@boxyhq/saml-jackson 0.1.5-beta.138 → 0.1.5-beta.139

package/README.md

@@ -166,12 +166,12 @@ curl --location --request POST 'http://localhost:6000/api/v1/saml/config' \
 
 The response returns a JSON with `client_id` and `client_secret` that can be stored against your tenant and product for a more secure OAuth 2.0 flow. If you do not want to store the `client_id` and `client_secret` you can alternatively use `client_id=tenant=<tenantID>&product=<productID>` and any arbitrary value for `client_secret` when setting up the OAuth 2.0 flow. Additionally a `provider` attribute is also returned which indicates the domain of your Identity Provider.
 
-#### 2.1 SAML GET config API
+#### 2.1 SAML get config API
 
-This endpoint can be used to return metadata about an existing SAML config. This can be used to check and display the details to your customers. You can use either `clientID` and `clientSecret` combination or `tenant` and `product` combination.
+This endpoint can be used to return metadata about an existing SAML config. This can be used to check and display the details to your customers. You can use either `clientID` or `tenant` and `product` combination.
 
 ```
-curl --location --request GET 'http://localhost:6000/api/v1/saml/config' \
+curl --location --request POST 'http://localhost:6000/api/v1/saml/config/get' \
 --header 'Authorization: Api-Key <Jackson API Key>' \
 --header 'Content-Type: application/x-www-form-urlencoded' \
 --data-urlencode 'tenant=boxyhq.com' \
@@ -179,11 +179,10 @@ curl --location --request GET 'http://localhost:6000/api/v1/saml/config' \
 ```
 
 ```
-curl --location --request GET 'http://localhost:6000/api/v1/saml/config' \
+curl --location --request POST 'http://localhost:6000/api/v1/saml/config/get' \
 --header 'Authorization: Api-Key <Jackson API Key>' \
 --header 'Content-Type: application/x-www-form-urlencoded' \
---data-urlencode 'clientID=<Client ID>' \
---data-urlencode 'clientSecret=<Client Secret>'
+--data-urlencode 'clientID=<Client ID>'
 ```
 
 The response returns a JSON with `provider` indicating the domain of your Identity Provider. If an empty JSON payload is returned then we do not have any configuration stored for the attributes you requested.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.1.5-beta.138",
+  "version": "0.1.5-beta.139",
   "license": "Apache 2.0",
   "description": "SAML 2.0 service",
   "main": "src/index.js",

package/src/controller/api.js

@@ -83,9 +83,9 @@ const config = async (body) => {
 };
 
 const getConfig = async (body) => {
-  const { clientID, clientSecret, tenant, product } = body;
+  const { clientID, tenant, product } = body;
 
-  if (clientID && clientSecret) {
+  if (clientID) {
     const samlConfig = await configStore.get(clientID);
     if (!samlConfig) {
       return {};

package/src/jackson.js

@@ -87,7 +87,7 @@ internalApp.post(apiPath + '/config', async (req, res) => {
   }
 });
 
-internalApp.get(apiPath + '/config', async (req, res) => {
+internalApp.post(apiPath + '/config/get', async (req, res) => {
   try {
     const apiKey = extractAuthToken(req);
     if (!validateApiKey(apiKey)) {