samlesa 2.12.3

package/.editorconfig

@@ -0,0 +1,19 @@
+root = true
+
+[*]
+indent_style = tab
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.{json,js,ts,jsx,html,css}]
+indent_style = space
+indent_size = 2
+
+[.eslintrc]
+indent_style = space
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false

package/.github/FUNDING.yml

@@ -0,0 +1 @@
+github: [tngan]

package/.idea/compiler.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="TypeScriptCompiler">
+    <option name="useTypesFromServer" value="true" />
+  </component>
+</project>

package/.idea/deployment.xml

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="PublishConfigData" remoteFilesAllowedToDisappearOnAutoupload="false">
+    <serverData>
+      <paths name="阿里云">
+        <serverdata>
+          <mappings>
+            <mapping local="$PROJECT_DIR$" web="/" />
+          </mappings>
+        </serverdata>
+      </paths>
+    </serverData>
+  </component>
+</project>

package/.idea/inspectionProfiles/Project_Default.xml

@@ -0,0 +1,6 @@
+<component name="InspectionProjectProfileManager">
+  <profile version="1.0">
+    <option name="myName" value="Project Default" />
+    <inspection_tool class="TsLint" enabled="true" level="WARNING" enabled_by_default="true" />
+  </profile>
+</component>

package/.idea/jsLibraryMappings.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="JavaScriptLibraryMappings">
+    <includedPredefinedLibrary name="Node.js Core" />
+  </component>
+</project>

package/.idea/modules.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/samlify.iml" filepath="$PROJECT_DIR$/.idea/samlify.iml" />
+    </modules>
+  </component>
+</project>

package/.idea/samlify.iml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="WEB_MODULE" version="4">
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$">
+      <excludeFolder url="file://$MODULE_DIR$/.tmp" />
+      <excludeFolder url="file://$MODULE_DIR$/temp" />
+      <excludeFolder url="file://$MODULE_DIR$/tmp" />
+    </content>
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>

package/.idea/vcs.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+  </component>
+</project>

package/.pre-commit.sh

@@ -0,0 +1,15 @@
+echo "Linting"
+npm run lint
+LINTRESULT=$?
+
+echo "Compiling"
+$(npm bin)/tsc
+BUILDRESULT=$?
+
+if [[ $LINTRESULT -ne 0 || $BUILDRESULT -ne 0 ]]; then
+  echo "Fix errors before commit"
+  exit 1
+else
+  echo "Ok to commit"
+  exit 0
+fi

package/.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - '@authenio/xml-encryption > async > lodash':
+        patched: '2019-12-11T18:53:51.541Z'

package/.travis.yml

@@ -0,0 +1,29 @@
+language: node_js
+
+node_js:
+  - "16"
+  - "18"
+  - "20"
+
+env:
+  - INSTALL_JDK=1
+  - INSTALL_JDK=0
+
+before_install:
+  - if [[ "$INSTALL_JDK" == "1" ]] ; then make install_jdk ; fi
+
+install:
+  - yarn install --production=true
+
+script:
+  - yarn add @authenio/samlify-xsd-schema-validator
+  - yarn test --timeout=30s
+
+branches:
+  only:
+  - master
+  - /^.*-alpha$/
+  - /^.*-rc.*$/
+  - /^feature\/.*$/
+
+after_success: npm run coverage

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2016-present Tony Ngan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/Makefile

@@ -0,0 +1,25 @@
+PROJECT = "samlify"
+
+install: ;@echo "install ${PROJECT}"; \
+				 npm install;
+
+clean:	;
+				rm -rf node_modules
+
+rebuild: ;
+	       rm -rf build; \
+				 tsc; \
+
+pretest:	;
+					mkdir -p build/test; \
+					cp -a test/key test/misc build/test;
+
+install_jdk:
+	sudo add-apt-repository ppa:openjdk-r/ppa -y
+	sudo apt-get -qq update
+	sudo apt-get install -y openjdk-9-jdk
+
+doc: ;@echo "prepare and serve the docs"; \
+	   docsify serve ./docs
+
+.PHONY: rebuild pretest doc install_jdk

