samlesa 2.12.3 → 2.12.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of samlesa might be problematic. Click here for more details.

Files changed (66) hide show
  1. package/build/index.js +54 -64
  2. package/build/index.js.map +1 -1
  3. package/build/src/api.js +24 -23
  4. package/build/src/api.js.map +1 -1
  5. package/build/src/binding-post.js +358 -368
  6. package/build/src/binding-post.js.map +1 -1
  7. package/build/src/binding-redirect.js +333 -332
  8. package/build/src/binding-redirect.js.map +1 -1
  9. package/build/src/binding-simplesign.js +222 -232
  10. package/build/src/binding-simplesign.js.map +1 -1
  11. package/build/src/entity-idp.js +132 -130
  12. package/build/src/entity-idp.js.map +1 -1
  13. package/build/src/entity-sp.js +96 -96
  14. package/build/src/entity-sp.js.map +1 -1
  15. package/build/src/entity.js +225 -235
  16. package/build/src/entity.js.map +1 -1
  17. package/build/src/extractor.js +369 -369
  18. package/build/src/extractor.js.map +1 -1
  19. package/build/src/flow.js +320 -319
  20. package/build/src/flow.js.map +1 -1
  21. package/build/src/libsaml.js +660 -641
  22. package/build/src/libsaml.js.map +1 -1
  23. package/build/src/metadata-idp.js +127 -127
  24. package/build/src/metadata-idp.js.map +1 -1
  25. package/build/src/metadata-sp.js +231 -231
  26. package/build/src/metadata-sp.js.map +1 -1
  27. package/build/src/metadata.js +166 -176
  28. package/build/src/metadata.js.map +1 -1
  29. package/build/src/types.js +11 -11
  30. package/build/src/urn.js +212 -212
  31. package/build/src/urn.js.map +1 -1
  32. package/build/src/utility.js +292 -248
  33. package/build/src/utility.js.map +1 -1
  34. package/build/src/validator.js +27 -26
  35. package/build/src/validator.js.map +1 -1
  36. package/index.d.ts +10 -10
  37. package/index.js +18 -18
  38. package/package.json +1 -5
  39. package/qodana.yaml +29 -29
  40. package/src/binding-post.ts +1 -1
  41. package/src/binding-redirect.ts +83 -64
  42. package/src/entity-idp.ts +26 -20
  43. package/src/libsaml.ts +79 -48
  44. package/src/utility.ts +147 -76
  45. package/types/index.d.ts +10 -10
  46. package/types/src/api.d.ts +13 -13
  47. package/types/src/binding-post.d.ts +46 -46
  48. package/types/src/binding-redirect.d.ts +52 -52
  49. package/types/src/binding-simplesign.d.ts +39 -39
  50. package/types/src/entity-idp.d.ts +35 -42
  51. package/types/src/entity-sp.d.ts +36 -36
  52. package/types/src/entity.d.ts +101 -99
  53. package/types/src/extractor.d.ts +25 -25
  54. package/types/src/flow.d.ts +6 -6
  55. package/types/src/libsaml.d.ts +200 -210
  56. package/types/src/metadata-idp.d.ts +24 -24
  57. package/types/src/metadata-sp.d.ts +36 -36
  58. package/types/src/metadata.d.ts +59 -57
  59. package/types/src/types.d.ts +129 -127
  60. package/types/src/urn.d.ts +194 -194
  61. package/types/src/utility.d.ts +134 -134
  62. package/types/src/validator.d.ts +3 -3
  63. package/.idea/compiler.xml +0 -6
  64. package/.idea/deployment.xml +0 -14
  65. package/.idea/jsLibraryMappings.xml +0 -6
  66. package/build/.idea/workspace.xml +0 -58
package/build/src/urn.js CHANGED
@@ -1,213 +1,213 @@
1
- "use strict";
2
- /**
3
- * @file urn.ts
4
- * @author tngan
5
- * @desc Includes all keywords need in samlify
6
- */
7
- Object.defineProperty(exports, "__esModule", { value: true });
8
- exports.messageConfigurations = exports.elementsOrder = exports.wording = exports.algorithms = exports.tags = exports.namespace = exports.ParserType = exports.StatusCode = exports.MessageSignatureOrder = exports.BindingNamespace = void 0;
9
- var BindingNamespace;
10
- (function (BindingNamespace) {
11
- BindingNamespace["Redirect"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect";
12
- BindingNamespace["Post"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST";
13
- BindingNamespace["SimpleSign"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign";
14
- BindingNamespace["Artifact"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact";
15
- })(BindingNamespace || (exports.BindingNamespace = BindingNamespace = {}));
16
- var MessageSignatureOrder;
17
- (function (MessageSignatureOrder) {
18
- MessageSignatureOrder["STE"] = "sign-then-encrypt";
19
- MessageSignatureOrder["ETS"] = "encrypt-then-sign";
20
