@syndew/oluso-plugin-saml 0.0.0-stage → 0.0.1

package/types/syndew-oluso-plugin-saml.d.ts

@@ -0,0 +1,404 @@
+import { Observable } from 'rxjs';
+import * as _angular_core from '@angular/core';
+import { OnInit } from '@angular/core';
+import { Routes } from '@angular/router';
+import { AdminPlugin, NavItem } from '@syndew/oluso-ui-core';
+
+/**
+ * SAML Service Provider model
+ */
+interface SamlServiceProvider {
+    id: number;
+    entityId: string;
+    displayName?: string;
+    description?: string;
+    enabled: boolean;
+    metadataUrl?: string;
+    assertionConsumerServiceUrl?: string;
+    singleLogoutServiceUrl?: string;
+    hasSigningCertificate: boolean;
+    hasEncryptionCertificate: boolean;
+    encryptAssertions: boolean;
+    nameIdFormat?: string;
+    requireVerifiedEmail: boolean;
+    allowedClaims?: string[];
+    claimMappings?: Record<string, string>;
+    ssoBinding: string;
+    signResponses: boolean;
+    signAssertions: boolean;
+    requireSignedAuthnRequests: boolean;
+    defaultRelayState?: string;
+    nonEditable: boolean;
+    created: string;
+    updated?: string;
+    lastAccessed?: string;
+}
+/**
+ * SAML Service Provider for editing (includes certificates)
+ */
+interface SamlServiceProviderEdit {
+    id: number;
+    entityId: string;
+    displayName?: string;
+    description?: string;
+    enabled: boolean;
+    metadataUrl?: string;
+    assertionConsumerServiceUrl?: string;
+    singleLogoutServiceUrl?: string;
+    signingCertificate?: string;
+    encryptionCertificate?: string;
+    encryptAssertions: boolean;
+    nameIdFormat?: string;
+    requireVerifiedEmail: boolean;
+    allowedClaims?: string[];
+    claimMappings?: Record<string, string>;
+    ssoBinding: string;
+    signResponses: boolean;
+    signAssertions: boolean;
+    requireSignedAuthnRequests: boolean;
+    defaultRelayState?: string;
+    nonEditable: boolean;
+}
+/**
+ * SAML Identity Provider info
+ */
+interface SamlIdpInfo {
+    enabled: boolean;
+    entityId: string;
+    singleSignOnServiceUrl: string;
+    singleLogoutServiceUrl: string;
+    metadataUrl: string;
+    supportedNameIdFormats: string[];
+}
+/**
+ * Request to create a SAML Service Provider
+ */
+interface CreateSamlServiceProviderRequest {
+    entityId: string;
+    displayName?: string;
+    description?: string;
+    enabled?: boolean;
+    metadataUrl?: string;
+    assertionConsumerServiceUrl?: string;
+    singleLogoutServiceUrl?: string;
+    signingCertificate?: string;
+    encryptionCertificate?: string;
+    encryptAssertions?: boolean;
+    nameIdFormat?: string;
+    requireVerifiedEmail?: boolean;
+    allowedClaims?: string[];
+    claimMappings?: Record<string, string>;
+    ssoBinding?: string;
+    signResponses?: boolean;
+    signAssertions?: boolean;
+    requireSignedAuthnRequests?: boolean;
+    defaultRelayState?: string;
+}
+/**
+ * Test result for SAML configuration
+ */
+interface SamlTestResult {
+    success: boolean;
+    message: string;
+}
+/**
+ * SAML IdP Configuration
+ */
+interface SamlIdpConfiguration {
+    enabled: boolean;
+    loginJourneyName?: string;
+}
+/**
+ * SAML Certificate info
+ */
+interface SamlCertificateInfo {
+    source: 'Global' | 'Auto' | 'Uploaded';
+    certificateId?: string;
+    subject?: string;
+    issuer?: string;
+    notBefore?: string;
+    notAfter?: string;
+    thumbprint?: string;
+    status: string;
+    isRevoked: boolean;
+    isExpired: boolean;
+    isExpiringSoon: boolean;
+    hasCertificate: boolean;
+}
+/**
+ * Request to upload a certificate
+ */
+interface UploadCertificateRequest {
+    base64Pfx: string;
+    password?: string;
+}
+/**
+ * Entity ID availability check result
+ */
+interface EntityIdAvailability {
+    available: boolean;
+    message?: string;
+}
+/**
+ * Name ID format options
+ */
+declare const NAME_ID_FORMATS: {
+    value: string;
+    label: string;
+}[];
+/**
+ * SSO Binding options
+ */
+declare const SSO_BINDINGS: {
+    value: string;
+    label: string;
+}[];
+
+/**
+ * SAML Service
+ *
+ * Provides HTTP methods for managing SAML Service Providers and IdP configuration.