package/README.md

@@ -0,0 +1,84 @@
+# samlify ·
+
+[![Build Status](https://img.shields.io/circleci/build/github/tngan/samlify?style=for-the-badge&logo=circleci)](https://app.circleci.com/pipelines/github/tngan/samlify)
+[![npm version](https://img.shields.io/npm/v/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify)
+[![NPM](https://img.shields.io/npm/dm/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify)
+[![Coverage Status](https://img.shields.io/coveralls/tngan/samlify/master.svg?style=for-the-badge&logo=coveralls)](https://coveralls.io/github/tngan/samlify?branch=master)
+
+Highly configuarable Node.js SAML 2.0 library for Single Sign On
+
+## 🔄 此仓库为 [samlify](https://github.com/tngan/samlify) 的维护分支，修复了以下问题
+
+- 将依赖包 @authenio/xml-encryption 更换成 xml-encryption并升级了版本,xml-encryption最新版本添加对 sha256/512 加密密钥 OAEP 摘要方法的支持，并将默认密钥签名算法指定为 sha-512
+- 修复了断言加密的一些错误 如libsaml.ts对加密断言仍然采用Assertion字段提取获取，增加了EncryptedAssertion字段提取逻辑
+- 默认elementsOrder增加了 AttributeConsumingService，并在参数增加了 attributeConsumingService字段能够根据字段生成attributeElement包括attributeValue
+- 默认替换增加了自定义函数模板 增加了对多值的attributeValue支持与替换
+- 默认替签名算法替换为SHA-256及更高，加密算法为默认AES_256_GCM模式
+
+
+## Welcome PRs
+
+Welcome all PRs for maintaining this project, or provide a link to the repositories especially for use cases alongside with different frameworks.
+
+### Installation
+
+Multiple schema validators are currently supported by our system, with couple validator modules available and the option to create custom ones. It is essential to utilize the setSchemaValidator function at the outset to avoid errors.
+
+```js
+import * as samlify from 'samlify';
+import * as validator from '@authenio/samlify-xsd-schema-validator';
+// import * as validator from '@authenio/samlify-validate-with-xmllint';
+// import * as validator from '@authenio/samlify-node-xmllint';
+
+samlify.setSchemaValidator(validator);
+```
+
+Now you can create your own schema validator and even suppress it but you have to take the risk for accepting malicious response.
+
+```typescript
+samlify.setSchemaValidator({
+  validate: (response: string) => {
+    /* implment your own or always returns a resolved promise to skip */
+    return Promise.resolve('skipped');
+  }
+});
+```
+
+For those using Windows, `windows-build-tools` should be installed globally before installing samlify if you are using `libxml` validator.
+
+```console
+yarn global add windows-build-tools
+```
+
+### Development
+
+This project is now developed using TypeScript, also support Yarn which is a new package manager.
+
+```console
+yarn global add typescript
+yarn
+```
+
+### Get Started
+
+```javascript
+const saml = require('samlify');
+```
+
+See full documentation [here](https://samlify.js.org/)
+
+### Example
+
+[react-samlify](https://github.com/passify/react-samlify) SP example powered by React, TypeScript and Webpack
+
+### Talks
+
+[An introduction to Single Sign On](http://www.slideshare.net/TonyNgan/an-introduction-of-single-sign-on)
+
+### License
+
+[MIT](LICENSE)
+
+### Copyright
+
+Copyright (C) 2016-present Tony Ngan, released under the MIT License.

package/build/.idea/workspace.xml

@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="AutoImportSettings">
+    <option name="autoReloadType" value="SELECTIVE" />
+  </component>
+  <component name="ChangeListManager">
+    <list default="true" id="bd9fb792-e752-426e-b2f5-6b9b9086ce24" name="更改" comment="" />
+    <option name="SHOW_DIALOG" value="false" />
+    <option name="HIGHLIGHT_CONFLICTS" value="true" />
+    <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
+    <option name="LAST_RESOLUTION" value="IGNORE" />
+  </component>
+  <component name="ProjectColorInfo">{
+  &quot;customColor&quot;: &quot;&quot;,
+  &quot;associatedIndex&quot;: 8
+}</component>
+  <component name="ProjectId" id="2x1xvhQuH75Qdyg5ofvvmYeuJj5" />
+  <component name="ProjectViewState">
+    <option name="hideEmptyMiddlePackages" value="true" />
+    <option name="showExcludedFiles" value="false" />
+    <option name="showLibraryContents" value="true" />
+  </component>
+  <component name="PropertiesComponent">{
+  &quot;keyToString&quot;: {
+    &quot;ModuleVcsDetector.initialDetectionPerformed&quot;: &quot;true&quot;,
+    &quot;RunOnceActivity.ShowReadmeOnStart&quot;: &quot;true&quot;,
+    &quot;ignore.virus.scanning.warn.message&quot;: &quot;true&quot;,
+    &quot;node.js.detected.package.eslint&quot;: &quot;true&quot;,
+    &quot;node.js.detected.package.tslint&quot;: &quot;true&quot;,
+    &quot;node.js.selected.package.eslint&quot;: &quot;(autodetect)&quot;,
+    &quot;node.js.selected.package.tslint&quot;: &quot;(autodetect)&quot;,
+    &quot;nodejs_package_manager_path&quot;: &quot;npm&quot;,
+    &quot;ts.external.directory.path&quot;: &quot;D:\\software\\WebStorm 2022.3.3\\plugins\\javascript-plugin\\jsLanguageServicesImpl\\external&quot;,
+    &quot;vue.rearranger.settings.migration&quot;: &quot;true&quot;
+  }
+}</component>
+  <component name="SharedIndexes">
+    <attachedChunks>
+      <set>
+        <option value="bundled-js-predefined-d6986cc7102b-f27c65a3e318-JavaScript-WS-251.23774.424" />
+      </set>
+    </attachedChunks>
+  </component>
+  <component name="TaskManager">
+    <task active="true" id="Default" summary="默认任务">
+      <changelist id="bd9fb792-e752-426e-b2f5-6b9b9086ce24" name="更改" comment="" />
+      <created>1747119613080</created>
+      <option name="number" value="Default" />
+      <option name="presentableId" value="Default" />
+      <updated>1747119613080</updated>
+      <workItem from="1747119614232" duration="2240000" />
+    </task>
+    <servers />
+  </component>
+  <component name="TypeScriptGeneratedFilesManager">
+    <option name="version" value="3" />
+  </component>
+</project>

