@steedos/accounts 2.2.52-beta.36 → 2.2.52-beta.39

package/lib/oauth2/logout.js

@@ -1,60 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-var express = require("express");
-var url = require("url");
-var config_1 = require("./config");
-var csrf = require('csurf');
-var urljoin = require('url-join');
-// Sets up csrf protection
-var csrfProtection = csrf({ cookie: true });
-var router = express.Router();
-router.get('/', csrfProtection, function (req, res, next) {
-    // Parses the URL query
-    var query = url.parse(req.url, true).query;
-    // The challenge is used to fetch information about the logout request from ORY Hydra.
-    var challenge = String(query.logout_challenge);
-    if (!challenge) {
-        next(new Error('Expected a logout challenge to be set but received none.'));
-        return;
-    }
-    config_1.hydraAdmin
-        .getLogoutRequest(challenge)
-        // This will be called if the HTTP request was successful
-        .then(function () {
-        // Here we have access to e.g. response.subject, response.sid, ...
-        // The most secure way to perform a logout request is by asking the user if he/she really want to log out.
-        return res.status(200).send({
-            csrfToken: req.csrfToken(),
-            challenge: challenge,
-            action: urljoin(process.env.BASE_URL || '', '/logout')
-        });
-    })
-        // This will handle any error that happens when making HTTP calls to hydra
-        .catch(next);
-});
-router.post('/', csrfProtection, function (req, res, next) {
-    // The challenge is now a hidden input field, so let's take it from the request body instead
-    var challenge = req.body.challenge;
-    if (req.body.submit === 'No') {
-        return (config_1.hydraAdmin
-            .rejectLogoutRequest(challenge)
-            .then(function () {
-            // The user did not want to log out. Let's redirect him back somewhere or do something else.
-            res.redirect('https://www.ory.sh/');
-        })
-            // This will handle any error that happens when making HTTP calls to hydra
-            .catch(next));
-    }
-    // The user agreed to log out, let's accept the logout request.
-    config_1.hydraAdmin
-        .acceptLogoutRequest(challenge)
-        .then(function (_a) {
-        var body = _a.data;
-        // All we need to do now is to redirect the user back to hydra!
-        res.redirect(String(body.redirect_to));
-    })
-        // This will handle any error that happens when making HTTP calls to hydra
-        .catch(next);
-});
-exports.default = router;
-//# sourceMappingURL=logout.js.map

package/lib/oauth2/logout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/oauth2/logout.ts"],"names":[],"mappings":";;AAAA,iCAAkC;AAClC,yBAA0B;AAC1B,mCAAqC;AACrC,IAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9B,IAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,0BAA0B;AAC1B,IAAM,cAAc,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAC7C,IAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;AAE/B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,UAAC,GAAG,EAAE,GAAG,EAAE,IAAI;IAC7C,uBAAuB;IACvB,IAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAA;IAE5C,sFAAsF;IACtF,IAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAChD,IAAI,CAAC,SAAS,EAAE;QACd,IAAI,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAA;QAC3E,OAAM;KACP;IAED,mBAAU;SACP,gBAAgB,CAAC,SAAS,CAAC;QAC5B,yDAAyD;SACxD,IAAI,CAAC;QACJ,kEAAkE;QAElE,0GAA0G;QAC1G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAG,GAAW,CAAC,SAAS,EAAE;YACnC,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,SAAS,CAAC;SACvD,CAAC,CAAA;IACJ,CAAC,CAAC;QACF,0EAA0E;SACzE,KAAK,CAAC,IAAI,CAAC,CAAA;AAChB,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAC,GAAG,EAAE,GAAG,EAAE,IAAI;IAC9C,4FAA4F;IAC5F,IAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAA;IAEpC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE;QAC5B,OAAO,CACL,mBAAU;aACP,mBAAmB,CAAC,SAAS,CAAC;aAC9B,IAAI,CAAC;YACJ,4FAA4F;YAC5F,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;QACrC,CAAC,CAAC;YACF,0EAA0E;aACzE,KAAK,CAAC,IAAI,CAAC,CACf,CAAA;KACF;IAED,+DAA+D;IAC/D,mBAAU;SACP,mBAAmB,CAAC,SAAS,CAAC;SAC9B,IAAI,CAAC,UAAC,EAAc;YAAN,IAAI,UAAA;QACjB,+DAA+D;QAC/D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC;QACF,0EAA0E;SACzE,KAAK,CAAC,IAAI,CAAC,CAAA;AAChB,CAAC,CAAC,CAAA;AAEF,kBAAe,MAAM,CAAA"}

