n8n 1.56.1 → 1.57.0

package/dist/security-audit/risk-reporters/NodesRiskReporter.d.ts

@@ -1,14 +0,0 @@
-import { LoadNodesAndCredentials } from '../../LoadNodesAndCredentials';
-import type { WorkflowEntity } from '../../databases/entities/WorkflowEntity';
-import type { Risk, RiskReporter } from '../../security-audit/types';
-import { CommunityPackagesService } from '../../services/communityPackages.service';
-import { GlobalConfig } from '@n8n/config';
-export declare class NodesRiskReporter implements RiskReporter {
-    private readonly loadNodesAndCredentials;
-    private readonly communityPackagesService;
-    private readonly globalConfig;
-    constructor(loadNodesAndCredentials: LoadNodesAndCredentials, communityPackagesService: CommunityPackagesService, globalConfig: GlobalConfig);
-    report(workflows: WorkflowEntity[]): Promise<Risk.StandardReport | null>;
-    private getCommunityNodeDetails;
-    private getCustomNodeDetails;
-}

package/dist/security-audit/risk-reporters/NodesRiskReporter.js

@@ -1,138 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NodesRiskReporter = void 0;
-const path = __importStar(require("path"));
-const fast_glob_1 = __importDefault(require("fast-glob"));
-const typedi_1 = require("typedi");
-const LoadNodesAndCredentials_1 = require("../../LoadNodesAndCredentials");
-const utils_1 = require("../../security-audit/utils");
-const constants_1 = require("../../security-audit/constants");
-const communityPackages_service_1 = require("../../services/communityPackages.service");
-const config_1 = require("@n8n/config");
-let NodesRiskReporter = class NodesRiskReporter {
-    constructor(loadNodesAndCredentials, communityPackagesService, globalConfig) {
-        this.loadNodesAndCredentials = loadNodesAndCredentials;
-        this.communityPackagesService = communityPackagesService;
-        this.globalConfig = globalConfig;
-    }
-    async report(workflows) {
-        const officialRiskyNodes = (0, utils_1.getNodeTypes)(workflows, (node) => constants_1.OFFICIAL_RISKY_NODE_TYPES.has(node.type));
-        const [communityNodes, customNodes] = await Promise.all([
-            this.getCommunityNodeDetails(),
-            this.getCustomNodeDetails(),
-        ]);
-        const issues = [officialRiskyNodes, communityNodes, customNodes];
-        if (issues.every((i) => i.length === 0))
-            return null;
-        const report = {
-            risk: constants_1.NODES_REPORT.RISK,
-            sections: [],
-        };
-        const sentenceStart = (length) => (length > 1 ? 'These nodes are' : 'This node is');
-        if (officialRiskyNodes.length > 0) {
-            report.sections.push({
-                title: constants_1.NODES_REPORT.SECTIONS.OFFICIAL_RISKY_NODES,
-                description: [
-                    sentenceStart(officialRiskyNodes.length),
-                    "part of n8n's official nodes and may be used to fetch and run any arbitrary code in the host system. This may lead to exploits such as remote code execution.",
-                ].join(' '),
-                recommendation: `Consider reviewing the parameters in these nodes, replacing them with app nodes where possible, and not loading unneeded node types with the NODES_EXCLUDE environment variable. See: ${constants_1.ENV_VARS_DOCS_URL}`,
-                location: officialRiskyNodes,
-            });
-        }
-        if (communityNodes.length > 0) {
-            report.sections.push({
-                title: constants_1.NODES_REPORT.SECTIONS.COMMUNITY_NODES,
-                description: [
-                    sentenceStart(communityNodes.length),
-                    `sourced from the n8n community. Community nodes are not vetted by the n8n team and have full access to the host system. See: ${constants_1.COMMUNITY_NODES_RISKS_URL}`,
-                ].join(' '),
-                recommendation: 'Consider reviewing the source code in any community nodes installed in this n8n instance, and uninstalling any community nodes no longer in use.',
-                location: communityNodes,
-            });
-        }
-        if (customNodes.length > 0) {
-            report.sections.push({
-                title: constants_1.NODES_REPORT.SECTIONS.CUSTOM_NODES,
-                description: [
-                    sentenceStart(communityNodes.length),
-                    'unpublished and located in the host system. Custom nodes are not vetted by the n8n team and have full access to the host system.',
-                ].join(' '),
-                recommendation: 'Consider reviewing the source code in any custom node installed in this n8n instance, and removing any custom nodes no longer in use.',
-                location: customNodes,
-            });
-        }
-        return report;
-    }
-    async getCommunityNodeDetails() {
-        if (!this.globalConfig.nodes.communityPackages.enabled)
-            return [];
-        const installedPackages = await this.communityPackagesService.getAllInstalledPackages();
-        return installedPackages.reduce((acc, pkg) => {
-            pkg.installedNodes.forEach((node) => acc.push({
-                kind: 'community',
-                nodeType: node.type,
-                packageUrl: [constants_1.NPM_PACKAGE_URL, pkg.packageName].join('/'),
-            }));
-            return acc;
-        }, []);
-    }
-    async getCustomNodeDetails() {
-        const customNodeTypes = [];
-        for (const customDir of this.loadNodesAndCredentials.getCustomDirectories()) {
-            const customNodeFiles = await (0, fast_glob_1.default)('**/*.node.js', { cwd: customDir, absolute: true });
-            for (const nodeFile of customNodeFiles) {
-                const [fileName] = path.parse(nodeFile).name.split('.');
-                customNodeTypes.push({
-                    kind: 'custom',
-                    nodeType: ['CUSTOM', fileName].join('.'),
-                    filePath: nodeFile,
-                });
-            }
-        }
-        return customNodeTypes;
-    }
-};
-exports.NodesRiskReporter = NodesRiskReporter;
-exports.NodesRiskReporter = NodesRiskReporter = __decorate([
-    (0, typedi_1.Service)(),
-    __metadata("design:paramtypes", [LoadNodesAndCredentials_1.LoadNodesAndCredentials,
-        communityPackages_service_1.CommunityPackagesService,
-        config_1.GlobalConfig])
-], NodesRiskReporter);
-//# sourceMappingURL=NodesRiskReporter.js.map