package/build/index.js

@@ -0,0 +1,65 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setDOMParserOptions = exports.setSchemaValidator = exports.ServiceProviderInstance = exports.ServiceProvider = exports.IdentityProviderInstance = exports.IdentityProvider = exports.Extractor = exports.Constants = exports.SamlLib = exports.Utility = exports.SPMetadata = exports.IdPMetadata = void 0;
+// version <= 1.25
+const entity_idp_js_1 = __importStar(require("./src/entity-idp.js"));
+exports.IdentityProvider = entity_idp_js_1.default;
+Object.defineProperty(exports, "IdentityProviderInstance", { enumerable: true, get: function () { return entity_idp_js_1.IdentityProvider; } });
+const entity_sp_js_1 = __importStar(require("./src/entity-sp.js"));
+exports.ServiceProvider = entity_sp_js_1.default;
+Object.defineProperty(exports, "ServiceProviderInstance", { enumerable: true, get: function () { return entity_sp_js_1.ServiceProvider; } });
+var metadata_idp_js_1 = require("./src/metadata-idp.js");
+Object.defineProperty(exports, "IdPMetadata", { enumerable: true, get: function () { return __importDefault(metadata_idp_js_1).default; } });
+var metadata_sp_js_1 = require("./src/metadata-sp.js");
+Object.defineProperty(exports, "SPMetadata", { enumerable: true, get: function () { return __importDefault(metadata_sp_js_1).default; } });
+var utility_js_1 = require("./src/utility.js");
+Object.defineProperty(exports, "Utility", { enumerable: true, get: function () { return __importDefault(utility_js_1).default; } });
+var libsaml_js_1 = require("./src/libsaml.js");
+Object.defineProperty(exports, "SamlLib", { enumerable: true, get: function () { return __importDefault(libsaml_js_1).default; } });
+// roadmap
+// new name convention in version >= 3.0
+const Constants = __importStar(require("./src/urn.js"));
+exports.Constants = Constants;
+const Extractor = __importStar(require("./src/extractor.js"));
+exports.Extractor = Extractor;
+// exposed methods for customizing samlify
+const api_js_1 = require("./src/api.js");
+Object.defineProperty(exports, "setSchemaValidator", { enumerable: true, get: function () { return api_js_1.setSchemaValidator; } });
+Object.defineProperty(exports, "setDOMParserOptions", { enumerable: true, get: function () { return api_js_1.setDOMParserOptions; } });
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kBAAkB;AAClB,qEAAqG;AAmBnG,2BAnBK,uBAAgB,CAmBL;AAChB,yGApB6C,gCAAwB,OAoB7C;AAnB1B,mEAAiG;AAoB/F,0BApBK,sBAAe,CAoBL;AACf,wGArB2C,8BAAuB,OAqB3C;AAnBzB,yDAA+D;AAAtD,+HAAA,OAAO,OAAe;AAC/B,uDAA6D;AAApD,6HAAA,OAAO,OAAc;AAC9B,+CAAsD;AAA7C,sHAAA,OAAO,OAAW;AAC3B,+CAAsD;AAA7C,sHAAA,OAAO,OAAW;AAC3B,UAAU;AACV,wCAAwC;AACxC,wDAA0C;AAOxC,8BAAS;AANX,8DAAgD;AAO9C,8BAAS;AALX,0CAA0C;AAC1C,yCAAuE;AAWrE,mGAXO,2BAAkB,OAWP;AAClB,oGAZ2B,4BAAmB,OAY3B"}

package/build/src/api.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getContext = getContext;
+exports.setSchemaValidator = setSchemaValidator;
+exports.setDOMParserOptions = setDOMParserOptions;
+const xmldom_1 = require("@xmldom/xmldom");
+const context = {
+    validate: undefined,
+    dom: new xmldom_1.DOMParser()
+};
+function getContext() {
+    return context;
+}
+function setSchemaValidator(params) {
+    if (typeof params.validate !== 'function') {
+        throw new Error('validate must be a callback function having one argument as xml input');
+    }
+    // assign the validate function to the context
+    context.validate = params.validate;
+}
+function setDOMParserOptions(options = {}) {
+    context.dom = new xmldom_1.DOMParser(options);
+}
+//# sourceMappingURL=api.js.map

package/build/src/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":";;AAkBA,gCAEC;AAED,gDASC;AAED,kDAEC;AAnCD,2CAA+E;AAa/E,MAAM,OAAO,GAAY;IACvB,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,IAAI,kBAAG,EAAE;CACf,CAAC;AAEF,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAwB;IAEzD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AAErC,CAAC;AAED,SAAgB,mBAAmB,CAAC,UAA4B,EAAE;IAChE,OAAO,CAAC,GAAG,GAAG,IAAI,kBAAG,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}