@lateos/npm-scan 0.7.1 → 0.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -24
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -108,30 +108,6 @@ Requires enterprise license. Configure via env vars or `api/saml-config.yaml`. S
|
|
|
108
108
|
|
|
109
109
|
FastAPI-based API for the hosted tier. See `api/README.md` for endpoint reference, auth methods, and configuration.
|
|
110
110
|
|
|
111
|
-
## Enterprise Features
|
|
112
|
-
|
|
113
|
-
### SAML SSO
|
|
114
|
-
|
|
115
|
-
SAML 2.0 single sign-on for enterprise deployments. Supports:
|
|
116
|
-
|
|
117
|
-
- **IdPs:** Okta, Azure AD / Entra ID, OneLogin, Keycloak, any SAML 2.0 compliant provider
|
|
118
|
-
- **Flow:** SP-initiated SSO redirect → IdP auth → assertion validation → JWT issuance
|
|
119
|
-
- **Provisioning:** auto-creates users from SAML attributes with RBAC (admin/editor/viewer)
|
|
120
|
-
- **Security:** signed AuthnRequests, verified assertions, HMAC-SHA256 JWTs, Single Logout
|
|
121
|
-
|
|
122
|
-
```
|
|
123
|
-
GET /api/v1/sso/metadata # SP metadata XML for IdP registration
|
|
124
|
-
GET /api/v1/sso/login # Start SSO (redirects to IdP)
|
|
125
|
-
POST /api/v1/sso/acs # SAML callback (IdP POSTs here)
|
|
126
|
-
POST /api/v1/sso/slo # Single Logout
|
|
127
|
-
```
|
|
128
|
-
|
|
129
|
-
Requires enterprise license. Configure via env vars or `api/saml-config.yaml`. See `api/README.md` for full docs.
|
|
130
|
-
|
|
131
|
-
### REST API
|
|
132
|
-
|
|
133
|
-
FastAPI-based API for the hosted tier. See `api/README.md` for endpoint reference, auth methods, and configuration.
|
|
134
|
-
|
|
135
111
|
## Development
|
|
136
112
|
|
|
137
113
|
```bash
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lateos/npm-scan",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.2",
|
|
4
4
|
"description": "Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.",
|
|
5
5
|
"main": "backend/index.js",
|
|
6
6
|
"bin": {
|