@intlayer/backend 7.1.4 → 7.1.5

package/dist/esm/node_modules/samlify/build/src/libsaml.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"libsaml.mjs","names":["signatureNode"],"sources":["../../../../../../../../node_modules/samlify/build/src/libsaml.js"],"sourcesContent":["\"use strict\";\n/**\n* @file SamlLib.js\n* @author tngan\n* @desc  A simple library including some common functions\n*/\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    var desc = Object.getOwnPropertyDescriptor(m, k);\n    if (!desc || (\"get\" in desc ? !m.__esModule : desc.writable || desc.configurable)) {\n      desc = { enumerable: true, get: function() { return m[k]; } };\n    }\n    Object.defineProperty(o, k2, desc);\n}) : (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n    Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n    o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || function (mod) {\n    if (mod && mod.__esModule) return mod;\n    var result = {};\n    if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\n    __setModuleDefault(result, mod);\n    return result;\n};\nvar __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nvar __generator = (this && this.__generator) || function (thisArg, body) {\n    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\n    return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\n    function verb(n) { return function (v) { return step([n, v]); }; }\n    function step(op) {\n        if (f) throw new TypeError(\"Generator is already executing.\");\n        while (_) try {\n            if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\n            if (y = 0, t) op = [op[0] & 2, t.value];\n            switch (op[0]) {\n                case 0: case 1: t = op; break;\n                case 4: _.label++; return { value: op[1], done: false };\n                case 5: _.label++; y = op[1]; op = [0]; continue;\n                case 7: op = _.ops.pop(); _.trys.pop(); continue;\n                default:\n                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\n                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\n                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\n                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\n                    if (t[2]) _.ops.pop();\n                    _.trys.pop(); continue;\n            }\n            op = body.call(thisArg, _);\n        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\n        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\n    }\n};\nvar __values = (this && this.__values) || function(o) {\n    var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n    if (m) return m.call(o);\n    if (o && typeof o.length === \"number\") return {\n        next: function () {\n            if (o && i >= o.length) o = void 0;\n            return { value: o && o[i++], done: !o };\n        }\n    };\n    throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n    return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nvar utility_1 = __importStar(require(\"./utility\"));\nvar urn_1 = require(\"./urn\");\nvar xpath_1 = require(\"xpath\");\nvar node_rsa_1 = __importDefault(require(\"node-rsa\"));\nvar xml_crypto_1 = require(\"xml-crypto\");\nvar xmlenc = __importStar(require(\"@authenio/xml-encryption\"));\nvar camelcase_1 = __importDefault(require(\"camelcase\"));\nvar api_1 = require(\"./api\");\nvar xml_escape_1 = __importDefault(require(\"xml-escape\"));\nvar fs = __importStar(require(\"fs\"));\nvar xmldom_1 = require(\"@xmldom/xmldom\");\nvar signatureAlgorithms = urn_1.algorithms.signature;\nvar digestAlgorithms = urn_1.algorithms.digest;\nvar certUse = urn_1.wording.certUse;\nvar urlParams = urn_1.wording.urlParams;\nvar libSaml = function () {\n    /**\n    * @desc helper function to get back the query param for redirect binding for SLO/SSO\n    * @type {string}\n    */\n    function getQueryParamByType(type) {\n        if ([urlParams.logoutRequest, urlParams.samlRequest].indexOf(type) !== -1) {\n            return 'SAMLRequest';\n        }\n        if ([urlParams.logoutResponse, urlParams.samlResponse].indexOf(type) !== -1) {\n            return 'SAMLResponse';\n        }\n        throw new Error('ERR_UNDEFINED_QUERY_PARAMS');\n    }\n    /**\n     *\n     */\n    var nrsaAliasMapping = {\n        'http://www.w3.org/2000/09/xmldsig#rsa-sha1': 'pkcs1-sha1',\n        'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': 'pkcs1-sha256',\n        'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': 'pkcs1-sha512',\n    };\n    /**\n    * @desc Default login request template\n    * @type {LoginRequestTemplate}\n    */\n    var defaultLoginRequestTemplate = {\n        context: '<samlp:AuthnRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" ProtocolBinding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" AssertionConsumerServiceURL=\"{AssertionConsumerServiceURL}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:NameIDPolicy Format=\"{NameIDFormat}\" AllowCreate=\"{AllowCreate}\"/></samlp:AuthnRequest>',\n    };\n    /**\n    * @desc Default logout request template\n    * @type {LogoutRequestTemplate}\n    */\n    var defaultLogoutRequestTemplate = {\n        context: '<samlp:LogoutRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\"><saml:Issuer>{Issuer}</saml:Issuer><saml:NameID Format=\"{NameIDFormat}\">{NameID}</saml:NameID></samlp:LogoutRequest>',\n    };\n    /**\n    * @desc Default AttributeStatement template\n    * @type {AttributeStatementTemplate}\n    */\n    var defaultAttributeStatementTemplate = {\n        context: '<saml:AttributeStatement>{Attributes}</saml:AttributeStatement>',\n    };\n    /**\n    * @desc Default Attribute template\n    * @type {AttributeTemplate}\n    */\n    var defaultAttributeTemplate = {\n        context: '<saml:Attribute Name=\"{Name}\" NameFormat=\"{NameFormat}\"><saml:AttributeValue xmlns:xs=\"{ValueXmlnsXs}\" xmlns:xsi=\"{ValueXmlnsXsi}\" xsi:type=\"{ValueXsiType}\">{Value}</saml:AttributeValue></saml:Attribute>',\n    };\n    /**\n    * @desc Default login response template\n    * @type {LoginResponseTemplate}\n    */\n    var defaultLoginResponseTemplate = {\n        context: '<samlp:Response xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" InResponseTo=\"{InResponseTo}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:Status><samlp:StatusCode Value=\"{StatusCode}\"/></samlp:Status><saml:Assertion xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{AssertionID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\"><saml:Issuer>{Issuer}</saml:Issuer><saml:Subject><saml:NameID Format=\"{NameIDFormat}\">{NameID}</saml:NameID><saml:SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\"><saml:SubjectConfirmationData NotOnOrAfter=\"{SubjectConfirmationDataNotOnOrAfter}\" Recipient=\"{SubjectRecipient}\" InResponseTo=\"{InResponseTo}\"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore=\"{ConditionsNotBefore}\" NotOnOrAfter=\"{ConditionsNotOnOrAfter}\"><saml:AudienceRestriction><saml:Audience>{Audience}</saml:Audience></saml:AudienceRestriction></saml:Conditions>{AuthnStatement}{AttributeStatement}</saml:Assertion></samlp:Response>',\n        attributes: [],\n        additionalTemplates: {\n            'attributeStatementTemplate': defaultAttributeStatementTemplate,\n            'attributeTemplate': defaultAttributeTemplate\n        }\n    };\n    /**\n    * @desc Default logout response template\n    * @type {LogoutResponseTemplate}\n    */\n    var defaultLogoutResponseTemplate = {\n        context: '<samlp:LogoutResponse xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"{ID}\" Version=\"2.0\" IssueInstant=\"{IssueInstant}\" Destination=\"{Destination}\" InResponseTo=\"{InResponseTo}\"><saml:Issuer>{Issuer}</saml:Issuer><samlp:Status><samlp:StatusCode Value=\"{StatusCode}\"/></samlp:Status></samlp:LogoutResponse>',\n    };\n    /**\n    * @private\n    * @desc Get the signing scheme alias by signature algorithms, used by the node-rsa module\n    * @param {string} sigAlg    signature algorithm\n    * @return {string/null} signing algorithm short-hand for the module node-rsa\n    */\n    function getSigningScheme(sigAlg) {\n        if (sigAlg) {\n            var algAlias = nrsaAliasMapping[sigAlg];\n            if (!(algAlias === undefined)) {\n                return algAlias;\n            }\n        }\n        return nrsaAliasMapping[signatureAlgorithms.RSA_SHA1];\n    }\n    /**\n    * @private\n    * @desc Get the digest algorithms by signature algorithms\n    * @param {string} sigAlg    signature algorithm\n    * @return {string/undefined} digest algorithm\n    */\n    function getDigestMethod(sigAlg) {\n        return digestAlgorithms[sigAlg];\n    }\n    /**\n    * @public\n    * @desc Create XPath\n    * @param  {string/object} local     parameters to create XPath\n    * @param  {boolean} isExtractAll    define whether returns whole content according to the XPath\n    * @return {string} xpath\n    */\n    function createXPath(local, isExtractAll) {\n        if ((0, utility_1.isString)(local)) {\n            return isExtractAll === true ? \"//*[local-name(.)='\" + local + \"']/text()\" : \"//*[local-name(.)='\" + local + \"']\";\n        }\n        return \"//*[local-name(.)='\" + local.name + \"']/@\" + local.attr;\n    }\n    /**\n     * @private\n     * @desc Tag normalization\n     * @param {string} prefix     prefix of the tag\n     * @param {content} content   normalize it to capitalized camel case\n     * @return {string}\n     */\n    function tagging(prefix, content) {\n        var camelContent = (0, camelcase_1.default)(content, { locale: 'en-us' });\n        return prefix + camelContent.charAt(0).toUpperCase() + camelContent.slice(1);\n    }\n    function escapeTag(replacement) {\n        return function (_match, quote) {\n            var text = (replacement === null || replacement === undefined) ? '' : String(replacement);\n            // not having a quote means this interpolation isn't for an attribute, and so does not need escaping\n            return quote ? \"\".concat(quote).concat((0, xml_escape_1.default)(text)) : text;\n        };\n    }\n    return {\n        createXPath: createXPath,\n        getQueryParamByType: getQueryParamByType,\n        defaultLoginRequestTemplate: defaultLoginRequestTemplate,\n        defaultLoginResponseTemplate: defaultLoginResponseTemplate,\n        defaultAttributeStatementTemplate: defaultAttributeStatementTemplate,\n        defaultAttributeTemplate: defaultAttributeTemplate,\n        defaultLogoutRequestTemplate: defaultLogoutRequestTemplate,\n        defaultLogoutResponseTemplate: defaultLogoutResponseTemplate,\n        /**\n        * @desc Replace the tag (e.g. {tag}) inside the raw XML\n        * @param  {string} rawXML      raw XML string used to do keyword replacement\n        * @param  {array} tagValues    tag values\n        * @return {string}\n        */\n        replaceTagsByValue: function (rawXML, tagValues) {\n            Object.keys(tagValues).forEach(function (t) {\n                rawXML = rawXML.replace(new RegExp(\"(\\\"?)