package/dist/security-audit/risk-reporters/NodesRiskReporter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"NodesRiskReporter.js","sourceRoot":"","sources":["../../../src/security-audit/risk-reporters/NodesRiskReporter.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,0DAA6B;AAC7B,mCAAiC;AACjC,uEAAoE;AACpE,kDAAsD;AACtD,0DAMoC;AAGpC,oFAAgF;AAChF,wCAA2C;AAGpC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC7B,YACkB,uBAAgD,EAChD,wBAAkD,EAClD,YAA0B;QAF1B,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,SAA2B;QACvC,MAAM,kBAAkB,GAAG,IAAA,oBAAY,EAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAC3D,qCAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CACxC,CAAC;QAEF,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,uBAAuB,EAAE;YAC9B,IAAI,CAAC,oBAAoB,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,kBAAkB,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAEjE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAErD,MAAM,MAAM,GAAwB;YACnC,IAAI,EAAE,wBAAY,CAAC,IAAI;YACvB,QAAQ,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAE5F,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,wBAAY,CAAC,QAAQ,CAAC,oBAAoB;gBACjD,WAAW,EAAE;oBACZ,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC;oBACxC,+JAA+J;iBAC/J,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc,EAAE,yLAAyL,6BAAiB,EAAE;gBAC5N,QAAQ,EAAE,kBAAkB;aAC5B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,wBAAY,CAAC,QAAQ,CAAC,eAAe;gBAC5C,WAAW,EAAE;oBACZ,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC;oBACpC,gIAAgI,qCAAyB,EAAE;iBAC3J,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc,EACb,kJAAkJ;gBACnJ,QAAQ,EAAE,cAAc;aACxB,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,wBAAY,CAAC,QAAQ,CAAC,YAAY;gBACzC,WAAW,EAAE;oBACZ,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC;oBACpC,kIAAkI;iBAClI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc,EACb,uIAAuI;gBACxI,QAAQ,EAAE,WAAW;aACrB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACpC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAElE,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,EAAE,CAAC;QAExF,OAAO,iBAAiB,CAAC,MAAM,CAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACzE,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,GAAG,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU,EAAE,CAAC,2BAAe,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACxD,CAAC,CACF,CAAC;YAEF,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;IACR,CAAC;IAEO,KAAK,CAAC,oBAAoB;QACjC,MAAM,eAAe,GAA6B,EAAE,CAAC;QAErD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC7E,MAAM,eAAe,GAAG,MAAM,IAAA,mBAAI,EAAC,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvF,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxD,eAAe,CAAC,IAAI,CAAC;oBACpB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACxC,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,OAAO,eAAe,CAAC;IACxB,CAAC;CACD,CAAA;AAzGY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,gBAAO,GAAE;qCAGkC,iDAAuB;QACtB,oDAAwB;QACpC,qBAAY;GAJhC,iBAAiB,CAyG7B"}

