@boxyhq/saml-jackson 1.32.0 → 1.33.1-beta.1

package/dist/src/saml/x509.js

@@ -0,0 +1,93 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as forge from 'node-forge';
+import crypto from 'crypto';
+const pki = forge.pki;
+let certificateStore;
+let cachedCertificate;
+let jacksonOption;
+export const init = (store, opts) => __awaiter(void 0, void 0, void 0, function* () {
+    certificateStore = store;
+    jacksonOption = opts;
+    return yield getDefaultCertificate();
+});
+const generateCertificate = () => {
+    const today = new Date();
+    const keys = pki.rsa.generateKeyPair(2048);
+    const cert = pki.createCertificate();
+    cert.publicKey = keys.publicKey;
+    cert.serialNumber = '01';
+    cert.validity.notBefore = new Date();
+    cert.validity.notAfter = new Date(today.setFullYear(today.getFullYear() + 30));
+    const attrs = [
+        {
+            name: 'commonName',
+            value: 'BoxyHQ Jackson',
+        },
+    ];
+    cert.setSubject(attrs);
+    cert.setIssuer(attrs);
+    cert.setExtensions([
+        {
+            name: 'basicConstraints',
+            cA: false,
+        },
+        {
+            name: 'keyUsage',
+            keyCertSign: false,
+            digitalSignature: true,
+            nonRepudiation: false,
+            keyEncipherment: false,
+            dataEncipherment: false,
+        },
+    ]);
+    // self-sign certificate
+    cert.sign(keys.privateKey, forge.md.sha256.create());
+    return {
+        publicKey: pki.certificateToPem(cert),
+        privateKey: pki.privateKeyToPem(keys.privateKey),
+    };
+};
+export const getDefaultCertificate = () => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    if (cachedCertificate && !(yield isCertificateExpired(cachedCertificate.publicKey))) {
+        return cachedCertificate;
+    }
+    if (!certificateStore) {
+        throw new Error('Certificate store not initialized');
+    }
+    if (!jacksonOption) {
+        throw new Error('Jackson option not initialized');
+    }
+    // If the user has provided a certificate, use that instead of the default.
+    // We expect the developer to provide base64 encoded keys, so we need to decode them.
+    if (((_a = jacksonOption.certs) === null || _a === void 0 ? void 0 : _a.privateKey) && ((_b = jacksonOption.certs) === null || _b === void 0 ? void 0 : _b.publicKey)) {
+        cachedCertificate = {
+            publicKey: Buffer.from(jacksonOption.certs.publicKey, 'base64').toString('utf-8'),
+            privateKey: Buffer.from(jacksonOption.certs.privateKey, 'base64').toString('utf-8'),
+        };
+        return cachedCertificate;
+    }
+    // Otherwise, use the default certificate.
+    cachedCertificate = yield certificateStore.get('default');
+    // If certificate is expired let it drop through so it creates a new cert
+    if (cachedCertificate && !(yield isCertificateExpired(cachedCertificate.publicKey))) {
+        return cachedCertificate;
+    }
+    // If default certificate is not found or has expired, create one and store it.
+    cachedCertificate = generateCertificate();
+    yield certificateStore.put('default', cachedCertificate);
+    return cachedCertificate;
+});
+const isCertificateExpired = (publicKey) => __awaiter(void 0, void 0, void 0, function* () {
+    const { validTo } = new crypto.X509Certificate(publicKey);
+    return !(validTo != 'Bad time value' && new Date(validTo) > new Date());
+});
+//# sourceMappingURL=x509.js.map

