npm - @intlayer/backend - Versions diffs - 7.0.9-canary.0 → 7.0.9-canary.3 - Mend

@intlayer/backend 7.0.9-canary.0 → 7.0.9-canary.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (915) hide show

package/dist/cjs/node_modules/samlify/build/src/libsaml.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"libsaml.cjs","names":["signatureNode"],"sources":["../../../../../../../../node_modules/samlify/build/src/libsaml.js"],"sourcesContent":["\"use strict\";\n/**\n* @file SamlLib.js\n* @author tngan\n* @desc A simple library including some common functions\n*/\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n if (k2 === undefined) k2 = k;\n var desc = Object.getOwnPropertyDescriptor(m, k);\n if (!desc || (\"get\" in desc ? !m.__esModule : desc.writable || desc.configurable)) {\n desc = { enumerable: true, get: function() { return m[k]; } };\n }\n Object.defineProperty(o, k2, desc);\n}) : (function(o, m, k, k2) {\n if (k2 === undefined) k2 = k;\n o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || function (mod) {\n if (mod && mod.__esModule) return mod;\n var result = {};\n if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\n __setModuleDefault(result, mod);\n return result;\n};\nvar __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n return new (P || (P = Promise))(function (resolve, reject) {\n function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n step((generator = generator.apply(thisArg, _arguments || [])).next());\n });\n};\nvar __generator = (this && this.__generator) || function (thisArg, body) {\n var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\n return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\n function verb(n) { return function (v) { return step([n, v]); }; }\n function step(op) {\n if (f) throw new TypeError(\"Generator is already executing.\");\n while (_) try {\n if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\n if (y = 0, t) op = [op[0] & 2, t.value];\n switch (op[0]) {\n case 0: case 1: t = op; break;\n case 4: _.label++; return { value: op[1], done: false };\n case 5: _.label++; y = op[1]; op = [0]; continue;\n case 7: op = _.ops.pop(); _.trys.pop(); continue;\n default:\n if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\n if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\n if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\n if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\n if (t[2]) _.ops.pop();\n _.trys.pop(); continue;\n }\n op = body.call(thisArg, _);\n } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\n if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\n }\n};\nvar __values = (this && this.__values) || function(o) {\n var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n if (m) return m.call(o);\n if (o && typeof o.length === \"number\") return {\n next: function () {\n if (o && i >= o.length) o = void 0;\n return { value: o && o[i++], done: !o };\n }\n };\n throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nvar utility_1 = __importStar(require(\"./utility\"));\nvar urn_1 = require(\"./urn\");\nvar xpath_1 = require(\"xpath\");\nvar node_rsa_1 = __importDefault(require(\"node-rsa\"));\nvar xml_crypto_1 = require(\"xml-crypto\");\nvar xmlenc = __importStar(require(\"@authenio/xml-encryption\"));\nvar camelcase_1 = __importDefault(require(\"camelcase\"));\nvar api_1 = require(\"./api\");\nvar xml_escape_1 = __importDefault(require(\"xml-escape\"));\nvar fs = __importStar(require(\"fs\"));\nvar xmldom_1 = require(\"@xmldom/xmldom\");\nvar signatureAlgorithms = urn_1.algorithms.signature;\nvar digestAlgorithms = urn_1.algorithms.digest;\nvar certUse = urn_1.wording.certUse;\nvar urlParams = urn_1.wording.urlParams;\nvar libSaml = function () {\n /**\n * @desc helper function to get back the query param for redirect binding for SLO/SSO\n * @type {string}\n */\n function getQueryParamByType(type) {\n if ([urlParams.logoutRequest, urlParams.samlRequest].indexOf(type) !== -1) {\n return 'SAMLRequest';\n }\n if ([urlParams.logoutResponse, urlParams.samlResponse].indexOf(type) !== -1) {\n return 'SAMLResponse';\n }\n throw new Error('ERR_UNDEFINED_QUERY_PARAMS');\n }\n /**\n *\n */\n var nrsaAliasMapping = {\n 'http://www.w3.org/2000/09/xmldsig#rsa-sha1': 'pkcs1-sha1',\n 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': 'pkcs1-sha256',\n 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': 'pkcs1-sha512',\n };\n /**\n * @desc Default login request template\n * @type {LoginRequestTemplate}\n */\n var defaultLoginRequestTemplate = {\n context: '<samlp:AuthnRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" ProtocolBinding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" AssertionConsumerServiceURL=\"{AssertionConsumerServiceURL}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:NameIDPolicy Format=\"{NameIDFormat}\" AllowCreate=\"{AllowCreate}\"/></samlp:AuthnRequest>',\n };\n /**\n * @desc Default logout request template\n * @type {LogoutRequestTemplate}\n */\n var defaultLogoutRequestTemplate = {\n context: '<samlp:LogoutRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\"><saml:Issuer>{Issuer}</saml:Issuer><saml:NameID Format=\"{NameIDFormat}\">{NameID}</saml:NameID></samlp:LogoutRequest>',\n };\n /**\n * @desc Default AttributeStatement template\n * @type {AttributeStatementTemplate}\n */\n var defaultAttributeStatementTemplate = {\n context: '<saml:AttributeStatement>{Attributes}</saml:AttributeStatement>',\n };\n /**\n * @desc Default Attribute template\n * @type {AttributeTemplate}\n */\n var defaultAttributeTemplate = {\n context: '<saml:Attribute Name=\"{Name}\" NameFormat=\"{NameFormat}\"><saml:AttributeValue xmlns:xs=\"{ValueXmlnsXs}\" xmlns:xsi=\"{ValueXmlnsXsi}\" xsi:type=\"{ValueXsiType}\">{Value}</saml:AttributeValue></saml:Attribute>',\n };\n /**\n * @desc Default login response template\n * @type {LoginResponseTemplate}\n */\n var defaultLoginResponseTemplate = {\n context: '<samlp:Response xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" InResponseTo=\"{InResponseTo}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:Status><samlp:StatusCode Value=\"{StatusCode}\"/></samlp:Status><saml:Assertion xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{AssertionID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\"><saml:Issuer>{Issuer}</saml:Issuer><saml:Subject><saml:NameID Format=\"{NameIDFormat}\">{NameID}</saml:NameID><saml:SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\"><saml:SubjectConfirmationData NotOnOrAfter=\"{SubjectConfirmationDataNotOnOrAfter}\" Recipient=\"{SubjectRecipient}\" InResponseTo=\"{InResponseTo}\"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore=\"{ConditionsNotBefore}\" NotOnOrAfter=\"{ConditionsNotOnOrAfter}\"><saml:AudienceRestriction><saml:Audience>{Audience}</saml:Audience></saml:AudienceRestriction></saml:Conditions>{AuthnStatement}{AttributeStatement}</saml:Assertion></samlp:Response>',\n attributes: [],\n additionalTemplates: {\n 'attributeStatementTemplate': defaultAttributeStatementTemplate,\n 'attributeTemplate': defaultAttributeTemplate\n }\n };\n /**\n * @desc Default logout response template\n * @type {LogoutResponseTemplate}\n */\n var defaultLogoutResponseTemplate = {\n context: '<samlp:LogoutResponse xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" InResponseTo=\"{InResponseTo}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:Status><samlp:StatusCode Value=\"{StatusCode}\"/></samlp:Status></samlp:LogoutResponse>',\n };\n /**\n * @private\n * @desc Get the signing scheme alias by signature algorithms, used by the node-rsa module\n * @param {string} sigAlg signature algorithm\n * @return {string/null} signing algorithm short-hand for the module node-rsa\n */\n function getSigningScheme(sigAlg) {\n if (sigAlg) {\n var algAlias = nrsaAliasMapping[sigAlg];\n if (!(algAlias === undefined)) {\n return algAlias;\n }\n }\n return nrsaAliasMapping[signatureAlgorithms.RSA_SHA1];\n }\n /**\n * @private\n * @desc Get the digest algorithms by signature algorithms\n * @param {string} sigAlg signature algorithm\n * @return {string/undefined} digest algorithm\n */\n function getDigestMethod(sigAlg) {\n return digestAlgorithms[sigAlg];\n }\n /**\n * @public\n * @desc Create XPath\n * @param {string/object} local parameters to create XPath\n * @param {boolean} isExtractAll define whether returns whole content according to the XPath\n * @return {string} xpath\n */\n function createXPath(local, isExtractAll) {\n if ((0, utility_1.isString)(local)) {\n return isExtractAll === true ? \"//*[local-name(.)='\" + local + \"']/text()\" : \"//*[local-name(.)='\" + local + \"']\";\n }\n return \"//*[local-name(.)='\" + local.name + \"']/@\" + local.attr;\n }\n /**\n * @private\n * @desc Tag normalization\n * @param {string} prefix prefix of the tag\n * @param {content} content normalize it to capitalized camel case\n * @return {string}\n */\n function tagging(prefix, content) {\n var camelContent = (0, camelcase_1.default)(content, { locale: 'en-us' });\n return prefix + camelContent.charAt(0).toUpperCase() + camelContent.slice(1);\n }\n function escapeTag(replacement) {\n return function (_match, quote) {\n var text = (replacement === null || replacement === undefined) ? '' : String(replacement);\n // not having a quote means this interpolation isn't for an attribute, and so does not need escaping\n return quote ? \"\".concat(quote).concat((0, xml_escape_1.default)(text)) : text;\n };\n }\n return {\n createXPath: createXPath,\n getQueryParamByType: getQueryParamByType,\n defaultLoginRequestTemplate: defaultLoginRequestTemplate,\n defaultLoginResponseTemplate: defaultLoginResponseTemplate,\n defaultAttributeStatementTemplate: defaultAttributeStatementTemplate,\n defaultAttributeTemplate: defaultAttributeTemplate,\n defaultLogoutRequestTemplate: defaultLogoutRequestTemplate,\n defaultLogoutResponseTemplate: defaultLogoutResponseTemplate,\n /**\n * @desc Replace the tag (e.g. {tag}) inside the raw XML\n * @param {string} rawXML raw XML string used to do keyword replacement\n * @param {array} tagValues tag values\n * @return {string}\n */\n replaceTagsByValue: function (rawXML, tagValues) {\n Object.keys(tagValues).forEach(function (t) {\n rawXML = rawXML.replace(new RegExp(\"(\\\"?)