\\\\{\".concat(t, \"\\\\}\"), 'g'), escapeTag(tagValues[t]));\n            });\n            return rawXML;\n        },\n        /**\n        * @desc Helper function to build the AttributeStatement tag\n        * @param  {LoginResponseAttribute} attributes    an array of attribute configuration\n        * @param  {AttributeTemplate} attributeTemplate    the attribute tag template to be used\n        * @param  {AttributeStatementTemplate} attributeStatementTemplate    the attributeStatement tag template to be used\n        * @return {string}\n        */\n        attributeStatementBuilder: function (attributes, attributeTemplate, attributeStatementTemplate) {\n            if (attributeTemplate === void 0) { attributeTemplate = defaultAttributeTemplate; }\n            if (attributeStatementTemplate === void 0) { attributeStatementTemplate = defaultAttributeStatementTemplate; }\n            var attr = attributes.map(function (_a) {\n                var name = _a.name, nameFormat = _a.nameFormat, valueTag = _a.valueTag, valueXsiType = _a.valueXsiType, valueXmlnsXs = _a.valueXmlnsXs, valueXmlnsXsi = _a.valueXmlnsXsi;\n                var defaultValueXmlnsXs = 'http://www.w3.org/2001/XMLSchema';\n                var defaultValueXmlnsXsi = 'http://www.w3.org/2001/XMLSchema-instance';\n                var attributeLine = attributeTemplate.context;\n                attributeLine = attributeLine.replace('{Name}', name);\n                attributeLine = attributeLine.replace('{NameFormat}', nameFormat);\n                attributeLine = attributeLine.replace('{ValueXmlnsXs}', valueXmlnsXs ? valueXmlnsXs : defaultValueXmlnsXs);\n                attributeLine = attributeLine.replace('{ValueXmlnsXsi}', valueXmlnsXsi ? valueXmlnsXsi : defaultValueXmlnsXsi);\n                attributeLine = attributeLine.replace('{ValueXsiType}', valueXsiType);\n                attributeLine = attributeLine.replace('{Value}', \"{\".concat(tagging('attr', valueTag), \"}\"));\n                return attributeLine;\n            }).join('');\n            return attributeStatementTemplate.context.replace('{Attributes}', attr);\n        },\n        /**\n        * @desc Construct the XML signature for POST binding\n        * @param  {string} rawSamlMessage      request/response xml string\n        * @param  {string} referenceTagXPath    reference uri\n        * @param  {string} privateKey           declares the private key\n        * @param  {string} passphrase           passphrase of the private key [optional]\n        * @param  {string|buffer} signingCert   signing certificate\n        * @param  {string} signatureAlgorithm   signature algorithm\n        * @param  {string[]} transformationAlgorithms   canonicalization and transformation Algorithms\n        * @return {string} base64 encoded string\n        */\n        constructSAMLSignature: function (opts) {\n            var rawSamlMessage = opts.rawSamlMessage, referenceTagXPath = opts.referenceTagXPath, privateKey = opts.privateKey, privateKeyPass = opts.privateKeyPass, _a = opts.signatureAlgorithm, signatureAlgorithm = _a === void 0 ? signatureAlgorithms.RSA_SHA256 : _a, _b = opts.transformationAlgorithms, transformationAlgorithms = _b === void 0 ? [\n                'http://www.w3.org/2000/09/xmldsig#enveloped-signature',\n                'http://www.w3.org/2001/10/xml-exc-c14n#',\n            ] : _b, signingCert = opts.signingCert, signatureConfig = opts.signatureConfig, _c = opts.isBase64Output, isBase64Output = _c === void 0 ? true : _c, _d = opts.isMessageSigned, isMessageSigned = _d === void 0 ? false : _d;\n            var sig = new xml_crypto_1.SignedXml();\n            // Add assertion sections as reference\n            var digestAlgorithm = getDigestMethod(signatureAlgorithm);\n            if (referenceTagXPath) {\n                sig.addReference({\n                    xpath: referenceTagXPath,\n                    transforms: transformationAlgorithms,\n                    digestAlgorithm: digestAlgorithm\n                });\n            }\n            if (isMessageSigned) {\n                sig.addReference({\n                    // reference to the root node\n                    xpath: '/*',\n                    transforms: transformationAlgorithms,\n                    digestAlgorithm: digestAlgorithm\n                });\n            }\n            sig.signatureAlgorithm = signatureAlgorithm;\n            sig.publicCert = this.getKeyInfo(signingCert, signatureConfig).getKey();\n            sig.getKeyInfoContent = this.getKeyInfo(signingCert, signatureConfig).getKeyInfo;\n            sig.privateKey = utility_1.default.readPrivateKey(privateKey, privateKeyPass, true);\n            sig.canonicalizationAlgorithm = 'http://www.w3.org/2001/10/xml-exc-c14n#';\n            if (signatureConfig) {\n                sig.computeSignature(rawSamlMessage, signatureConfig);\n            }\n            else {\n                sig.computeSignature(rawSamlMessage);\n            }\n            return isBase64Output !== false ? utility_1.default.base64Encode(sig.getSignedXml()) : sig.getSignedXml();\n        },\n        /**\n        * @desc Verify the XML signature\n        * @param  {string} xml xml\n        * @param  {SignatureVerifierOptions} opts cert declares the X509 certificate\n         * @return {[boolean, string | null]} - A tuple where:\n         *   - The first element is `true` if the signature is valid, `false` otherwise.\n         *   - The second element is the cryptographically authenticated assertion node as a string, or `null` if not found.\n         */\n        verifySignature: function (xml, opts) {\n            var e_1, _a;\n            var dom = (0, api_1.getContext)().dom;\n            var doc = dom.parseFromString(xml);\n            var docParser = new xmldom_1.DOMParser();\n            // In order to avoid the wrapping attack, we have changed to use absolute xpath instead of naively fetching the signature element\n            // message signature (logout response / saml response)\n            var messageSignatureXpath = \"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Signature']\";\n            // assertion signature (logout response / saml response)\n            var assertionSignatureXpath = \"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Assertion']/*[local-name(.)='Signature']\";\n            // check if there is a potential malicious wrapping signature\n            var wrappingElementsXPath = \"/*[contains(local-name(), 'Response')]/*[local-name(.)='Assertion']/*[local-name(.)='Subject']/*[local-name(.)='SubjectConfirmation']/*[local-name(.)='SubjectConfirmationData']//*[local-name(.)='Assertion' or local-name(.)='Signature']\";\n            // select the signature node\n            var selection = [];\n            var messageSignatureNode = (0, xpath_1.select)(messageSignatureXpath, doc);\n            var assertionSignatureNode = (0, xpath_1.select)(assertionSignatureXpath, doc);\n            var wrappingElementNode = (0, xpath_1.select)(wrappingElementsXPath, doc);\n            selection = selection.concat(messageSignatureNode);\n            selection = selection.concat(assertionSignatureNode);\n            // try to catch potential wrapping attack\n            if (wrappingElementNode.length !== 0) {\n                throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');\n            }\n            // guarantee to have a signature in saml response\n            if (selection.length === 0) {\n                return [false, null]; // we return false now\n            }\n            var _loop_1 = function (signatureNode) {\n                var sig = new xml_crypto_1.SignedXml();\n                var verified = false;\n                sig.signatureAlgorithm = opts.signatureAlgorithm;\n                if (!opts.keyFile && !opts.metadata) {\n                    throw new Error('ERR_UNDEFINED_SIGNATURE_VERIFIER_OPTIONS');\n                }\n                if (opts.keyFile) {\n                    sig.publicCert = fs.readFileSync(opts.keyFile);\n                }\n                if (opts.metadata) {\n                    var certificateNode = (0, xpath_1.select)(\".//*[local-name(.)='X509Certificate']\", signatureNode);\n                    // certificate in metadata\n                    var metadataCert = opts.metadata.getX509Certificate(certUse.signing);\n                    // flattens the nested array of Certificates from each KeyDescriptor\n                    if (Array.isArray(metadataCert)) {\n                        metadataCert = (0, utility_1.flattenDeep)(metadataCert);\n                    }\n                    else if (typeof metadataCert === 'string') {\n                        metadataCert = [metadataCert];\n                    }\n                    // normalise the certificate string\n                    metadataCert = metadataCert.map(utility_1.default.normalizeCerString);\n                    // no certificate in node  response nor metadata\n                    if (certificateNode.length === 0 && metadataCert.length === 0) {\n                        throw new Error('NO_SELECTED_CERTIFICATE');\n                    }\n                    // certificate node in response\n                    if (certificateNode.length !== 0) {\n                        var x509CertificateData = certificateNode[0].firstChild.data;\n                        var x509Certificate_1 = utility_1.default.normalizeCerString(x509CertificateData);\n                        if (metadataCert.length >= 1 &&\n                            !metadataCert.find(function (cert) { return cert.trim() === x509Certificate_1.trim(); })) {\n                            // keep this restriction for rolling certificate usage\n                            // to make sure the response certificate is one of those specified in metadata\n                            throw new Error('ERROR_UNMATCH_CERTIFICATE_DECLARATION_IN_METADATA');\n                        }\n                        sig.publicCert = this_1.getKeyInfo(x509Certificate_1).getKey();\n                    }\n                    else {\n                        // Select first one from metadata\n                        sig.publicCert = this_1.getKeyInfo(metadataCert[0]).getKey();\n                    }\n                }\n                sig.loadSignature(signatureNode);\n                verified = sig.checkSignature(doc.toString());\n                // immediately throw error when any one of the signature is failed to get verified\n                if (!verified) {\n                    return \"continue\";\n                    // throw new Error('ERR_FAILED_TO_VERIFY_SIGNATURE');\n                }\n                // Require there to be at least one reference that was signed\n                if (!(sig.getSignedReferences().length >= 1)) {\n                    throw new Error('NO_SIGNATURE_REFERENCES');\n                }\n                var signedVerifiedXML = sig.getSignedReferences()[0];\n                var rootNode = docParser.parseFromString(signedVerifiedXML, 'text/xml').documentElement;\n                // process the verified signature:\n                // case 1, rootSignedDoc is a response:\n                if (rootNode.localName === 'Response') {\n                    // try getting the Xml from the first assertion\n                    var assertions = (0, xpath_1.select)(\"./*[local-name()='Assertion']\", rootNode);\n                    var encryptedAssertions = (0, xpath_1.select)(\"./*[local-name()='EncryptedAssertion']\", rootNode);\n                    // now we can process the assertion as an assertion\n                    if (assertions.length === 1) {\n                        return { value: [true, assertions[0].toString()] };\n                    }\n                    else if (encryptedAssertions.length >= 1) {\n                        return { value: [true, rootNode.toString()] };\n                    }\n                    else {\n                        return { value: [true, null] };\n                    }\n                }\n                else if (rootNode.localName === 'Assertion') {\n                    return { value: [true, rootNode.toString()] };\n                }\n                else {\n                    return { value: [true, null] };\n                }\n            };\n            var this_1 = this;\n            try {\n                // need to refactor later on\n                for (var selection_1 = __values(selection), selection_1_1 = selection_1.next(); !selection_1_1.done; selection_1_1 = selection_1.next()) {\n                    var signatureNode = selection_1_1.value;\n                    var state_1 = _loop_1(signatureNode);\n                    if (typeof state_1 === \"object\")\n                        return state_1.value;\n                }\n            }\n            catch (e_1_1) { e_1 = { error: e_1_1 }; }\n            finally {\n                try {\n                    if (selection_1_1 && !selection_1_1.done && (_a = selection_1.return)) _a.call(selection_1);\n                }\n                finally { if (e_1) throw e_1.error; }\n            }\n            ;\n            return [false, null]; // we didn't verify anything, none of the signatures are valid\n            /*\n            // response must be signed, either entire document or assertion\n            // default we will take the assertion section under root\n            if (messageSignatureNode.length === 1) {\n              const node = select(\"/*[contains(local-name(), 'Response') or contains(local-name(), 'Request')]/*[local-name(.)