@boxyhq/saml-jackson 0.3.7-beta.684 → 0.3.7-beta.685

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -18,24 +18,10 @@ export declare class APIController implements IAPIController {
18
18
  * consumes:
19
19
  * - application/x-www-form-urlencoded
20
20
  * parameters:
21
- * - name: name
22
- * description: Name/identifier for the config
23
- * type: string
24
- * in: formData
25
- * required: true
26
- * example: cal-saml-config
27
- * - name: description
28
- * description: A short description for the config not more than 100 characters
29
- * type: string
30
- * in: formData
31
- * example: SAML login for cal.com app
32
21
  * - name: encodedRawMetadata
33
22
  * description: Base64 encoding of the XML metadata
34
23
  * in: formData
35
- * type: string
36
- * - name: rawMetadata
37
- * description: Raw XML metadata
38
- * in: formData
24
+ * required: true
39
25
  * type: string
40
26
  * - name: defaultRedirectUrl
41
27
  * description: The redirect URL to use in the IdP login flow
@@ -81,80 +67,6 @@ export declare class APIController implements IAPIController {
81
67
  * description: Unauthorized
82
68
  */
83
69
  config(body: IdPConfig): Promise<OAuth>;
84
- /**
85
- * @swagger
86
- *
87
- * /api/v1/saml/config:
88
- * patch:
89
- * summary: Update SAML configuration
90
- * operationId: update-saml-config
91
- * tags: [SAML Config]
92
- * consumes:
93
- * - application/json
94
- * - application/x-www-form-urlencoded
95
- * parameters:
96
- * - name: clientID
97
- * description: Client ID for the config
98
- * type: string
99
- * in: formData
100
- * required: true
101
- * - name: clientSecret
102
- * description: Client Secret for the config
103
- * type: string
104
- * in: formData
105
- * required: true
106
- * - name: name
107
- * description: Name/identifier for the config
108
- * type: string
109
- * in: formData
110
- * required: true
111
- * example: cal-saml-config
112
- * - name: description
113
- * description: A short description for the config not more than 100 characters
114
- * type: string
115
- * in: formData
116
- * example: SAML login for cal.com app
117
- * - name: encodedRawMetadata
118
- * description: Base64 encoding of the XML metadata
119
- * in: formData
120
- * type: string
121
- * - name: rawMetadata
122
- * description: Raw XML metadata
123
- * in: formData
124
- * type: string
125
- * - name: defaultRedirectUrl
126
- * description: The redirect URL to use in the IdP login flow
127
- * in: formData
128
- * required: true
129
- * type: string
130
- * example: http://localhost:3000/login/saml
131
- * - name: redirectUrl
132
- * description: JSON encoded array containing a list of allowed redirect URLs
133
- * in: formData
134
- * required: true
135
- * type: string
136
- * example: '["http://localhost:3000/*"]'
137
- * - name: tenant
138
- * description: Tenant
139
- * in: formData
140
- * required: true
141
- * type: string
142
- * example: boxyhq.com
143
- * - name: product
144
- * description: Product
145
- * in: formData
146
- * required: true
147
- * type: string
148
- * example: demo
149
- * responses:
150
- * 204:
151
- * description: Success
152
- * 400:
153
- * description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
154
- * 401:
155
- * description: Unauthorized
156
- */
157
- updateConfig(body: any): Promise<void>;
158
70
  /**
159
71
  * @swagger
160
72
  *
@@ -184,35 +96,11 @@ export declare class APIController implements IAPIController {
184
96
  * description: Success
185
97
  * schema:
186
98
  * type: object
99
+ * properties:
100
+ * provider:
101
+ * type: string
187
102
  * example:
188
- * {
189
- * "config": {
190
- * "idpMetadata": {
191
- * "sso": {
192
- * "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
193
- * "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
194
- * },
195
- * "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
196
- * "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
197
- * "loginType": "idp",
198
- * "provider": "okta.com"
199
- * },
200
- * "defaultRedirectUrl": "https://hoppscotch.io/",
201
- * "redirectUrl": ["https://hoppscotch.io/"],
202
- * "tenant": "hoppscotch.io",
203
- * "product": "API Engine",
204
- * "name": "Hoppscotch-SP",
205
- * "description": "SP for hoppscotch.io",
206
- * "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
207
- * "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
208
- * "certs": {
209
- * "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
210
- * "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
211
- * }
212
- * }
213
- * }
214
- * '400':
215
- * description: Please provide `clientID` or `tenant`/`product`.
