@boxyhq/saml-jackson 0.4.3 → 1.0.0

package/README.md

@@ -14,7 +14,7 @@ npm i @boxyhq/saml-jackson
 
 ## Documentation
 
-For full documentation, visit [boxyhq.com/docs/jackson/npm-library](https://boxyhq.com/docs/jackson/npm-library)
+For full documentation, visit [boxyhq.com/docs/jackson/deploy/npm-library](https://boxyhq.com/docs/jackson/deploy/npm-library)
 
 ## License
 

package/dist/controller/admin.d.ts

@@ -1,8 +1,8 @@
-import { IAdminController, Storable, OAuth } from '../typings';
+import { IAdminController, Storable } from '../typings';
 export declare class AdminController implements IAdminController {
     configStore: Storable;
     constructor({ configStore }: {
         configStore: any;
     });
-    getAllConfig(): Promise<Partial<OAuth>[]>;
+    getAllConfig(pageOffset?: number, pageLimit?: number): Promise<Partial<any>[]>;
 }

package/dist/controller/admin.js

@@ -14,9 +14,9 @@ class AdminController {
     constructor({ configStore }) {
         this.configStore = configStore;
     }
-    getAllConfig() {
+    getAllConfig(pageOffset, pageLimit) {
         return __awaiter(this, void 0, void 0, function* () {
-            const configList = (yield this.configStore.getAll());
+            const configList = (yield this.configStore.getAll(pageOffset, pageLimit));
             if (!configList || !configList.length) {
                 return [];
             }

package/dist/controller/api.d.ts

@@ -1,9 +1,10 @@
-import { IAPIController, IdPConfig, OAuth } from '../typings';
+import { IAPIController, IdPConfig } from '../typings';
 export declare class APIController implements IAPIController {
     private configStore;
     constructor({ configStore }: {
         configStore: any;
     });
+    private _validateRedirectUrl;
     private _validateIdPConfig;
     /**
      * @swagger
@@ -59,23 +60,37 @@ export declare class APIController implements IAPIController {
      *         description: Success
      *         schema:
      *           type: object
-     *           properties:
-     *             client_id:
-     *               type: string
-     *             client_secret:
-     *               type: string
-     *             provider:
-     *               type: string
      *           example:
-     *             client_id: 8958e13053832b5af58fdf2ee83f35f5d013dc74
-     *             client_secret: 13f01f4df5b01770c616e682d14d3ba23f20948cfa89b1d7
-     *             type: accounts.google.com
+     *             {
+     *               "idpMetadata": {
+     *                 "sso": {
+     *                   "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
+     *                   "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
+     *                 },
+     *                 "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
+     *                 "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
+     *                 "loginType": "idp",
+     *                 "provider": "okta.com"
+     *               },
+     *               "defaultRedirectUrl": "https://hoppscotch.io/",
+     *               "redirectUrl": ["https://hoppscotch.io/"],
+     *               "tenant": "hoppscotch.io",
+     *               "product": "API Engine",
+     *               "name": "Hoppscotch-SP",
+     *               "description": "SP for hoppscotch.io",
+     *               "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
+     *               "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
+     *               "certs": {
+     *                 "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
+     *                 "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
+     *               }
+     *           }
      *       400:
      *         description: Please provide rawMetadata or encodedRawMetadata | Please provide a defaultRedirectUrl | Please provide redirectUrl | Please provide tenant | Please provide product | Please provide a friendly name | Description should not exceed 100 characters
      *       401:
      *         description: Unauthorized
      */
-    config(body: IdPConfig): Promise<OAuth>;
+    config(body: IdPConfig): Promise<any>;
     /**
      * @swagger
      *
@@ -172,31 +187,29 @@ export declare class APIController implements IAPIController {
      *           type: object
      *           example:
      *             {
-     *               "config": {
-     *                 "idpMetadata": {
-     *                   "sso": {
-     *                     "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
-     *                     "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
-     *                   },
-     *                   "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
-     *                   "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
-     *                   "loginType": "idp",
-     *                   "provider": "okta.com"
+     *               "idpMetadata": {
+     *                 "sso": {
+     *                   "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
+     *                   "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
      *                 },
-     *                 "defaultRedirectUrl": "https://hoppscotch.io/",
-     *                 "redirectUrl": ["https://hoppscotch.io/"],
-     *                 "tenant": "hoppscotch.io",
-     *                 "product": "API Engine",
-     *                 "name": "Hoppscotch-SP",
-     *                 "description": "SP for hoppscotch.io",
-     *                 "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
-     *                 "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
-     *                 "certs": {
-     *                   "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
-     *                   "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
-     *                 }
+     *                 "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
+     *                 "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
+     *                 "loginType": "idp",
+     *                 "provider": "okta.com"
+     *               },
+     *               "defaultRedirectUrl": "https://hoppscotch.io/",
+     *               "redirectUrl": ["https://hoppscotch.io/"],
+     *               "tenant": "hoppscotch.io",
+     *               "product": "API Engine",
+     *               "name": "Hoppscotch-SP",
+     *               "description": "SP for hoppscotch.io",
+     *               "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
+     *               "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
+     *               "certs": {
+     *                 "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
+     *                 "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
      *               }
-     *             }
+     *           }
      *       '400':
      *         description: Please provide `clientID` or `tenant` and `product`.
      *       '401':