='Assertion']\", doc);\n              if (node.length === 1) {\n                assertionNode = node[0].toString();\n              }\n            }\n      \n            if (assertionSignatureNode.length === 1) {\n              const verifiedAssertionInfo = extract(assertionSignatureNode[0].toString(), [{\n                key: 'refURI',\n                localPath: ['Signature', 'SignedInfo', 'Reference'],\n                attributes: ['URI']\n              }]);\n              // get the assertion supposed to be the one should be verified\n              const desiredAssertionInfo = extract(doc.toString(), [{\n                key: 'id',\n                localPath: ['~Response', 'Assertion'],\n                attributes: ['ID']\n              }]);\n              // 5.4.2 References\n              // SAML assertions and protocol messages MUST supply a value for the ID attribute on the root element of\n              // the assertion or protocol message being signed. The assertion’s or protocol message's root element may\n              // or may not be the root element of the actual XML document containing the signed assertion or protocol\n              // message (e.g., it might be contained within a SOAP envelope).\n              // Signatures MUST contain a single <ds:Reference> containing a same-document reference to the ID\n              // attribute value of the root element of the assertion or protocol message being signed. For example, if the\n              // ID attribute value is \"foo\", then the URI attribute in the <ds:Reference> element MUST be \"#foo\".\n              if (verifiedAssertionInfo.refURI !== `#${desiredAssertionInfo.id}`) {\n                throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');\n              }\n              const verifiedDoc = extract(doc.toString(), [{\n                key: 'assertion',\n                localPath: ['~Response', 'Assertion'],\n                attributes: [],\n                context: true\n              }]);\n              assertionNode = verifiedDoc.assertion.toString();\n            }\n      \n            return [verified, assertionNode];*/\n        },\n        /**\n        * @desc Helper function to create the key section in metadata (abstraction for signing and encrypt use)\n        * @param  {string} use          type of certificate (e.g. signing, encrypt)\n        * @param  {string} certString    declares the certificate String\n        * @return {object} object used in xml module\n        */\n        createKeySection: function (use, certString) {\n            var _a, _b, _c;\n            return _a = {},\n                _a['KeyDescriptor'] = [\n                    {\n                        _attr: { use: use },\n                    },\n                    (_b = {},\n                        _b['ds:KeyInfo'] = [\n                            {\n                                _attr: {\n                                    'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n                                },\n                            },\n                            (_c = {},\n                                _c['ds:X509Data'] = [{\n                                        'ds:X509Certificate': utility_1.default.normalizeCerString(certString),\n                                    }],\n                                _c),\n                        ],\n                        _b)\n                ],\n                _a;\n        },\n        /**\n        * @desc Constructs SAML message\n        * @param  {string} octetString               see \"Bindings for the OASIS Security Assertion Markup Language (SAML V2.0)\" P.17/46\n        * @param  {string} key                       declares the pem-formatted private key\n        * @param  {string} passphrase                passphrase of private key [optional]\n        * @param  {string} signingAlgorithm          signing algorithm\n        * @return {string} message signature\n        */\n        constructMessageSignature: function (octetString, key, passphrase, isBase64, signingAlgorithm) {\n            // Default returning base64 encoded signature\n            // Embed with node-rsa module\n            var decryptedKey = new node_rsa_1.default(utility_1.default.readPrivateKey(key, passphrase), undefined, {\n                signingScheme: getSigningScheme(signingAlgorithm),\n            });\n            var signature = decryptedKey.sign(octetString);\n            // Use private key to sign data\n            return isBase64 !== false ? signature.toString('base64') : signature;\n        },\n        /**\n        * @desc Verifies message signature\n        * @param  {Metadata} metadata                 metadata object of identity provider or service provider\n        * @param  {string} octetString                see \"Bindings for the OASIS Security Assertion Markup Language (SAML V2.0)\" P.17/46\n        * @param  {string} signature                  context of XML signature\n        * @param  {string} verifyAlgorithm            algorithm used to verify\n        * @return {boolean} verification result\n        */\n        verifyMessageSignature: function (metadata, octetString, signature, verifyAlgorithm) {\n            var signCert = metadata.getX509Certificate(certUse.signing);\n            var signingScheme = getSigningScheme(verifyAlgorithm);\n            var key = new node_rsa_1.default(utility_1.default.getPublicKeyPemFromCertificate(signCert), 'public', { signingScheme: signingScheme });\n            return key.verify(Buffer.from(octetString), Buffer.from(signature));\n        },\n        /**\n        * @desc Get the public key in string format\n        * @param  {string} x509Certificate certificate\n        * @return {string} public key\n        */\n        getKeyInfo: function (x509Certificate, signatureConfig) {\n            if (signatureConfig === void 0) { signatureConfig = {}; }\n            var prefix = signatureConfig.prefix ? \"\".concat(signatureConfig.prefix, \":\") : '';\n            return {\n                getKeyInfo: function () {\n                    return \"<\".concat(prefix, \"X509Data><\").concat(prefix, \"X509Certificate>\").concat(x509Certificate, \"</\").concat(prefix, \"X509Certificate></\").concat(prefix, \"X509Data>\");\n                },\n                getKey: function () {\n                    return utility_1.default.getPublicKeyPemFromCertificate(x509Certificate).toString();\n                },\n            };\n        },\n        /**\n        * @desc Encrypt the assertion section in Response\n        * @param  {Entity} sourceEntity             source entity\n        * @param  {Entity} targetEntity             target entity\n        * @param  {string} xml                      response in xml string format\n        * @return {Promise} a promise to resolve the finalized xml\n        */\n        encryptAssertion: function (sourceEntity, targetEntity, xml) {\n            // Implement encryption after signature if it has\n            return new Promise(function (resolve, reject) {\n                if (!xml) {\n                    return reject(new Error('ERR_UNDEFINED_ASSERTION'));\n                }\n                var sourceEntitySetting = sourceEntity.entitySetting;\n                var targetEntityMetadata = targetEntity.entityMeta;\n                var dom = (0, api_1.getContext)().dom;\n                var doc = dom.parseFromString(xml);\n                var assertions = (0, xpath_1.select)(\"//*[local-name(.)='Assertion']\", doc);\n                if (!Array.isArray(assertions) || assertions.length === 0) {\n                    throw new Error('ERR_NO_ASSERTION');\n                }\n                if (assertions.length > 1) {\n                    throw new Error('ERR_MULTIPLE_ASSERTION');\n                }\n                var rawAssertionNode = assertions[0];\n                // Perform encryption depends on the setting, default is false\n                if (sourceEntitySetting.isAssertionEncrypted) {\n                    var publicKeyPem = utility_1.default.getPublicKeyPemFromCertificate(targetEntityMetadata.getX509Certificate(certUse.encrypt));\n                    xmlenc.encrypt(rawAssertionNode.toString(), {\n                        // use xml-encryption module\n                        rsa_pub: Buffer.from(publicKeyPem),\n                        pem: Buffer.from(\"-----BEGIN CERTIFICATE-----\".concat(targetEntityMetadata.getX509Certificate(certUse.encrypt), \"-----END CERTIFICATE-----\")),\n                        encryptionAlgorithm: sourceEntitySetting.dataEncryptionAlgorithm,\n                        keyEncryptionAlgorithm: sourceEntitySetting.keyEncryptionAlgorithm,\n                    }, function (err, res) {\n                        if (err) {\n                            console.error(err);\n                            return reject(new Error('ERR_EXCEPTION_OF_ASSERTION_ENCRYPTION'));\n                        }\n                        if (!res) {\n                            return reject(new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION'));\n                        }\n                        var encAssertionPrefix = sourceEntitySetting.tagPrefix.encryptedAssertion;\n                        var encryptAssertionDoc = dom.parseFromString(\"<\".concat(encAssertionPrefix, \":EncryptedAssertion xmlns:\").concat(encAssertionPrefix, \"=\\\"\").concat(urn_1.namespace.names.assertion, \"\\\">\").concat(res, \"</\").concat(encAssertionPrefix, \":EncryptedAssertion>\"));\n                        doc.documentElement.replaceChild(encryptAssertionDoc.documentElement, rawAssertionNode);\n                        return resolve(utility_1.default.base64Encode(doc.toString()));\n                    });\n                }\n                else {\n                    return resolve(utility_1.default.base64Encode(xml)); // No need to do encryption\n                }\n            });\n        },\n        /**\n        * @desc Decrypt the assertion section in Response\n        * @param  {string} type             only accept SAMLResponse to proceed decryption\n        * @param  {Entity} here             this entity\n        * @param  {Entity} from             from the entity where the message is sent\n        * @param {string} entireXML         response in xml string format\n        * @return {function} a promise to get back the entire xml with decrypted assertion\n        */\n        decryptAssertion: function (here, entireXML) {\n            return new Promise(function (resolve, reject) {\n                // Implement decryption first then check the signature\n                if (!entireXML) {\n                    return reject(new Error('ERR_UNDEFINED_ASSERTION'));\n                }\n                // Perform encryption depends on the setting of where the message is sent, default is false\n                var hereSetting = here.entitySetting;\n                var dom = (0, api_1.getContext)().dom;\n                var doc = dom.parseFromString(entireXML);\n                var encryptedAssertions = (0, xpath_1.select)(\"/*[contains(local-name(), 'Response')]/*[local-name(.)