@atom8n/n8n 2.2.0

package/dist/sso.ee/oidc/routes/oidc.controller.ee.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcController = void 0;
+const api_types_1 = require("@n8n/api-types");
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const constants_1 = require("@n8n/constants");
+const decorators_1 = require("@n8n/decorators");
+const auth_service_1 = require("../../../auth/auth.service");
+const constants_2 = require("../../../constants");
+const bad_request_error_1 = require("../../../errors/response-errors/bad-request.error");
+const url_service_1 = require("../../../services/url.service");
+const constants_3 = require("../constants");
+const oidc_service_ee_1 = require("../oidc.service.ee");
+let OidcController = class OidcController {
+    constructor(oidcService, authService, urlService, globalConfig, logger) {
+        this.oidcService = oidcService;
+        this.authService = authService;
+        this.urlService = urlService;
+        this.globalConfig = globalConfig;
+        this.logger = logger;
+    }
+    async retrieveConfiguration(_req) {
+        const config = await this.oidcService.loadConfig();
+        if (config.clientSecret) {
+            config.clientSecret = constants_3.OIDC_CLIENT_SECRET_REDACTED_VALUE;
+        }
+        return config;
+    }
+    async saveConfiguration(_req, _res, payload) {
+        await this.oidcService.updateConfig(payload);
+        const config = this.oidcService.getRedactedConfig();
+        return config;
+    }
+    async redirectToAuthProvider(_req, res) {
+        const authorization = await this.oidcService.generateLoginUrl();
+        const { samesite, secure } = this.globalConfig.auth.cookie;
+        res.cookie(constants_2.OIDC_STATE_COOKIE_NAME, authorization.state, {
+            maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
+            httpOnly: true,
+            sameSite: samesite,
+            secure,
+        });
+        res.cookie(constants_2.OIDC_NONCE_COOKIE_NAME, authorization.nonce, {
+            maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
+            httpOnly: true,
+            sameSite: samesite,
+            secure,
+        });
+        res.redirect(authorization.url.toString());
+    }
+    async callbackHandler(req, res) {
+        const fullUrl = `${this.urlService.getInstanceBaseUrl()}${req.originalUrl}`;
+        const callbackUrl = new URL(fullUrl);
+        const state = req.cookies[constants_2.OIDC_STATE_COOKIE_NAME];
+        if (typeof state !== 'string') {
+            this.logger.error('State is missing');
+            throw new bad_request_error_1.BadRequestError('Invalid state');
+        }
+        const nonce = req.cookies[constants_2.OIDC_NONCE_COOKIE_NAME];
+        if (typeof nonce !== 'string') {
+            this.logger.error('Nonce is missing');
+            throw new bad_request_error_1.BadRequestError('Invalid nonce');
+        }
+        const user = await this.oidcService.loginUser(callbackUrl, state, nonce);
+        res.clearCookie(constants_2.OIDC_STATE_COOKIE_NAME);
+        res.clearCookie(constants_2.OIDC_NONCE_COOKIE_NAME);
+        this.authService.issueCookie(res, user, true, req.browserId);
+        res.redirect('/');
+    }
+};
+exports.OidcController = OidcController;
+__decorate([
+    (0, decorators_1.Get)('/config'),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    (0, decorators_1.GlobalScope)('oidc:manage'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "retrieveConfiguration", null);
+__decorate([
+    (0, decorators_1.Post)('/config'),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    (0, decorators_1.GlobalScope)('oidc:manage'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.OidcConfigDto]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "saveConfiguration", null);
+__decorate([
+    (0, decorators_1.Get)('/login', { skipAuth: true }),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "redirectToAuthProvider", null);
+__decorate([
+    (0, decorators_1.Get)('/callback', { skipAuth: true }),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "callbackHandler", null);
+exports.OidcController = OidcController = __decorate([
+    (0, decorators_1.RestController)('/sso/oidc'),
+    __metadata("design:paramtypes", [oidc_service_ee_1.OidcService,
+        auth_service_1.AuthService,
+        url_service_1.UrlService,
+        config_1.GlobalConfig,
+        backend_common_1.Logger])
+], OidcController);
+//# sourceMappingURL=oidc.controller.ee.js.map

package/dist/sso.ee/oidc/routes/oidc.controller.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso.ee/oidc/routes/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAE7E,wDAAoD;AAEpD,4CAAiE;AACjE,wDAAiD;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc;QAJd,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;CACD,CAAA;AAjFY,wCAAc;AAYpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAyBrB;yBAhFW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;GANpB,cAAc,CAiF1B"}