package/dist/shutdown/Shutdown.service.d.ts

@@ -1,26 +0,0 @@
-import { ApplicationError } from 'n8n-workflow';
-import type { Class } from 'n8n-core';
-import { Logger } from '../Logger';
-type HandlerFn = () => Promise<void> | void;
-export type ServiceClass = Class<Record<string, HandlerFn>>;
-export interface ShutdownHandler {
-    serviceClass: ServiceClass;
-    methodName: string;
-}
-export declare class ComponentShutdownError extends ApplicationError {
-    constructor(componentName: string, cause: Error);
-}
-export declare class ShutdownService {
-    private readonly logger;
-    private readonly handlersByPriority;
-    private shutdownPromise;
-    constructor(logger: Logger);
-    register(priority: number, handler: ShutdownHandler): void;
-    validate(): void;
-    shutdown(): void;
-    waitForShutdown(): Promise<void>;
-    isShuttingDown(): boolean;
-    private startShutdown;
-    private shutdownComponent;
-}
-export {};

package/dist/shutdown/Shutdown.service.js

@@ -1,93 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ShutdownService = exports.ComponentShutdownError = void 0;
-const typedi_1 = require("typedi");
-const n8n_workflow_1 = require("n8n-workflow");
-const Logger_1 = require("../Logger");
-const constants_1 = require("../constants");
-class ComponentShutdownError extends n8n_workflow_1.ApplicationError {
-    constructor(componentName, cause) {
-        super('Failed to shutdown gracefully', {
-            level: 'error',
-            cause,
-            extra: { component: componentName },
-        });
-    }
-}
-exports.ComponentShutdownError = ComponentShutdownError;
-let ShutdownService = class ShutdownService {
-    constructor(logger) {
-        this.logger = logger;
-        this.handlersByPriority = [];
-    }
-    register(priority, handler) {
-        if (priority < constants_1.LOWEST_SHUTDOWN_PRIORITY || priority > constants_1.HIGHEST_SHUTDOWN_PRIORITY) {
-            throw new n8n_workflow_1.ApplicationError(`Invalid shutdown priority. Please set it between ${constants_1.LOWEST_SHUTDOWN_PRIORITY} and ${constants_1.HIGHEST_SHUTDOWN_PRIORITY}.`, { extra: { priority } });
-        }
-        if (!this.handlersByPriority[priority]) {
-            this.handlersByPriority[priority] = [];
-        }
-        this.handlersByPriority[priority].push(handler);
-    }
-    validate() {
-        const handlers = this.handlersByPriority.flat();
-        for (const { serviceClass, methodName } of handlers) {
-            if (!typedi_1.Container.has(serviceClass)) {
-                throw new n8n_workflow_1.ApplicationError(`Component "${serviceClass.name}" is not registered with the DI container. Any component using @OnShutdown() must be decorated with @Service()`);
-            }
-            const service = typedi_1.Container.get(serviceClass);
-            if (!service[methodName]) {
-                throw new n8n_workflow_1.ApplicationError(`Component "${serviceClass.name}" does not have a "${methodName}" method`);
-            }
-        }
-    }
-    shutdown() {
-        if (this.shutdownPromise) {
-            throw new n8n_workflow_1.ApplicationError('App is already shutting down');
-        }
-        this.shutdownPromise = this.startShutdown();
-    }
-    async waitForShutdown() {
-        if (!this.shutdownPromise) {
-            throw new n8n_workflow_1.ApplicationError('App is not shutting down');
-        }
-        await this.shutdownPromise;
-    }
-    isShuttingDown() {
-        return !!this.shutdownPromise;
-    }
-    async startShutdown() {
-        const handlers = Object.values(this.handlersByPriority).reverse();
-        for (const handlerGroup of handlers) {
-            await Promise.allSettled(handlerGroup.map(async (handler) => await this.shutdownComponent(handler)));
-        }
-    }
-    async shutdownComponent({ serviceClass, methodName }) {
-        const name = `${serviceClass.name}.${methodName}()`;
-        try {
-            this.logger.debug(`Shutting down component "${name}"`);
-            const service = typedi_1.Container.get(serviceClass);
-            const method = service[methodName];
-            await method.call(service);
-        }
-        catch (error) {
-            (0, n8n_workflow_1.assert)(error instanceof Error);
-            n8n_workflow_1.ErrorReporterProxy.error(new ComponentShutdownError(name, error));
-        }
-    }
-};
-exports.ShutdownService = ShutdownService;
-exports.ShutdownService = ShutdownService = __decorate([
-    (0, typedi_1.Service)(),
-    __metadata("design:paramtypes", [Logger_1.Logger])
-], ShutdownService);
-//# sourceMappingURL=Shutdown.service.js.map