103
+ * type: accounts.google.com
216
104
  * '401':
217
105
  * description: Unauthorized
218
106
  */
@@ -220,7 +108,7 @@ export declare class APIController implements IAPIController {
220
108
  clientID: string;
221
109
  tenant: string;
222
110
  product: string;
223
- }): Promise<any>;
111
+ }): Promise<Partial<OAuth>>;
224
112
  /**
225
113
  * @swagger
226
114
  * /api/v1/saml/config:
@@ -27,17 +27,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
27
27
  step((generator = generator.apply(thisArg, _arguments || [])).next());
28
28
  });
29
29
  };
30
- var __rest = (this && this.__rest) || function (s, e) {
31
- var t = {};
32
- for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
33
- t[p] = s[p];
34
- if (s != null && typeof Object.getOwnPropertySymbols === "function")
35
- for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
36
- if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
37
- t[p[i]] = s[p[i]];
38
- }
39
- return t;
40
- };
41
30
  var __importDefault = (this && this.__importDefault) || function (mod) {
42
31
  return (mod && mod.__esModule) ? mod : { "default": mod };
43
32
  };
@@ -54,7 +43,7 @@ class APIController {
54
43
  this.configStore = configStore;
55
44
  }
56
45
  _validateIdPConfig(body) {
57
- const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, name } = body;
46
+ const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product } = body;
58
47
  if (!rawMetadata && !encodedRawMetadata) {
59
48
  throw new error_1.JacksonError('Please provide rawMetadata or encodedRawMetadata', 400);
60
49
  }
@@ -70,9 +59,6 @@ class APIController {
70
59
  if (!product) {
71
60
  throw new error_1.JacksonError('Please provide product', 400);
72
61
  }
73
- if (!name) {
74
- throw new error_1.JacksonError('Please provide a friendly name', 400);
75
- }
76
62
  }
77
63
  /**
78
64
  * @swagger
@@ -87,24 +73,10 @@ class APIController {
87
73
  * consumes:
88
74
  * - application/x-www-form-urlencoded
89
75
  * parameters:
90
- * - name: name
91
- * description: Name/identifier for the config
92
- * type: string
93
- * in: formData
94
- * required: true
95
- * example: cal-saml-config
96
- * - name: description
97
- * description: A short description for the config not more than 100 characters
98
- * type: string
99
- * in: formData
100
- * example: SAML login for cal.com app
101
76
  * - name: encodedRawMetadata
102
77
  * description: Base64 encoding of the XML metadata
103
78
  * in: formData
104
- * type: string
105
- * - name: rawMetadata
106
- * description: Raw XML metadata
107
- * in: formData
79
+ * required: true
108
80
  * type: string
109
81
  * - name: defaultRedirectUrl
110
82
  * description: The redirect URL to use in the IdP login flow
@@ -151,7 +123,7 @@ class APIController {
151
123
  */
152
124
  config(body) {
153
125
  return __awaiter(this, void 0, void 0, function* () {
154
- const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, name, description, } = body;
126
+ const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product } = body;
155
127
  this._validateIdPConfig(body);
156
128
  let metaData = rawMetadata;
157
129
  if (encodedRawMetadata) {
@@ -183,8 +155,6 @@ class APIController {
183
155
  redirectUrl: JSON.parse(redirectUrl),
184
156
  tenant,
185
157
  product,
186
- name,
187
- description,
188
158
  clientID,
189
159
  clientSecret,
190
160
  certs,
@@ -204,127 +174,6 @@ class APIController {
204
174
  };
205
175
  });
206
176
  }
207
- /**
208
- * @swagger
209
- *
210
- * /api/v1/saml/config:
211
- * patch:
212
- * summary: Update SAML configuration
213
- * operationId: update-saml-config
214
- * tags: [SAML Config]
215
- * consumes:
216
- * - application/json
217
- * - application/x-www-form-urlencoded
218
- * parameters:
219
- * - name: clientID
220
- * description: Client ID for the config
221
- * type: string
222
- * in: formData
223
- * required: true
224
- * - name: clientSecret
225
- * description: Client Secret for the config
226
- * type: string
227
- * in: formData
228
- * required: true
229
- * - name: name
230
- * description: Name/identifier for the config
231
- * type: string
232
- * in: formData
233
- * required: true
234
- * example: cal-saml-config
235
- * - name: description
236
- * description: A short description for the config not more than 100 characters
237
- * type: string
238
- * in: formData
239
- * example: SAML login for cal.com app
240
- * - name: encodedRawMetadata
241
- * description: Base64 encoding of the XML metadata
242
- * in: formData
243
- * type: string
244
- * - name: rawMetadata
245
- * description: Raw XML metadata
246
- * in: formData
247
- * type: string
248
- * - name: defaultRedirectUrl
249
- * description: The redirect URL to use in the IdP login flow
250
- * in: formData
251
- * required: true
252
- * type: string
253
- * example: http://localhost:3000/login/saml