package/dist/src/saml/x509.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x509.js","sourceRoot":"","sources":["../../../src/saml/x509.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAI5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;AACtB,IAAI,gBAA0B,CAAC;AAC/B,IAAI,iBAA4D,CAAC;AACjE,IAAI,aAA4B,CAAC;AAEjC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAO,KAAe,EAAE,IAAmB,EAAE,EAAE;IACjE,gBAAgB,GAAG,KAAK,CAAC;IACzB,aAAa,GAAG,IAAI,CAAC;IAErB,OAAO,MAAM,qBAAqB,EAAE,CAAC;AACvC,CAAC,CAAA,CAAC;AAEF,MAAM,mBAAmB,GAAG,GAAG,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAErC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG;QACZ;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,gBAAgB;SACxB;KACF,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC,aAAa,CAAC;QACjB;YACE,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,KAAK;SACV;QACD;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,KAAK;YAClB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;YACtB,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC,CAAC;IAEH,wBAAwB;IACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACrC,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAA6D,EAAE;;IAClG,IAAI,iBAAiB,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,2EAA2E;IAC3E,qFAAqF;IACrF,IAAI,CAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,UAAU,MAAI,MAAA,aAAa,CAAC,KAAK,0CAAE,SAAS,CAAA,EAAE,CAAC;QACtE,iBAAiB,GAAG;YAClB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjF,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;SACpF,CAAC;QAEF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,0CAA0C;IAC1C,iBAAiB,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE1D,yEAAyE;IACzE,IAAI,iBAAiB,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,iBAAiB,GAAG,mBAAmB,EAAE,CAAC;IAE1C,MAAM,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAEzD,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAA,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAO,SAAiB,EAAE,EAAE;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAE1D,OAAO,CAAC,CAAC,OAAO,IAAI,gBAAgB,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAA,CAAC"}

package/dist/src/sso-traces/index.d.ts

@@ -0,0 +1,114 @@
+import { GetByProductParams, Records, Storable } from '../typings';
+import type { SSOTrace, Trace } from './types';
+/**
+ * @swagger
+ * definitions:
+ *   SSOTrace:
+ *      type: object
+ *      properties:
+ *        traceId:
+ *          type: string
+ *          description: Trace ID
+ *        error:
+ *          type: string
+ *          description: Error
+ *        timestamp:
+ *          type: string
+ *          description: Timestamp
+ *        context:
+ *          type: object
+ *          properties:
+ *            tenant:
+ *              type: string
+ *              description: Tenant
+ *            product:
+ *              type: string
+ *              description: Product
+ *            clientID:
+ *              type: string
+ *              description: Connection client ID
+ *            issuer:
+ *              type: string
+ *              description: Issuer
+ *            relayState:
+ *              type: string
+ *              description: Relay state
+ *            samlResponse:
+ *              type: string
+ *              description: SAML response
+ *            isSAMLFederated:
+ *              type: boolean
+ *              description: Indicates if SAML is federated
+ *            isOIDCFederated:
+ *              type: boolean
+ *              description: Indicates if OIDC is federated
+ *            isIdPFlow:
+ *              type: boolean
+ *              description: Indicates if request is from IdP
+ */
+declare class SSOTraces {
+    tracesStore: Storable;
+    constructor({ tracesStore }: {
+        tracesStore: any;
+    });
+    saveTrace(payload: SSOTrace): Promise<string | undefined>;
+    /**
+     * @swagger
+     * /api/v1/sso-traces:
+     *   get:
+     *     summary: Get trace by ID
+     *     parameters:
+     *       - name: id
+     *         description: Trace ID
+     *         in: query
+     *         required: true
+     *         type: string
+     *     tags:
+     *       - SSO Traces
+     *     produces:
+     *       - application/json
+     *     responses:
+     *       '200':
+     *         description: Success
+     *         schema:
+     *           $ref: '#/definitions/SSOTrace'
+     */
+    getByTraceId(traceId: string): Promise<Trace>;
+    getAllTraces(pageOffset?: number, pageLimit?: number, pageToken?: string): Promise<Records<Trace>>;
+    /** Cleans up stale traces older than 1 week */
+    cleanUpStaleTraces(): Promise<void>;
+    /**
+     * @swagger
+     * /api/v1/sso-traces/product:
+     *   get:
+     *     summary: Get all traces for a product
+     *     parameters:
+     *      - $ref: '#/parameters/product'
+     *      - $ref: '#/parameters/pageOffset'
+     *      - $ref: '#/parameters/pageLimit'
+     *      - $ref: '#/parameters/pageToken'
+     *     tags:
+     *       - SSO Traces
+     *     produces:
+     *       - application/json
+     *     responses:
+     *       '200':
+     *         description: Success
+     *         content:
+     *           application/json:
+     *              schema:
+     *                type: object
+     *                properties:
+     *                  data:
+     *                    type: array
+     *                    items:
+     *                      $ref: '#/definitions/SSOTrace'
+     *                  pageToken:
+     *                    type: string
+     *                    description: token for pagination
+     */
+    getTracesByProduct(params: GetByProductParams): Promise<Records<any>>;
+    deleteTracesByProduct(product: string): Promise<void>;
+    countByProduct(product: string): Promise<number | undefined>;
+}
+export default SSOTraces;