='EncryptedAssertion']\", doc);\n                if (!Array.isArray(encryptedAssertions) || encryptedAssertions.length === 0) {\n                    throw new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION');\n                }\n                if (encryptedAssertions.length > 1) {\n                    throw new Error('ERR_MULTIPLE_ASSERTION');\n                }\n                var encAssertionNode = encryptedAssertions[0];\n                return xmlenc.decrypt(encAssertionNode.toString(), {\n                    key: utility_1.default.readPrivateKey(hereSetting.encPrivateKey, hereSetting.encPrivateKeyPass),\n                }, function (err, res) {\n                    if (err) {\n                        console.error(err);\n                        return reject(new Error('ERR_EXCEPTION_OF_ASSERTION_DECRYPTION'));\n                    }\n                    if (!res) {\n                        return reject(new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION'));\n                    }\n                    var rawAssertionDoc = dom.parseFromString(res);\n                    doc.documentElement.replaceChild(rawAssertionDoc.documentElement, encAssertionNode);\n                    return resolve([doc.toString(), res]);\n                });\n            });\n        },\n        /**\n         * @desc Check if the xml string is valid and bounded\n         */\n        isValidXml: function (input) {\n            return __awaiter(this, void 0, void 0, function () {\n                var validate, e_2;\n                return __generator(this, function (_a) {\n                    switch (_a.label) {\n                        case 0:\n                            validate = (0, api_1.getContext)().validate;\n                            /**\n                             * user can write a validate function that always returns\n                             * a resolved promise and skip the validator even in\n                             * production, user will take the responsibility if\n                             * they intend to skip the validation\n                             */\n                            if (!validate) {\n                                // otherwise, an error will be thrown\n                                return [2 /*return*/, Promise.reject('Your application is potentially vulnerable because no validation function found. Please read the documentation on how to setup the validator. (https://github.com/tngan/samlify#installation)')];\n                            }\n                            _a.label = 1;\n                        case 1:\n                            _a.trys.push([1, 3, , 4]);\n                            return [4 /*yield*/, validate(input)];\n                        case 2: return [2 /*return*/, _a.sent()];\n                        case 3:\n                            e_2 = _a.sent();\n                            throw e_2;\n                        case 4: return [2 /*return*/];\n                    }\n                });\n            });\n        },\n    };\n};\nexports.default = libSaml();\n//# sourceMappingURL=libsaml.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;CAMA,IAAI,qCAAgC,oBAAqB,OAAO,UAAU,SAAS,GAAG,GAAG,GAAG,IAAI;AAC5F,MAAI,OAAO,OAAW,MAAK;EAC3B,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE;AAChD,MAAI,CAAC,SAAS,SAAS,OAAO,CAAC,EAAE,aAAa,KAAK,YAAY,KAAK,cAClE,QAAO;GAAE,YAAY;GAAM,KAAK,WAAW;AAAE,WAAO,EAAE;;GAAO;AAE/D,SAAO,eAAe,GAAG,IAAI,KAAK;OAChC,SAAS,GAAG,GAAG,GAAG,IAAI;AACxB,MAAI,OAAO,OAAW,MAAK;AAC3B,IAAE,MAAM,EAAE;;CAEd,IAAI,wCAAmC,uBAAwB,OAAO,UAAU,SAAS,GAAG,GAAG;AAC3F,SAAO,eAAe,GAAG,WAAW;GAAE,YAAY;GAAM,OAAO;GAAG,CAAC;MAClE,SAAS,GAAG,GAAG;AAChB,IAAE,aAAa;;CAEnB,IAAI,kCAA6B,gBAAiB,SAAU,KAAK;AAC7D,MAAI,OAAO,IAAI,WAAY,QAAO;EAClC,IAAI,SAAS,EAAE;AACf,MAAI,OAAO,MAAM;QAAK,IAAI,KAAK,IAAK,KAAI,MAAM,aAAa,OAAO,UAAU,eAAe,KAAK,KAAK,EAAE,CAAE,iBAAgB,QAAQ,KAAK,EAAE;;AACxI,qBAAmB,QAAQ,IAAI;AAC/B,SAAO;;CAEX,IAAI,+BAA0B,aAAc,SAAU,SAAS,YAAY,GAAG,WAAW;EACrF,SAAS,MAAM,OAAO;AAAE,UAAO,iBAAiB,IAAI,QAAQ,IAAI,EAAE,SAAU,SAAS;AAAE,YAAQ,MAAM;KAAI;;AACzG,SAAO,KAAK,MAAM,IAAI,UAAU,SAAU,SAAS,QAAQ;GACvD,SAAS,UAAU,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,KAAK,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACtF,SAAS,SAAS,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,SAAS,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACzF,SAAS,KAAK,QAAQ;AAAE,WAAO,OAAO,QAAQ,OAAO,MAAM,GAAG,MAAM,OAAO,MAAM,CAAC,KAAK,WAAW,SAAS;;AAC3G,SAAM,YAAY,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC;IACvE;;CAEN,IAAI,iCAA4B,eAAgB,SAAU,SAAS,MAAM;EACrE,IAAI,IAAI;GAAE,OAAO;GAAG,MAAM,WAAW;AAAE,QAAI,EAAE,KAAK,EAAG,OAAM,EAAE;AAAI,WAAO,EAAE;;GAAO,MAAM,EAAE;GAAE,KAAK,EAAE;GAAE,EAAE,GAAG,GAAG,GAAG;AAC/G,SAAO,IAAI;GAAE,MAAM,KAAK,EAAE;GAAE,SAAS,KAAK,EAAE;GAAE,UAAU,KAAK,EAAE;GAAE,EAAE,OAAO,WAAW,eAAe,EAAE,OAAO,YAAY,WAAW;AAAE,UAAO;MAAU;EACvJ,SAAS,KAAK,GAAG;AAAE,UAAO,SAAU,GAAG;AAAE,WAAO,KAAK,CAAC,GAAG,EAAE,CAAC;;;EAC5D,SAAS,KAAK,IAAI;AACd,OAAI,EAAG,OAAM,IAAI,UAAU,kCAAkC;AAC7D,UAAO,EAAG,KAAI;AACV,QAAI,IAAI,GAAG,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,YAAY,GAAG,KAAK,EAAE,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,KAAM,QAAO;AAC3J,QAAI,IAAI,GAAG,EAAG,MAAK,CAAC,GAAG,KAAK,GAAG,EAAE,MAAM;AACvC,YAAQ,GAAG,IAAX;KACI,KAAK;KAAG,KAAK;AAAG,UAAI;AAAI;KACxB,KAAK;AAAG,QAAE;AAAS,aAAO;OAAE,OAAO,GAAG;OAAI,MAAM;OAAO;KACvD,KAAK;AAAG,QAAE;AAAS,UAAI,GAAG;AAAI,WAAK,CAAC,EAAE;AAAE;KACxC,KAAK;AAAG,WAAK,EAAE,IAAI,KAAK;AAAE,QAAE,KAAK,KAAK;AAAE;KACxC;AACI,UAAI,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,SAAS,QAAQ,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI;AAAE,WAAI;AAAG;;AACjG,UAAI,GAAG,OAAO,MAAM,CAAC,KAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,KAAM;AAAE,SAAE,QAAQ,GAAG;AAAI;;AAC9E,UAAI,GAAG,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,WAAI;AAAI;;AAC7D,UAAI,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,SAAE,IAAI,KAAK,GAAG;AAAE;;AAC3D,UAAI,EAAE,GAAI,GAAE,IAAI,KAAK;AACrB,QAAE,KAAK,KAAK;AAAE;;AAEtB,SAAK,KAAK,KAAK,SAAS,EAAE;YACrB,GAAG;AAAE,SAAK,CAAC,GAAG,EAAE;AAAE,QAAI;aAAa;AAAE,QAAI,IAAI;;AACtD,OAAI,GAAG,KAAK,EAAG,OAAM,GAAG;AAAI,UAAO;IAAE,OAAO,GAAG,KAAK,GAAG,KAAK,KAAK;IAAG,MAAM;IAAM;;;CAGxF,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;CAC7D,IAAI,YAAY,+BAAkC;CAClD,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa,kCAAoC;CACrD,IAAI;CACJ,IAAI,SAAS,6BAAiD;CAC9D,IAAI,cAAc,oCAAqC;CACvD,IAAI;CACJ,IAAI,eAAe,qCAAsC;CACzD,IAAI,KAAK,uBAAqB,KAAK,CAAC;CACpC,IAAI;CACJ,IAAI,sBAAsB,MAAM,WAAW;CAC3C,IAAI,mBAAmB,MAAM,WAAW;CACxC,IAAI,UAAU,MAAM,QAAQ;CAC5B,IAAI,YAAY,MAAM,QAAQ;CAC9B,IAAI,UAAU,WAAY;;;;;EAKtB,SAAS,oBAAoB,MAAM;AAC/B,OAAI,CAAC,UAAU,eAAe,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GACnE,QAAO;AAEX,OAAI,CAAC,UAAU,gBAAgB,UAAU,aAAa,CAAC,QAAQ,KAAK,KAAK,GACrE,QAAO;AAEX,SAAM,IAAI,MAAM,6BAA6B;;;;;EAKjD,IAAI,mBAAmB;GACnB,8CAA8C;GAC9C,qDAAqD;GACrD,qDAAqD;GACxD;;;;;EAKD,IAAI,8BAA8B,EAC9B,SAAS,keACZ;;;;;EAKD,IAAI,+BAA+B,EAC/B,SAAS,mVACZ;;;;;EAKD,IAAI,oCAAoC,EACpC,SAAS,mEACZ;;;;;EAKD,IAAI,2BAA2B,EAC3B,SAAS,yNACZ;;;;;EAKD,IAAI,+BAA+B;GAC/B,SAAS;GACT,YAAY,EAAE;GACd,qBAAqB;IACjB,8BAA8B;IAC9B,qBAAqB;IACxB;GACJ;;;;;EAKD,IAAI,gCAAgC,EAChC,SAAS,+XACZ;;;;;;;EAOD,SAAS,iBAAiB,QAAQ;AAC9B,OAAI,QAAQ;IACR,IAAI,WAAW,iBAAiB;AAChC,QAAI,EAAE,aAAa,QACf,QAAO;;AAGf,UAAO,iBAAiB,oBAAoB;;;;;;;;EAQhD,SAAS,gBAAgB,QAAQ;AAC7B,UAAO,iBAAiB;;;;;;;;;EAS5B,SAAS,YAAY,OAAO,cAAc;AACtC,QAAK,GAAG,UAAU,UAAU,MAAM,CAC9B,QAAO,iBAAiB,OAAO,wBAAwB,QAAQ,cAAc,wBAAwB,QAAQ;AAEjH,UAAO,wBAAwB,MAAM,OAAO,SAAS,MAAM;;;;;;;;;EAS/D,SAAS,QAAQ,QAAQ,SAAS;GAC9B,IAAI,gBAAgB,GAAG,YAAY,SAAS,SAAS,EAAE,QAAQ,SAAS,CAAC;AACzE,UAAO,SAAS,aAAa,OAAO,EAAE,CAAC,aAAa,GAAG,aAAa,MAAM,EAAE;;EAEhF,SAAS,UAAU,aAAa;AAC5B,UAAO,SAAU,QAAQ,OAAO;IAC5B,IAAI,OAAQ,gBAAgB,QAAQ,gBAAgB,SAAa,KAAK,OAAO,YAAY;AAEzF,WAAO,QAAQ,GAAG,OAAO,MAAM,CAAC,QAAQ,GAAG,aAAa,SAAS,KAAK,CAAC,GAAG;;;AAGlF,SAAO;GACU;GACQ;GACQ;GACC;GACK;GACT;GACI;GACC;GAO/B,oBAAoB,SAAU,QAAQ,WAAW;AAC7C,WAAO,KAAK,UAAU,CAAC,QAAQ,SAAU,GAAG;AACxC,cAAS,OAAO,QAAQ,IAAI,OAAO,WAAW,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,UAAU,GAAG,CAAC;MAChG;AACF,WAAO;;GASX,2BAA2B,SAAU,YAAY,mBAAmB,4BAA4B;AAC5F,QAAI,sBAAsB,KAAK,EAAK,qBAAoB;AACxD,QAAI,+BAA+B,KAAK,EAAK,8BAA6B;IAC1E,IAAI,OAAO,WAAW,IAAI,SAAU,IAAI;KACpC,IAAI,OAAO,GAAG,MAAM,aAAa,GAAG,YAAY,WAAW,GAAG,UAAU,eAAe,GAAG,cAAc,eAAe,GAAG,cAAc,gBAAgB,GAAG;KAC3J,IAAI,sBAAsB;KAC1B,IAAI,uBAAuB;KAC3B,IAAI,gBAAgB,kBAAkB;AACtC,qBAAgB,cAAc,QAAQ,UAAU,KAAK;AACrD,qBAAgB,cAAc,QAAQ,gBAAgB,WAAW;AACjE,qBAAgB,cAAc,QAAQ,kBAAkB,eAAe,eAAe,oBAAoB;AAC1G,qBAAgB,cAAc,QAAQ,mBAAmB,gBAAgB,gBAAgB,qBAAqB;AAC9G,qBAAgB,cAAc,QAAQ,kBAAkB,aAAa;AACrE,qBAAgB,cAAc,QAAQ,WAAW,IAAI,OAAO,QAAQ,QAAQ,SAAS,EAAE,IAAI,CAAC;AAC5F,YAAO;MACT,CAAC,KAAK,GAAG;AACX,WAAO,2BAA2B,QAAQ,QAAQ,gBAAgB,KAAK;;GAa3E,wBAAwB,SAAU,MAAM;IACpC,IAAI,iBAAiB,KAAK,gBAAgB,oBAAoB,KAAK,mBAAmB,aAAa,KAAK,YAAY,iBAAiB,KAAK,gBAAgB,KAAK,KAAK,oBAAoB,qBAAqB,OAAO,KAAK,IAAI,oBAAoB,aAAa,IAAI,KAAK,KAAK,0BAA0B,2BAA2B,OAAO,KAAK,IAAI,CAC7U,yDACA,0CACH,GAAG,IAAI,cAAc,KAAK,aAAa,kBAAkB,KAAK,iBAAiB,KAAK,KAAK,gBAAgB,iBAAiB,OAAO,KAAK,IAAI,OAAO,IAAI,KAAK,KAAK,iBAAiB,kBAAkB,OAAO,KAAK,IAAI,QAAQ;IAC3N,IAAI,MAAM,IAAI,aAAa,WAAW;IAEtC,IAAI,kBAAkB,gBAAgB,mBAAmB;AACzD,QAAI,kBACA,KAAI,aAAa;KACb,OAAO;KACP,YAAY;KACK;KACpB,CAAC;AAEN,QAAI,gBACA,KAAI,aAAa;KAEb,OAAO;KACP,YAAY;KACK;KACpB,CAAC;AAEN,QAAI,qBAAqB;AACzB,QAAI,aAAa,KAAK,WAAW,aAAa,gBAAgB,CAAC,QAAQ;AACvE,QAAI,oBAAoB,KAAK,WAAW,aAAa,gBAAgB,CAAC;AACtE,QAAI,aAAa,UAAU,QAAQ,eAAe,YAAY,gBAAgB,KAAK;AACnF,QAAI,4BAA4B;AAChC,QAAI,gBACA,KAAI,iBAAiB,gBAAgB,gBAAgB;QAGrD,KAAI,iBAAiB,eAAe;AAExC,WAAO,mBAAmB,QAAQ,UAAU,QAAQ,aAAa,IAAI,cAAc,CAAC,GAAG,IAAI,cAAc;;GAU7G,iBAAiB,SAAU,KAAK,MAAM;IAClC,IAAI,KAAK;IAET,IAAI,OADO,GAAG,MAAM,aAAa,CAAC,IACpB,gBAAgB,IAAI;IAClC,IAAI,YAAY,IAAI,SAAS,WAAW;IAGxC,IAAI,wBAAwB;IAE5B,IAAI,0BAA0B;IAE9B,IAAI,wBAAwB;IAE5B,IAAI,YAAY,EAAE;IAClB,IAAI,wBAAwB,GAAG,QAAQ,QAAQ,uBAAuB,IAAI;IAC1E,IAAI,0BAA0B,GAAG,QAAQ,QAAQ,yBAAyB,IAAI;IAC9E,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,uBAAuB,IAAI;AACzE,gBAAY,UAAU,OAAO,qBAAqB;AAClD,gBAAY,UAAU,OAAO,uBAAuB;AAEpD,QAAI,oBAAoB,WAAW,EAC/B,OAAM,IAAI,MAAM,gCAAgC;AAGpD,QAAI,UAAU,WAAW,EACrB,QAAO,CAAC,OAAO,KAAK;IAExB,IAAI,UAAU,SAAU,iBAAe;KACnC,IAAI,MAAM,IAAI,aAAa,WAAW;KACtC,IAAI,WAAW;AACf,SAAI,qBAAqB,KAAK;AAC9B,SAAI,CAAC,KAAK,WAAW,CAAC,KAAK,SACvB,OAAM,IAAI,MAAM,2CAA2C;AAE/D,SAAI,KAAK,QACL,KAAI,aAAa,GAAG,aAAa,KAAK,QAAQ;AAElD,SAAI,KAAK,UAAU;MACf,IAAI,mBAAmB,GAAG,QAAQ,QAAQ,yCAAyCA,gBAAc;MAEjG,IAAI,eAAe,KAAK,SAAS,mBAAmB,QAAQ,QAAQ;AAEpE,UAAI,MAAM,QAAQ,aAAa,CAC3B,iBAAgB,GAAG,UAAU,aAAa,aAAa;eAElD,OAAO,iBAAiB,SAC7B,gBAAe,CAAC,aAAa;AAGjC,qBAAe,aAAa,IAAI,UAAU,QAAQ,mBAAmB;AAErE,UAAI,gBAAgB,WAAW,KAAK,aAAa,WAAW,EACxD,OAAM,IAAI,MAAM,0BAA0B;AAG9C,UAAI,gBAAgB,WAAW,GAAG;OAC9B,IAAI,sBAAsB,gBAAgB,GAAG,WAAW;OACxD,IAAI,oBAAoB,UAAU,QAAQ,mBAAmB,oBAAoB;AACjF,WAAI,aAAa,UAAU,KACvB,CAAC,aAAa,KAAK,SAAU,MAAM;AAAE,eAAO,KAAK,MAAM,KAAK,kBAAkB,MAAM;SAAI,CAGxF,OAAM,IAAI,MAAM,oDAAoD;AAExE,WAAI,aAAa,OAAO,WAAW,kBAAkB,CAAC,QAAQ;YAI9D,KAAI,aAAa,OAAO,WAAW,aAAa,GAAG,CAAC,QAAQ;;AAGpE,SAAI,cAAcA,gBAAc;AAChC,gBAAW,IAAI,eAAe,IAAI,UAAU,CAAC;AAE7C,SAAI,CAAC,SACD,QAAO;AAIX,SAAI,EAAE,IAAI,qBAAqB,CAAC,UAAU,GACtC,OAAM,IAAI,MAAM,0BAA0B;KAE9C,IAAI,oBAAoB,IAAI,qBAAqB,CAAC;KAClD,IAAI,WAAW,UAAU,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,SAAI,SAAS,cAAc,YAAY;MAEnC,IAAI,cAAc,GAAG,QAAQ,QAAQ,iCAAiC,SAAS;MAC/E,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,0CAA0C,SAAS;AAEjG,UAAI,WAAW,WAAW,EACtB,QAAO,EAAE,OAAO,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE;eAE7C,oBAAoB,UAAU,EACnC,QAAO,EAAE,OAAO,CAAC,MAAM,SAAS,UAAU,CAAC,EAAE;UAG7C,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,EAAE;gBAG7B,SAAS,cAAc,YAC5B,QAAO,EAAE,OAAO,CAAC,MAAM,SAAS,UAAU,CAAC,EAAE;SAG7C,QAAO,EAAE,OAAO,CAAC,MAAM,KAAK,EAAE;;IAGtC,IAAI,SAAS;AACb,QAAI;AAEA,UAAK,IAAI,cAAc,SAAS,UAAU,EAAE,gBAAgB,YAAY,MAAM,EAAE,CAAC,cAAc,MAAM,gBAAgB,YAAY,MAAM,EAAE;MACrI,IAAI,gBAAgB,cAAc;MAClC,IAAI,UAAU,QAAQ,cAAc;AACpC,UAAI,OAAO,YAAY,SACnB,QAAO,QAAQ;;aAGpB,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,iBAAiB,CAAC,cAAc,SAAS,KAAK,YAAY,QAAS,IAAG,KAAK,YAAY;eAEvF;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAGjC,WAAO,CAAC,OAAO,KAAK;;GAmDxB,kBAAkB,SAAU,KAAK,YAAY;IACzC,IAAI,IAAI,IAAI;AACZ,WAAO,KAAK,EAAE,EACV,GAAG,mBAAmB,CAClB,EACI,OAAO,EAAO,KAAK,EACtB,GACA,KAAK,EAAE,EACJ,GAAG,gBAAgB,CACf,EACI,OAAO,EACH,YAAY,sCACf,EACJ,GACA,KAAK,EAAE,EACJ,GAAG,iBAAiB,CAAC,EACb,sBAAsB,UAAU,QAAQ,mBAAmB,WAAW,EACzE,CAAC,EACN,IACP,EACD,IACP,EACD;;GAUR,2BAA2B,SAAU,aAAa,KAAK,YAAY,UAAU,kBAAkB;IAM3F,IAAI,YAHe,IAAI,WAAW,QAAQ,UAAU,QAAQ,eAAe,KAAK,WAAW,EAAE,QAAW,EACpG,eAAe,iBAAiB,iBAAiB,EACpD,CAAC,CAC2B,KAAK,YAAY;AAE9C,WAAO,aAAa,QAAQ,UAAU,SAAS,SAAS,GAAG;;GAU/D,wBAAwB,SAAU,UAAU,aAAa,WAAW,iBAAiB;IACjF,IAAI,WAAW,SAAS,mBAAmB,QAAQ,QAAQ;IAC3D,IAAI,gBAAgB,iBAAiB,gBAAgB;AAErD,WADU,IAAI,WAAW,QAAQ,UAAU,QAAQ,+BAA+B,SAAS,EAAE,UAAU,EAAiB,eAAe,CAAC,CAC7H,OAAO,OAAO,KAAK,YAAY,EAAE,OAAO,KAAK,UAAU,CAAC;;GAOvE,YAAY,SAAU,iBAAiB,iBAAiB;AACpD,QAAI,oBAAoB,KAAK,EAAK,mBAAkB,EAAE;IACtD,IAAI,SAAS,gBAAgB,SAAS,GAAG,OAAO,gBAAgB,QAAQ,IAAI,GAAG;AAC/E,WAAO;KACH,YAAY,WAAY;AACpB,aAAO,IAAI,OAAO,QAAQ,aAAa,CAAC,OAAO,QAAQ,mBAAmB,CAAC,OAAO,iBAAiB,KAAK,CAAC,OAAO,QAAQ,qBAAqB,CAAC,OAAO,QAAQ,YAAY;;KAE7K,QAAQ,WAAY;AAChB,aAAO,UAAU,QAAQ,+BAA+B,gBAAgB,CAAC,UAAU;;KAE1F;;GASL,kBAAkB,SAAU,cAAc,cAAc,KAAK;AAEzD,WAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;AAC1C,SAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,0BAA0B,CAAC;KAEvD,IAAI,sBAAsB,aAAa;KACvC,IAAI,uBAAuB,aAAa;KACxC,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;KAClC,IAAI,MAAM,IAAI,gBAAgB,IAAI;KAClC,IAAI,cAAc,GAAG,QAAQ,QAAQ,kCAAkC,IAAI;AAC3E,SAAI,CAAC,MAAM,QAAQ,WAAW,IAAI,WAAW,WAAW,EACpD,OAAM,IAAI,MAAM,mBAAmB;AAEvC,SAAI,WAAW,SAAS,EACpB,OAAM,IAAI,MAAM,yBAAyB;KAE7C,IAAI,mBAAmB,WAAW;AAElC,SAAI,oBAAoB,sBAAsB;MAC1C,IAAI,eAAe,UAAU,QAAQ,+BAA+B,qBAAqB,mBAAmB,QAAQ,QAAQ,CAAC;AAC7H,aAAO,QAAQ,iBAAiB,UAAU,EAAE;OAExC,SAAS,OAAO,KAAK,aAAa;OAClC,KAAK,OAAO,KAAK,8BAA8B,OAAO,qBAAqB,mBAAmB,QAAQ,QAAQ,EAAE,4BAA4B,CAAC;OAC7I,qBAAqB,oBAAoB;OACzC,wBAAwB,oBAAoB;OAC/C,EAAE,SAAU,KAAK,KAAK;AACnB,WAAI,KAAK;AACL,gBAAQ,MAAM,IAAI;AAClB,eAAO,uBAAO,IAAI,MAAM,wCAAwC,CAAC;;AAErE,WAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,oCAAoC,CAAC;OAEjE,IAAI,qBAAqB,oBAAoB,UAAU;OACvD,IAAI,sBAAsB,IAAI,gBAAgB,IAAI,OAAO,oBAAoB,6BAA6B,CAAC,OAAO,oBAAoB,MAAM,CAAC,OAAO,MAAM,UAAU,MAAM,WAAW,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,oBAAoB,uBAAuB,CAAC;AACjQ,WAAI,gBAAgB,aAAa,oBAAoB,iBAAiB,iBAAiB;AACvF,cAAO,QAAQ,UAAU,QAAQ,aAAa,IAAI,UAAU,CAAC,CAAC;QAChE;WAGF,QAAO,QAAQ,UAAU,QAAQ,aAAa,IAAI,CAAC;MAEzD;;GAUN,kBAAkB,SAAU,MAAM,WAAW;AACzC,WAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;AAE1C,SAAI,CAAC,UACD,QAAO,uBAAO,IAAI,MAAM,0BAA0B,CAAC;KAGvD,IAAI,cAAc,KAAK;KACvB,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;KAClC,IAAI,MAAM,IAAI,gBAAgB,UAAU;KACxC,IAAI,uBAAuB,GAAG,QAAQ,QAAQ,gFAAgF,IAAI;AAClI,SAAI,CAAC,MAAM,QAAQ,oBAAoB,IAAI,oBAAoB,WAAW,EACtE,OAAM,IAAI,MAAM,oCAAoC;AAExD,SAAI,oBAAoB,SAAS,EAC7B,OAAM,IAAI,MAAM,yBAAyB;KAE7C,IAAI,mBAAmB,oBAAoB;AAC3C,YAAO,OAAO,QAAQ,iBAAiB,UAAU,EAAE,EAC/C,KAAK,UAAU,QAAQ,eAAe,YAAY,eAAe,YAAY,kBAAkB,EAClG,EAAE,SAAU,KAAK,KAAK;AACnB,UAAI,KAAK;AACL,eAAQ,MAAM,IAAI;AAClB,cAAO,uBAAO,IAAI,MAAM,wCAAwC,CAAC;;AAErE,UAAI,CAAC,IACD,QAAO,uBAAO,IAAI,MAAM,oCAAoC,CAAC;MAEjE,IAAI,kBAAkB,IAAI,gBAAgB,IAAI;AAC9C,UAAI,gBAAgB,aAAa,gBAAgB,iBAAiB,iBAAiB;AACnF,aAAO,QAAQ,CAAC,IAAI,UAAU,EAAE,IAAI,CAAC;OACvC;MACJ;;GAKN,YAAY,SAAU,OAAO;AACzB,WAAO,UAAU,MAAM,KAAK,GAAG,KAAK,GAAG,WAAY;KAC/C,IAAI,UAAU;AACd,YAAO,YAAY,MAAM,SAAU,IAAI;AACnC,cAAQ,GAAG,OAAX;OACI,KAAK;AACD,oBAAY,GAAG,MAAM,aAAa,CAAC;;;;;;;AAOnC,YAAI,CAAC,SAED,QAAO,CAAC,GAAc,QAAQ,OAAO,gMAAgM,CAAC;AAE1O,WAAG,QAAQ;OACf,KAAK;AACD,WAAG,KAAK,KAAK;SAAC;SAAG;;SAAK;SAAE,CAAC;AACzB,eAAO,CAAC,GAAa,SAAS,MAAM,CAAC;OACzC,KAAK,EAAG,QAAO,CAAC,GAAc,GAAG,MAAM,CAAC;OACxC,KAAK;AACD,cAAM,GAAG,MAAM;AACf,cAAM;OACV,KAAK,EAAG,QAAO,CAAC,EAAa;;OAEnC;MACJ;;GAET;;AAEL,SAAQ,UAAU,SAAS"}

package/dist/esm/node_modules/samlify/build/src/metadata-idp.mjs

@@ -1,171 +0,0 @@
-import { __commonJS } from "../../../../_virtual/rolldown_runtime.mjs";
-import { require_utility } from "./utility.mjs";
-import { require_urn } from "./urn.mjs";
-import { require_metadata } from "./metadata.mjs";
-import { require_libsaml } from "./libsaml.mjs";
-import { require_xml } from "../../../xml/lib/xml.mjs";
-
-//#region ../../node_modules/samlify/build/src/metadata-idp.js
-var require_metadata_idp = /* @__PURE__ */ __commonJS({ "../../node_modules/samlify/build/src/metadata-idp.js": ((exports) => {
-	var __extends = exports && exports.__extends || (function() {
-		var extendStatics = function(d, b) {
-			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
-				d$1.__proto__ = b$1;
-			} || function(d$1, b$1) {
-				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
-			};
-			return extendStatics(d, b);
-		};
-		return function(d, b) {
-			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-			extendStatics(d, b);
-			function __() {
-				this.constructor = d;
-			}
-			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-		};
-	})();
-	var __values = exports && exports.__values || function(o) {
-		var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-		if (m) return m.call(o);
-		if (o && typeof o.length === "number") return { next: function() {
-			if (o && i >= o.length) o = void 0;
-			return {
-				value: o && o[i++],
-				done: !o
-			};
-		} };
-		throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-	};
-	var __importDefault = exports && exports.__importDefault || function(mod) {
-		return mod && mod.__esModule ? mod : { "default": mod };
-	};
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.IdpMetadata = void 0;
-	/**
-	* @file metadata-idp.ts
-	* @author tngan
-	* @desc  Metadata of identity provider
-	*/
-	var metadata_1 = __importDefault(require_metadata());
-	var urn_1 = require_urn();
-	var libsaml_1 = __importDefault(require_libsaml());
-	var utility_1 = require_utility();
-	var xml_1 = __importDefault(require_xml());
-	function default_1(meta) {
-		return new IdpMetadata(meta);
-	}
-	exports.default = default_1;
-	var IdpMetadata = function(_super) {
-		var e_1, e_2;
-		__extends(IdpMetadata$1, _super);
-		function IdpMetadata$1(meta) {
-			if (!((0, utility_1.isString)(meta) || meta instanceof Buffer)) {
-				var _a = meta, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _b = _a.wantAuthnRequestsSigned, wantAuthnRequestsSigned = _b === void 0 ? false : _b, _c = _a.nameIDFormat, nameIDFormat = _c === void 0 ? [] : _c, _d = _a.singleSignOnService, singleSignOnService = _d === void 0 ? [] : _d, _e = _a.singleLogoutService, singleLogoutService = _e === void 0 ? [] : _e;
-				var IDPSSODescriptor_1 = [{ _attr: {
-					WantAuthnRequestsSigned: String(wantAuthnRequestsSigned),
-					protocolSupportEnumeration: urn_1.namespace.names.protocol
-				} }];
-				try {
-					for (var _f = __values((0, utility_1.castArrayOpt)(signingCert)), _g = _f.next(); !_g.done; _g = _f.next()) {
-						var cert = _g.value;
-						IDPSSODescriptor_1.push(libsaml_1.default.createKeySection("signing", cert));
-					}
-				} catch (e_1_1) {
-					e_1 = { error: e_1_1 };
-				} finally {
-					try {
-						if (_g && !_g.done && (_a = _f.return)) _a.call(_f);
-					} finally {
-						if (e_1) throw e_1.error;
-					}
-				}
-				try {
-					for (var _h = __values((0, utility_1.castArrayOpt)(encryptCert)), _j = _h.next(); !_j.done; _j = _h.next()) {
-						var cert = _j.value;
-						IDPSSODescriptor_1.push(libsaml_1.default.createKeySection("encryption", cert));
-					}
-				} catch (e_2_1) {
-					e_2 = { error: e_2_1 };
-				} finally {
-					try {
-						if (_j && !_j.done && (_b = _h.return)) _b.call(_h);
-					} finally {
-						if (e_2) throw e_2.error;
-					}
-				}
-				if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) nameIDFormat.forEach(function(f) {
-					return IDPSSODescriptor_1.push({ NameIDFormat: f });
-				});
-				if ((0, utility_1.isNonEmptyArray)(singleSignOnService)) singleSignOnService.forEach(function(a, indexCount) {
-					var attr = {
-						Binding: a.Binding,
-						Location: a.Location
-					};
-					if (a.isDefault) attr.isDefault = true;
-					IDPSSODescriptor_1.push({ SingleSignOnService: [{ _attr: attr }] });
-				});
-				else throw new Error("ERR_IDP_METADATA_MISSING_SINGLE_SIGN_ON_SERVICE");
-				if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) singleLogoutService.forEach(function(a, indexCount) {
-					var attr = {};
-					if (a.isDefault) attr.isDefault = true;
-					attr.Binding = a.Binding;
-					attr.Location = a.Location;
-					IDPSSODescriptor_1.push({ SingleLogoutService: [{ _attr: attr }] });
-				});
-				else console.warn("Construct identity  provider - missing endpoint of SingleLogoutService");
-				meta = (0, xml_1.default)([{ EntityDescriptor: [{ _attr: {
-					"xmlns": urn_1.namespace.names.metadata,
-					"xmlns:assertion": urn_1.namespace.names.assertion,
-					"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-					entityID
-				} }, { IDPSSODescriptor: IDPSSODescriptor_1 }] }]);
-			}
-			return _super.call(this, meta, [{
-				key: "wantAuthnRequestsSigned",
-				localPath: ["EntityDescriptor", "IDPSSODescriptor"],
-				attributes: ["WantAuthnRequestsSigned"]
-			}, {
-				key: "singleSignOnService",
-				localPath: [
-					"EntityDescriptor",
-					"IDPSSODescriptor",
-					"SingleSignOnService"
-				],
-				index: ["Binding"],
-				attributePath: [],
-				attributes: ["Location"]
-			}]) || this;
-		}
-		/**
-		* @desc Get the preference whether it wants a signed request
-		* @return {boolean} WantAuthnRequestsSigned
-		*/
-		IdpMetadata$1.prototype.isWantAuthnRequestsSigned = function() {
-			var was = this.meta.wantAuthnRequestsSigned;
-			if (was === void 0) return false;
-			return String(was) === "true";
-		};
-		/**
-		* @desc Get the entity endpoint for single sign on service
-		* @param  {string} binding      protocol binding (e.g. redirect, post)
-		* @return {string/object} location
-		*/
-		IdpMetadata$1.prototype.getSingleSignOnService = function(binding) {
-			if ((0, utility_1.isString)(binding)) {
-				var bindName = urn_1.namespace.binding[binding];
-				var service = this.meta.singleSignOnService[bindName];
-				if (service) return service;
-			}
-			return this.meta.singleSignOnService;
-		};
-		return IdpMetadata$1;
-	}(metadata_1.default);
-	exports.IdpMetadata = IdpMetadata;
-}) });
-
-//#endregion
-export default require_metadata_idp();
-
-export { require_metadata_idp };
-//# sourceMappingURL=metadata-idp.mjs.map

