@boxyhq/saml-jackson 1.3.12 → 1.5.0

package/dist/saml/lib.d.ts

@@ -0,0 +1,31 @@
+import type { SAMLProfile } from '@boxyhq/saml20/dist/typings';
+export declare const extractSAMLResponseAttributes: (decodedResponse: string, validateOpts: ValidateOption) => Promise<SAMLProfile>;
+export declare const extractSAMLRequestAttributes: (samlRequest: string) => Promise<{
+    id: string;
+    acsUrl: string;
+    entityId: string;
+    publicKey: string;
+    providerName: string;
+}>;
+export declare const createMetadataXML: ({ ssoUrl, entityId, x509cert, }: {
+    ssoUrl: string;
+    entityId: string;
+    x509cert: string;
+}) => Promise<string>;
+export declare const decodeBase64: (string: string, isDeflated: boolean) => Promise<string>;
+export declare const createSAMLResponse: ({ audience, issuer, acsUrl, profile, requestId, privateKey, publicKey, }: {
+    audience: string;
+    issuer: string;
+    acsUrl: string;
+    profile: SAMLProfile;
+    requestId: string;
+    privateKey: string;
+    publicKey: string;
+}) => Promise<string>;
+type ValidateOption = {
+    thumbprint: string;
+    audience: string;
+    privateKey: string;
+    inResponseTo?: string;
+};
+export {};