package/dist/controller/api.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -54,6 +58,19 @@ class APIController {
     constructor({ configStore }) {
         this.configStore = configStore;
     }
+    _validateRedirectUrl({ redirectUrlList, defaultRedirectUrl }) {
+        if (redirectUrlList) {
+            if (redirectUrlList.length > 100) {
+                throw new error_1.JacksonError('Exceeded maximum number of allowed redirect urls', 400);
+            }
+            for (const url of redirectUrlList) {
+                (0, utils_1.validateAbsoluteUrl)(url, 'redirectUrl is invalid');
+            }
+        }
+        if (defaultRedirectUrl) {
+            (0, utils_1.validateAbsoluteUrl)(defaultRedirectUrl, 'defaultRedirectUrl is invalid');
+        }
+    }
     _validateIdPConfig(body) {
         const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, description } = body;
         if (!rawMetadata && !encodedRawMetadata) {
@@ -129,17 +146,31 @@ class APIController {
      *         description: Success
      *         schema:
      *           type: object
-     *           properties:
-     *             client_id:
-     *               type: string
-     *             client_secret:
-     *               type: string
-     *             provider:
-     *               type: string
      *           example:
-     *             client_id: 8958e13053832b5af58fdf2ee83f35f5d013dc74
-     *             client_secret: 13f01f4df5b01770c616e682d14d3ba23f20948cfa89b1d7
-     *             type: accounts.google.com
+     *             {
+     *               "idpMetadata": {
+     *                 "sso": {
+     *                   "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
+     *                   "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
+     *                 },
+     *                 "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
+     *                 "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
+     *                 "loginType": "idp",
+     *                 "provider": "okta.com"
+     *               },
+     *               "defaultRedirectUrl": "https://hoppscotch.io/",
+     *               "redirectUrl": ["https://hoppscotch.io/"],
+     *               "tenant": "hoppscotch.io",
+     *               "product": "API Engine",
+     *               "name": "Hoppscotch-SP",
+     *               "description": "SP for hoppscotch.io",
+     *               "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
+     *               "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
+     *               "certs": {
+     *                 "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
+     *                 "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
+     *               }
+     *           }
      *       400:
      *         description: Please provide rawMetadata or encodedRawMetadata | Please provide a defaultRedirectUrl | Please provide redirectUrl | Please provide tenant | Please provide product | Please provide a friendly name | Description should not exceed 100 characters
      *       401:
@@ -150,6 +181,8 @@ class APIController {
             const { encodedRawMetadata, rawMetadata, defaultRedirectUrl, redirectUrl, tenant, product, name, description, } = body;
             metrics.increment('createConfig');
             this._validateIdPConfig(body);
+            const redirectUrlList = extractRedirectUrls(redirectUrl);
+            this._validateRedirectUrl({ defaultRedirectUrl, redirectUrlList });
             let metaData = rawMetadata;
             if (encodedRawMetadata) {
                 metaData = Buffer.from(encodedRawMetadata, 'base64').toString();
@@ -174,10 +207,10 @@ class APIController {
             if (!certs) {
                 throw new Error('Error generating x59 certs');
             }
-            yield this.configStore.put(clientID, {
+            const record = {
                 idpMetadata,
                 defaultRedirectUrl,
-                redirectUrl: JSON.parse(redirectUrl),
+                redirectUrl: redirectUrlList,
                 tenant,
                 product,
                 name,
@@ -185,7 +218,8 @@ class APIController {
                 clientID,
                 clientSecret,
                 certs,
-            }, {
+            };
+            yield this.configStore.put(clientID, record, {
                 // secondary index on entityID
                 name: utils_1.IndexNames.EntityID,
                 value: idpMetadata.entityID,
@@ -194,11 +228,7 @@ class APIController {
                 name: utils_1.IndexNames.TenantProduct,
                 value: dbutils.keyFromParts(tenant, product),
             });
-            return {
-                client_id: clientID,
-                client_secret: clientSecret,
-                provider: idpMetadata.provider,
-            };
+            return record;
         });
     }
     /**
@@ -268,7 +298,6 @@ class APIController {
      *         description: Unauthorized
      */
     updateConfig(body) {
-        var _a;
         return __awaiter(this, void 0, void 0, function* () {
             const { encodedRawMetadata, // could be empty
             rawMetadata, // could be empty
@@ -282,7 +311,9 @@ class APIController {
             if (description && description.length > 100) {
                 throw new error_1.JacksonError('Description should not exceed 100 characters', 400);
             }
-            const _currentConfig = (_a = (yield this.getConfig(clientInfo))) === null || _a === void 0 ? void 0 : _a.config;
+            const redirectUrlList = redirectUrl ? extractRedirectUrls(redirectUrl) : null;
+            this._validateRedirectUrl({ defaultRedirectUrl, redirectUrlList });
+            const _currentConfig = yield this.getConfig(clientInfo);
