@boxyhq/saml-jackson 1.32.0 → 1.33.1-beta.1

package/dist/src/event/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/event/index.ts"],"names":[],"mappings":";;;;;;;;;AAWA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,SAAS,CAAC;AAEjB,MAAM,CAAC,OAAO,OAAO,KAAK;IAIxB,YAAY,EAAE,IAAI,EAA2B;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAEK,MAAM,CACV,KAAQ,EACR,IAAkF;;YAElF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAEnD,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;KAAA;IAEO,gBAAgB,CAAC,KAAgB,EAAE,IAA+C;QACxF,IAAI,eAA0B,CAAC;QAE/B,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YAC1B,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAClC,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEjC,MAAM,OAAO,GAAuB;YAClC,KAAK;YACL,MAAM;YACN,OAAO;YACP,IAAI,EAAE,eAAe;SACtB,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEK,gBAAgB,CAAC,OAA4B,EAAE,OAA2B;;;YAC9E,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,CAAA,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,OAAO,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAA,IAAI,CAAC,KAAK,0CAAE,aAAa,CAAC,CAAC;QACjF,CAAC;KAAA;CACF"}

package/dist/src/event/types.d.ts

@@ -0,0 +1,21 @@
+import EventController from '../event';
+import type { Directory, DirectorySyncEventType, SAMLSSORecord, OIDCSSORecord, DirectorySyncEventData } from '../typings';
+export type IEventController = InstanceType<typeof EventController>;
+export type SSOConnectionEventType = 'sso.created' | 'sso.deleted' | 'sso.activated' | 'sso.deactivated';
+export type DsyncConnectionEventType = 'dsync.created' | 'dsync.deleted' | 'dsync.activated' | 'dsync.deactivated';
+export type EventType = SSOConnectionEventType | DsyncConnectionEventType | DirectorySyncEventType;
+export type SAMLSSOConnectionEventData = Pick<SAMLSSORecord, 'name' | 'description' | 'clientID' | 'clientSecret'> & {
+    provider: string;
+    friendlyProviderName: string;
+};
+export type OIDCSSOConnectionEventData = Pick<OIDCSSORecord, 'name' | 'description' | 'clientID' | 'clientSecret'> & {
+    provider: string | undefined;
+};
+export type DsyncConnectionEventData = Pick<Directory, 'id' | 'name' | 'type'>;
+export type EventData = SAMLSSOConnectionEventData | OIDCSSOConnectionEventData | DsyncConnectionEventData | DirectorySyncEventData;
+export type EventPayloadSchema = {
+    tenant: string;
+    product: string;
+    event: EventType;
+    data: EventData;
+};

package/dist/src/event/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/event/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/event/types.ts"],"names":[],"mappings":""}

package/dist/src/event/utils.d.ts

@@ -0,0 +1,4 @@
+import type { Directory, DsyncConnectionEventData, SAMLSSOConnectionEventData, OIDCSSOConnectionEventData, SAMLSSORecord, OIDCSSORecord } from '../typings';
+export declare const transformSAMLSSOConnection: (data: SAMLSSORecord) => SAMLSSOConnectionEventData;
+export declare const transformOIDCSSOConnection: (data: OIDCSSORecord) => OIDCSSOConnectionEventData;
+export declare const transformDirectoryConnection: (data: Directory) => DsyncConnectionEventData;

package/dist/src/event/utils.js

@@ -0,0 +1,33 @@
+import { findFriendlyProviderName } from '../controller/utils';
+export const transformSAMLSSOConnection = (data) => {
+    const { name, description, clientID, clientSecret, idpMetadata } = data;
+    const { provider } = idpMetadata;
+    return {
+        name,
+        description,
+        clientID,
+        clientSecret,
+        provider,
+        friendlyProviderName: findFriendlyProviderName(provider),
+    };
+};
+export const transformOIDCSSOConnection = (data) => {
+    const { name, description, clientID, clientSecret, oidcProvider } = data;
+    const { provider } = oidcProvider;
+    return {
+        name,
+        description,
+        clientID,
+        clientSecret,
+        provider,
+    };
+};
+export const transformDirectoryConnection = (data) => {
+    const { id, name, type } = data;
+    return {
+        id,
+        name,
+        type,
+    };
+};
+//# sourceMappingURL=utils.js.map

