@boxyhq/saml-jackson 0.3.5-beta.355 → 0.3.6

package/dist/controller/oauth.js

@@ -40,6 +40,9 @@ const allowed = __importStar(require("./oauth/allowed"));
 const codeVerifier = __importStar(require("./oauth/code-verifier"));
 const redirect = __importStar(require("./oauth/redirect"));
 const utils_1 = require("./utils");
+const util_1 = require("util");
+const zlib_1 = require("zlib");
+const deflateRawAsync = (0, util_1.promisify)(zlib_1.deflateRaw);
 const relayStatePrefix = 'boxyhq_jackson_';
 function getEncodedClientId(client_id) {
     try {
@@ -130,9 +133,11 @@ class OAuthController {
                 code_challenge,
                 code_challenge_method,
             });
+            // deepak: When supporting HTTP-POST skip deflate
+            const samlReqEnc = yield deflateRawAsync(samlReq.request);
             const redirectUrl = redirect.success(samlConfig.idpMetadata.sso.redirectUrl, {
                 RelayState: relayStatePrefix + sessionId,
-                SAMLRequest: Buffer.from(samlReq.request).toString('base64'),
+                SAMLRequest: Buffer.from(samlReqEnc).toString('base64'),
             });
             return { redirect_url: redirectUrl };
         });
@@ -333,8 +338,11 @@ class OAuthController {
      */
     userInfo(token) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { claims } = yield this.tokenStore.get(token);
-            return claims;
+            const rsp = yield this.tokenStore.get(token);
+            if (!rsp || !rsp.claims) {
+                throw new error_1.JacksonError('Invalid token', 403);
+            }
+            return rsp.claims;
         });
     }
 }

package/dist/db/sql/sql.js

@@ -43,9 +43,15 @@ class Sql {
         return __awaiter(this, void 0, void 0, function* () {
             while (true) {
                 try {
-                    // to support self signed cert like heroku postgres
-                    const sslOpts = this.options.sslRejectUnauthorized === false ? { ssl: { rejectUnauthorized: false } } : undefined;
-                    this.connection = yield (0, typeorm_1.createConnection)(Object.assign({ name: this.options.type + Math.floor(Math.random() * 100000), type: this.options.type, url: this.options.url, synchronize: true, migrationsTableName: '_jackson_migrations', logging: ['error'], entities: [JacksonStore_1.JacksonStore, JacksonIndex_1.JacksonIndex, JacksonTTL_1.JacksonTTL] }, sslOpts));
+                    this.connection = yield (0, typeorm_1.createConnection)({
+                        name: this.options.type + Math.floor(Math.random() * 100000),
+                        type: this.options.type,
+                        url: this.options.url,
+                        synchronize: true,
+                        migrationsTableName: '_jackson_migrations',
+                        logging: ['error'],
+                        entities: [JacksonStore_1.JacksonStore, JacksonIndex_1.JacksonIndex, JacksonTTL_1.JacksonTTL],
+                    });
                     break;
                 }
                 catch (err) {

package/dist/index.js

@@ -44,8 +44,6 @@ const defaultOpts = (opts) => {
     newOpts.db.type = newOpts.db.type || 'postgres'; // Only needed if DB_ENGINE is sql.
     newOpts.db.ttl = (newOpts.db.ttl || 300) * 1; // TTL for the code, session and token stores (in seconds)
     newOpts.db.cleanupLimit = (newOpts.db.cleanupLimit || 1000) * 1; // Limit cleanup of TTL entries to this many items at a time
-    newOpts.db.sslRejectUnauthorized =
-        typeof newOpts.db.sslRejectUnauthorized === 'boolean' ? newOpts.db.sslRejectUnauthorized : true;
     return newOpts;
 };
 const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {

package/dist/typings.d.ts

@@ -99,7 +99,6 @@ export interface DatabaseOption {
     ttl?: number;
     cleanupLimit?: number;
     encryptionKey?: string;
-    sslRejectUnauthorized?: boolean;
 }
 export interface SAMLReq {
     ssoUrl?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.3.5-beta.355",
+  "version": "0.3.6",
   "description": "SAML 2.0 service",
   "keywords": [
     "SAML 2.0"