package/lib/oauth2/stub/oidc-cert.js

@@ -1,67 +0,0 @@
-"use strict";
-// This file contains logic which is used when running this application as part of the
-// OpenID Connect Conformance test suite. You can use it for inspiration, but please
-// do not use it in production as is.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.oidcConformityMaybeFakeSession = exports.oidcConformityMaybeFakeAcr = void 0;
-var tslib_1 = require("tslib");
-var oidcConformityMaybeFakeAcr = function (request, fallback) {
-    var _a;
-    if (process.env.CONFORMITY_FAKE_CLAIMS !== '1') {
-        return fallback;
-    }
-    return ((_a = request.oidc_context) === null || _a === void 0 ? void 0 : _a.acr_values) &&
-        request.oidc_context.acr_values.length > 0
-        ? request.oidc_context.acr_values[request.oidc_context.acr_values.length - 1]
-        : fallback;
-};
-exports.oidcConformityMaybeFakeAcr = oidcConformityMaybeFakeAcr;
-var oidcConformityMaybeFakeSession = function (grantScope, request, session) {
-    if (process.env.CONFORMITY_FAKE_CLAIMS !== '1') {
-        return session;
-    }
-    var idToken = {};
-    // If the email scope was granted, fake the email claims.
-    if (grantScope.indexOf('email') > -1) {
-        // But only do so if the email was requested!
-        idToken.email = 'foo@bar.com';
-        idToken.email_verified = true;
-    }
-    // If the phone scope was granted, fake the phone claims.
-    if (grantScope.indexOf('phone') > -1) {
-        idToken.phone_number = '1337133713371337';
-        idToken.phone_number_verified = true;
-    }
-    // If the profile scope was granted, fake the profile claims.
-    if (grantScope.indexOf('profile') > -1) {
-        idToken.name = 'Foo Bar';
-        idToken.given_name = 'Foo';
-        idToken.family_name = 'Bar';
-        idToken.website = 'https://www.ory.sh';
-        idToken.zoneinfo = 'Europe/Belrin';
-        idToken.birthdate = '1.1.2014';
-        idToken.gender = 'robot';
-        idToken.profile = 'https://www.ory.sh';
-        idToken.preferred_username = 'robot';
-        idToken.middle_name = 'Baz';
-        idToken.locale = 'en-US';
-        idToken.picture =
-            'https://raw.githubusercontent.com/ory/web/master/static/images/favico.png';
-        idToken.updated_at = 1604416603;
-        idToken.nickname = 'foobot';
-    }
-    // If the address scope was granted, fake the address claims.
-    if (grantScope.indexOf('address') > -1) {
-        idToken.address = {
-            country: 'Localhost',
-            region: 'Intranet',
-            street_address: 'Local Street 1337'
-        };
-    }
-    return {
-        access_token: session.access_token,
-        id_token: tslib_1.__assign(tslib_1.__assign({}, idToken), session.id_token)
-    };
-};
-exports.oidcConformityMaybeFakeSession = oidcConformityMaybeFakeSession;
-//# sourceMappingURL=oidc-cert.js.map