package/dist/src/event/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/event/utils.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,IAAmB,EAA8B,EAAE;IAC5F,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;IAEjC,OAAO;QACL,IAAI;QACJ,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,oBAAoB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;KACzD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,IAAmB,EAA8B,EAAE;IAC5F,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC;IAElC,OAAO;QACL,IAAI;QACJ,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,IAAe,EAA4B,EAAE;IACxF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEhC,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;KACL,CAAC;AACJ,CAAC,CAAC"}

package/dist/src/event/webhook.d.ts

@@ -0,0 +1,3 @@
+import type { EventPayloadSchema, Webhook } from '../typings';
+export declare const createSignatureString: (secret: string, payload: any) => string;
+export declare const sendPayloadToWebhook: (webhook: Webhook, payload: EventPayloadSchema | EventPayloadSchema[], debugWebhooks: boolean | undefined) => Promise<any>;

package/dist/src/event/webhook.js

@@ -0,0 +1,34 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import crypto from 'crypto';
+import axios from './axios';
+export const createSignatureString = (secret, payload) => {
+    if (!secret) {
+        return '';
+    }
+    const timestamp = new Date().getTime();
+    const signature = crypto
+        .createHmac('sha256', secret)
+        .update(`${timestamp}.${JSON.stringify(payload)}`)
+        .digest('hex');
+    return `t=${timestamp},s=${signature}`;
+};
+export const sendPayloadToWebhook = (webhook, payload, debugWebhooks) => __awaiter(void 0, void 0, void 0, function* () {
+    if (debugWebhooks) {
+        console.log('Sending payload to webhook:', JSON.stringify(payload, null, 2));
+    }
+    return yield axios.post(webhook.endpoint, payload, {
+        headers: {
+            'Content-Type': 'application/json',
+            'BoxyHQ-Signature': createSignatureString(webhook.secret, payload),
+        },
+    });
+});
+//# sourceMappingURL=webhook.js.map

package/dist/src/event/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/event/webhook.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,MAAM,SAAS,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAE,OAAY,EAAE,EAAE;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;SACjD,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO,KAAK,SAAS,MAAM,SAAS,EAAE,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAgB,EAChB,OAAkD,EAClD,aAAkC,EAClC,EAAE;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;SACnE;KACF,CAAC,CAAC;AACL,CAAC,CAAA,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,35 @@
+import type { IDirectorySyncController, JacksonOption } from './typings';
+import { AdminController } from './controller/admin';
+import { ConnectionAPIController } from './controller/api';
+import { OAuthController } from './controller/oauth';
+import { HealthCheckController } from './controller/health-check';
+import { LogoutController } from './controller/logout';
+import { OidcDiscoveryController } from './controller/oidc-discovery';
+import { SPSSOConfig } from './controller/sp-config';
+import { SetupLinkController } from './controller/setup-link';
+import { type IIdentityFederationController } from './ee/identity-federation';
+import { BrandingController } from './ee/branding';
+import { ProductController } from './ee/product';
+export declare const controllers: (opts: JacksonOption) => Promise<{
+    apiController: ConnectionAPIController;
+    connectionAPIController: ConnectionAPIController;
+    oauthController: OAuthController;
+    adminController: AdminController;
+    logoutController: LogoutController;
+    healthCheckController: HealthCheckController;
+    setupLinkController: SetupLinkController;
+    directorySyncController: IDirectorySyncController;
+    oidcDiscoveryController: OidcDiscoveryController;
+    spConfig: SPSSOConfig;
+    identityFederationController: IIdentityFederationController;
+    brandingController: IBrandingController;
+    checkLicense: () => Promise<boolean>;
+    productController: ProductController;
+    close: () => Promise<void>;
+}>;
+export default controllers;
+export * from './typings';
+export * from './ee/identity-federation/types';
+export type SAMLJackson = Awaited<ReturnType<typeof controllers>>;
+export type ISetupLinkController = InstanceType<typeof SetupLinkController>;
+export type IBrandingController = InstanceType<typeof BrandingController>;

