@intlayer/backend 7.0.8 → 7.0.9-canary.2

package/dist/esm/node_modules/samlify/build/src/binding-simplesign.mjs

@@ -0,0 +1,358 @@
+import { __commonJS } from "../../../../_virtual/rolldown_runtime.mjs";
+import { require_utility } from "./utility.mjs";
+import { require_urn } from "./urn.mjs";
+import { require_libsaml } from "./libsaml.mjs";
+
+//#region ../../node_modules/samlify/build/src/binding-simplesign.js
+var require_binding_simplesign = /* @__PURE__ */ __commonJS({ "../../node_modules/samlify/build/src/binding-simplesign.js": ((exports) => {
+	/**
+	* @file binding-simplesign.ts
+	* @author Orange
+	* @desc Binding-level API, declare the functions using POST SimpleSign binding
+	*/
+	var __assign = exports && exports.__assign || function() {
+		__assign = Object.assign || function(t) {
+			for (var s, i = 1, n = arguments.length; i < n; i++) {
+				s = arguments[i];
+				for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+			}
+			return t;
+		};
+		return __assign.apply(this, arguments);
+	};
+	var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+		if (k2 === void 0) k2 = k;
+		var desc = Object.getOwnPropertyDescriptor(m, k);
+		if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) desc = {
+			enumerable: true,
+			get: function() {
+				return m[k];
+			}
+		};
+		Object.defineProperty(o, k2, desc);
+	}) : (function(o, m, k, k2) {
+		if (k2 === void 0) k2 = k;
+		o[k2] = m[k];
+	}));
+	var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+		Object.defineProperty(o, "default", {
+			enumerable: true,
+			value: v
+		});
+	}) : function(o, v) {
+		o["default"] = v;
+	});
+	var __importStar = exports && exports.__importStar || function(mod) {
+		if (mod && mod.__esModule) return mod;
+		var result = {};
+		if (mod != null) {
+			for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+		}
+		__setModuleDefault(result, mod);
+		return result;
+	};
+	var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
+		function adopt(value) {
+			return value instanceof P ? value : new P(function(resolve) {
+				resolve(value);
+			});
+		}
+		return new (P || (P = Promise))(function(resolve, reject) {
+			function fulfilled(value) {
+				try {
+					step(generator.next(value));
+				} catch (e) {
+					reject(e);
+				}
+			}
+			function rejected(value) {
+				try {
+					step(generator["throw"](value));
+				} catch (e) {
+					reject(e);
+				}
+			}
+			function step(result) {
+				result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+			}
+			step((generator = generator.apply(thisArg, _arguments || [])).next());
+		});
+	};
+	var __generator = exports && exports.__generator || function(thisArg, body) {
+		var _ = {
+			label: 0,
+			sent: function() {
+				if (t[0] & 1) throw t[1];
+				return t[1];
+			},
+			trys: [],
+			ops: []
+		}, f, y, t, g;
+		return g = {
+			next: verb(0),
+			"throw": verb(1),
+			"return": verb(2)
+		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+			return this;
+		}), g;
+		function verb(n) {
+			return function(v) {
+				return step([n, v]);
+			};
+		}
+		function step(op) {
+			if (f) throw new TypeError("Generator is already executing.");
+			while (_) try {
+				if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+				if (y = 0, t) op = [op[0] & 2, t.value];
+				switch (op[0]) {
+					case 0:
+					case 1:
+						t = op;
+						break;
+					case 4:
+						_.label++;
+						return {
+							value: op[1],
+							done: false
+						};
+					case 5:
+						_.label++;
+						y = op[1];
+						op = [0];
+						continue;
+					case 7:
+						op = _.ops.pop();
+						_.trys.pop();
+						continue;
+					default:
+						if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+							_ = 0;
+							continue;
+						}
+						if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+							_.label = op[1];
+							break;
+						}
+						if (op[0] === 6 && _.label < t[1]) {
+							_.label = t[1];
+							t = op;
+							break;
+						}
+						if (t && _.label < t[2]) {
+							_.label = t[2];
+							_.ops.push(op);
+							break;
+						}
+						if (t[2]) _.ops.pop();
+						_.trys.pop();
+						continue;
+				}
+				op = body.call(thisArg, _);
+			} catch (e) {
+				op = [6, e];
+				y = 0;
+			} finally {
+				f = t = 0;
+			}
+			if (op[0] & 5) throw op[1];
+			return {
+				value: op[0] ? op[1] : void 0,
+				done: true
+			};
+		}
+	};
+	var __importDefault = exports && exports.__importDefault || function(mod) {
+		return mod && mod.__esModule ? mod : { "default": mod };
+	};
+	Object.defineProperty(exports, "__esModule", { value: true });
+	var urn_1 = require_urn();
+	var libsaml_1 = __importDefault(require_libsaml());
+	var utility_1 = __importStar(require_utility());
+	var binding = urn_1.wording.binding;
+	var urlParams = urn_1.wording.urlParams;
+	/**
+	* @private
+	* @desc Helper of generating URL param/value pair
+	* @param  {string} param     key
+	* @param  {string} value     value of key
+	* @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'
+	* @return {string}
+	*/
+	function pvPair(param, value, first) {
+		return (first === true ? "?" : "&") + param + "=" + value;
+	}
+	/**
+	* @private
