samlesa 2.12.113 → 2.14.0

package/build/src/entity-idp.js

@@ -1,128 +1,120 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityProvider = void 0;
-/**
-* @file entity-idp.ts
-* @author tngan
-* @desc  Declares the actions taken by identity provider
-*/
-const urn_js_1 = require("./urn.js");
-const binding = urn_js_1.wording.binding;
-const entity_js_1 = __importDefault(require("./entity.js"));
-const urn_js_2 = require("./urn.js");
-const binding_post_js_1 = __importDefault(require("./binding-post.js"));
-const binding_redirect_js_1 = __importDefault(require("./binding-redirect.js"));
-const binding_simplesign_js_1 = __importDefault(require("./binding-simplesign.js"));
-const flow_js_1 = require("./flow.js");
-/**
- * Identity provider can be configured using either metadata importing or idpSetting
- */
-function default_1(props) {
-    return new IdentityProvider(props);
-}
-exports.default = default_1;
-/**
- * Identity provider can be configured using either metadata importing or idpSetting
- */
-class IdentityProvider extends entity_js_1.default {
-    constructor(idpSetting) {
-        const defaultIdpEntitySetting = {
-            wantAuthnRequestsSigned: false,
-            tagPrefix: {
-                encryptedAssertion: 'saml',
-            },
-        };
-        const entitySetting = Object.assign(defaultIdpEntitySetting, idpSetting);
-        // build attribute part
-        /*    if (idpSetting.loginResponseTemplate) {
-              if (isString(idpSetting.loginResponseTemplate.context) && Array.isArray(idpSetting.loginResponseTemplate.attributes)) {
-                let attributeStatementTemplate;
-                let attributeTemplate;
-                if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates!.attributeStatementTemplate) {
-                  attributeStatementTemplate = libsaml.defaultAttributeStatementTemplate;
-                } else {
-                  attributeStatementTemplate = idpSetting.loginResponseTemplate.additionalTemplates!.attributeStatementTemplate!;
-                }
-                if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates!.attributeTemplate) {
-                  attributeTemplate = libsaml.defaultAttributeTemplate;
-                } else {
-                  attributeTemplate = idpSetting.loginResponseTemplate.additionalTemplates!.attributeTemplate!;
-                }
-                const replacement = {
-                  AttributeStatement: libsaml.attributeStatementBuilder(idpSetting.loginResponseTemplate.attributes, attributeTemplate, attributeStatementTemplate),
-                };
-                entitySetting.loginResponseTemplate = {
-                  ...entitySetting.loginResponseTemplate,
-                  context: libsaml.replaceTagsByValue(entitySetting.loginResponseTemplate!.context, replacement),
-                };
-              } else {
-                console.warn('Invalid login response template');
-              }
-            }*/
-        super(entitySetting, 'idp');
-    }
-    /**
-     * @desc  Generates the login response for developers to design their own method
-     * @param params
-     */
-    async createLoginResponse(params) {
-        const bindType = params?.binding ?? 'post';
-        const { sp, requestInfo = {}, user = {}, customTagReplacement, encryptThenSign = false, relayState = '', AttributeStatement = [] } = params;
-        const protocol = urn_js_2.namespace.binding[bindType];
-        // can support post, redirect and post simple sign bindings for login response
-        let context = null;
-        switch (protocol) {
-            case urn_js_2.namespace.binding.post:
-                context = await binding_post_js_1.default.base64LoginResponse(requestInfo, {
-                    idp: this,
