@intlayer/backend 7.1.4 → 7.1.5

package/dist/cjs/node_modules/samlify/build/src/binding-simplesign.cjs

@@ -1,361 +0,0 @@
-const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
-const require_utility$1 = require('./utility.cjs');
-const require_urn$1 = require('./urn.cjs');
-const require_libsaml$1 = require('./libsaml.cjs');
-
-//#region ../../node_modules/samlify/build/src/binding-simplesign.js
-var require_binding_simplesign = /* @__PURE__ */ require_rolldown_runtime.__commonJS({ "../../node_modules/samlify/build/src/binding-simplesign.js": ((exports) => {
-	/**
-	* @file binding-simplesign.ts
-	* @author Orange
-	* @desc Binding-level API, declare the functions using POST SimpleSign binding
-	*/
-	var __assign = exports && exports.__assign || function() {
-		__assign = Object.assign || function(t) {
-			for (var s, i = 1, n = arguments.length; i < n; i++) {
-				s = arguments[i];
-				for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
-			}
-			return t;
-		};
-		return __assign.apply(this, arguments);
-	};
-	var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
-		if (k2 === void 0) k2 = k;
-		var desc = Object.getOwnPropertyDescriptor(m, k);
-		if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) desc = {
-			enumerable: true,
-			get: function() {
-				return m[k];
-			}
-		};
-		Object.defineProperty(o, k2, desc);
-	}) : (function(o, m, k, k2) {
-		if (k2 === void 0) k2 = k;
-		o[k2] = m[k];
-	}));
-	var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
-		Object.defineProperty(o, "default", {
-			enumerable: true,
-			value: v
-		});
-	}) : function(o, v) {
-		o["default"] = v;
-	});
-	var __importStar = exports && exports.__importStar || function(mod) {
-		if (mod && mod.__esModule) return mod;
-		var result = {};
-		if (mod != null) {
-			for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-		}
-		__setModuleDefault(result, mod);
-		return result;
-	};
-	var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
-		function adopt(value) {
-			return value instanceof P ? value : new P(function(resolve) {
-				resolve(value);
-			});
-		}
-		return new (P || (P = Promise))(function(resolve, reject) {
-			function fulfilled(value) {
-				try {
-					step(generator.next(value));
-				} catch (e) {
-					reject(e);
-				}
-			}
-			function rejected(value) {
-				try {
-					step(generator["throw"](value));
-				} catch (e) {
-					reject(e);
-				}
-			}
-			function step(result) {
-				result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
-			}
-			step((generator = generator.apply(thisArg, _arguments || [])).next());
-		});
-	};
-	var __generator = exports && exports.__generator || function(thisArg, body) {
-		var _ = {
-			label: 0,
-			sent: function() {
-				if (t[0] & 1) throw t[1];
-				return t[1];
-			},
-			trys: [],
-			ops: []
-		}, f, y, t, g;
-		return g = {
-			next: verb(0),
-			"throw": verb(1),
-			"return": verb(2)
-		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-			return this;
-		}), g;
-		function verb(n) {
-			return function(v) {
-				return step([n, v]);
-			};
-		}
-		function step(op) {
-			if (f) throw new TypeError("Generator is already executing.");
-			while (_) try {
-				if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-				if (y = 0, t) op = [op[0] & 2, t.value];
-				switch (op[0]) {
-					case 0:
-					case 1:
-						t = op;
-						break;
-					case 4:
-						_.label++;
-						return {
-							value: op[1],
-							done: false
-						};
-					case 5:
-						_.label++;
-						y = op[1];
-						op = [0];
-						continue;
-					case 7:
-						op = _.ops.pop();
-						_.trys.pop();
-						continue;
-					default:
-						if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-							_ = 0;
-							continue;
-						}
-						if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-							_.label = op[1];
-							break;
-						}
-						if (op[0] === 6 && _.label < t[1]) {
-							_.label = t[1];
-							t = op;
-							break;
-						}
-						if (t && _.label < t[2]) {
-							_.label = t[2];
-							_.ops.push(op);
-							break;
-						}
-						if (t[2]) _.ops.pop();
-						_.trys.pop();
-						continue;
-				}
-				op = body.call(thisArg, _);
-			} catch (e) {
-				op = [6, e];
-				y = 0;
-			} finally {
-				f = t = 0;
-			}
-			if (op[0] & 5) throw op[1];
-			return {
-				value: op[0] ? op[1] : void 0,
-				done: true
-			};
-		}
-	};
-	var __importDefault = exports && exports.__importDefault || function(mod) {
-		return mod && mod.__esModule ? mod : { "default": mod };
-	};
-	Object.defineProperty(exports, "__esModule", { value: true });
-	var urn_1 = require_urn$1.default;
-	var libsaml_1 = __importDefault(require_libsaml$1.default);
-	var utility_1 = __importStar(require_utility$1.default);
-	var binding = urn_1.wording.binding;
-	var urlParams = urn_1.wording.urlParams;
-	/**
-	* @private
-	* @desc Helper of generating URL param/value pair
-	* @param  {string} param     key
-	* @param  {string} value     value of key
-	* @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'
-	* @return {string}
-	*/
-	function pvPair(param, value, first) {
-		return (first === true ? "?" : "&") + param + "=" + value;
-	}
-	/**
-	* @private
-	* @desc Refactored part of simple signature generation for login/logout request