+	* @desc Refactored part of simple signature generation for login/logout request
+	* @param  {string} type
+	* @param  {string} rawSamlRequest
+	* @param  {object} entitySetting
+	* @return {string}
+	*/
+	function buildSimpleSignature(opts) {
+		var type = opts.type, context = opts.context, entitySetting = opts.entitySetting;
+		var _a = opts.relayState, relayState = _a === void 0 ? "" : _a;
+		var queryParam = libsaml_1.default.getQueryParamByType(type);
+		if (relayState !== "") relayState = pvPair(urlParams.relayState, relayState);
+		var sigAlg = pvPair(urlParams.sigAlg, entitySetting.requestSignatureAlgorithm);
+		var octetString = context + relayState + sigAlg;
+		return libsaml_1.default.constructMessageSignature(queryParam + "=" + octetString, entitySetting.privateKey, entitySetting.privateKeyPass, void 0, entitySetting.requestSignatureAlgorithm).toString();
+	}
+	/**
+	* @desc Generate a base64 encoded login request
+	* @param  {string} referenceTagXPath           reference uri
+	* @param  {object} entity                      object includes both idp and sp
+	* @param  {function} customTagReplacement     used when developers have their own login response template
+	*/
+	function base64LoginRequest(entity, customTagReplacement) {
+		var metadata = {
+			idp: entity.idp.entityMeta,
+			sp: entity.sp.entityMeta
+		};
+		var spSetting = entity.sp.entitySetting;
+		var id = "";
+		if (metadata && metadata.idp && metadata.sp) {
+			var base = metadata.idp.getSingleSignOnService(binding.simpleSign);
+			var rawSamlRequest = void 0;
+			if (spSetting.loginRequestTemplate && customTagReplacement) {
+				var info = customTagReplacement(spSetting.loginRequestTemplate.context);
+				id = (0, utility_1.get)(info, "id", null);
+				rawSamlRequest = (0, utility_1.get)(info, "context", null);
+			} else {
+				var nameIDFormat = spSetting.nameIDFormat;
+				var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
+				id = spSetting.generateID();
+				rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, {
+					ID: id,
+					Destination: base,
+					Issuer: metadata.sp.getEntityID(),
+					IssueInstant: (/* @__PURE__ */ new Date()).toISOString(),
+					AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.simpleSign),
+					EntityID: metadata.sp.getEntityID(),
+					AllowCreate: spSetting.allowCreate,
+					NameIDFormat: selectedNameIDFormat
+				});
+			}
+			var simpleSignatureContext = null;
+			if (metadata.idp.isWantAuthnRequestsSigned()) simpleSignatureContext = {
+				signature: buildSimpleSignature({
+					type: urlParams.samlRequest,
+					context: rawSamlRequest,
+					entitySetting: spSetting,
+					relayState: spSetting.relayState
+				}),
+				sigAlg: spSetting.requestSignatureAlgorithm
+			};
+			return __assign({
+				id,
+				context: utility_1.default.base64Encode(rawSamlRequest)
+			}, simpleSignatureContext);
+		}
+		throw new Error("ERR_GENERATE_POST_SIMPLESIGN_LOGIN_REQUEST_MISSING_METADATA");
+	}
+	/**
+	* @desc Generate a base64 encoded login response
+	* @param  {object} requestInfo                 corresponding request, used to obtain the id
+	* @param  {object} entity                      object includes both idp and sp
+	* @param  {object} user                        current logged user (e.g. req.user)
+	* @param  {string}  relayState               the relay state
+	* @param  {function} customTagReplacement     used when developers have their own login response template
+	*/
+	function base64LoginResponse(requestInfo, entity, user, relayState, customTagReplacement) {
+		if (requestInfo === void 0) requestInfo = {};
+		if (user === void 0) user = {};
+		return __awaiter(this, void 0, void 0, function() {
+			var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, fiveMinutesLaterTime, tvalue, template, privateKey, privateKeyPass, signatureAlgorithm, config, simpleSignature;
+			return __generator(this, function(_a) {
+				idpSetting = entity.idp.entitySetting;
+				spSetting = entity.sp.entitySetting;
+				id = idpSetting.generateID();
+				metadata = {
+					idp: entity.idp.entityMeta,
+					sp: entity.sp.entityMeta
+				};
+				nameIDFormat = idpSetting.nameIDFormat;
+				selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
+				if (metadata && metadata.idp && metadata.sp) {
+					base = metadata.sp.getAssertionConsumerService(binding.simpleSign);
+					rawSamlResponse = void 0;
+					nowTime = /* @__PURE__ */ new Date();
+					fiveMinutesLaterTime = new Date(nowTime.getTime() + 3e5);
+					tvalue = {
+						ID: id,
+						AssertionID: idpSetting.generateID(),
+						Destination: base,
+						Audience: metadata.sp.getEntityID(),
+						EntityID: metadata.sp.getEntityID(),
+						SubjectRecipient: base,
+						Issuer: metadata.idp.getEntityID(),
+						IssueInstant: nowTime.toISOString(),
+						AssertionConsumerServiceURL: base,
+						StatusCode: urn_1.StatusCode.Success,
+						ConditionsNotBefore: nowTime.toISOString(),
+						ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
+						SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
+						NameIDFormat: selectedNameIDFormat,
+						NameID: user.email || "",
+						InResponseTo: (0, utility_1.get)(requestInfo, "extract.request.id", ""),