-                    sp,
-                }, user, customTagReplacement, encryptThenSign, AttributeStatement);
-                break;
-            case urn_js_2.namespace.binding.simpleSign:
-                context = await binding_simplesign_js_1.default.base64LoginResponse(requestInfo, {
-                    idp: this, sp,
-                }, user, relayState, customTagReplacement, AttributeStatement);
-                break;
-            case urn_js_2.namespace.binding.redirect:
-                return binding_redirect_js_1.default.loginResponseRedirectURL(requestInfo, {
-                    idp: this,
-                    sp,
-                }, user, relayState, customTagReplacement, AttributeStatement);
-            default:
-                context = await binding_post_js_1.default.base64LoginResponse(requestInfo, {
-                    idp: this,
-                    sp,
-                }, user, customTagReplacement, encryptThenSign, AttributeStatement);
-            /*       throw new Error('ERR_CREATE_RESPONSE_UNDEFINED_BINDING');*/
-        }
-        return {
-            ...context,
-            relayState,
-            entityEndpoint: sp.entityMeta.getAssertionConsumerService(bindType ?? 'post'),
-            type: 'SAMLResponse'
-        };
-    }
-    /**
-     * Validation of the parsed URL parameters
-     * @param sp ServiceProvider instance
-     * @param binding Protocol binding
-     * @param req RequesmessageSigningOrderst
-     */
-    parseLoginRequest(sp, binding, req) {
-        const self = this;
-        return (0, flow_js_1.flow)({
-            from: sp,
-            self: self,
-            checkSignature: self.entityMeta.isWantAuthnRequestsSigned(),
-            parserType: 'SAMLRequest',
-            type: 'login',
-            binding: binding,
-            request: req
-        });
-    }
-}
-exports.IdentityProvider = IdentityProvider;
+/**
+* @file entity-idp.ts
+* @author tngan
+* @desc  Declares the actions taken by identity provider
+*/
+import { wording, } from './urn.js';
+const binding = wording.binding;
+import Entity from './entity.js';
+import { namespace } from './urn.js';
+import postBinding from './binding-post.js';
+import redirectBinding from './binding-redirect.js';
+import simpleSignBinding from './binding-simplesign.js';
+import { flow } from './flow.js';
+/**
+ * Identity provider can be configured using either metadata importing or idpSetting
+ */
+export default function (props) {
+    return new IdentityProvider(props);
+}
+/**
+ * Identity provider can be configured using either metadata importing or idpSetting
+ */
+export class IdentityProvider extends Entity {
+    constructor(idpSetting) {
+        const defaultIdpEntitySetting = {
+            wantAuthnRequestsSigned: false,
+            tagPrefix: {
+                encryptedAssertion: 'saml',
+            },
+        };
+        const entitySetting = Object.assign(defaultIdpEntitySetting, idpSetting);
+        // build attribute part
+        /*    if (idpSetting.loginResponseTemplate) {
+              if (isString(idpSetting.loginResponseTemplate.context) && Array.isArray(idpSetting.loginResponseTemplate.attributes)) {
+                let attributeStatementTemplate;
+                let attributeTemplate;
+                if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates!.attributeStatementTemplate) {
+                  attributeStatementTemplate = libsaml.defaultAttributeStatementTemplate;
+                } else {
+                  attributeStatementTemplate = idpSetting.loginResponseTemplate.additionalTemplates!.attributeStatementTemplate!;
+                }
+                if (!idpSetting.loginResponseTemplate.additionalTemplates || !idpSetting.loginResponseTemplate.additionalTemplates!.attributeTemplate) {