\\\\{\".concat(t, \"\\\\}\"), 'g'), escapeTag(tagValues[t]));\n });\n return rawXML;\n },\n /**\n * @desc Helper function to build the AttributeStatement tag\n * @param {LoginResponseAttribute} attributes an array of attribute configuration\n * @param {AttributeTemplate} attributeTemplate the attribute tag template to be used\n * @param {AttributeStatementTemplate} attributeStatementTemplate the attributeStatement tag template to be used\n * @return {string}\n */\n attributeStatementBuilder: function (attributes, attributeTemplate, attributeStatementTemplate) {\n if (attributeTemplate === void 0) { attributeTemplate = defaultAttributeTemplate; }\n if (attributeStatementTemplate === void 0) { attributeStatementTemplate = defaultAttributeStatementTemplate; }\n var attr = attributes.map(function (_a) {\n var name = _a.name, nameFormat = _a.nameFormat, valueTag = _a.valueTag, valueXsiType = _a.valueXsiType, valueXmlnsXs = _a.valueXmlnsXs, valueXmlnsXsi = _a.valueXmlnsXsi;\n var defaultValueXmlnsXs = 'http://www.w3.org/2001/XMLSchema';\n var defaultValueXmlnsXsi = 'http://www.w3.org/2001/XMLSchema-instance';\n var attributeLine = attributeTemplate.context;\n attributeLine = attributeLine.replace('{Name}', name);\n attributeLine = attributeLine.replace('{NameFormat}', nameFormat);\n attributeLine = attributeLine.replace('{ValueXmlnsXs}', valueXmlnsXs ? valueXmlnsXs : defaultValueXmlnsXs);\n attributeLine = attributeLine.replace('{ValueXmlnsXsi}', valueXmlnsXsi ? valueXmlnsXsi : defaultValueXmlnsXsi);\n attributeLine = attributeLine.replace('{ValueXsiType}', valueXsiType);\n attributeLine = attributeLine.replace('{Value}', \"{\".concat(tagging('attr', valueTag), \"}\"));\n return attributeLine;\n }).join('');\n return attributeStatementTemplate.context.replace('{Attributes}', attr);\n },\n /**\n * @desc Construct the XML signature for POST binding\n * @param {string} rawSamlMessage request/response xml string\n * @param {string} referenceTagXPath reference uri\n * @param {string} privateKey declares the private key\n * @param {string} passphrase passphrase of the private key [optional]\n * @param {string|buffer} signingCert signing certificate\n * @param {string} signatureAlgorithm signature algorithm\n * @param {string[]} transformationAlgorithms canonicalization and transformation Algorithms\n * @return {string} base64 encoded string\n */\n constructSAMLSignature: function (opts) {\n var rawSamlMessage = opts.rawSamlMessage, referenceTagXPath = opts.referenceTagXPath, privateKey = opts.privateKey, privateKeyPass = opts.privateKeyPass, _a = opts.signatureAlgorithm, signatureAlgorithm = _a === void 0 ? signatureAlgorithms.RSA_SHA256 : _a, _b = opts.transformationAlgorithms, transformationAlgorithms = _b === void 0 ? [\n 'http://www.w3.org/2000/09/xmldsig#enveloped-signature',\n 'http://www.w3.org/2001/10/xml-exc-c14n#',\n ] : _b, signingCert = opts.signingCert, signatureConfig = opts.signatureConfig, _c = opts.isBase64Output, isBase64Output = _c === void 0 ? true : _c, _d = opts.isMessageSigned, isMessageSigned = _d === void 0 ? false : _d;\n var sig = new xml_crypto_1.SignedXml();\n // Add assertion sections as reference\n var digestAlgorithm = getDigestMethod(signatureAlgorithm);\n if (referenceTagXPath) {\n sig.addReference({\n xpath: referenceTagXPath,\n transforms: transformationAlgorithms,\n digestAlgorithm: digestAlgorithm\n });\n }\n if (isMessageSigned) {\n sig.addReference({\n // reference to the root node\n xpath: '/*',\n transforms: transformationAlgorithms,\n digestAlgorithm: digestAlgorithm\n });\n }\n sig.signatureAlgorithm = signatureAlgorithm;\n sig.publicCert = this.getKeyInfo(signingCert, signatureConfig).getKey();\n sig.getKeyInfoContent = this.getKeyInfo(signingCert, signatureConfig).getKeyInfo;\n sig.privateKey = utility_1.default.readPrivateKey(privateKey, privateKeyPass, true);\n sig.canonicalizationAlgorithm = 'http://www.w3.org/2001/10/xml-exc-c14n#';\n if (signatureConfig) {\n sig.computeSignature(rawSamlMessage, signatureConfig);\n }\n else {\n sig.computeSignature(rawSamlMessage);\n }\n return isBase64Output !== false ? utility_1.default.base64Encode(sig.getSignedXml()) : sig.getSignedXml();\n },\n /**\n * @desc Verify the XML signature\n * @param {string} xml xml\n * @param {SignatureVerifierOptions} opts cert declares the X509 certificate\n * @return {[boolean, string | null]} - A tuple where:\n * - The first element is `true` if the signature is valid, `false` otherwise.\n * - The second element is the cryptographically authenticated assertion node as a string, or `null` if not found.\n */\n verifySignature: function (xml, opts) {\n var e_1, _a;\n var dom = (0, api_1.getContext)().dom;\n var doc = dom.parseFromString(xml);\n var docParser = new xmldom_1.DOMParser();\n // In order to avoid the wrapping attack, we have changed to use absolute xpath instead of naively fetching the signature element\n // message signature (logout response / saml response)\n var messageSignatureXpath = \"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Signature']\";\n // assertion signature (logout response / saml response)\n var assertionSignatureXpath = \"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Assertion']/*[local-name(.)='Signature']\";\n // check if there is a potential malicious wrapping signature\n var wrappingElementsXPath = \"/*[contains(local-name(), 'Response')]/*[local-name(.)='Assertion']/*[local-name(.)='Subject']/*[local-name(.)='SubjectConfirmation']/*[local-name(.)='SubjectConfirmationData']//*[local-name(.)='Assertion' or local-name(.)='Signature']\";\n // select the signature node\n var selection = [];\n var messageSignatureNode = (0, xpath_1.select)(messageSignatureXpath, doc);\n var assertionSignatureNode = (0, xpath_1.select)(assertionSignatureXpath, doc);\n var wrappingElementNode = (0, xpath_1.select)(wrappingElementsXPath, doc);\n selection = selection.concat(messageSignatureNode);\n selection = selection.concat(assertionSignatureNode);\n // try to catch potential wrapping attack\n if (wrappingElementNode.length !== 0) {\n throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');\n }\n // guarantee to have a signature in saml response\n if (selection.length === 0) {\n return [false, null]; // we return false now\n }\n var _loop_1 = function (signatureNode) {\n var sig = new xml_crypto_1.SignedXml();\n var verified = false;\n sig.signatureAlgorithm = opts.signatureAlgorithm;\n if (!opts.keyFile && !opts.metadata) {\n throw new Error('ERR_UNDEFINED_SIGNATURE_VERIFIER_OPTIONS');\n }\n if (opts.keyFile) {\n sig.publicCert = fs.readFileSync(opts.keyFile);\n }\n if (opts.metadata) {\n var certificateNode = (0, xpath_1.select)(\".//*[local-name(.)='X509Certificate']\", signatureNode);\n // certificate in metadata\n var metadataCert = opts.metadata.getX509Certificate(certUse.signing);\n // flattens the nested array of Certificates from each KeyDescriptor\n if (Array.isArray(metadataCert)) {\n metadataCert = (0, utility_1.flattenDeep)(metadataCert);\n }\n else if (typeof metadataCert === 'string') {\n metadataCert = [metadataCert];\n }\n // normalise the certificate string\n metadataCert = metadataCert.map(utility_1.default.normalizeCerString);\n // no certificate in node response nor metadata\n if (certificateNode.length === 0 && metadataCert.length === 0) {\n throw new Error('NO_SELECTED_CERTIFICATE');\n }\n // certificate node in response\n if (certificateNode.length !== 0) {\n var x509CertificateData = certificateNode[0].firstChild.data;\n var x509Certificate_1 = utility_1.default.normalizeCerString(x509CertificateData);\n if (metadataCert.length >= 1 &&\n !metadataCert.find(function (cert) { return cert.trim() === x509Certificate_1.trim(); })) {\n // keep this restriction for rolling certificate usage\n // to make sure the response certificate is one of those specified in metadata\n throw new Error('ERROR_UNMATCH_CERTIFICATE_DECLARATION_IN_METADATA');\n }\n sig.publicCert = this_1.getKeyInfo(x509Certificate_1).getKey();\n }\n else {\n // Select first one from metadata\n sig.publicCert = this_1.getKeyInfo(metadataCert[0]).getKey();\n }\n }\n sig.loadSignature(signatureNode);\n verified = sig.checkSignature(doc.toString());\n // immediately throw error when any one of the signature is failed to get verified\n if (!verified) {\n return \"continue\";\n // throw new Error('ERR_FAILED_TO_VERIFY_SIGNATURE');\n }\n // Require there to be at least one reference that was signed\n if (!(sig.getSignedReferences().length >= 1)) {\n throw new Error('NO_SIGNATURE_REFERENCES');\n }\n var signedVerifiedXML = sig.getSignedReferences()[0];\n var rootNode = docParser.parseFromString(signedVerifiedXML, 'text/xml').documentElement;\n // process the verified signature:\n // case 1, rootSignedDoc is a response:\n if (rootNode.localName === 'Response') {\n // try getting the Xml from the first assertion\n var assertions = (0, xpath_1.select)(\"./*[local-name()='Assertion']\", rootNode);\n var encryptedAssertions = (0, xpath_1.select)(\"./*[local-name()='EncryptedAssertion']\", rootNode);\n // now we can process the assertion as an assertion\n if (assertions.length === 1) {\n return { value: [true, assertions[0].toString()] };\n }\n else if (encryptedAssertions.length >= 1) {\n return { value: [true, rootNode.toString()] };\n }\n else {\n return { value: [true, null] };\n }\n }\n else if (rootNode.localName === 'Assertion') {\n return { value: [true, rootNode.toString()] };\n }\n else {\n return { value: [true, null] };\n }\n };\n var this_1 = this;\n try {\n // need to refactor later on\n for (var selection_1 = __values(selection), selection_1_1 = selection_1.next(); !selection_1_1.done; selection_1_1 = selection_1.next()) {\n var signatureNode = selection_1_1.value;\n var state_1 = _loop_1(signatureNode);\n if (typeof state_1 === \"object\")\n return state_1.value;\n }\n }\n catch (e_1_1) { e_1 = { error: e_1_1 }; }\n finally {\n try {\n if (selection_1_1 && !selection_1_1.done && (_a = selection_1.return)) _a.call(selection_1);\n }\n finally { if (e_1) throw e_1.error; }\n }\n ;\n return [false, null]; // we didn't verify anything, none of the signatures are valid\n /*\n // response must be signed, either entire document or assertion\n // default we will take the assertion section under root\n if (messageSignatureNode.length === 1) {\n const node = select(\"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Assertion']\", doc);\n if (node.length === 1) {\n assertionNode = node[0].toString();\n }\n }\n \n if (assertionSignatureNode.length === 1) {\n const verifiedAssertionInfo = extract(assertionSignatureNode[0].toString(), [{\n key: 'refURI',\n localPath: ['Signature', 'SignedInfo', 'Reference'],\n attributes: ['URI']\n }]);\n // get the assertion supposed to be the one should be verified\n const desiredAssertionInfo = extract(doc.toString(), [{\n key: 'id',\n localPath: ['~Response', 'Assertion'],\n attributes: ['ID']\n }]);\n // 5.4.2 References\n // SAML assertions and protocol messages MUST supply a value for the ID attribute on the root element of\n // the assertion or protocol message being signed. The assertion’s or protocol message's root element may\n // or may not be the root element of the actual XML document containing the signed assertion or protocol\n // message (e.g., it might be contained within a SOAP envelope).