package/lib/oauth2/stub/oidc-cert.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc-cert.js","sourceRoot":"","sources":["../../../src/oauth2/stub/oidc-cert.ts"],"names":[],"mappings":";AAAA,sFAAsF;AACtF,oFAAoF;AACpF,qCAAqC;;;;AAQ9B,IAAM,0BAA0B,GAAG,UACxC,OAAqB,EACrB,QAAgB;;IAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,EAAE;QAC9C,OAAO,QAAQ,CAAA;KAChB;IAED,OAAO,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,UAAU;QACrC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1C,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAC7B,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAC3C;QACH,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC,CAAA;AAdY,QAAA,0BAA0B,8BActC;AAEM,IAAM,8BAA8B,GAAG,UAC5C,UAAoB,EACpB,OAAuB,EACvB,OAA8B;IAE9B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,EAAE;QAC9C,OAAO,OAAO,CAAA;KACf;IAED,IAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,yDAAyD;IACzD,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;QACpC,6CAA6C;QAC7C,OAAO,CAAC,KAAK,GAAG,aAAa,CAAA;QAC7B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAA;KAC9B;IAED,yDAAyD;IACzD,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;QACpC,OAAO,CAAC,YAAY,GAAG,kBAAkB,CAAA;QACzC,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAA;KACrC;IAED,6DAA6D;IAC7D,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE;QACtC,OAAO,CAAC,IAAI,GAAG,SAAS,CAAA;QACxB,OAAO,CAAC,UAAU,GAAG,KAAK,CAAA;QAC1B,OAAO,CAAC,WAAW,GAAG,KAAK,CAAA;QAC3B,OAAO,CAAC,OAAO,GAAG,oBAAoB,CAAA;QACtC,OAAO,CAAC,QAAQ,GAAG,eAAe,CAAA;QAClC,OAAO,CAAC,SAAS,GAAG,UAAU,CAAA;QAC9B,OAAO,CAAC,MAAM,GAAG,OAAO,CAAA;QACxB,OAAO,CAAC,OAAO,GAAG,oBAAoB,CAAA;QACtC,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAA;QACpC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAA;QAC3B,OAAO,CAAC,MAAM,GAAG,OAAO,CAAA;QACxB,OAAO,CAAC,OAAO;YACb,2EAA2E,CAAA;QAC7E,OAAO,CAAC,UAAU,GAAG,UAAU,CAAA;QAC/B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;KAC5B;IAED,6DAA6D;IAC7D,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE;QACtC,OAAO,CAAC,OAAO,GAAG;YAChB,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,UAAU;YAClB,cAAc,EAAE,mBAAmB;SACpC,CAAA;KACF;IAED,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,wCACH,OAAO,GACP,OAAO,CAAC,QAAQ,CACpB;KACF,CAAA;AACH,CAAC,CAAA;AA3DY,QAAA,8BAA8B,kCA2D1C"}

package/lib/saml-idp/config.js

@@ -1,82 +0,0 @@
-/**
- * User Profile
- */
-var profile = {
-    userName: 'zhuangjianguo@steedos.com',
-    nameIdFormat: 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
-    firstName: 'Jack',
-    lastName: 'Zhuang',
-    displayName: 'Jack Zhuang',
-    email: 'zhuangjianguo@steedos.com',
-    mobilePhone: '+86-01777701',
-    groups: 'Users'
-};
-/**
- * SAML Attribute Metadata
- */
-var metadata = [
-    // {
-    //   id: "firstName",
-    //   optional: false,
-    //   displayName: 'First Name',
-    //   description: 'The given name of the user',
-    //   multiValue: false
-    // }, {
-    //   id: "lastName",
-    //   optional: false,
-    //   displayName: 'Last Name',
-    //   description: 'The surname of the user',
-    //   multiValue: false
-    // }, 
-    {
-        id: "userId",
-        optional: true,
-        displayName: 'User Id',
-        description: 'The id of the user',
-        multiValue: false
-    },
-    {
-        id: "username",
-        optional: true,
-        displayName: 'User Name',
-        description: 'The username of the user',
-        multiValue: false
-    },
-    {
-        id: "name",
-        optional: true,
-        displayName: 'Display Name',
-        description: 'The display name of the user',
-        multiValue: false
-    }, {
-        id: "email",
-        optional: false,
-        displayName: 'E-Mail Address',
-        description: 'The e-mail address of the user',
-        multiValue: false
-    }, {
-        id: "mobile",
-        optional: true,
-        displayName: 'Mobile',
-        description: 'The mobile phone of the user',
-        multiValue: false
-    },
-    // {
-    //   id: "groups",
-    //   optional: true,
-    //   displayName: 'Groups',
-    //   description: 'Group memberships of the user',
-    //   multiValue: true
-    // }, {
-    //   id: "userType",
-    //   optional: true,
-    //   displayName: 'User Type',
-    //   description: 'The type of user',
-    //   options: ['Admin', 'User']
-    // }
-];
-module.exports = {
-    user: profile,
-    metadata: metadata
-};
-//# sourceMappingURL=config.js.map