+                  attributeTemplate = libsaml.defaultAttributeTemplate;
+                } else {
+                  attributeTemplate = idpSetting.loginResponseTemplate.additionalTemplates!.attributeTemplate!;
+                }
+                const replacement = {
+                  AttributeStatement: libsaml.attributeStatementBuilder(idpSetting.loginResponseTemplate.attributes, attributeTemplate, attributeStatementTemplate),
+                };
+                entitySetting.loginResponseTemplate = {
+                  ...entitySetting.loginResponseTemplate,
+                  context: libsaml.replaceTagsByValue(entitySetting.loginResponseTemplate!.context, replacement),
+                };
+              } else {
+                console.warn('Invalid login response template');
+              }
+            }*/
+        super(entitySetting, 'idp');
+    }
+    /**
+     * @desc  Generates the login response for developers to design their own method
+     * @param params
+     */
+    async createLoginResponse(params) {
+        const bindType = params?.binding ?? 'post';
+        const { sp, requestInfo = {}, user = {}, customTagReplacement, encryptThenSign = false, relayState = '', AttributeStatement = [] } = params;
+        const protocol = namespace.binding[bindType];
+        // can support post, redirect and post simple sign bindings for login response
+        let context = null;
+        switch (protocol) {
+            case namespace.binding.post:
+                context = await postBinding.base64LoginResponse(requestInfo, {
+                    idp: this,
+                    sp,
+                }, user, customTagReplacement, encryptThenSign, AttributeStatement);
+                break;
+            case namespace.binding.simpleSign:
+                context = await simpleSignBinding.base64LoginResponse(requestInfo, {
+                    idp: this, sp,
+                }, user, relayState, customTagReplacement, AttributeStatement);
+                break;
+            case namespace.binding.redirect:
+                return redirectBinding.loginResponseRedirectURL(requestInfo, {
+                    idp: this,
+                    sp,
+                }, user, relayState, customTagReplacement, AttributeStatement);
+            default:
+                context = await postBinding.base64LoginResponse(requestInfo, {
+                    idp: this,
+                    sp,
+                }, user, customTagReplacement, encryptThenSign, AttributeStatement);
+            /*       throw new Error('ERR_CREATE_RESPONSE_UNDEFINED_BINDING');*/
+        }
+        return {
+            ...context,
+            relayState,
+            entityEndpoint: sp.entityMeta.getAssertionConsumerService(bindType ?? 'post'),
+            type: 'SAMLResponse'
+        };
+    }
+    /**
+     * Validation of the parsed URL parameters
+     * @param sp ServiceProvider instance
+     * @param binding Protocol binding
+     * @param req RequesmessageSigningOrderst
+     */
+    parseLoginRequest(sp, binding, req) {
+        const self = this;
+        return flow({
+            from: sp,
+            self: self,
+            checkSignature: self.entityMeta.isWantAuthnRequestsSigned(),
+            parserType: 'SAMLRequest',
+            type: 'login',
+            binding: binding,
+            request: req
+        });
+    }
+}
 //# sourceMappingURL=entity-idp.js.map

