@bostonuniversity/shibboleth-sp 1.0.5 → 1.0.7

package/dist/cjs/index.js

@@ -69609,13 +69609,13 @@ var JwtTools = class _JwtTools {
     const maxAge = Math.floor(dist_default(this.expiresIn) / 1e3);
     response.headers["set-cookie"] = [{
       key: "Set-Cookie",
-      value: `${_JwtTools.COOKIE_NAME}=${jwtToken}; Max-Age=${maxAge}; Secure; HttpOnly`
+      value: `${_JwtTools.COOKIE_NAME}=${jwtToken}; Max-Age=${maxAge}; Path=/; Secure; HttpOnly`
     }];
   }
   setCookieInvalidationInResponse(response) {
     response.headers["set-cookie"] = [{
       key: "Set-Cookie",
-      value: `${_JwtTools.COOKIE_NAME}=invalidated; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; HttpOnly`
+      value: `${_JwtTools.COOKIE_NAME}=invalidated; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; Secure; HttpOnly`
     }];
   }
   getCookieName() {
@@ -69845,12 +69845,13 @@ var handler = async (originRequest, config) => {
     const qsparms = querystring ? new URLSearchParams(querystring) : null;
     console.log(`uri: ${uri}`);
     console.log(`querystring parameters: ${qsparms ? [...qsparms.keys()].join(", ") : ""}`);
-    const { LOGIN, LOGOUT, ASSERT, METADATA } = AUTH_PATHS;
+    const { loginPath: LOGIN = "/login" /* LOGIN */, logoutPath: LOGOUT = "/logout" /* LOGOUT */ } = config;
+    const { ASSERT, METADATA } = AUTH_PATHS;
     const getAppLoginUrl = () => {
       const relay_state = encodeURIComponent(relayDomain + uri + (querystring ? `?${querystring}` : ""));
-      return `${relayDomain}${"/login" /* LOGIN */}?relay_state=${relay_state}`;
+      return `${relayDomain}${LOGIN}?relay_state=${relay_state}`;
     };
-    const getAppLogoutUrl = () => `${relayDomain}${"/logout" /* LOGOUT */}`;
+    const getAppLogoutUrl = () => `${relayDomain}${LOGOUT}`;
     switch (uri) {
       case LOGIN:
         console.log("User is not authenticated, initiate SAML authentication...");
@@ -69882,7 +69883,7 @@ var handler = async (originRequest, config) => {
             status: "302",
             statusDescription: "Found",
             headers: {
-              location: [{ key: "Location", value: `${relayDomain}/logout?target=idp` }]
+              location: [{ key: "Location", value: `${relayDomain}${LOGOUT}?target=idp` }]
             }
           };
           jwtTools.setCookieInvalidationInResponse(response);
@@ -70054,6 +70055,8 @@ var getConfigFromEnvironment = () => {
     APP_LOGIN_HEADER: appLoginHeader,
     APP_LOGOUT_HEADER: appLogoutHeader,
     APP_AUTHORIZATION: appAuthorization = "false",
+    LOGIN_PATH: loginPath,
+    LOGOUT_PATH: logoutPath,
     ENTITY_ID: entityId,
     ENTRY_POINT: entryPoint,
     LOGOUT_URL: logoutUrl,
@@ -70074,6 +70077,8 @@ var getConfigFromEnvironment = () => {
     appLogoutHeader,
     jwtPrivateKeyPEM,
     jwtPublicKeyPEM,
+    loginPath,
+    logoutPath,
     appAuthorization: `${appAuthorization}`.toLowerCase() == "false" ? false : true,
     samlParms: {
       entityId,