+						AuthnStatement: "",
+						AttributeStatement: ""
+					};
+					if (idpSetting.loginResponseTemplate && customTagReplacement) {
+						template = customTagReplacement(idpSetting.loginResponseTemplate.context);
+						rawSamlResponse = (0, utility_1.get)(template, "context", null);
+					} else {
+						if (requestInfo !== null) tvalue.InResponseTo = requestInfo.extract.request.id;
+						rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginResponseTemplate.context, tvalue);
+					}
+					privateKey = idpSetting.privateKey, privateKeyPass = idpSetting.privateKeyPass, signatureAlgorithm = idpSetting.requestSignatureAlgorithm;
+					config = {
+						privateKey,
+						privateKeyPass,
+						signatureAlgorithm,
+						signingCert: metadata.idp.getX509Certificate("signing"),
+						isBase64Output: false
+					};
+					if (metadata.sp.isWantAssertionsSigned()) rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), {
+						rawSamlMessage: rawSamlResponse,
+						transformationAlgorithms: spSetting.transformationAlgorithms,
+						referenceTagXPath: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']",
+						signatureConfig: {
+							prefix: "ds",
+							location: {
+								reference: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']",
+								action: "after"
+							}
+						}
+					}));
+					simpleSignature = "";
+					simpleSignature = buildSimpleSignature({
+						type: urlParams.samlResponse,
+						context: rawSamlResponse,
+						entitySetting: idpSetting,
+						relayState
+					});
+					return [2, Promise.resolve({
+						id,
+						context: utility_1.default.base64Encode(rawSamlResponse),
+						signature: simpleSignature,
+						sigAlg: idpSetting.requestSignatureAlgorithm
+					})];
+				}
+				throw new Error("ERR_GENERATE_POST_SIMPLESIGN_LOGIN_RESPONSE_MISSING_METADATA");
+			});
+		});
+	}
+	var simpleSignBinding = {
+		base64LoginRequest,
+		base64LoginResponse
+	};
+	exports.default = simpleSignBinding;
+}) });
+
+//#endregion
+export default require_binding_simplesign();
+
+export { require_binding_simplesign };
+//# sourceMappingURL=binding-simplesign.mjs.map

package/dist/esm/node_modules/samlify/build/src/binding-simplesign.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-simplesign.mjs","names":[],"sources":["../../../../../../../../node_modules/samlify/build/src/binding-simplesign.js"],"sourcesContent":["\"use strict\";\n/**\n* @file binding-simplesign.ts\n* @author Orange\n* @desc Binding-level API, declare the functions using POST SimpleSign binding\n*/\nvar __assign = (this && this.__assign) || function () {\n    __assign = Object.assign || function(t) {\n        for (var s, i = 1, n = arguments.length; i < n; i++) {\n            s = arguments[i];\n            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))\n                t[p] = s[p];\n        }\n        return t;\n    };\n    return __assign.apply(this, arguments);\n};\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    var desc = Object.getOwnPropertyDescriptor(m, k);\n    if (!desc || (\"get\" in desc ? !m.__esModule : desc.writable || desc.configurable)) {\n      desc = { enumerable: true, get: function() { return m[k]; } };\n    }\n    Object.defineProperty(o, k2, desc);\n}) : (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n    Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n    o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || function (mod) {\n    if (mod && mod.__esModule) return mod;\n    var result = {};\n    if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\n    __setModuleDefault(result, mod);\n    return result;\n};\nvar __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nvar __generator = (this && this.__generator) || function (thisArg, body) {\n    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\n    return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\n    function verb(n) { return function (v) { return step([n, v]); }; }\n    function step(op) {\n        if (f) throw new TypeError(\"Generator is already executing.\");\n        while (_) try {\n            if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\n            if (y = 0, t) op = [op[0] & 2, t.value];\n            switch (op[0]) {\n                case 0: case 1: t = op; break;\n                case 4: _.label++; return { value: op[1], done: false };\n                case 5: _.label++; y = op[1]; op = [0]; continue;\n                case 7: op = _.ops.pop(); _.trys.pop(); continue;\n                default:\n                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\n                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\n                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\n                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\n                    if (t[2]) _.ops.pop();\n                    _.trys.pop(); continue;\n            }\n            op = body.call(thisArg, _);\n        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\n        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\n    }\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n    return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = __importStar(require(\"./utility\"));\nvar