package/build/src/entity-idp.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-idp.js","sourceRoot":"","sources":["../../src/entity-idp.ts"],"names":[],"mappings":";;;;;;AAAA;;;;EAIE;AACF,qCAEkB;AAClB,MAAM,OAAO,GAAG,gBAAO,CAAC,OAAO,CAAA;AAI/B,4DAAuD;AAQvD,qCAAqC;AACrC,wEAA4C;AAC5C,gFAAoD;AACpD,oFAAwD;AACxD,uCAA8C;AAI9C;;GAEG;AACH,mBAAwB,KAA+B;IACrD,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAFD,4BAEC;AAED;;GAEG;AACH,MAAa,gBAAiB,SAAQ,mBAAM;IAI1C,YAAY,UAAoC;QAC9C,MAAM,uBAAuB,GAAG;YAC9B,uBAAuB,EAAE,KAAK;YAC9B,SAAS,EAAE;gBACT,kBAAkB,EAAE,MAAM;aAC3B;SACF,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;QACzE,uBAAuB;QAC3B;;;;;;;;;;;;;;;;;;;;;;;;eAwBO;QACH,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAUhC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC;QACvC,MAAM,EAAG,EAAE,EAAC,WAAW,GAAE,EAAE,EAAE,IAAI,GAAG,EAAE,EAAC,oBAAoB,EAAC,eAAe,GAAG,KAAK,EAAE,UAAU,GAAC,EAAE,EAAC,kBAAkB,GAAE,EAAE,EAAE,GAAG,MAAM,CAAA;QACpI,MAAM,QAAQ,GAAG,kBAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,8EAA8E;QAC9E,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,QAAQ,QAAQ,EAAE;YAChB,KAAK,kBAAS,CAAC,OAAO,CAAC,IAAI;gBACzB,OAAO,GAAG,MAAM,yBAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,oBAAoB,EAAE,eAAe,EAAC,kBAAkB,CAAC,CAAC;gBACnE,MAAM;YAER,KAAK,kBAAS,CAAC,OAAO,CAAC,UAAU;gBAC/B,OAAO,GAAG,MAAM,+BAAiB,CAAC,mBAAmB,CAAE,WAAW,EAAE;oBAClE,GAAG,EAAE,IAAI,EAAE,EAAE;iBACd,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAC,kBAAkB,CAAC,CAAC;gBAC9D,MAAM;YAER,KAAK,kBAAS,CAAC,OAAO,CAAC,QAAQ;gBAC7B,OAAO,6BAAe,CAAC,wBAAwB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAC,kBAAkB,CAAC,CAAC;YAChE;gBACE,OAAO,GAAG,MAAM,yBAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,oBAAoB,EAAE,eAAe,EAAC,kBAAkB,CAAC,CAAC;YAC1E,oEAAoE;SAChE;QAED,OAAO;YACL,GAAG,OAAO;YACV,UAAU;YACV,cAAc,EAAG,EAAE,CAAC,UAAsC,CAAC,2BAA2B,CAAC,QAAQ,IAAI,MAAM,CAAW;YACpH,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,EAAmB,EAAE,OAAe,EAAE,GAAqB;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAA,cAAI,EAAC;YACV,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE;YAC3D,UAAU,EAAE,aAAa;YACzB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;IACL,CAAC;CACF;AAlHD,4CAkHC"}
+{"version":3,"file":"entity-idp.js","sourceRoot":"","sources":["../../src/entity-idp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,EACL,OAAO,GACR,MAAM,UAAU,CAAC;AAClB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;AAI/B,OAAO,MAAiC,MAAM,aAAa,CAAC;AAQ5D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,WAAW,MAAM,mBAAmB,CAAC;AAC5C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAmB,MAAO,WAAW,CAAC;AAInD;;GAEG;AACH,MAAM,CAAC,OAAO,WAAU,KAA+B;IACrD,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,MAAM;IAI1C,YAAY,UAAoC;QAC9C,MAAM,uBAAuB,GAAG;YAC9B,uBAAuB,EAAE,KAAK;YAC9B,SAAS,EAAE;gBACT,kBAAkB,EAAE,MAAM;aAC3B;SACF,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;QACzE,uBAAuB;QAC3B;;;;;;;;;;;;;;;;;;;;;;;;eAwBO;QACH,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAUhC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC;QACvC,MAAM,EAAG,EAAE,EAAC,WAAW,GAAE,EAAE,EAAE,IAAI,GAAG,EAAE,EAAC,oBAAoB,EAAC,eAAe,GAAG,KAAK,EAAE,UAAU,GAAC,EAAE,EAAC,kBAAkB,GAAE,EAAE,EAAE,GAAG,MAAM,CAAA;QACpI,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,8EAA8E;QAC9E,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS,CAAC,OAAO,CAAC,IAAI;gBACzB,OAAO,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,oBAAoB,EAAE,eAAe,EAAC,kBAAkB,CAAC,CAAC;gBACnE,MAAM;YAER,KAAK,SAAS,CAAC,OAAO,CAAC,UAAU;gBAC/B,OAAO,GAAG,MAAM,iBAAiB,CAAC,mBAAmB,CAAE,WAAW,EAAE;oBAClE,GAAG,EAAE,IAAI,EAAE,EAAE;iBACd,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAC,kBAAkB,CAAC,CAAC;gBAC9D,MAAM;YAER,KAAK,SAAS,CAAC,OAAO,CAAC,QAAQ;gBAC7B,OAAO,eAAe,CAAC,wBAAwB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAC,kBAAkB,CAAC,CAAC;YAChE;gBACE,OAAO,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE;oBAC3D,GAAG,EAAE,IAAI;oBACT,EAAE;iBACH,EAAE,IAAI,EAAE,oBAAoB,EAAE,eAAe,EAAC,kBAAkB,CAAC,CAAC;YAC1E,oEAAoE;QACjE,CAAC;QAED,OAAO;YACL,GAAG,OAAO;YACV,UAAU;YACV,cAAc,EAAG,EAAE,CAAC,UAAsC,CAAC,2BAA2B,CAAC,QAAQ,IAAI,MAAM,CAAW;YACpH,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,EAAmB,EAAE,OAAe,EAAE,GAAqB;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;YACV,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE;YAC3D,UAAU,EAAE,aAAa;YACzB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;IACL,CAAC;CACF"}

