@boxyhq/saml-jackson 0.3.5-beta.353 → 0.3.6-beta.360

package/dist/controller/oauth.js

@@ -40,6 +40,9 @@ const allowed = __importStar(require("./oauth/allowed"));
 const codeVerifier = __importStar(require("./oauth/code-verifier"));
 const redirect = __importStar(require("./oauth/redirect"));
 const utils_1 = require("./utils");
+const util_1 = require("util");
+const zlib_1 = require("zlib");
+const deflateRawAsync = (0, util_1.promisify)(zlib_1.deflateRaw);
 const relayStatePrefix = 'boxyhq_jackson_';
 function getEncodedClientId(client_id) {
     try {
@@ -130,9 +133,11 @@ class OAuthController {
                 code_challenge,
                 code_challenge_method,
             });
+            // deepak: When supporting HTTP-POST skip deflate
+            const samlReqEnc = yield deflateRawAsync(samlReq.request);
             const redirectUrl = redirect.success(samlConfig.idpMetadata.sso.redirectUrl, {
                 RelayState: relayStatePrefix + sessionId,
-                SAMLRequest: Buffer.from(samlReq.request).toString('base64'),
+                SAMLRequest: Buffer.from(samlReqEnc).toString('base64'),
             });
             return { redirect_url: redirectUrl };
         });
@@ -333,8 +338,11 @@ class OAuthController {
      */
     userInfo(token) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { claims } = yield this.tokenStore.get(token);
-            return claims;
+            const rsp = yield this.tokenStore.get(token);
+            if (!rsp || !rsp.claims) {
+                throw new error_1.JacksonError('Invalid token', 403);
+            }
+            return rsp.claims;
         });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.3.5-beta.353",
+  "version": "0.3.6-beta.360",
   "description": "SAML 2.0 service",
   "keywords": [
     "SAML 2.0"