254
- * - name: redirectUrl
255
- * description: JSON encoded array containing a list of allowed redirect URLs
256
- * in: formData
257
- * required: true
258
- * type: string
259
- * example: '["http://localhost:3000/*"]'
260
- * - name: tenant
261
- * description: Tenant
262
- * in: formData
263
- * required: true
264
- * type: string
265
- * example: boxyhq.com
266
- * - name: product
267
- * description: Product
268
- * in: formData
269
- * required: true
270
- * type: string
271
- * example: demo
272
- * responses:
273
- * 204:
274
- * description: Success
275
- * 400:
276
- * description: Please provide clientID | Please provide clientSecret | clientSecret mismatch | Tenant/Product config mismatch with IdP metadata
277
- * 401:
278
- * description: Unauthorized
279
- */
280
- updateConfig(body) {
281
- var _a;
282
- return __awaiter(this, void 0, void 0, function* () {
283
- const { encodedRawMetadata, // could be empty
284
- rawMetadata, // could be empty
285
- defaultRedirectUrl, redirectUrl, name, description } = body, clientInfo = __rest(body, ["encodedRawMetadata", "rawMetadata", "defaultRedirectUrl", "redirectUrl", "name", "description"]);
286
- if (!(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID)) {
287
- throw new error_1.JacksonError('Please provide clientID', 400);
288
- }
289
- if (!(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
290
- throw new error_1.JacksonError('Please provide clientSecret', 400);
291
- }
292
- const _currentConfig = (_a = (yield this.getConfig(clientInfo))) === null || _a === void 0 ? void 0 : _a.config;
293
- if (_currentConfig.clientSecret !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
294
- throw new error_1.JacksonError('clientSecret mismatch', 400);
295
- }
296
- let metaData = rawMetadata;
297
- if (encodedRawMetadata) {
298
- metaData = Buffer.from(encodedRawMetadata, 'base64').toString();
299
- }
300
- let newMetadata;
301
- if (metaData) {
302
- newMetadata = yield saml_1.default.parseMetadataAsync(metaData);
303
- // extract provider
304
- let providerName = extractHostName(newMetadata.entityID);
305
- if (!providerName) {
306
- providerName = extractHostName(newMetadata.sso.redirectUrl || newMetadata.sso.postUrl);
307
- }
308
- newMetadata.provider = providerName ? providerName : 'Unknown';
309
- }
310
- if (newMetadata) {
311
- // check if clientID matches with new metadata payload
312
- const clientID = dbutils.keyDigest(dbutils.keyFromParts(clientInfo.tenant, clientInfo.product, newMetadata.entityID));
313
- if (clientID !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID)) {
314
- throw new error_1.JacksonError('Tenant/Product config mismatch with IdP metadata', 400);
315
- }
316
- }
317
- yield this.configStore.put(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID, Object.assign(Object.assign({}, _currentConfig), { name: name ? name : _currentConfig.name, description: description ? description : _currentConfig.description, idpMetadata: newMetadata ? newMetadata : _currentConfig.idpMetadata, defaultRedirectUrl: defaultRedirectUrl ? defaultRedirectUrl : _currentConfig.defaultRedirectUrl, redirectUrl: redirectUrl ? JSON.parse(redirectUrl) : _currentConfig.redirectUrl }), {
318
- // secondary index on entityID
319
- name: utils_1.IndexNames.EntityID,
320
- value: _currentConfig.idpMetadata.entityID,
321
- }, {
322
- // secondary index on tenant + product
323
- name: utils_1.IndexNames.TenantProduct,
324
- value: dbutils.keyFromParts(_currentConfig.tenant, _currentConfig.product),
325
- });
326
- });
327
- }
328
177
  /**
329
178
  * @swagger
330
179
  *
@@ -354,35 +203,11 @@ class APIController {
354
203
  * description: Success
355
204
  * schema:
356
205
  * type: object
206
+ * properties:
207
+ * provider:
208
+ * type: string
357
209
  * example:
358
- * {
359
- * "config": {
360
- * "idpMetadata": {
361
- * "sso": {
362
- * "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
363
- * "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
364
- * },
365
- * "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
366
- * "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
367
- * "loginType": "idp",
368
- * "provider": "okta.com"
369
- * },
370
- * "defaultRedirectUrl": "https://hoppscotch.io/",
371
- * "redirectUrl": ["https://hoppscotch.io/"],
372
- * "tenant": "hoppscotch.io",
373
- * "product": "API Engine",
374
- * "name": "Hoppscotch-SP",
375
- * "description": "SP for hoppscotch.io",
376
- * "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
377
- * "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
378
- * "certs": {
379
- * "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
380
- * "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
381
- * }
382
- * }
383
- * }
384
- * '400':
385
- * description: Please provide `clientID` or `tenant`/`product`.
210
+ * type: accounts.google.com
386
211
  * '401':
387
212
  * description: Unauthorized
388
213
  */
@@ -391,7 +216,7 @@ class APIController {
391
216
  const { clientID, tenant, product } = body;
392
217
  if (clientID) {
393
218
  const samlConfig = yield this.configStore.get(clientID);
394
- return samlConfig ? { config: samlConfig } : {};
219
+ return samlConfig ? { provider: samlConfig.idpMetadata.provider } : {};
395
220
  }
396
221
  if (tenant && product) {
397
222
  const samlConfigs = yield this.configStore.getByIndex({
@@ -401,7 +226,7 @@ class APIController {
401
226
  if (!samlConfigs || !samlConfigs.length) {
402
227
  return {};
403
228
  }
404
- return { config: samlConfigs[0] };
229
+ return { provider: samlConfigs[0].idpMetadata.provider };
405
230
  }
406
231
  throw new error_1.JacksonError('Please provide `clientID` or `tenant` and `product`.', 400);
407
232
  });
@@ -455,7 +280,7 @@ class APIController {
455
280
  yield this.configStore.delete(clientID);
456
281
  }
457
282
  else {
458
- throw new error_1.JacksonError('clientSecret mismatch', 400);
283
+ throw new error_1.JacksonError('clientSecret mismatch.', 400);
459
284
  }
460
285
  return;
461
286
  }
@@ -292,6 +292,12 @@ class OAuthController {
292
292
  throw new error_1.JacksonError('Invalid client_id or client_secret', 401);
293
293
  }
294
294
  }
295
+ else {
296
+ // encoded client_id, verify client_secret
297
+ if (client_secret !== this.opts.clientSecretVerifier) {
298
+ throw new error_1.JacksonError('Invalid client_secret', 401);
299
+ }
300
+ }
295
301
  }
296
302
  }
297
303
  else if (codeVal && codeVal.session) {
package/dist/db/db.d.ts CHANGED
@@ -4,7 +4,6 @@ declare class DB implements DatabaseDriver {
4
4
  private encryptionKey;
5
5
  constructor(db: DatabaseDriver, encryptionKey: EncryptionKey);
6
6
  get(namespace: string, key: string): Promise<unknown>;
7
- getAll(namespace: any): Promise<unknown[]>;
8
7
  getByIndex(namespace: string, idx: Index): Promise<unknown[]>;
9
8
  put(namespace: string, key: string, val: unknown, ttl?: number, ...indexes: Index[]): Promise<unknown>;
10
9
  delete(namespace: string, key: string): Promise<unknown>;
package/dist/db/db.js CHANGED
@@ -57,15 +57,6 @@ class DB {
57
57
  return decrypt(res, this.encryptionKey);
58
58
  });
59
59
  }
60
- getAll(namespace) {
61
- return __awaiter(this, void 0, void 0, function* () {
62
- const res = (yield this.db.getAll(namespace));
63
- const encryptionKey = this.encryptionKey;
64
- return res.map((r) => {
65
- return decrypt(r, encryptionKey);
66
- });
67
- });
68
- }
69
60
  getByIndex(namespace, idx) {
70
61
  return __awaiter(this, void 0, void 0, function* () {
71
62
  const res = yield this.db.getByIndex(namespace, idx);
package/dist/db/mem.d.ts CHANGED
@@ -10,7 +10,6 @@ declare class Mem implements DatabaseDriver {
10
10
  constructor(options: DatabaseOption);
11
11
  init(): Promise<Mem>;
12
12
  get(namespace: string, key: string): Promise<any>;
13
- getAll(namespace: string): Promise<unknown[]>;
14
13
  getByIndex(namespace: string, idx: Index): Promise<any>;
15
14
  put(namespace: string, key: string, val: Encrypted, ttl?: number, ...indexes: any[]): Promise<any>;
16
15
  delete(namespace: string, key: string): Promise<any>;
package/dist/db/mem.js CHANGED
@@ -66,21 +66,6 @@ class Mem {
66
66
  return null;
67
67
  });
68
68
  }
69
- getAll(namespace) {
70
- return __awaiter(this, void 0, void 0, function* () {
71
- const returnValue = [];
72
- if (namespace) {
73
- for (const key in this.store) {
74
- if (key.startsWith(namespace)) {
75
- returnValue.push(this.store[key]);
76
- }
77
- }
78
- }
79
- if (returnValue)
80
- return returnValue;
81
- return [];
82
- });
83
- }
84
69
  getByIndex(namespace, idx) {
85
70
  return __awaiter(this, void 0, void 0, function* () {
86
71
  const dbKeys = yield this.indexes[dbutils.keyForIndex(namespace, idx)];
@@ -95,10 +80,6 @@ class Mem {
95
80
  return __awaiter(this, void 0, void 0, function* () {
