n8n 1.56.1 → 1.57.0

package/dist/sso/saml/routes/saml.controller.ee.js

@@ -22,13 +22,13 @@ const querystring_1 = __importDefault(require("querystring"));
 const bad_request_error_1 = require("../../../errors/response-errors/bad-request.error");
 const auth_error_1 = require("../../../errors/response-errors/auth.error");
 const url_service_1 = require("../../../services/url.service");
-const serviceProvider_ee_1 = require("../serviceProvider.ee");
-const samlConnectionTestSuccess_1 = require("../views/samlConnectionTestSuccess");
-const samlConnectionTestFailed_1 = require("../views/samlConnectionTestFailed");
-const samlHelpers_1 = require("../samlHelpers");
-const samlEnabledMiddleware_1 = require("../middleware/samlEnabledMiddleware");
+const service_provider_ee_1 = require("../service-provider.ee");
+const saml_connection_test_success_1 = require("../views/saml-connection-test-success");
+const saml_connection_test_failed_1 = require("../views/saml-connection-test-failed");
+const saml_helpers_1 = require("../saml-helpers");
+const saml_enabled_middleware_1 = require("../middleware/saml-enabled-middleware");
 const saml_service_ee_1 = require("../saml.service.ee");
-const initSsoPost_1 = require("../views/initSsoPost");
+const init_sso_post_1 = require("../views/init-sso-post");
 const event_service_1 = require("../../../events/event.service");
 let SamlController = class SamlController {
     constructor(authService, samlService, urlService, eventService) {
@@ -46,8 +46,8 @@ let SamlController = class SamlController {
         const prefs = this.samlService.samlPreferences;
         return {
             ...prefs,
-            entityID: (0, serviceProvider_ee_1.getServiceProviderEntityId)(),
-            returnUrl: (0, serviceProvider_ee_1.getServiceProviderReturnUrl)(),
+            entityID: (0, service_provider_ee_1.getServiceProviderEntityId)(),
+            returnUrl: (0, service_provider_ee_1.getServiceProviderReturnUrl)(),
         };
     }
     async configPost(req) {
@@ -78,12 +78,12 @@ let SamlController = class SamlController {
         var _a, _b, _c;
         try {
             const loginResult = await this.samlService.handleSamlLogin(req, binding);
-            if ((0, samlHelpers_1.isConnectionTestRequest)(req)) {
+            if ((0, saml_helpers_1.isConnectionTestRequest)(req)) {
                 if (loginResult.authenticatedUser) {
-                    return res.send((0, samlConnectionTestSuccess_1.getSamlConnectionTestSuccessView)(loginResult.attributes));
+                    return res.send((0, saml_connection_test_success_1.getSamlConnectionTestSuccessView)(loginResult.attributes));
                 }
                 else {
-                    return res.send((0, samlConnectionTestFailed_1.getSamlConnectionTestFailedView)('', loginResult.attributes));
+                    return res.send((0, saml_connection_test_failed_1.getSamlConnectionTestFailedView)('', loginResult.attributes));
                 }
             }
             if (loginResult.authenticatedUser) {
@@ -91,7 +91,7 @@ let SamlController = class SamlController {
                     user: loginResult.authenticatedUser,
                     authenticationMethod: 'saml',
                 });
-                if ((0, samlHelpers_1.isSamlLicensedAndEnabled)()) {
+                if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
                     this.authService.issueCookie(res, loginResult.authenticatedUser, req.browserId);
                     if (loginResult.onboardingRequired) {
                         return res.redirect(this.urlService.getInstanceBaseUrl() + '/saml/onboarding');
@@ -112,8 +112,8 @@ let SamlController = class SamlController {
             throw new auth_error_1.AuthError('SAML Authentication failed');
         }
         catch (error) {
-            if ((0, samlHelpers_1.isConnectionTestRequest)(req)) {
-                return res.send((0, samlConnectionTestFailed_1.getSamlConnectionTestFailedView)(error.message));
+            if ((0, saml_helpers_1.isConnectionTestRequest)(req)) {
+                return res.send((0, saml_connection_test_failed_1.getSamlConnectionTestFailedView)(error.message));
             }
             this.eventService.emit('user-login-failed', {
                 userEmail: 'unknown',
@@ -141,7 +141,7 @@ let SamlController = class SamlController {
         return await this.handleInitSSO(res, redirectUrl);
     }
     async configTestGet(_, res) {
-        return await this.handleInitSSO(res, (0, serviceProvider_ee_1.getServiceProviderConfigTestReturnUrl)());