\n // Signatures MUST contain a single <ds:Reference> containing a same-document reference to the ID\n // attribute value of the root element of the assertion or protocol message being signed. For example, if the\n // ID attribute value is \"foo\", then the URI attribute in the <ds:Reference> element MUST be \"#foo\".\n if (verifiedAssertionInfo.refURI !== `#${desiredAssertionInfo.id}`) {\n throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');\n }\n const verifiedDoc = extract(doc.toString(), [{\n key: 'assertion',\n localPath: ['~Response', 'Assertion'],\n attributes: [],\n context: true\n }]);\n assertionNode = verifiedDoc.assertion.toString();\n }\n \n return [verified, assertionNode];*/\n },\n /**\n * @desc Helper function to create the key section in metadata (abstraction for signing and encrypt use)\n * @param {string} use type of certificate (e.g. signing, encrypt)\n * @param {string} certString declares the certificate String\n * @return {object} object used in xml module\n */\n createKeySection: function (use, certString) {\n var _a, _b, _c;\n return _a = {},\n _a['KeyDescriptor'] = [\n {\n _attr: { use: use },\n },\n (_b = {},\n _b['ds:KeyInfo'] = [\n {\n _attr: {\n 'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n },\n },\n (_c = {},\n _c['ds:X509Data'] = [{\n 'ds:X509Certificate': utility_1.default.normalizeCerString(certString),\n }],\n _c),\n ],\n _b)\n ],\n _a;\n },\n /**\n * @desc Constructs SAML message\n * @param {string} octetString see \"Bindings for the OASIS Security Assertion Markup Language (SAML V2.0)\" P.17/46\n * @param {string} key declares the pem-formatted private key\n * @param {string} passphrase passphrase of private key [optional]\n * @param {string} signingAlgorithm signing algorithm\n * @return {string} message signature\n */\n constructMessageSignature: function (octetString, key, passphrase, isBase64, signingAlgorithm) {\n // Default returning base64 encoded signature\n // Embed with node-rsa module\n var decryptedKey = new node_rsa_1.default(utility_1.default.readPrivateKey(key, passphrase), undefined, {\n signingScheme: getSigningScheme(signingAlgorithm),\n });\n var signature = decryptedKey.sign(octetString);\n // Use private key to sign data\n return isBase64 !== false ? signature.toString('base64') : signature;\n },\n /**\n * @desc Verifies message signature\n * @param {Metadata} metadata metadata object of identity provider or service provider\n * @param {string} octetString see \"Bindings for the OASIS Security Assertion Markup Language (SAML V2.0)\" P.17/46\n * @param {string} signature context of XML signature\n * @param {string} verifyAlgorithm algorithm used to verify\n * @return {boolean} verification result\n */\n verifyMessageSignature: function (metadata, octetString, signature, verifyAlgorithm) {\n var signCert = metadata.getX509Certificate(certUse.signing);\n var signingScheme = getSigningScheme(verifyAlgorithm);\n var key = new node_rsa_1.default(utility_1.default.getPublicKeyPemFromCertificate(signCert), 'public', { signingScheme: signingScheme });\n return key.verify(Buffer.from(octetString), Buffer.from(signature));\n },\n /**\n * @desc Get the public key in string format\n * @param {string} x509Certificate certificate\n * @return {string} public key\n */\n getKeyInfo: function (x509Certificate, signatureConfig) {\n if (signatureConfig === void 0) { signatureConfig = {}; }\n var prefix = signatureConfig.prefix ? \"\".concat(signatureConfig.prefix, \":\") : '';\n return {\n getKeyInfo: function () {\n return \"<\".concat(prefix, \"X509Data><\").concat(prefix, \"X509Certificate>\").concat(x509Certificate, \"</\").concat(prefix, \"X509Certificate></\").concat(prefix, \"X509Data>\");\n },\n getKey: function () {\n return utility_1.default.getPublicKeyPemFromCertificate(x509Certificate).toString();\n },\n };\n },\n /**\n * @desc Encrypt the assertion section in Response\n * @param {Entity} sourceEntity source entity\n * @param {Entity} targetEntity target entity\n * @param {string} xml response in xml string format\n * @return {Promise} a promise to resolve the finalized xml\n */\n encryptAssertion: function (sourceEntity, targetEntity, xml) {\n // Implement encryption after signature if it has\n return new Promise(function (resolve, reject) {\n if (!xml) {\n return reject(new Error('ERR_UNDEFINED_ASSERTION'));\n }\n var sourceEntitySetting = sourceEntity.entitySetting;\n var targetEntityMetadata = targetEntity.entityMeta;\n var dom = (0, api_1.getContext)().dom;\n var doc = dom.parseFromString(xml);\n var assertions = (0, xpath_1.select)(\"//*[local-name(.)='Assertion']\", doc);\n if (!Array.isArray(assertions) || assertions.length === 0) {\n throw new Error('ERR_NO_ASSERTION');\n }\n if (assertions.length > 1) {\n throw new Error('ERR_MULTIPLE_ASSERTION');\n }\n var rawAssertionNode = assertions[0];\n // Perform encryption depends on the setting, default is false\n if (sourceEntitySetting.isAssertionEncrypted) {\n var publicKeyPem = utility_1.default.getPublicKeyPemFromCertificate(targetEntityMetadata.getX509Certificate(certUse.encrypt));\n xmlenc.encrypt(rawAssertionNode.toString(), {\n // use xml-encryption module\n rsa_pub: Buffer.from(publicKeyPem),\n pem: Buffer.from(\"-----BEGIN CERTIFICATE-----\".concat(targetEntityMetadata.getX509Certificate(certUse.encrypt), \"-----END CERTIFICATE-----\")),\n encryptionAlgorithm: sourceEntitySetting.dataEncryptionAlgorithm,\n keyEncryptionAlgorithm: sourceEntitySetting.keyEncryptionAlgorithm,\n }, function (err, res) {\n if (err) {\n console.error(err);\n return reject(new Error('ERR_EXCEPTION_OF_ASSERTION_ENCRYPTION'));\n }\n if (!res) {\n return reject(new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION'));\n }\n var encAssertionPrefix = sourceEntitySetting.tagPrefix.encryptedAssertion;\n var encryptAssertionDoc = dom.parseFromString(\"<\".concat(encAssertionPrefix, \":EncryptedAssertion xmlns:\").concat(encAssertionPrefix, \"=\\\"\").concat(urn_1.namespace.names.assertion, \"\\\">\").concat(res, \"</\").concat(encAssertionPrefix, \":EncryptedAssertion>\"));\n doc.documentElement.replaceChild(encryptAssertionDoc.documentElement, rawAssertionNode);\n return resolve(utility_1.default.base64Encode(doc.toString()));\n });\n }\n else {\n return resolve(utility_1.default.base64Encode(xml)); // No need to do encryption\n }\n });\n },\n /**\n * @desc Decrypt the assertion section in Response\n * @param {string} type only accept SAMLResponse to proceed decryption\n * @param {Entity} here this entity\n * @param {Entity} from from the entity where the message is sent\n * @param {string} entireXML response in xml string format\n * @return {function} a promise to get back the entire xml with decrypted assertion\n */\n decryptAssertion: function (here, entireXML) {\n return new Promise(function (resolve, reject) {\n // Implement decryption first then check the signature\n if (!entireXML) {\n return reject(new Error('ERR_UNDEFINED_ASSERTION'));\n }\n // Perform encryption depends on the setting of where the message is sent, default is false\n var hereSetting = here.entitySetting;\n var dom = (0, api_1.getContext)().dom;\n var doc = dom.parseFromString(entireXML);\n var encryptedAssertions = (0, xpath_1.select)(\"/*[contains(local-name(), 'Response')]/*[local-name(.)='EncryptedAssertion']\", doc);\n if (!Array.isArray(encryptedAssertions) || encryptedAssertions.length === 0) {\n throw new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION');\n }\n if (encryptedAssertions.length > 1) {\n throw new Error('ERR_MULTIPLE_ASSERTION');\n }\n var encAssertionNode = encryptedAssertions[0];\n return xmlenc.decrypt(encAssertionNode.toString(), {\n key: utility_1.default.readPrivateKey(hereSetting.encPrivateKey, hereSetting.encPrivateKeyPass),\n }, function (err, res) {\n if (err) {\n console.error(err);\n return reject(new Error('ERR_EXCEPTION_OF_ASSERTION_DECRYPTION'));\n }\n if (!res) {\n return reject(new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION'));\n }\n var rawAssertionDoc = dom.parseFromString(res);\n doc.documentElement.replaceChild(rawAssertionDoc.documentElement, encAssertionNode);\n return resolve([doc.toString(), res]);\n });\n });\n },\n /**\n * @desc Check if the xml string is valid and bounded\n */\n isValidXml: function (input) {\n return __awaiter(this, void 0, void 0, function () {\n var validate, e_2;\n return __generator(this, function (_a) {\n switch (_a.label) {\n case 0:\n validate = (0, api_1.getContext)().validate;\n /**\n * user can write a validate function that always returns\n * a resolved promise and skip the validator even in\n * production, user will take the responsibility if\n * they intend to skip the validation\n */\n if (!validate) {\n // otherwise, an error will be thrown\n return [2 /*return*/, Promise.reject('Your application is potentially vulnerable because no validation function found. Please read the documentation on how to setup the validator. (https://github.com/tngan/samlify#installation)')];\n }\n _a.label = 1;\n case 1:\n _a.trys.push([1, 3, , 4]);\n return [4 /*yield*/, validate(input)];\n case 2: return [2 /*return*/, _a.sent()];\n case 3:\n e_2 = _a.sent();\n throw e_2;\n case 4: return [2 /*return*/];\n }\n });\n });\n },\n };\n};\nexports.default = libSaml();\n//# sourceMappingURL=libsaml.