+ */
+declare class SamlService {
+    private readonly api;
+    private readonly basePath;
+    /**
+     * Get IdP info
+     */
+    getIdpInfo(): Observable<SamlIdpInfo>;
+    /**
+     * Check if an entity ID is available
+     */
+    checkEntityIdAvailability(entityId: string, excludeId?: number): Observable<EntityIdAvailability>;
+    /**
+     * Get all service providers
+     */
+    getAll(includeDisabled?: boolean): Observable<SamlServiceProvider[]>;
+    /**
+     * Get a service provider by ID
+     */
+    getById(id: number): Observable<SamlServiceProvider>;
+    /**
+     * Get a service provider for editing (includes certificates)
+     */
+    getForEdit(id: number): Observable<SamlServiceProviderEdit>;
+    /**
+     * Create a new service provider
+     */
+    create(data: CreateSamlServiceProviderRequest): Observable<SamlServiceProvider>;
+    /**
+     * Update a service provider
+     */
+    update(id: number, data: SamlServiceProviderEdit): Observable<SamlServiceProvider>;
+    /**
+     * Delete a service provider
+     */
+    delete(id: number): Observable<void>;
+    /**
+     * Toggle a service provider's enabled status
+     */
+    toggle(id: number): Observable<SamlServiceProvider>;
+    /**
+     * Test a service provider configuration
+     */
+    test(id: number): Observable<SamlTestResult>;
+    /**
+     * Get IdP configuration
+     */
+    getIdpConfiguration(): Observable<SamlIdpConfiguration>;
+    /**
+     * Update IdP configuration
+     */
+    updateIdpConfiguration(data: SamlIdpConfiguration): Observable<SamlIdpConfiguration>;
+    /**
+     * Get signing certificate info
+     */
+    getSigningCertificate(): Observable<SamlCertificateInfo>;
+    /**
+     * Get encryption certificate info
+     */
+    getEncryptionCertificate(): Observable<SamlCertificateInfo>;
+    /**
+     * Generate a new signing certificate
+     */
+    generateSigningCertificate(): Observable<SamlCertificateInfo>;
+    /**
+     * Generate a new encryption certificate
+     */
+    generateEncryptionCertificate(): Observable<SamlCertificateInfo>;
+    /**
+     * Upload a signing certificate
+     */
+    uploadSigningCertificate(data: UploadCertificateRequest): Observable<SamlCertificateInfo>;
+    /**
+     * Upload an encryption certificate
+     */
+    uploadEncryptionCertificate(data: UploadCertificateRequest): Observable<SamlCertificateInfo>;
+    /**
+     * Reset signing certificate to global
+     */
+    resetSigningCertificate(): Observable<void>;
+    /**
+     * Reset encryption certificate to global
+     */
+    resetEncryptionCertificate(): Observable<void>;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SamlService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<SamlService>;
+}
+
+declare class SamlDashboardComponent implements OnInit {
+    private readonly samlService;
+    readonly loading: _angular_core.WritableSignal<boolean>;
+    readonly error: _angular_core.WritableSignal<string | null>;
+    readonly idpInfo: _angular_core.WritableSignal<SamlIdpInfo | null>;
+    readonly serviceProviders: _angular_core.WritableSignal<SamlServiceProvider[]>;
+    readonly copied: _angular_core.WritableSignal<string | null>;
+    readonly enabledCount: () => number;
+    readonly disabledCount: () => number;
+    ngOnInit(): void;
+    loadData(): void;
+    copyToClipboard(value: string, label: string): void;
+    getFormatName(format: string): string;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SamlDashboardComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SamlDashboardComponent, "saml-dashboard", never, {}, {}, never, never, true, never>;
+}
+
+declare class ServiceProvidersPageComponent implements OnInit {
+    private readonly samlService;
+    readonly loading: _angular_core.WritableSignal<boolean>;
+    readonly error: _angular_core.WritableSignal<string | null>;
+    readonly serviceProviders: _angular_core.WritableSignal<SamlServiceProvider[]>;
+    readonly actionLoading: _angular_core.WritableSignal<number | null>;
+    readonly testResult: _angular_core.WritableSignal<SamlTestResult | null>;
+    readonly showDeleteModal: _angular_core.WritableSignal<boolean>;
+    readonly deleteTarget: _angular_core.WritableSignal<SamlServiceProvider | null>;
+    search: string;
+    showDisabled: boolean;
+    readonly filteredProviders: () => SamlServiceProvider[];
+    ngOnInit(): void;
+    loadServiceProviders(): void;
+    onSearchChange(): void;
+    handleToggle(sp: SamlServiceProvider): void;
+    confirmDelete(sp: SamlServiceProvider): void;
+    handleDelete(): void;
+    handleTest(sp: SamlServiceProvider): void;
+    formatDate(dateStr: string): string;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ServiceProvidersPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ServiceProvidersPageComponent, "saml-service-providers-page", never, {}, {}, never, never, true, never>;
+}
+
+interface FormData {
+    entityId: string;