package/dist/src/sso-traces/index.js

@@ -0,0 +1,229 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { generateMnemonic } from '@boxyhq/error-code-mnemonic';
+import { IndexNames } from '../controller/utils';
+import { keyFromParts } from '../db/utils';
+import { JacksonError } from '../controller/error';
+const INTERVAL_1_WEEK_MS = 7 * 24 * 60 * 60 * 1000;
+const INTERVAL_1_DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * @swagger
+ * definitions:
+ *   SSOTrace:
+ *      type: object
+ *      properties:
+ *        traceId:
+ *          type: string
+ *          description: Trace ID
+ *        error:
+ *          type: string
+ *          description: Error
+ *        timestamp:
+ *          type: string
+ *          description: Timestamp
+ *        context:
+ *          type: object
+ *          properties:
+ *            tenant:
+ *              type: string
+ *              description: Tenant
+ *            product:
+ *              type: string
+ *              description: Product
+ *            clientID:
+ *              type: string
+ *              description: Connection client ID
+ *            issuer:
+ *              type: string
+ *              description: Issuer
+ *            relayState:
+ *              type: string
+ *              description: Relay state
+ *            samlResponse:
+ *              type: string
+ *              description: SAML response
+ *            isSAMLFederated:
+ *              type: boolean
+ *              description: Indicates if SAML is federated
+ *            isOIDCFederated:
+ *              type: boolean
+ *              description: Indicates if OIDC is federated
+ *            isIdPFlow:
+ *              type: boolean
+ *              description: Indicates if request is from IdP
+ */
+class SSOTraces {
+    constructor({ tracesStore }) {
+        this.tracesStore = tracesStore;
+        // Clean up stale traces at the start
+        this.cleanUpStaleTraces();
+        // Set timer to run every day
+        setInterval(() => __awaiter(this, void 0, void 0, function* () {
+            this.cleanUpStaleTraces();
+        }), INTERVAL_1_DAY_MS);
+    }
+    saveTrace(payload) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const { context } = payload;
+                // Friendly trace id
+                const traceId = yield generateMnemonic();
+                // If timestamp present in payload use that value, else generate the current timestamp
+                const timestamp = typeof payload.timestamp === 'number' ? payload.timestamp : Date.now();
+                const traceValue = Object.assign(Object.assign({}, payload), { traceId, timestamp });
+                const { tenant, product, clientID } = context;
+                const indices = [
+                    {
+                        name: IndexNames.TenantProduct,
+                        value: keyFromParts(tenant, product),
+                        filterLogic: ({ tenant, product }) => !!(tenant && product),
+                    },
+                    {
+                        name: IndexNames.SSOClientID,
+                        value: clientID,
+                        filterLogic: ({ clientID }) => !!clientID,
+                    },
+                    {
+                        name: IndexNames.Product,
+                        value: product,
+                        filterLogic: ({ product }) => !!product,
+                    },
+                ]
+                    .filter(({ filterLogic }) => filterLogic(context))
+                    .map(({ name, value }) => ({ name, value }));
+                yield this.tracesStore.put(traceId, traceValue, ...indices);
+                return traceId;
+            }
+            catch (err) {
+                console.error(`Failed to save trace`, err);
+            }
+        });
+    }
+    /**
+     * @swagger
+     * /api/v1/sso-traces:
+     *   get:
+     *     summary: Get trace by ID
+     *     parameters:
+     *       - name: id
+     *         description: Trace ID
+     *         in: query
+     *         required: true
+     *         type: string
+     *     tags:
+     *       - SSO Traces
+     *     produces:
+     *       - application/json
+     *     responses:
+     *       '200':
+     *         description: Success
+     *         schema:
+     *           $ref: '#/definitions/SSOTrace'
+     */
+    getByTraceId(traceId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (yield this.tracesStore.get(traceId));
+        });
+    }
+    getAllTraces(pageOffset, pageLimit, pageToken) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.tracesStore.getAll(pageOffset || 0, pageLimit || 0, pageToken);
+        });
+    }
+    /** Cleans up stale traces older than 1 week */
+    cleanUpStaleTraces() {
+        return __awaiter(this, void 0, void 0, function* () {
+            let staleTraces = [];
+            for (let pageOffset = 0, pageTokenMap = {};; pageOffset += 50) {
+                const { data: page, pageToken: nextPageToken } = yield this.getAllTraces(pageOffset, 50, pageTokenMap[pageOffset]);
+                pageTokenMap[pageOffset + 50] = nextPageToken;
+                if (page.length === 0) {
+                    break;
+                }
+                staleTraces = staleTraces.concat(page.filter(({ timestamp }) => Date.now() - timestamp > INTERVAL_1_WEEK_MS));
+            }
+            for (let i = 0; i < staleTraces.length; i++) {
+                yield this.tracesStore.delete(staleTraces[i].traceId);
+            }
+        });
+    }
+    /**
+     * @swagger
+     * /api/v1/sso-traces/product:
+     *   get:
+     *     summary: Get all traces for a product
+     *     parameters:
+     *      - $ref: '#/parameters/product'
+     *      - $ref: '#/parameters/pageOffset'
+     *      - $ref: '#/parameters/pageLimit'
+     *      - $ref: '#/parameters/pageToken'
+     *     tags:
+     *       - SSO Traces
+     *     produces:
+     *       - application/json
+     *     responses:
+     *       '200':
+     *         description: Success
+     *         content:
+     *           application/json:
+     *              schema:
+     *                type: object
+     *                properties:
+     *                  data:
+     *                    type: array
+     *                    items:
+     *                      $ref: '#/definitions/SSOTrace'
+     *                  pageToken:
+     *                    type: string
+     *                    description: token for pagination
+     */
+    getTracesByProduct(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { product, pageOffset, pageLimit, pageToken } = params;
+            if (!product) {
+                throw new JacksonError('Please provide a `product`.', 400);
+            }
+            const traces = yield this.tracesStore.getByIndex({
+                name: IndexNames.Product,
+                value: product,
+            }, pageOffset, pageLimit, pageToken);
+            return traces;
+        });
+    }
+    deleteTracesByProduct(product) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let pageToken;
+            do {
+                const res = yield this.getTracesByProduct({
+                    product,
+                    pageOffset: 0,
+                    pageLimit: 50,
+                });
+                if (!res.data || !res.data.length) {
+                    break;
+                }
+                pageToken = res.pageToken;
+                // deleting traces in batches of 50
+                // deleting in the loop right away as we get the traces
+                yield this.tracesStore.deleteMany((res.data || []).map((t) => t.traceId));
+            } while (pageToken);
+        });
+    }
+    countByProduct(product) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.tracesStore.getCount({
+                name: IndexNames.Product,
+                value: product,
+            });
+        });
+    }
+}
+export default SSOTraces;
+//# sourceMappingURL=index.js.map