package/dist/esm/node_modules/samlify/build/src/metadata-idp.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadata-idp.mjs","names":["b","IdpMetadata"],"sources":["../../../../../../../../node_modules/samlify/build/src/metadata-idp.js"],"sourcesContent":["\"use strict\";\nvar __extends = (this && this.__extends) || (function () {\n    var extendStatics = function (d, b) {\n        extendStatics = Object.setPrototypeOf ||\n            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\n            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\n        return extendStatics(d, b);\n    };\n    return function (d, b) {\n        if (typeof b !== \"function\" && b !== null)\n            throw new TypeError(\"Class extends value \" + String(b) + \" is not a constructor or null\");\n        extendStatics(d, b);\n        function __() { this.constructor = d; }\n        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\n    };\n})();\nvar __values = (this && this.__values) || function(o) {\n    var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n    if (m) return m.call(o);\n    if (o && typeof o.length === \"number\") return {\n        next: function () {\n            if (o && i >= o.length) o = void 0;\n            return { value: o && o[i++], done: !o };\n        }\n    };\n    throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n    return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.IdpMetadata = void 0;\n/**\n* @file metadata-idp.ts\n* @author tngan\n* @desc  Metadata of identity provider\n*/\nvar metadata_1 = __importDefault(require(\"./metadata\"));\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = require(\"./utility\");\nvar xml_1 = __importDefault(require(\"xml\"));\n/*\n * @desc interface function\n */\nfunction default_1(meta) {\n    return new IdpMetadata(meta);\n}\nexports.default = default_1;\nvar IdpMetadata = /** @class */ (function (_super) {\n    var e_1, _a, e_2, _b;\n    __extends(IdpMetadata, _super);\n    function IdpMetadata(meta) {\n        var isFile = (0, utility_1.isString)(meta) || meta instanceof Buffer;\n        if (!isFile) {\n            var _a = meta, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _b = _a.wantAuthnRequestsSigned, wantAuthnRequestsSigned = _b === void 0 ? false : _b, _c = _a.nameIDFormat, nameIDFormat = _c === void 0 ? [] : _c, _d = _a.singleSignOnService, singleSignOnService = _d === void 0 ? [] : _d, _e = _a.singleLogoutService, singleLogoutService = _e === void 0 ? [] : _e;\n            var IDPSSODescriptor_1 = [{\n                    _attr: {\n                        WantAuthnRequestsSigned: String(wantAuthnRequestsSigned),\n                        protocolSupportEnumeration: urn_1.namespace.names.protocol,\n                    },\n                }];\n            try {\n                for (var _f = __values((0, utility_1.castArrayOpt)(signingCert)), _g = _f.next(); !_g.done; _g = _f.next()) {\n                    var cert = _g.value;\n                    IDPSSODescriptor_1.push(libsaml_1.default.createKeySection('signing', cert));\n                }\n            }\n            catch (e_1_1) { e_1 = { error: e_1_1 }; }\n            finally {\n                try {\n                    if (_g && !_g.done && (_a = _f.return)) _a.call(_f);\n                }\n                finally { if (e_1) throw e_1.error; }\n            }\n            try {\n                for (var _h = __values((0, utility_1.castArrayOpt)(encryptCert)), _j = _h.next(); !_j.done; _j = _h.next()) {\n                    var cert = _j.value;\n                    IDPSSODescriptor_1.push(libsaml_1.default.createKeySection('encryption', cert));\n                }\n            }\n            catch (e_2_1) { e_2 = { error: e_2_1 }; }\n            finally {\n                try {\n                    if (_j && !_j.done && (_b = _h.return)) _b.call(_h);\n                }\n                finally { if (e_2) throw e_2.error; }\n            }\n            if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) {\n                nameIDFormat.forEach(function (f) { return IDPSSODescriptor_1.push({ NameIDFormat: f }); });\n            }\n            if ((0, utility_1.isNonEmptyArray)(singleSignOnService)) {\n                singleSignOnService.forEach(function (a, indexCount) {\n                    var attr = {\n                        Binding: a.Binding,\n                        Location: a.Location,\n                    };\n                    if (a.isDefault) {\n                        attr.isDefault = true;\n                    }\n                    IDPSSODescriptor_1.push({ SingleSignOnService: [{ _attr: attr }] });\n                });\n            }\n            else {\n                throw new Error('ERR_IDP_METADATA_MISSING_SINGLE_SIGN_ON_SERVICE');\n            }\n            if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) {\n                singleLogoutService.forEach(function (a, indexCount) {\n                    var attr = {};\n                    if (a.isDefault) {\n                        attr.isDefault = true;\n                    }\n                    attr.Binding = a.Binding;\n                    attr.Location = a.Location;\n                    IDPSSODescriptor_1.push({ SingleLogoutService: [{ _attr: attr }] });\n                });\n            }\n            else {\n                console.warn('Construct identity  provider - missing endpoint of SingleLogoutService');\n            }\n            // Create a new metadata by setting\n            meta = (0, xml_1.default)([{\n                    EntityDescriptor: [{\n                            _attr: {\n                                'xmlns': urn_1.namespace.names.metadata,\n                                'xmlns:assertion': urn_1.namespace.names.assertion,\n                                'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n                                entityID: entityID,\n                            },\n                        }, { IDPSSODescriptor: IDPSSODescriptor_1 }],\n                }]);\n        }\n        return _super.call(this, meta, [\n            {\n                key: 'wantAuthnRequestsSigned',\n                localPath: ['EntityDescriptor', 'IDPSSODescriptor'],\n                attributes: ['WantAuthnRequestsSigned'],\n            },\n            {\n                key: 'singleSignOnService',\n                localPath: ['EntityDescriptor', 'IDPSSODescriptor', 'SingleSignOnService'],\n                index: ['Binding'],\n                attributePath: [],\n                attributes: ['Location']\n            },\n        ]) || this;\n    }\n    /**\n    * @desc Get the preference whether it wants a signed request\n    * @return {boolean} WantAuthnRequestsSigned\n    */\n    IdpMetadata.prototype.isWantAuthnRequestsSigned = function () {\n        var was = this.meta.wantAuthnRequestsSigned;\n        if (was === undefined) {\n            return false;\n        }\n        return String(was) === 'true';\n    };\n    /**\n    * @desc Get the entity endpoint for single sign on service\n    * @param  {string} binding      protocol binding (e.g. redirect, post)\n    * @return {string/object} location\n    */\n    IdpMetadata.prototype.getSingleSignOnService = function (binding) {\n        if ((0, utility_1.isString)(binding)) {\n            var bindName = urn_1.namespace.binding[binding];\n            var service = this.meta.singleSignOnService[bindName];\n            if (service) {\n                return service;\n            }\n        }\n        return this.meta.singleSignOnService;\n    };\n    return IdpMetadata;\n}(metadata_1.default));\nexports.IdpMetadata = IdpMetadata;\n//# sourceMappingURL=metadata-idp.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;CACA,IAAI,+BAA0B,cAAe,WAAY;EACrD,IAAI,gBAAgB,SAAU,GAAG,GAAG;AAChC,mBAAgB,OAAO,kBAClB,EAAE,WAAW,EAAE,EAAE,YAAY,SAAS,SAAU,KAAG,KAAG;AAAE,QAAE,YAAYA;QACvE,SAAU,KAAG,KAAG;AAAE,SAAK,IAAI,KAAKA,IAAG,KAAI,OAAO,UAAU,eAAe,KAAKA,KAAG,EAAE,CAAE,KAAE,KAAKA,IAAE;;AAChG,UAAO,cAAc,GAAG,EAAE;;AAE9B,SAAO,SAAU,GAAG,GAAG;AACnB,OAAI,OAAO,MAAM,cAAc,MAAM,KACjC,OAAM,IAAI,UAAU,yBAAyB,OAAO,EAAE,GAAG,gCAAgC;AAC7F,iBAAc,GAAG,EAAE;GACnB,SAAS,KAAK;AAAE,SAAK,cAAc;;AACnC,KAAE,YAAY,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI,GAAG,YAAY,EAAE,WAAW,IAAI,IAAI;;KAEvF;CACJ,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,cAAc,KAAK;;;;;;CAM3B,IAAI,aAAa,mCAAsC;CACvD,IAAI;CACJ,IAAI,YAAY,kCAAqC;CACrD,IAAI;CACJ,IAAI,QAAQ,8BAA+B;CAI3C,SAAS,UAAU,MAAM;AACrB,SAAO,IAAI,YAAY,KAAK;;AAEhC,SAAQ,UAAU;CAClB,IAAI,cAA6B,SAAU,QAAQ;EAC/C,IAAI,KAAS;AACb,YAAUC,eAAa,OAAO;EAC9B,SAASA,cAAY,MAAM;AAEvB,OAAI,GADU,GAAG,UAAU,UAAU,KAAK,IAAI,gBAAgB,SACjD;IACT,IAAI,KAAK,MAAM,WAAW,GAAG,UAAU,cAAc,GAAG,aAAa,cAAc,GAAG,aAAa,KAAK,GAAG,yBAAyB,0BAA0B,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,cAAc,eAAe,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG;IAC5Y,IAAI,qBAAqB,CAAC,EAClB,OAAO;KACH,yBAAyB,OAAO,wBAAwB;KACxD,4BAA4B,MAAM,UAAU,MAAM;KACrD,EACJ,CAAC;AACN,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,yBAAmB,KAAK,UAAU,QAAQ,iBAAiB,WAAW,KAAK,CAAC;;aAG7E,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,yBAAmB,KAAK,UAAU,QAAQ,iBAAiB,cAAc,KAAK,CAAC;;aAGhF,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,SAAK,GAAG,UAAU,iBAAiB,aAAa,CAC5C,cAAa,QAAQ,SAAU,GAAG;AAAE,YAAO,mBAAmB,KAAK,EAAE,cAAc,GAAG,CAAC;MAAI;AAE/F,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG,YAAY;KACjD,IAAI,OAAO;MACP,SAAS,EAAE;MACX,UAAU,EAAE;MACf;AACD,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,wBAAmB,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,CAAC;MACrE;QAGF,OAAM,IAAI,MAAM,kDAAkD;AAEtE,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG,YAAY;KACjD,IAAI,OAAO,EAAE;AACb,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,UAAK,UAAU,EAAE;AACjB,UAAK,WAAW,EAAE;AAClB,wBAAmB,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,CAAC;MACrE;QAGF,SAAQ,KAAK,yEAAyE;AAG1F,YAAQ,GAAG,MAAM,SAAS,CAAC,EACnB,kBAAkB,CAAC,EACX,OAAO;KACH,SAAS,MAAM,UAAU,MAAM;KAC/B,mBAAmB,MAAM,UAAU,MAAM;KACzC,YAAY;KACF;KACb,EACJ,EAAE,EAAE,kBAAkB,oBAAoB,CAAC,EACnD,CAAC,CAAC;;AAEX,UAAO,OAAO,KAAK,MAAM,MAAM,CAC3B;IACI,KAAK;IACL,WAAW,CAAC,oBAAoB,mBAAmB;IACnD,YAAY,CAAC,0BAA0B;IAC1C,EACD;IACI,KAAK;IACL,WAAW;KAAC;KAAoB;KAAoB;KAAsB;IAC1E,OAAO,CAAC,UAAU;IAClB,eAAe,EAAE;IACjB,YAAY,CAAC,WAAW;IAC3B,CACJ,CAAC,IAAI;;;;;;AAMV,gBAAY,UAAU,4BAA4B,WAAY;GAC1D,IAAI,MAAM,KAAK,KAAK;AACpB,OAAI,QAAQ,OACR,QAAO;AAEX,UAAO,OAAO,IAAI,KAAK;;;;;;;AAO3B,gBAAY,UAAU,yBAAyB,SAAU,SAAS;AAC9D,QAAK,GAAG,UAAU,UAAU,QAAQ,EAAE;IAClC,IAAI,WAAW,MAAM,UAAU,QAAQ;IACvC,IAAI,UAAU,KAAK,KAAK,oBAAoB;AAC5C,QAAI,QACA,QAAO;;AAGf,UAAO,KAAK,KAAK;;AAErB,SAAOA;GACT,WAAW,QAAQ;AACrB,SAAQ,cAAc"}

package/dist/esm/node_modules/samlify/build/src/metadata-sp.mjs

@@ -1,214 +0,0 @@
-import { __commonJS } from "../../../../_virtual/rolldown_runtime.mjs";
-import { require_utility } from "./utility.mjs";
-import { require_urn } from "./urn.mjs";
-import { require_metadata } from "./metadata.mjs";
-import { require_libsaml } from "./libsaml.mjs";
-import { require_xml } from "../../../xml/lib/xml.mjs";
-
-//#region ../../node_modules/samlify/build/src/metadata-sp.js
-var require_metadata_sp = /* @__PURE__ */ __commonJS({ "../../node_modules/samlify/build/src/metadata-sp.js": ((exports) => {
-	var __extends = exports && exports.__extends || (function() {
-		var extendStatics = function(d, b) {
-			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
-				d$1.__proto__ = b$1;
-			} || function(d$1, b$1) {
-				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
-			};
-			return extendStatics(d, b);
-		};
-		return function(d, b) {
-			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-			extendStatics(d, b);
-			function __() {
-				this.constructor = d;
-			}
-			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-		};
-	})();
-	var __values = exports && exports.__values || function(o) {
-		var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-		if (m) return m.call(o);
-		if (o && typeof o.length === "number") return { next: function() {
-			if (o && i >= o.length) o = void 0;
-			return {
-				value: o && o[i++],
-				done: !o
-			};
-		} };
-		throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-	};
-	var __importDefault = exports && exports.__importDefault || function(mod) {
-		return mod && mod.__esModule ? mod : { "default": mod };
-	};
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.SpMetadata = void 0;
-	/**
-	* @file metadata-sp.ts
-	* @author tngan
-	* @desc  Metadata of service provider
-	*/
-	var metadata_1 = __importDefault(require_metadata());
-	var urn_1 = require_urn();
-	var libsaml_1 = __importDefault(require_libsaml());
-	var utility_1 = require_utility();
-	var xml_1 = __importDefault(require_xml());
-	function default_1(meta) {
-		return new SpMetadata(meta);
-	}
-	exports.default = default_1;
-	/**
-	* @desc SP Metadata is for creating Service Provider, provides a set of API to manage the actions in SP.