96
81
  const k = dbutils.key(namespace, key);
97
82
  this.store[k] = val;
98
- if (!Date.parse(this.store['createdAt']))
99
- this.store['createdAt'] = new Date().toISOString();
100
- this.store['modifiedAt'] = new Date().toISOString();
101
- // console.log(this.store)
102
83
  if (ttl) {
103
84
  this.ttlStore[k] = {
104
85
  namespace,
@@ -7,7 +7,6 @@ declare class Mongo implements DatabaseDriver {
7
7
  constructor(options: DatabaseOption);
8
8
  init(): Promise<Mongo>;
9
9
  get(namespace: string, key: string): Promise<any>;
10
- getAll(namespace: string): Promise<unknown[]>;
11
10
  getByIndex(namespace: string, idx: Index): Promise<any>;
12
11
  put(namespace: string, key: string, val: Encrypted, ttl?: number, ...indexes: any[]): Promise<void>;
13
12
  delete(namespace: string, key: string): Promise<any>;
package/dist/db/mongo.js CHANGED
@@ -36,16 +36,8 @@ class Mongo {
36
36
  }
37
37
  init() {
38
38
  return __awaiter(this, void 0, void 0, function* () {
39
- try {
40
- if (!this.options.url) {
41
- throw Error('Please specify a db url');
42
- }
43
- this.client = new mongodb_1.MongoClient(this.options.url);
44
- yield this.client.connect();
45
- }
46
- catch (err) {
47
- console.error(`error connecting to ${this.options.type} db: ${err}`);
48
- }
39
+ this.client = new mongodb_1.MongoClient(this.options.url);
40
+ yield this.client.connect();
49
41
  this.db = this.client.db();
50
42
  this.collection = this.db.collection('jacksonStore');
51
43
  yield this.collection.createIndex({ indexes: 1 });
@@ -64,15 +56,6 @@ class Mongo {
64
56
  return null;
65
57
  });
66
58
  }
67
- getAll(namespace) {
68
- return __awaiter(this, void 0, void 0, function* () {
69
- const _namespaceMatch = new RegExp(`^${namespace}:.*`);
70
- const docs = yield this.collection.find({ _id: _namespaceMatch }).toArray();
71
- if (docs)
72
- return docs.map(({ value }) => value);
73
- return [];
74
- });
75
- }
76
59
  getByIndex(namespace, idx) {
77
60
  return __awaiter(this, void 0, void 0, function* () {
78
61
  const docs = yield this.collection
@@ -103,12 +86,8 @@ class Mongo {
103
86
  }
104
87
  doc.indexes.push(idxKey);
105
88
  }
106
- doc.modifiedAt = new Date().toISOString();
107
89
  yield this.collection.updateOne({ _id: dbutils.key(namespace, key) }, {
108
90
  $set: doc,
109
- $setOnInsert: {
110
- createdAt: new Date().toISOString(),
111
- },
112
91
  }, { upsert: true });
113
92
  });
114
93
  }
@@ -5,7 +5,6 @@ declare class Redis implements DatabaseDriver {
5
5
  constructor(options: DatabaseOption);
6
6
  init(): Promise<Redis>;
7
7
  get(namespace: string, key: string): Promise<any>;
8
- getAll(namespace: string): Promise<unknown[]>;
9
8
  getByIndex(namespace: string, idx: Index): Promise<any>;
10
9
  put(namespace: string, key: string, val: Encrypted, ttl?: number, ...indexes: any[]): Promise<void>;
11
10
  delete(namespace: string, key: string): Promise<any>;
package/dist/db/redis.js CHANGED
@@ -57,26 +57,6 @@ class Redis {
57
57
  return null;
58
58
  });
59
59
  }
60
- getAll(namespace) {
61
- return __awaiter(this, void 0, void 0, function* () {
62
- const keys = yield this.client.sendCommand(['keys', namespace + ':*']);
63
- const returnValue = [];
64
- for (let i = 0; i < keys.length; i++) {
65
- try {
66
- if (this.client.get(keys[i])) {
67
- const value = yield this.client.get(keys[i]);
68
- returnValue.push(JSON.parse(value));
69
- }
70
- }
71
- catch (error) {
72
- console.error(error);
73
- }
74
- }
75
- if (returnValue)
76
- return returnValue;
77
- return [];
78
- });
79
- }
80
60
  getByIndex(namespace, idx) {
81
61
  return __awaiter(this, void 0, void 0, function* () {
82
62
  const dbKeys = yield this.client.sMembers(dbutils.keyForIndex(namespace, idx));
@@ -3,6 +3,4 @@ export declare class JacksonStore {
3
3
  value: string;
4
4
  iv?: string;
5
5
  tag?: string;
6
- createdAt?: Date;
7
- modifiedAt?: string;
8
6
  }
@@ -36,19 +36,6 @@ __decorate([