-	* @param  {string} type
-	* @param  {string} rawSamlRequest
-	* @param  {object} entitySetting
-	* @return {string}
-	*/
-	function buildSimpleSignature(opts) {
-		var type = opts.type, context = opts.context, entitySetting = opts.entitySetting;
-		var _a = opts.relayState, relayState = _a === void 0 ? "" : _a;
-		var queryParam = libsaml_1.default.getQueryParamByType(type);
-		if (relayState !== "") relayState = pvPair(urlParams.relayState, relayState);
-		var sigAlg = pvPair(urlParams.sigAlg, entitySetting.requestSignatureAlgorithm);
-		var octetString = context + relayState + sigAlg;
-		return libsaml_1.default.constructMessageSignature(queryParam + "=" + octetString, entitySetting.privateKey, entitySetting.privateKeyPass, void 0, entitySetting.requestSignatureAlgorithm).toString();
-	}
-	/**
-	* @desc Generate a base64 encoded login request
-	* @param  {string} referenceTagXPath           reference uri
-	* @param  {object} entity                      object includes both idp and sp
-	* @param  {function} customTagReplacement     used when developers have their own login response template
-	*/
-	function base64LoginRequest(entity, customTagReplacement) {
-		var metadata = {
-			idp: entity.idp.entityMeta,
-			sp: entity.sp.entityMeta
-		};
-		var spSetting = entity.sp.entitySetting;
-		var id = "";
-		if (metadata && metadata.idp && metadata.sp) {
-			var base = metadata.idp.getSingleSignOnService(binding.simpleSign);
-			var rawSamlRequest = void 0;
-			if (spSetting.loginRequestTemplate && customTagReplacement) {
-				var info = customTagReplacement(spSetting.loginRequestTemplate.context);
-				id = (0, utility_1.get)(info, "id", null);
-				rawSamlRequest = (0, utility_1.get)(info, "context", null);
-			} else {
-				var nameIDFormat = spSetting.nameIDFormat;
-				var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-				id = spSetting.generateID();
-				rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, {
-					ID: id,
-					Destination: base,
-					Issuer: metadata.sp.getEntityID(),
-					IssueInstant: (/* @__PURE__ */ new Date()).toISOString(),
-					AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.simpleSign),
-					EntityID: metadata.sp.getEntityID(),
-					AllowCreate: spSetting.allowCreate,
-					NameIDFormat: selectedNameIDFormat
-				});
-			}
-			var simpleSignatureContext = null;
-			if (metadata.idp.isWantAuthnRequestsSigned()) simpleSignatureContext = {
-				signature: buildSimpleSignature({
-					type: urlParams.samlRequest,
-					context: rawSamlRequest,
-					entitySetting: spSetting,
-					relayState: spSetting.relayState
-				}),
-				sigAlg: spSetting.requestSignatureAlgorithm
-			};
-			return __assign({
-				id,
-				context: utility_1.default.base64Encode(rawSamlRequest)
-			}, simpleSignatureContext);
-		}
-		throw new Error("ERR_GENERATE_POST_SIMPLESIGN_LOGIN_REQUEST_MISSING_METADATA");
-	}
-	/**
-	* @desc Generate a base64 encoded login response
-	* @param  {object} requestInfo                 corresponding request, used to obtain the id
-	* @param  {object} entity                      object includes both idp and sp
-	* @param  {object} user                        current logged user (e.g. req.user)
-	* @param  {string}  relayState               the relay state
-	* @param  {function} customTagReplacement     used when developers have their own login response template
-	*/
-	function base64LoginResponse(requestInfo, entity, user, relayState, customTagReplacement) {
-		if (requestInfo === void 0) requestInfo = {};
-		if (user === void 0) user = {};
-		return __awaiter(this, void 0, void 0, function() {
-			var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, fiveMinutesLaterTime, tvalue, template, privateKey, privateKeyPass, signatureAlgorithm, config, simpleSignature;
-			return __generator(this, function(_a) {
-				idpSetting = entity.idp.entitySetting;
-				spSetting = entity.sp.entitySetting;
-				id = idpSetting.generateID();
-				metadata = {
-					idp: entity.idp.entityMeta,
-					sp: entity.sp.entityMeta
-				};
-				nameIDFormat = idpSetting.nameIDFormat;
-				selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-				if (metadata && metadata.idp && metadata.sp) {
-					base = metadata.sp.getAssertionConsumerService(binding.simpleSign);
-					rawSamlResponse = void 0;
-					nowTime = /* @__PURE__ */ new Date();
-					fiveMinutesLaterTime = new Date(nowTime.getTime() + 3e5);
-					tvalue = {
-						ID: id,
-						AssertionID: idpSetting.generateID(),
-						Destination: base,
-						Audience: metadata.sp.getEntityID(),
-						EntityID: metadata.sp.getEntityID(),
-						SubjectRecipient: base,
-						Issuer: metadata.idp.getEntityID(),
-						IssueInstant: nowTime.toISOString(),
-						AssertionConsumerServiceURL: base,
-						StatusCode: urn_1.StatusCode.Success,
-						ConditionsNotBefore: nowTime.toISOString(),
-						ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-						SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-						NameIDFormat: selectedNameIDFormat,
-						NameID: user.email || "",
-						InResponseTo: (0, utility_1.get)(requestInfo, "extract.request.id", ""),
-						AuthnStatement: "",
-						AttributeStatement: ""
-					};
-					if (idpSetting.loginResponseTemplate && customTagReplacement) {