package/dist/shutdown/Shutdown.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Shutdown.service.js","sourceRoot":"","sources":["../../src/shutdown/Shutdown.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mCAA4C;AAC5C,+CAA4E;AAE5E,qCAAkC;AAClC,2CAAkF;AAWlF,MAAa,sBAAuB,SAAQ,+BAAgB;IAC3D,YAAY,aAAqB,EAAE,KAAY;QAC9C,KAAK,CAAC,+BAA+B,EAAE;YACtC,KAAK,EAAE,OAAO;YACd,KAAK;YACL,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;IACJ,CAAC;CACD;AARD,wDAQC;AAIM,IAAM,eAAe,GAArB,MAAM,eAAe;IAK3B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QAJ1B,uBAAkB,GAAwB,EAAE,CAAC;IAIhB,CAAC;IAG/C,QAAQ,CAAC,QAAgB,EAAE,OAAwB;QAClD,IAAI,QAAQ,GAAG,oCAAwB,IAAI,QAAQ,GAAG,qCAAyB,EAAE,CAAC;YACjF,MAAM,IAAI,+BAAgB,CACzB,oDAAoD,oCAAwB,QAAQ,qCAAyB,GAAG,EAChH,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CACvB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAGD,QAAQ;QACP,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QAEhD,KAAK,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC,kBAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,+BAAgB,CACzB,cAAc,YAAY,CAAC,IAAI,gHAAgH,CAC/I,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,kBAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,+BAAgB,CACzB,cAAc,YAAY,CAAC,IAAI,sBAAsB,UAAU,UAAU,CACzE,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAGD,QAAQ;QACP,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,+BAAgB,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7C,CAAC;IAGD,KAAK,CAAC,eAAe;QACpB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,+BAAgB,CAAC,0BAA0B,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,CAAC;IAC5B,CAAC;IAED,cAAc;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,aAAa;QAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;YACrC,MAAM,OAAO,CAAC,UAAU,CACvB,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAC1E,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAmB;QAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,CAAC,IAAI,IAAI,UAAU,IAAI,CAAC;QACpD,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,kBAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAA,qBAAM,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC;YAC/B,iCAAkB,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;CACD,CAAA;AArFY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,gBAAO,GAAE;qCAM4B,eAAM;GAL/B,eAAe,CAqF3B"}

package/dist/sso/saml/middleware/samlEnabledMiddleware.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.samlLicensedMiddleware = exports.samlLicensedAndEnabledMiddleware = void 0;
-const samlHelpers_1 = require("../samlHelpers");
-const samlLicensedAndEnabledMiddleware = (_, res, next) => {
-    if ((0, samlHelpers_1.isSamlLicensedAndEnabled)()) {
-        next();
-    }
-    else {
-        res.status(403).json({ status: 'error', message: 'Unauthorized' });
-    }
-};
-exports.samlLicensedAndEnabledMiddleware = samlLicensedAndEnabledMiddleware;
-const samlLicensedMiddleware = (_, res, next) => {
-    if ((0, samlHelpers_1.isSamlLicensed)()) {
-        next();
-    }
-    else {
-        res.status(403).json({ status: 'error', message: 'Unauthorized' });
-    }
-};
-exports.samlLicensedMiddleware = samlLicensedMiddleware;
-//# sourceMappingURL=samlEnabledMiddleware.js.map