package/dist/src/index.js

@@ -0,0 +1,161 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import DB from './db/db';
+import defaultDb from './db/defaultDb';
+import loadConnection from './loadConnection';
+import { AdminController } from './controller/admin';
+import { ConnectionAPIController } from './controller/api';
+import { OAuthController } from './controller/oauth';
+import { HealthCheckController } from './controller/health-check';
+import { LogoutController } from './controller/logout';
+import initDirectorySync from './directory-sync';
+import { OidcDiscoveryController } from './controller/oidc-discovery';
+import { SPSSOConfig } from './controller/sp-config';
+import { SetupLinkController } from './controller/setup-link';
+import { AnalyticsController } from './controller/analytics';
+import * as x509 from './saml/x509';
+import initIdentityFederation from './ee/identity-federation';
+import checkLicense from './ee/common/checkLicense';
+import { BrandingController } from './ee/branding';
+import SSOTraces from './sso-traces';
+import EventController from './event';
+import { ProductController } from './ee/product';
+import { OryController } from './ee/ory/ory';
+const tracesTTL = 7 * 24 * 60 * 60;
+const defaultOpts = (opts) => {
+    var _a, _b, _c, _d;
+    const newOpts = Object.assign({}, opts);
+    if (!newOpts.externalUrl) {
+        throw new Error('externalUrl is required');
+    }
+    if (!newOpts.samlPath) {
+        throw new Error('samlPath is required');
+    }
+    newOpts.scimPath = newOpts.scimPath || '/api/scim/v2.0';
+    newOpts.samlAudience = newOpts.samlAudience || 'https://saml.boxyhq.com';
+    // path to folder containing static IdP connections that will be preloaded. This is useful for self-hosted deployments that only have to support a single tenant (or small number of known tenants).
+    newOpts.preLoadedConnection = newOpts.preLoadedConnection || '';
+    newOpts.idpEnabled = newOpts.idpEnabled === true;
+    defaultDb(newOpts);
+    newOpts.clientSecretVerifier = newOpts.clientSecretVerifier || 'dummy';
+    newOpts.db.pageLimit = newOpts.db.pageLimit || 50;
+    newOpts.openid = newOpts.openid || {};
+    newOpts.openid.jwsAlg = newOpts.openid.jwsAlg || 'RS256';
+    newOpts.openid.requestProfileScope = (_b = (_a = newOpts.openid) === null || _a === void 0 ? void 0 : _a.requestProfileScope) !== null && _b !== void 0 ? _b : true;
+    newOpts.openid.forwardOIDCParams = (_d = (_c = newOpts.openid) === null || _c === void 0 ? void 0 : _c.forwardOIDCParams) !== null && _d !== void 0 ? _d : false;
+    newOpts.boxyhqLicenseKey = newOpts.boxyhqLicenseKey || undefined;
+    return newOpts;
+};
+export const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
+    opts = defaultOpts(opts);
+    const db = yield DB.new(opts.db);
+    const connectionStore = db.store('saml:config');
+    const sessionStore = db.store('oauth:session', opts.db.ttl);
+    const codeStore = db.store('oauth:code', opts.db.ttl);
+    const tokenStore = db.store('oauth:token', opts.db.ttl);
+    const healthCheckStore = db.store('_health:check');
+    const setupLinkStore = db.store('setup:link');
+    const certificateStore = db.store('x509:certificates');
+    const settingsStore = db.store('portal:settings');
+    const productStore = db.store('product:config');
+    const tracesStore = db.store('saml:tracer', tracesTTL);
+    const ssoTraces = new SSOTraces({ tracesStore });
+    const eventController = new EventController({ opts });