package/dist/saml/lib.js

@@ -0,0 +1,217 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSAMLResponse = exports.decodeBase64 = exports.createMetadataXML = exports.extractSAMLRequestAttributes = exports.extractSAMLResponseAttributes = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const xml2js_1 = __importDefault(require("xml2js"));
+const zlib_1 = require("zlib");
+const util_1 = require("util");
+const saml20_1 = __importDefault(require("@boxyhq/saml20"));
+const xmlbuilder_1 = __importDefault(require("xmlbuilder"));
+const claims_1 = __importDefault(require("../saml/claims"));
+// Validate the SAMLResponse and extract the user profile
+const extractSAMLResponseAttributes = (decodedResponse, validateOpts) => __awaiter(void 0, void 0, void 0, function* () {
+    const attributes = yield saml20_1.default.validate(decodedResponse, validateOpts);
+    if (attributes && attributes.claims) {
+        // We map claims to our attributes id, email, firstName, lastName where possible. We also map original claims to raw
+        attributes.claims = claims_1.default.map(attributes.claims);
+        // Some providers don't return the id in the assertion, we set it to a sha256 hash of the email
+        if (!attributes.claims.id && attributes.claims.email) {
+            attributes.claims.id = crypto_1.default.createHash('sha256').update(attributes.claims.email).digest('hex');
+        }
+    }
+    return attributes;
+});
+exports.extractSAMLResponseAttributes = extractSAMLResponseAttributes;
+const extractSAMLRequestAttributes = (samlRequest) => __awaiter(void 0, void 0, void 0, function* () {
+    const decodeRequest = yield (0, exports.decodeBase64)(samlRequest, true);
+    const result = yield parseXML(decodeRequest);
+    const publicKey = result['samlp:AuthnRequest']['Signature']
+        ? result['samlp:AuthnRequest']['Signature'][0]['KeyInfo'][0]['X509Data'][0]['X509Certificate'][0]
+        : null;
+    const attributes = result['samlp:AuthnRequest']['$'];
+    const id = attributes.ID;
+    const providerName = attributes.ProviderName;
+    const acsUrl = attributes.AssertionConsumerServiceURL;
+    const entityId = result['samlp:AuthnRequest']['saml:Issuer'][0];
+    if (!entityId) {
+        throw new Error("Missing 'Entity ID' in SAML Request.");
+    }
+    if (!acsUrl) {
+        throw new Error("Missing 'ACS URL' in SAML Request.");
+    }
+    return {
+        id,
+        acsUrl,
+        entityId,
+        publicKey,
+        providerName,
+    };
+});
+exports.extractSAMLRequestAttributes = extractSAMLRequestAttributes;
+// Create Metadata XML
+const createMetadataXML = ({ ssoUrl, entityId, x509cert, }) => __awaiter(void 0, void 0, void 0, function* () {
+    x509cert = saml20_1.default.stripCertHeaderAndFooter(x509cert);
+    const today = new Date();
+    const nodes = {
+        'md:EntityDescriptor': {
+            '@xmlns:md': 'urn:oasis:names:tc:SAML:2.0:metadata',
+            '@entityID': entityId,
+            '@validUntil': new Date(today.setFullYear(today.getFullYear() + 10)).toISOString(),
+            'md:IDPSSODescriptor': {
+                '@WantAuthnRequestsSigned': false,
+                '@protocolSupportEnumeration': 'urn:oasis:names:tc:SAML:2.0:protocol',
+                'md:KeyDescriptor': {
+                    '@use': 'signing',
+                    'ds:KeyInfo': {
+                        '@xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+                        'ds:X509Data': {
+                            'ds:X509Certificate': {
+                                '#text': x509cert,
+                            },
+                        },
+                    },
+                },
+                'md:NameIDFormat': {
+                    '#text': 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+                },
+                'md:SingleSignOnService': [
+                    {
+                        '@Binding': 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
+                        '@Location': ssoUrl,
+                    },
+                    {
+                        '@Binding': 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
+                        '@Location': ssoUrl,
+                    },
+                ],
+            },
+        },
+    };
+    return xmlbuilder_1.default.create(nodes, { encoding: 'UTF-8', standalone: false }).end({ pretty: true });
+});
+exports.createMetadataXML = createMetadataXML;
+// Decode the base64 string
+const decodeBase64 = (string, isDeflated) => __awaiter(void 0, void 0, void 0, function* () {
+    const inflateRawAsync = (0, util_1.promisify)(zlib_1.inflateRaw);
+    return isDeflated
+        ? (yield inflateRawAsync(Buffer.from(string, 'base64'))).toString()
+        : Buffer.from(string, 'base64').toString();