-						template = customTagReplacement(idpSetting.loginResponseTemplate.context);
-						rawSamlResponse = (0, utility_1.get)(template, "context", null);
-					} else {
-						if (requestInfo !== null) tvalue.InResponseTo = requestInfo.extract.request.id;
-						rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginResponseTemplate.context, tvalue);
-					}
-					privateKey = idpSetting.privateKey, privateKeyPass = idpSetting.privateKeyPass, signatureAlgorithm = idpSetting.requestSignatureAlgorithm;
-					config = {
-						privateKey,
-						privateKeyPass,
-						signatureAlgorithm,
-						signingCert: metadata.idp.getX509Certificate("signing"),
-						isBase64Output: false
-					};
-					if (metadata.sp.isWantAssertionsSigned()) rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), {
-						rawSamlMessage: rawSamlResponse,
-						transformationAlgorithms: spSetting.transformationAlgorithms,
-						referenceTagXPath: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']",
-						signatureConfig: {
-							prefix: "ds",
-							location: {
-								reference: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']",
-								action: "after"
-							}
-						}
-					}));
-					simpleSignature = "";
-					simpleSignature = buildSimpleSignature({
-						type: urlParams.samlResponse,
-						context: rawSamlResponse,
-						entitySetting: idpSetting,
-						relayState
-					});
-					return [2, Promise.resolve({
-						id,
-						context: utility_1.default.base64Encode(rawSamlResponse),
-						signature: simpleSignature,
-						sigAlg: idpSetting.requestSignatureAlgorithm
-					})];
-				}
-				throw new Error("ERR_GENERATE_POST_SIMPLESIGN_LOGIN_RESPONSE_MISSING_METADATA");
-			});
-		});
-	}
-	var simpleSignBinding = {
-		base64LoginRequest,
-		base64LoginResponse
-	};
-	exports.default = simpleSignBinding;
-}) });
-
-//#endregion
-Object.defineProperty(exports, 'default', {
-  enumerable: true,
-  get: function () {
-    return require_binding_simplesign();
-  }
-});
-//# sourceMappingURL=binding-simplesign.cjs.map

package/dist/cjs/node_modules/samlify/build/src/binding-simplesign.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding-simplesign.cjs","names":[],"sources":["../../../../../../../../node_modules/samlify/build/src/binding-simplesign.js"],"sourcesContent":["\"use strict\";\n/**\n* @file binding-simplesign.ts\n* @author Orange\n* @desc Binding-level API, declare the functions using POST SimpleSign binding\n*/\nvar __assign = (this && this.__assign) || function () {\n    __assign = Object.assign || function(t) {\n        for (var s, i = 1, n = arguments.length; i < n; i++) {\n            s = arguments[i];\n            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))\n                t[p] = s[p];\n        }\n        return t;\n    };\n    return __assign.apply(this, arguments);\n};\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    var desc = Object.getOwnPropertyDescriptor(m, k);\n    if (!desc || (\"get\" in desc ? !m.__esModule : desc.writable || desc.configurable)) {\n      desc = { enumerable: true, get: function() { return m[k]; } };\n    }\n    Object.defineProperty(o, k2, desc);\n}) : (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n    Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n    o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || function (mod) {\n    if (mod && mod.__esModule) return mod;\n    var result = {};\n    if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\n    __setModuleDefault(result, mod);\n    return result;\n};\nvar __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nvar __generator = (this && this.__generator) || function (thisArg, body) {\n    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\n    return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\n    function verb(n) { return function (v) { return step([n, v]); }; }\n    function step(op) {\n        if (f) throw new TypeError(\"Generator is already executing.\");\n        while (_) try {\n            if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\n            if (y = 0, t) op = [op[0] & 2, t.value];\n            switch (op[0]) {\n                case 0: case 1: t = op; break;\n                case 4: _.label++; return { value: op[1], done: false };\n                case 5: _.label++; y = op[1]; op = [0]; continue;\n                case 7: op = _.ops.pop(); _.trys.pop(); continue;\n                default:\n                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\n                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\n                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\n                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\n                    if (t[2]) _.ops.pop();\n                    _.trys.pop(); continue;\n            }\n            op = body.call(thisArg, _);\n        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\n        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\n    }\n};\nvar __importDefault = (this && this.__importDefault) || function (mod) {\n    return (mod && mod.