package/dist/sso.ee/saml/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const SAML_PREFERENCES_DB_KEY = "features.saml";
+export declare const SAML_LOGIN_LABEL = "sso.saml.loginLabel";
+export declare const SAML_LOGIN_ENABLED = "sso.saml.loginEnabled";

package/dist/sso.ee/saml/constants.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAML_LOGIN_ENABLED = exports.SAML_LOGIN_LABEL = exports.SAML_PREFERENCES_DB_KEY = void 0;
+exports.SAML_PREFERENCES_DB_KEY = 'features.saml';
+exports.SAML_LOGIN_LABEL = 'sso.saml.loginLabel';
+exports.SAML_LOGIN_ENABLED = 'sso.saml.loginEnabled';
+//# sourceMappingURL=constants.js.map

package/dist/sso.ee/saml/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/sso.ee/saml/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,uBAAuB,GAAG,eAAe,CAAC;AAC1C,QAAA,gBAAgB,GAAG,qBAAqB,CAAC;AACzC,QAAA,kBAAkB,GAAG,uBAAuB,CAAC"}

package/dist/sso.ee/saml/errors/invalid-saml-metadata-url.error.d.ts

@@ -0,0 +1,4 @@
+import { UserError } from 'n8n-workflow';
+export declare class InvalidSamlMetadataUrlError extends UserError {
+    constructor(url: string);
+}

package/dist/sso.ee/saml/errors/invalid-saml-metadata-url.error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidSamlMetadataUrlError = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+class InvalidSamlMetadataUrlError extends n8n_workflow_1.UserError {
+    constructor(url) {
+        super(`Failed to produce valid SAML metadata from ${url}`);
+    }
+}
+exports.InvalidSamlMetadataUrlError = InvalidSamlMetadataUrlError;
+//# sourceMappingURL=invalid-saml-metadata-url.error.js.map

package/dist/sso.ee/saml/errors/invalid-saml-metadata-url.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-saml-metadata-url.error.js","sourceRoot":"","sources":["../../../../src/sso.ee/saml/errors/invalid-saml-metadata-url.error.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAEzC,MAAa,2BAA4B,SAAQ,wBAAS;IACzD,YAAY,GAAW;QACtB,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;CACD;AAJD,kEAIC"}

package/dist/sso.ee/saml/errors/invalid-saml-metadata.error.d.ts

@@ -0,0 +1,4 @@
+import { UserError } from 'n8n-workflow';
+export declare class InvalidSamlMetadataError extends UserError {
+    constructor(detail?: string);
+}

package/dist/sso.ee/saml/errors/invalid-saml-metadata.error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidSamlMetadataError = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+class InvalidSamlMetadataError extends n8n_workflow_1.UserError {
+    constructor(detail = '') {
+        super(`Invalid SAML metadata${detail ? ': ' + detail : ''}`);
+    }
+}
+exports.InvalidSamlMetadataError = InvalidSamlMetadataError;
+//# sourceMappingURL=invalid-saml-metadata.error.js.map

package/dist/sso.ee/saml/errors/invalid-saml-metadata.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-saml-metadata.error.js","sourceRoot":"","sources":["../../../../src/sso.ee/saml/errors/invalid-saml-metadata.error.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAEzC,MAAa,wBAAyB,SAAQ,wBAAS;IACtD,YAAY,SAAiB,EAAE;QAC9B,KAAK,CAAC,wBAAwB,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;CACD;AAJD,4DAIC"}

package/dist/sso.ee/saml/middleware/saml-enabled-middleware.d.ts

@@ -0,0 +1,3 @@
+import type { RequestHandler } from 'express';
+export declare const samlLicensedAndEnabledMiddleware: RequestHandler;
+export declare const samlLicensedMiddleware: RequestHandler;

package/dist/sso.ee/saml/middleware/saml-enabled-middleware.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.samlLicensedMiddleware = exports.samlLicensedAndEnabledMiddleware = void 0;
+const saml_helpers_1 = require("../saml-helpers");
+const samlLicensedAndEnabledMiddleware = (_, res, next) => {
+    if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
+        next();
+    }
+    else {
+        res.status(403).json({ status: 'error', message: 'Unauthorized' });
+    }
+};
+exports.samlLicensedAndEnabledMiddleware = samlLicensedAndEnabledMiddleware;
+const samlLicensedMiddleware = (_, res, next) => {
+    if ((0, saml_helpers_1.isSamlLicensed)()) {
+        next();
+    }
+    else {
+        res.status(403).json({ status: 'error', message: 'Unauthorized' });
+    }
+};
+exports.samlLicensedMiddleware = samlLicensedMiddleware;
+//# sourceMappingURL=saml-enabled-middleware.js.map