+        return await this.handleInitSSO(res, (0, service_provider_ee_1.getServiceProviderConfigTestReturnUrl)());
     }
     async handleInitSSO(res, relayState) {
         const result = await this.samlService.getLoginRequestUrl(relayState);
@@ -149,7 +149,7 @@ let SamlController = class SamlController {
             return result.context.context;
         }
         else if ((result === null || result === void 0 ? void 0 : result.binding) === 'post') {
-            return res.send((0, initSsoPost_1.getInitSSOFormView)(result.context));
+            return res.send((0, init_sso_post_1.getInitSSOFormView)(result.context));
         }
         else {
             throw new auth_error_1.AuthError('SAML redirect failed, please check your SAML configuration.');
@@ -164,45 +164,45 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "getServiceProviderMetadata", null);
 __decorate([
-    (0, decorators_1.Get)('/config', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.Get)('/config', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "configGet", null);
 __decorate([
-    (0, decorators_1.Post)('/config', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.Post)('/config', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
     (0, decorators_1.GlobalScope)('saml:manage'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "configPost", null);
 __decorate([
-    (0, decorators_1.Post)('/config/toggle', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.Post)('/config/toggle', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
     (0, decorators_1.GlobalScope)('saml:manage'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "toggleEnabledPost", null);
 __decorate([
-    (0, decorators_1.Get)('/acs', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware], skipAuth: true }),
+    (0, decorators_1.Get)('/acs', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware], skipAuth: true }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "acsGet", null);
 __decorate([
-    (0, decorators_1.Post)('/acs', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware], skipAuth: true }),
+    (0, decorators_1.Post)('/acs', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware], skipAuth: true }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "acsPost", null);
 __decorate([
-    (0, decorators_1.Get)('/initsso', { middlewares: [samlEnabledMiddleware_1.samlLicensedAndEnabledMiddleware], skipAuth: true }),
+    (0, decorators_1.Get)('/initsso', { middlewares: [saml_enabled_middleware_1.samlLicensedAndEnabledMiddleware], skipAuth: true }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
 ], SamlController.prototype, "initSsoGet", null);
 __decorate([
-    (0, decorators_1.Get)('/config/test', { middlewares: [samlEnabledMiddleware_1.samlLicensedMiddleware] }),
+    (0, decorators_1.Get)('/config/test', { middlewares: [saml_enabled_middleware_1.samlLicensedMiddleware] }),
     (0, decorators_1.GlobalScope)('saml:manage'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),

package/dist/sso/saml/routes/saml.controller.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"saml.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso/saml/routes/saml.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sDAA8B;AAC9B,qDAA2C;AAE3C,8CAAsB;AAEtB,6CAAsE;AACtE,sDAAkD;AAElD,8DAAsC;AACtC,kFAA6E;AAC7E,oEAAgE;AAChE,wDAAoD;AAEpD,8DAI+B;AAC/B,kFAAsF;AACtF,gFAAoF;AACpF,gDAAmF;AAEnF,+EAG6C;AAC7C,wDAAiD;AAEjD,sDAA0D;AAC1D,0DAAsD;AAG/C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B;QAH1B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,0BAA0B,CAAC,CAAkB,EAAE,GAAqB;QACzE,OAAO,GAAG;aACR,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;aAClC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;QAC/C,OAAO;YACN,GAAG,KAAK;YACR,QAAQ,EAAE,IAAA,+CAA0B,GAAE;YACtC,SAAS,EAAE,IAAA,gDAA2B,GAAE;SACxC,CAAC;IACH,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,GAA6B;QAC7C,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,mCAAe,CACxB,8CAA8C;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACpD,CAAC;QACH,CAAC;IACF,CAAC;IAOK,AAAN,KAAK,CAAC,iBAAiB,CAAC,GAA6B,EAAE,GAAqB;QAC3E,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,mCAAe,CAAC,uDAAuD,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACnF,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAC,GAAiC,EAAE,GAAqB;QACpE,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAMK,AAAN,KAAK,CAAC,OAAO,CAAC,GAAiC,EAAE,GAAqB;QACrE,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAOO,KAAK,CAAC,UAAU,CACvB,GAAiC,EACjC,GAAqB,EACrB,OAAyB;;QAEzB,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEzE,IAAI,IAAA,qCAAuB,EAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,4DAAgC,EAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,0DAA+B,EAAC,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9E,CAAC;YACF,CAAC;YACD,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACxC,IAAI,EAAE,WAAW,CAAC,iBAAiB;oBACnC,oBAAoB,EAAE,MAAM;iBAC5B,CAAC,CAAC;gBAGH,IAAI,IAAA,sCAAwB,GAAE,EAAE,CAAC;oBAChC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;oBAChF,IAAI,WAAW,CAAC,kBAAkB,EAAE,CAAC;wBACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,CAAC;oBAChF,CAAC;yBAAM,CAAC;wBACP,MAAM,WAAW,GAAG,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,UAAU,mCAAI,GAAG,CAAC;wBAChD,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,WAAW,CAAC,CAAC;oBACzE,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBACrD,CAAC;YACF,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,MAAA,WAAW,CAAC,UAAU,CAAC,KAAK,mCAAI,SAAS;gBACpD,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,sBAAS,CAAC,4BAA4B,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,IAAA,qCAAuB,EAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,0DAA+B,EAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,SAAS;gBACpB,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,sBAAS,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,CAAC;IACF,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,GAAoB,EAAE,GAAqB;QAC3D,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,aAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,EAAE,CAAC;oBACtB,MAAM,iBAAiB,GAAG,qBAAW,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC7D,IAAI,iBAAiB,CAAC,QAAQ,IAAI,OAAO,iBAAiB,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAClF,WAAW,GAAG,qBAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAChE,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAC,CAAuB,EAAE,GAAqB;QACjE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAA,0DAAqC,GAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAqB,EAAE,UAAmB;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,MAAK,UAAU,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC;aAAM,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,MAAK,MAAM,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,gCAAkB,EAAC,MAAM,CAAC,OAA6B,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,sBAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;CACD,CAAA;AA/KY,wCAAc;AASpB;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gEAKpC;AAMK;IADL,IAAA,gBAAG,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,CAAC;;;;+CAQzD;AAOK;IAFL,IAAA,iBAAI,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,CAAC;IAC1D,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;gDAY1B;AAOK;IAFL,IAAA,iBAAI,EAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,CAAC;IACjE,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;uDAO1B;AAMK;IADL,IAAA,gBAAG,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;4CAGtE;AAMK;IADL,IAAA,iBAAI,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;6CAGvE;AA+DK;IADL,IAAA,gBAAG,EAAC,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,wDAAgC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gDAkBpF;AAQK;IAFL,IAAA,gBAAG,EAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,8CAAsB,CAAC,EAAE,CAAC;IAC9D,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;mDAG1B;yBAnKW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,0BAAW;QACX,6BAAW;QACZ,wBAAU;QACR,4BAAY;GALhC,cAAc,CA+K1B"}
+{"version":3,"file":"saml.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso/saml/routes/saml.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sDAA8B;AAC9B,qDAA2C;AAE3C,8CAAsB;AAEtB,6CAAsE;AACtE,sDAAkD;AAElD,8DAAsC;AACtC,kFAA6E;AAC7E,oEAAgE;AAChE,wDAAoD;AAEpD,gEAIgC;AAChC,wFAAyF;AACzF,sFAAuF;AACvF,kDAAoF;AAEpF,mFAG+C;AAC/C,wDAAiD;AAEjD,0DAA4D;AAC5D,0DAAsD;AAG/C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B;QAH1B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,0BAA0B,CAAC,CAAkB,EAAE,GAAqB;QACzE,OAAO,GAAG;aACR,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;aAClC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;QAC/C,OAAO;YACN,GAAG,KAAK;YACR,QAAQ,EAAE,IAAA,gDAA0B,GAAE;YACtC,SAAS,EAAE,IAAA,iDAA2B,GAAE;SACxC,CAAC;IACH,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,GAA6B;QAC7C,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,mCAAe,CACxB,8CAA8C;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACpD,CAAC;QACH,CAAC;IACF,CAAC;IAOK,AAAN,KAAK,CAAC,iBAAiB,CAAC,GAA6B,EAAE,GAAqB;QAC3E,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,mCAAe,CAAC,uDAAuD,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACnF,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAC,GAAiC,EAAE,GAAqB;QACpE,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAMK,AAAN,KAAK,CAAC,OAAO,CAAC,GAAiC,EAAE,GAAqB;QACrE,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAOO,KAAK,CAAC,UAAU,CACvB,GAAiC,EACjC,GAAqB,EACrB,OAAyB;;QAEzB,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEzE,IAAI,IAAA,sCAAuB,EAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,+DAAgC,EAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,6DAA+B,EAAC,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9E,CAAC;YACF,CAAC;YACD,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACxC,IAAI,EAAE,WAAW,CAAC,iBAAiB;oBACnC,oBAAoB,EAAE,MAAM;iBAC5B,CAAC,CAAC;gBAGH,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;oBAChC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;oBAChF,IAAI,WAAW,CAAC,kBAAkB,EAAE,CAAC;wBACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,CAAC;oBAChF,CAAC;yBAAM,CAAC;wBACP,MAAM,WAAW,GAAG,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,UAAU,mCAAI,GAAG,CAAC;wBAChD,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,WAAW,CAAC,CAAC;oBACzE,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBACrD,CAAC;YACF,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,MAAA,WAAW,CAAC,UAAU,CAAC,KAAK,mCAAI,SAAS;gBACpD,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,sBAAS,CAAC,4BAA4B,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,IAAA,sCAAuB,EAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,6DAA+B,EAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,SAAS,EAAE,SAAS;gBACpB,oBAAoB,EAAE,MAAM;aAC5B,CAAC,CAAC;YACH,MAAM,IAAI,sBAAS,CAAC,8BAA8B,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QAChF,CAAC;IACF,CAAC;IAOK,AAAN,KAAK,CAAC,UAAU,CAAC,GAAoB,EAAE,GAAqB;QAC3D,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,aAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,EAAE,CAAC;oBACtB,MAAM,iBAAiB,GAAG,qBAAW,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC7D,IAAI,iBAAiB,CAAC,QAAQ,IAAI,OAAO,iBAAiB,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAClF,WAAW,GAAG,qBAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAChE,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAC,CAAuB,EAAE,GAAqB;QACjE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAA,2DAAqC,GAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAqB,EAAE,UAAmB;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,MAAK,UAAU,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC;aAAM,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,MAAK,MAAM,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,kCAAkB,EAAC,MAAM,CAAC,OAA6B,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,sBAAS,CAAC,6DAA6D,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;CACD,CAAA;AA/KY,wCAAc;AASpB;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gEAKpC;AAMK;IADL,IAAA,gBAAG,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;;;;+CAQzD;AAOK;IAFL,IAAA,iBAAI,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IAC1D,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;gDAY1B;AAOK;IAFL,IAAA,iBAAI,EAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IACjE,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;uDAO1B;AAMK;IADL,IAAA,gBAAG,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;4CAGtE;AAMK;IADL,IAAA,iBAAI,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;6CAGvE;AA+DK;IADL,IAAA,gBAAG,EAAC,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,0DAAgC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gDAkBpF;AAQK;IAFL,IAAA,gBAAG,EAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,gDAAsB,CAAC,EAAE,CAAC;IAC9D,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;mDAG1B;yBAnKW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,0BAAW;QACX,6BAAW;QACZ,wBAAU;QACR,4BAAY;GALhC,cAAc,CA+K1B"}

package/dist/sso/saml/saml-helpers.d.ts

@@ -0,0 +1,22 @@
+import type { FlowResult } from 'samlify/types/src/flow';
+import type { User } from '../../databases/entities/User';
+import type { SamlPreferences } from './types/saml-preferences';
+import type { SamlUserAttributes } from './types/saml-user-attributes';
+import type { SamlAttributeMapping } from './types/saml-attribute-mapping';
+import type { SamlConfiguration } from './types/requests';
+export declare function isSamlLoginEnabled(): boolean;
+export declare function getSamlLoginLabel(): string;
+export declare function setSamlLoginEnabled(enabled: boolean): Promise<void>;
+export declare function setSamlLoginLabel(label: string): void;
+export declare function isSamlLicensed(): boolean;