__esModule) ? mod : { \"default\": mod };\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nvar urn_1 = require(\"./urn\");\nvar libsaml_1 = __importDefault(require(\"./libsaml\"));\nvar utility_1 = __importStar(require(\"./utility\"));\nvar binding = urn_1.wording.binding;\nvar urlParams = urn_1.wording.urlParams;\n/**\n* @private\n* @desc Helper of generating URL param/value pair\n* @param  {string} param     key\n* @param  {string} value     value of key\n* @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'\n* @return {string}\n*/\nfunction pvPair(param, value, first) {\n    return (first === true ? '?' : '&') + param + '=' + value;\n}\n/**\n* @private\n* @desc Refactored part of simple signature generation for login/logout request\n* @param  {string} type\n* @param  {string} rawSamlRequest\n* @param  {object} entitySetting\n* @return {string}\n*/\nfunction buildSimpleSignature(opts) {\n    var type = opts.type, context = opts.context, entitySetting = opts.entitySetting;\n    var _a = opts.relayState, relayState = _a === void 0 ? '' : _a;\n    var queryParam = libsaml_1.default.getQueryParamByType(type);\n    if (relayState !== '') {\n        relayState = pvPair(urlParams.relayState, relayState);\n    }\n    var sigAlg = pvPair(urlParams.sigAlg, entitySetting.requestSignatureAlgorithm);\n    var octetString = context + relayState + sigAlg;\n    return libsaml_1.default.constructMessageSignature(queryParam + '=' + octetString, entitySetting.privateKey, entitySetting.privateKeyPass, undefined, entitySetting.requestSignatureAlgorithm).toString();\n}\n/**\n* @desc Generate a base64 encoded login request\n* @param  {string} referenceTagXPath           reference uri\n* @param  {object} entity                      object includes both idp and sp\n* @param  {function} customTagReplacement     used when developers have their own login response template\n*/\nfunction base64LoginRequest(entity, customTagReplacement) {\n    var metadata = { idp: entity.idp.entityMeta, sp: entity.sp.entityMeta };\n    var spSetting = entity.sp.entitySetting;\n    var id = '';\n    if (metadata && metadata.idp && metadata.sp) {\n        var base = metadata.idp.getSingleSignOnService(binding.simpleSign);\n        var rawSamlRequest = void 0;\n        if (spSetting.loginRequestTemplate && customTagReplacement) {\n            var info = customTagReplacement(spSetting.loginRequestTemplate.context);\n            id = (0, utility_1.get)(info, 'id', null);\n            rawSamlRequest = (0, utility_1.get)(info, 'context', null);\n        }\n        else {\n            var nameIDFormat = spSetting.nameIDFormat;\n            var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;\n            id = spSetting.generateID();\n            rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, {\n                ID: id,\n                Destination: base,\n                Issuer: metadata.sp.getEntityID(),\n                IssueInstant: new Date().toISOString(),\n                AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.simpleSign),\n                EntityID: metadata.sp.getEntityID(),\n                AllowCreate: spSetting.allowCreate,\n                NameIDFormat: selectedNameIDFormat\n            });\n        }\n        var simpleSignatureContext = null;\n        if (metadata.idp.isWantAuthnRequestsSigned()) {\n            var simpleSignature = buildSimpleSignature({\n                type: urlParams.samlRequest,\n                context: rawSamlRequest,\n                entitySetting: spSetting,\n                relayState: spSetting.relayState,\n            });\n            simpleSignatureContext = {\n                signature: simpleSignature,\n                sigAlg: spSetting.requestSignatureAlgorithm,\n            };\n        }\n        // No need to embeded XML signature\n        return __assign({ id: id, context: utility_1.default.base64Encode(rawSamlRequest) }, simpleSignatureContext);\n    }\n    throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_REQUEST_MISSING_METADATA');\n}\n/**\n* @desc Generate a base64 encoded login response\n* @param  {object} requestInfo                 corresponding request, used to obtain the id\n* @param  {object} entity                      object includes both idp and sp\n* @param  {object} user                        current logged user (e.g. req.user)\n* @param  {string}  relayState               the relay state\n* @param  {function} customTagReplacement     used when developers have their own login response template\n*/\nfunction base64LoginResponse(requestInfo, entity, user, relayState, customTagReplacement) {\n    if (requestInfo === void 0) { requestInfo = {}; }\n    if (user === void 0) { user = {}; }\n    return __awaiter(this, void 0, void 0, function () {\n        var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, fiveMinutesLaterTime, tvalue, template, privateKey, privateKeyPass, signatureAlgorithm, config, simpleSignature;\n        return __generator(this, function (_a) {\n            idpSetting = entity.idp.entitySetting;\n            spSetting = entity.sp.entitySetting;\n            id = idpSetting.generateID();\n            metadata = {\n                idp: entity.idp.entityMeta,\n                sp: entity.sp.entityMeta,\n            };\n            nameIDFormat = idpSetting.nameIDFormat;\n            selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;\n            