+});
+exports.decodeBase64 = decodeBase64;
+// Parse XML
+const parseXML = (xml) => __awaiter(void 0, void 0, void 0, function* () {
+    return new Promise((resolve, reject) => {
+        xml2js_1.default.parseString(xml, (err, result) => {
+            if (err) {
+                reject(err);
+            }
+            resolve(result);
+        });
+    });
+});
+const randomId = () => {
+    return '_' + crypto_1.default.randomBytes(10).toString('hex');
+};
+// Create SAML Response and sign it
+const createSAMLResponse = ({ audience, issuer, acsUrl, profile, requestId, privateKey, publicKey, }) => __awaiter(void 0, void 0, void 0, function* () {
+    const authDate = new Date();
+    const authTimestamp = authDate.toISOString();
+    authDate.setMinutes(authDate.getMinutes() - 5);
+    const notBefore = authDate.toISOString();
+    authDate.setMinutes(authDate.getMinutes() + 10);
+    const notAfter = authDate.toISOString();
+    const nodes = {
+        'samlp:Response': {
+            '@xmlns:samlp': 'urn:oasis:names:tc:SAML:2.0:protocol',
+            '@Version': '2.0',
+            '@ID': randomId(),
+            '@Destination': acsUrl,
+            '@InResponseTo': requestId,
+            '@IssueInstant': authTimestamp,
+            'saml:Issuer': {
+                '@xmlns:saml': 'urn:oasis:names:tc:SAML:2.0:assertion',
+                '@Format': 'urn:oasis:names:tc:SAML:2.0:assertion',
+                '#text': issuer,
+            },
+            'samlp:Status': {
+                'samlp:StatusCode': {
+                    '@Value': 'urn:oasis:names:tc:SAML:2.0:status:Success',
+                },
+            },
+            'saml:Assertion': {
+                '@xmlns:saml': 'urn:oasis:names:tc:SAML:2.0:assertion',
+                '@Version': '2.0',
+                '@ID': randomId(),
+                '@IssueInstant': authTimestamp,
+                'saml:Issuer': {
+                    '#text': issuer,
+                },
+                'saml:Subject': {
+                    '@xmlns:saml': 'urn:oasis:names:tc:SAML:2.0:assertion',
+                    'saml:NameID': {
+                        '@Format': 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+                        '#text': profile.claims.email,
+                    },
+                    'saml:SubjectConfirmation': {
+                        '@Method': 'urn:oasis:names:tc:SAML:2.0:cm:bearer',
+                        'saml:SubjectConfirmationData': {
+                            '@Recipient': acsUrl,
+                            '@NotOnOrAfter': notAfter,
+                            '@InResponseTo': requestId,
+                        },
+                    },
+                },
+                'saml:Conditions': {
+                    '@NotBefore': notBefore,
+                    '@NotOnOrAfter': notAfter,
+                    'saml:AudienceRestriction': {
+                        'saml:Audience': {
+                            '#text': audience,
+                        },
+                    },
+                },
+                'saml:AuthnStatement': {
+                    '@AuthnInstant': authTimestamp,
+                    '@SessionIndex': '_YIlFoNFzLMDYxdwf-T_BuimfkGa5qhKg',
+                    'saml:AuthnContext': {
+                        'saml:AuthnContextClassRef': {
+                            '#text': 'urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified',
+                        },
+                    },
+                },
+                'saml:AttributeStatement': {
+                    '@xmlns:xs': 'http://www.w3.org/2001/XMLSchema',
+                    '@xmlns:xsi': 'http://www.w3.org/2001/XMLSchema-instance',
+                    'saml:Attribute': Object.keys(profile.claims.raw).map((attributeName) => {
+                        return {
+                            '@Name': attributeName,
+                            '@NameFormat': 'urn:oasis:names:tc:SAML:2.0:attrname-format:basic',
+                            'saml:AttributeValue': {
+                                '@xmlns:xs': 'http://www.w3.org/2001/XMLSchema',
+                                '@xmlns:xsi': 'http://www.w3.org/2001/XMLSchema-instance',
+                                '@xsi:type': 'xs:string',
+                                '#text': profile.claims.raw[attributeName],
+                            },
+                        };
+                    }),
+                },
+            },
+        },
+    };
+    const xml = xmlbuilder_1.default.create(nodes, { encoding: 'UTF-8' }).end();
+    return yield saml20_1.default.sign(xml, privateKey, publicKey, '/*[local-name(.)="Response" and namespace-uri(.)="urn:oasis:names:tc:SAML:2.0:protocol"]');
+});
+exports.createSAMLResponse = createSAMLResponse;
+//# sourceMappingURL=lib.js.map