package/build/src/entity-sp.js

@@ -1,97 +1,89 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceProvider = void 0;
-/**
-* @file entity-sp.ts
-* @author tngan
-* @desc  Declares the actions taken by service provider
-*/
-const entity_js_1 = __importDefault(require("./entity.js"));
-const urn_js_1 = require("./urn.js");
-const binding_redirect_js_1 = __importDefault(require("./binding-redirect.js"));
-const binding_post_js_1 = __importDefault(require("./binding-post.js"));
-const binding_simplesign_js_1 = __importDefault(require("./binding-simplesign.js"));
-const flow_js_1 = require("./flow.js");
-/*
- * @desc interface function
- */
-function default_1(props) {
-    return new ServiceProvider(props);
-}
-exports.default = default_1;
-/**
-* @desc Service provider can be configured using either metadata importing or spSetting
-* @param  {object} spSettingimport { FlowResult } from '../types/src/flow.d';
-
-*/
-class ServiceProvider extends entity_js_1.default {
-    /**
-    * @desc  Inherited from Entity
-    * @param {object} spSetting    setting of service provider
-    */
-    constructor(spSetting) {
-        const entitySetting = Object.assign({
-            authnRequestsSigned: false,
-            wantAssertionsSigned: false,
-            wantMessageSigned: false,
-        }, spSetting);
-        super(entitySetting, 'sp');
-    }
-    /**
-    * @desc  Generates the login request for developers to design their own method
-    * @param  {IdentityProvider} idp               object of identity provider
-    * @param  {string}   binding                   protocol binding
-    * @param  {function} customTagReplacement     used when developers have their own login response template
-    */
-    createLoginRequest(idp, binding = 'redirect', customTagReplacement) {
-        const nsBinding = urn_js_1.namespace.binding;
-        const protocol = nsBinding[binding];
-        if (this.entityMeta.isAuthnRequestSigned() !== idp.entityMeta.isWantAuthnRequestsSigned()) {
-            throw new Error('ERR_METADATA_CONFLICT_REQUEST_SIGNED_FLAG');
-        }
-        let context = null;
-        switch (protocol) {
-            case nsBinding.redirect:
-                return binding_redirect_js_1.default.loginRequestRedirectURL({ idp, sp: this }, customTagReplacement);
-            case nsBinding.post:
-                context = binding_post_js_1.default.base64LoginRequest("/*[local-name(.)='AuthnRequest']", { idp, sp: this }, customTagReplacement);
-                break;
-            case nsBinding.simpleSign:
-                // Object context = {id, context, signature, sigAlg}
-                context = binding_simplesign_js_1.default.base64LoginRequest({ idp, sp: this }, customTagReplacement);
-                break;
-            default:
-                // Will support artifact in the next release
-                throw new Error('ERR_SP_LOGIN_REQUEST_UNDEFINED_BINDING');
-        }
-        return {
-            ...context,
-            relayState: this.entitySetting.relayState,
-            entityEndpoint: idp.entityMeta.getSingleSignOnService(binding),
-            type: 'SAMLRequest',
-        };
-    }
-    /**
-    * @desc   Validation of the parsed the URL parameters
-    * @param  {IdentityProvider}   idp             object of identity provider
-    * @param  {string}   binding                   protocol binding
-    * @param  {request}   req                      request
-    */
-    parseLoginResponse(idp, binding, request) {
-        const self = this;