if (metadata && metadata.idp && metadata.sp) {\n                base = metadata.sp.getAssertionConsumerService(binding.simpleSign);\n                rawSamlResponse = void 0;\n                nowTime = new Date();\n                fiveMinutesLaterTime = new Date(nowTime.getTime() + 300000);\n                tvalue = {\n                    ID: id,\n                    AssertionID: idpSetting.generateID(),\n                    Destination: base,\n                    Audience: metadata.sp.getEntityID(),\n                    EntityID: metadata.sp.getEntityID(),\n                    SubjectRecipient: base,\n                    Issuer: metadata.idp.getEntityID(),\n                    IssueInstant: nowTime.toISOString(),\n                    AssertionConsumerServiceURL: base,\n                    StatusCode: urn_1.StatusCode.Success,\n                    // can be customized\n                    ConditionsNotBefore: nowTime.toISOString(),\n                    ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),\n                    SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),\n                    NameIDFormat: selectedNameIDFormat,\n                    NameID: user.email || '',\n                    InResponseTo: (0, utility_1.get)(requestInfo, 'extract.request.id', ''),\n                    AuthnStatement: '',\n                    AttributeStatement: '',\n                };\n                if (idpSetting.loginResponseTemplate && customTagReplacement) {\n                    template = customTagReplacement(idpSetting.loginResponseTemplate.context);\n                    rawSamlResponse = (0, utility_1.get)(template, 'context', null);\n                }\n                else {\n                    if (requestInfo !== null) {\n                        tvalue.InResponseTo = requestInfo.extract.request.id;\n                    }\n                    rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginResponseTemplate.context, tvalue);\n                }\n                privateKey = idpSetting.privateKey, privateKeyPass = idpSetting.privateKeyPass, signatureAlgorithm = idpSetting.requestSignatureAlgorithm;\n                config = {\n                    privateKey: privateKey,\n                    privateKeyPass: privateKeyPass,\n                    signatureAlgorithm: signatureAlgorithm,\n                    signingCert: metadata.idp.getX509Certificate('signing'),\n                    isBase64Output: false,\n                };\n                // step: sign assertion ? -> encrypted ? -> sign message ?\n                if (metadata.sp.isWantAssertionsSigned()) {\n                    rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), { rawSamlMessage: rawSamlResponse, transformationAlgorithms: spSetting.transformationAlgorithms, referenceTagXPath: \"/*[local-name(.)='Response']/*[local-name(.)='Assertion']\", signatureConfig: {\n                            prefix: 'ds',\n                            location: { reference: \"/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']\", action: 'after' },\n                        } }));\n                }\n                simpleSignature = '';\n                // like in post and redirect bindings, login response is always signed.\n                simpleSignature = buildSimpleSignature({\n                    type: urlParams.samlResponse,\n                    context: rawSamlResponse,\n                    entitySetting: idpSetting,\n                    relayState: relayState,\n                });\n                return [2 /*return*/, Promise.resolve({\n                        id: id,\n                        context: utility_1.default.base64Encode(rawSamlResponse),\n                        signature: simpleSignature,\n                        sigAlg: idpSetting.requestSignatureAlgorithm,\n                    })];\n            }\n            throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_RESPONSE_MISSING_METADATA');\n        });\n    });\n}\nvar simpleSignBinding = {\n    base64LoginRequest: base64LoginRequest,\n    base64LoginResponse: base64LoginResponse,\n};\nexports.default = simpleSignBinding;\n//# sourceMappingURL=binding-simplesign.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;CAMA,IAAI,8BAAyB,YAAa,WAAY;AAClD,aAAW,OAAO,UAAU,SAAS,GAAG;AACpC,QAAK,IAAI,GAAG,IAAI,GAAG,IAAI,UAAU,QAAQ,IAAI,GAAG,KAAK;AACjD,QAAI,UAAU;AACd,SAAK,IAAI,KAAK,EAAG,KAAI,OAAO,UAAU,eAAe,KAAK,GAAG,EAAE,CAC3D,GAAE,KAAK,EAAE;;AAEjB,UAAO;;AAEX,SAAO,SAAS,MAAM,MAAM,UAAU;;CAE1C,IAAI,qCAAgC,oBAAqB,OAAO,UAAU,SAAS,GAAG,GAAG,GAAG,IAAI;AAC5F,MAAI,OAAO,OAAW,MAAK;EAC3B,IAAI,OAAO,OAAO,yBAAyB,GAAG,EAAE;AAChD,MAAI,CAAC,SAAS,SAAS,OAAO,CAAC,EAAE,aAAa,KAAK,YAAY,KAAK,cAClE,QAAO;GAAE,YAAY;GAAM,KAAK,WAAW;AAAE,WAAO,EAAE;;GAAO;AAE/D,SAAO,eAAe,GAAG,IAAI,KAAK;OAChC,SAAS,GAAG,GAAG,GAAG,IAAI;AACxB,MAAI,OAAO,OAAW,MAAK;AAC3B,IAAE,MAAM,EAAE;;CAEd,IAAI,wCAAmC,uBAAwB,OAAO,UAAU,SAAS,GAAG,GAAG;AAC3F,SAAO,eAAe,GAAG,WAAW;GAAE,YAAY;GAAM,OAAO;GAAG,CAAC;MAClE,SAAS,GAAG,GAAG;AAChB,IAAE,aAAa;;CAEnB,IAAI,kCAA6B,gBAAiB,SAAU,KAAK;AAC7D,MAAI,OAAO,IAAI,WAAY,QAAO;EAClC,IAAI,SAAS,EAAE;AACf,MAAI,OAAO,MAAM;QAAK,IAAI,KAAK,IAAK,KAAI,MAAM,aAAa,OAAO,UAAU,eAAe,KAAK,KAAK,EAAE,CAAE,iBAAgB,QAAQ,KAAK,EAAE;;AACxI,qBAAmB,QAAQ,IAAI;AAC/B,SAAO;;CAEX,IAAI,+BAA0B,aAAc,SAAU,SAAS,YAAY,GAAG,WAAW;EACrF,SAAS,MAAM,OAAO;AAAE,UAAO,iBAAiB,IAAI,QAAQ,IAAI,EAAE,SAAU,SAAS;AAAE,YAAQ,MAAM;KAAI;;AACzG,SAAO,KAAK,MAAM,IAAI,UAAU,SAAU,SAAS,QAAQ;GACvD,SAAS,UAAU,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,KAAK,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACtF,SAAS,SAAS,OAAO;AAAE,QAAI;AAAE,UAAK,UAAU,SAAS,MAAM,CAAC;aAAW,GAAG;AAAE,YAAO,EAAE;;;GACzF,SAAS,KAAK,QAAQ;AAAE,WAAO,OAAO,QAAQ,OAAO,MAAM,GAAG,MAAM,OAAO,MAAM,CAAC,KAAK,WAAW,SAAS;;AAC3G,SAAM,YAAY,UAAU,MAAM,SAAS,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC;IACvE;;CAEN,IAAI,iCAA4B,eAAgB,SAAU,SAAS,MAAM;EACrE,IAAI,IAAI;GAAE,OAAO;GAAG,MAAM,WAAW;AAAE,QAAI,EAAE,KAAK,EAAG,OAAM,EAAE;AAAI,WAAO,EAAE;;GAAO,MAAM,EAAE;GAAE,KAAK,EAAE;GAAE,EAAE,GAAG,GAAG,GAAG;AAC/G,SAAO,IAAI;GAAE,MAAM,KAAK,EAAE;GAAE,SAAS,KAAK,EAAE;GAAE,UAAU,KAAK,EAAE;GAAE,EAAE,OAAO,WAAW,eAAe,EAAE,OAAO,YAAY,WAAW;AAAE,UAAO;MAAU;EACvJ,SAAS,KAAK,GAAG;AAAE,UAAO,SAAU,GAAG;AAAE,WAAO,KAAK,CAAC,GAAG,EAAE,CAAC;;;EAC5D,SAAS,KAAK,IAAI;AACd,OAAI,EAAG,OAAM,IAAI,UAAU,kCAAkC;AAC7D,UAAO,EAAG,KAAI;AACV,QAAI,IAAI,GAAG,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,YAAY,GAAG,KAAK,EAAE,cAAc,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,KAAM,QAAO;AAC3J,QAAI,IAAI,GAAG,EAAG,MAAK,CAAC,GAAG,KAAK,GAAG,EAAE,MAAM;AACvC,YAAQ,GAAG,IAAX;KACI,KAAK;KAAG,KAAK;AAAG,UAAI;AAAI;KACxB,KAAK;AAAG,QAAE;AAAS,aAAO;OAAE,OAAO,GAAG;OAAI,MAAM;OAAO;KACvD,KAAK;AAAG,QAAE;AAAS,UAAI,GAAG;AAAI,WAAK,CAAC,EAAE;AAAE;KACxC,KAAK;AAAG,WAAK,EAAE,IAAI,KAAK;AAAE,QAAE,KAAK,KAAK;AAAE;KACxC;AACI,UAAI,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,SAAS,QAAQ,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI;AAAE,WAAI;AAAG;;AACjG,UAAI,GAAG,OAAO,MAAM,CAAC,KAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,KAAM;AAAE,SAAE,QAAQ,GAAG;AAAI;;AAC9E,UAAI,GAAG,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,WAAI;AAAI;;AAC7D,UAAI,KAAK,EAAE,QAAQ,EAAE,IAAI;AAAE,SAAE,QAAQ,EAAE;AAAI,SAAE,IAAI,KAAK,GAAG;AAAE;;AAC3D,UAAI,EAAE,GAAI,GAAE,IAAI,KAAK;AACrB,QAAE,KAAK,KAAK;AAAE;;AAEtB,SAAK,KAAK,KAAK,SAAS,EAAE;YACrB,GAAG;AAAE,SAAK,CAAC,GAAG,EAAE;AAAE,QAAI;aAAa;AAAE,QAAI,IAAI;;AACtD,OAAI,GAAG,KAAK,EAAG,OAAM,GAAG;AAAI,UAAO;IAAE,OAAO,GAAG,KAAK,GAAG,KAAK,KAAK;IAAG,MAAM;IAAM;;;CAGxF,IAAI,qCAAgC,mBAAoB,SAAU,KAAK;AACnE,SAAQ,OAAO,IAAI,aAAc,MAAM,EAAE,WAAW,KAAK;;AAE7D,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;CAC7D,IAAI;CACJ,IAAI,YAAY,0CAAqC;CACrD,IAAI,YAAY,uCAAkC;CAClD,IAAI,UAAU,MAAM,QAAQ;CAC5B,IAAI,YAAY,MAAM,QAAQ;;;;;;;;;CAS9B,SAAS,OAAO,OAAO,OAAO,OAAO;AACjC,UAAQ,UAAU,OAAO,MAAM,OAAO,QAAQ,MAAM;;;;;;;;;;CAUxD,SAAS,qBAAqB,MAAM;EAChC,IAAI,OAAO,KAAK,MAAM,UAAU,KAAK,SAAS,gBAAgB,KAAK;EACnE,IAAI,KAAK,KAAK,YAAY,aAAa,OAAO,KAAK,IAAI,KAAK;EAC5D,IAAI,aAAa,UAAU,QAAQ,oBAAoB,KAAK;AAC5D,MAAI,eAAe,GACf,cAAa,OAAO,UAAU,YAAY,WAAW;EAEzD,IAAI,SAAS,OAAO,UAAU,QAAQ,cAAc,0BAA0B;EAC9E,IAAI,cAAc,UAAU,aAAa;AACzC,SAAO,UAAU,QAAQ,0BAA0B,aAAa,MAAM,aAAa,cAAc,YAAY,cAAc,gBAAgB,QAAW,cAAc,0BAA0B,CAAC,UAAU;;;;;;;;CAQ7M,SAAS,mBAAmB,QAAQ,sBAAsB;EACtD,IAAI,WAAW;GAAE,KAAK,OAAO,IAAI;GAAY,IAAI,OAAO,GAAG;GAAY;EACvE,IAAI,YAAY,OAAO,GAAG;EAC1B,IAAI,KAAK;AACT,MAAI,YAAY,SAAS,OAAO,SAAS,IAAI;GACzC,IAAI,OAAO,SAAS,IAAI,uBAAuB,QAAQ,WAAW;GAClE,IAAI,iBAAiB,KAAK;AAC1B,OAAI,UAAU,wBAAwB,sBAAsB;IACxD,IAAI,OAAO,qBAAqB,UAAU,qBAAqB,QAAQ;AACvE,UAAM,GAAG,UAAU,KAAK,MAAM,MAAM,KAAK;AACzC,sBAAkB,GAAG,UAAU,KAAK,MAAM,WAAW,KAAK;UAEzD;IACD,IAAI,eAAe,UAAU;IAC7B,IAAI,uBAAuB,MAAM,QAAQ,aAAa,GAAG,aAAa,KAAK;AAC3E,SAAK,UAAU,YAAY;AAC3B,qBAAiB,UAAU,QAAQ,mBAAmB,UAAU,QAAQ,4BAA4B,SAAS;KACzG,IAAI;KACJ,aAAa;KACb,QAAQ,SAAS,GAAG,aAAa;KACjC,+BAAc,IAAI,MAAM,EAAC,aAAa;KACtC,6BAA6B,SAAS,GAAG,4BAA4B,QAAQ,WAAW;KACxF,UAAU,SAAS,GAAG,aAAa;KACnC,aAAa,UAAU;KACvB,cAAc;KACjB,CAAC;;GAEN,IAAI,yBAAyB;AAC7B,OAAI,SAAS,IAAI,2BAA2B,CAOxC,0BAAyB;IACrB,WAPkB,qBAAqB;KACvC,MAAM,UAAU;KAChB,SAAS;KACT,eAAe;KACf,YAAY,UAAU;KACzB,CAAC;IAGE,QAAQ,UAAU;IACrB;AAGL,UAAO,SAAS;IAAM;IAAI,SAAS,UAAU,QAAQ,aAAa,eAAe;IAAE,EAAE,uBAAuB;;AAEhH,QAAM,IAAI,MAAM,8DAA8D;;;;;;;;;;CAUlF,SAAS,oBAAoB,aAAa,QAAQ,MAAM,YAAY,sBAAsB;AACtF,MAAI,gBAAgB,KAAK,EAAK,eAAc,EAAE;AAC9C,MAAI,SAAS,KAAK,EAAK,QAAO,EAAE;AAChC,SAAO,UAAU,MAAM,KAAK,GAAG,KAAK,GAAG,WAAY;GAC/C,IAAI,YAAY,WAAW,IAAI,UAAU,cAAc,sBAAsB,MAAM,iBAAiB,SAAS,sBAAsB,QAAQ,UAAU,YAAY,gBAAgB,oBAAoB,QAAQ;AAC7M,UAAO,YAAY,MAAM,SAAU,IAAI;AACnC,iBAAa,OAAO,IAAI;AACxB,gBAAY,OAAO,GAAG;AACtB,SAAK,WAAW,YAAY;AAC5B,eAAW;KACP,KAAK,OAAO,IAAI;KAChB,IAAI,OAAO,GAAG;KACjB;AACD,mBAAe,WAAW;AAC1B,2BAAuB,MAAM,QAAQ,aAAa,GAAG,aAAa,KAAK;AACvE,QAAI,YAAY,SAAS,OAAO,SAAS,IAAI;AACzC,YAAO,SAAS,GAAG,4BAA4B,QAAQ,WAAW;AAClE,uBAAkB,KAAK;AACvB,+BAAU,IAAI,MAAM;AACpB,4BAAuB,IAAI,KAAK,QAAQ,SAAS,GAAG,IAAO;AAC3D,cAAS;MACL,IAAI;MACJ,aAAa,WAAW,YAAY;MACpC,aAAa;MACb,UAAU,SAAS,GAAG,aAAa;MACnC,UAAU,SAAS,GAAG,aAAa;MACnC,kBAAkB;MAClB,QAAQ,SAAS,IAAI,aAAa;MAClC,cAAc,QAAQ,aAAa;MACnC,6BAA6B;MAC7B,YAAY,MAAM,WAAW;MAE7B,qBAAqB,QAAQ,aAAa;MAC1C,wBAAwB,qBAAqB,aAAa;MAC1D,qCAAqC,qBAAqB,aAAa;MACvE,cAAc;MACd,QAAQ,KAAK,SAAS;MACtB,eAAe,GAAG,UAAU,KAAK,aAAa,sBAAsB,GAAG;MACvE,gBAAgB;MAChB,oBAAoB;MACvB;AACD,SAAI,WAAW,yBAAyB,sBAAsB;AAC1D,iBAAW,qBAAqB,WAAW,sBAAsB,QAAQ;AACzE,yBAAmB,GAAG,UAAU,KAAK,UAAU,WAAW,KAAK;YAE9D;AACD,UAAI,gBAAgB,KAChB,QAAO,eAAe,YAAY,QAAQ,QAAQ;AAEtD,wBAAkB,UAAU,QAAQ,mBAAmB,UAAU,QAAQ,6BAA6B,SAAS,OAAO;;AAE1H,kBAAa,WAAW,YAAY,iBAAiB,WAAW,gBAAgB,qBAAqB,WAAW;AAChH,cAAS;MACO;MACI;MACI;MACpB,aAAa,SAAS,IAAI,mBAAmB,UAAU;MACvD,gBAAgB;MACnB;AAED,SAAI,SAAS,GAAG,wBAAwB,CACpC,mBAAkB,UAAU,QAAQ,uBAAuB,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE;MAAE,gBAAgB;MAAiB,0BAA0B,UAAU;MAA0B,mBAAmB;MAA6D,iBAAiB;OACpR,QAAQ;OACR,UAAU;QAAE,WAAW;QAAuF,QAAQ;QAAS;OAClI;MAAE,CAAC,CAAC;AAEb,uBAAkB;AAElB,uBAAkB,qBAAqB;MACnC,MAAM,UAAU;MAChB,SAAS;MACT,eAAe;MACH;MACf,CAAC;AACF,YAAO,CAAC,GAAc,QAAQ,QAAQ;MAC1B;MACJ,SAAS,UAAU,QAAQ,aAAa,gBAAgB;MACxD,WAAW;MACX,QAAQ,WAAW;MACtB,CAAC,CAAC;;AAEX,UAAM,IAAI,MAAM,+DAA+D;KACjF;IACJ;;CAEN,IAAI,oBAAoB;EACA;EACC;EACxB;AACD,SAAQ,UAAU"}