+    const productController = new ProductController({ productStore, opts });
+    const oryController = new OryController({ opts, productController });
+    const connectionAPIController = new ConnectionAPIController({
+        connectionStore,
+        opts,
+        eventController,
+        oryController,
+    });
+    const adminController = new AdminController({ connectionStore, ssoTraces });
+    const healthCheckController = new HealthCheckController({ healthCheckStore });
+    yield healthCheckController.init();
+    const setupLinkController = new SetupLinkController({ setupLinkStore, opts });
+    // Create default certificate if it doesn't exist.
+    yield x509.init(certificateStore, opts);
+    // Enterprise Features
+    const identityFederationController = yield initIdentityFederation({ db, opts, ssoTraces });
+    const brandingController = new BrandingController({ store: settingsStore, opts });
+    const oauthController = new OAuthController({
+        connectionStore,
+        sessionStore,
+        codeStore,
+        tokenStore,
+        ssoTraces,
+        opts,
+        idFedApp: identityFederationController.app,
+    });
+    const logoutController = new LogoutController({
+        connectionStore,
+        sessionStore,
+        opts,
+    });
+    const oidcDiscoveryController = new OidcDiscoveryController({ opts });
+    const spConfig = new SPSSOConfig(opts);
+    const directorySyncController = yield initDirectorySync({ db, opts, eventController });
+    // write pre-loaded connections if present
+    const preLoadedConnection = opts.preLoadedConnection;
+    if (preLoadedConnection && preLoadedConnection.length > 0) {
+        const connections = yield loadConnection(preLoadedConnection);
+        for (const connection of connections) {
+            if ('oidcDiscoveryUrl' in connection || 'oidcMetadata' in connection) {
+                yield connectionAPIController.createOIDCConnection(connection);
+            }
+            else {
+                yield connectionAPIController.createSAMLConnection(connection);
+            }
+            console.info(`loaded connection for tenant "${connection.tenant}" and product "${connection.product}"`);
+        }
+    }
+    if (!opts.noAnalytics) {
+        console.info('Anonymous analytics enabled. You can disable this by setting the DO_NOT_TRACK=1 or BOXYHQ_NO_ANALYTICS=1 environment variables');
+        const analyticsStore = db.store('_analytics:events');
+        const analyticsController = new AnalyticsController({
+            analyticsStore,
+            connectionAPIController,
+            directorySyncController,
+        });
+        yield analyticsController.init();
+    }
+    if ('driver' in opts.db) {
+        console.info(`Using external database driver`);
+    }
+    else {
+        const type = opts.db.engine === 'sql' && opts.db.type ? ' Type: ' + opts.db.type : '';
+        console.info(`Using engine: ${opts.db.engine}.${type}`);
+    }
+    return {
+        spConfig,
+        apiController: connectionAPIController,
+        connectionAPIController,
+        oauthController,
+        adminController,
+        logoutController,
+        healthCheckController,
+        setupLinkController,
+        directorySyncController,
+        oidcDiscoveryController,
+        identityFederationController,
+        brandingController,
+        checkLicense: () => {
+            return checkLicense(opts.boxyhqLicenseKey);
+        },
+        productController,
+        close: () => __awaiter(void 0, void 0, void 0, function* () {