+export declare function isSamlLicensedAndEnabled(): boolean;
+export declare const isSamlPreferences: (candidate: unknown) => candidate is SamlPreferences;
+export declare function createUserFromSamlAttributes(attributes: SamlUserAttributes): Promise<User>;
+export declare function updateUserFromSamlAttributes(user: User, attributes: SamlUserAttributes): Promise<User>;
+type GetMappedSamlReturn = {
+    attributes: SamlUserAttributes | undefined;
+    missingAttributes: string[];
+};
+export declare function getMappedSamlAttributesFromFlowResult(flowResult: FlowResult, attributeMapping: SamlAttributeMapping): GetMappedSamlReturn;
+export declare function isConnectionTestRequest(req: SamlConfiguration.AcsRequest): boolean;
+export {};

package/dist/sso/saml/saml-helpers.js

@@ -0,0 +1,144 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSamlPreferences = void 0;
+exports.isSamlLoginEnabled = isSamlLoginEnabled;
+exports.getSamlLoginLabel = getSamlLoginLabel;
+exports.setSamlLoginEnabled = setSamlLoginEnabled;
+exports.setSamlLoginLabel = setSamlLoginLabel;
+exports.isSamlLicensed = isSamlLicensed;
+exports.isSamlLicensedAndEnabled = isSamlLicensedAndEnabled;
+exports.createUserFromSamlAttributes = createUserFromSamlAttributes;
+exports.updateUserFromSamlAttributes = updateUserFromSamlAttributes;
+exports.getMappedSamlAttributesFromFlowResult = getMappedSamlAttributesFromFlowResult;
+exports.isConnectionTestRequest = isConnectionTestRequest;
+const typedi_1 = require("typedi");
+const n8n_workflow_1 = require("n8n-workflow");
+const config_1 = __importDefault(require("../../config"));
+const auth_identity_1 = require("../../databases/entities/auth-identity");
+const user_repository_1 = require("../../databases/repositories/user.repository");
+const auth_identity_repository_1 = require("../../databases/repositories/auth-identity.repository");
+const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
+const auth_error_1 = require("../../errors/response-errors/auth.error");
+const license_1 = require("../../license");
+const password_utility_1 = require("../../services/password.utility");
+const constants_1 = require("./constants");
+const sso_helpers_1 = require("../sso-helpers");
+const service_provider_ee_1 = require("./service-provider.ee");
+function isSamlLoginEnabled() {
+    return config_1.default.getEnv(constants_1.SAML_LOGIN_ENABLED);
+}
+function getSamlLoginLabel() {
+    return config_1.default.getEnv(constants_1.SAML_LOGIN_LABEL);
+}
+async function setSamlLoginEnabled(enabled) {
+    if ((0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() || (0, sso_helpers_1.isSamlCurrentAuthenticationMethod)()) {
+        if (enabled) {
+            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, true);
+            await (0, sso_helpers_1.setCurrentAuthenticationMethod)('saml');
+        }
+        else if (!enabled) {
+            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, false);
+            await (0, sso_helpers_1.setCurrentAuthenticationMethod)('email');
+        }
+    }
+    else {
+        throw new internal_server_error_1.InternalServerError(`Cannot switch SAML login enabled state when an authentication method other than email or saml is active (current: ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()})`);
+    }
+}
+function setSamlLoginLabel(label) {
+    config_1.default.set(constants_1.SAML_LOGIN_LABEL, label);
+}
+function isSamlLicensed() {
+    return typedi_1.Container.get(license_1.License).isSamlEnabled();
+}
+function isSamlLicensedAndEnabled() {
+    return isSamlLoginEnabled() && isSamlLicensed() && (0, sso_helpers_1.isSamlCurrentAuthenticationMethod)();
+}
+const isSamlPreferences = (candidate) => {
+    const o = candidate;
+    return (typeof o === 'object' &&
+        typeof o.metadata === 'string' &&
+        typeof o.mapping === 'object' &&
+        o.mapping !== null &&
+        o.loginEnabled !== undefined);
+};
+exports.isSamlPreferences = isSamlPreferences;
+async function createUserFromSamlAttributes(attributes) {
+    const randomPassword = (0, n8n_workflow_1.randomString)(18);
+    const userRepository = typedi_1.Container.get(user_repository_1.UserRepository);
+    return await userRepository.manager.transaction(async (trx) => {
+        const { user } = await userRepository.createUserWithProject({
+            email: attributes.email.toLowerCase(),
+            firstName: attributes.firstName,
+            lastName: attributes.lastName,
+            role: 'global:member',
+            password: await typedi_1.Container.get(password_utility_1.PasswordUtility).hash(randomPassword),