-	*/
-	var SpMetadata = function(_super) {
-		var e_1, e_2;
-		__extends(SpMetadata$1, _super);
-		/**
-		* @param  {object/string} meta (either xml string or configuration in object)
-		* @return {object} prototypes including public functions
-		*/
-		function SpMetadata$1(meta) {
-			if (!((0, utility_1.isString)(meta) || meta instanceof Buffer)) {
-				var _a = meta, _b = _a.elementsOrder, elementsOrder = _b === void 0 ? urn_1.elementsOrder.default : _b, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _c = _a.authnRequestsSigned, authnRequestsSigned = _c === void 0 ? false : _c, _d = _a.wantAssertionsSigned, wantAssertionsSigned = _d === void 0 ? false : _d, _e = _a.wantMessageSigned, wantMessageSigned = _e === void 0 ? false : _e, signatureConfig = _a.signatureConfig, _f = _a.nameIDFormat, nameIDFormat = _f === void 0 ? [] : _f, _g = _a.singleLogoutService, singleLogoutService = _g === void 0 ? [] : _g, _h = _a.assertionConsumerService, assertionConsumerService = _h === void 0 ? [] : _h;
-				var descriptors_1 = {
-					KeyDescriptor: [],
-					NameIDFormat: [],
-					SingleLogoutService: [],
-					AssertionConsumerService: [],
-					AttributeConsumingService: []
-				};
-				var SPSSODescriptor_1 = [{ _attr: {
-					AuthnRequestsSigned: String(authnRequestsSigned),
-					WantAssertionsSigned: String(wantAssertionsSigned),
-					protocolSupportEnumeration: urn_1.namespace.names.protocol
-				} }];
-				if (wantMessageSigned && signatureConfig === void 0) console.warn("Construct service provider - missing signatureConfig");
-				try {
-					for (var _j = __values((0, utility_1.castArrayOpt)(signingCert)), _k = _j.next(); !_k.done; _k = _j.next()) {
-						var cert = _k.value;
-						descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection("signing", cert).KeyDescriptor);
-					}
-				} catch (e_1_1) {
-					e_1 = { error: e_1_1 };
-				} finally {
-					try {
-						if (_k && !_k.done && (_a = _j.return)) _a.call(_j);
-					} finally {
-						if (e_1) throw e_1.error;
-					}
-				}
-				try {
-					for (var _l = __values((0, utility_1.castArrayOpt)(encryptCert)), _m = _l.next(); !_m.done; _m = _l.next()) {
-						var cert = _m.value;
-						descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection("encryption", cert).KeyDescriptor);
-					}
-				} catch (e_2_1) {
-					e_2 = { error: e_2_1 };
-				} finally {
-					try {
-						if (_m && !_m.done && (_b = _l.return)) _b.call(_l);
-					} finally {
-						if (e_2) throw e_2.error;
-					}
-				}
-				if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) nameIDFormat.forEach(function(f) {
-					return descriptors_1.NameIDFormat.push(f);
-				});
-				else descriptors_1.NameIDFormat.push(urn_1.namespace.format.emailAddress);
-				if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) singleLogoutService.forEach(function(a) {
-					var attr = {
-						Binding: a.Binding,
-						Location: a.Location
-					};
-					if (a.isDefault) attr.isDefault = true;
-					descriptors_1.SingleLogoutService.push([{ _attr: attr }]);
-				});
-				if ((0, utility_1.isNonEmptyArray)(assertionConsumerService)) {
-					var indexCount_1 = 0;
-					assertionConsumerService.forEach(function(a) {
-						var attr = {
-							index: String(indexCount_1++),
-							Binding: a.Binding,
-							Location: a.Location
-						};
-						if (a.isDefault) attr.isDefault = true;
-						descriptors_1.AssertionConsumerService.push([{ _attr: attr }]);
-					});
-				}
-				elementsOrder.filter(function(name) {
-					return (0, utility_1.isNonEmptyArray)(descriptors_1[name]);
-				}).forEach(function(name) {
-					descriptors_1[name].forEach(function(e) {
-						var _a$1;
-						return SPSSODescriptor_1.push((_a$1 = {}, _a$1[name] = e, _a$1));
-					});
-				});
-				meta = (0, xml_1.default)([{ EntityDescriptor: [{ _attr: {
-					entityID,
-					"xmlns": urn_1.namespace.names.metadata,
-					"xmlns:assertion": urn_1.namespace.names.assertion,
-					"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#"
-				} }, { SPSSODescriptor: SPSSODescriptor_1 }] }]);
-			}
-			return _super.call(this, meta, [{
-				key: "spSSODescriptor",
-				localPath: ["EntityDescriptor", "SPSSODescriptor"],
-				attributes: ["WantAssertionsSigned", "AuthnRequestsSigned"]
-			}, {
-				key: "assertionConsumerService",
-				localPath: [
-					"EntityDescriptor",
-					"SPSSODescriptor",
-					"AssertionConsumerService"
-				],
-				attributes: [
-					"Binding",
-					"Location",
-					"isDefault",
-					"index"
-				]
-			}]) || this;
-		}
-		/**
-		* @desc Get the preference whether it wants a signed assertion response
-		* @return {boolean} Wantassertionssigned
-		*/
-		SpMetadata$1.prototype.isWantAssertionsSigned = function() {
-			return this.meta.spSSODescriptor.wantAssertionsSigned === "true";
-		};
-		/**
-		* @desc Get the preference whether it signs request
-		* @return {boolean} Authnrequestssigned
-		*/
-		SpMetadata$1.prototype.isAuthnRequestSigned = function() {
-			return this.meta.spSSODescriptor.authnRequestsSigned === "true";
-		};
-		/**
-		* @desc Get the entity endpoint for assertion consumer service
-		* @param  {string} binding         protocol binding (e.g. redirect, post)
-		* @return {string/[string]} URL of endpoint(s)
-		*/
-		SpMetadata$1.prototype.getAssertionConsumerService = function(binding) {
-			if ((0, utility_1.isString)(binding)) {
-				var location_1;
-				var bindName_1 = urn_1.namespace.binding[binding];
-				if ((0, utility_1.isNonEmptyArray)(this.meta.assertionConsumerService)) this.meta.assertionConsumerService.forEach(function(obj) {
-					if (obj.binding === bindName_1) {
-						location_1 = obj.location;
-						return;
-					}
-				});
-				else if (this.meta.assertionConsumerService.binding === bindName_1) location_1 = this.meta.assertionConsumerService.location;
-				return location_1;
-			}
-			return this.meta.assertionConsumerService;
-		};
-		return SpMetadata$1;
-	}(metadata_1.default);
-	exports.SpMetadata = SpMetadata;
-}) });
-
-//#endregion
-export default require_metadata_sp();
-
-export { require_metadata_sp };
-//# sourceMappingURL=metadata-sp.mjs.map

package/dist/esm/node_modules/samlify/build/src/metadata-sp.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadata-sp.mjs","names":["b","SpMetadata","_a"],"sources":["../../../../../../../../node_modules/samlify/build/src/metadata-sp.js"],"sourcesContent":["\"use strict\";\nvar __extends = (this && this.__extends) || (function () {\n    var extendStatics = function (d, b) {\n        extendStatics = Object.setPrototypeOf ||\n            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\n            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\n        return extendStatics(d, b);\n    };\n    return function (d, b) {\n        if (typeof b !== \"function\" && b !== null)\n            throw new TypeError(\"Class extends value \" + String(b) + \" is not a constructor or null\");\n        extendStatics(d, b);\n        function __() { this.constructor = d; }\n        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\n    };\n})();\nvar __values = (this && this.__values) || function(o) {\n    var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\n    if (m) return m.call(o);\n    if (o && typeof o.length === \"number\") return {\n        next: function () {\n            if (o && i >= o.length) o = void 0;\n            return { value: o && o[i++], done: !o };\n        }\n    };\n    throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n    return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.SpMetadata = void 0;\n/**\n* @file metadata-sp.ts\n* @author tngan\n* @desc  Metadata of service provider\n*/\nvar metadata_1 = __importDefault(require(\"./metadata\"));\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = require(\"./utility\");\nvar xml_1 = __importDefault(require(\"xml\"));\n/*\n * @desc interface function\n */\nfunction default_1(meta) {\n    return new SpMetadata(meta);\n}\nexports.default = default_1;\n/**\n* @desc SP Metadata is for creating Service Provider, provides a set of API to manage the actions in SP.\n*/\nvar SpMetadata = /** @class */ (function (_super) {\n    var e_1, _a, e_2, _b;\n    __extends(SpMetadata, _super);\n    /**\n    * @param  {object/string} meta (either xml string or configuration in object)\n    * @return {object} prototypes including public functions\n    */\n    function SpMetadata(meta) {\n        var isFile = (0, utility_1.isString)(meta) || meta instanceof Buffer;\n        // use object configuration instead of importing metadata file directly\n        if (!isFile) {\n            var _a = meta, _b = _a.elementsOrder, elementsOrder = _b === void 0 ? urn_1.elementsOrder.default : _b, entityID = _a.entityID, signingCert = _a.signingCert, encryptCert = _a.encryptCert, _c = _a.authnRequestsSigned, authnRequestsSigned = _c === void 0 ? false : _c, _d = _a.wantAssertionsSigned, wantAssertionsSigned = _d === void 0 ? false : _d, _e = _a.wantMessageSigned, wantMessageSigned = _e === void 0 ? false : _e, signatureConfig = _a.signatureConfig, _f = _a.nameIDFormat, nameIDFormat = _f === void 0 ? [] : _f, _g = _a.singleLogoutService, singleLogoutService = _g === void 0 ? [] : _g, _h = _a.assertionConsumerService, assertionConsumerService = _h === void 0 ? [] : _h;\n            var descriptors_1 = {\n                KeyDescriptor: [],\n                NameIDFormat: [],\n                SingleLogoutService: [],\n                AssertionConsumerService: [],\n                AttributeConsumingService: [],\n            };\n            var SPSSODescriptor_1 = [{\n                    _attr: {\n                        AuthnRequestsSigned: String(authnRequestsSigned),\n                        WantAssertionsSigned: String(wantAssertionsSigned),\n                        protocolSupportEnumeration: urn_1.namespace.names.protocol,\n                    },\n                }];\n            if (wantMessageSigned && signatureConfig === undefined) {\n                console.warn('Construct service provider - missing signatureConfig');\n            }\n            try {\n                for (var _j = __values((0, utility_1.castArrayOpt)(signingCert)), _k = _j.next(); !