binding = urn_1.wording.binding;\nvar urlParams = urn_1.wording.urlParams;\n/**\n* @private\n* @desc Helper of generating URL param/value pair\n* @param  {string} param     key\n* @param  {string} value     value of key\n* @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'\n* @return {string}\n*/\nfunction pvPair(param, value, first) {\n    return (first === true ? '?' : '&') + param + '=' + value;\n}\n/**\n* @private\n* @desc Refactored part of simple signature generation for login/logout request\n* @param  {string} type\n* @param  {string} rawSamlRequest\n* @param  {object} entitySetting\n* @return {string}\n*/\nfunction buildSimpleSignature(opts) {\n    var type = opts.type, context = opts.context, entitySetting = opts.entitySetting;\n    var _a = opts.relayState, relayState = _a === void 0 ? '' : _a;\n    var queryParam = libsaml_1.default.getQueryParamByType(type);\n    if (relayState !== '') {\n        relayState = pvPair(urlParams.relayState, relayState);\n    }\n    var sigAlg = pvPair(urlParams.sigAlg, entitySetting.requestSignatureAlgorithm);\n    var octetString = context + relayState + sigAlg;\n    return libsaml_1.default.constructMessageSignature(queryParam + '=' + octetString, entitySetting.privateKey, entitySetting.privateKeyPass, undefined, entitySetting.requestSignatureAlgorithm).toString();\n}\n/**\n* @desc Generate a base64 encoded login request\n* @param  {string} referenceTagXPath           reference uri\n* @param  {object} entity                      object includes both idp and sp\n* @param  {function} customTagReplacement     used when developers have their own login response template\n*/\nfunction base64LoginRequest(entity, customTagReplacement) {\n    var metadata = { idp: entity.idp.entityMeta, sp: entity.sp.entityMeta };\n    var spSetting = entity.sp.entitySetting;\n    var id = '';\n    if (metadata && metadata.idp && metadata.sp) {\n        var base = metadata.idp.getSingleSignOnService(binding.simpleSign);\n        var rawSamlRequest = void 0;\n        if (spSetting.loginRequestTemplate && customTagReplacement) {\n            var info = customTagReplacement(spSetting.loginRequestTemplate.context);\n            id = (0, utility_1.get)(info, 'id', null);\n            rawSamlRequest = (0, utility_1.get)(info, 'context', null);\n        }\n        else {\n            var nameIDFormat = spSetting.nameIDFormat;\n            var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;\n            id = spSetting.generateID();\n            rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, {\n                ID: id,\n                Destination: base,\n                Issuer: metadata.sp.getEntityID(),\n                IssueInstant: new Date().toISOString(),\n                AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.simpleSign),\n                EntityID: metadata.sp.getEntityID(),\n                AllowCreate: spSetting.allowCreate,\n                NameIDFormat: selectedNameIDFormat\n            });\n        }\n        var simpleSignatureContext = null;\n        if (metadata.idp.isWantAuthnRequestsSigned()) {\n            var simpleSignature = buildSimpleSignature({\n                type: urlParams.samlRequest,\n                context: rawSamlRequest,\n                entitySetting: spSetting,\n                relayState: spSetting.relayState,\n            });\n            simpleSignatureContext = {\n                signature: simpleSignature,\n                sigAlg: spSetting.requestSignatureAlgorithm,\n            };\n        }\n        // No need to embeded XML signature\n        return __assign({ id: id, context: utility_1.default.base64Encode(rawSamlRequest) }, simpleSignatureContext);\n    }\n    throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_REQUEST_MISSING_METADATA');\n}\n/**\n* @desc Generate a base64 encoded login response\n* @param  {object} requestInfo                 corresponding request, used to obtain the id\n* @param  {object} entity                      object includes both idp and sp\n* @param  {object} user                        current logged user (e.g. req.user)\n* @param  {string}  relayState               the relay state\n* @param  {function} customTagReplacement     used when developers have their own login response template\n*/\nfunction base64LoginResponse(requestInfo, entity, user, relayState, customTagReplacement) {\n    if (requestInfo === void 0) { requestInfo = {}; }\n    if (user === void 0) { user = {}; }\n    return __awaiter(this, void 0, void 0, function () {\n        var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, fiveMinutesLaterTime, tvalue, template, privateKey, privateKeyPass, signatureAlgorithm, config, simpleSignature;\n        return __generator(this, function (_a) {\n            idpSetting = entity.idp.entitySetting;\n            spSetting = entity.sp.entitySetting;\n            id = idpSetting.generateID();\n            metadata = {\n                idp: entity.idp.entityMeta,\n                sp: entity.sp.entityMeta,\n            };\n            nameIDFormat = idpSetting.nameIDFormat;\n            selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;\n            