+    displayName: string;
+    description: string;
+    enabled: boolean;
+    metadataUrl: string;
+    assertionConsumerServiceUrl: string;
+    singleLogoutServiceUrl: string;
+    signingCertificate: string;
+    encryptionCertificate: string;
+    encryptAssertions: boolean;
+    nameIdFormat: string;
+    requireVerifiedEmail: boolean;
+    allowedClaims: string;
+    claimMappings: string;
+    ssoBinding: string;
+    signResponses: boolean;
+    signAssertions: boolean;
+    requireSignedAuthnRequests: boolean;
+    defaultRelayState: string;
+}
+declare class ServiceProviderDetailsPageComponent implements OnInit {
+    private readonly samlService;
+    private readonly route;
+    private readonly router;
+    private readonly entityIdCheck$;
+    readonly loading: _angular_core.WritableSignal<boolean>;
+    readonly saving: _angular_core.WritableSignal<boolean>;
+    readonly error: _angular_core.WritableSignal<string | null>;
+    readonly entityIdError: _angular_core.WritableSignal<string | null>;
+    readonly checkingEntityId: _angular_core.WritableSignal<boolean>;
+    readonly testResult: _angular_core.WritableSignal<SamlTestResult | null>;
+    readonly nonEditable: _angular_core.WritableSignal<boolean>;
+    formData: FormData;
+    isNew: boolean;
+    private id;
+    readonly nameIdFormats: {
+        value: string;
+        label: string;
+    }[];
+    readonly ssoBindings: {
+        value: string;
+        label: string;
+    }[];
+    ngOnInit(): void;
+    loadServiceProvider(): void;
+    onEntityIdChange(entityId: string): void;
+    checkEntityIdAvailability(entityId: string): void;
+    parseAllowedClaims(value: string): string[] | undefined;
+    parseClaimMappings(value: string): Record<string, string> | undefined;
+    handleSubmit(): void;
+    handleTest(): void;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ServiceProviderDetailsPageComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ServiceProviderDetailsPageComponent, "saml-service-provider-details-page", never, {}, {}, never, never, true, never>;
+}
+
+declare class SamlIdpSettingsTabComponent implements OnInit {
+    private readonly samlService;
+    private readonly tabContext;
+    readonly loading: _angular_core.WritableSignal<boolean>;
+    readonly saving: _angular_core.WritableSignal<boolean>;
+    readonly error: _angular_core.WritableSignal<string | null>;
+    readonly success: _angular_core.WritableSignal<string | null>;
+    readonly hasChanges: _angular_core.WritableSignal<boolean>;
+    readonly idpInfo: _angular_core.WritableSignal<SamlIdpInfo | null>;
+    readonly signingCert: _angular_core.WritableSignal<SamlCertificateInfo | null>;
+    readonly encryptionCert: _angular_core.WritableSignal<SamlCertificateInfo | null>;
+    readonly certLoading: _angular_core.WritableSignal<"signing" | "encryption" | null>;
+    readonly copied: _angular_core.WritableSignal<string | null>;
+    readonly showSigningUpload: _angular_core.WritableSignal<boolean>;
+    readonly showEncryptionUpload: _angular_core.WritableSignal<boolean>;
+    config: SamlIdpConfiguration;
+    signingPassword: string;
+    encryptionPassword: string;
+    ngOnInit(): void;
+    loadData(): void;
+    toggleEnabled(): void;
+    onConfigChange(): void;
+    handleSave(): void;
+    generateSigningCert(): void;
+    resetSigningCert(): void;
+    toggleSigningUpload(): void;
+    onSigningFileSelect(event: Event): void;
+    generateEncryptionCert(): void;
+    resetEncryptionCert(): void;
+    toggleEncryptionUpload(): void;
+    onEncryptionFileSelect(event: Event): void;
+    private loadCertificates;
+    copyToClipboard(value: string, key?: string): void;
+    formatDate(dateStr?: string): string;
+    truncateThumbprint(thumbprint?: string): string;
+    getSourceBadgeClass(source: string): string;
+    getSourceBadgeText(source: string): string;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<SamlIdpSettingsTabComponent, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<SamlIdpSettingsTabComponent, "saml-idp-settings-tab", never, {}, {}, never, never, true, never>;
+}
+
+declare const SAML_ROUTES: Routes;
+
+/**
+ * SAML Admin Plugin
+ *
+ * Provides SAML Identity Provider management functionality:
+ * - Dashboard with IdP info and stats
+ * - Service Provider management (CRUD)
+ * - Settings tab for IdP configuration
+ */
+declare const SAML_PLUGIN: AdminPlugin;
+/**
+ * Helper function to get SAML navigation items
+ */
+declare function getSamlNavItems(): NavItem[];
+
+export { NAME_ID_FORMATS, SAML_PLUGIN, SAML_ROUTES, SSO_BINDINGS, SamlDashboardComponent, SamlIdpSettingsTabComponent, SamlService, ServiceProviderDetailsPageComponent, ServiceProvidersPageComponent, getSamlNavItems };
+export type { CreateSamlServiceProviderRequest, EntityIdAvailability, SamlCertificateInfo, SamlIdpConfiguration, SamlIdpInfo, SamlServiceProvider, SamlServiceProviderEdit, SamlTestResult, UploadCertificateRequest };