36
36
  nullable: true,
37
37
  })
38
38
  ], JacksonStore.prototype, "tag", void 0);
39
- __decorate([
40
- (0, typeorm_1.Column)({
41
- type: 'timestamp',
42
- default: () => 'CURRENT_TIMESTAMP',
43
- nullable: false,
44
- })
45
- ], JacksonStore.prototype, "createdAt", void 0);
46
- __decorate([
47
- (0, typeorm_1.Column)({
48
- type: 'timestamp',
49
- nullable: true,
50
- })
51
- ], JacksonStore.prototype, "modifiedAt", void 0);
52
39
  JacksonStore = __decorate([
53
40
  (0, typeorm_1.Entity)()
54
41
  ], JacksonStore);
@@ -10,7 +10,6 @@ declare class Sql implements DatabaseDriver {
10
10
  constructor(options: DatabaseOption);
11
11
  init(): Promise<Sql>;
12
12
  get(namespace: string, key: string): Promise<any>;
13
- getAll(namespace: string): Promise<unknown[]>;
14
13
  getByIndex(namespace: string, idx: Index): Promise<any>;
15
14
  put(namespace: string, key: string, val: Encrypted, ttl?: number, ...indexes: any[]): Promise<void>;
16
15
  delete(namespace: string, key: string): Promise<any>;
@@ -95,7 +95,7 @@ class Sql {
95
95
  }
96
96
  get(namespace, key) {
97
97
  return __awaiter(this, void 0, void 0, function* () {
98
- const res = yield this.storeRepository.findOne({
98
+ let res = yield this.storeRepository.findOne({
99
99
  key: dbutils.key(namespace, key),
100
100
  });
101
101
  if (res && res.value) {
@@ -108,22 +108,6 @@ class Sql {
108
108
  return null;
109
109
  });
110
110
  }
111
- getAll(namespace) {
112
- return __awaiter(this, void 0, void 0, function* () {
113
- const response = yield this.storeRepository.find({
114
- where: { key: (0, typeorm_1.Like)(`%${namespace}%`) },
115
- select: ['value', 'iv', 'tag'],
116
- order: {
117
- ['createdAt']: 'DESC',
118
- // ['createdAt']: 'ASC',
119
- },
120
- });
121
- const returnValue = JSON.parse(JSON.stringify(response));
122
- if (returnValue)
123
- return returnValue;
124
- return [];
125
- });
126
- }
127
111
  getByIndex(namespace, idx) {
128
112
  return __awaiter(this, void 0, void 0, function* () {
129
113
  const res = yield this.indexRepository.find({
@@ -151,7 +135,6 @@ class Sql {
151
135
  store.value = val.value;
152
136
  store.iv = val.iv;
153
137
  store.tag = val.tag;
154
- store.modifiedAt = new Date().toISOString();
155
138
  yield transactionalEntityManager.save(store);
156
139
  if (ttl) {
157
140
  const ttlRec = new JacksonTTL_1.JacksonTTL();
package/dist/db/store.js CHANGED
@@ -40,11 +40,6 @@ class Store {
40
40
  return yield this.db.get(this.namespace, dbutils.keyDigest(key));
41
41
  });
42
42
  }
43
- getAll() {
44
- return __awaiter(this, void 0, void 0, function* () {
45
- return yield this.db.getAll(this.namespace);
46
- });
47
- }
48
43
  getByIndex(idx) {
49
44
  return __awaiter(this, void 0, void 0, function* () {
50
45
  idx.value = dbutils.keyDigest(idx.value);
package/dist/index.d.ts CHANGED
@@ -1,11 +1,9 @@
1
1
  import { JacksonOption } from './typings';
2
2
  import { APIController } from './controller/api';
3
3
  import { OAuthController } from './controller/oauth';
4
- import { AdminController } from './controller/admin';
5
4
  export declare const controllers: (opts: JacksonOption) => Promise<{
6
5
  apiController: APIController;
7
6
  oauthController: OAuthController;
8
- adminController: AdminController;
9
7
  }>;
10
8
  export default controllers;
11
9
  export * from './typings';
package/dist/index.js CHANGED
@@ -25,7 +25,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
25
25
  exports.controllers = void 0;
26
26
  const api_1 = require("./controller/api");
27
27
  const oauth_1 = require("./controller/oauth");
28
- const admin_1 = require("./controller/admin");
29
28
  const db_1 = __importDefault(require("./db/db"));
30
29
  const read_config_1 = __importDefault(require("./read-config"));
31
30
  const defaultOpts = (opts) => {
@@ -45,6 +44,7 @@ const defaultOpts = (opts) => {
45
44
  newOpts.db.type = newOpts.db.type || 'postgres'; // Only needed if DB_ENGINE is sql.