             if (_currentConfig.clientSecret !== (clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientSecret)) {
                 throw new error_1.JacksonError('clientSecret mismatch', 400);
             }
@@ -307,7 +338,8 @@ class APIController {
                     throw new error_1.JacksonError('Tenant/Product config mismatch with IdP metadata', 400);
                 }
             }
-            yield this.configStore.put(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID, Object.assign(Object.assign({}, _currentConfig), { name: name ? name : _currentConfig.name, description: description ? description : _currentConfig.description, idpMetadata: newMetadata ? newMetadata : _currentConfig.idpMetadata, defaultRedirectUrl: defaultRedirectUrl ? defaultRedirectUrl : _currentConfig.defaultRedirectUrl, redirectUrl: redirectUrl ? JSON.parse(redirectUrl) : _currentConfig.redirectUrl }), {
+            const record = Object.assign(Object.assign({}, _currentConfig), { name: name ? name : _currentConfig.name, description: description ? description : _currentConfig.description, idpMetadata: newMetadata ? newMetadata : _currentConfig.idpMetadata, defaultRedirectUrl: defaultRedirectUrl ? defaultRedirectUrl : _currentConfig.defaultRedirectUrl, redirectUrl: redirectUrlList ? redirectUrlList : _currentConfig.redirectUrl });
+            yield this.configStore.put(clientInfo === null || clientInfo === void 0 ? void 0 : clientInfo.clientID, record, {
                 // secondary index on entityID
                 name: utils_1.IndexNames.EntityID,
                 value: _currentConfig.idpMetadata.entityID,
@@ -347,31 +379,29 @@ class APIController {
      *           type: object
      *           example:
      *             {
-     *               "config": {
-     *                 "idpMetadata": {
-     *                   "sso": {
-     *                     "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
-     *                     "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
-     *                   },
-     *                   "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
-     *                   "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
-     *                   "loginType": "idp",
-     *                   "provider": "okta.com"
+     *               "idpMetadata": {
+     *                 "sso": {
+     *                   "postUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml",
+     *                   "redirectUrl": "https://dev-20901260.okta.com/app/dev-20901260_jacksonnext_1/xxxxxxxxxxxxx/sso/saml"
      *                 },
-     *                 "defaultRedirectUrl": "https://hoppscotch.io/",
-     *                 "redirectUrl": ["https://hoppscotch.io/"],
-     *                 "tenant": "hoppscotch.io",
-     *                 "product": "API Engine",
-     *                 "name": "Hoppscotch-SP",
-     *                 "description": "SP for hoppscotch.io",
-     *                 "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
-     *                 "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
-     *                 "certs": {
-     *                   "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
-     *                   "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
-     *                 }
+     *                 "entityID": "http://www.okta.com/xxxxxxxxxxxxx",
+     *                 "thumbprint": "Eo+eUi3UM3XIMkFFtdVK3yJ5vO9f7YZdasdasdad",
+     *                 "loginType": "idp",
+     *                 "provider": "okta.com"
+     *               },
+     *               "defaultRedirectUrl": "https://hoppscotch.io/",
+     *               "redirectUrl": ["https://hoppscotch.io/"],
+     *               "tenant": "hoppscotch.io",
+     *               "product": "API Engine",
+     *               "name": "Hoppscotch-SP",
+     *               "description": "SP for hoppscotch.io",
+     *               "clientID": "Xq8AJt3yYAxmXizsCWmUBDRiVP1iTC8Y/otnvFIMitk",
+     *               "clientSecret": "00e3e11a3426f97d8000000738300009130cd45419c5943",
+     *               "certs": {
+     *                 "publicKey": "-----BEGIN CERTIFICATE-----.......-----END CERTIFICATE-----",
+     *                 "privateKey": "-----BEGIN PRIVATE KEY-----......-----END PRIVATE KEY-----"
      *               }
-     *             }
+     *           }
      *       '400':
      *         description: Please provide `clientID` or `tenant` and `product`.
      *       '401':
@@ -383,7 +413,7 @@ class APIController {
             metrics.increment('getConfig');
             if (clientID) {
                 const samlConfig = yield this.configStore.get(clientID);
-                return samlConfig ? { config: samlConfig } : {};
+                return samlConfig || {};
             }
             if (tenant && product) {
                 const samlConfigs = yield this.configStore.getByIndex({
@@ -393,7 +423,7 @@ class APIController {
                 if (!samlConfigs || !samlConfigs.length) {
                     return {};
                 }
-                return { config: samlConfigs[0] };
+                return Object.assign({}, samlConfigs[0]);
             }
             throw new error_1.JacksonError('Please provide `clientID` or `tenant` and `product`.', 400);
         });
@@ -482,3 +512,18 @@ const extractHostName = (url) => {
         return null;
     }
 };
+const extractRedirectUrls = (urls) => {
+    if (!urls) {
+        return [];
+    }
+    if (typeof urls === 'string') {
+        if (urls.startsWith('[')) {
+            // redirectUrl is a stringified array
+            return JSON.parse(urls);
+        }
+        // redirectUrl is a single URL
+        return [urls];
+    }
+    // redirectUrl is an array of URLs
+    return urls;
+};