package/dist/sso/saml/middleware/samlEnabledMiddleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"samlEnabledMiddleware.js","sourceRoot":"","sources":["../../../../src/sso/saml/middleware/samlEnabledMiddleware.ts"],"names":[],"mappings":";;;AACA,gDAA0E;AAEnE,MAAM,gCAAgC,GAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAChF,IAAI,IAAA,sCAAwB,GAAE,EAAE,CAAC;QAChC,IAAI,EAAE,CAAC;IACR,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;AACF,CAAC,CAAC;AANW,QAAA,gCAAgC,oCAM3C;AAEK,MAAM,sBAAsB,GAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACtE,IAAI,IAAA,4BAAc,GAAE,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC;IACR,CAAC;SAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;AACF,CAAC,CAAC;AANW,QAAA,sBAAsB,0BAMjC"}

package/dist/sso/saml/samlHelpers.d.ts

@@ -1,22 +0,0 @@
-import type { FlowResult } from 'samlify/types/src/flow';
-import type { User } from '../../databases/entities/User';
-import type { SamlPreferences } from './types/samlPreferences';
-import type { SamlUserAttributes } from './types/samlUserAttributes';
-import type { SamlAttributeMapping } from './types/samlAttributeMapping';
-import type { SamlConfiguration } from './types/requests';
-export declare function isSamlLoginEnabled(): boolean;
-export declare function getSamlLoginLabel(): string;
-export declare function setSamlLoginEnabled(enabled: boolean): Promise<void>;
-export declare function setSamlLoginLabel(label: string): void;
-export declare function isSamlLicensed(): boolean;
-export declare function isSamlLicensedAndEnabled(): boolean;
-export declare const isSamlPreferences: (candidate: unknown) => candidate is SamlPreferences;
-export declare function createUserFromSamlAttributes(attributes: SamlUserAttributes): Promise<User>;
-export declare function updateUserFromSamlAttributes(user: User, attributes: SamlUserAttributes): Promise<User>;
-type GetMappedSamlReturn = {
-    attributes: SamlUserAttributes | undefined;
-    missingAttributes: string[];
-};
-export declare function getMappedSamlAttributesFromFlowResult(flowResult: FlowResult, attributeMapping: SamlAttributeMapping): GetMappedSamlReturn;
-export declare function isConnectionTestRequest(req: SamlConfiguration.AcsRequest): boolean;
-export {};