package/dist/cjs/node_modules/samlify/build/src/entity-idp.cjs

@@ -1,282 +0,0 @@
-const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
-const require_utility$1 = require('./utility.cjs');
-const require_urn$1 = require('./urn.cjs');
-const require_libsaml$1 = require('./libsaml.cjs');
-const require_binding_redirect$1 = require('./binding-redirect.cjs');
-const require_binding_post$1 = require('./binding-post.cjs');
-const require_flow$1 = require('./flow.cjs');
-const require_entity$1 = require('./entity.cjs');
-const require_binding_simplesign$1 = require('./binding-simplesign.cjs');
-
-//#region ../../node_modules/samlify/build/src/entity-idp.js
-var require_entity_idp = /* @__PURE__ */ require_rolldown_runtime.__commonJS({ "../../node_modules/samlify/build/src/entity-idp.js": ((exports) => {
-	var __extends = exports && exports.__extends || (function() {
-		var extendStatics = function(d, b) {
-			extendStatics = Object.setPrototypeOf || { __proto__: [] } instanceof Array && function(d$1, b$1) {
-				d$1.__proto__ = b$1;
-			} || function(d$1, b$1) {
-				for (var p in b$1) if (Object.prototype.hasOwnProperty.call(b$1, p)) d$1[p] = b$1[p];
-			};
-			return extendStatics(d, b);
-		};
-		return function(d, b) {
-			if (typeof b !== "function" && b !== null) throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-			extendStatics(d, b);
-			function __() {
-				this.constructor = d;
-			}
-			d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-		};
-	})();
-	var __assign = exports && exports.__assign || function() {
-		__assign = Object.assign || function(t) {
-			for (var s, i = 1, n = arguments.length; i < n; i++) {
-				s = arguments[i];
-				for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
-			}
-			return t;
-		};
-		return __assign.apply(this, arguments);
-	};
-	var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
-		function adopt(value) {
-			return value instanceof P ? value : new P(function(resolve) {
-				resolve(value);
-			});
-		}
-		return new (P || (P = Promise))(function(resolve, reject) {
-			function fulfilled(value) {
-				try {
-					step(generator.next(value));
-				} catch (e) {
-					reject(e);
-				}
-			}
-			function rejected(value) {
-				try {
-					step(generator["throw"](value));
-				} catch (e) {
-					reject(e);
-				}
-			}
-			function step(result) {
-				result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
-			}
-			step((generator = generator.apply(thisArg, _arguments || [])).next());
-		});
-	};
-	var __generator = exports && exports.__generator || function(thisArg, body) {
-		var _ = {
-			label: 0,
-			sent: function() {
-				if (t[0] & 1) throw t[1];
-				return t[1];
-			},
-			trys: [],
-			ops: []
-		}, f, y, t, g;
-		return g = {
-			next: verb(0),
-			"throw": verb(1),
-			"return": verb(2)
-		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-			return this;
-		}), g;
-		function verb(n) {
-			return function(v) {
-				return step([n, v]);
-			};
-		}
-		function step(op) {
-			if (f) throw new TypeError("Generator is already executing.");
-			while (_) try {
-				if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-				if (y = 0, t) op = [op[0] & 2, t.value];
-				switch (op[0]) {
-					case 0:
-					case 1:
-						t = op;
-						break;
-					case 4:
-						_.label++;
-						return {
-							value: op[1],
-							done: false
-						};
-					case 5:
-						_.label++;
-						y = op[1];
-						op = [0];
-						continue;
-					case 7:
-						op = _.ops.pop();
-						_.trys.pop();
-						continue;
-					default:
-						if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-							_ = 0;
-							continue;
-						}
-						if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-							_.label = op[1];
-							break;
-						}
-						if (op[0] === 6 && _.label < t[1]) {
-							_.label = t[1];
-							t = op;
-							break;
-						}
-						if (t && _.label < t[2]) {
-							_.label = t[2];
-							_.ops.push(op);
-							break;
-						}
-						if (t[2]) _.ops.pop();
-						_.trys.pop();
-						continue;
-				}
-				op = body.call(thisArg, _);
-			} catch (e) {
-				op = [6, e];
-				y = 0;
-			} finally {
-				f = t = 0;
-			}
-			if (op[0] & 5) throw op[1];
-			return {
-				value: op[0] ? op[1] : void 0,
-				done: true
-			};
-		}
-	};
-	var __importDefault = exports && exports.__importDefault || function(mod) {
-		return mod && mod.__esModule ? mod : { "default": mod };
-	};
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.IdentityProvider = void 0;
-	/**
-	* @file entity-idp.ts
-	* @author tngan
-	* @desc  Declares the actions taken by identity provider
-	*/
-	var entity_1 = __importDefault(require_entity$1.default);
-	var libsaml_1 = __importDefault(require_libsaml$1.default);
-	var urn_1 = require_urn$1.default;