- })(MessageSignatureOrder || (exports.MessageSignatureOrder = MessageSignatureOrder = {}));
21
- var StatusCode;
22
- (function (StatusCode) {
23
- // top-tier
24
- StatusCode["Success"] = "urn:oasis:names:tc:SAML:2.0:status:Success";
25
- StatusCode["Requester"] = "urn:oasis:names:tc:SAML:2.0:status:Requester";
26
- StatusCode["Responder"] = "urn:oasis:names:tc:SAML:2.0:status:Responder";
27
- StatusCode["VersionMismatch"] = "urn:oasis:names:tc:SAML:2.0:status:VersionMismatch";
28
- // second-tier to provide more information
29
- StatusCode["AuthFailed"] = "urn:oasis:names:tc:SAML:2.0:status:AuthnFailed";
30
- StatusCode["InvalidAttrNameOrValue"] = "urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue";
31
- StatusCode["InvalidNameIDPolicy"] = "urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy";
32
- StatusCode["NoAuthnContext"] = "urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext";
33
- StatusCode["NoAvailableIDP"] = "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP";
34
- StatusCode["NoPassive"] = "urn:oasis:names:tc:SAML:2.0:status:NoPassive";
35
- StatusCode["NoSupportedIDP"] = "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP";
36
- StatusCode["PartialLogout"] = "urn:oasis:names:tc:SAML:2.0:status:PartialLogout";
37
- StatusCode["ProxyCountExceeded"] = "urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded";
38
- StatusCode["RequestDenied"] = "urn:oasis:names:tc:SAML:2.0:status:RequestDenied";
39
- StatusCode["RequestUnsupported"] = "urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported";
40
- StatusCode["RequestVersionDeprecated"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated";
41
- StatusCode["RequestVersionTooHigh"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh";
42
- StatusCode["RequestVersionTooLow"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow";
43
- StatusCode["ResourceNotRecognized"] = "urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized";
44
- StatusCode["TooManyResponses"] = "urn:oasis:names:tc:SAML:2.0:status:TooManyResponses";
45
- StatusCode["UnknownAttrProfile"] = "urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile";
46
- StatusCode["UnknownPrincipal"] = "urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal";
47
- StatusCode["UnsupportedBinding"] = "urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding";
48
- })(StatusCode || (exports.StatusCode = StatusCode = {}));
49
- const namespace = {
50
- binding: {
51
- redirect: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
52
- post: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
53
- simpleSign: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign',
54
- artifact: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
55
- },
56
- names: {
57
- protocol: 'urn:oasis:names:tc:SAML:2.0:protocol',
58
- assertion: 'urn:oasis:names:tc:SAML:2.0:assertion',
59
- metadata: 'urn:oasis:names:tc:SAML:2.0:metadata',
60
- userLogout: 'urn:oasis:names:tc:SAML:2.0:logout:user',
61
- adminLogout: 'urn:oasis:names:tc:SAML:2.0:logout:admin',
62
- },
63
- authnContextClassRef: {
64
- password: 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',
65
- passwordProtectedTransport: 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport',
66
- },
67
- format: {
68
- emailAddress: 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
69
- persistent: 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',
70
- transient: 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
71
- entity: 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity',
72
- unspecified: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
73
- kerberos: 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos',
74
- windowsDomainQualifiedName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName',
75
- x509SubjectName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName',
76
- },
77
- statusCode: {
78
- // permissible top-level status codes
79
- success: 'urn:oasis:names:tc:SAML:2.0:status:Success',
80
- requester: 'urn:oasis:names:tc:SAML:2.0:status:Requester',
81
- responder: 'urn:oasis:names:tc:SAML:2.0:status:Responder',
82
- versionMismatch: 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch',
83
- // second-level status codes
84
- authFailed: 'urn:oasis:names:tc:SAML:2.0:status:AuthnFailed',
85