+            yield db.close();
+        }),
+    };
+});
+export default controllers;
+export * from './typings';
+export * from './ee/identity-federation/types';
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,SAAS,MAAM,gBAAgB,CAAC;AACvC,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,iBAAiB,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,sBAA8D,MAAM,0BAA0B,CAAC;AACtG,OAAO,YAAY,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,SAAS,MAAM,cAAc,CAAC;AACrC,OAAO,eAAe,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,MAAM,WAAW,GAAG,CAAC,IAAmB,EAAiB,EAAE;;IACzD,MAAM,OAAO,qBACR,IAAI,CACR,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAExD,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC;IACzE,oMAAoM;IACpM,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAEhE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC;IACjD,SAAS,CAAC,OAAO,CAAC,CAAC;IAEnB,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACvE,OAAO,CAAC,EAAE,CAAC,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;IAElD,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,mBAAmB,GAAG,MAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,mBAAmB,mCAAI,IAAI,CAAC;IACjF,OAAO,CAAC,MAAM,CAAC,iBAAiB,GAAG,MAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,iBAAiB,mCAAI,KAAK,CAAC;IAE9E,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAEjE,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAAmB,EAiBlB,EAAE;IACH,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEzB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjC,MAAM,eAAe,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACrE,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CAAC;QAC1D,eAAe;QACf,IAAI;QACJ,eAAe;QACf,aAAa;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9E,MAAM,qBAAqB,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9E,kDAAkD;IAClD,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAExC,sBAAsB;IACtB,MAAM,4BAA4B,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3F,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAElF,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;QAC1C,eAAe;QACf,YAAY;QACZ,SAAS;QACT,UAAU;QACV,SAAS;QACT,IAAI;QACJ,QAAQ,EAAE,4BAA4B,CAAC,GAAG;KAC3C,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,eAAe;QACf,YAAY;QACZ,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,uBAAuB,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAEvF,0CAA0C;IAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;IACrD,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAE9D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,kBAAkB,IAAI,UAAU,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;gBACrE,MAAM,uBAAuB,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,MAAM,uBAAuB,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YACjE,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,iCAAiC,UAAU,CAAC,MAAM,kBAAkB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,gIAAgI,CACjI,CAAC;QACF,MAAM,cAAc,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC;YAClD,cAAc;YACd,uBAAuB;YACvB,uBAAuB;SACxB,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,uBAAuB;QACtC,uBAAuB;QACvB,eAAe;QACf,eAAe;QACf,gBAAgB;QAChB,qBAAqB;QACrB,mBAAmB;QACnB,uBAAuB;QACvB,uBAAuB;QACvB,4BAA4B;QAC5B,kBAAkB;QAClB,YAAY,EAAE,GAAG,EAAE;YACjB,OAAO,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QACD,iBAAiB;QACjB,KAAK,EAAE,GAAS,EAAE;YAChB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,CAAA;KACF,CAAC;AACJ,CAAC,CAAA,CAAC;AAEF,eAAe,WAAW,CAAC;AAE3B,cAAc,WAAW,CAAC;AAC1B,cAAc,gCAAgC,CAAC"}