-	var binding_post_1 = __importDefault(require_binding_post$1.default);
-	var binding_redirect_1 = __importDefault(require_binding_redirect$1.default);
-	var binding_simplesign_1 = __importDefault(require_binding_simplesign$1.default);
-	var flow_1 = require_flow$1.default;
-	var utility_1 = require_utility$1.default;
-	/**
-	* Identity provider can be configured using either metadata importing or idpSetting
-	*/
-	function default_1(props) {
-		return new IdentityProvider(props);
-	}
-	exports.default = default_1;
-	/**
-	* Identity provider can be configured using either metadata importing or idpSetting
-	*/
-	var IdentityProvider = function(_super) {
-		__extends(IdentityProvider$1, _super);
-		function IdentityProvider$1(idpSetting) {
-			var entitySetting = Object.assign({
-				wantAuthnRequestsSigned: false,
-				tagPrefix: { encryptedAssertion: "saml" }
-			}, idpSetting);
-			if (idpSetting.loginResponseTemplate) if ((0, utility_1.isString)(idpSetting.loginResponseTemplate.context) && Array.isArray(idpSetting.loginResponseTemplate.attributes)) {
-				var attributeStatementTemplate = void 0;
-				var attributeTemplate = void 0;
-				if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates.attributeStatementTemplate) attributeStatementTemplate = libsaml_1.default.defaultAttributeStatementTemplate;
-				else attributeStatementTemplate = idpSetting.loginResponseTemplate.additionalTemplates.attributeStatementTemplate;
-				if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates.attributeTemplate) attributeTemplate = libsaml_1.default.defaultAttributeTemplate;
-				else attributeTemplate = idpSetting.loginResponseTemplate.additionalTemplates.attributeTemplate;
-				var replacement = { AttributeStatement: libsaml_1.default.attributeStatementBuilder(idpSetting.loginResponseTemplate.attributes, attributeTemplate, attributeStatementTemplate) };
-				entitySetting.loginResponseTemplate = __assign(__assign({}, entitySetting.loginResponseTemplate), { context: libsaml_1.default.replaceTagsByValue(entitySetting.loginResponseTemplate.context, replacement) });
-			} else console.warn("Invalid login response template");
-			return _super.call(this, entitySetting, "idp") || this;
-		}
-		/**
-		* @desc  Generates the login response for developers to design their own method
-		* @param  sp                        object of service provider
-		* @param  requestInfo               corresponding request, used to obtain the id
-		* @param  binding                   protocol binding
-		* @param  user                      current logged user (e.g. req.user)
-		* @param  customTagReplacement      used when developers have their own login response template
-		* @param  encryptThenSign           whether or not to encrypt then sign first (if signing)
-		* @param  relayState             the relayState from corresponding request
-		*/
-		IdentityProvider$1.prototype.createLoginResponse = function(sp, requestInfo, binding, user, customTagReplacement, encryptThenSign, relayState) {
-			return __awaiter(this, void 0, void 0, function() {
-				var protocol, context, _a;
-				return __generator(this, function(_b) {
-					switch (_b.label) {
-						case 0:
-							protocol = urn_1.namespace.binding[binding];
-							context = null;
-							_a = protocol;
-							switch (_a) {
-								case urn_1.namespace.binding.post: return [3, 1];
-								case urn_1.namespace.binding.simpleSign: return [3, 3];
-								case urn_1.namespace.binding.redirect: return [3, 5];
-							}
-							return [3, 6];
-						case 1: return [4, binding_post_1.default.base64LoginResponse(requestInfo, {
-							idp: this,
-							sp
-						}, user, customTagReplacement, encryptThenSign)];
-						case 2:
-							context = _b.sent();
-							return [3, 7];
-						case 3: return [4, binding_simplesign_1.default.base64LoginResponse(requestInfo, {
-							idp: this,
-							sp
-						}, user, relayState, customTagReplacement)];
-						case 4:
-							context = _b.sent();
-							return [3, 7];
-						case 5: return [2, binding_redirect_1.default.loginResponseRedirectURL(requestInfo, {
-							idp: this,
-							sp
-						}, user, relayState, customTagReplacement)];
-						case 6: throw new Error("ERR_CREATE_RESPONSE_UNDEFINED_BINDING");
-						case 7: return [2, __assign(__assign({}, context), {
-							relayState,
-							entityEndpoint: sp.entityMeta.getAssertionConsumerService(binding),
-							type: "SAMLResponse"
-						})];
-					}
-				});
-			});
-		};
-		/**
-		* Validation of the parsed URL parameters
-		* @param sp ServiceProvider instance
-		* @param binding Protocol binding
-		* @param req RequesmessageSigningOrderst
-		*/
-		IdentityProvider$1.prototype.parseLoginRequest = function(sp, binding, req) {
-			var self = this;
-			return (0, flow_1.flow)({
-				from: sp,
-				self,
-				checkSignature: self.entityMeta.isWantAuthnRequestsSigned(),
-				parserType: "SAMLRequest",
-				type: "login",
-				binding,
-				request: req
-			});
-		};
-		return IdentityProvider$1;
-	}(entity_1.default);
-	exports.IdentityProvider = IdentityProvider;
-}) });
-
-//#endregion
-Object.defineProperty(exports, 'default', {
-  enumerable: true,
-  get: function () {
-    return require_entity_idp();
-  }
-});
-//# sourceMappingURL=entity-idp.cjs.map