package/dist/src/sso-traces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sso-traces/index.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,SAAS;IAGb,YAAY,EAAE,WAAW,EAAE;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,qCAAqC;QACrC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,6BAA6B;QAC7B,WAAW,CAAC,GAAS,EAAE;YACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC,CAAA,EAAE,iBAAiB,CAAC,CAAC;IACxB,CAAC;IAEY,SAAS,CAAC,OAAiB;;YACtC,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;gBAC5B,oBAAoB;gBACpB,MAAM,OAAO,GAAW,MAAM,gBAAgB,EAAE,CAAC;gBACjD,sFAAsF;gBACtF,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzF,MAAM,UAAU,mCAAe,OAAO,KAAE,OAAO,EAAE,SAAS,GAAE,CAAC;gBAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;gBAE9C,MAAM,OAAO,GAAG;oBACd;wBACE,IAAI,EAAE,UAAU,CAAC,aAAa;wBAC9B,KAAK,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC;wBACpC,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;qBAC5D;oBACD;wBACE,IAAI,EAAE,UAAU,CAAC,WAAW;wBAC5B,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ;qBAC1C;oBACD;wBACE,IAAI,EAAE,UAAU,CAAC,OAAO;wBACxB,KAAK,EAAE,OAAO;wBACd,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO;qBACxC;iBACF;qBACE,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;qBACjD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,CAAC;gBAC5D,OAAO,OAAO,CAAC;YACjB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACU,YAAY,CAAC,OAAe;;YACvC,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAU,CAAC;QACxD,CAAC;KAAA;IAEY,YAAY,CACvB,UAAmB,EACnB,SAAkB,EAClB,SAAkB;;YAElB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QACnF,CAAC;KAAA;IAED,+CAA+C;IAClC,kBAAkB;;YAC7B,IAAI,WAAW,GAAY,EAAE,CAAC;YAC9B,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,YAAY,GAAG,EAAE,GAAI,UAAU,IAAI,EAAE,EAAE,CAAC;gBAC/D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CACtE,UAAU,EACV,EAAE,EACF,YAAY,CAAC,UAAU,CAAC,CACzB,CAAC;gBACF,YAAY,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC;gBAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,WAAW,GAAG,WAAW,CAAC,MAAM,CAC9B,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,kBAAkB,CAAC,CAC5E,CAAC;YACJ,CAAC;YAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACU,kBAAkB,CAAC,MAA0B;;YACxD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;YAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAC9C;gBACE,IAAI,EAAE,UAAU,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO;aACf,EACD,UAAU,EACV,SAAS,EACT,SAAS,CACV,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEY,qBAAqB,CAAC,OAAe;;YAChD,IAAI,SAAS,CAAC;YACd,GAAG,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;oBACxC,OAAO;oBACP,UAAU,EAAE,CAAC;oBACb,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBAClC,MAAM;gBACR,CAAC;gBACD,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;gBAC1B,mCAAmC;gBACnC,uDAAuD;gBACvD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC,QAAQ,SAAS,EAAE;QACtB,CAAC;KAAA;IAEY,cAAc,CAAC,OAAe;;YACzC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;gBACrC,IAAI,EAAE,UAAU,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;KAAA;CACF;AAED,eAAe,SAAS,CAAC"}