if (metadata && metadata.idp && metadata.sp) {\n                base = metadata.sp.getAssertionConsumerService(binding.simpleSign);\n                rawSamlResponse = void 0;\n                nowTime = new Date();\n                fiveMinutesLaterTime = new Date(nowTime.getTime() + 300000);\n                tvalue = {\n                    ID: id,\n                    AssertionID: idpSetting.generateID(),\n                    Destination: base,\n                    Audience: metadata.sp.getEntityID(),\n                    EntityID: metadata.sp.getEntityID(),\n                    SubjectRecipient: base,\n                    Issuer: metadata.idp.getEntityID(),\n                    IssueInstant: nowTime.toISOString(),\n                    AssertionConsumerServiceURL: base,\n                    StatusCode: urn_1.StatusCode.Success,\n                    // can be customized\n                    ConditionsNotBefore: nowTime.toISOString(),\n                    ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),\n                    SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),\n                    NameIDFormat: selectedNameIDFormat,\n                    NameID: user.email || '',\n                    InResponseTo: (0, utility_1.get)(requestInfo, 'extract.request.id', ''),\n                    AuthnStatement: '',\n                    AttributeStatement: '',\n                };\n                if (idpSetting.loginResponseTemplate && customTagReplacement) {\n                    template = customTagReplacement(idpSetting.loginResponseTemplate.context);\n                    rawSamlResponse = (0, utility_1.get)(template, 'context', null);\n                }\n                else {\n                    if (requestInfo !== null) {\n                        tvalue.InResponseTo = requestInfo.extract.request.id;\n                    }\n                    rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginResponseTemplate.context, tvalue);\n                }\n                privateKey = idpSetting.privateKey, privateKeyPass = idpSetting.privateKeyPass, signatureAlgorithm = idpSetting.requestSignatureAlgorithm;\n                config = {\n                    privateKey: privateKey,\n                    privateKeyPass: privateKeyPass,\n                    signatureAlgorithm: signatureAlgorithm,\n                    signingCert: metadata.idp.getX509Certificate('signing'),\n                    isBase64Output: false,\n                };\n                // step: sign assertion ? -> encrypted ? -> sign message ?\n                if (metadata.sp.isWantAssertionsSigned()) {\n                    rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), { rawSamlMessage: rawSamlResponse, transformationAlgorithms: spSetting.transformationAlgorithms, referenceTagXPath: \"/*[local-name(.)='Response']/*[local-name(.)='Assertion']\", signatureConfig: {\n                            prefix: 'ds',\n                            location: { reference: \"/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']\", action: 'after' },\n                        } }));\n                }\n                simpleSignature = '';\n                // like in post and redirect bindings, login response is always signed.\n                simpleSignature = buildSimpleSignature({\n                    type: urlParams.samlResponse,\n                    context: rawSamlResponse,\n                    entitySetting: idpSetting,\n                    relayState: relayState,\n                });\n                return [2 /*return*/, Promise.resolve({\n                        id: id,\n                        context: utility_1.default.base64Encode(rawSamlResponse),\n                        signature: simpleSignature,\n                        sigAlg: idpSetting.requestSignatureAlgorithm,\n                    })];\n            }\n            throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_RESPONSE_MISSING_METADATA');\n        });\n    });\n}\nvar simpleSignBinding = {\n    base64LoginRequest: base64LoginRequest,\n    base64LoginResponse: base64LoginResponse,\n};\nexports.default = simpleSignBinding;\n//# sourceMappingURL=binding-simplesign.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;CAMA,IAAI,8BAAyB,YAAa,WAAY;AAClD,aAAW,OAAO,UAAU,SAAS,GAAG;AACpC,QAAK,IAAI,GAAG,IAAI,GAAG,IAAI,UAAU,QAAQ,IAAI,GAAG,KAAK;AACjD,QAAI,UAAU;AACd,SAAK,IAAI,KAAK,EAAG,KAAI,OAAO,UAAU,eAAe,KAAK,GAAG,EAAE,CAC3D,GAAE,KAAK,EAAE;;AAEjB,UAAO;;AAEX,SAAO,SAAS,MAAM,MAAM,UAAU;;CAE1C,IAAI,qCAAgC,oBAAqB,OAAO,UAAU,SAAS,GAAG,GAAG,GAAG,IAAI;AAC5F,MAAI,OAAO,OAAW,MAAK;EAC3B,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE;AAChD,MAAI,CAAC,SAAS,SAAS,OAAO,CAAC,EAAE,aAAa,KAAK,YAAY,KAAK,cAClE,QAAO;GAAE,YAAY;GAAM,KAAK,WAAW;AAAE,WAAO,EAAE;;GAAO;AAE/D,SAAO,eAAe,GAAG,IAAI,KAAK;OAChC,SAAS,GAAG,GAAG,GAAG,IAAI;AACxB,MAAI,OAAO,OAAW,MAAK;AAC3B,IAAE,MAAM,EAAE;;CAEd,IAAI,wCAAmC,uBAAwB,OAAO,UAAU,SAAS,GAAG,GAAG;AAC3F,SAAO,eAAe,GAAG,WAAW;GAAE,YAAY;GAAM,OAAO;GAAG,CAAC;MAClE,SAAS,GAAG,GAAG;AAChB,IAAE,aAAa;;CAEnB,IAAI,kCAA6B,gBAAiB,SAAU,KAAK;AAC7D,MAAI,OAAO,IAAI,WAAY,QAAO;EAClC,IAAI,SAAS,EAAE;AACf,MAAI,OAAO,MAAM;QAAK,IAAI,KAAK,IAAK,KAAI,MAAM,aAAa,OAAO,UAAU,eAAe,KAAK,