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;CAMA,IAAI,qCAAgC,oBAAqB,OAAO,UAAU,SAAS,GAAG,GAAG,GAAG,IAAI;AAC5F,MAAI,OAAO,OAAW,MAAK;EAC3B,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE;AAChD,MAAI,CAAC,SAAS,SAAS,OAAO,CAAC,EAAE,aAAa,KAAK,YAAY,KAAK,cAClE,QAAO;GAAE,YAAY;GAAM,KAAK,WAAW;AAAE,WAAO,EAAE;;GAAO;AAE/D,SAAO,eAAe,GAAG,IAAI,KAAK;OAChC,SAAS,GAAG,GAAG,GAAG,IAAI;AACxB,MAAI,OAAO,OAAW,MAAK;AAC3B,IAAE,MAAM,EAAE;;CAEd,IAAI,wCAAmC,uBAAwB,OAAO,UAAU,SAAS,GAAG,GAAG;AAC3F,SAAO,eAAe,GAAG,WAAW;GAAE,YAAY;GAAM,OAAO;GAAG,CAAC;MAClE,SAAS,GAAG,GAAG;AAChB,IAAE,aAAa;;CAEnB,IAAI,kCAA6B,gBAAiB,SAAU,KAAK;AAC7D,MAAI,OAAO,IAAI,WAAY,QAAO;EAClC,IAAI,SAAS,EAAE;AACf,MAAI,OAAO,MAAM;QAAK,IAAI,KAAK,IAAK,KAAI,MAAM,aAAa,OAAO,UAAU,eAAe,KAAK,KAAK,EAAE,CAAE,iBAAgB,QAAQ,KAAK,EAAE;;AACxI,qBAAmB,QAAQ,IAAI;AAC/B,SAAO;;CAEX,IAAI,+BAA0B,aAAc,SAAU,SAAS,YAAY,GAAG,WAAW;EACrF,SAAS,MAAM,OAAO;AAAE,UAAO,iBAAiB,IAAI,QAAQ,IAAI,EAAE,SAAU,SAAS;AAAE,YAAQ,MAAM;KAAI;;AACzG,SAAO,KAAK,MAAM,IAAI,UAAU,SAAU,SAAS,QAAQ;GACvD,SAAS,UAAU,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,KAAK,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACtF,SAAS,SAAS,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,SAAS,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACzF,SAAS,KAAK,QAAQ;AAAE,WAAO,OAAO,QAAQ,OAAO,MAAM,GAAG,MAAM,OAAO,MAAM,CAAC,KAAK,WAAW,SAAS;;AAC3G,SAAM,YAAY,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC;IACvE;;CAEN,IAAI,iCAA4B,eAAgB,SAAU,SAAS,MAAM;EACrE,IAAI,IAAI;GAAE,OAAO;GAAG,MAAM,WAAW;AAAE,QAAI,EAAE,KAAK,EAAG,OAAM,EAAE;AAAI,WAAO,EAAE;;GAAO,MAAM,EAAE;GAAE,KAAK,EAAE;GAAE,EAAE,GAAG,GAAG,GAAG;AAC/G,SAAO,IAAI;GAAE,MAAM,KAAK,EAAE;GAAE,SAAS,KAAK,EAAE;GAAE,UAAU,KAAK,EAAE;GAAE,EAAE,OAAO,WAAW,eAAe,EAAE,OAAO,YAAY,WAAW;AAAE,UAAO;MAAU;EACvJ,SAAS,KAAK,GAAG;AAAE,UAAO,SAAU,GAAG;AAAE,WAAO,KAAK,CAAC,GAAG,EAAE,CAAC;;;EAC5D,SAAS,KAAK,IAAI;AACd,OAAI,EAAG,OAAM,IAAI,UAAU,kCAAkC;AAC7D,UAAO,EAAG,KAAI;AACV,QAAI,IAAI,GAAG,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,YAAY,GAAG,KAAK,EAAE,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,KAAM,QAAO;AAC3J,QAAI,IAAI,GAAG,EAAG,MAAK,CAAC,GAAG,KAAK,GAAG,EAAE,MAAM;AACvC,YAAQ,GAAG,IAAX;KACI,KAAK;KAAG,KAAK;AAAG,UAAI;AAAI;KACxB,KAAK;AAAG,QAAE;AAAS,aAAO;OAAE,OAAO,GAAG;OAAI,MAAM;OAAO;KACvD,KAAK;AAAG,QAAE;AAAS,UAAI,GAAG;AAAI,WAAK,CAAC,EAAE;AAAE;KACxC,KAAK;AAAG,WAAK,EAAE,IAAI,KAAK;AAAE,QAAE,KAAK,KAAK;AAAE;KACxC;AACI,UAAI,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,SAAS,QAAQ,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI;AAAE,WAAI;AAAG;;AACjG,UAAI,GAAG,OAAO,MAAM,CAAC,KAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,KAAM;AAAE,SAAE,QAAQ,GAAG;AAAI;;AAC9E,UAAI,GAAG,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,WAAI;AAAI;;AAC7D,UAAI,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,SAAE,IAAI,KAAK,GAAG;AAAE;;AAC3D,UAAI,EAAE,GAAI,GAAE,IAAI,KAAK;AACrB,QAAE,KAAK,KAAK;AAAE;;AAEtB,SAAK,KAAK,KAAK,SAAS,EAAE;YACrB,GAAG;AAAE,SAAK,CAAC,GAAG,EAAE;AAAE,QAAI;aAAa;AAAE,QAAI,IAAI;;AACtD,OAAI,GAAG,KAAK,EAAG,OAAM,GAAG;AAAI,UAAO;IAAE,OAAO,GAAG,KAAK,GAAG,KAAK,KAAK;IAAG,MAAM;IAAM;;;CAGxF,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;CAC7D,IAAI,YAAY,uCAAkC;CAClD,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa,0CAAoC;CACrD,IAAI;CACJ,IAAI,SAAS,qCAAiD;CAC9D,IAAI,cAAc,wCAAqC;CACvD,IAAI;CACJ,IAAI,eAAe,wCAAsC;CACzD,IAAI,KAAK,aAAa,QAAQ,KAAK,CAAC;CACpC,IAAI;CACJ,IAAI,sBAAsB,MAAM,WAAW;CAC3C,IAAI,mBAAmB,MAAM,WAAW;CACxC,IAAI,UAAU,MAAM,QAAQ;CAC5B,IAAI,YAAY,MAAM,QAAQ;CAC9B,IAAI,UAAU,WAAY;;;;;EAKtB,SAAS,oBAAoB,MAAM;AAC/B,OAAI,CAAC,UAAU,eAAe,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GACnE,QAAO;AAEX,OAAI,CAAC,UAAU,gBAAgB,UAAU,aAAa,CAAC,QAAQ,KAAK,KAAK,GACrE,QAAO;AAEX,SAAM,IAAI,MAAM,6BAA6B;;;;;EAKjD,IAAI,mBAAmB;GACnB,8CAA8C;GAC9C,qDAAqD;GACrD,qDAAqD;GACxD;;;;;EAKD,IAAI,8BAA8B,EAC9B,SAAS,keACZ;;;;;EAKD,IAAI,+BAA+B,EAC/B,SAAS,mVACZ;;;;;EAKD,IAAI,oCAAoC,EACpC,SAAS,mEACZ;;;;;EAKD,IAAI,2BAA2B,EAC3B,SAAS,yNACZ;;;;;EAKD,IAAI,+BAA+B;GAC/B,SAAS;GACT,YAAY,EAAE;GACd,qBAAqB;IACjB,8BAA8B;IAC9B,qBAAqB;IACxB;GACJ;;;;;EAKD,IAAI,gCAAgC,EAChC,SAAS,+XACZ;;;;;;;EAOD,SAAS,iBAAiB,QAAQ;AAC9B,OAAI,QAAQ;IACR,IAAI,WAAW,iBAAiB;AAChC,QAAI,EAAE,aAAa,QACf,QAAO;;AAGf,UAAO,iBAAiB,oBAAoB;;;;;;;;EAQhD,SAAS,gBAAgB,QAAQ;AAC7B,UAAO,iBAAiB;;;;;;;;;EAS5B,SAAS,YAAY,OAAO,cAAc;AACtC,QAAK,GAAG,UAAU,UAAU,MAAM,CAC9B,QAAO,iBAAiB,OAAO,wBAAwB,QAAQ,cAAc,wBAAwB,QAAQ;AAEjH,UAAO,wBAAwB,MAAM,OAAO,SAAS,MAAM;;;;;;;;;EAS/D,SAAS,QAAQ,QAAQ,SAAS;GAC9B,IAAI,gBAAgB,GAAG,YAAY,SAAS,SAAS,EAAE,QAAQ,SAAS,CAAC;AACzE,UAAO,SAAS,aAAa,OAAO,EAAE,CAAC,aAAa,GAAG,aAAa,MAAM,EAAE;;EAEhF,SAAS,UAAU,aAAa;AAC5B,UAAO,SAAU,QAAQ,OAAO;IAC5B,IAAI,OAAQ,gBAAgB,QAAQ,gBAAgB,SAAa,KAAK,OAAO,YAAY;AAEzF,WAAO,QAAQ,GAAG,OAAO,MAAM,CAAC,QAAQ,GAAG,aAAa,SAAS,KAAK,CAAC,GAAG;;;AAGlF,SAAO;GACU;GACQ;GACQ;GACC;GACK;GACT;GACI;GACC;GAO/B,oBAAoB,SAAU,QAAQ,WAAW;AAC7C,WAAO,KAAK,UAAU,CAAC,QAAQ,SAAU,GAAG;AACxC,cAAS,OAAO,QAAQ,IAAI,OAAO,WAAW,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,UAAU,GAAG,CAAC;MAChG;AACF,WAAO;;GASX,2BAA2B,SAAU,YAAY,mBAAmB,4BAA4B;AAC5F,QAAI,sBAAsB,KAAK,EAAK,qBAAoB;AACxD,QAAI,+BAA+B,KAAK,EAAK,8BAA6B;IAC1E,IAAI,OAAO,WAAW,IAAI,SAAU,IAAI;KACpC,IAAI,OAAO,GAAG,MAAM,aAAa,GAAG,YAAY,WAAW,GAAG,UAAU,eAAe,GAAG,cAAc,eAAe,GAAG,cAAc,gBAAgB,GAAG;KAC3J,IAAI,sBAAsB;KAC1B,IAAI,uBAAuB;KAC3B,IAAI,gBAAgB,kBAAkB;AACtC,qBAAgB,cAAc,QAAQ,UAAU,KAAK;AACrD,qBAAgB,cAAc,QAAQ,gBAAgB,WAAW;AACjE,qBAAgB,cAAc,QAAQ,kBAAkB,eAAe,eAAe,oBAAoB;AAC1G,qBAAgB,cAAc,QAAQ,mBAAmB,gBAAgB,gBAAgB,qBAAqB;AAC9G,qBAAgB,cAAc,QAAQ,kBAAkB,aAAa;AACrE,qBAAgB,cAAc,QAAQ,WAAW,IAAI,OAAO,QAAQ,QAAQ,SAAS,EAAE,IAAI,CAAC;AAC5F,YAAO;MACT,CAAC,KAAK,GAAG;AACX,WAAO,2BAA2B,QAAQ,QAAQ,gBAAgB,KAAK;;GAa3E,wBAAwB,SAAU,MAAM;IACpC,IAAI,iBAAiB,KAAK,gBAAgB,oBAAoB,KAAK,mBAAmB,aAAa,KAAK,YAAY,iBAAiB,KAAK,gBAAgB,KAAK,KAAK,oBAAoB,qBAAqB,OAAO,KAAK,IAAI,oBAAoB,aAAa,IAAI,KAAK,KAAK,0BAA0B,2BAA2B,OAAO,KAAK,IAAI,CAC7U,yDACA,0CACH,GAAG,IAAI,cAAc,KAAK,aAAa,kBAAkB,KAAK,iBAAiB,KAAK,KAAK,gBAAgB,iBAAiB,OAAO,KAAK,IAAI,OAAO,IAAI,KAAK,KAAK,iBAAiB,kBAAkB,OAAO,KAAK,IAAI,QAAQ;IAC3N,IAAI,MAAM,IAAI,aAAa,WAAW;IAEtC,IAAI,kBAAkB,gBAAgB,mBAAmB;AACzD,QAAI,kBACA,KAAI,aAAa;KACb,OAAO;KACP,YAAY;KACK;KACpB,CAAC;AAEN,QAAI,gBACA,KAAI,aAAa;KAEb,OAAO;KACP,YAAY;KACK;KACpB,CAAC;AAEN,QAAI,qBAAqB;AACzB,QAAI,aAAa,KAAK,WAAW,aAAa,gBAAgB,CAAC,QAAQ;AACvE,QAAI,oBAAoB,KAAK,WAAW,aAAa,gBAAgB,CAAC;AACtE,QAAI,aAAa,UAAU,QAAQ,eAAe,YAAY,gBAAgB,KAAK;AACnF,QAAI,4BAA4B;AAChC,QAAI,gBACA,KAAI,iBAAiB,gBAAgB,gBAAgB;QAGrD,KAAI,iBAAiB,eAAe;AAExC,WAAO,mBAAmB,QAAQ,UAAU,QAAQ,aAAa,IAAI,cAAc,CAAC,GAAG,IAAI,cAAc;;GAU7G,iBAAiB,SAAU,KAAK,MAAM;IAClC,IAAI,KAAK;IAET,IAAI,OADO,GAAG,MAAM,aAAa,CAAC,IACpB,gBAAgB,IAAI;IAClC,IAAI,YAAY,IAAI,SAAS,WAAW;IAGxC,IAAI,wBAAwB;IAE5B,IAAI,0BAA0B;IAE9B,IAAI,wBAAwB;IAE5B,IAAI,YAAY,EAAE;IAClB,IAAI,wBAAwB,GAAG,QAAQ,QAAQ,uBAAuB,IAAI;IAC1E,IAAI,0BAA0B,GAAG,QAAQ,QAAQ,yBAAyB,IAAI;IAC9E,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,uBAAuB,IAAI;AACzE,gBAAY,UAAU,OAAO,qBAAqB;AAClD,gBAAY,UAAU,OAAO,uBAAuB;AAEpD,QAAI,oBAAoB,WAAW,EAC/B,OAAM,IAAI,MAAM,gCAAgC;AAGpD,QAAI,UAAU,WAAW,EACrB,QAAO,CAAC,OAAO,KAAK;IAExB,IAAI,UAAU,SAAU,iBAAe;KACnC,IAAI,MAAM,IAAI,aAAa,WAAW;KACtC,IAAI,WAAW;AACf,SAAI,qBAAqB,KAAK;AAC9B,SAAI,CAAC,KAAK,WAAW,CAAC,KAAK,SACvB,OAAM,IAAI,MAAM,2CAA2C;AAE/D,SAAI,KAAK,QACL,KAAI,aAAa,GAAG,aAAa,KAAK,QAAQ;AAElD,SAAI,KAAK,UAAU;MACf,IAAI,mBAAmB,GAAG,QAAQ,QAAQ,yCAAyCA,gBAAc;MAEjG,IAAI,eAAe,KAAK,SAAS,mBAAmB,QAAQ,QAAQ;AAEpE,UAAI,MAAM,QAAQ,aAAa,CAC3B,iBAAgB,GAAG,UAAU,aAAa,aAAa;eAElD,OAAO,iBAAiB,SAC7B,gBAAe,CAAC,aAAa;AAGjC,qBAAe,aAAa,IAAI,UAAU,QAAQ,mBAAmB;AAErE,UAAI,gBAAgB,WAAW,KAAK,aAAa,WAAW,EACxD,OAAM,IAAI,MAAM,0BAA0B;AAG9C,UAAI,gBAAgB,WAAW,GAAG;OAC9B,IAAI,sBAAsB,gBAAgB,GAAG,WAAW;OACxD,IAAI,oBAAoB,UAAU,QAAQ,mBAAmB,oBAAoB;AACjF,WAAI,aAAa,UAAU,KACvB,CAAC,aAAa,KAAK,SAAU,MAAM;AAAE,eAAO,KAAK,MAAM,KAAK,kBAAkB,MAAM;SAAI,CAGxF,OAAM,IAAI,MAAM,oDAAoD;AAExE,WAAI,aAAa,OAAO,WAAW,kBAAkB,CAAC,QAAQ;YAI9D,KAAI,aAAa,OAAO,WAAW,aAAa,GAAG,CAAC,QAAQ;;AAGpE,SAAI,cAAcA,gBAAc;AAChC,gBAAW,IAAI,eAAe,IAAI,UAAU,CAAC;AAE7C,SAAI,CAAC,SACD,QAAO;AAIX,SAAI,EAAE,IAAI,qBAAqB,CAAC,UAAU,GACtC,OAAM,IAAI,MAAM,0BAA0B;KAE9C,IAAI,oBAAoB,IAAI,qBAAqB,CAAC;KAClD,IAAI,WAAW,UAAU,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,SAAI,SAAS,cAAc,YAAY;MAEnC,IAAI,cAAc,GAAG,QAAQ,QAAQ,iCAAiC,SAAS;MAC/E,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,0CAA0C,SAAS;AAEjG,UAAI,WAAW,WAAW,EACtB,QAAO,EAAE,OAAO,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE;eAE7C,oBAAoB,UAAU,EACnC,QAAO,EAAE,OAAO,CAAC,MAAM,SAAS,UAAU,CAAC,EAAE;UAG7C,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,EAAE;gBAG7B,SAAS,cAAc,YAC5B,QAAO,EAAE,OAAO,CAAC,MAAM,SAAS,UAAU,CAAC,EAAE;SAG7C,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,EAAE;;IAGtC,IAAI,SAAS;AACb,QAAI;AAEA,UAAK,IAAI,cAAc,SAAS,UAAU,EAAE,gBAAgB,YAAY,MAAM,EAAE,CAAC,cAAc,MAAM,gBAAgB,YAAY,MAAM,EAAE;MACrI,IAAI,gBAAgB,cAAc;MAClC,IAAI,UAAU,QAAQ,cAAc;AACpC,UAAI,OAAO,YAAY,SACnB,QAAO,QAAQ;;aAGpB,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,iBAAiB,CAAC,cAAc,SAAS,KAAK,YAAY,QAAS,IAAG,KAAK,YAAY;eAEvF;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAGjC,WAAO,CAAC,OAAO,KAAK;;GAmDxB,kBAAkB,SAAU,KAAK,YAAY;IACzC,IAAI,IAAI,IAAI;AACZ,WAAO,KAAK,EAAE,EACV,GAAG,mBAAmB,CAClB,EACI,OAAO,EAAO,KAAK,EACtB,GACA,KAAK,EAAE,EACJ,GAAG,gBAAgB,CACf,EACI,OAAO,EACH,YAAY,sCACf,EACJ,GACA,KAAK,EAAE,EACJ,GAAG,iBAAiB,CAAC,EACb,sBAAsB,UAAU,QAAQ,mBAAmB,WAAW,EACzE,CAAC,EACN,IACP,EACD,IACP,EACD;;GAUR,2BAA2B,SAAU,aAAa,KAAK,YAAY,UAAU,kBAAkB;IAM3F,IAAI,YAHe,IAAI,WAAW,QAAQ,UAAU,QAAQ,eAAe,KAAK,WAAW,EAAE,QAAW,EACpG,eAAe,iBAAiB,iBAAiB,EACpD,CAAC,CAC2B,KAAK,YAAY;AAE9C,WAAO,aAAa,QAAQ,UAAU,SAAS,SAAS,GAAG;;GAU/D,wBAAwB,SAAU,UAAU,aAAa,WAAW,iBAAiB;IACjF,IAAI,WAAW,SAAS,mBAAmB,QAAQ,QAAQ;IAC3D,IAAI,gBAAgB,iBAAiB,gBAAgB;AAErD,WADU,IAAI,WAAW,QAAQ,UAAU,QAAQ,+BAA+B,SAAS,EAAE,UAAU,EAAiB,eAAe,CAAC,CAC7H,OAAO,OAAO,KAAK,YAAY,EAAE,OAAO,KAAK,UAAU,CAAC;;GAOvE,YAAY,SAAU,iBAAiB,iBAAiB;AACpD,QAAI,oBAAoB,KAAK,EAAK,mBAAkB,EAAE;IACtD,IAAI,SAAS,gBAAgB,SAAS,GAAG,OAAO,gBAAgB,QAAQ,IAAI,GAAG;AAC/E,WAAO;KACH,YAAY,WAAY;AACpB,aAAO,IAAI,OAAO,QAAQ,aAAa,CAAC,OAAO,QAAQ,mBAAmB,CAAC,OAAO,iBAAiB,KAAK,CAAC,OAAO,QAAQ,qBAAqB,CAAC,OAAO,QAAQ,YAAY;;KAE7K,QAAQ,WAAY;AAChB,aAAO,UAAU,QAAQ,+BAA+B,gBAAgB,CAAC,UAAU;;KAE1F;;GASL,kBAAkB,SAAU,cAAc,cAAc,KAAK;AAEzD,WAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;