package/dist/src/sso-traces/types.d.ts

@@ -0,0 +1,44 @@
+import { SAMLProfile } from '@boxyhq/saml20/dist/typings';
+import SSOTraces from '.';
+import { OIDCIdPInitiatedReq } from '../typings';
+export interface Trace {
+    traceId: string;
+    timestamp: number;
+    error: string;
+    context: {
+        [key: string]: unknown;
+    };
+}
+export interface SSOTrace extends Omit<Trace, 'traceId' | 'timestamp'> {
+    timestamp?: number /** Can be passed in from outside else will be set to Date.now() */;
+    context: {
+        tenant: string;
+        product: string;
+        clientID: string;
+        redirectUri?: string;
+        requestedOIDCFlow?: boolean;
+        isSAMLFederated?: boolean;
+        isOIDCFederated?: boolean;
+        isIdPFlow?: boolean;
+        relayState?: string;
+        providerName?: string;
+        acsUrl?: string;
+        entityId?: string;
+        samlRequest?: string;
+        samlResponse?: string;
+        issuer?: string;
+        profile?: SAMLProfile;
+        error?: string;
+        error_description?: string;
+        error_uri?: string;
+        session_state_from_op_error?: string;
+        scope_from_op_error?: string;
+        stack?: string;
+        oidcTokenSet?: {
+            id_token?: string;
+            access_token?: string;
+        };
+        oidcIdPRequest?: OIDCIdPInitiatedReq;
+    };
+}
+export type SSOTracesInstance = InstanceType<typeof SSOTraces>;

package/dist/src/sso-traces/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/sso-traces/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/sso-traces/types.ts"],"names":[],"mappings":""}