdapter } from './sso/nodeSamlAdapter';
 export { createInMemorySamlServiceProviderStore } from './sso/inMemorySamlServiceProviderStore';
 export { createInMemorySsoConnectionStore } from './sso/inMemorySsoConnectionStore';
 export { createNeonSamlServiceProviderStore, createPostgresSamlServiceProviderStore, samlServiceProvidersTable } from './sso/postgresSamlServiceProviderStore';

package/dist/index.js

@@ -25462,6 +25462,57 @@ var samlIdpRoutes = ({
     ssoUrl: ssoUrlFor(request.url)
   })));
 };
+// src/sso/nodeSamlAdapter.ts
+var STANDARD_PROFILE_KEYS = new Set([
+  "ID",
+  "getAssertion",
+  "getAssertionXml",
+  "getSamlResponseXml",
+  "issuer",
+  "mainAttributes",
+  "nameID",
+  "nameIDFormat",
+  "sessionIndex",
+  "spNameQualifier"
+]);
+var createNodeSamlAdapter = async () => {
+  const { SAML } = await import("@node-saml/node-saml");
+  const build = (acsUrl, connection) => {
+    const spEntityId = new URL(acsUrl).origin;
+    return new SAML({
+      audience: spEntityId,
+      callbackUrl: acsUrl,
+      entryPoint: connection.config.idpSsoUrl,
+      idpCert: connection.config.idpX509Cert,
+      issuer: spEntityId,
+      logoutUrl: connection.config.idpSloUrl,
+      wantAssertionsSigned: true
+    });
+  };
+  return {
+    createAuthorizationUrl: ({ acsUrl, connection, relayState }) => build(acsUrl, connection).getAuthorizeUrlAsync(relayState ?? "", undefined, {}),
+    getServiceProviderMetadata: ({ acsUrl, connection }) => build(acsUrl, connection).generateServiceProviderMetadata(null),
+    validateAssertion: async ({ acsUrl, connection, samlResponse }) => {
+      const { profile: profile2 } = await build(acsUrl, connection).validatePostResponseAsync({ SAMLResponse: samlResponse });
+      if (!profile2) {
+        throw new Error("SAML response contained no assertion profile");
+      }
+      const attributes = {};
+      for (const [key, value] of Object.entries(profile2)) {
+        if (!STANDARD_PROFILE_KEYS.has(key))
+          attributes[key] = value;
+      }
+      const email = profile2.email ?? (profile2.nameID.includes("@") ? profile2.nameID : undefined);
+      const result = {
+        attributes,
+        email,
+        nameId: profile2.nameID,
+        sessionIndex: profile2.sessionIndex
+      };
+      return result;
+    }
+  };
+};
 // src/sso/inMemorySamlServiceProviderStore.ts
 var createInMemorySamlServiceProviderStore = () => {
   const providers2 = new Map;
@@ -26225,6 +26276,7 @@ export {
   createPostgresAccessTokenStore,
   createOrganization,
   createOAuthLinkedProviderCredentialResolver,
+  createNodeSamlAdapter,
   createNeonWebhookDeliveryStore,
   createNeonWebAuthnCredentialStore,
   createNeonWarrantStore,
@@ -26382,5 +26434,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=936F4FF1936BF20064756E2164756E21
+//# debugId=CF175090287D988A64756E2164756E21
 //# sourceMappingURL=index.js.map