@boxyhq/saml-jackson 0.4.2 → 0.4.3

package/dist/controller/oauth.js

@@ -141,6 +141,12 @@ class OAuthController {
                 publicKey: samlConfig.certs.publicKey,
             });
             const sessionId = crypto_1.default.randomBytes(16).toString('hex');
+            const requestedParams = {
+                tenant,
+                product,
+                client_id,
+                state,
+            };
             yield this.sessionStore.put(sessionId, {
                 id: samlReq.id,
                 redirect_uri,
@@ -148,6 +154,7 @@ class OAuthController {
                 state,
                 code_challenge,
                 code_challenge_method,
+                requested: requestedParams,
             });
             const relayState = relayStatePrefix + sessionId;
             let redirectUrl;
@@ -213,6 +220,7 @@ class OAuthController {
                 profile,
                 clientID: samlConfig.clientID,
                 clientSecret: samlConfig.clientSecret,
+                requested: session.requested,
             };
             if (session) {
                 codeVal.session = session;
@@ -228,6 +236,13 @@ class OAuthController {
                 params.state = session.state;
             }
             const redirectUrl = redirect.success((session && session.redirect_uri) || samlConfig.defaultRedirectUrl, params);
+            // delete the session
+            try {
+                yield this.sessionStore.delete(RelayState);
+            }
+            catch (_err) {
+                // ignore error
+            }
             return { redirect_url: redirectUrl };
         });
     }
@@ -333,7 +348,15 @@ class OAuthController {
             }
             // store details against a token
             const token = crypto_1.default.randomBytes(20).toString('hex');
-            yield this.tokenStore.put(token, codeVal.profile);
+            const tokenVal = Object.assign(Object.assign({}, codeVal.profile), { requested: codeVal.requested });
+            yield this.tokenStore.put(token, tokenVal);
+            // delete the code
+            try {
+                yield this.codeStore.delete(code);
+            }
+            catch (_err) {
+                // ignore error
+            }
             return {
                 access_token: token,
                 token_type: 'bearer',
@@ -377,7 +400,7 @@ class OAuthController {
             if (!rsp || !rsp.claims) {
                 throw new error_1.JacksonError('Invalid token', 403);
             }
-            return rsp.claims;
+            return Object.assign(Object.assign({}, rsp.claims), { requested: rsp.requested });
         });
     }
 }

package/dist/db/sql/sql.js

@@ -178,8 +178,10 @@ class Sql {
     }
     delete(namespace, key) {
         return __awaiter(this, void 0, void 0, function* () {
+            const dbKey = dbutils.key(namespace, key);
+            yield this.ttlRepository.remove({ key: dbKey });
             return yield this.storeRepository.remove({
-                key: dbutils.key(namespace, key),
+                key: dbKey,
             });
         });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "SAML Jackson library",
   "keywords": [
     "SAML 2.0"
@@ -70,6 +70,6 @@
     "typescript": "4.5.5"
   },
   "engines": {
-    "node": ">=14.x"
+    "node": ">=14.18.1 <=16.x"
   }
 }