package/dist/saml/lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.js","sourceRoot":"","sources":["../../src/saml/lib.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAC5B,oDAA4B;AAC5B,+BAAkC;AAClC,+BAAiC;AACjC,4DAAkC;AAClC,4DAAoC;AAGpC,4DAAoC;AAEpC,yDAAyD;AAClD,MAAM,6BAA6B,GAAG,CAC3C,eAAuB,EACvB,YAA4B,EAC5B,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,gBAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAEtE,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE;QACnC,oHAAoH;QACpH,UAAU,CAAC,MAAM,GAAG,gBAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAElD,+FAA+F;QAC/F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;YACpD,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAClG;KACF;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAA,CAAC;AAjBW,QAAA,6BAA6B,iCAiBxC;AAEK,MAAM,4BAA4B,GAAG,CAAO,WAAmB,EAAE,EAAE;IACxE,MAAM,aAAa,GAAG,MAAM,IAAA,oBAAY,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAW,MAAM,CAAC,oBAAoB,CAAC,CAAC,WAAW,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC;IAErD,MAAM,EAAE,GAAW,UAAU,CAAC,EAAE,CAAC;IACjC,MAAM,YAAY,GAAW,UAAU,CAAC,YAAY,CAAC;IACrD,MAAM,MAAM,GAAW,UAAU,CAAC,2BAA2B,CAAC;IAC9D,MAAM,QAAQ,GAAW,MAAM,CAAC,oBAAoB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;KACzD;IAED,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;KACvD;IAED,OAAO;QACL,EAAE;QACF,MAAM;QACN,QAAQ;QACR,SAAS;QACT,YAAY;KACb,CAAC;AACJ,CAAC,CAAA,CAAC;AA9BW,QAAA,4BAA4B,gCA8BvC;AAEF,sBAAsB;AACf,MAAM,iBAAiB,GAAG,CAAO,EACtC,MAAM,EACN,QAAQ,EACR,QAAQ,GAKT,EAAmB,EAAE;IACpB,QAAQ,GAAG,gBAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG;QACZ,qBAAqB,EAAE;YACrB,WAAW,EAAE,sCAAsC;YACnD,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YAClF,qBAAqB,EAAE;gBACrB,0BAA0B,EAAE,KAAK;gBACjC,6BAA6B,EAAE,sCAAsC;gBACrE,kBAAkB,EAAE;oBAClB,MAAM,EAAE,SAAS;oBACjB,YAAY,EAAE;wBACZ,WAAW,EAAE,oCAAoC;wBACjD,aAAa,EAAE;4BACb,oBAAoB,EAAE;gCACpB,OAAO,EAAE,QAAQ;6BAClB;yBACF;qBACF;iBACF;gBACD,iBAAiB,EAAE;oBACjB,OAAO,EAAE,wDAAwD;iBAClE;gBACD,wBAAwB,EAAE;oBACxB;wBACE,UAAU,EAAE,oDAAoD;wBAChE,WAAW,EAAE,MAAM;qBACpB;oBACD;wBACE,UAAU,EAAE,gDAAgD;wBAC5D,WAAW,EAAE,MAAM;qBACpB;iBACF;aACF;SACF;KACF,CAAC;IAEF,OAAO,oBAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAClG,CAAC,CAAA,CAAC;AAjDW,QAAA,iBAAiB,qBAiD5B;AAEF,2BAA2B;AACpB,MAAM,YAAY,GAAG,CAAO,MAAc,EAAE,UAAmB,EAAE,EAAE;IACxE,MAAM,eAAe,GAAG,IAAA,gBAAS,EAAC,iBAAU,CAAC,CAAC;IAE9C,OAAO,UAAU;QACf,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/C,CAAC,CAAA,CAAC;AANW,QAAA,YAAY,gBAMvB;AAEF,YAAY;AACZ,MAAM,QAAQ,GAAG,CAAO,GAAW,EAAmC,EAAE;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,gBAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,GAAiB,EAAE,MAAW,EAAE,EAAE;YACzD,IAAI,GAAG,EAAE;gBACP,MAAM,CAAC,GAAG,CAAC,CAAC;aACb;YAED,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;IACpB,OAAO,GAAG,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,mCAAmC;AAC5B,MAAM,kBAAkB,GAAG,CAAO,EACvC,QAAQ,EACR,MAAM,EACN,MAAM,EACN,OAAO,EACP,SAAS,EACT,UAAU,EACV,SAAS,GASV,EAAmB,EAAE;IACpB,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE7C,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEzC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAExC,MAAM,KAAK,GAAG;QACZ,gBAAgB,EAAE;YAChB,cAAc,EAAE,sCAAsC;YACtD,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,QAAQ,EAAE;YACjB,cAAc,EAAE,MAAM;YACtB,eAAe,EAAE,SAAS;YAC1B,eAAe,EAAE,aAAa;YAC9B,aAAa,EAAE;gBACb,aAAa,EAAE,uCAAuC;gBACtD,SAAS,EAAE,uCAAuC;gBAClD,OAAO,EAAE,MAAM;aAChB;YACD,cAAc,EAAE;gBACd,kBAAkB,EAAE;oBAClB,QAAQ,EAAE,4CAA4C;iBACvD;aACF;YACD,gBAAgB,EAAE;gBAChB,aAAa,EAAE,uCAAuC;gBACtD,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,QAAQ,EAAE;gBACjB,eAAe,EAAE,aAAa;gBAC9B,aAAa,EAAE;oBACb,OAAO,EAAE,MAAM;iBAChB;gBACD,cAAc,EAAE;oBACd,aAAa,EAAE,uCAAuC;oBACtD,aAAa,EAAE;wBACb,SAAS,EAAE,wDAAwD;wBACnE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;qBAC9B;oBACD,0BAA0B,EAAE;wBAC1B,SAAS,EAAE,uCAAuC;wBAClD,8BAA8B,EAAE;4BAC9B,YAAY,EAAE,MAAM;4BACpB,eAAe,EAAE,QAAQ;4BACzB,eAAe,EAAE,SAAS;yBAC3B;qBACF;iBACF;gBACD,iBAAiB,EAAE;oBACjB,YAAY,EAAE,SAAS;oBACvB,eAAe,EAAE,QAAQ;oBACzB,0BAA0B,EAAE;wBAC1B,eAAe,EAAE;4BACf,OAAO,EAAE,QAAQ;yBAClB;qBACF;iBACF;gBACD,qBAAqB,EAAE;oBACrB,eAAe,EAAE,aAAa;oBAC9B,eAAe,EAAE,mCAAmC;oBACpD,mBAAmB,EAAE;wBACnB,2BAA2B,EAAE;4BAC3B,OAAO,EAAE,oDAAoD;yBAC9D;qBACF;iBACF;gBACD,yBAAyB,EAAE;oBACzB,WAAW,EAAE,kCAAkC;oBAC/C,YAAY,EAAE,2CAA2C;oBACzD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;wBACtE,OAAO;4BACL,OAAO,EAAE,aAAa;4BACtB,aAAa,EAAE,mDAAmD;4BAClE,qBAAqB,EAAE;gCACrB,WAAW,EAAE,kCAAkC;gCAC/C,YAAY,EAAE,2CAA2C;gCACzD,WAAW,EAAE,WAAW;gCACxB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;6BAC3C;yBACF,CAAC;oBACJ,CAAC,CAAC;iBACH;aACF;SACF;KACF,CAAC;IAEF,MAAM,GAAG,GAAG,oBAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAElE,OAAO,MAAM,gBAAI,CAAC,IAAI,CACpB,GAAG,EACH,UAAU,EACV,SAAS,EACT,0FAA0F,CAC3F,CAAC;AACJ,CAAC,CAAA,CAAC;AAjHW,QAAA,kBAAkB,sBAiH7B"}