package/dist/sso/saml/samlHelpers.js

@@ -1,144 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isSamlPreferences = void 0;
-exports.isSamlLoginEnabled = isSamlLoginEnabled;
-exports.getSamlLoginLabel = getSamlLoginLabel;
-exports.setSamlLoginEnabled = setSamlLoginEnabled;
-exports.setSamlLoginLabel = setSamlLoginLabel;
-exports.isSamlLicensed = isSamlLicensed;
-exports.isSamlLicensedAndEnabled = isSamlLicensedAndEnabled;
-exports.createUserFromSamlAttributes = createUserFromSamlAttributes;
-exports.updateUserFromSamlAttributes = updateUserFromSamlAttributes;
-exports.getMappedSamlAttributesFromFlowResult = getMappedSamlAttributesFromFlowResult;
-exports.isConnectionTestRequest = isConnectionTestRequest;
-const typedi_1 = require("typedi");
-const n8n_workflow_1 = require("n8n-workflow");
-const config_1 = __importDefault(require("../../config"));
-const AuthIdentity_1 = require("../../databases/entities/AuthIdentity");
-const user_repository_1 = require("../../databases/repositories/user.repository");
-const authIdentity_repository_1 = require("../../databases/repositories/authIdentity.repository");
-const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
-const auth_error_1 = require("../../errors/response-errors/auth.error");
-const License_1 = require("../../License");
-const password_utility_1 = require("../../services/password.utility");
-const constants_1 = require("./constants");
-const ssoHelpers_1 = require("../ssoHelpers");
-const serviceProvider_ee_1 = require("./serviceProvider.ee");
-function isSamlLoginEnabled() {
-    return config_1.default.getEnv(constants_1.SAML_LOGIN_ENABLED);
-}
-function getSamlLoginLabel() {
-    return config_1.default.getEnv(constants_1.SAML_LOGIN_LABEL);
-}
-async function setSamlLoginEnabled(enabled) {
-    if ((0, ssoHelpers_1.isEmailCurrentAuthenticationMethod)() || (0, ssoHelpers_1.isSamlCurrentAuthenticationMethod)()) {
-        if (enabled) {
-            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, true);
-            await (0, ssoHelpers_1.setCurrentAuthenticationMethod)('saml');
-        }
-        else if (!enabled) {
-            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, false);
-            await (0, ssoHelpers_1.setCurrentAuthenticationMethod)('email');
-        }
-    }
-    else {
-        throw new internal_server_error_1.InternalServerError(`Cannot switch SAML login enabled state when an authentication method other than email or saml is active (current: ${(0, ssoHelpers_1.getCurrentAuthenticationMethod)()})`);
-    }
-}
-function setSamlLoginLabel(label) {
-    config_1.default.set(constants_1.SAML_LOGIN_LABEL, label);
-}
-function isSamlLicensed() {
-    return typedi_1.Container.get(License_1.License).isSamlEnabled();
-}
-function isSamlLicensedAndEnabled() {
-    return isSamlLoginEnabled() && isSamlLicensed() && (0, ssoHelpers_1.isSamlCurrentAuthenticationMethod)();
-}
-const isSamlPreferences = (candidate) => {
-    const o = candidate;
-    return (typeof o === 'object' &&
-        typeof o.metadata === 'string' &&
-        typeof o.mapping === 'object' &&
-        o.mapping !== null &&
-        o.loginEnabled !== undefined);
-};
-exports.isSamlPreferences = isSamlPreferences;
-async function createUserFromSamlAttributes(attributes) {
-    const randomPassword = (0, n8n_workflow_1.randomString)(18);
-    const userRepository = typedi_1.Container.get(user_repository_1.UserRepository);
-    return await userRepository.manager.transaction(async (trx) => {
-        const { user } = await userRepository.createUserWithProject({
-            email: attributes.email.toLowerCase(),
-            firstName: attributes.firstName,
-            lastName: attributes.lastName,
-            role: 'global:member',
-            password: await typedi_1.Container.get(password_utility_1.PasswordUtility).hash(randomPassword),
-        }, trx);
-        await trx.save(trx.create(AuthIdentity_1.AuthIdentity, {
-            providerId: attributes.userPrincipalName,
-            providerType: 'saml',
-            userId: user.id,
-        }));
-        return user;
-    });
-}
-async function updateUserFromSamlAttributes(user, attributes) {
-    if (!attributes.email)
-        throw new auth_error_1.AuthError('Email is required to update user');
-    if (!user)
-        throw new auth_error_1.AuthError('User not found');
-    let samlAuthIdentity = user === null || user === void 0 ? void 0 : user.authIdentities.find((e) => e.providerType === 'saml');
-    if (!samlAuthIdentity) {
-        samlAuthIdentity = new AuthIdentity_1.AuthIdentity();
-        samlAuthIdentity.providerId = attributes.userPrincipalName;
-        samlAuthIdentity.providerType = 'saml';
-        samlAuthIdentity.user = user;
-        user.authIdentities.push(samlAuthIdentity);
-    }
-    else {
-        samlAuthIdentity.providerId = attributes.userPrincipalName;
-    }
-    await typedi_1.Container.get(authIdentity_repository_1.AuthIdentityRepository).save(samlAuthIdentity, { transaction: false });
-    user.firstName = attributes.firstName;
-    user.lastName = attributes.lastName;
-    const resultUser = await typedi_1.Container.get(user_repository_1.UserRepository).save(user, { transaction: false });
-    if (!resultUser)
-        throw new auth_error_1.AuthError('Could not create User');
-    return resultUser;
-}
-function getMappedSamlAttributesFromFlowResult(flowResult, attributeMapping) {
-    var _a;
-    const result = {
-        attributes: undefined,
-        missingAttributes: [],
-    };
-    if ((_a = flowResult === null || flowResult === void 0 ? void 0 : flowResult.extract) === null || _a === void 0 ? void 0 : _a.attributes) {
-        const attributes = flowResult.extract.attributes;
-        const email = attributes[attributeMapping.email];
-        const firstName = attributes[attributeMapping.firstName];
-        const lastName = attributes[attributeMapping.lastName];
-        const userPrincipalName = attributes[attributeMapping.userPrincipalName];
-        result.attributes = {
-            email,
-            firstName,
-            lastName,
-            userPrincipalName,
-        };
-        if (!email)
-            result.missingAttributes.push(attributeMapping.email);
-        if (!userPrincipalName)
-            result.missingAttributes.push(attributeMapping.userPrincipalName);
-        if (!firstName)
-            result.missingAttributes.push(attributeMapping.firstName);
-        if (!lastName)
-            result.missingAttributes.push(attributeMapping.lastName);
-    }
-    return result;
-}
-function isConnectionTestRequest(req) {
-    return req.body.RelayState === (0, serviceProvider_ee_1.getServiceProviderConfigTestReturnUrl)();
-}
-//# sourceMappingURL=samlHelpers.js.map