46
45
  newOpts.db.ttl = (newOpts.db.ttl || 300) * 1; // TTL for the code, session and token stores (in seconds)
47
46
  newOpts.db.cleanupLimit = (newOpts.db.cleanupLimit || 1000) * 1; // Limit cleanup of TTL entries to this many items at a time
47
+ newOpts.clientSecretVerifier = newOpts.clientSecretVerifier || 'dummy';
48
48
  return newOpts;
49
49
  };
50
50
  const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
@@ -55,7 +55,6 @@ const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
55
55
  const codeStore = db.store('oauth:code', opts.db.ttl);
56
56
  const tokenStore = db.store('oauth:token', opts.db.ttl);
57
57
  const apiController = new api_1.APIController({ configStore });
58
- const adminController = new admin_1.AdminController({ configStore });
59
58
  const oauthController = new oauth_1.OAuthController({
60
59
  configStore,
61
60
  sessionStore,
@@ -76,7 +75,6 @@ const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
76
75
  return {
77
76
  apiController,
78
77
  oauthController,
79
- adminController,
80
78
  };
81
79
  });
82
80
  exports.controllers = controllers;
package/dist/typings.d.ts CHANGED
@@ -3,8 +3,6 @@ export declare type IdPConfig = {
3
3
  redirectUrl: string;
4
4
  tenant: string;
5
5
  product: string;
6
- name: string;
7
- description: string;
8
6
  rawMetadata?: string;
9
7
  encodedRawMetadata?: string;
10
8
  };
@@ -15,12 +13,11 @@ export interface OAuth {
15
13
  }
16
14
  export interface IAPIController {
17
15
  config(body: IdPConfig): Promise<OAuth>;
18
- updateConfig(body: any): Promise<void>;
19
16
  getConfig(body: {
20
17
  clientID?: string;
21
18
  tenant?: string;
22
19
  product?: string;
23
- }): Promise<any>;
20
+ }): Promise<Partial<OAuth>>;
24
21
  deleteConfig(body: {
25
22
  clientID?: string;
26
23
  clientSecret?: string;
@@ -38,9 +35,6 @@ export interface IOAuthController {
38
35
  token(body: OAuthTokenReq): Promise<OAuthTokenRes>;
39
36
  userInfo(token: string): Promise<Profile>;
40
37
  }
41
- export interface IAdminController {
42
- getAllConfig(): any;
43
- }
44
38
  export interface OAuthReqBody {
45
39
  response_type: 'code';
46
40
  client_id: string;
@@ -79,14 +73,12 @@ export interface Index {
79
73
  value: string;
80
74
  }
81
75
  export interface DatabaseDriver {
82
- getAll(namespace: string): Promise<unknown[]>;
83
76
  get(namespace: string, key: string): Promise<any>;
84
77
  put(namespace: string, key: string, val: any, ttl: number, ...indexes: Index[]): Promise<any>;
85
78
  delete(namespace: string, key: string): Promise<any>;
86
79
  getByIndex(namespace: string, idx: Index): Promise<any>;
87
80
  }
88
81
  export interface Storable {
89
- getAll(): Promise<unknown[]>;
90
82
  get(key: string): Promise<any>;
91
83
  put(key: string, val: any, ...indexes: Index[]): Promise<any>;
92
84
  delete(key: string): Promise<any>;
@@ -131,4 +123,5 @@ export interface JacksonOption {
131
123
  preLoadedConfig?: string;
132
124
  idpEnabled?: boolean;
133
125
  db: DatabaseOption;
126
+ clientSecretVerifier?: string;
134
127
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@boxyhq/saml-jackson",
3
- "version": "0.3.7-beta.684",
3
+ "version": "0.3.7-beta.685",
4
4
  "description": "SAML 2.0 service",
5
5
  "keywords": [
6
6
  "SAML 2.0"
@@ -18,9 +18,9 @@
18
18
  ],
19
19
  "scripts": {
20
20
  "build": "tsc -p tsconfig.build.json",
21
- "db:migration:generate:postgres": "ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n createdAt",
22
- "db:migration:generate:mysql": "cross-env DB_TYPE=mysql DB_URL=mysql://root:mysql@localhost:3307/mysql ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n createdAt",
23
- "db:migration:generate:mariadb": "cross-env DB_TYPE=mariadb DB_URL=mariadb://root@localhost:3306/mysql ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n createdAt",
21
+ "db:migration:generate:postgres": "ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n Initial",
22
+ "db:migration:generate:mysql": "cross-env DB_TYPE=mysql DB_URL=mysql://root:mysql@localhost:3307/mysql ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n Initial",
23