- invalidAttrNameOrValue: 'urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue',
86
- invalidNameIDPolicy: 'urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy',
87
- noAuthnContext: 'urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext',
88
- noAvailableIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP',
89
- noPassive: 'urn:oasis:names:tc:SAML:2.0:status:NoPassive',
90
- noSupportedIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP',
91
- partialLogout: 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout',
92
- proxyCountExceeded: 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded',
93
- requestDenied: 'urn:oasis:names:tc:SAML:2.0:status:RequestDenied',
94
- requestUnsupported: 'urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported',
95
- requestVersionDeprecated: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated',
96
- requestVersionTooHigh: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh',
97
- requestVersionTooLow: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow',
98
- resourceNotRecognized: 'urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized',
99
- tooManyResponses: 'urn:oasis:names:tc:SAML:2.0:status:TooManyResponses',
100
- unknownAttrProfile: 'urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile',
101
- unknownPrincipal: 'urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal',
102
- unsupportedBinding: 'urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding',
103
- },
104
- };
105
- exports.namespace = namespace;
106
- const tags = {
107
- request: {
108
- AllowCreate: '{AllowCreate}',
109
- AssertionConsumerServiceURL: '{AssertionConsumerServiceURL}',
110
- AuthnContextClassRef: '{AuthnContextClassRef}',
111
- AssertionID: '{AssertionID}',
112
- Audience: '{Audience}',
113
- AuthnStatement: '{AuthnStatement}',
114
- AttributeStatement: '{AttributeStatement}',
115
- ConditionsNotBefore: '{ConditionsNotBefore}',
116
- ConditionsNotOnOrAfter: '{ConditionsNotOnOrAfter}',
117
- Destination: '{Destination}',
118
- EntityID: '{EntityID}',
119
- ID: '{ID}',
120
- Issuer: '{Issuer}',
121
- IssueInstant: '{IssueInstant}',
122
- InResponseTo: '{InResponseTo}',
123
- NameID: '{NameID}',
124
- NameIDFormat: '{NameIDFormat}',
125
- ProtocolBinding: '{ProtocolBinding}',
126
- SessionIndex: '{SessionIndex}',
127
- SubjectRecipient: '{SubjectRecipient}',
128
- SubjectConfirmationDataNotOnOrAfter: '{SubjectConfirmationDataNotOnOrAfter}',
129
- StatusCode: '{StatusCode}',
130
- },
131
- xmlTag: {
132
- loginRequest: 'AuthnRequest',
133
- logoutRequest: 'LogoutRequest',
134
- loginResponse: 'Response',
135
- logoutResponse: 'LogoutResponse',
136
- },
137
- };
138
- exports.tags = tags;
139
- const messageConfigurations = {
140
- signingOrder: {
141
- SIGN_THEN_ENCRYPT: 'sign-then-encrypt',
142
- ENCRYPT_THEN_SIGN: 'encrypt-then-sign',
143
- },
144
- };
145
- exports.messageConfigurations = messageConfigurations;
146
- const algorithms = {
147
- signature: {
148
- RSA_SHA1: 'http://www.w3.org/2000/09/xmldsig#rsa-sha1',
149
- RSA_SHA256: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',
150
- RSA_SHA512: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512',
151
- },
152
- encryption: {
153
- data: {
154
- AES_128: 'http://www.w3.org/2001/04/xmlenc#aes128-cbc',
155
- AES_256: 'http://www.w3.org/2001/04/xmlenc#aes256-cbc',
156
- AES_256_GCM: 'http://www.w3.org/2009/xmlenc11#aes256-gcm',
157
- TRI_DEC: 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc',
158
- AES_128_GCM: 'http://www.w3.org/2009/xmlenc11#aes128-gcm'
159
- },
160
- key: {
161
- RSA_OAEP_MGF1P: 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p',
162
- RSA_1_5: 'http://www.w3.org/2001/04/xmlenc#rsa-1_5',
163
- },
164
- },
165
- digest: {
166
- 'http://www.w3.org/2000/09/xmldsig#rsa-sha1': 'http://www.w3.org/2000/09/xmldsig#sha1',
167
- 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': 'http://www.w3.org/2001/04/xmlenc#sha256',
168
- 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': 'http://www.w3.org/2001/04/xmlenc#sha512', // support hashing algorithm sha512 in xml-crypto after 0.8.0
169
- },
170
- };
171
- exports.algorithms = algorithms;
172
- var ParserType;
173
- (function (ParserType) {
174
- ParserType["SAMLRequest"] = "SAMLRequest";
175