package/dist/typings.d.ts

@@ -1,4 +1,5 @@
 import { type JWK } from 'jose';
+export * from '../src/ee/federated-saml/types';
 interface SSOConnection {
     defaultRedirectUrl: string;
     redirectUrl: string[] | string;
@@ -64,7 +65,14 @@ type TenantQuery = {
     product: string;
     strategy?: ConnectionType;
 };
-export type GetConnectionsQuery = ClientIDQuery | TenantQuery;
+type TenantProduct = {
+    tenant: string;
+    product: string;
+};
+export type GetConnectionsQuery = ClientIDQuery | TenantQuery | {
+    entityId: string;
+};
+export type GetIDPEntityIDBody = TenantProduct;
 export type DelConnectionsQuery = (ClientIDQuery & {
     clientSecret: string;
 }) | TenantQuery;
@@ -95,6 +103,7 @@ export interface IConnectionAPIController {
         clientSecret: string;
     }): Promise<void>;
     getConnections(body: GetConnectionsQuery): Promise<Array<SAMLSSORecord | OIDCSSORecord>>;
+    getIDPEntityID(body: GetIDPEntityIDBody): string;
     /**
      * @deprecated Use `getConnections` instead.
      */
@@ -113,6 +122,7 @@ export interface IOAuthController {
     samlResponse(body: SAMLResponsePayload): Promise<{
         redirect_url?: string;
         app_select_form?: string;
+        responseForm?: string;
     }>;
     oidcAuthzResponse(body: OIDCAuthzResponsePayload): Promise<{
         redirect_url?: string;
@@ -245,7 +255,7 @@ export interface DatabaseDriver {
     getByIndex(namespace: string, idx: Index): Promise<any>;
 }
 export interface Storable {
-    getAll(pageOffset?: number, pageLimit?: number): Promise<unknown[]>;
+    getAll(pageOffset?: number, pageLimit?: number): Promise<any[]>;
     get(key: string): Promise<any>;
     put(key: string, val: any, ...indexes: Index[]): Promise<any>;
     delete(key: string): Promise<any>;
@@ -295,6 +305,12 @@ export interface JacksonOption {
         publicKey: string;
         privateKey: string;
     };
+    boxyhqLicenseKey?: string;
+    retraced?: {
+        host?: string;
+        adminToken?: string;
+    };
+    noAnalytics?: boolean;
 }
 export interface SLORequestParams {
     nameId: string;
@@ -540,7 +556,10 @@ export interface IDirectoryGroups {
 }
 export interface IWebhookEventsLogger extends Base {
     log(directory: Directory, event: DirectorySyncEvent): Promise<WebhookEventLog>;
-    getAll(): Promise<WebhookEventLog[]>;
+    getAll({ pageOffset, pageLimit }: {
+        pageOffset?: number;
+        pageLimit?: number;
+    }): Promise<WebhookEventLog[]>;
     get(id: string): Promise<WebhookEventLog>;
     clear(): Promise<void>;
     delete(id: string): Promise<void>;
@@ -605,4 +624,18 @@ export interface WebhookEventLog extends DirectorySyncEvent {
     status_code?: number;
     delivered?: boolean;
 }
-export {};
+export type SetupLinkCreatePayload = {
+    tenant: string;
+    product: string;
+    service: SetupLinkService;
+    regenerate?: boolean;
+};
+export type SetupLink = {
+    setupID: string;
+    tenant: string;
+    product: string;
+    url: string;
+    service: SetupLinkService;
+    validTill: number;
+};
+export type SetupLinkService = 'sso' | 'dsync';

