@boxyhq/saml-jackson 0.3.7-beta.682 → 0.3.7-beta.686

package/dist/controller/api.d.ts

@@ -25,7 +25,7 @@ export declare class APIController implements IAPIController {
      *         required: true
      *         example: cal-saml-config
      *       - name: description
-     *         description: A short description for the config not more than 50 characters
+     *         description: A short description for the config not more than 100 characters
      *         type: string
      *         in: formData
      *         example: SAML login for cal.com app
@@ -77,6 +77,8 @@ export declare class APIController implements IAPIController {
      *             client_id: 8958e13053832b5af58fdf2ee83f35f5d013dc74
      *             client_secret: 13f01f4df5b01770c616e682d14d3ba23f20948cfa89b1d7
      *             type: accounts.google.com
+     *       400:
+     *         description: Please provide rawMetadata or encodedRawMetadata | Please provide a defaultRedirectUrl | Please provide redirectUrl | Please provide tenant | Please provide product | Please provide a friendly name | Description should not exceed 100 characters
      *       401:
      *         description: Unauthorized
      */
@@ -110,7 +112,7 @@ export declare class APIController implements IAPIController {
      *         required: true
      *         example: cal-saml-config
      *       - name: description
-     *         description: A short description for the config not more than 50 characters
+     *         description: A short description for the config not more than 100 characters
      *         type: string
      *         in: formData
      *         example: SAML login for cal.com app
@@ -150,7 +152,7 @@ export declare class APIController implements IAPIController {
      *       204:
      *         description: Success
      *       400:
-     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
+     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata | Description should not exceed 100 characters
      *       401:
      *         description: Unauthorized
      */
@@ -212,7 +214,7 @@ export declare class APIController implements IAPIController {
      *               }
      *             }
      *       '400':
-     *         description: Please provide `clientID` or `tenant`/`product`.
+     *         description: Please provide `clientID` or `tenant` and `product`.
      *       '401':
      *         description: Unauthorized
      */
@@ -255,6 +257,8 @@ export declare class APIController implements IAPIController {
      *     responses:
      *       '200':
      *         description: Success
+     *       '400':
+     *         description: clientSecret mismatch | Please provide `clientID` and `clientSecret` or `tenant` and `product`.'
      *       '401':
      *         description: Unauthorized
      */

package/dist/controller/api.js

@@ -54,7 +54,7 @@ class APIController {
         this.configStore = configStore;
     }
     _validateIdPConfig(body) {
-        const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, name } = body;
+        const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, name, description, } = body;
         if (!rawMetadata && !encodedRawMetadata) {
             throw new error_1.JacksonError('Please provide rawMetadata or encodedRawMetadata', 400);
         }
@@ -73,6 +73,9 @@ class APIController {
         if (!name) {
             throw new error_1.JacksonError('Please provide a friendly name', 400);
         }
+        if (description && description.length > 100) {
+            throw new error_1.JacksonError('Description should not exceed 100 characters', 400);
+        }
     }
     /**
      * @swagger
@@ -94,7 +97,7 @@ class APIController {
      *         required: true
      *         example: cal-saml-config
      *       - name: description
-     *         description: A short description for the config not more than 50 characters
+     *         description: A short description for the config not more than 100 characters
      *         type: string
      *         in: formData
      *         example: SAML login for cal.com app
@@ -146,6 +149,8 @@ class APIController {
      *             client_id: 8958e13053832b5af58fdf2ee83f35f5d013dc74
      *             client_secret: 13f01f4df5b01770c616e682d14d3ba23f20948cfa89b1d7
      *             type: accounts.google.com
+     *       400:
+     *         description: Please provide rawMetadata or encodedRawMetadata | Please provide a defaultRedirectUrl | Please provide redirectUrl | Please provide tenant | Please provide product | Please provide a friendly name | Description should not exceed 100 characters
      *       401:
      *         description: Unauthorized
      */
@@ -233,7 +238,7 @@ class APIController {
      *         required: true
      *         example: cal-saml-config
      *       - name: description
-     *         description: A short description for the config not more than 50 characters
+     *         description: A short description for the config not more than 100 characters
      *         type: string
      *         in: formData
      *         example: SAML login for cal.com app
@@ -273,7 +278,7 @@ class APIController {
      *       204:
      *         description: Success
      *       400:
-     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
+     *         description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata | Description should not exceed 100 characters
      *       401:
      *         description: Unauthorized
      */
@@ -289,6 +294,9 @@ class APIController {
             if (!(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
                 throw new error_1.JacksonError('Please provide clientSecret', 400);
             }
+            if (description && description.length > 100) {
+                throw new error_1.JacksonError('Description should not exceed 100 characters', 400);
+            }
             const _currentConfig = (_a = (yield this.getConfig(clientInfo))) === null || _a === void 0 ? void 0 : _a.config;
             if (_currentConfig.clientSecret !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
                 throw new error_1.JacksonError('clientSecret mismatch', 400);
@@ -382,7 +390,7 @@ class APIController {
      *               }
      *             }
      *       '400':
-     *         description: Please provide `clientID` or `tenant`/`product`.
+     *         description: Please provide `clientID` or `tenant` and `product`.
      *       '401':
      *         description: Unauthorized
      */
@@ -440,6 +448,8 @@ class APIController {
      *     responses:
      *       '200':
      *         description: Success
+     *       '400':
+     *         description: clientSecret mismatch | Please provide `clientID` and `clientSecret` or `tenant` and `product`.'
      *       '401':
      *         description: Unauthorized
      */

package/dist/controller/oauth.js

@@ -292,6 +292,12 @@ class OAuthController {
                             throw new error_1.JacksonError('Invalid client_id or client_secret', 401);
                         }
                     }
+                    else {
+                        // encoded client_id, verify client_secret
+                        if (client_secret !== this.opts.clientSecretVerifier) {
+                            throw new error_1.JacksonError('Invalid client_secret', 401);
+                        }
+                    }
                 }
             }
             else if (codeVal && codeVal.session) {

package/dist/index.js

@@ -45,6 +45,7 @@ const defaultOpts = (opts) => {
     newOpts.db.type = newOpts.db.type || 'postgres'; // Only needed if DB_ENGINE is sql.
     newOpts.db.ttl = (newOpts.db.ttl || 300) * 1; // TTL for the code, session and token stores (in seconds)
     newOpts.db.cleanupLimit = (newOpts.db.cleanupLimit || 1000) * 1; // Limit cleanup of TTL entries to this many items at a time
+    newOpts.clientSecretVerifier = newOpts.clientSecretVerifier || 'dummy';
     return newOpts;
 };
 const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {

package/dist/typings.d.ts

@@ -131,4 +131,5 @@ export interface JacksonOption {
     preLoadedConfig?: string;
     idpEnabled?: boolean;
     db: DatabaseOption;
+    clientSecretVerifier?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.3.7-beta.682",
+  "version": "0.3.7-beta.686",
   "description": "SAML 2.0 service",
   "keywords": [
     "SAML 2.0"