package/dist/sso.ee/saml/middleware/saml-enabled-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml-enabled-middleware.js","sourceRoot":"","sources":["../../../../src/sso.ee/saml/middleware/saml-enabled-middleware.ts"],"names":[],"mappings":";;;AAEA,kDAA2E;AAEpE,MAAM,gCAAgC,GAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAChF,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;QAChC,IAAI,EAAE,CAAC;IACR,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;AACF,CAAC,CAAC;AANW,QAAA,gCAAgC,oCAM3C;AAEK,MAAM,sBAAsB,GAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACtE,IAAI,IAAA,6BAAc,GAAE,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC;IACR,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;AACF,CAAC,CAAC;AANW,QAAA,sBAAsB,0BAMjC"}

package/dist/sso.ee/saml/routes/saml.controller.ee.d.ts

@@ -0,0 +1,50 @@
+import { SamlAcsDto, SamlPreferences, SamlToggleDto } from '@n8n/api-types';
+import { AuthenticatedRequest } from '@n8n/db';
+import { Response } from 'express';
+import { AuthService } from '../../../auth/auth.service';
+import { EventService } from '../../../events/event.service';
+import { AuthlessRequest } from '../../../requests';
+import { UrlService } from '../../../services/url.service';
+import { SamlService } from '../saml.service.ee';
+export declare class SamlController {
+    private readonly authService;
+    private readonly samlService;
+    private readonly urlService;
+    private readonly eventService;
+    constructor(authService: AuthService, samlService: SamlService, urlService: UrlService, eventService: EventService);
+    getServiceProviderMetadata(_: AuthlessRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    configGet(): Promise<{
+        entityID: string;
+        returnUrl: string;
+        ignoreSSL: boolean;
+        loginBinding: "post" | "redirect";
+        authnRequestsSigned: boolean;
+        wantAssertionsSigned: boolean;
+        wantMessageSigned: boolean;
+        acsBinding: "post" | "redirect";
+        signatureConfig: {
+            prefix: string;
+            location: {
+                action: "before" | "after" | "prepend" | "append";
+                reference: string;
+            };
+        };
+        relayState: string;
+        metadata?: string | undefined;
+        loginEnabled?: boolean | undefined;
+        loginLabel?: string | undefined;
+        mapping?: import("@n8n/api-types").SamlPreferencesAttributeMapping | undefined;
+        metadataUrl?: string | undefined;
+    }>;
+    configPost(_req: AuthenticatedRequest, _res: Response, payload: SamlPreferences): Promise<SamlPreferences | undefined>;
+    toggleEnabledPost(_req: AuthenticatedRequest, res: Response, { loginEnabled }: SamlToggleDto): Promise<Response<any, Record<string, any>>>;
+    acsGet(req: AuthlessRequest, res: Response): Promise<void | Response<any, Record<string, any>>>;
+    acsPost(req: AuthlessRequest, res: Response, payload: SamlAcsDto): Promise<void | Response<any, Record<string, any>>>;
+    private acsHandler;
+    initSsoGet(req: AuthlessRequest<{}, {}, {}, {
+        redirect?: string;
+    }>, res: Response): Promise<string | Response<any, Record<string, any>>>;
+    configTestGet(_: AuthenticatedRequest, res: Response): Promise<string | Response<any, Record<string, any>>>;
+    private handleInitSSO;
+    private validateRedirectUrl;
+}