package/dist/src/loadConnection.d.ts

@@ -0,0 +1,4 @@
+import { OIDCSSOConnectionWithDiscoveryUrl, OIDCSSOConnectionWithMetadata, SAMLSSOConnectionWithEncodedMetadata, SAMLSSOConnectionWithRawMetadata } from './typings';
+type connection = SAMLSSOConnectionWithEncodedMetadata | SAMLSSOConnectionWithRawMetadata | OIDCSSOConnectionWithDiscoveryUrl | OIDCSSOConnectionWithMetadata;
+declare const loadConnection: (preLoadedConnection: string) => Promise<connection[]>;
+export default loadConnection;

package/dist/src/loadConnection.js

@@ -0,0 +1,38 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as fs from 'fs';
+import * as path from 'path';
+import * as url from 'url';
+const loadConnection = (preLoadedConnection) => __awaiter(void 0, void 0, void 0, function* () {
+    if (preLoadedConnection.startsWith('./')) {
+        preLoadedConnection = path.resolve(process.cwd(), preLoadedConnection);
+    }
+    else {
+        preLoadedConnection = path.resolve(preLoadedConnection);
+    }
+    const files = yield fs.promises.readdir(preLoadedConnection);
+    const connections = [];
+    for (const idx in files) {
+        const file = files[idx];
+        if (file.endsWith('.js')) {
+            const filePath = path.join(preLoadedConnection, file);
+            const fileUrl = preLoadedConnection.startsWith('/') ? filePath : url.pathToFileURL(filePath).toString();
+            const { default: connection, } = yield import(/* webpackIgnore: true */ fileUrl);
+            if (!('oidcDiscoveryUrl' in connection) && !('oidcMetadata' in connection)) {
+                const rawMetadata = yield fs.promises.readFile(path.join(preLoadedConnection, path.parse(file).name + '.xml'), 'utf8');
+                connection.encodedRawMetadata = Buffer.from(rawMetadata, 'utf8').toString('base64');
+            }
+            connections.push(connection);
+        }
+    }
+    return connections;
+});
+export default loadConnection;
+//# sourceMappingURL=loadConnection.js.map

package/dist/src/loadConnection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadConnection.js","sourceRoot":"","sources":["../../src/loadConnection.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAc3B,MAAM,cAAc,GAAG,CAAO,mBAA2B,EAAyB,EAAE;IAClF,IAAI,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxG,MAAM,EACJ,OAAO,EAAE,UAAU,GACpB,GAEG,MAAM,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,kBAAkB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,UAAU,CAAC,EAAE,CAAC;gBAC3E,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAC5C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,EAC9D,MAAM,CACP,CAAC;gBACF,UAAU,CAAC,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtF,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC,CAAA,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/src/opentelemetry/metrics.d.ts

@@ -0,0 +1,14 @@
+declare const counters: {
+    createConnection: () => any;
+    getConnections: () => any;
+    deleteConnections: () => any;
+    oauthAuthorize: () => any;
+    oauthToken: () => any;
+    oauthUserInfo: () => any;
+    createDsyncConnection: () => any;
+    getDsyncConnections: () => any;
+    deleteDsyncConnections: () => any;
+    dsyncEventsBatchFailed: () => void;
+};
+declare const increment: (action: keyof typeof counters) => void;
+export { increment };

package/dist/src/opentelemetry/metrics.js

@@ -0,0 +1,64 @@
+import { incrementCounter } from '@boxyhq/metrics';
+const METER = 'jackson';
+const counters = {
+    createConnection: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.connection.create',
+        counterOptions: { description: 'Number of IdP connection create requests' },
+    }),
+    getConnections: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.connection.get',
+        counterOptions: { description: 'Number of IdP connections get requests' },
+    }),
+    deleteConnections: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.connection.delete',
+        counterOptions: { description: 'Number of IdP connections delete requests' },
+    }),
+    oauthAuthorize: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.oauth.authorize',
+        counterOptions: { description: 'Number of oauth authorize requests' },
+    }),
+    oauthToken: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.oauth.token',
+        counterOptions: { description: 'Number of oauth token requests' },
+    }),
+    oauthUserInfo: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.oauth.userinfo',
+        counterOptions: { description: 'Number of oauth user info requests' },
+    }),
+    createDsyncConnection: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.dsync.connection.create',
+        counterOptions: { description: 'Number of DSync connection create requests' },
+    }),
+    getDsyncConnections: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.dsync.connection.get',
+        counterOptions: { description: 'Number of DSync connections get requests' },
+    }),
+    deleteDsyncConnections: () => incrementCounter({
+        meter: METER,
+        name: 'jackson.dsync.connection.delete',
+        counterOptions: { description: 'Number of DSync connections delete requests' },
+    }),
+    dsyncEventsBatchFailed: () => {
+        incrementCounter({
+            meter: METER,
+            name: 'jackson.dsync.events_batch.failed',
+            counterOptions: { description: 'Indicate that a batch of dsync events failed' },
+        });
+    },
+};
+const increment = (action) => {
+    const counterIncrement = counters[action];
+    if (typeof counterIncrement === 'function') {
+        counterIncrement();
+    }
+};
+export { increment };
+//# sourceMappingURL=metrics.js.map

