@boxyhq/saml-jackson 0.3.6-beta.658 → 0.3.6-beta.664

package/dist/controller/api.d.ts

@@ -99,6 +99,11 @@ export declare class APIController implements IAPIController {
      *         type: string
      *         in: formData
      *         required: true
+     *       - name: clientSecret
+     *         description: Client Secret for the config
+     *         type: string
+     *         in: formData
+     *         required: true
      *       - name: name
      *         description: Name/identifier for the config
      *         type: string
@@ -147,7 +152,7 @@ export declare class APIController implements IAPIController {
      *       204:
      *         description: Success
      *       400:
-     *         description: Please provide clientID
+     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
      *       401:
      *         description: Unauthorized
      */

package/dist/controller/api.js

@@ -222,6 +222,11 @@ class APIController {
      *         type: string
      *         in: formData
      *         required: true
+     *       - name: clientSecret
+     *         description: Client Secret for the config
+     *         type: string
+     *         in: formData
+     *         required: true
      *       - name: name
      *         description: Name/identifier for the config
      *         type: string
@@ -270,19 +275,26 @@ class APIController {
      *       204:
      *         description: Success
      *       400:
-     *         description: Please provide clientID
+     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
      *       401:
      *         description: Unauthorized
      */
     updateConfig(body) {
         var _a;
         return __awaiter(this, void 0, void 0, function* () {
-            const { encodedRawMetadata, // could be omitted
-            rawMetadata, // could be omitted
+            const { encodedRawMetadata, // could be empty
+            rawMetadata, // could be empty
             defaultRedirectUrl, redirectUrl, name, description } = body, clientInfo = __rest(body, ["encodedRawMetadata", "rawMetadata", "defaultRedirectUrl", "redirectUrl", "name", "description"]);
             if (!(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID)) {
                 throw new error_1.JacksonError('Please provide clientID', 400);
             }
+            if (!(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
+                throw new error_1.JacksonError('Please provide clientSecret', 400);
+            }
+            const _currentConfig = (_a = (yield this.getConfig(clientInfo))) === null || _a === void 0 ? void 0 : _a.config;
+            if (_currentConfig.clientSecret !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
+                throw new error_1.JacksonError('clientSecret mismatch', 400);
+            }
             let metaData = rawMetadata;
             if (encodedRawMetadata) {
                 metaData = Buffer.from(encodedRawMetadata, 'base64').toString();
@@ -301,10 +313,9 @@ class APIController {
                 // check if clientID matches with new metadata payload
                 const clientID = dbutils.keyDigest(dbutils.keyFromParts(clientInfo.tenant, clientInfo.product, newMetadata.entityID));
                 if (clientID !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID)) {
-                    throw new error_1.JacksonError('Tenant/Product config mismatch with IdP metadata');
+                    throw new error_1.JacksonError('Tenant/Product config mismatch with IdP metadata', 400);
                 }
             }
-            const _currentConfig = (_a = (yield this.getConfig(clientInfo))) === null || _a === void 0 ? void 0 : _a.config;
             yield this.configStore.put(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID, Object.assign(Object.assign({}, _currentConfig), { name: name ? name : _currentConfig.name, description: description ? description : _currentConfig.description, idpMetadata: newMetadata ? newMetadata : _currentConfig.idpMetadata, defaultRedirectUrl: defaultRedirectUrl ? defaultRedirectUrl : _currentConfig.defaultRedirectUrl, redirectUrl: redirectUrl ? JSON.parse(redirectUrl) : _currentConfig.redirectUrl }), {
                 // secondary index on entityID
                 name: utils_1.IndexNames.EntityID,
@@ -446,7 +457,7 @@ class APIController {
                     yield this.configStore.delete(clientID);
                 }
                 else {
-                    throw new error_1.JacksonError('clientSecret mismatch.', 400);
+                    throw new error_1.JacksonError('clientSecret mismatch', 400);
                 }
                 return;
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.3.6-beta.658",
+  "version": "0.3.6-beta.664",
   "description": "SAML 2.0 service",
   "keywords": [
     "SAML 2.0"