package/dist/sso.ee/saml/routes/saml.controller.ee.js

@@ -0,0 +1,227 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SamlController = void 0;
+const api_types_1 = require("@n8n/api-types");
+const decorators_1 = require("@n8n/decorators");
+const querystring_1 = __importDefault(require("querystring"));
+const url_1 = __importDefault(require("url"));
+const auth_service_1 = require("../../../auth/auth.service");
+const auth_error_1 = require("../../../errors/response-errors/auth.error");
+const event_service_1 = require("../../../events/event.service");
+const response_helper_1 = require("../../../response-helper");
+const url_service_1 = require("../../../services/url.service");
+const saml_enabled_middleware_1 = require("../middleware/saml-enabled-middleware");
+const saml_helpers_1 = require("../saml-helpers");
+const saml_service_ee_1 = require("../saml.service.ee");
+const service_provider_ee_1 = require("../service-provider.ee");
+const init_sso_post_1 = require("../views/init-sso-post");
+let SamlController = class SamlController {
+    constructor(authService, samlService, urlService, eventService) {
+        this.authService = authService;
+        this.samlService = samlService;
+        this.urlService = urlService;
+        this.eventService = eventService;
+    }
+    async getServiceProviderMetadata(_, res) {
+        return res
+            .header('Content-Type', 'text/xml')
+            .send(this.samlService.getServiceProviderInstance().getMetadata());
+    }
+    async configGet() {
+        const prefs = this.samlService.samlPreferences;
+        return {
+            ...prefs,
+            entityID: (0, service_provider_ee_1.getServiceProviderEntityId)(),
+            returnUrl: (0, service_provider_ee_1.getServiceProviderReturnUrl)(),
+        };
+    }
+    async configPost(_req, _res, payload) {
+        return await this.samlService.setSamlPreferences(payload);
+    }
+    async toggleEnabledPost(_req, res, { loginEnabled }) {
+        await this.samlService.setSamlPreferences({ loginEnabled });
+        return res.sendStatus(200);
+    }
+    async acsGet(req, res) {
+        return await this.acsHandler(req, res, 'redirect');
+    }
+    async acsPost(req, res, payload) {
+        return await this.acsHandler(req, res, 'post', payload);
+    }
+    async acsHandler(req, res, binding, payload = {}) {
+        try {
+            const loginResult = await this.samlService.handleSamlLogin(req, binding);
+            if ((0, saml_helpers_1.isConnectionTestRequest)(payload)) {
+                if (loginResult.authenticatedUser) {
+                    return res.render('saml-connection-test-success', loginResult.attributes);
+                }
+                else {
+                    return res.render('saml-connection-test-failed', {
+                        message: '',
+                        attributes: loginResult.attributes,
+                    });
+                }
+            }
+            if (loginResult.authenticatedUser) {
+                this.eventService.emit('user-logged-in', {
+                    user: loginResult.authenticatedUser,
+                    authenticationMethod: 'saml',
+                });
+                if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
+                    this.authService.issueCookie(res, loginResult.authenticatedUser, true, req.browserId);
+                    if (loginResult.onboardingRequired) {
+                        return res.redirect(this.urlService.getInstanceBaseUrl() + '/saml/onboarding');
+                    }
+                    else {
+                        const safeRedirectUrl = payload.RelayState
+                            ? this.validateRedirectUrl(payload.RelayState)
+                            : '/';
+                        return res.redirect(this.urlService.getInstanceBaseUrl() + safeRedirectUrl);
+                    }
+                }
+                else {
+                    return res.status(202).send(loginResult.attributes);
+                }
+            }
+            this.eventService.emit('user-login-failed', {
+                userEmail: loginResult.attributes.email ?? 'unknown',
+                authenticationMethod: 'saml',
+            });
+            return (0, response_helper_1.sendErrorResponse)(res, new auth_error_1.AuthError('SAML Authentication failed'));
+        }
+        catch (error) {
+            if ((0, saml_helpers_1.isConnectionTestRequest)(payload)) {
+                return res.render('saml-connection-test-failed', { message: error.message });
+            }
+            this.eventService.emit('user-login-failed', {
+                userEmail: 'unknown',
+                authenticationMethod: 'saml',
+            });
+            return (0, response_helper_1.sendErrorResponse)(res, new auth_error_1.AuthError('SAML Authentication failed: ' + error.message));
+        }
+    }
+    async initSsoGet(req, res) {
+        let redirectUrl = req.query.redirect ?? '';
+        try {
+            const refererUrl = req.headers.referer;
+            if (refererUrl) {
+                const parsedUrl = url_1.default.parse(refererUrl);
+                if (parsedUrl?.query) {
+                    const parsedQueryParams = querystring_1.default.parse(parsedUrl.query);
+                    if (parsedQueryParams.redirect && typeof parsedQueryParams.redirect === 'string') {
+                        redirectUrl = querystring_1.default.unescape(parsedQueryParams.redirect);
+                    }
+                }
+            }
+        }
+        catch {
+        }
+        return await this.handleInitSSO(res, this.validateRedirectUrl(redirectUrl));
+    }
+    async configTestGet(_, res) {
+        return await this.handleInitSSO(res, (0, service_provider_ee_1.getServiceProviderConfigTestReturnUrl)());
+    }
+    async handleInitSSO(res, relayState) {
+        const result = await this.samlService.getLoginRequestUrl(relayState);
+        if (result?.binding === 'redirect') {
+            return result.context.context;
+        }
+        else if (result?.binding === 'post') {
+            return res.send((0, init_sso_post_1.getInitSSOFormView)(result.context));
+        }
+        else {
+            throw new auth_error_1.AuthError('SAML redirect failed, please check your SAML configuration.');
+        }
+    }
+    validateRedirectUrl(redirectUrl) {
+        if (typeof redirectUrl !== 'string' || redirectUrl.trim() === '') {
+            return '/';
+        }
+        const trimmed = redirectUrl.trim();
+        if (!trimmed.startsWith('/')) {
+            return '/';
+        }
+        if (trimmed.startsWith('//')) {
+            return '/';
+        }
+        return trimmed;
+    }
+};
+exports.SamlController = SamlController;
+__decorate([
+    (0, decorators_1.Get)('/metadata', { skipAuth: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "getServiceProviderMetadata", null);
+__decorate([
+    (0, decorators_1.Get)('/config', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "configGet", null);
+__decorate([
+    (0, decorators_1.Post)('/config', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.GlobalScope)('saml:manage'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.SamlPreferences]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "configPost", null);
+__decorate([
+    (0, decorators_1.Post)('/config/toggle', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.GlobalScope)('saml:manage'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.SamlToggleDto]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "toggleEnabledPost", null);
+__decorate([
+    (0, decorators_1.Get)('/acs', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware], skipAuth: true, usesTemplates: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "acsGet", null);
+__decorate([
+    (0, decorators_1.Post)('/acs', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware], skipAuth: true, usesTemplates: true }),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.SamlAcsDto]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "acsPost", null);
+__decorate([
+    (0, decorators_1.Get)('/initsso', { middlewares: [saml_enabled_middleware_1.samlLicensedAndEnabledMiddleware], skipAuth: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "initSsoGet", null);
+__decorate([
+    (0, decorators_1.Get)('/config/test', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.GlobalScope)('saml:manage'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SamlController.prototype, "configTestGet", null);
+exports.SamlController = SamlController = __decorate([
+    (0, decorators_1.RestController)('/sso/saml'),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        saml_service_ee_1.SamlService,
+        url_service_1.UrlService,
+        event_service_1.EventService])
+], SamlController);
+//# sourceMappingURL=saml.controller.ee.js.map