AAC1C,SAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,0BAA0B,CAAC;KAEvD,IAAI,sBAAsB,aAAa;KACvC,IAAI,uBAAuB,aAAa;KACxC,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;KAClC,IAAI,MAAM,IAAI,gBAAgB,IAAI;KAClC,IAAI,cAAc,GAAG,QAAQ,QAAQ,kCAAkC,IAAI;AAC3E,SAAI,CAAC,MAAM,QAAQ,WAAW,IAAI,WAAW,WAAW,EACpD,OAAM,IAAI,MAAM,mBAAmB;AAEvC,SAAI,WAAW,SAAS,EACpB,OAAM,IAAI,MAAM,yBAAyB;KAE7C,IAAI,mBAAmB,WAAW;AAElC,SAAI,oBAAoB,sBAAsB;MAC1C,IAAI,eAAe,UAAU,QAAQ,+BAA+B,qBAAqB,mBAAmB,QAAQ,QAAQ,CAAC;AAC7H,aAAO,QAAQ,iBAAiB,UAAU,EAAE;OAExC,SAAS,OAAO,KAAK,aAAa;OAClC,KAAK,OAAO,KAAK,8BAA8B,OAAO,qBAAqB,mBAAmB,QAAQ,QAAQ,EAAE,4BAA4B,CAAC;OAC7I,qBAAqB,oBAAoB;OACzC,wBAAwB,oBAAoB;OAC/C,EAAE,SAAU,KAAK,KAAK;AACnB,WAAI,KAAK;AACL,gBAAQ,MAAM,IAAI;AAClB,eAAO,uBAAO,IAAI,MAAM,wCAAwC,CAAC;;AAErE,WAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,oCAAoC,CAAC;OAEjE,IAAI,qBAAqB,oBAAoB,UAAU;OACvD,IAAI,sBAAsB,IAAI,gBAAgB,IAAI,OAAO,oBAAoB,6BAA6B,CAAC,OAAO,oBAAoB,MAAM,CAAC,OAAO,MAAM,UAAU,MAAM,WAAW,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,oBAAoB,uBAAuB,CAAC;AACjQ,WAAI,gBAAgB,aAAa,oBAAoB,iBAAiB,iBAAiB;AACvF,cAAO,QAAQ,UAAU,QAAQ,aAAa,IAAI,UAAU,CAAC,CAAC;QAChE;WAGF,QAAO,QAAQ,UAAU,QAAQ,aAAa,IAAI,CAAC;MAEzD;;GAUN,kBAAkB,SAAU,MAAM,WAAW;AACzC,WAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;AAE1C,SAAI,CAAC,UACD,QAAO,uBAAO,IAAI,MAAM,0BAA0B,CAAC;KAGvD,IAAI,cAAc,KAAK;KACvB,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;KAClC,IAAI,MAAM,IAAI,gBAAgB,UAAU;KACxC,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,gFAAgF,IAAI;AAClI,SAAI,CAAC,MAAM,QAAQ,oBAAoB,IAAI,oBAAoB,WAAW,EACtE,OAAM,IAAI,MAAM,oCAAoC;AAExD,SAAI,oBAAoB,SAAS,EAC7B,OAAM,IAAI,MAAM,yBAAyB;KAE7C,IAAI,mBAAmB,oBAAoB;AAC3C,YAAO,OAAO,QAAQ,iBAAiB,UAAU,EAAE,EAC/C,KAAK,UAAU,QAAQ,eAAe,YAAY,eAAe,YAAY,kBAAkB,EAClG,EAAE,SAAU,KAAK,KAAK;AACnB,UAAI,KAAK;AACL,eAAQ,MAAM,IAAI;AAClB,cAAO,uBAAO,IAAI,MAAM,wCAAwC,CAAC;;AAErE,UAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,oCAAoC,CAAC;MAEjE,IAAI,kBAAkB,IAAI,gBAAgB,IAAI;AAC9C,UAAI,gBAAgB,aAAa,gBAAgB,iBAAiB,iBAAiB;AACnF,aAAO,QAAQ,CAAC,IAAI,UAAU,EAAE,IAAI,CAAC;OACvC;MACJ;;GAKN,YAAY,SAAU,OAAO;AACzB,WAAO,UAAU,MAAM,KAAK,GAAG,KAAK,GAAG,WAAY;KAC/C,IAAI,UAAU;AACd,YAAO,YAAY,MAAM,SAAU,IAAI;AACnC,cAAQ,GAAG,OAAX;OACI,KAAK;AACD,oBAAY,GAAG,MAAM,aAAa,CAAC;;;;;;;AAOnC,YAAI,CAAC,SAED,QAAO,CAAC,GAAc,QAAQ,OAAO,gMAAgM,CAAC;AAE1O,WAAG,QAAQ;OACf,KAAK;AACD,WAAG,KAAK,KAAK;SAAC;SAAG;;SAAK;SAAE,CAAC;AACzB,eAAO,CAAC,GAAa,SAAS,MAAM,CAAC;OACzC,KAAK,EAAG,QAAO,CAAC,GAAc,GAAG,MAAM,CAAC;OACxC,KAAK;AACD,cAAM,GAAG,MAAM;AACf,cAAM;OACV,KAAK,EAAG,QAAO,CAAC,EAAa;;OAEnC;MACJ;;GAET;;AAEL,SAAQ,UAAU,SAAS"}

package/dist/cjs/node_modules/samlify/build/src/metadata-idp.cjs ADDED Viewed

@@ -0,0 +1,174 @@
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+const require_utility$1 = require('./utility.cjs');
+const require_urn$1 = require('./urn.cjs');
+const require_metadata$1 = require('./metadata.cjs');
+const require_libsaml$1 = require('./libsaml.cjs');
+const require_xml$1 = require('../../../xml/lib/xml.cjs');
+//#region ../../node_modules/samlify/build/src/metadata-idp.js
+var require_metadata_idp = /* @__PURE__ */ require_rolldown_runtime.__commonJS({ "../../node_modules/samlify/build/src/metadata-idp.js": ((exports) => {
+	var __extends = exports && exports.__extends || (function() {
+		var extendStatics = function(d, b) {
+			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
+				d$1.__proto__ = b$1;
+			} || function(d$1, b$1) {
+				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
+			};
+			return extendStatics(d, b);
+		};
+		return function(d, b) {
+			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+			extendStatics(d, b);
+			function __() {
+				this.constructor = d;
+			}
+			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+		};
+	})();
+	var __values = exports && exports.__values || function(o) {
+		var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+		if (m) return m.call(o);
+		if (o && typeof o.length === "number") return { next: function() {
+			if (o && i >= o.length) o = void 0;
+			return {
+				value: o && o[i++],
+				done: !o
+			};
+		} };
+		throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+	};
+	var __importDefault = exports && exports.__importDefault || function(mod) {
+		return mod && mod.__esModule ? mod : { "default": mod };
+	};
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.IdpMetadata = void 0;
+	/**
+	* @file metadata-idp.ts
+	* @author tngan
+	* @desc  Metadata of identity provider
+	*/
+	var metadata_1 = __importDefault(require_metadata$1.default);
+	var urn_1 = require_urn$1.default;
+	var libsaml_1 = __importDefault(require_libsaml$1.default);
+	var utility_1 = require_utility$1.default;
+	var xml_1 = __importDefault(require_xml$1.default);
+	function default_1(meta) {
+		return new IdpMetadata(meta);
+	}
+	exports.default = default_1;
+	var IdpMetadata = function(_super) {
+		var e_1, e_2;
+		__extends(IdpMetadata$1, _super);
+		function IdpMetadata$1(meta) {
+			if (!((0, utility_1.isString)(meta) || meta instanceof Buffer)) {
+				var _a = meta, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _b = _a.wantAuthnRequestsSigned, wantAuthnRequestsSigned = _b === void 0 ? false : _b, _c = _a.nameIDFormat, nameIDFormat = _c === void 0 ? [] : _c, _d = _a.singleSignOnService, singleSignOnService = _d === void 0 ? [] : _d, _e = _a.singleLogoutService, singleLogoutService = _e === void 0 ? [] : _e;
+				var IDPSSODescriptor_1 = [{ _attr: {
+					WantAuthnRequestsSigned: String(wantAuthnRequestsSigned),
+					protocolSupportEnumeration: urn_1.namespace.names.protocol
+				} }];
+				try {
+					for (var _f = __values((0, utility_1.castArrayOpt)(signingCert)), _g = _f.next(); !_g.done; _g = _f.next()) {
+						var cert = _g.value;
+						IDPSSODescriptor_1.push(libsaml_1.default.createKeySection("signing", cert));
+					}
+				} catch (e_1_1) {
+					e_1 = { error: e_1_1 };
+				} finally {
+					try {
+						if (_g && !_g.done && (_a = _f.return)) _a.call(_f);
+					} finally {
+						if (e_1) throw e_1.error;
+					}
+				}
+				try {
+					for (var _h = __values((0, utility_1.castArrayOpt)(encryptCert)), _j = _h.next(); !_j.done; _j = _h.next()) {
+						var cert = _j.value;
+						IDPSSODescriptor_1.push(libsaml_1.default.createKeySection("encryption", cert));
+					}
+				} catch (e_2_1) {
+					e_2 = { error: e_2_1 };
+				} finally {
+					try {
+						if (_j && !_j.done && (_b = _h.return)) _b.call(_h);
+					} finally {
+						if (e_2) throw e_2.error;
+					}
+				}
+				if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) nameIDFormat.forEach(function(f) {
+					return IDPSSODescriptor_1.push({ NameIDFormat: f });
+				});
+				if ((0, utility_1.isNonEmptyArray)(singleSignOnService)) singleSignOnService.forEach(function(a, indexCount) {
+					var attr = {
+						Binding: a.Binding,
+						Location: a.Location
+					};
+					if (a.isDefault) attr.isDefault = true;
+					IDPSSODescriptor_1.push({ SingleSignOnService: [{ _attr: attr }] });
+				});
+				else throw new Error("ERR_IDP_METADATA_MISSING_SINGLE_SIGN_ON_SERVICE");
+				if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) singleLogoutService.forEach(function(a, indexCount) {
+					var attr = {};
+					if (a.isDefault) attr.isDefault = true;
+					attr.Binding = a.Binding;
+					attr.Location = a.Location;
+					IDPSSODescriptor_1.push({ SingleLogoutService: [{ _attr: attr }] });
+				});
+				else console.warn("Construct identity  provider - missing endpoint of SingleLogoutService");
+				meta = (0, xml_1.default)([{ EntityDescriptor: [{ _attr: {
+					"xmlns": urn_1.namespace.names.metadata,
+					"xmlns:assertion": urn_1.namespace.names.assertion,
+					"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
+					entityID
+				} }, { IDPSSODescriptor: IDPSSODescriptor_1 }] }]);
+			}
+			return _super.call(this, meta, [{
+				key: "wantAuthnRequestsSigned",
+				localPath: ["EntityDescriptor", "IDPSSODescriptor"],
+				attributes: ["WantAuthnRequestsSigned"]
+			}, {
+				key: "singleSignOnService",
+				localPath: [
+					"EntityDescriptor",
+					"IDPSSODescriptor",
+					"SingleSignOnService"
+				],
+				index: ["Binding"],
+				attributePath: [],
+				attributes: ["Location"]
+			}]) || this;
+		}
+		/**
+		* @desc Get the preference whether it wants a signed request
+		* @return {boolean} WantAuthnRequestsSigned
+		*/
+		IdpMetadata$1.prototype.isWantAuthnRequestsSigned = function() {
+			var was = this.meta.wantAuthnRequestsSigned;
+			if (was === void 0) return false;
+			return String(was) === "true";
+		};
+		/**
+		* @desc Get the entity endpoint for single sign on service
+		* @param  {string} binding      protocol binding (e.g. redirect, post)
+		* @return {string/object} location
+		*/
+		IdpMetadata$1.prototype.getSingleSignOnService = function(binding) {
+			if ((0, utility_1.isString)(binding)) {
+				var bindName = urn_1.namespace.binding[binding];
+				var service = this.meta.singleSignOnService[bindName];
+				if (service) return service;
+			}
+			return this.meta.singleSignOnService;
+		};
+		return IdpMetadata$1;
+	}(metadata_1.default);
+	exports.IdpMetadata = IdpMetadata;
+}) });
+//#endregion
+Object.defineProperty(exports, 'default', {
+  enumerable: true,
+  get: function () {
+    return require_metadata_idp();
+  }
+});
+//# sourceMappingURL=metadata-idp.cjs.map