-        return (0, flow_js_1.flow)({
-            from: idp,
-            self: self,
-            checkSignature: true,
-            parserType: 'SAMLResponse',
-            type: 'login',
-            binding: binding,
-            request: request
-        });
-    }
-}
-exports.ServiceProvider = ServiceProvider;
+/**
+* @file entity-sp.ts
+* @author tngan
+* @desc  Declares the actions taken by service provider
+*/
+import Entity from './entity.js';
+import { namespace } from './urn.js';
+import redirectBinding from './binding-redirect.js';
+import postBinding from './binding-post.js';
+import simpleSignBinding from './binding-simplesign.js';
+import { flow } from './flow.js';
+/*
+ * @desc interface function
+ */
+export default function (props) {
+    return new ServiceProvider(props);
+}
+/**
+* @desc Service provider can be configured using either metadata importing or spSetting
+* @param  {object} spSettingimport { FlowResult } from '../types/src/flow.d';
+
+*/
+export class ServiceProvider extends Entity {
+    /**
+    * @desc  Inherited from Entity
+    * @param {object} spSetting    setting of service provider
+    */
+    constructor(spSetting) {
+        const entitySetting = Object.assign({
+            authnRequestsSigned: false,
+            wantAssertionsSigned: false,
+            wantMessageSigned: false,
+        }, spSetting);
+        super(entitySetting, 'sp');
+    }
+    /**
+    * @desc  Generates the login request for developers to design their own method
+    * @param  {IdentityProvider} idp               object of identity provider
+    * @param  {string}   binding                   protocol binding
+    * @param  {function} customTagReplacement     used when developers have their own login response template
+    */
+    createLoginRequest(idp, binding = 'redirect', customTagReplacement) {
+        const nsBinding = namespace.binding;
+        const protocol = nsBinding[binding];
+        if (this.entityMeta.isAuthnRequestSigned() !== idp.entityMeta.isWantAuthnRequestsSigned()) {
+            throw new Error('ERR_METADATA_CONFLICT_REQUEST_SIGNED_FLAG');
+        }
+        let context = null;
+        switch (protocol) {
+            case nsBinding.redirect:
+                return redirectBinding.loginRequestRedirectURL({ idp, sp: this }, customTagReplacement);
+            case nsBinding.post:
+                context = postBinding.base64LoginRequest("/*[local-name(.)='AuthnRequest']", { idp, sp: this }, customTagReplacement);
+                break;
+            case nsBinding.simpleSign:
+                // Object context = {id, context, signature, sigAlg}
+                context = simpleSignBinding.base64LoginRequest({ idp, sp: this }, customTagReplacement);
+                break;
+            default:
+                // Will support artifact in the next release
+                throw new Error('ERR_SP_LOGIN_REQUEST_UNDEFINED_BINDING');
+        }
+        return {
+            ...context,
+            relayState: this.entitySetting.relayState,
+            entityEndpoint: idp.entityMeta.getSingleSignOnService(binding),
+            type: 'SAMLRequest',
+        };
+    }
+    /**
+    * @desc   Validation of the parsed the URL parameters
+    * @param  {IdentityProvider}   idp             object of identity provider
+    * @param  {string}   binding                   protocol binding
+    * @param  {request}   req                      request
+    */
+    parseLoginResponse(idp, binding, request) {
+        const self = this;
+        return flow({
+            from: idp,
+            self: self,
+            checkSignature: true, // saml response must have signature
+            parserType: 'SAMLResponse',
+            type: 'login',
+            binding: binding,