+        }, trx);
+        await trx.save(trx.create(auth_identity_1.AuthIdentity, {
+            providerId: attributes.userPrincipalName,
+            providerType: 'saml',
+            userId: user.id,
+        }));
+        return user;
+    });
+}
+async function updateUserFromSamlAttributes(user, attributes) {
+    if (!attributes.email)
+        throw new auth_error_1.AuthError('Email is required to update user');
+    if (!user)
+        throw new auth_error_1.AuthError('User not found');
+    let samlAuthIdentity = user === null || user === void 0 ? void 0 : user.authIdentities.find((e) => e.providerType === 'saml');
+    if (!samlAuthIdentity) {
+        samlAuthIdentity = new auth_identity_1.AuthIdentity();
+        samlAuthIdentity.providerId = attributes.userPrincipalName;
+        samlAuthIdentity.providerType = 'saml';
+        samlAuthIdentity.user = user;
+        user.authIdentities.push(samlAuthIdentity);
+    }
+    else {
+        samlAuthIdentity.providerId = attributes.userPrincipalName;
+    }
+    await typedi_1.Container.get(auth_identity_repository_1.AuthIdentityRepository).save(samlAuthIdentity, { transaction: false });
+    user.firstName = attributes.firstName;
+    user.lastName = attributes.lastName;
+    const resultUser = await typedi_1.Container.get(user_repository_1.UserRepository).save(user, { transaction: false });
+    if (!resultUser)
+        throw new auth_error_1.AuthError('Could not create User');
+    return resultUser;
+}
+function getMappedSamlAttributesFromFlowResult(flowResult, attributeMapping) {
+    var _a;
+    const result = {
+        attributes: undefined,
+        missingAttributes: [],
+    };
+    if ((_a = flowResult === null || flowResult === void 0 ? void 0 : flowResult.extract) === null || _a === void 0 ? void 0 : _a.attributes) {
+        const attributes = flowResult.extract.attributes;
+        const email = attributes[attributeMapping.email];
+        const firstName = attributes[attributeMapping.firstName];
+        const lastName = attributes[attributeMapping.lastName];
+        const userPrincipalName = attributes[attributeMapping.userPrincipalName];
+        result.attributes = {
+            email,
+            firstName,
+            lastName,
+            userPrincipalName,
+        };
+        if (!email)
+            result.missingAttributes.push(attributeMapping.email);
+        if (!userPrincipalName)
+            result.missingAttributes.push(attributeMapping.userPrincipalName);
+        if (!firstName)
+            result.missingAttributes.push(attributeMapping.firstName);
+        if (!lastName)
+            result.missingAttributes.push(attributeMapping.lastName);
+    }
+    return result;
+}
+function isConnectionTestRequest(req) {
+    return req.body.RelayState === (0, service_provider_ee_1.getServiceProviderConfigTestReturnUrl)();
+}
+//# sourceMappingURL=saml-helpers.js.map

package/dist/sso/saml/saml-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/sso/saml/saml-helpers.ts"],"names":[],"mappings":";;;;;;AA8BA,gDAEC;AAED,8CAEC;AAGD,kDAcC;AAED,8CAEC;AAED,wCAEC;AAED,4DAEC;AAaD,oEA0BC;AAED,oEAsBC;AAOD,sFA8BC;AAED,0DAEC;AAzKD,mCAAmC;AAEnC,+CAA4C;AAE5C,sDAA8B;AAC9B,sEAAkE;AAElE,8EAA0E;AAC1E,gGAA2F;AAC3F,0FAAqF;AACrF,oEAAgE;AAChE,uCAAoC;AACpC,kEAA8D;AAK9D,2CAAmE;AACnE,gDAKwB;AACxB,+DAA8E;AAM9E,SAAgB,kBAAkB;IACjC,OAAO,gBAAM,CAAC,MAAM,CAAC,8BAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAAgB,CAAC,CAAC;AACxC,CAAC;AAGM,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,IAAI,IAAA,gDAAkC,GAAE,IAAI,IAAA,+CAAiC,GAAE,EAAE,CAAC;QACjF,IAAI,OAAO,EAAE,CAAC;YACb,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,IAAA,4CAA8B,EAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,gBAAM,CAAC,GAAG,CAAC,4BAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,cAAc;IAC7B,OAAO,kBAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,SAAgB,wBAAwB;IACvC,OAAO,kBAAkB,EAAE,IAAI,cAAc,EAAE,IAAI,IAAA,+CAAiC,GAAE,CAAC;AACxF,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,eAAe;YAErB,QAAQ,EAAE,MAAM,kBAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,4BAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,4BAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,kBAAS,CAAC,GAAG,CAAC,iDAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,kBAAS,CAAC,GAAG,CAAC,gCAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACnB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC;;IAEtC,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,OAAO,0CAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAuC,CAAC;QAE9E,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAiC;IACxE,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACxE,CAAC"}

package/dist/sso/saml/saml-validator.js

@@ -0,0 +1,156 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateMetadata = validateMetadata;
+exports.validateResponse = validateResponse;
+const typedi_1 = require("typedi");
+const logger_1 = require("../../logger");
+let xml;
+let xmldsigCore;
+let xmlXenc;
+let xmlMetadata;
+let xmlAssertion;
+let xmlProtocol;
+let xmllintWasm;
+async function loadSchemas() {
+    if (!xml || xml.contents === '') {
+        typedi_1.Container.get(logger_1.Logger).debug('Loading XML schema files for SAML validation into memory');
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/xml.xsd')));
+        xml = {
+            fileName: 'xml.xsd',
+            contents: f.xsdXml,
+        };
+    }
+    if (!xmldsigCore || xmldsigCore.contents === '') {
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/xmldsig-core-schema.xsd')));
+        xmldsigCore = {
+            fileName: 'xmldsig-core-schema.xsd',
+            contents: f.xsdXmldsigCore,
+        };
+    }
+    if (!xmlXenc || xmlXenc.contents === '') {
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/xenc-schema.xsd')));
+        xmlXenc = {
+            fileName: 'xenc-schema.xsd',
+            contents: f.xsdXenc,
+        };
+    }
+    if (!xmlMetadata || xmlMetadata.contents === '') {
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-metadata-2.0.xsd')));
+        xmlMetadata = {
+            fileName: 'saml-schema-metadata-2.0.xsd',
+            contents: f.xsdSamlSchemaMetadata20,
+        };
+    }
+    if (!xmlAssertion || xmlAssertion.contents === '') {
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-assertion-2.0.xsd')));
+        xmlAssertion = {
+            fileName: 'saml-schema-assertion-2.0.xsd',
+            contents: f.xsdSamlSchemaAssertion20,
+        };
+    }
+    if (!xmlProtocol || xmlProtocol.contents === '') {
+        const f = await Promise.resolve().then(() => __importStar(require('./schema/saml-schema-protocol-2.0.xsd')));
+        xmlProtocol = {
+            fileName: 'saml-schema-protocol-2.0.xsd',
+            contents: f.xsdSamlSchemaProtocol20,
+        };
+    }
+}
+async function loadXmllintWasm() {
+    if (xmllintWasm === undefined) {
+        typedi_1.Container.get(logger_1.Logger).debug('Loading xmllint-wasm library into memory');
+        xmllintWasm = await Promise.resolve().then(() => __importStar(require('xmllint-wasm')));
+    }
+}
+async function validateMetadata(metadata) {
+    const logger = typedi_1.Container.get(logger_1.Logger);
+    try {
+        await loadXmllintWasm();
+        await loadSchemas();
+        const validationResult = await (xmllintWasm === null || xmllintWasm === void 0 ? void 0 : xmllintWasm.validateXML({
+            xml: [
+                {
+                    fileName: 'metadata.xml',
+                    contents: metadata,
+                },
+            ],
+            extension: 'schema',
+            schema: [xmlMetadata],
+            preload: [xmlProtocol, xmlAssertion, xmldsigCore, xmlXenc, xml],
+        }));
+        if (validationResult === null || validationResult === void 0 ? void 0 : validationResult.valid) {
+            logger.debug('SAML Metadata is valid');
+            return true;
+        }
+        else {
+            logger.warn('SAML Validate Metadata: Invalid metadata');
+            logger.warn(validationResult
+                ? validationResult.errors
+                    .map((error) => `${error.message} - ${error.rawMessage}`)
+                    .join('\n')
+                : '');
+        }
+    }
+    catch (error) {
+        logger.warn(error);
+    }
+    return false;
+}
+async function validateResponse(response) {
+    const logger = typedi_1.Container.get(logger_1.Logger);
+    try {
+        await loadXmllintWasm();
+        await loadSchemas();
+        const validationResult = await (xmllintWasm === null || xmllintWasm === void 0 ? void 0 : xmllintWasm.validateXML({
+            xml: [
+                {
+                    fileName: 'response.xml',
+                    contents: response,
+                },
+            ],
+            extension: 'schema',
+            schema: [xmlProtocol],
+            preload: [xmlMetadata, xmlAssertion, xmldsigCore, xmlXenc, xml],
+        }));
+        if (validationResult === null || validationResult === void 0 ? void 0 : validationResult.valid) {
+            logger.debug('SAML Response is valid');