package/dist/controller/health-check.d.ts

@@ -0,0 +1,11 @@
+import { IHealthCheckController, Storable } from '../typings';
+export declare class HealthCheckController implements IHealthCheckController {
+    healthCheckStore: Storable;
+    constructor({ healthCheckStore }: {
+        healthCheckStore: any;
+    });
+    init(): Promise<void>;
+    status(): Promise<{
+        status: number;
+    }>;
+}

package/dist/controller/health-check.js

@@ -0,0 +1,53 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HealthCheckController = void 0;
+const error_1 = require("./error");
+const healthKey = 'amihealthy';
+const healthValue = 'fit';
+const g = global;
+class HealthCheckController {
+    constructor({ healthCheckStore }) {
+        this.healthCheckStore = healthCheckStore;
+    }
+    init() {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.healthCheckStore.put(healthKey, healthValue);
+        });
+    }
+    status() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!g.isJacksonReady) {
+                    return {
+                        status: 503,
+                    };
+                }
+                const response = yield Promise.race([
+                    this.healthCheckStore.get(healthKey),
+                    new Promise((_, reject) => setTimeout(() => reject(new Error('timeout')), 1000)),
+                ]);
+                if (response === healthValue) {
+                    return {
+                        status: 200,
+                    };
+                }
+                return {
+                    status: 503,
+                };
+            }
+            catch (err) {
+                throw new error_1.JacksonError('Service not available', 503);
+            }
+        });
+    }
+}
+exports.HealthCheckController = HealthCheckController;

package/dist/controller/oauth.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -168,7 +172,7 @@ class OAuthController {
             }
             else {
                 // HTTP POST binding
-                authorizeForm = (0, utils_1.createAuthorizeForm)(relayState, encodeURI(Buffer.from(samlReq.request).toString('base64')), ssoUrl);
+                authorizeForm = (0, utils_1.createRequestForm)(relayState, encodeURI(Buffer.from(samlReq.request).toString('base64')), ssoUrl);
             }
             return {
                 redirect_url: redirectUrl,
@@ -220,7 +224,7 @@ class OAuthController {
                 profile,
                 clientID: samlConfig.clientID,
                 clientSecret: samlConfig.clientSecret,
-                requested: session.requested,
+                requested: session === null || session === void 0 ? void 0 : session.requested,
             };
             if (session) {
                 codeVal.session = session;
@@ -342,6 +346,11 @@ class OAuthController {
                         }
                     }
                 }
+                else {
+                    if (client_secret !== this.opts.clientSecretVerifier && client_secret !== codeVal.clientSecret) {
+                        throw new error_1.JacksonError('Invalid client_secret', 401);
+                    }
+                }
             }
             else if (codeVal && codeVal.session) {
                 throw new error_1.JacksonError('Please specify client_secret or code_verifier', 401);

package/dist/controller/signout.d.ts

@@ -0,0 +1,18 @@
+import { SAMLResponsePayload, SLORequestParams } from '../typings';
+export declare class LogoutController {
+    private configStore;
+    private sessionStore;
+    private opts;
+    constructor({ configStore, sessionStore, opts }: {
+        configStore: any;
+        sessionStore: any;
+        opts: any;
+    });
+    createRequest({ nameId, tenant, product, redirectUrl }: SLORequestParams): Promise<{
+        logoutUrl: string | null;
+        logoutForm: string | null;
+    }>;
+    handleResponse({ SAMLResponse, RelayState }: SAMLResponsePayload): Promise<{
+        redirectUrl: any;
+    }>;
+}