package/dist/src/opentelemetry/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/opentelemetry/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,MAAM,QAAQ,GAAG;IACf,gBAAgB,EAAE,GAAG,EAAE,CACrB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,2BAA2B;QACjC,cAAc,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE;KAC5E,CAAC;IACJ,cAAc,EAAE,GAAG,EAAE,CACnB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,wBAAwB;QAC9B,cAAc,EAAE,EAAE,WAAW,EAAE,wCAAwC,EAAE;KAC1E,CAAC;IACJ,iBAAiB,EAAE,GAAG,EAAE,CACtB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,2BAA2B;QACjC,cAAc,EAAE,EAAE,WAAW,EAAE,2CAA2C,EAAE;KAC7E,CAAC;IACJ,cAAc,EAAE,GAAG,EAAE,CACnB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,yBAAyB;QAC/B,cAAc,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;KACtE,CAAC;IACJ,UAAU,EAAE,GAAG,EAAE,CACf,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,qBAAqB;QAC3B,cAAc,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE;KAClE,CAAC;IAEJ,aAAa,EAAE,GAAG,EAAE,CAClB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,wBAAwB;QAC9B,cAAc,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;KACtE,CAAC;IAEJ,qBAAqB,EAAE,GAAG,EAAE,CAC1B,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,iCAAiC;QACvC,cAAc,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE;KAC9E,CAAC;IAEJ,mBAAmB,EAAE,GAAG,EAAE,CACxB,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,8BAA8B;QACpC,cAAc,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE;KAC5E,CAAC;IAEJ,sBAAsB,EAAE,GAAG,EAAE,CAC3B,gBAAgB,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,iCAAiC;QACvC,cAAc,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE;KAC/E,CAAC;IAEJ,sBAAsB,EAAE,GAAG,EAAE;QAC3B,gBAAgB,CAAC;YACf,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,mCAAmC;YACzC,cAAc,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAA6B,EAAE,EAAE;IAClD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAC3C,gBAAgB,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/src/saml/claims.d.ts

@@ -0,0 +1,12 @@
+declare const mapping: {
+    attribute: string;
+    schema: string;
+}[];
+type attributes = (typeof mapping)[number]['attribute'];
+type schemas = (typeof mapping)[number]['schema'];
+declare const _default: {
+    map: (claims: Record<attributes | schemas, unknown>) => {
+        raw: Record<string, unknown>;
+    };
+};
+export default _default;

package/dist/src/saml/claims.js

@@ -0,0 +1,57 @@
+const rolesAttribute = 'roles';
+const rolesSchema = 'http://schemas.microsoft.com/ws/2008/06/identity/claims/role';
+const groupsAttribute = 'groups';
+const groupsSchema = 'http://schemas.xmlsoap.org/claims/Group';
+const arrayMapping = [
+    {
+        attribute: rolesAttribute,
+        schema: rolesSchema,
+    },
+    {
+        attribute: groupsAttribute,
+        schema: groupsSchema,
+    },
+];
+const mapping = [
+    {
+        attribute: 'id',
+        schema: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier',
+    },
+    {
+        attribute: 'email',
+        schema: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
+    },
+    {
+        attribute: 'firstName',
+        schema: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
+    },
+    {
+        attribute: 'lastName',
+        schema: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname',
+    },
+    ...arrayMapping,
+];
+const map = (claims) => {
+    arrayMapping.forEach((m) => {
+        if (claims[m.attribute]) {
+            claims[m.attribute] = [].concat(claims[m.attribute]);
+        }
+        else if (claims[m.schema]) {
+            claims[m.schema] = [].concat(claims[m.schema]);
+        }
+    });
+    const profile = {
+        raw: claims,
+    };
+    mapping.forEach((m) => {
+        if (claims[m.attribute]) {
+            profile[m.attribute] = claims[m.attribute];
+        }
+        else if (claims[m.schema]) {
+            profile[m.attribute] = claims[m.schema];
+        }
+    });
+    return profile;
+};
+export default { map };
+//# sourceMappingURL=claims.js.map