package/dist/sso.ee/saml/routes/saml.controller.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso.ee/saml/routes/saml.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,8CAA4E;AAE5E,gDAA+E;AAE/E,8DAAsC;AAEtC,8CAAsB;AAEtB,sDAAkD;AAClD,oEAAgE;AAChE,0DAAsD;AAEtD,uDAAsD;AACtD,wDAAoD;AAEpD,mFAG+C;AAC/C,kDAAoF;AACpF,wDAAiD;AACjD,gEAIgC;AAEhC,0DAA4D;AAGrD,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B;QAH1B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,0BAA0B,CAAC,CAAkB,EAAE,GAAa;QACjE,OAAO,GAAG;aACR,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;aAClC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;QAC/C,OAAO;YACN,GAAG,KAAK;YACR,QAAQ,EAAE,IAAA,gDAA0B,GAAE;YACtC,SAAS,EAAE,IAAA,iDAA2B,GAAE;SACxC,CAAC;IACH,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,IAA0B,EAAE,IAAc,EAAQ,OAAwB;QAC1F,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,GAAa,EACP,EAAE,YAAY,EAAiB;QAErC,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAa;QAC/C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAMK,AAAN,KAAK,CAAC,OAAO,CAAC,GAAoB,EAAE,GAAa,EAAQ,OAAmB;QAC3E,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAOO,KAAK,CAAC,UAAU,CACvB,GAAoB,EACpB,GAAa,EACb,OAAyB,EACzB,UAAsB,EAAE;QAExB,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEzE,IAAI,IAAA,sCAAuB,EAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE;wBAChD,OAAO,EAAE,EAAE;wBACX,UAAU,EAAE,WAAW,CAAC,UAAU;qBAClC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YACD,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACxC,IAAI,EAAE,WAAW,CAAC,iBAAiB;oBACnC,oBAAoB,EAAE,MAAM;iBAC5B,CAAC,CAAC;gBAGH,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;oBAChC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;oBAEtF,IAAI,WAAW,CAAC,kBAAkB,EAAE,CAAC;wBACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,CAAC;oBAChF,CAAC;yBAAM,CAAC;wBACP,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU;4BACzC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;4BAC9C,CAAC,CAAC,GAAG,CAAC;wBACP,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,eAAe,CAAC,CAAC;oBAC7E,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBACrD,CAAC;YACF,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,KAAK,IAAI,SAAS;gBACpD,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YAEH,OAAO,IAAA,mCAAiB,EAAC,GAAG,EAAE,IAAI,sBAAS,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,IAAA,sCAAuB,EAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,SAAS;gBACpB,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YAEH,OAAO,IAAA,mCAAiB,EACvB,GAAG,EACH,IAAI,sBAAS,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CACxE,CAAC;QACH,CAAC;IACF,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,GAAuD,EAAE,GAAa;QACtF,IAAI,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,aAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;oBACtB,MAAM,iBAAiB,GAAG,qBAAW,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC7D,IAAI,iBAAiB,CAAC,QAAQ,IAAI,OAAO,iBAAiB,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAClF,WAAW,GAAG,qBAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAChE,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAC,CAAuB,EAAE,GAAa;QACzD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAA,2DAAqC,GAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAa,EAAE,UAAmB;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC;aAAM,IAAI,MAAM,EAAE,OAAO,KAAK,MAAM,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,kCAAkB,EAAC,MAAM,CAAC,OAA6B,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,sBAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;IAKO,mBAAmB,CAAC,WAAmB;QAC9C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClE,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAGnC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;CACD,CAAA;AA1MY,wCAAc;AASpB;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gEAKpC;AAMK;IADL,IAAA,gBAAG,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;;;;+CAQzD;AAOK;IAFL,IAAA,iBAAI,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IAC1D,IAAA,wBAAW,EAAC,aAAa,CAAC;IACmC,WAAA,iBAAI,CAAA;;qDAAU,2BAAe;;gDAE1F;AAOK;IAFL,IAAA,iBAAI,EAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IACjE,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAmB,yBAAa;;uDAIrC;AAMK;IADL,IAAA,gBAAG,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;;;;4CAG3F;AAMK;IADL,IAAA,iBAAI,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzC,WAAA,iBAAI,CAAA;;qDAAU,sBAAU;;6CAE3E;AA2EK;IADL,IAAA,gBAAG,EAAC,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,0DAAgC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gDAmBpF;AAQK;IAFL,IAAA,gBAAG,EAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IAC9D,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;mDAG1B;yBAxKW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,0BAAW;QACX,6BAAW;QACZ,wBAAU;QACR,4BAAY;GALhC,cAAc,CA0M1B"}