+ "db:migration:generate:mariadb": "cross-env DB_TYPE=mariadb DB_URL=mariadb://root@localhost:3306/mysql ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:generate --config ormconfig.js -n Initial",
24
24
  "db:migration:run:postgres": "ts-node --transpile-only ./node_modules/typeorm/cli.js migration:run",
25
25
  "db:migration:run:mysql": "cross-env DB_TYPE=mysql DB_URL=mysql://root:mysql@localhost:3307/mysql ts-node --transpile-only ./node_modules/typeorm/cli.js migration:run",
26
26
  "db:migration:run:mariadb": "cross-env DB_TYPE=mariadb DB_URL=mariadb://root@localhost:3306/mysql ts-node --transpile-only ./node_modules/typeorm/cli.js migration:run",
@@ -1,8 +0,0 @@
1
- import { IAdminController, Storable, OAuth } from '../typings';
2
- export declare class AdminController implements IAdminController {
3
- configStore: Storable;
4
- constructor({ configStore }: {
5
- configStore: any;
6
- });
7
- getAllConfig(): Promise<Partial<OAuth>[]>;
8
- }
@@ -1,27 +0,0 @@
1
- "use strict";
2
- var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
- function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
- return new (P || (P = Promise))(function (resolve, reject) {
5
- function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
- function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
- function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
- step((generator = generator.apply(thisArg, _arguments || [])).next());
9
- });
10
- };
11
- Object.defineProperty(exports, "__esModule", { value: true });
12
- exports.AdminController = void 0;
13
- class AdminController {
14
- constructor({ configStore }) {
15
- this.configStore = configStore;
16
- }
17
- getAllConfig() {
18
- return __awaiter(this, void 0, void 0, function* () {
19
- const configList = (yield this.configStore.getAll());
20
- if (!configList || !configList.length) {
21
- return [];
22
- }
23
- return configList;
24
- });
25
- }
26
- }
27
- exports.AdminController = AdminController;
@@ -1,16 +0,0 @@
1
- import {MigrationInterface, QueryRunner} from "typeorm";
2
-
3
- export class createdAt1644332636666 implements MigrationInterface {
4
- name = 'createdAt1644332636666'
5
-
6
- public async up(queryRunner: QueryRunner): Promise<void> {
7
- await queryRunner.query(`ALTER TABLE \`jackson_store\` ADD \`createdAt\` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP()`);
8
- await queryRunner.query(`ALTER TABLE \`jackson_store\` ADD \`modifiedAt\` timestamp NULL`);
9
- }
10
-
11
- public async down(queryRunner: QueryRunner): Promise<void> {
12
- await queryRunner.query(`ALTER TABLE \`jackson_store\` DROP COLUMN \`modifiedAt\``);
13
- await queryRunner.query(`ALTER TABLE \`jackson_store\` DROP COLUMN \`createdAt\``);
14
- }
15
-
16
- }
@@ -1,16 +0,0 @@
1
- import {MigrationInterface, QueryRunner} from "typeorm";
2
-
3
- export class createdAt1644332641078 implements MigrationInterface {
4
- name = 'createdAt1644332641078'
5
-
6
- public async up(queryRunner: QueryRunner): Promise<void> {
7
- await queryRunner.query(`ALTER TABLE \`jackson_store\` ADD \`createdAt\` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP`);
8
- await queryRunner.query(`ALTER TABLE \`jackson_store\` ADD \`modifiedAt\` timestamp NULL`);
9
- }
10
-
11
- public async down(queryRunner: QueryRunner): Promise<void> {
12
- await queryRunner.query(`ALTER TABLE \`jackson_store\` DROP COLUMN \`modifiedAt\``);
13
- await queryRunner.query(`ALTER TABLE \`jackson_store\` DROP COLUMN \`createdAt\``);
14
- }
15
-
16
- }
@@ -1,16 +0,0 @@
1
- import {MigrationInterface, QueryRunner} from "typeorm";
2
-
3
- export class createdAt1644332647279 implements MigrationInterface {
4
- name = 'createdAt1644332647279'
5
-
6
- public async up(queryRunner: QueryRunner): Promise<void> {
7
- await queryRunner.query(`ALTER TABLE "jackson_store" ADD "createdAt" TIMESTAMP NOT NULL DEFAULT now()`);
8
- await queryRunner.query(`ALTER TABLE "jackson_store" ADD "modifiedAt" TIMESTAMP`);
9
- }
10
-
11
- public async down(queryRunner: QueryRunner): Promise<void> {
12
- await queryRunner.query(`ALTER TABLE "jackson_store" DROP COLUMN "modifiedAt"`);
13
- await queryRunner.query(`ALTER TABLE "jackson_store" DROP COLUMN "createdAt"`);
14
- }
15
-
16
- }