package/dist/typings.js

@@ -1,6 +1,21 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DirectorySyncProviders = void 0;
+__exportStar(require("../src/ee/federated-saml/types"), exports);
 var DirectorySyncProviders;
 (function (DirectorySyncProviders) {
     DirectorySyncProviders["azure-scim-v2"] = "Azure SCIM v2.0";

package/dist/typings.js.map

@@ -1 +1 @@
-{"version":3,"file":"typings.js","sourceRoot":"","sources":["../src/typings.ts"],"names":[],"mappings":";;;AA2eA,IAAY,sBAMX;AAND,WAAY,sBAAsB;IAChC,2DAAmC,CAAA;IACnC,iEAAyC,CAAA;IACzC,yDAAiC,CAAA;IACjC,8DAAsC,CAAA;IACtC,+DAAuC,CAAA;AACzC,CAAC,EANW,sBAAsB,GAAtB,8BAAsB,KAAtB,8BAAsB,QAMjC"}
+{"version":3,"file":"typings.js","sourceRoot":"","sources":["../src/typings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAEA,iEAA+C;AA0f/C,IAAY,sBAMX;AAND,WAAY,sBAAsB;IAChC,2DAAmC,CAAA;IACnC,iEAAyC,CAAA;IACzC,yDAAiC,CAAA;IACjC,8DAAsC,CAAA;IACtC,+DAAuC,CAAA;AACzC,CAAC,EANW,sBAAsB,GAAtB,8BAAsB,KAAtB,8BAAsB,QAMjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxyhq/saml-jackson",
-  "version": "1.3.12",
+  "version": "1.5.0",
   "description": "SAML Jackson library",
   "keywords": [
     "SAML 2.0"
@@ -42,14 +42,15 @@
   "dependencies": {
     "@boxyhq/saml20": "1.1.0",
     "@opentelemetry/api": "1.3.0",
-    "axios": "1.1.3",
-    "jose": "4.11.1",
-    "marked": "4.2.3",
-    "mongodb": "4.12.1",
+    "axios": "1.2.2",
+    "jose": "4.11.2",
+    "marked": "4.2.5",
+    "mixpanel": "0.17.0",
+    "mongodb": "4.13.0",
     "mssql": "9.0.1",
     "mysql2": "2.3.3",
     "node-forge": "1.3.1",
-    "openid-client": "5.3.0",
+    "openid-client": "5.3.1",
     "pg": "8.8.0",
     "redis": "4.5.1",
     "reflect-metadata": "0.1.13",
@@ -60,20 +61,20 @@
   },
   "devDependencies": {
     "@faker-js/faker": "7.6.0",
-    "@types/node": "18.11.10",
+    "@types/node": "18.11.18",
     "@types/sinon": "10.0.13",
     "@types/tap": "15.0.7",
-    "@typescript-eslint/eslint-plugin": "5.44.0",
-    "@typescript-eslint/parser": "5.45.1",
+    "@typescript-eslint/eslint-plugin": "5.47.1",
+    "@typescript-eslint/parser": "5.47.1",
     "cross-env": "7.0.3",
-    "eslint": "8.28.0",
+    "eslint": "8.31.0",
     "eslint-config-prettier": "8.5.0",
-    "prettier": "2.8.0",
-    "sinon": "14.0.2",
+    "prettier": "2.8.1",
+    "sinon": "15.0.1",
     "tap": "16.3.2",
     "ts-node": "10.9.1",
-    "tsconfig-paths": "4.1.0",
-    "typescript": "4.9.3"
+    "tsconfig-paths": "4.1.2",
+    "typescript": "4.9.4"
   },
   "engines": {
     "node": ">=14.18.1 <=18.x"