package/dist/cjs/node_modules/samlify/build/src/metadata-idp.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"metadata-idp.cjs","names":["b","IdpMetadata"],"sources":["../../../../../../../../node_modules/samlify/build/src/metadata-idp.js"],"sourcesContent":["\"use strict\";\nvar __extends = (this && this.__extends) || (function () {\n var extendStatics = function (d, b) {\n extendStatics = Object.setPrototypeOf ||\n ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\n function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\n return extendStatics(d, b);\n };\n return function (d, b) {\n if (typeof b !== \"function\" && b !== null)\n throw new TypeError(\"Class extends value \" + String(b) + \" is not a constructor or null\");\n extendStatics(d, b);\n function __() { this.constructor = d; }\n d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\n };\n})();\nvar __values = (this && this.__values) || function(o) {\n var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n if (m) return m.call(o);\n if (o && typeof o.length === \"number\") return {\n next: function () {\n if (o && i >= o.length) o = void 0;\n return { value: o && o[i++], done: !o };\n }\n };\n throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.IdpMetadata = void 0;\n/**\n* @file metadata-idp.ts\n* @author tngan\n* @desc Metadata of identity provider\n*/\nvar metadata_1 = __importDefault(require(\"./metadata\"));\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = require(\"./utility\");\nvar xml_1 = __importDefault(require(\"xml\"));\n/*\n * @desc interface function\n */\nfunction default_1(meta) {\n return new IdpMetadata(meta);\n}\nexports.default = default_1;\nvar IdpMetadata = /** @class */ (function (_super) {\n var e_1, _a, e_2, _b;\n __extends(IdpMetadata, _super);\n function IdpMetadata(meta) {\n var isFile = (0, utility_1.isString)(meta) || meta instanceof Buffer;\n if (!isFile) {\n var _a = meta, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _b = _a.wantAuthnRequestsSigned, wantAuthnRequestsSigned = _b === void 0 ? false : _b, _c = _a.nameIDFormat, nameIDFormat = _c === void 0 ? [] : _c, _d = _a.singleSignOnService, singleSignOnService = _d === void 0 ? [] : _d, _e = _a.singleLogoutService, singleLogoutService = _e === void 0 ? [] : _e;\n var IDPSSODescriptor_1 = [{\n _attr: {\n WantAuthnRequestsSigned: String(wantAuthnRequestsSigned),\n protocolSupportEnumeration: urn_1.namespace.names.protocol,\n },\n }];\n try {\n for (var _f = __values((0, utility_1.castArrayOpt)(signingCert)), _g = _f.next(); !_g.done; _g = _f.next()) {\n var cert = _g.value;\n IDPSSODescriptor_1.push(libsaml_1.default.createKeySection('signing', cert));\n }\n }\n catch (e_1_1) { e_1 = { error: e_1_1 }; }\n finally {\n try {\n if (_g && !_g.done && (_a = _f.return)) _a.call(_f);\n }\n finally { if (e_1) throw e_1.error; }\n }\n try {\n for (var _h = __values((0, utility_1.castArrayOpt)(encryptCert)), _j = _h.next(); !_j.done; _j = _h.next()) {\n var cert = _j.value;\n IDPSSODescriptor_1.push(libsaml_1.default.createKeySection('encryption', cert));\n }\n }\n catch (e_2_1) { e_2 = { error: e_2_1 }; }\n finally {\n try {\n if (_j && !_j.done && (_b = _h.return)) _b.call(_h);\n }\n finally { if (e_2) throw e_2.error; }\n }\n if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) {\n nameIDFormat.forEach(function (f) { return IDPSSODescriptor_1.push({ NameIDFormat: f }); });\n }\n if ((0, utility_1.isNonEmptyArray)(singleSignOnService)) {\n singleSignOnService.forEach(function (a, indexCount) {\n var attr = {\n Binding: a.Binding,\n Location: a.Location,\n };\n if (a.isDefault) {\n attr.isDefault = true;\n }\n IDPSSODescriptor_1.push({ SingleSignOnService: [{ _attr: attr }] });\n });\n }\n else {\n throw new Error('ERR_IDP_METADATA_MISSING_SINGLE_SIGN_ON_SERVICE');\n }\n if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) {\n singleLogoutService.forEach(function (a, indexCount) {\n var attr = {};\n if (a.isDefault) {\n attr.isDefault = true;\n }\n attr.Binding = a.Binding;\n attr.Location = a.Location;\n IDPSSODescriptor_1.push({ SingleLogoutService: [{ _attr: attr }] });\n });\n }\n else {\n console.warn('Construct identity provider - missing endpoint of SingleLogoutService');\n }\n // Create a new metadata by setting\n meta = (0, xml_1.default)([{\n EntityDescriptor: [{\n _attr: {\n 'xmlns': urn_1.namespace.names.metadata,\n 'xmlns:assertion': urn_1.namespace.names.assertion,\n 'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n entityID: entityID,\n },\n }, { IDPSSODescriptor: IDPSSODescriptor_1 }],\n }]);\n }\n return _super.call(this, meta, [\n {\n key: 'wantAuthnRequestsSigned',\n localPath: ['EntityDescriptor', 'IDPSSODescriptor'],\n attributes: ['WantAuthnRequestsSigned'],\n },\n {\n key: 'singleSignOnService',\n localPath: ['EntityDescriptor', 'IDPSSODescriptor', 'SingleSignOnService'],\n index: ['Binding'],\n attributePath: [],\n attributes: ['Location']\n },\n ]) || this;\n }\n /**\n * @desc Get the preference whether it wants a signed request\n * @return {boolean} WantAuthnRequestsSigned\n */\n IdpMetadata.prototype.isWantAuthnRequestsSigned = function () {\n var was = this.meta.wantAuthnRequestsSigned;\n if (was === undefined) {\n return false;\n }\n return String(was) === 'true';\n };\n /**\n * @desc Get the entity endpoint for single sign on service\n * @param {string} binding protocol binding (e.g. redirect, post)\n * @return {string/object} location\n */\n IdpMetadata.prototype.getSingleSignOnService = function (binding) {\n if ((0, utility_1.isString)(binding)) {\n var bindName = urn_1.namespace.binding[binding];\n var service = this.meta.singleSignOnService[bindName];\n if (service) {\n return service;\n }\n }\n return this.meta.singleSignOnService;\n };\n return IdpMetadata;\n}(metadata_1.default));\nexports.IdpMetadata = IdpMetadata;\n//# sourceMappingURL=metadata-idp.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;CACA,IAAI,+BAA0B,cAAe,WAAY;EACrD,IAAI,gBAAgB,SAAU,GAAG,GAAG;AAChC,mBAAgB,OAAO,kBAClB,EAAE,WAAW,EAAE,EAAE,YAAY,SAAS,SAAU,KAAG,KAAG;AAAE,QAAE,YAAYA;QACvE,SAAU,KAAG,KAAG;AAAE,SAAK,IAAI,KAAKA,IAAG,KAAI,OAAO,UAAU,eAAe,KAAKA,KAAG,EAAE,CAAE,KAAE,KAAKA,IAAE;;AAChG,UAAO,cAAc,GAAG,EAAE;;AAE9B,SAAO,SAAU,GAAG,GAAG;AACnB,OAAI,OAAO,MAAM,cAAc,MAAM,KACjC,OAAM,IAAI,UAAU,yBAAyB,OAAO,EAAE,GAAG,gCAAgC;AAC7F,iBAAc,GAAG,EAAE;GACnB,SAAS,KAAK;AAAE,SAAK,cAAc;;AACnC,KAAE,YAAY,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI,GAAG,YAAY,EAAE,WAAW,IAAI,IAAI;;KAEvF;CACJ,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,cAAc,KAAK;;;;;;CAM3B,IAAI,aAAa,2CAAsC;CACvD,IAAI;CACJ,IAAI,YAAY,0CAAqC;CACrD,IAAI;CACJ,IAAI,QAAQ,sCAA+B;CAI3C,SAAS,UAAU,MAAM;AACrB,SAAO,IAAI,YAAY,KAAK;;AAEhC,SAAQ,UAAU;CAClB,IAAI,cAA6B,SAAU,QAAQ;EAC/C,IAAI,KAAS;AACb,YAAUC,eAAa,OAAO;EAC9B,SAASA,cAAY,MAAM;AAEvB,OAAI,GADU,GAAG,UAAU,UAAU,KAAK,IAAI,gBAAgB,SACjD;IACT,IAAI,KAAK,MAAM,WAAW,GAAG,UAAU,cAAc,GAAG,aAAa,cAAc,GAAG,aAAa,KAAK,GAAG,yBAAyB,0BAA0B,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,cAAc,eAAe,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG;IAC5Y,IAAI,qBAAqB,CAAC,EAClB,OAAO;KACH,yBAAyB,OAAO,wBAAwB;KACxD,4BAA4B,MAAM,UAAU,MAAM;KACrD,EACJ,CAAC;AACN,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,yBAAmB,KAAK,UAAU,QAAQ,iBAAiB,WAAW,KAAK,CAAC;;aAG7E,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,yBAAmB,KAAK,UAAU,QAAQ,iBAAiB,cAAc,KAAK,CAAC;;aAGhF,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,SAAK,GAAG,UAAU,iBAAiB,aAAa,CAC5C,cAAa,QAAQ,SAAU,GAAG;AAAE,YAAO,mBAAmB,KAAK,EAAE,cAAc,GAAG,CAAC;MAAI;AAE/F,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG,YAAY;KACjD,IAAI,OAAO;MACP,SAAS,EAAE;MACX,UAAU,EAAE;MACf;AACD,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,wBAAmB,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,CAAC;MACrE;QAGF,OAAM,IAAI,MAAM,kDAAkD;AAEtE,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG,YAAY;KACjD,IAAI,OAAO,EAAE;AACb,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,UAAK,UAAU,EAAE;AACjB,UAAK,WAAW,EAAE;AAClB,wBAAmB,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,CAAC;MACrE;QAGF,SAAQ,KAAK,yEAAyE;AAG1F,YAAQ,GAAG,MAAM,SAAS,CAAC,EACnB,kBAAkB,CAAC,EACX,OAAO;KACH,SAAS,MAAM,UAAU,MAAM;KAC/B,mBAAmB,MAAM,UAAU,MAAM;KACzC,YAAY;KACF;KACb,EACJ,EAAE,EAAE,kBAAkB,oBAAoB,CAAC,EACnD,CAAC,CAAC;;AAEX,UAAO,OAAO,KAAK,MAAM,MAAM,CAC3B;IACI,KAAK;IACL,WAAW,CAAC,oBAAoB,mBAAmB;IACnD,YAAY,CAAC,0BAA0B;IAC1C,EACD;IACI,KAAK;IACL,WAAW;KAAC;KAAoB;KAAoB;KAAsB;IAC1E,OAAO,CAAC,UAAU;IAClB,eAAe,EAAE;IACjB,YAAY,CAAC,WAAW;IAC3B,CACJ,CAAC,IAAI;;;;;;AAMV,gBAAY,UAAU,4BAA4B,WAAY;GAC1D,IAAI,MAAM,KAAK,KAAK;AACpB,OAAI,QAAQ,OACR,QAAO;AAEX,UAAO,OAAO,IAAI,KAAK;;;;;;;AAO3B,gBAAY,UAAU,yBAAyB,SAAU,SAAS;AAC9D,QAAK,GAAG,UAAU,UAAU,QAAQ,EAAE;IAClC,IAAI,WAAW,MAAM,UAAU,QAAQ;IACvC,IAAI,UAAU,KAAK,KAAK,oBAAoB;AAC5C,QAAI,QACA,QAAO;;AAGf,UAAO,KAAK,KAAK;;AAErB,SAAOA;GACT,WAAW,QAAQ;AACrB,SAAQ,cAAc"}

package/dist/cjs/node_modules/samlify/build/src/metadata-sp.cjs ADDED Viewed

@@ -0,0 +1,217 @@
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+const require_utility$1 = require('./utility.cjs');
+const require_urn$1 = require('./urn.cjs');
+const require_metadata$1 = require('./metadata.cjs');
+const require_libsaml$1 = require('./libsaml.cjs');
+const require_xml$1 = require('../../../xml/lib/xml.cjs');
+//#region ../../node_modules/samlify/build/src/metadata-sp.js
+var require_metadata_sp = /* @__PURE__ */ require_rolldown_runtime.__commonJS({ "../../node_modules/samlify/build/src/metadata-sp.js": ((exports) => {
+	var __extends = exports && exports.__extends || (function() {
+		var extendStatics = function(d, b) {
+			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
+				d$1.__proto__ = b$1;
+			} || function(d$1, b$1) {
+				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
+			};
+			return extendStatics(d, b);
+		};
+		return function(d, b) {
+			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+			extendStatics(d, b);
+			function __() {
+				this.constructor = d;
+			}
+			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+		};
+	})();
+	var __values = exports && exports.__values || function(o) {
+		var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+		if (m) return m.call(o);
+		if (o && typeof o.length === "number") return { next: function() {
+			if (o && i >= o.length) o = void 0;
+			return {
+				value: o && o[i++],
+				done: !o
+			};
+		} };
+		throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+	};
+	var __importDefault = exports && exports.__importDefault || function(mod) {
+		return mod && mod.__esModule ? mod : { "default": mod };
+	};
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.SpMetadata = void 0;
+	/**
+	* @file metadata-sp.ts
+	* @author tngan
+	* @desc  Metadata of service provider
+	*/
+	var metadata_1 = __importDefault(require_metadata$1.default);
+	var urn_1 = require_urn$1.default;
+	var libsaml_1 = __importDefault(require_libsaml$1.default);
+	var utility_1 = require_utility$1.default;
+	var xml_1 = __importDefault(require_xml$1.default);
+	function default_1(meta) {
+		return new SpMetadata(meta);
+	}
+	exports.default = default_1;
+	/**
+	* @desc SP Metadata is for creating Service Provider, provides a set of API to manage the actions in SP.