KAAK,EAAE,CAAE,iBAAgB,QAAQ,KAAK,EAAE;;AACxI,qBAAmB,QAAQ,IAAI;AAC/B,SAAO;;CAEX,IAAI,+BAA0B,aAAc,SAAU,SAAS,YAAY,GAAG,WAAW;EACrF,SAAS,MAAM,OAAO;AAAE,UAAO,iBAAiB,IAAI,QAAQ,IAAI,EAAE,SAAU,SAAS;AAAE,YAAQ,MAAM;KAAI;;AACzG,SAAO,KAAK,MAAM,IAAI,UAAU,SAAU,SAAS,QAAQ;GACvD,SAAS,UAAU,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,KAAK,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACtF,SAAS,SAAS,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,SAAS,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACzF,SAAS,KAAK,QAAQ;AAAE,WAAO,OAAO,QAAQ,OAAO,MAAM,GAAG,MAAM,OAAO,MAAM,CAAC,KAAK,WAAW,SAAS;;AAC3G,SAAM,YAAY,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC;IACvE;;CAEN,IAAI,iCAA4B,eAAgB,SAAU,SAAS,MAAM;EACrE,IAAI,IAAI;GAAE,OAAO;GAAG,MAAM,WAAW;AAAE,QAAI,EAAE,KAAK,EAAG,OAAM,EAAE;AAAI,WAAO,EAAE;;GAAO,MAAM,EAAE;GAAE,KAAK,EAAE;GAAE,EAAE,GAAG,GAAG,GAAG;AAC/G,SAAO,IAAI;GAAE,MAAM,KAAK,EAAE;GAAE,SAAS,KAAK,EAAE;GAAE,UAAU,KAAK,EAAE;GAAE,EAAE,OAAO,WAAW,eAAe,EAAE,OAAO,YAAY,WAAW;AAAE,UAAO;MAAU;EACvJ,SAAS,KAAK,GAAG;AAAE,UAAO,SAAU,GAAG;AAAE,WAAO,KAAK,CAAC,GAAG,EAAE,CAAC;;;EAC5D,SAAS,KAAK,IAAI;AACd,OAAI,EAAG,OAAM,IAAI,UAAU,kCAAkC;AAC7D,UAAO,EAAG,KAAI;AACV,QAAI,IAAI,GAAG,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,YAAY,GAAG,KAAK,EAAE,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,KAAM,QAAO;AAC3J,QAAI,IAAI,GAAG,EAAG,MAAK,CAAC,GAAG,KAAK,GAAG,EAAE,MAAM;AACvC,YAAQ,GAAG,IAAX;KACI,KAAK;KAAG,KAAK;AAAG,UAAI;AAAI;KACxB,KAAK;AAAG,QAAE;AAAS,aAAO;OAAE,OAAO,GAAG;OAAI,MAAM;OAAO;KACvD,KAAK;AAAG,QAAE;AAAS,UAAI,GAAG;AAAI,WAAK,CAAC,EAAE;AAAE;KACxC,KAAK;AAAG,WAAK,EAAE,IAAI,KAAK;AAAE,QAAE,KAAK,KAAK;AAAE;KACxC;AACI,UAAI,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,SAAS,QAAQ,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI;AAAE,WAAI;AAAG;;AACjG,UAAI,GAAG,OAAO,MAAM,CAAC,KAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,KAAM;AAAE,SAAE,QAAQ,GAAG;AAAI;;AAC9E,UAAI,GAAG,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,WAAI;AAAI;;AAC7D,UAAI,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,SAAE,IAAI,KAAK,GAAG;AAAE;;AAC3D,UAAI,EAAE,GAAI,GAAE,IAAI,KAAK;AACrB,QAAE,KAAK,KAAK;AAAE;;AAEtB,SAAK,KAAK,KAAK,SAAS,EAAE;YACrB,GAAG;AAAE,SAAK,CAAC,GAAG,EAAE;AAAE,QAAI;aAAa;AAAE,QAAI,IAAI;;AACtD,OAAI,GAAG,KAAK,EAAG,OAAM,GAAG;AAAI,UAAO;IAAE,OAAO,GAAG,KAAK,GAAG,KAAK,KAAK;IAAG,MAAM;IAAM;;;CAGxF,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;CAC7D,IAAI;CACJ,IAAI,YAAY,kCAAqC;CACrD,IAAI,YAAY,+BAAkC;CAClD,IAAI,UAAU,MAAM,QAAQ;CAC5B,IAAI,YAAY,MAAM,QAAQ;;;;;;;;;CAS9B,SAAS,OAAO,OAAO,OAAO,OAAO;AACjC,UAAQ,UAAU,OAAO,MAAM,OAAO,QAAQ,MAAM;;;;;;;;;;CAUxD,SAAS,qBAAqB,MAAM;EAChC,IAAI,OAAO,KAAK,MAAM,UAAU,KAAK,SAAS,gBAAgB,KAAK;EACnE,IAAI,KAAK,KAAK,YAAY,aAAa,OAAO,KAAK,IAAI,KAAK;EAC5D,IAAI,aAAa,UAAU,QAAQ,oBAAoB,KAAK;AAC5D,MAAI,eAAe,GACf,cAAa,OAAO,UAAU,YAAY,WAAW;EAEzD,IAAI,SAAS,OAAO,UAAU,QAAQ,cAAc,0BAA0B;EAC9E,IAAI,cAAc,UAAU,aAAa;AACzC,SAAO,UAAU,QAAQ,0BAA0B,aAAa,MAAM,aAAa,cAAc,YAAY,cAAc,gBAAgB,QAAW,cAAc,0BAA0B,CAAC,UAAU;;;;;;;;CAQ7M,SAAS,mBAAmB,QAAQ,sBAAsB;EACtD,IAAI,WAAW;GAAE,KAAK,OAAO,IAAI;GAAY,IAAI,OAAO,GAAG;GAAY;EACvE,IAAI,YAAY,OAAO,GAAG;EAC1B,IAAI,KAAK;AACT,MAAI,YAAY,SAAS,OAAO,SAAS,IAAI;GACzC,IAAI,OAAO,SAAS,IAAI,uBAAuB,QAAQ,WAAW;GAClE,IAAI,iBAAiB,KAAK;AAC1B,OAAI,UAAU,wBAAwB,sBAAsB;IACxD,IAAI,OAAO,qBAAqB,UAAU,qBAAqB,QAAQ;AACvE,UAAM,GAAG,UAAU,KAAK,MAAM,MAAM,KAAK;AACzC,sBAAkB,GAAG,UAAU,KAAK,MAAM,WAAW,KAAK;UAEzD;IACD,IAAI,eAAe,UAAU;IAC7B,IAAI,uBAAuB,MAAM,QAAQ,aAAa,GAAG,aAAa,KAAK;AAC3E,SAAK,UAAU,YAAY;AAC3B,qBAAiB,UAAU,QAAQ,mBAAmB,UAAU,QAAQ,4BAA4B,SAAS;KACzG,IAAI;KACJ,aAAa;KACb,QAAQ,SAAS,GAAG,aAAa;KACjC,+BAAc,IAAI,MAAM,EAAC,aAAa;KACtC,6BAA6B,SAAS,GAAG,4BAA4B,QAAQ,WAAW;KACxF,UAAU,SAAS,GAAG,aAAa;KACnC,aAAa,UAAU;KACvB,cAAc;KACjB,CAAC;;GAEN,IAAI,yBAAyB;AAC7B,OAAI,SAAS,IAAI,2BAA2B,CAOxC,0BAAyB;IACrB,WAPkB,qBAAqB;KACvC,MAAM,UAAU;KAChB,SAAS;KACT,eAAe;KACf,YAAY,UAAU;KACzB,CAAC;IAGE,QAAQ,UAAU;IACrB;AAGL,UAAO,SAAS;IAAM;IAAI,SAAS,UAAU,QAAQ,aAAa,eAAe;IAAE,EAAE,uBAAuB;;AAEhH,QAAM,IAAI,MAAM,8DAA8D;;;;;;;;;;CAUlF,SAAS,oBAAoB,aAAa,QAAQ,MAAM,YAAY,sBAAsB;AACtF,MAAI,gBAAgB,KAAK,EAAK,eAAc,EAAE;AAC9C,MAAI,SAAS,KAAK,EAAK,QAAO,EAAE;AAChC,SAAO,UAAU,MAAM,KAAK,GAAG,KAAK,GAAG,WAAY;GAC/C,IAAI,YAAY,WAAW,IAAI,UAAU,cAAc,sBAAsB,MAAM,iBAAiB,SAAS,sBAAsB,QAAQ,UAAU,YAAY,gBAAgB,oBAAoB,QAAQ;AAC7M,UAAO,YAAY,MAAM,SAAU,IAAI;AACnC,iBAAa,OAAO,IAAI;AACxB,gBAAY,OAAO,GAAG;AACtB,SAAK,WAAW,YAAY;AAC5B,eAAW;KACP,KAAK,OAAO,IAAI;KAChB,IAAI,OAAO,GAAG;KACjB;AACD,mBAAe,WAAW;AAC1B,2BAAuB,MAAM,QAAQ,aAAa,GAAG,aAAa,KAAK;AACvE,QAAI,YAAY,SAAS,OAAO,SAAS,IAAI;AACzC,YAAO,SAAS,GAAG,4BAA4B,QAAQ,WAAW;AAClE,uBAAkB,KAAK;AACvB,+BAAU,IAAI,MAAM;AACpB,4BAAuB,IAAI,KAAK,QAAQ,SAAS,GAAG,IAAO;AAC3D,cAAS;MACL,IAAI;MACJ,aAAa,WAAW,YAAY;MACpC,aAAa;MACb,UAAU,SAAS,GAAG,aAAa;MACnC,UAAU,SAAS,GAAG,aAAa;MACnC,kBAAkB;MAClB,QAAQ,SAAS,IAAI,aAAa;MAClC,cAAc,QAAQ,aAAa;MACnC,6BAA6B;MAC7B,YAAY,MAAM,WAAW;MAE7B,qBAAqB,QAAQ,aAAa;MAC1C,wBAAwB,qBAAqB,aAAa;MAC1D,qCAAqC,qBAAqB,aAAa;MACvE,cAAc;MACd,QAAQ,KAAK,SAAS;MACtB,eAAe,GAAG,UAAU,KAAK,aAAa,sBAAsB,GAAG;MACvE,gBAAgB;MAChB,oBAAoB;MACvB;AACD,SAAI,WAAW,yBAAyB,sBAAsB;AAC1D,iBAAW,qBAAqB,WAAW,sBAAsB,QAAQ;AACzE,yBAAmB,GAAG,UAAU,KAAK,UAAU,WAAW,KAAK;YAE9D;AACD,UAAI,gBAAgB,KAChB,QAAO,eAAe,YAAY,QAAQ,QAAQ;AAEtD,wBAAkB,UAAU,QAAQ,mBAAmB,UAAU,QAAQ,6BAA6B,SAAS,OAAO;;AAE1H,kBAAa,WAAW,YAAY,iBAAiB,WAAW,gBAAgB,qBAAqB,WAAW;AAChH,cAAS;MACO;MACI;MACI;MACpB,aAAa,SAAS,IAAI,mBAAmB,UAAU;MACvD,gBAAgB;MACnB;AAED,SAAI,SAAS,GAAG,wBAAwB,CACpC,mBAAkB,UAAU,QAAQ,uBAAuB,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE;MAAE,gBAAgB;MAAiB,0BAA0B,UAAU;MAA0B,mBAAmB;MAA6D,iBAAiB;OACpR,QAAQ;OACR,UAAU;QAAE,WAAW;QAAuF,QAAQ;QAAS;OAClI;MAAE,CAAC,CAAC;AAEb,uBAAkB;AAElB,uBAAkB,qBAAqB;MACnC,MAAM,UAAU;MAChB,SAAS;MACT,eAAe;MACH;MACf,CAAC;AACF,YAAO,CAAC,GAAc,QAAQ,QAAQ;MAC1B;MACJ,SAAS,UAAU,QAAQ,aAAa,gBAAgB;MACxD,WAAW;MACX,QAAQ,WAAW;MACtB,CAAC,CAAC;;AAEX,UAAM,IAAI,MAAM,+DAA+D;KACjF;IACJ;;CAEN,IAAI,oBAAoB;EACA;EACC;EACxB;AACD,SAAQ,UAAU"}