- ParserType["SAMLResponse"] = "SAMLResponse";
176
- ParserType["LogoutRequest"] = "LogoutRequest";
177
- ParserType["LogoutResponse"] = "LogoutResponse";
178
- })(ParserType || (exports.ParserType = ParserType = {}));
179
- const wording = {
180
- urlParams: {
181
- samlRequest: 'SAMLRequest',
182
- samlResponse: 'SAMLResponse',
183
- logoutRequest: 'LogoutRequest',
184
- logoutResponse: 'LogoutResponse',
185
- sigAlg: 'SigAlg',
186
- signature: 'Signature',
187
- relayState: 'RelayState',
188
- },
189
- binding: {
190
- redirect: 'redirect',
191
- post: 'post',
192
- simpleSign: 'simpleSign',
193
- artifact: 'artifact',
194
- },
195
- certUse: {
196
- signing: 'signing',
197
- encrypt: 'encryption',
198
- },
199
- metadata: {
200
- sp: 'metadata-sp',
201
- idp: 'metadata-idp',
202
- },
203
- };
204
- exports.wording = wording;
205
- // https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
206
- // some idps restrict the order of elements in entity descriptors
207
- const elementsOrder = {
208
- default: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService', 'AttributeConsumingService'],
209
- onelogin: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService', 'AttributeConsumingService'],
210
- shibboleth: ['KeyDescriptor', 'SingleLogoutService', 'NameIDFormat', 'AssertionConsumerService', 'AttributeConsumingService'],
211
- };
212
- exports.elementsOrder = elementsOrder;
1
+ "use strict";
2
+ /**
3
+ * @file urn.ts
4
+ * @author tngan
5
+ * @desc Includes all keywords need in samlify
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
8
+ exports.messageConfigurations = exports.elementsOrder = exports.wording = exports.algorithms = exports.tags = exports.namespace = exports.ParserType = exports.StatusCode = exports.MessageSignatureOrder = exports.BindingNamespace = void 0;
9
+ var BindingNamespace;
10
+ (function (BindingNamespace) {
11
+ BindingNamespace["Redirect"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect";
12
+ BindingNamespace["Post"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST";
13
+ BindingNamespace["SimpleSign"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign";
14
+ BindingNamespace["Artifact"] = "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact";
15
+ })(BindingNamespace = exports.BindingNamespace || (exports.BindingNamespace = {}));
16
+ var MessageSignatureOrder;
17
+ (function (MessageSignatureOrder) {
18
+ MessageSignatureOrder["STE"] = "sign-then-encrypt";
19
+ MessageSignatureOrder["ETS"] = "encrypt-then-sign";
20
+ })(MessageSignatureOrder = exports.MessageSignatureOrder || (exports.MessageSignatureOrder = {}));
21
+ var StatusCode;
22
+ (function (StatusCode) {
23
+ // top-tier
24
+ StatusCode["Success"] = "urn:oasis:names:tc:SAML:2.0:status:Success";
25
+ StatusCode["Requester"] = "urn:oasis:names:tc:SAML:2.0:status:Requester";
26
+ StatusCode["Responder"] = "urn:oasis:names:tc:SAML:2.0:status:Responder";
27
+ StatusCode["VersionMismatch"] = "urn:oasis:names:tc:SAML:2.0:status:VersionMismatch";
28
+ // second-tier to provide more information
29
+ StatusCode["AuthFailed"] = "urn:oasis:names:tc:SAML:2.0:status:AuthnFailed";
30
+ StatusCode["InvalidAttrNameOrValue"] = "urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue";
31
+ StatusCode["InvalidNameIDPolicy"] = "urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy";
32
+ StatusCode["NoAuthnContext"] = "urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext";
33
+ StatusCode["NoAvailableIDP"] = "urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP";
34
+ StatusCode["NoPassive"] = "urn:oasis:names:tc:SAML:2.0:status:NoPassive";
35
+ StatusCode["NoSupportedIDP"] = "urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP";
36
+ StatusCode["PartialLogout"] = "urn:oasis:names:tc:SAML:2.0:status:PartialLogout";
37
+ StatusCode["ProxyCountExceeded"] = "urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded";
38
+ StatusCode["RequestDenied"] = "urn:oasis:names:tc:SAML:2.0:status:RequestDenied";
39
+ StatusCode["RequestUnsupported"] = "urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported";
40
+ StatusCode["RequestVersionDeprecated"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated";
41
+ StatusCode["RequestVersionTooHigh"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh";
42