+            request: request
+        });
+    }
+}
 //# sourceMappingURL=entity-sp.js.map

package/build/src/entity-sp.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-sp.js","sourceRoot":"","sources":["../../src/entity-sp.ts"],"names":[],"mappings":";;;;;;AAAA;;;;EAIE;AACF,4DAKqB;AAMrB,qCAAqC;AACrC,gFAAoD;AACpD,wEAA4C;AAC5C,oFAAwD;AACxD,uCAA8C;AAE9C;;GAEG;AACH,mBAAwB,KAA8B;IACpD,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAFD,4BAEC;AAED;;;;EAIE;AACF,MAAa,eAAgB,SAAQ,mBAAM;IAGzC;;;MAGE;IACF,YAAY,SAAkC;QAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;YAClC,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,KAAK;YAC3B,iBAAiB,EAAE,KAAK;SACzB,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;MAKE;IACK,kBAAkB,CACvB,GAAqB,EACrB,OAAO,GAAG,UAAU,EACpB,oBAA2D;QAE3D,MAAM,SAAS,GAAG,kBAAS,CAAC,OAAO,CAAC;QACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC,yBAAyB,EAAE,EAAE;YACzF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;SAC9D;QAED,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,QAAQ,QAAQ,EAAE;YAChB,KAAK,SAAS,CAAC,QAAQ;gBACrB,OAAO,6BAAe,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;YAE1F,KAAK,SAAS,CAAC,IAAI;gBACjB,OAAO,GAAG,yBAAW,CAAC,kBAAkB,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACtH,MAAM;YAER,KAAK,SAAS,CAAC,UAAU;gBACvB,oDAAoD;gBACpD,OAAO,GAAG,+BAAiB,CAAC,kBAAkB,CAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACzF,MAAM;YAER;gBACE,4CAA4C;gBAC5C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;SAC7D;QAED,OAAO;YACL,GAAG,OAAO;YACV,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU;YACzC,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW;YACxE,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;IAED;;;;;MAKE;IACK,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAyB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAA,cAAI,EAAC;YACV,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,cAAc;YAC1B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;CAEF;AA/ED,0CA+EC"}
+{"version":3,"file":"entity-sp.js","sourceRoot":"","sources":["../../src/entity-sp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,MAEN,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,WAAW,MAAM,mBAAmB,CAAC;AAC5C,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAmB,MAAO,WAAW,CAAC;AAEnD;;GAEG;AACH,MAAM,CAAC,OAAO,WAAU,KAA8B;IACpD,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;;;EAIE;AACF,MAAM,OAAO,eAAgB,SAAQ,MAAM;IAGzC;;;MAGE;IACF,YAAY,SAAkC;QAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;YAClC,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,KAAK;YAC3B,iBAAiB,EAAE,KAAK;SACzB,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;MAKE;IACK,kBAAkB,CACvB,GAAqB,EACrB,OAAO,GAAG,UAAU,EACpB,oBAA2D;QAE3D,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC;QACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC,yBAAyB,EAAE,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS,CAAC,QAAQ;gBACrB,OAAO,eAAe,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;YAE1F,KAAK,SAAS,CAAC,IAAI;gBACjB,OAAO,GAAG,WAAW,CAAC,kBAAkB,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACtH,MAAM;YAER,KAAK,SAAS,CAAC,UAAU;gBACvB,oDAAoD;gBACpD,OAAO,GAAG,iBAAiB,CAAC,kBAAkB,CAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBACzF,MAAM;YAER;gBACE,4CAA4C;gBAC5C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO;YACL,GAAG,OAAO;YACV,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU;YACzC,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW;YACxE,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;IAED;;;;;MAKE;IACK,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAyB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;YACV,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI,EAAE,oCAAoC;YAC1D,UAAU,EAAE,cAAc;YAC1B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;CAEF"}