+	*/
+	var SpMetadata = function(_super) {
+		var e_1, e_2;
+		__extends(SpMetadata$1, _super);
+		/**
+		* @param  {object/string} meta (either xml string or configuration in object)
+		* @return {object} prototypes including public functions
+		*/
+		function SpMetadata$1(meta) {
+			if (!((0, utility_1.isString)(meta) || meta instanceof Buffer)) {
+				var _a = meta, _b = _a.elementsOrder, elementsOrder = _b === void 0 ? urn_1.elementsOrder.default : _b, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _c = _a.authnRequestsSigned, authnRequestsSigned = _c === void 0 ? false : _c, _d = _a.wantAssertionsSigned, wantAssertionsSigned = _d === void 0 ? false : _d, _e = _a.wantMessageSigned, wantMessageSigned = _e === void 0 ? false : _e, signatureConfig = _a.signatureConfig, _f = _a.nameIDFormat, nameIDFormat = _f === void 0 ? [] : _f, _g = _a.singleLogoutService, singleLogoutService = _g === void 0 ? [] : _g, _h = _a.assertionConsumerService, assertionConsumerService = _h === void 0 ? [] : _h;
+				var descriptors_1 = {
+					KeyDescriptor: [],
+					NameIDFormat: [],
+					SingleLogoutService: [],
+					AssertionConsumerService: [],
+					AttributeConsumingService: []
+				};
+				var SPSSODescriptor_1 = [{ _attr: {
+					AuthnRequestsSigned: String(authnRequestsSigned),
+					WantAssertionsSigned: String(wantAssertionsSigned),
+					protocolSupportEnumeration: urn_1.namespace.names.protocol
+				} }];
+				if (wantMessageSigned && signatureConfig === void 0) console.warn("Construct service provider - missing signatureConfig");
+				try {
+					for (var _j = __values((0, utility_1.castArrayOpt)(signingCert)), _k = _j.next(); !_k.done; _k = _j.next()) {
+						var cert = _k.value;
+						descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection("signing", cert).KeyDescriptor);
+					}
+				} catch (e_1_1) {
+					e_1 = { error: e_1_1 };
+				} finally {
+					try {
+						if (_k && !_k.done && (_a = _j.return)) _a.call(_j);
+					} finally {
+						if (e_1) throw e_1.error;
+					}
+				}
+				try {
+					for (var _l = __values((0, utility_1.castArrayOpt)(encryptCert)), _m = _l.next(); !_m.done; _m = _l.next()) {
+						var cert = _m.value;
+						descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection("encryption", cert).KeyDescriptor);
+					}
+				} catch (e_2_1) {
+					e_2 = { error: e_2_1 };
+				} finally {
+					try {
+						if (_m && !_m.done && (_b = _l.return)) _b.call(_l);
+					} finally {
+						if (e_2) throw e_2.error;
+					}
+				}
+				if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) nameIDFormat.forEach(function(f) {
+					return descriptors_1.NameIDFormat.push(f);
+				});
+				else descriptors_1.NameIDFormat.push(urn_1.namespace.format.emailAddress);
+				if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) singleLogoutService.forEach(function(a) {
+					var attr = {
+						Binding: a.Binding,
+						Location: a.Location
+					};
+					if (a.isDefault) attr.isDefault = true;
+					descriptors_1.SingleLogoutService.push([{ _attr: attr }]);
+				});
+				if ((0, utility_1.isNonEmptyArray)(assertionConsumerService)) {
+					var indexCount_1 = 0;
+					assertionConsumerService.forEach(function(a) {
+						var attr = {
+							index: String(indexCount_1++),
+							Binding: a.Binding,
+							Location: a.Location
+						};
+						if (a.isDefault) attr.isDefault = true;
+						descriptors_1.AssertionConsumerService.push([{ _attr: attr }]);
+					});
+				}
+				elementsOrder.filter(function(name) {
+					return (0, utility_1.isNonEmptyArray)(descriptors_1[name]);
+				}).forEach(function(name) {
+					descriptors_1[name].forEach(function(e) {
+						var _a$1;
+						return SPSSODescriptor_1.push((_a$1 = {}, _a$1[name] = e, _a$1));
+					});
+				});
+				meta = (0, xml_1.default)([{ EntityDescriptor: [{ _attr: {
+					entityID,
+					"xmlns": urn_1.namespace.names.metadata,
+					"xmlns:assertion": urn_1.namespace.names.assertion,
+					"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#"
+				} }, { SPSSODescriptor: SPSSODescriptor_1 }] }]);
+			}
+			return _super.call(this, meta, [{
+				key: "spSSODescriptor",
+				localPath: ["EntityDescriptor", "SPSSODescriptor"],
+				attributes: ["WantAssertionsSigned", "AuthnRequestsSigned"]
+			}, {
+				key: "assertionConsumerService",
+				localPath: [
+					"EntityDescriptor",
+					"SPSSODescriptor",
+					"AssertionConsumerService"
+				],
+				attributes: [
+					"Binding",
+					"Location",
+					"isDefault",
+					"index"
+				]
+			}]) || this;
+		}
+		/**
+		* @desc Get the preference whether it wants a signed assertion response
+		* @return {boolean} Wantassertionssigned
+		*/
+		SpMetadata$1.prototype.isWantAssertionsSigned = function() {
+			return this.meta.spSSODescriptor.wantAssertionsSigned === "true";
+		};
+		/**
+		* @desc Get the preference whether it signs request
+		* @return {boolean} Authnrequestssigned
+		*/
+		SpMetadata$1.prototype.isAuthnRequestSigned = function() {
+			return this.meta.spSSODescriptor.authnRequestsSigned === "true";
+		};
+		/**
+		* @desc Get the entity endpoint for assertion consumer service
+		* @param  {string} binding         protocol binding (e.g. redirect, post)
+		* @return {string/[string]} URL of endpoint(s)
+		*/
+		SpMetadata$1.prototype.getAssertionConsumerService = function(binding) {
+			if ((0, utility_1.isString)(binding)) {
+				var location_1;
+				var bindName_1 = urn_1.namespace.binding[binding];
+				if ((0, utility_1.isNonEmptyArray)(this.meta.assertionConsumerService)) this.meta.assertionConsumerService.forEach(function(obj) {
+					if (obj.binding === bindName_1) {
+						location_1 = obj.location;
+						return;
+					}
+				});
+				else if (this.meta.assertionConsumerService.binding === bindName_1) location_1 = this.meta.assertionConsumerService.location;
+				return location_1;
+			}
+			return this.meta.assertionConsumerService;
+		};
+		return SpMetadata$1;
+	}(metadata_1.default);
+	exports.SpMetadata = SpMetadata;
+}) });
+//#endregion
+Object.defineProperty(exports, 'default', {
+  enumerable: true,
+  get: function () {
+    return require_metadata_sp();
+  }
+});
+//# sourceMappingURL=metadata-sp.cjs.map

package/dist/cjs/node_modules/samlify/build/src/metadata-sp.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"metadata-sp.cjs","names":["b","SpMetadata","_a"],"sources":["../../../../../../../../node_modules/samlify/build/src/metadata-sp.js"],"sourcesContent":["\"use strict\";\nvar __extends = (this && this.__extends) || (function () {\n var extendStatics = function (d, b) {\n extendStatics = Object.setPrototypeOf ||\n ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\n function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\n return extendStatics(d, b);\n };\n return function (d, b) {\n if (typeof b !== \"function\" && b !== null)\n throw new TypeError(\"Class extends value \" + String(b) + \" is not a constructor or null\");\n extendStatics(d, b);\n function __() { this.constructor = d; }\n d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\n };\n})();\nvar __values = (this && this.__values) || function(o) {\n var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n if (m) return m.call(o);\n if (o && typeof o.length === \"number\") return {\n next: function () {\n if (o && i >= o.length) o = void 0;\n return { value: o && o[i++], done: !o };\n }\n };\n throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.SpMetadata = void 0;\n/**\n* @file metadata-sp.ts\n* @author tngan\n* @desc Metadata of service provider\n*/\nvar metadata_1 = __importDefault(require(\"./metadata\"));\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = require(\"./utility\");\nvar xml_1 = __importDefault(require(\"xml\"));\n/*\n * @desc interface function\n */\nfunction default_1(meta) {\n return new SpMetadata(meta);\n}\nexports.default = default_1;\n/**\n* @desc SP Metadata is for creating Service Provider, provides a set of API to manage the actions in SP.\n*/\nvar SpMetadata = /** @class */ (function (_super) {\n var e_1, _a, e_2, _b;\n __extends(SpMetadata, _super);\n /**\n * @param {object/string} meta (either xml string or configuration in object)\n * @return {object} prototypes including public functions\n */\n function SpMetadata(meta) {\n var isFile = (0, utility_1.isString)(meta) || meta instanceof Buffer;\n // use object configuration instead of importing metadata file directly\n if (!isFile) {\n var _a = meta, _b = _a.elementsOrder, elementsOrder = _b === void 0 ? urn_1.elementsOrder.default : _b, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _c = _a.authnRequestsSigned, authnRequestsSigned = _c === void 0 ? false : _c, _d = _a.wantAssertionsSigned, wantAssertionsSigned = _d === void 0 ? false : _d, _e = _a.wantMessageSigned, wantMessageSigned = _e === void 0 ? false : _e, signatureConfig = _a.signatureConfig, _f = _a.nameIDFormat, nameIDFormat = _f === void 0 ? [] : _f, _g = _a.singleLogoutService, singleLogoutService = _g === void 0 ? [] : _g, _h = _a.assertionConsumerService, assertionConsumerService = _h === void 0 ? [] : _h;\n var descriptors_1 = {\n KeyDescriptor: [],\n NameIDFormat: [],\n SingleLogoutService: [],\n AssertionConsumerService: [],\n AttributeConsumingService: [],\n };\n var SPSSODescriptor_1 = [{\n _attr: {\n AuthnRequestsSigned: String(authnRequestsSigned),\n WantAssertionsSigned: String(wantAssertionsSigned),\n protocolSupportEnumeration: urn_1.namespace.names.protocol,\n },\n }];\n if (wantMessageSigned && signatureConfig === undefined) {\n console.warn('Construct service provider - missing signatureConfig');\n }\n try {\n for (var _j = __values((0, utility_1.castArrayOpt)(signingCert)), _k = _j.next(); !