+ StatusCode["RequestVersionTooLow"] = "urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow";
43
+ StatusCode["ResourceNotRecognized"] = "urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized";
44
+ StatusCode["TooManyResponses"] = "urn:oasis:names:tc:SAML:2.0:status:TooManyResponses";
45
+ StatusCode["UnknownAttrProfile"] = "urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile";
46
+ StatusCode["UnknownPrincipal"] = "urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal";
47
+ StatusCode["UnsupportedBinding"] = "urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding";
48
+ })(StatusCode = exports.StatusCode || (exports.StatusCode = {}));
49
+ const namespace = {
50
+ binding: {
51
+ redirect: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
52
+ post: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
53
+ simpleSign: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign',
54
+ artifact: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
55
+ },
56
+ names: {
57
+ protocol: 'urn:oasis:names:tc:SAML:2.0:protocol',
58
+ assertion: 'urn:oasis:names:tc:SAML:2.0:assertion',
59
+ metadata: 'urn:oasis:names:tc:SAML:2.0:metadata',
60
+ userLogout: 'urn:oasis:names:tc:SAML:2.0:logout:user',
61
+ adminLogout: 'urn:oasis:names:tc:SAML:2.0:logout:admin',
62
+ },
63
+ authnContextClassRef: {
64
+ password: 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',
65
+ passwordProtectedTransport: 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport',
66
+ },
67
+ format: {
68
+ emailAddress: 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
69
+ persistent: 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',
70
+ transient: 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
71
+ entity: 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity',
72
+ unspecified: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
73
+ kerberos: 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos',
74
+ windowsDomainQualifiedName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName',
75
+ x509SubjectName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName',
76
+ },
77
+ statusCode: {
78
+ // permissible top-level status codes
79
+ success: 'urn:oasis:names:tc:SAML:2.0:status:Success',
80
+ requester: 'urn:oasis:names:tc:SAML:2.0:status:Requester',
81
+ responder: 'urn:oasis:names:tc:SAML:2.0:status:Responder',
82
+ versionMismatch: 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch',
83
+ // second-level status codes
84
+ authFailed: 'urn:oasis:names:tc:SAML:2.0:status:AuthnFailed',
85
+ invalidAttrNameOrValue: 'urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue',
86
+ invalidNameIDPolicy: 'urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy',
87
+ noAuthnContext: 'urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext',
88
+ noAvailableIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP',
89
+ noPassive: 'urn:oasis:names:tc:SAML:2.0:status:NoPassive',
90
+ noSupportedIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP',
91
+ partialLogout: 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout',
92
+ proxyCountExceeded: 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded',
93
+ requestDenied: 'urn:oasis:names:tc:SAML:2.0:status:RequestDenied',
94
+ requestUnsupported: 'urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported',
95
+ requestVersionDeprecated: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated',
96
+ requestVersionTooHigh: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh',
97
+ requestVersionTooLow: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow',
98
+ resourceNotRecognized: 'urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized',
99
+ tooManyResponses: 'urn:oasis:names:tc:SAML:2.0:status:TooManyResponses',
100
+ unknownAttrProfile: 'urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile',
101
+ unknownPrincipal: 'urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal',
102
+ unsupportedBinding: 'urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding',
103
+ },
104
+ };
105
+ exports.namespace = namespace;
106
+ const tags = {
107
+ request: {
108
+ AllowCreate: '{AllowCreate}',
109
+ AssertionConsumerServiceURL: '{AssertionConsumerServiceURL}',
110
+ AuthnContextClassRef: '{AuthnContextClassRef}',
111
+ AssertionID: '{AssertionID}',