package/dist/sso.ee/saml/saml-helpers.d.ts

@@ -0,0 +1,23 @@
+import type { SamlAcsDto, SamlPreferences } from '@n8n/api-types';
+import type { User } from '@n8n/db';
+import type { FlowResult } from 'samlify/types/src/flow';
+import type { SamlAttributeMapping, SamlUserAttributes } from './types';
+export declare function isSamlLoginEnabled(): boolean;
+export declare function getSamlLoginLabel(): string;
+export declare function setSamlLoginEnabled(enabled: boolean): Promise<void>;
+export declare function setSamlLoginLabel(label: string): void;
+export declare function isSamlLicensed(): boolean;
+export declare function isSamlLicensedAndEnabled(): boolean;
+export declare const isSamlPreferences: (candidate: unknown) => candidate is SamlPreferences;
+export declare function createUserFromSamlAttributes(attributes: SamlUserAttributes): Promise<User>;
+export declare function updateUserFromSamlAttributes(user: User, attributes: SamlUserAttributes): Promise<User>;
+type GetMappedSamlReturn = {
+    attributes: SamlUserAttributes | undefined;
+    missingAttributes: string[];
+};
+export declare function getMappedSamlAttributesFromFlowResult(flowResult: FlowResult, attributeMapping: SamlAttributeMapping, jitClaimNames: {
+    instanceRole: string | null;
+    projectRoles: string | null;
+}): GetMappedSamlReturn;
+export declare function isConnectionTestRequest(payload: SamlAcsDto): boolean;
+export {};