_k.done; _k = _j.next()) {\n var cert = _k.value;\n descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection('signing', cert).KeyDescriptor);\n }\n }\n catch (e_1_1) { e_1 = { error: e_1_1 }; }\n finally {\n try {\n if (_k && !_k.done && (_a = _j.return)) _a.call(_j);\n }\n finally { if (e_1) throw e_1.error; }\n }\n try {\n for (var _l = __values((0, utility_1.castArrayOpt)(encryptCert)), _m = _l.next(); !_m.done; _m = _l.next()) {\n var cert = _m.value;\n descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection('encryption', cert).KeyDescriptor);\n }\n }\n catch (e_2_1) { e_2 = { error: e_2_1 }; }\n finally {\n try {\n if (_m && !_m.done && (_b = _l.return)) _b.call(_l);\n }\n finally { if (e_2) throw e_2.error; }\n }\n if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) {\n nameIDFormat.forEach(function (f) { return descriptors_1.NameIDFormat.push(f); });\n }\n else {\n // default value\n descriptors_1.NameIDFormat.push(urn_1.namespace.format.emailAddress);\n }\n if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) {\n singleLogoutService.forEach(function (a) {\n var attr = {\n Binding: a.Binding,\n Location: a.Location,\n };\n if (a.isDefault) {\n attr.isDefault = true;\n }\n descriptors_1.SingleLogoutService.push([{ _attr: attr }]);\n });\n }\n if ((0, utility_1.isNonEmptyArray)(assertionConsumerService)) {\n var indexCount_1 = 0;\n assertionConsumerService.forEach(function (a) {\n var attr = {\n index: String(indexCount_1++),\n Binding: a.Binding,\n Location: a.Location,\n };\n if (a.isDefault) {\n attr.isDefault = true;\n }\n descriptors_1.AssertionConsumerService.push([{ _attr: attr }]);\n });\n }\n else {\n // console.warn('Missing endpoint of AssertionConsumerService');\n }\n // handle element order\n var existedElements = elementsOrder.filter(function (name) { return (0, utility_1.isNonEmptyArray)(descriptors_1[name]); });\n existedElements.forEach(function (name) {\n descriptors_1[name].forEach(function (e) {\n var _a;\n return SPSSODescriptor_1.push((_a = {}, _a[name] = e, _a));\n });\n });\n // Re-assign the meta reference as a XML string|Buffer for use with the parent constructor\n meta = (0, xml_1.default)([{\n EntityDescriptor: [{\n _attr: {\n entityID: entityID,\n 'xmlns': urn_1.namespace.names.metadata,\n 'xmlns:assertion': urn_1.namespace.names.assertion,\n 'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n },\n }, { SPSSODescriptor: SPSSODescriptor_1 }],\n }]);\n }\n // Use the re-assigned meta object reference here\n return _super.call(this, meta, [\n {\n key: 'spSSODescriptor',\n localPath: ['EntityDescriptor', 'SPSSODescriptor'],\n attributes: ['WantAssertionsSigned', 'AuthnRequestsSigned'],\n },\n {\n key: 'assertionConsumerService',\n localPath: ['EntityDescriptor', 'SPSSODescriptor', 'AssertionConsumerService'],\n attributes: ['Binding', 'Location', 'isDefault', 'index'],\n }\n ]) || this;\n }\n /**\n * @desc Get the preference whether it wants a signed assertion response\n * @return {boolean} Wantassertionssigned\n */\n SpMetadata.prototype.isWantAssertionsSigned = function () {\n return this.meta.spSSODescriptor.wantAssertionsSigned === 'true';\n };\n /**\n * @desc Get the preference whether it signs request\n * @return {boolean} Authnrequestssigned\n */\n SpMetadata.prototype.isAuthnRequestSigned = function () {\n return this.meta.spSSODescriptor.authnRequestsSigned === 'true';\n };\n /**\n * @desc Get the entity endpoint for assertion consumer service\n * @param {string} binding protocol binding (e.g. redirect, post)\n * @return {string/[string]} URL of endpoint(s)\n */\n SpMetadata.prototype.getAssertionConsumerService = function (binding) {\n if ((0, utility_1.isString)(binding)) {\n var location_1;\n var bindName_1 = urn_1.namespace.binding[binding];\n if ((0, utility_1.isNonEmptyArray)(this.meta.assertionConsumerService)) {\n this.meta.assertionConsumerService.forEach(function (obj) {\n if (obj.binding === bindName_1) {\n location_1 = obj.location;\n return;\n }\n });\n }\n else {\n if (this.meta.assertionConsumerService.binding === bindName_1) {\n location_1 = this.meta.assertionConsumerService.location;\n }\n }\n return location_1;\n }\n return this.meta.assertionConsumerService;\n };\n return SpMetadata;\n}(metadata_1.default));\nexports.SpMetadata = SpMetadata;\n//# sourceMappingURL=metadata-sp.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;CACA,IAAI,+BAA0B,cAAe,WAAY;EACrD,IAAI,gBAAgB,SAAU,GAAG,GAAG;AAChC,mBAAgB,OAAO,kBAClB,EAAE,WAAW,EAAE,EAAE,YAAY,SAAS,SAAU,KAAG,KAAG;AAAE,QAAE,YAAYA;QACvE,SAAU,KAAG,KAAG;AAAE,SAAK,IAAI,KAAKA,IAAG,KAAI,OAAO,UAAU,eAAe,KAAKA,KAAG,EAAE,CAAE,KAAE,KAAKA,IAAE;;AAChG,UAAO,cAAc,GAAG,EAAE;;AAE9B,SAAO,SAAU,GAAG,GAAG;AACnB,OAAI,OAAO,MAAM,cAAc,MAAM,KACjC,OAAM,IAAI,UAAU,yBAAyB,OAAO,EAAE,GAAG,gCAAgC;AAC7F,iBAAc,GAAG,EAAE;GACnB,SAAS,KAAK;AAAE,SAAK,cAAc;;AACnC,KAAE,YAAY,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI,GAAG,YAAY,EAAE,WAAW,IAAI,IAAI;;KAEvF;CACJ,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,aAAa,KAAK;;;;;;CAM1B,IAAI,aAAa,2CAAsC;CACvD,IAAI;CACJ,IAAI,YAAY,0CAAqC;CACrD,IAAI;CACJ,IAAI,QAAQ,sCAA+B;CAI3C,SAAS,UAAU,MAAM;AACrB,SAAO,IAAI,WAAW,KAAK;;AAE/B,SAAQ,UAAU;;;;CAIlB,IAAI,aAA4B,SAAU,QAAQ;EAC9C,IAAI,KAAS;AACb,YAAUC,cAAY,OAAO;;;;;EAK7B,SAASA,aAAW,MAAM;AAGtB,OAAI,GAFU,GAAG,UAAU,UAAU,KAAK,IAAI,gBAAgB,SAEjD;IACT,IAAI,KAAK,MAAM,KAAK,GAAG,eAAe,gBAAgB,OAAO,KAAK,IAAI,MAAM,cAAc,UAAU,IAAI,WAAW,GAAG,UAAU,cAAc,GAAG,aAAa,cAAc,GAAG,aAAa,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,sBAAsB,uBAAuB,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,mBAAmB,oBAAoB,OAAO,KAAK,IAAI,QAAQ,IAAI,kBAAkB,GAAG,iBAAiB,KAAK,GAAG,cAAc,eAAe,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,0BAA0B,2BAA2B,OAAO,KAAK,IAAI,EAAE,GAAG;IACzqB,IAAI,gBAAgB;KAChB,eAAe,EAAE;KACjB,cAAc,EAAE;KAChB,qBAAqB,EAAE;KACvB,0BAA0B,EAAE;KAC5B,2BAA2B,EAAE;KAChC;IACD,IAAI,oBAAoB,CAAC,EACjB,OAAO;KACH,qBAAqB,OAAO,oBAAoB;KAChD,sBAAsB,OAAO,qBAAqB;KAClD,4BAA4B,MAAM,UAAU,MAAM;KACrD,EACJ,CAAC;AACN,QAAI,qBAAqB,oBAAoB,OACzC,SAAQ,KAAK,uDAAuD;AAExE,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,oBAAc,cAAc,KAAK,UAAU,QAAQ,iBAAiB,WAAW,KAAK,CAAC,cAAc;;aAGpG,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,oBAAc,cAAc,KAAK,UAAU,QAAQ,iBAAiB,cAAc,KAAK,CAAC,cAAc;;aAGvG,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,SAAK,GAAG,UAAU,iBAAiB,aAAa,CAC5C,cAAa,QAAQ,SAAU,GAAG;AAAE,YAAO,cAAc,aAAa,KAAK,EAAE;MAAI;QAIjF,eAAc,aAAa,KAAK,MAAM,UAAU,OAAO,aAAa;AAExE,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG;KACrC,IAAI,OAAO;MACP,SAAS,EAAE;MACX,UAAU,EAAE;MACf;AACD,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,mBAAc,oBAAoB,KAAK,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC;MAC3D;AAEN,SAAK,GAAG,UAAU,iBAAiB,yBAAyB,EAAE;KAC1D,IAAI,eAAe;AACnB,8BAAyB,QAAQ,SAAU,GAAG;MAC1C,IAAI,OAAO;OACP,OAAO,OAAO,eAAe;OAC7B,SAAS,EAAE;OACX,UAAU,EAAE;OACf;AACD,UAAI,EAAE,UACF,MAAK,YAAY;AAErB,oBAAc,yBAAyB,KAAK,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC;OAChE;;AAON,IADsB,cAAc,OAAO,SAAU,MAAM;AAAE,aAAQ,GAAG,UAAU,iBAAiB,cAAc,MAAM;MAAI,CAC3G,QAAQ,SAAU,MAAM;AACpC,mBAAc,MAAM,QAAQ,SAAU,GAAG;MACrC,IAAIC;AACJ,aAAO,kBAAkB,MAAM,OAAK,EAAE,EAAE,KAAG,QAAQ,GAAGA,MAAI;OAC5D;MACJ;AAEF,YAAQ,GAAG,MAAM,SAAS,CAAC,EACnB,kBAAkB,CAAC,EACX,OAAO;KACO;KACV,SAAS,MAAM,UAAU,MAAM;KAC/B,mBAAmB,MAAM,UAAU,MAAM;KACzC,YAAY;KACf,EACJ,EAAE,EAAE,iBAAiB,mBAAmB,CAAC,EACjD,CAAC,CAAC;;AAGX,UAAO,OAAO,KAAK,MAAM,MAAM,CAC3B;IACI,KAAK;IACL,WAAW,CAAC,oBAAoB,kBAAkB;IAClD,YAAY,CAAC,wBAAwB,sBAAsB;IAC9D,EACD;IACI,KAAK;IACL,WAAW;KAAC;KAAoB;KAAmB;KAA2B;IAC9E,YAAY;KAAC;KAAW;KAAY;KAAa;KAAQ;IAC5D,CACJ,CAAC,IAAI;;;;;;AAMV,eAAW,UAAU,yBAAyB,WAAY;AACtD,UAAO,KAAK,KAAK,gBAAgB,yBAAyB;;;;;;AAM9D,eAAW,UAAU,uBAAuB,WAAY;AACpD,UAAO,KAAK,KAAK,gBAAgB,wBAAwB;;;;;;;AAO7D,eAAW,UAAU,8BAA8B,SAAU,SAAS;AAClE,QAAK,GAAG,UAAU,UAAU,QAAQ,EAAE;IAClC,IAAI;IACJ,IAAI,aAAa,MAAM,UAAU,QAAQ;AACzC,SAAK,GAAG,UAAU,iBAAiB,KAAK,KAAK,yBAAyB,CAClE,MAAK,KAAK,yBAAyB,QAAQ,SAAU,KAAK;AACtD,SAAI,IAAI,YAAY,YAAY;AAC5B,mBAAa,IAAI;AACjB;;MAEN;aAGE,KAAK,KAAK,yBAAyB,YAAY,WAC/C,cAAa,KAAK,KAAK,yBAAyB;AAGxD,WAAO;;AAEX,UAAO,KAAK,KAAK;;AAErB,SAAOD;GACT,WAAW,QAAQ;AACrB,SAAQ,aAAa"}