package/dist/sso/saml/samlHelpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"samlHelpers.js","sourceRoot":"","sources":["../../../src/sso/saml/samlHelpers.ts"],"names":[],"mappings":";;;;;;AA8BA,gDAEC;AAED,8CAEC;AAGD,kDAcC;AAED,8CAEC;AAED,wCAEC;AAED,4DAEC;AAaD,oEA0BC;AAED,oEAsBC;AAOD,sFA8BC;AAED,0DAEC;AAzKD,mCAAmC;AAEnC,+CAA4C;AAE5C,sDAA8B;AAC9B,4DAAyD;AAEzD,sEAAkE;AAClE,sFAAkF;AAClF,0FAAqF;AACrF,oEAAgE;AAChE,uCAAoC;AACpC,kEAA8D;AAK9D,2CAAmE;AACnE,8CAKuB;AACvB,6DAA6E;AAM7E,SAAgB,kBAAkB;IACjC,OAAO,gBAAM,CAAC,MAAM,CAAC,8BAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAAgB,CAAC,CAAC;AACxC,CAAC;AAGM,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,IAAI,IAAA,+CAAkC,GAAE,IAAI,IAAA,8CAAiC,GAAE,EAAE,CAAC;QACjF,IAAI,OAAO,EAAE,CAAC;YACb,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,IAAA,2CAA8B,EAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAA,2CAA8B,EAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,2CAA8B,GAAE,GAAG,CACxJ,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,gBAAM,CAAC,GAAG,CAAC,4BAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,cAAc;IAC7B,OAAO,kBAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,SAAgB,wBAAwB;IACvC,OAAO,kBAAkB,EAAE,IAAI,cAAc,EAAE,IAAI,IAAA,8CAAiC,GAAE,CAAC;AACxF,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,eAAe;YAErB,QAAQ,EAAE,MAAM,kBAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,2BAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,2BAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,kBAAS,CAAC,GAAG,CAAC,gDAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACnB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC;;IAEtC,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,OAAO,0CAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAuC,CAAC;QAE9E,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAiC;IACxE,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,IAAA,0DAAqC,GAAE,CAAC;AACxE,CAAC"}