_k.done; _k = _j.next()) {\n                    var cert = _k.value;\n                    descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection('signing', cert).KeyDescriptor);\n                }\n            }\n            catch (e_1_1) { e_1 = { error: e_1_1 }; }\n            finally {\n                try {\n                    if (_k && !_k.done && (_a = _j.return)) _a.call(_j);\n                }\n                finally { if (e_1) throw e_1.error; }\n            }\n            try {\n                for (var _l = __values((0, utility_1.castArrayOpt)(encryptCert)), _m = _l.next(); !_m.done; _m = _l.next()) {\n                    var cert = _m.value;\n                    descriptors_1.KeyDescriptor.push(libsaml_1.default.createKeySection('encryption', cert).KeyDescriptor);\n                }\n            }\n            catch (e_2_1) { e_2 = { error: e_2_1 }; }\n            finally {\n                try {\n                    if (_m && !_m.done && (_b = _l.return)) _b.call(_l);\n                }\n                finally { if (e_2) throw e_2.error; }\n            }\n            if ((0, utility_1.isNonEmptyArray)(nameIDFormat)) {\n                nameIDFormat.forEach(function (f) { return descriptors_1.NameIDFormat.push(f); });\n            }\n            else {\n                // default value\n                descriptors_1.NameIDFormat.push(urn_1.namespace.format.emailAddress);\n            }\n            if ((0, utility_1.isNonEmptyArray)(singleLogoutService)) {\n                singleLogoutService.forEach(function (a) {\n                    var attr = {\n                        Binding: a.Binding,\n                        Location: a.Location,\n                    };\n                    if (a.isDefault) {\n                        attr.isDefault = true;\n                    }\n                    descriptors_1.SingleLogoutService.push([{ _attr: attr }]);\n                });\n            }\n            if ((0, utility_1.isNonEmptyArray)(assertionConsumerService)) {\n                var indexCount_1 = 0;\n                assertionConsumerService.forEach(function (a) {\n                    var attr = {\n                        index: String(indexCount_1++),\n                        Binding: a.Binding,\n                        Location: a.Location,\n                    };\n                    if (a.isDefault) {\n                        attr.isDefault = true;\n                    }\n                    descriptors_1.AssertionConsumerService.push([{ _attr: attr }]);\n                });\n            }\n            else {\n                // console.warn('Missing endpoint of AssertionConsumerService');\n            }\n            // handle element order\n            var existedElements = elementsOrder.filter(function (name) { return (0, utility_1.isNonEmptyArray)(descriptors_1[name]); });\n            existedElements.forEach(function (name) {\n                descriptors_1[name].forEach(function (e) {\n                    var _a;\n                    return SPSSODescriptor_1.push((_a = {}, _a[name] = e, _a));\n                });\n            });\n            // Re-assign the meta reference as a XML string|Buffer for use with the parent constructor\n            meta = (0, xml_1.default)([{\n                    EntityDescriptor: [{\n                            _attr: {\n                                entityID: entityID,\n                                'xmlns': urn_1.namespace.names.metadata,\n                                'xmlns:assertion': urn_1.namespace.names.assertion,\n                                'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',\n                            },\n                        }, { SPSSODescriptor: SPSSODescriptor_1 }],\n                }]);\n        }\n        // Use the re-assigned meta object reference here\n        return _super.call(this, meta, [\n            {\n                key: 'spSSODescriptor',\n                localPath: ['EntityDescriptor', 'SPSSODescriptor'],\n                attributes: ['WantAssertionsSigned', 'AuthnRequestsSigned'],\n            },\n            {\n                key: 'assertionConsumerService',\n                localPath: ['EntityDescriptor', 'SPSSODescriptor', 'AssertionConsumerService'],\n                attributes: ['Binding', 'Location', 'isDefault', 'index'],\n            }\n        ]) || this;\n    }\n    /**\n    * @desc Get the preference whether it wants a signed assertion response\n    * @return {boolean} Wantassertionssigned\n    */\n    SpMetadata.prototype.isWantAssertionsSigned = function () {\n        return this.meta.spSSODescriptor.wantAssertionsSigned === 'true';\n    };\n    /**\n    * @desc Get the preference whether it signs request\n    * @return {boolean} Authnrequestssigned\n    */\n    SpMetadata.prototype.isAuthnRequestSigned = function () {\n        return this.meta.spSSODescriptor.authnRequestsSigned === 'true';\n    };\n    /**\n    * @desc Get the entity endpoint for assertion consumer service\n    * @param  {string} binding         protocol binding (e.g. redirect, post)\n    * @return {string/[string]} URL of endpoint(s)\n    */\n    SpMetadata.prototype.getAssertionConsumerService = function (binding) {\n        if ((0, utility_1.isString)(binding)) {\n            var location_1;\n            var bindName_1 = urn_1.namespace.binding[binding];\n            if ((0, utility_1.isNonEmptyArray)(this.meta.assertionConsumerService)) {\n                this.meta.assertionConsumerService.forEach(function (obj) {\n                    if (obj.binding === bindName_1) {\n                        location_1 = obj.location;\n                        return;\n                    }\n                });\n            }\n            else {\n                if (this.meta.assertionConsumerService.binding === bindName_1) {\n                    location_1 = this.meta.assertionConsumerService.location;\n                }\n            }\n            return location_1;\n        }\n        return this.meta.assertionConsumerService;\n    };\n    return SpMetadata;\n}(metadata_1.default));\nexports.SpMetadata = SpMetadata;\n//# sourceMappingURL=metadata-sp.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;CACA,IAAI,+BAA0B,cAAe,WAAY;EACrD,IAAI,gBAAgB,SAAU,GAAG,GAAG;AAChC,mBAAgB,OAAO,kBAClB,EAAE,WAAW,EAAE,EAAE,YAAY,SAAS,SAAU,KAAG,KAAG;AAAE,QAAE,YAAYA;QACvE,SAAU,KAAG,KAAG;AAAE,SAAK,IAAI,KAAKA,IAAG,KAAI,OAAO,UAAU,eAAe,KAAKA,KAAG,EAAE,CAAE,KAAE,KAAKA,IAAE;;AAChG,UAAO,cAAc,GAAG,EAAE;;AAE9B,SAAO,SAAU,GAAG,GAAG;AACnB,OAAI,OAAO,MAAM,cAAc,MAAM,KACjC,OAAM,IAAI,UAAU,yBAAyB,OAAO,EAAE,GAAG,gCAAgC;AAC7F,iBAAc,GAAG,EAAE;GACnB,SAAS,KAAK;AAAE,SAAK,cAAc;;AACnC,KAAE,YAAY,MAAM,OAAO,OAAO,OAAO,EAAE,IAAI,GAAG,YAAY,EAAE,WAAW,IAAI,IAAI;;KAEvF;CACJ,IAAI,8BAAyB,YAAa,SAAS,GAAG;EAClD,IAAI,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,IAAI,KAAK,EAAE,IAAI,IAAI;AAC5E,MAAI,EAAG,QAAO,EAAE,KAAK,EAAE;AACvB,MAAI,KAAK,OAAO,EAAE,WAAW,SAAU,QAAO,EAC1C,MAAM,WAAY;AACd,OAAI,KAAK,KAAK,EAAE,OAAQ,KAAI,KAAK;AACjC,UAAO;IAAE,OAAO,KAAK,EAAE;IAAM,MAAM,CAAC;IAAG;KAE9C;AACD,QAAM,IAAI,UAAU,IAAI,4BAA4B,kCAAkC;;CAE1F,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,aAAa,KAAK;;;;;;CAM1B,IAAI,aAAa,mCAAsC;CACvD,IAAI;CACJ,IAAI,YAAY,kCAAqC;CACrD,IAAI;CACJ,IAAI,QAAQ,8BAA+B;CAI3C,SAAS,UAAU,MAAM;AACrB,SAAO,IAAI,WAAW,KAAK;;AAE/B,SAAQ,UAAU;;;;CAIlB,IAAI,aAA4B,SAAU,QAAQ;EAC9C,IAAI,KAAS;AACb,YAAUC,cAAY,OAAO;;;;;EAK7B,SAASA,aAAW,MAAM;AAGtB,OAAI,GAFU,GAAG,UAAU,UAAU,KAAK,IAAI,gBAAgB,SAEjD;IACT,IAAI,KAAK,MAAM,KAAK,GAAG,eAAe,gBAAgB,OAAO,KAAK,IAAI,MAAM,cAAc,UAAU,IAAI,WAAW,GAAG,UAAU,cAAc,GAAG,aAAa,cAAc,GAAG,aAAa,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,sBAAsB,uBAAuB,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG,mBAAmB,oBAAoB,OAAO,KAAK,IAAI,QAAQ,IAAI,kBAAkB,GAAG,iBAAiB,KAAK,GAAG,cAAc,eAAe,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,qBAAqB,sBAAsB,OAAO,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,0BAA0B,2BAA2B,OAAO,KAAK,IAAI,EAAE,GAAG;IACzqB,IAAI,gBAAgB;KAChB,eAAe,EAAE;KACjB,cAAc,EAAE;KAChB,qBAAqB,EAAE;KACvB,0BAA0B,EAAE;KAC5B,2BAA2B,EAAE;KAChC;IACD,IAAI,oBAAoB,CAAC,EACjB,OAAO;KACH,qBAAqB,OAAO,oBAAoB;KAChD,sBAAsB,OAAO,qBAAqB;KAClD,4BAA4B,MAAM,UAAU,MAAM;KACrD,EACJ,CAAC;AACN,QAAI,qBAAqB,oBAAoB,OACzC,SAAQ,KAAK,uDAAuD;AAExE,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,oBAAc,cAAc,KAAK,UAAU,QAAQ,iBAAiB,WAAW,KAAK,CAAC,cAAc;;aAGpG,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,QAAI;AACA,UAAK,IAAI,KAAK,UAAU,GAAG,UAAU,cAAc,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM,EAAE;MACxG,IAAI,OAAO,GAAG;AACd,oBAAc,cAAc,KAAK,UAAU,QAAQ,iBAAiB,cAAc,KAAK,CAAC,cAAc;;aAGvG,OAAO;AAAE,WAAM,EAAE,OAAO,OAAO;cAC9B;AACJ,SAAI;AACA,UAAI,MAAM,CAAC,GAAG,SAAS,KAAK,GAAG,QAAS,IAAG,KAAK,GAAG;eAE/C;AAAE,UAAI,IAAK,OAAM,IAAI;;;AAEjC,SAAK,GAAG,UAAU,iBAAiB,aAAa,CAC5C,cAAa,QAAQ,SAAU,GAAG;AAAE,YAAO,cAAc,aAAa,KAAK,EAAE;MAAI;QAIjF,eAAc,aAAa,KAAK,MAAM,UAAU,OAAO,aAAa;AAExE,SAAK,GAAG,UAAU,iBAAiB,oBAAoB,CACnD,qBAAoB,QAAQ,SAAU,GAAG;KACrC,IAAI,OAAO;MACP,SAAS,EAAE;MACX,UAAU,EAAE;MACf;AACD,SAAI,EAAE,UACF,MAAK,YAAY;AAErB,mBAAc,oBAAoB,KAAK,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC;MAC3D;AAEN,SAAK,GAAG,UAAU,iBAAiB,yBAAyB,EAAE;KAC1D,IAAI,eAAe;AACnB,8BAAyB,QAAQ,SAAU,GAAG;MAC1C,IAAI,OAAO;OACP,OAAO,OAAO,eAAe;OAC7B,SAAS,EAAE;OACX,UAAU,EAAE;OACf;AACD,UAAI,EAAE,UACF,MAAK,YAAY;AAErB,oBAAc,yBAAyB,KAAK,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC;OAChE;;AAON,IADsB,cAAc,OAAO,SAAU,MAAM;AAAE,aAAQ,GAAG,UAAU,iBAAiB,cAAc,MAAM;MAAI,CAC3G,QAAQ,SAAU,MAAM;AACpC,mBAAc,MAAM,QAAQ,SAAU,GAAG;MACrC,IAAIC;AACJ,aAAO,kBAAkB,MAAM,OAAK,EAAE,EAAE,KAAG,QAAQ,GAAGA,MAAI;OAC5D;MACJ;AAEF,YAAQ,GAAG,MAAM,SAAS,CAAC,EACnB,kBAAkB,CAAC,EACX,OAAO;KACO;KACV,SAAS,MAAM,UAAU,MAAM;KAC/B,mBAAmB,MAAM,UAAU,MAAM;KACzC,YAAY;KACf,EACJ,EAAE,EAAE,iBAAiB,mBAAmB,CAAC,EACjD,CAAC,CAAC;;AAGX,UAAO,OAAO,KAAK,MAAM,MAAM,CAC3B;IACI,KAAK;IACL,WAAW,CAAC,oBAAoB,kBAAkB;IAClD,YAAY,CAAC,wBAAwB,sBAAsB;IAC9D,EACD;IACI,KAAK;IACL,WAAW;KAAC;KAAoB;KAAmB;KAA2B;IAC9E,YAAY;KAAC;KAAW;KAAY;KAAa;KAAQ;IAC5D,CACJ,CAAC,IAAI;;;;;;AAMV,eAAW,UAAU,yBAAyB,WAAY;AACtD,UAAO,KAAK,KAAK,gBAAgB,yBAAyB;;;;;;AAM9D,eAAW,UAAU,uBAAuB,WAAY;AACpD,UAAO,KAAK,KAAK,gBAAgB,wBAAwB;;;;;;;AAO7D,eAAW,UAAU,8BAA8B,SAAU,SAAS;AAClE,QAAK,GAAG,UAAU,UAAU,QAAQ,EAAE;IAClC,IAAI;IACJ,IAAI,aAAa,MAAM,UAAU,QAAQ;AACzC,SAAK,GAAG,UAAU,iBAAiB,KAAK,KAAK,yBAAyB,CAClE,MAAK,KAAK,yBAAyB,QAAQ,SAAU,KAAK;AACtD,SAAI,IAAI,YAAY,YAAY;AAC5B,mBAAa,IAAI;AACjB;;MAEN;aAGE,KAAK,KAAK,yBAAyB,YAAY,WAC/C,cAAa,KAAK,KAAK,yBAAyB;AAGxD,WAAO;;AAEX,UAAO,KAAK,KAAK;;AAErB,SAAOD;GACT,WAAW,QAAQ;AACrB,SAAQ,aAAa"}