112
+ Audience: '{Audience}',
113
+ AuthnStatement: '{AuthnStatement}',
114
+ AttributeStatement: '{AttributeStatement}',
115
+ ConditionsNotBefore: '{ConditionsNotBefore}',
116
+ ConditionsNotOnOrAfter: '{ConditionsNotOnOrAfter}',
117
+ Destination: '{Destination}',
118
+ EntityID: '{EntityID}',
119
+ ID: '{ID}',
120
+ Issuer: '{Issuer}',
121
+ IssueInstant: '{IssueInstant}',
122
+ InResponseTo: '{InResponseTo}',
123
+ NameID: '{NameID}',
124
+ NameIDFormat: '{NameIDFormat}',
125
+ ProtocolBinding: '{ProtocolBinding}',
126
+ SessionIndex: '{SessionIndex}',
127
+ SubjectRecipient: '{SubjectRecipient}',
128
+ SubjectConfirmationDataNotOnOrAfter: '{SubjectConfirmationDataNotOnOrAfter}',
129
+ StatusCode: '{StatusCode}',
130
+ },
131
+ xmlTag: {
132
+ loginRequest: 'AuthnRequest',
133
+ logoutRequest: 'LogoutRequest',
134
+ loginResponse: 'Response',
135
+ logoutResponse: 'LogoutResponse',
136
+ },
137
+ };
138
+ exports.tags = tags;
139
+ const messageConfigurations = {
140
+ signingOrder: {
141
+ SIGN_THEN_ENCRYPT: 'sign-then-encrypt',
142
+ ENCRYPT_THEN_SIGN: 'encrypt-then-sign',
143
+ },
144
+ };
145
+ exports.messageConfigurations = messageConfigurations;
146
+ const algorithms = {
147
+ signature: {
148
+ RSA_SHA1: 'http://www.w3.org/2000/09/xmldsig#rsa-sha1',
149
+ RSA_SHA256: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',
150
+ RSA_SHA512: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512',
151
+ },
152
+ encryption: {
153
+ data: {
154
+ AES_128: 'http://www.w3.org/2001/04/xmlenc#aes128-cbc',
155
+ AES_256: 'http://www.w3.org/2001/04/xmlenc#aes256-cbc',
156
+ AES_256_GCM: 'http://www.w3.org/2009/xmlenc11#aes256-gcm',
157
+ TRI_DEC: 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc',
158
+ AES_128_GCM: 'http://www.w3.org/2009/xmlenc11#aes128-gcm'
159
+ },
160
+ key: {
161
+ RSA_OAEP_MGF1P: 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p',
162
+ RSA_1_5: 'http://www.w3.org/2001/04/xmlenc#rsa-1_5',
163
+ },
164
+ },
165
+ digest: {
166
+ 'http://www.w3.org/2000/09/xmldsig#rsa-sha1': 'http://www.w3.org/2000/09/xmldsig#sha1',
167
+ 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': 'http://www.w3.org/2001/04/xmlenc#sha256',
168
+ 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': 'http://www.w3.org/2001/04/xmlenc#sha512', // support hashing algorithm sha512 in xml-crypto after 0.8.0
169
+ },
170
+ };
171
+ exports.algorithms = algorithms;
172
+ var ParserType;
173
+ (function (ParserType) {
174
+ ParserType["SAMLRequest"] = "SAMLRequest";
175
+ ParserType["SAMLResponse"] = "SAMLResponse";
176
+ ParserType["LogoutRequest"] = "LogoutRequest";
177
+ ParserType["LogoutResponse"] = "LogoutResponse";
178
+ })(ParserType = exports.ParserType || (exports.ParserType = {}));
179
+ const wording = {
180
+ urlParams: {
181
+ samlRequest: 'SAMLRequest',
182
+ samlResponse: 'SAMLResponse',
183
+ logoutRequest: 'LogoutRequest',
184
+ logoutResponse: 'LogoutResponse',
185
+ sigAlg: 'SigAlg',
186
+ signature: 'Signature',
187
+ relayState: 'RelayState',
188
+ },
189
+ binding: {
190
+ redirect: 'redirect',
191
+ post: 'post',
192
+ simpleSign: 'simpleSign',
193
+ artifact: 'artifact',
194
+ },
195
+ certUse: {
196
+ signing: 'signing',
197
+ encrypt: 'encryption',
198
+ },
199
+ metadata: {
200
+ sp: 'metadata-sp',
201
+ idp: 'metadata-idp',
202
+ },
203
+ };
204
+ exports.wording = wording;
205
+ // https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
206
+ // some idps restrict the order of elements in entity descriptors
207
+ const elementsOrder = {
208
+ default: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService', 'AttributeConsumingService'],
209
+ onelogin: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService', 'AttributeConsumingService'],
210
+ shibboleth: ['KeyDescriptor', 'SingleLogoutService', 'NameIDFormat', 'AssertionConsumerService', 'AttributeConsumingService'],
211
+ };
212
+ exports.elementsOrder = elementsOrder;
213
213