+            return true;
+        }
+        else {
+            logger.warn('SAML Validate Response: Failed');
+            logger.warn(validationResult
+                ? validationResult.errors
+                    .map((error) => `${error.message} - ${error.rawMessage}`)
+                    .join('\n')
+                : '');
+        }
+    }
+    catch (error) {
+        logger.warn(error);
+    }
+    return false;
+}
+//# sourceMappingURL=saml-validator.js.map

package/dist/sso/saml/saml-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml-validator.js","sourceRoot":"","sources":["../../../src/sso/saml/saml-validator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqEA,4CAkCC;AAED,4CAkCC;AA3ID,mCAAmC;AAEnC,qCAAkC;AAElC,IAAI,GAAgB,CAAC;AACrB,IAAI,WAAwB,CAAC;AAC7B,IAAI,OAAoB,CAAC;AACzB,IAAI,WAAwB,CAAC;AAC7B,IAAI,YAAyB,CAAC;AAC9B,IAAI,WAAwB,CAAC;AAG7B,IAAI,WAAsD,CAAC;AAG3D,KAAK,UAAU,WAAW;IACzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACjC,kBAAS,CAAC,GAAG,CAAC,eAAM,CAAC,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,wDAAa,kBAAkB,GAAC,CAAC;QAC3C,GAAG,GAAG;YACL,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM;SAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,wDAAa,kCAAkC,GAAC,CAAC;QAC3D,WAAW,GAAG;YACb,QAAQ,EAAE,yBAAyB;YACnC,QAAQ,EAAE,CAAC,CAAC,cAAc;SAC1B,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,wDAAa,0BAA0B,GAAC,CAAC;QACnD,OAAO,GAAG;YACT,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,wDAAa,uCAAuC,GAAC,CAAC;QAChE,WAAW,GAAG;YACb,QAAQ,EAAE,8BAA8B;YACxC,QAAQ,EAAE,CAAC,CAAC,uBAAuB;SACnC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,wDAAa,wCAAwC,GAAC,CAAC;QACjE,YAAY,GAAG;YACd,QAAQ,EAAE,+BAA+B;YACzC,QAAQ,EAAE,CAAC,CAAC,wBAAwB;SACpC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,wDAAa,uCAAuC,GAAC,CAAC;QAChE,WAAW,GAAG;YACb,QAAQ,EAAE,8BAA8B;YACxC,QAAQ,EAAE,CAAC,CAAC,uBAAuB;SACnC,CAAC;IACH,CAAC;AACF,CAAC;AAGD,KAAK,UAAU,eAAe;IAC7B,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/B,kBAAS,CAAC,GAAG,CAAC,eAAM,CAAC,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACxE,WAAW,GAAG,wDAAa,cAAc,GAAC,CAAC;IAC5C,CAAC;AACF,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACtD,MAAM,MAAM,GAAG,kBAAS,CAAC,GAAG,CAAC,eAAM,CAAC,CAAC;IACrC,IAAI,CAAC;QACJ,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,gBAAgB,GAAG,MAAM,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAC;YACvD,GAAG,EAAE;gBACJ;oBACC,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,QAAQ;iBAClB;aACD;YACD,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC;SAC/D,CAAC,CAAA,CAAC;QACH,IAAI,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACb,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CACV,gBAAgB;gBACf,CAAC,CAAC,gBAAgB,CAAC,MAAM;qBACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;qBACxD,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CACL,CAAC;QACH,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEhB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACtD,MAAM,MAAM,GAAG,kBAAS,CAAC,GAAG,CAAC,eAAM,CAAC,CAAC;IACrC,IAAI,CAAC;QACJ,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,gBAAgB,GAAG,MAAM,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,WAAW,CAAC;YACvD,GAAG,EAAE;gBACJ;oBACC,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,QAAQ;iBAClB;aACD;YACD,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC;SAC/D,CAAC,CAAA,CAAC;QACH,IAAI,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACb,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CACV,gBAAgB;gBACf,CAAC,CAAC,gBAAgB,CAAC,MAAM;qBACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;qBACxD,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CACL,CAAC;QACH,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEhB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/sso/saml/saml.service.ee.d.ts

@@ -1,11 +1,11 @@
 import type express from 'express';
 import type { User } from '../../databases/entities/User';
-import type { SamlUserAttributes } from './types/samlUserAttributes';
-import type { SamlPreferences } from './types/samlPreferences';
+import type { SamlUserAttributes } from './types/saml-user-attributes';
+import type { SamlPreferences } from './types/saml-preferences';
 import type { IdentityProviderInstance, ServiceProviderInstance } from 'samlify';
 import type { BindingContext, PostBindingContext } from 'samlify/types/src/entity';
 import type { SamlLoginBinding } from './types';
-import { Logger } from '../../Logger';
+import { Logger } from '../../logger';
 import { UrlService } from '../../services/url.service';
 export declare class SamlService {
     private readonly logger;