package/dist/esm/node_modules/samlify/build/src/entity-idp.mjs

@@ -0,0 +1,279 @@
+import { __commonJS } from "../../../../_virtual/rolldown_runtime.mjs";
+import { require_utility } from "./utility.mjs";
+import { require_urn } from "./urn.mjs";
+import { require_libsaml } from "./libsaml.mjs";
+import { require_binding_redirect } from "./binding-redirect.mjs";
+import { require_binding_post } from "./binding-post.mjs";
+import { require_flow } from "./flow.mjs";
+import { require_entity } from "./entity.mjs";
+import { require_binding_simplesign } from "./binding-simplesign.mjs";
+
+//#region ../../node_modules/samlify/build/src/entity-idp.js
+var require_entity_idp = /* @__PURE__ */ __commonJS({ "../../node_modules/samlify/build/src/entity-idp.js": ((exports) => {
+	var __extends = exports && exports.__extends || (function() {
+		var extendStatics = function(d, b) {
+			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
+				d$1.__proto__ = b$1;
+			} || function(d$1, b$1) {
+				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
+			};
+			return extendStatics(d, b);
+		};
+		return function(d, b) {
+			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+			extendStatics(d, b);
+			function __() {
+				this.constructor = d;
+			}
+			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+		};
+	})();
+	var __assign = exports && exports.__assign || function() {
+		__assign = Object.assign || function(t) {
+			for (var s, i = 1, n = arguments.length; i < n; i++) {
+				s = arguments[i];
+				for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+			}
+			return t;
+		};
+		return __assign.apply(this, arguments);
+	};
+	var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
+		function adopt(value) {
+			return value instanceof P ? value : new P(function(resolve) {
+				resolve(value);
+			});
+		}
+		return new (P || (P = Promise))(function(resolve, reject) {
+			function fulfilled(value) {
+				try {
+					step(generator.next(value));
+				} catch (e) {
+					reject(e);
+				}
+			}
+			function rejected(value) {
+				try {
+					step(generator["throw"](value));
+				} catch (e) {
+					reject(e);
+				}
+			}
+			function step(result) {
+				result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+			}
+			step((generator = generator.apply(thisArg, _arguments || [])).next());
+		});
+	};
+	var __generator = exports && exports.__generator || function(thisArg, body) {
+		var _ = {
+			label: 0,
+			sent: function() {
+				if (t[0] & 1) throw t[1];
+				return t[1];
+			},
+			trys: [],
+			ops: []
+		}, f, y, t, g;
+		return g = {
+			next: verb(0),
+			"throw": verb(1),
+			"return": verb(2)
+		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+			return this;
+		}), g;
+		function verb(n) {
+			return function(v) {
+				return step([n, v]);
+			};
+		}
+		function step(op) {
+			if (f) throw new TypeError("Generator is already executing.");
+			while (_) try {
+				if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+				if (y = 0, t) op = [op[0] & 2, t.value];
+				switch (op[0]) {
+					case 0:
+					case 1:
+						t = op;
+						break;
+					case 4:
+						_.label++;
+						return {
+							value: op[1],
+							done: false
+						};
+					case 5:
+						_.label++;
+						y = op[1];
+						op = [0];
+						continue;
+					case 7:
+						op = _.ops.pop();
+						_.trys.pop();
+						continue;
+					default:
+						if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+							_ = 0;
+							continue;
+						}
+						if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+							_.label = op[1];
+							break;
+						}
+						if (op[0] === 6 && _.label < t[1]) {
+							_.label = t[1];
+							t = op;
+							break;
+						}
+						if (t && _.label < t[2]) {
+							_.label = t[2];
+							_.ops.push(op);
+							break;
+						}
+						if (t[2]) _.ops.pop();
+						_.trys.pop();
+						continue;
+				}
+				op = body.call(thisArg, _);
+			} catch (e) {
+				op = [6, e];
+				y = 0;
+			} finally {
+				f = t = 0;
+			}
+			if (op[0] & 5) throw op[1];
+			return {
+				value: op[0] ? op[1] : void 0,
+				done: true
+			};
+		}
+	};
+	var __importDefault = exports && exports.__importDefault || function(mod) {
+		return mod && mod.__esModule ? mod : { "default": mod };
+	};
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.IdentityProvider = void 0;
+	/**
+	* @file entity-idp.ts
+	* @author tngan
+	* @desc  Declares the actions taken by identity provider
+	*/
+	var entity_1 = __importDefault(require_entity());
+	var libsaml_1 = __importDefault(require_libsaml());