  //# sourceMappingURL=urn.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"urn.js","sourceRoot":"","sources":["../../src/urn.ts"],"names":[],"mappings":";AAAA;;;;EAIE;;;AAEF,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,mFAA+D,CAAA;IAC/D,2EAAuD,CAAA;IACvD,4FAAwE,CAAA;IACxE,mFAA+D,CAAA;AACjE,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAED,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,kDAAyB,CAAA;IACzB,kDAAyB,CAAA;AAC3B,CAAC,EAHW,qBAAqB,qCAArB,qBAAqB,QAGhC;AAED,IAAY,UA0BX;AA1BD,WAAY,UAAU;IACpB,WAAW;IACX,oEAAsD,CAAA;IACtD,wEAA0D,CAAA;IAC1D,wEAA0D,CAAA;IAC1D,oFAAsE,CAAA;IACtE,0CAA0C;IAC1C,2EAA6D,CAAA;IAC7D,kGAAoF,CAAA;IACpF,4FAA8E,CAAA;IAC9E,kFAAoE,CAAA;IACpE,kFAAoE,CAAA;IACpE,wEAA0D,CAAA;IAC1D,kFAAoE,CAAA;IACpE,gFAAkE,CAAA;IAClE,0FAA4E,CAAA;IAC5E,gFAAkE,CAAA;IAClE,0FAA4E,CAAA;IAC5E,sGAAwF,CAAA;IACxF,gGAAkF,CAAA;IAClF,8FAAgF,CAAA;IAChF,gGAAkF,CAAA;IAClF,sFAAwE,CAAA;IACxE,0FAA4E,CAAA;IAC5E,sFAAwE,CAAA;IACxE,0FAA4E,CAAA;AAC9E,CAAC,EA1BW,UAAU,0BAAV,UAAU,QA0BrB;AAED,MAAM,SAAS,GAAG;IAChB,OAAO,EAAE;QACP,QAAQ,EAAE,oDAAoD;QAC9D,IAAI,EAAE,gDAAgD;QACtD,UAAU,EAAE,2DAA2D;QACvE,QAAQ,EAAE,oDAAoD;KAC/D;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,sCAAsC;QAChD,SAAS,EAAE,uCAAuC;QAClD,QAAQ,EAAE,sCAAsC;QAChD,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0CAA0C;KACxD;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,iDAAiD;QAC3D,0BAA0B,EAAE,mEAAmE;KAChG;IACD,MAAM,EAAE;QACN,YAAY,EAAE,wDAAwD;QACtE,UAAU,EAAE,sDAAsD;QAClE,SAAS,EAAE,qDAAqD;QAChE,MAAM,EAAE,kDAAkD;QAC1D,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,oDAAoD;QAC9D,0BAA0B,EAAE,sEAAsE;QAClG,eAAe,EAAE,2DAA2D;KAC7E;IACD,UAAU,EAAE;QACV,qCAAqC;QACrC,OAAO,EAAE,4CAA4C;QACrD,SAAS,EAAE,8CAA8C;QACzD,SAAS,EAAE,8CAA8C;QACzD,eAAe,EAAE,oDAAoD;QACrE,4BAA4B;QAC5B,UAAU,EAAE,gDAAgD;QAC5D,sBAAsB,EAAE,2DAA2D;QACnF,mBAAmB,EAAE,wDAAwD;QAC7E,cAAc,EAAE,mDAAmD;QACnE,cAAc,EAAE,mDAAmD;QACnE,SAAS,EAAE,8CAA8C;QACzD,cAAc,EAAE,mDAAmD;QACnE,aAAa,EAAE,kDAAkD;QACjE,kBAAkB,EAAE,uDAAuD;QAC3E,aAAa,EAAE,kDAAkD;QACjE,kBAAkB,EAAE,uDAAuD;QAC3E,wBAAwB,EAAE,6DAA6D;QACvF,qBAAqB,EAAE,0DAA0D;QACjF,oBAAoB,EAAE,yDAAyD;QAC/E,qBAAqB,EAAE,0DAA0D;QACjF,gBAAgB,EAAE,qDAAqD;QACvE,kBAAkB,EAAE,uDAAuD;QAC3E,gBAAgB,EAAE,qDAAqD;QACvE,kBAAkB,EAAE,uDAAuD;KAC5E;CACF,CAAC;AA6GO,8BAAS;AA3GlB,MAAM,IAAI,GAAG;IACX,OAAO,EAAE;QACP,WAAW,EAAE,eAAe;QAC5B,2BAA2B,EAAE,+BAA+B;QAC5D,oBAAoB,EAAE,wBAAwB;QAC9C,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,sBAAsB;QAC1C,mBAAmB,EAAE,uBAAuB;QAC5C,sBAAsB,EAAE,0BAA0B;QAClD,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,YAAY;QACtB,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,gBAAgB;QAC9B,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,gBAAgB;QAC9B,eAAe,EAAE,mBAAmB;QACpC,YAAY,EAAE,gBAAgB;QAC9B,gBAAgB,EAAE,oBAAoB;QACtC,mCAAmC,EAAE,uCAAuC;QAC5E,UAAU,EAAE,cAAc;KAC3B;IACD,MAAM,EAAE;QACN,YAAY,EAAE,cAAc;QAC5B,aAAa,EAAE,eAAe;QAC9B,aAAa,EAAE,UAAU;QACzB,cAAc,EAAE,gBAAgB;KACjC;CACF,CAAC;AA4EkB,oBAAI;AA1ExB,MAAM,qBAAqB,GAAG;IAC5B,YAAY,EAAE;QACZ,iBAAiB,EAAE,mBAAmB;QACtC,iBAAiB,EAAE,mBAAmB;KACvC;CACF,CAAC;AAqE4D,sDAAqB;AAnEnF,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE;QACT,QAAQ,EAAE,4CAA4C;QACtD,UAAU,EAAE,mDAAmD;QAC/D,UAAU,EAAE,mDAAmD;KAChE;IACD,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,6CAA6C;YACtD,OAAO,EAAE,6CAA6C;YACtD,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,gDAAgD;YACzD,WAAW,EAAE,4CAA4C;SAC1D;QACD,GAAG,EAAE;YACH,cAAc,EAAE,iDAAiD;YACjE,OAAO,EAAE,0CAA0C;SACpD;KACF;IACD,MAAM,EAAE;QACN,4CAA4C,EAAE,wCAAwC;QACtF,mDAAmD,EAAE,yCAAyC;QAC9F,mDAAmD,EAAE,yCAAyC,EAAE,6DAA6D;KAC9J;CACF,CAAC;AA2CwB,gCAAU;AAzCpC,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,yCAA2B,CAAA;IAC3B,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,+CAAiC,CAAA;AACnC,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,MAAM,OAAO,GAAG;IACd,SAAS,EAAE;QACT,WAAW,EAAE,aAAa;QAC1B,YAAY,EAAE,cAAc;QAC5B,aAAa,EAAE,eAAe;QAC9B,cAAc,EAAE,gBAAgB;QAChC,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,YAAY;KACzB;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,UAAU;KACrB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,YAAY;KACtB;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,aAAa;QACjB,GAAG,EAAE,cAAc;KACpB;CACF,CAAC;AAUoC,0BAAO;AAR7C,uEAAuE;AACvE,iEAAiE;AACjE,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAC,2BAA2B,CAAC;IACzH,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAC,2BAA2B,CAAC;IAC1H,UAAU,EAAE,CAAC,eAAe,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,EAAE,2BAA2B,CAAC;CAC9H,CAAC;AAE6C,sCAAa"}
1