package/lib/saml-idp/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/saml-idp/config.js"],"names":[],"mappings":"AACA;;GAEG;AACH,IAAI,OAAO,GAAG;IACV,QAAQ,EAAE,2BAA2B;IACrC,YAAY,EAAE,wDAAwD;IACtE,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,aAAa;IAC1B,KAAK,EAAE,2BAA2B;IAClC,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,OAAO;CAChB,CAAA;AAED;;GAEG;AACH,IAAI,QAAQ,GAAG;IACf,IAAI;IACJ,qBAAqB;IACrB,qBAAqB;IACrB,+BAA+B;IAC/B,+CAA+C;IAC/C,sBAAsB;IACtB,OAAO;IACP,oBAAoB;IACpB,qBAAqB;IACrB,8BAA8B;IAC9B,4CAA4C;IAC5C,sBAAsB;IACtB,MAAM;IACN;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,KAAK;KAClB;IACD;QACE,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,KAAK;KAClB;IACD;QACE,EAAE,EAAE,MAAM;QACV,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,8BAA8B;QAC3C,UAAU,EAAE,KAAK;KAClB,EAAE;QACD,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,gCAAgC;QAC7C,UAAU,EAAE,KAAK;KAClB,EAAC;QACA,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,8BAA8B;QAC3C,UAAU,EAAE,KAAK;KAClB;IACD,IAAI;IACJ,kBAAkB;IAClB,oBAAoB;IACpB,2BAA2B;IAC3B,kDAAkD;IAClD,qBAAqB;IACrB,OAAO;IACP,oBAAoB;IACpB,oBAAoB;IACpB,8BAA8B;IAC9B,qCAAqC;IACrC,+BAA+B;IAC/B,IAAI;CACL,CAAC;AAEA,MAAM,CAAC,OAAO,GAAG;IACf,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,QAAQ;CACnB,CAAA"}

package/lib/saml-idp/connectedApps.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.connectedApps = void 0;
-exports.connectedApps = {
-    sogo: {
-        acsUrl: "https://mail.steedos.cn/SOGo/saml2-signon-post",
-        audience: "https://mail.steedos.cn/SOGo/saml2/artifactResponse",
-    },
-    salesforce: {
-        issuer: "http://192.168.0.50:4000/accounts/saml/",
-        acsUrl: "https://steedos-dev-ed.my.salesforce.com?so=00D7F000000q6uO",
-        audience: "https://steedos-dev-ed.my.salesforce.com/",
-    },
-    auth0: {
-        issuer: "urn:auth0:hotlong:Steedos",
-        acsUrl: "https://hotlong.auth0.com/login/callback?connection=Steedos",
-        audience: "urn:auth0:hotlong:Steedos",
-    }
-};
-//# sourceMappingURL=connectedApps.js.map

package/lib/saml-idp/connectedApps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connectedApps.js","sourceRoot":"","sources":["../../src/saml-idp/connectedApps.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE;QACJ,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,qDAAqD;KAChE;IACD,UAAU,EAAE;QACV,MAAM,EAAE,yCAAyC;QACjD,MAAM,EAAE,6DAA6D;QACrE,QAAQ,EAAE,2CAA2C;KACtD;IACD,KAAK,EAAE;QACL,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,6DAA6D;QACrE,QAAQ,EAAE,2BAA2B;KACtC;CACF,CAAA"}