+	var urn_1 = require_urn();
+	var binding_post_1 = __importDefault(require_binding_post());
+	var binding_redirect_1 = __importDefault(require_binding_redirect());
+	var binding_simplesign_1 = __importDefault(require_binding_simplesign());
+	var flow_1 = require_flow();
+	var utility_1 = require_utility();
+	/**
+	* Identity provider can be configured using either metadata importing or idpSetting
+	*/
+	function default_1(props) {
+		return new IdentityProvider(props);
+	}
+	exports.default = default_1;
+	/**
+	* Identity provider can be configured using either metadata importing or idpSetting
+	*/
+	var IdentityProvider = function(_super) {
+		__extends(IdentityProvider$1, _super);
+		function IdentityProvider$1(idpSetting) {
+			var entitySetting = Object.assign({
+				wantAuthnRequestsSigned: false,
+				tagPrefix: { encryptedAssertion: "saml" }
+			}, idpSetting);
+			if (idpSetting.loginResponseTemplate) if ((0, utility_1.isString)(idpSetting.loginResponseTemplate.context) && Array.isArray(idpSetting.loginResponseTemplate.attributes)) {
+				var attributeStatementTemplate = void 0;
+				var attributeTemplate = void 0;
+				if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates.attributeStatementTemplate) attributeStatementTemplate = libsaml_1.default.defaultAttributeStatementTemplate;
+				else attributeStatementTemplate = idpSetting.loginResponseTemplate.additionalTemplates.attributeStatementTemplate;
+				if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates.attributeTemplate) attributeTemplate = libsaml_1.default.defaultAttributeTemplate;
+				else attributeTemplate = idpSetting.loginResponseTemplate.additionalTemplates.attributeTemplate;
+				var replacement = { AttributeStatement: libsaml_1.default.attributeStatementBuilder(idpSetting.loginResponseTemplate.attributes, attributeTemplate, attributeStatementTemplate) };
+				entitySetting.loginResponseTemplate = __assign(__assign({}, entitySetting.loginResponseTemplate), { context: libsaml_1.default.replaceTagsByValue(entitySetting.loginResponseTemplate.context, replacement) });
+			} else console.warn("Invalid login response template");
+			return _super.call(this, entitySetting, "idp") || this;
+		}
+		/**
+		* @desc  Generates the login response for developers to design their own method
+		* @param  sp                        object of service provider
+		* @param  requestInfo               corresponding request, used to obtain the id
+		* @param  binding                   protocol binding
+		* @param  user                      current logged user (e.g. req.user)
+		* @param  customTagReplacement      used when developers have their own login response template
+		* @param  encryptThenSign           whether or not to encrypt then sign first (if signing)
+		* @param  relayState             the relayState from corresponding request
+		*/
+		IdentityProvider$1.prototype.createLoginResponse = function(sp, requestInfo, binding, user, customTagReplacement, encryptThenSign, relayState) {
+			return __awaiter(this, void 0, void 0, function() {
+				var protocol, context, _a;
+				return __generator(this, function(_b) {
+					switch (_b.label) {
+						case 0:
+							protocol = urn_1.namespace.binding[binding];
+							context = null;
+							_a = protocol;
+							switch (_a) {
+								case urn_1.namespace.binding.post: return [3, 1];
+								case urn_1.namespace.binding.simpleSign: return [3, 3];
+								case urn_1.namespace.binding.redirect: return [3, 5];
+							}
+							return [3, 6];
+						case 1: return [4, binding_post_1.default.base64LoginResponse(requestInfo, {
+							idp: this,
+							sp
+						}, user, customTagReplacement, encryptThenSign)];
+						case 2:
+							context = _b.sent();
+							return [3, 7];
+						case 3: return [4, binding_simplesign_1.default.base64LoginResponse(requestInfo, {
+							idp: this,
+							sp
+						}, user, relayState, customTagReplacement)];
+						case 4:
+							context = _b.sent();
+							return [3, 7];
+						case 5: return [2, binding_redirect_1.default.loginResponseRedirectURL(requestInfo, {
+							idp: this,
+							sp
+						}, user, relayState, customTagReplacement)];
+						case 6: throw new Error("ERR_CREATE_RESPONSE_UNDEFINED_BINDING");
+						case 7: return [2, __assign(__assign({}, context), {
+							relayState,
+							entityEndpoint: sp.entityMeta.getAssertionConsumerService(binding),
+							type: "SAMLResponse"
+						})];
+					}
+				});
+			});
+		};
+		/**
+		* Validation of the parsed URL parameters
+		* @param sp ServiceProvider instance
+		* @param binding Protocol binding
+		* @param req RequesmessageSigningOrderst
+		*/
+		IdentityProvider$1.prototype.parseLoginRequest = function(sp, binding, req) {
+			var self = this;
+			return (0, flow_1.flow)({
+				from: sp,
+				self,
+				checkSignature: self.entityMeta.isWantAuthnRequestsSigned(),
+				parserType: "SAMLRequest",
+				type: "login",
+				binding,
+				request: req
+			});
+		};
+		return IdentityProvider$1;
+	}(entity_1.default);
+	exports.IdentityProvider = IdentityProvider;
+}) });
+
+//#endregion
+export default require_entity_idp();
+
+export { require_entity_idp };
+//# sourceMappingURL=entity-idp.mjs.map