+ {"version":3,"file":"urn.js","sourceRoot":"","sources":["../../src/urn.ts"],"names":[],"mappings":";AAAA;;;;EAIE;;;AAEF,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,mFAA+D,CAAA;IAC/D,2EAAuD,CAAA;IACvD,4FAAwE,CAAA;IACxE,mFAA+D,CAAA;AACjE,CAAC,EALW,gBAAgB,GAAhB,wBAAgB,KAAhB,wBAAgB,QAK3B;AAED,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,kDAAyB,CAAA;IACzB,kDAAyB,CAAA;AAC3B,CAAC,EAHW,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAGhC;AAED,IAAY,UA0BX;AA1BD,WAAY,UAAU;IACpB,WAAW;IACX,oEAAsD,CAAA;IACtD,wEAA0D,CAAA;IAC1D,wEAA0D,CAAA;IAC1D,oFAAsE,CAAA;IACtE,0CAA0C;IAC1C,2EAA6D,CAAA;IAC7D,kGAAoF,CAAA;IACpF,4FAA8E,CAAA;IAC9E,kFAAoE,CAAA;IACpE,kFAAoE,CAAA;IACpE,wEAA0D,CAAA;IAC1D,kFAAoE,CAAA;IACpE,gFAAkE,CAAA;IAClE,0FAA4E,CAAA;IAC5E,gFAAkE,CAAA;IAClE,0FAA4E,CAAA;IAC5E,sGAAwF,CAAA;IACxF,gGAAkF,CAAA;IAClF,8FAAgF,CAAA;IAChF,gGAAkF,CAAA;IAClF,sFAAwE,CAAA;IACxE,0FAA4E,CAAA;IAC5E,sFAAwE,CAAA;IACxE,0FAA4E,CAAA;AAC9E,CAAC,EA1BW,UAAU,GAAV,kBAAU,KAAV,kBAAU,QA0BrB;AAED,MAAM,SAAS,GAAG;IAChB,OAAO,EAAE;QACP,QAAQ,EAAE,oDAAoD;QAC9D,IAAI,EAAE,gDAAgD;QACtD,UAAU,EAAE,2DAA2D;QACvE,QAAQ,EAAE,oDAAoD;KAC/D;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,sCAAsC;QAChD,SAAS,EAAE,uCAAuC;QAClD,QAAQ,EAAE,sCAAsC;QAChD,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0CAA0C;KACxD;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,iDAAiD;QAC3D,0BAA0B,EAAE,mEAAmE;KAChG;IACD,MAAM,EAAE;QACN,YAAY,EAAE,wDAAwD;QACtE,UAAU,EAAE,sDAAsD;QAClE,SAAS,EAAE,qDAAqD;QAChE,MAAM,EAAE,kDAAkD;QAC1D,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,oDAAoD;QAC9D,0BAA0B,EAAE,sEAAsE;QAClG,eAAe,EAAE,2DAA2D;KAC7E;IACD,UAAU,EAAE;QACV,qCAAqC;QACrC,OAAO,EAAE,4CAA4C;QACrD,SAAS,EAAE,8CAA8C;QACzD,SAAS,EAAE,8CAA8C;QACzD,eAAe,EAAE,oDAAoD;QACrE,4BAA4B;QAC5B,UAAU,EAAE,gDAAgD;QAC5D,sBAAsB,EAAE,2DAA2D;QACnF,mBAAmB,EAAE,wDAAwD;QAC7E,cAAc,EAAE,mDAAmD;QACnE,cAAc,EAAE,mDAAmD;QACnE,SAAS,EAAE,8CAA8C;QACzD,cAAc,EAAE,mDAAmD;QACnE,aAAa,EAAE,kDAAkD;QACjE,kBAAkB,EAAE,uDAAuD;QAC3E,aAAa,EAAE,kDAAkD;QACjE,kBAAkB,EAAE,uDAAuD;QAC3E,wBAAwB,EAAE,6DAA6D;QACvF,qBAAqB,EAAE,0DAA0D;QACjF,oBAAoB,EAAE,yDAAyD;QAC/E,qBAAqB,EAAE,0DAA0D;QACjF,gBAAgB,EAAE,qDAAqD;QACvE,kBAAkB,EAAE,uDAAuD;QAC3E,gBAAgB,EAAE,qDAAqD;QACvE,kBAAkB,EAAE,uDAAuD;KAC5E;CACF,CAAC;AA6GO,8BAAS;AA3GlB,MAAM,IAAI,GAAG;IACX,OAAO,EAAE;QACP,WAAW,EAAE,eAAe;QAC5B,2BAA2B,EAAE,+BAA+B;QAC5D,oBAAoB,EAAE,wBAAwB;QAC9C,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,sBAAsB;QAC1C,mBAAmB,EAAE,uBAAuB;QAC5C,sBAAsB,EAAE,0BAA0B;QAClD,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,YAAY;QACtB,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,gBAAgB;QAC9B,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,gBAAgB;QAC9B,eAAe,EAAE,mBAAmB;QACpC,YAAY,EAAE,gBAAgB;QAC9B,gBAAgB,EAAE,oBAAoB;QACtC,mCAAmC,EAAE,uCAAuC;QAC5E,UAAU,EAAE,cAAc;KAC3B;IACD,MAAM,EAAE;QACN,YAAY,EAAE,cAAc;QAC5B,aAAa,EAAE,eAAe;QAC9B,aAAa,EAAE,UAAU;QACzB,cAAc,EAAE,gBAAgB;KACjC;CACF,CAAC;AA4EkB,oBAAI;AA1ExB,MAAM,qBAAqB,GAAG;IAC5B,YAAY,EAAE;QACZ,iBAAiB,EAAE,mBAAmB;QACtC,iBAAiB,EAAE,mBAAmB;KACvC;CACF,CAAC;AAqE4D,sDAAqB;AAnEnF,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE;QACT,QAAQ,EAAE,4CAA4C;QACtD,UAAU,EAAE,mDAAmD;QAC/D,UAAU,EAAE,mDAAmD;KAChE;IACD,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,OAAO,EAAE,6CAA6C;YACtD,OAAO,EAAE,6CAA6C;YACtD,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,gDAAgD;YACzD,WAAW,EAAE,4CAA4C;SAC1D;QACD,GAAG,EAAE;YACH,cAAc,EAAE,iDAAiD;YACjE,OAAO,EAAE,0CAA0C;SACpD;KACF;IACD,MAAM,EAAE;QACN,4CAA4C,EAAE,wCAAwC;QACtF,mDAAmD,EAAE,yCAAyC;QAC9F,mDAAmD,EAAE,yCAAyC,EAAE,6DAA6D;KAC9J;CACF,CAAC;AA2CwB,gCAAU;AAzCpC,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,yCAA2B,CAAA;IAC3B,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,+CAAiC,CAAA;AACnC,CAAC,EALW,UAAU,GAAV,kBAAU,KAAV,kBAAU,QAKrB;AAED,MAAM,OAAO,GAAG;IACd,SAAS,EAAE;QACT,WAAW,EAAE,aAAa;QAC1B,YAAY,EAAE,cAAc;QAC5B,aAAa,EAAE,eAAe;QAC9B,cAAc,EAAE,gBAAgB;QAChC,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,YAAY;KACzB;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,UAAU;KACrB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,YAAY;KACtB;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,aAAa;QACjB,GAAG,EAAE,cAAc;KACpB;CACF,CAAC;AAUoC,0BAAO;AAR7C,uEAAuE;AACvE,iEAAiE;AACjE,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAC,2BAA2B,CAAC;IACzH,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAC,2BAA2B,CAAC;IAC1H,UAAU,EAAE,CAAC,eAAe,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,EAAE,2BAA2B,CAAC;CAC9H,CAAC;AAE6C,sCAAa"}