package/dist/src/saml/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../src/saml/claims.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,WAAW,GAAG,8DAA8D,CAAC;AAEnF,MAAM,eAAe,GAAG,QAAQ,CAAC;AACjC,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,MAAM,YAAY,GAAG;IACnB;QACE,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,WAAW;KACpB;IACD;QACE,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,YAAY;KACrB;CACF,CAAC;AAEF,MAAM,OAAO,GAAG;IACd;QACE,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,sEAAsE;KAC/E;IACD;QACE,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,oEAAoE;KAC7E;IACD;QACE,SAAS,EAAE,WAAW;QACtB,MAAM,EAAE,iEAAiE;KAC1E;IACD;QACE,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,+DAA+D;KACxE;IACD,GAAG,YAAY;CAChB,CAAC;AAKF,MAAM,GAAG,GAAG,CAAC,MAA6C,EAAE,EAAE;IAC5D,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAQ,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAQ,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,MAAM;KACZ,CAAC;IAEF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACpB,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,eAAe,EAAE,GAAG,EAAE,CAAC"}

package/dist/src/saml/lib.d.ts

@@ -0,0 +1,8 @@
+export declare const extractSAMLResponseAttributes: (decodedResponse: string, validateOpts: ValidateOption) => Promise<any>;
+export type ValidateOption = {
+    thumbprint?: string;
+    publicKey?: string;
+    audience: string;
+    privateKey: string;
+    inResponseTo?: string;
+};

package/dist/src/saml/lib.js

@@ -0,0 +1,29 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import crypto from 'crypto';
+import saml from '@boxyhq/saml20';
+import * as dbutils from '../db/utils';
+import claims from '../saml/claims';
+// Validate the SAMLResponse and extract the user profile
+export const extractSAMLResponseAttributes = (decodedResponse, validateOpts) => __awaiter(void 0, void 0, void 0, function* () {
+    const attributes = yield saml.validate(decodedResponse, validateOpts);
+    if (attributes && attributes.claims) {
+        // We map claims to our attributes id, email, firstName, lastName where possible. We also map original claims to raw
+        attributes.claims = claims.map(attributes.claims);
+        // Some providers don't return the id in the assertion, we set it to a sha256 hash of the email
+        if (!attributes.claims.id && attributes.claims.email) {
+            attributes.claims.id = crypto.createHash('sha256').update(attributes.claims.email).digest('hex');
+        }
+    }
+    // we'll send a ripemd160 hash of the id, this can be used in the case of email missing it can be used as the local part
+    attributes.claims.idHash = dbutils.keyDigest(attributes.claims.id);
+    return attributes;
+});
+//# sourceMappingURL=lib.js.map

package/dist/src/saml/lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.js","sourceRoot":"","sources":["../../../src/saml/lib.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,IAAI,MAAM,gBAAgB,CAAC;AAClC,OAAO,KAAK,OAAO,MAAM,aAAa,CAAC;AACvC,OAAO,MAAM,MAAM,gBAAgB,CAAC;AAEpC,yDAAyD;AACzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,eAAuB,EACvB,YAA4B,EAC5B,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAEtE,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACpC,oHAAoH;QACpH,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAElD,+FAA+F;QAC/F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrD,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,wHAAwH;IACxH,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEnE,OAAO,UAAU,CAAC;AACpB,CAAC,CAAA,CAAC"}

package/dist/src/saml/x509.d.ts

@@ -0,0 +1,9 @@
+import type { JacksonOption, Storable } from '../typings';
+export declare const init: (store: Storable, opts: JacksonOption) => Promise<{
+    publicKey: string;
+    privateKey: string;
+}>;
+export declare const getDefaultCertificate: () => Promise<{
+    publicKey: string;
+    privateKey: string;
+}>;