package/dist/sso/saml/samlValidator.js

@@ -1,156 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateMetadata = validateMetadata;
-exports.validateResponse = validateResponse;
-const typedi_1 = require("typedi");
-const Logger_1 = require("../../Logger");
-let xml;
-let xmldsigCore;
-let xmlXenc;
-let xmlMetadata;
-let xmlAssertion;
-let xmlProtocol;
-let xmllintWasm;
-async function loadSchemas() {
-    if (!xml || xml.contents === '') {
-        typedi_1.Container.get(Logger_1.Logger).debug('Loading XML schema files for SAML validation into memory');
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/xml.xsd')));
-        xml = {
-            fileName: 'xml.xsd',
-            contents: f.xsdXml,
-        };
-    }
-    if (!xmldsigCore || xmldsigCore.contents === '') {
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/xmldsig-core-schema.xsd')));
-        xmldsigCore = {
-            fileName: 'xmldsig-core-schema.xsd',
-            contents: f.xsdXmldsigCore,
-        };
-    }
-    if (!xmlXenc || xmlXenc.contents === '') {
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/xenc-schema.xsd')));
-        xmlXenc = {
-            fileName: 'xenc-schema.xsd',
-            contents: f.xsdXenc,
-        };
-    }
-    if (!xmlMetadata || xmlMetadata.contents === '') {
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-metadata-2.0.xsd')));
-        xmlMetadata = {
-            fileName: 'saml-schema-metadata-2.0.xsd',
-            contents: f.xsdSamlSchemaMetadata20,
-        };
-    }
-    if (!xmlAssertion || xmlAssertion.contents === '') {
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-assertion-2.0.xsd')));
-        xmlAssertion = {
-            fileName: 'saml-schema-assertion-2.0.xsd',
-            contents: f.xsdSamlSchemaAssertion20,
-        };
-    }
-    if (!xmlProtocol || xmlProtocol.contents === '') {
-        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-protocol-2.0.xsd')));
-        xmlProtocol = {
-            fileName: 'saml-schema-protocol-2.0.xsd',
-            contents: f.xsdSamlSchemaProtocol20,
-        };
-    }
-}
-async function loadXmllintWasm() {
-    if (xmllintWasm === undefined) {
-        typedi_1.Container.get(Logger_1.Logger).debug('Loading xmllint-wasm library into memory');
-        xmllintWasm = await Promise.resolve().then(() => __importStar(require('xmllint-wasm')));
-    }
-}
-async function validateMetadata(metadata) {
-    const logger = typedi_1.Container.get(Logger_1.Logger);
-    try {
-        await loadXmllintWasm();
-        await loadSchemas();
-        const validationResult = await (xmllintWasm === null || xmllintWasm === void 0 ? void 0 : xmllintWasm.validateXML({
-            xml: [
-                {
-                    fileName: 'metadata.xml',
-                    contents: metadata,
-                },
-            ],
-            extension: 'schema',
-            schema: [xmlMetadata],
-            preload: [xmlProtocol, xmlAssertion, xmldsigCore, xmlXenc, xml],
-        }));
-        if (validationResult === null || validationResult === void 0 ? void 0 : validationResult.valid) {
-            logger.debug('SAML Metadata is valid');
-            return true;
-        }
-        else {
-            logger.warn('SAML Validate Metadata: Invalid metadata');
-            logger.warn(validationResult
-                ? validationResult.errors
-                    .map((error) => `${error.message} - ${error.rawMessage}`)
-                    .join('\n')
-                : '');
-        }
-    }
-    catch (error) {
-        logger.warn(error);
-    }
-    return false;
-}
-async function validateResponse(response) {
-    const logger = typedi_1.Container.get(Logger_1.Logger);
-    try {
-        await loadXmllintWasm();
-        await loadSchemas();
-        const validationResult = await (xmllintWasm === null || xmllintWasm === void 0 ? void 0 : xmllintWasm.validateXML({
-            xml: [
-                {
-                    fileName: 'response.xml',
-                    contents: response,
-                },
-            ],
-            extension: 'schema',
-            schema: [xmlProtocol],
-            preload: [xmlMetadata, xmlAssertion, xmldsigCore, xmlXenc, xml],
-        }));
-        if (validationResult === null || validationResult === void 0 ? void 0 : validationResult.valid) {
-            logger.debug('SAML Response is valid');
-            return true;
-        }
-        else {
-            logger.warn('SAML Validate Response: Failed');
-            logger.warn(validationResult
-                ? validationResult.errors
-                    .map((error) => `${error.message} - ${error.rawMessage}`)
-                    .join('\n')
-                : '');
-        }
-    }
-    catch (error) {
-        logger.warn(error);
-    }
-    return false;
-}
-//# sourceMappingURL=samlValidator.js.map