samlesa 2.13.0 → 2.14.1

package/LICENSE

@@ -1,5 +1,5 @@
 The MIT License (MIT)
-
+Copyright (c) 2023 veclea
 Copyright (c) 2016-present Tony Ngan
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

package/README.md

@@ -1,84 +1,55 @@
-# samlify ·
+# samlify · [![构建状态](https://img.shields.io/circleci/build/github/tngan/samlify?style=for-the-badge&logo=circleci)](https://app.circleci.com/pipelines/github/tngan/samlify) [![npm 版本](https://img.shields.io/npm/v/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify) [![下载量](https://img.shields.io/npm/dm/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify) [![覆盖率](https://img.shields.io/coveralls/tngan/samlify/master.svg?style=for-the-badge&logo=coveralls)](https://coveralls.io/github/tngan/samlify?branch=master)
 
-[![Build Status](https://img.shields.io/circleci/build/github/tngan/samlify?style=for-the-badge&logo=circleci)](https://app.circleci.com/pipelines/github/tngan/samlify)
-[![npm version](https://img.shields.io/npm/v/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify)
-[![NPM](https://img.shields.io/npm/dm/samlify.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/samlify)
-[![Coverage Status](https://img.shields.io/coveralls/tngan/samlify/master.svg?style=for-the-badge&logo=coveralls)](https://coveralls.io/github/tngan/samlify?branch=master)
+高度可配置的 Node.js SAML 2.0 单点登录库
+Highly configurable Node.js SAML 2.0 library for Single Sign On
 
-Highly configuarable Node.js SAML 2.0 library for Single Sign On
+---
 
-## 🔄 此仓库为 [samlify](https://github.com/tngan/samlify) 的维护分支，修复了以下问题
+## 🔄 本仓库为 [samlify](https://github.com/tngan/samlify) 的改进分支
 
-- 将依赖包 @authenio/xml-encryption 更换成 xml-encryption并升级了版本,xml-encryption最新版本添加对 sha256/512 加密密钥 OAEP 摘要方法的支持，并将默认密钥签名算法指定为 sha-512
-- 修复了断言加密的一些错误 如libsaml.ts对加密断言仍然采用Assertion字段提取获取，增加了EncryptedAssertion字段提取逻辑
-- 默认elementsOrder增加了 AttributeConsumingService，并在参数增加了 attributeConsumingService字段能够根据字段生成attributeElement包括attributeValue
-- 默认替换增加了自定义函数模板 增加了对多值的attributeValue支持与替换
-- 默认替签名算法替换为SHA-256及更高，加密算法为默认AES_256_GCM模式
+## 🔄 This repository is a fork of [samlify](https://github.com/tngan/samlify) with the following improvements:
 
+### 主要改进 / Key Improvements
+- ✅ 将依赖包 `@authenio/xml-encryption` 替换为 `xml-encryption` 并升级版本，支持 SHA-256/512 加密和 OAEP 摘要方法  
+  ✅ Replaced `@authenio/xml-encryption` with `xml-encryption` (latest version adds SHA-256/512 and OAEP support)
 
-## Welcome PRs
+- 🛠️ 修复加密断言逻辑，支持 `EncryptedAssertion` 字段提取  
+  🛠️ Fixed encrypted assertion logic to handle `EncryptedAssertion` field
 
-Welcome all PRs for maintaining this project, or provide a link to the repositories especially for use cases alongside with different frameworks.
+- 📦 默认配置增加 `AttributeConsumingService` 和属性声明生成  
+  📦 Added `AttributeConsumingService` to default elements and attribute value generation
 
-### Installation
+- 🗑️ 移除自定义函数模板，通过 `AttributeStatement` 配置多值属性  
+  🗑️ Removed custom templates, added multi-value attribute support via `AttributeStatement`
 
-Multiple schema validators are currently supported by our system, with couple validator modules available and the option to create custom ones. It is essential to utilize the setSchemaValidator function at the outset to avoid errors.
+- 🔒 签名算法升级为 SHA-256+，默认加密算法 AES_256_GCM  
+  🔒 Upgraded signature algorithm to SHA-256+, default encryption to AES_256_GCM
 
-```js
-import * as samlify from 'samlify';
-import * as validator from '@authenio/samlify-xsd-schema-validator';
-// import * as validator from '@authenio/samlify-validate-with-xmllint';
-// import * as validator from '@authenio/samlify-node-xmllint';
-
-samlify.setSchemaValidator(validator);
-```
+- 📦 将 CJS 模块打包转为 ESModule  
+  📦 Migrated from CJS to ESModule packaging
 
-Now you can create your own schema validator and even suppress it but you have to take the risk for accepting malicious response.
+- ⚙️ 将 `createLoginResponse` 改为对象传参，新增 `AttributeStatement` 参数  
+  ⚙️ Refactored `createLoginResponse` to use object parameters with `AttributeStatement`
 
-```typescript
-samlify.setSchemaValidator({
-  validate: (response: string) => {
-    /* implment your own or always returns a resolved promise to skip */
-    return Promise.resolve('skipped');
-  }
-});
-```
-
-For those using Windows, `windows-build-tools` should be installed globally before installing samlify if you are using `libxml` validator.
+- ⬆️ 升级依赖版本，移除 `node-rsa`/`node-forge`，改用原生 `crypto` 模块  
+  ⬆️ Upgraded dependencies, replaced `node-rsa`/`node-forge` with native `crypto`
 
-```console
-yarn global add windows-build-tools
-```
+- 🌐 将 `url` 库替换为 `URL` 原生 API  
+  🌐 Replaced `url` library with native `URL` API
 
-### Development
+---
 
-This project is now developed using TypeScript, also support Yarn which is a new package manager.
+## 欢迎 PR / Welcome PRs
+欢迎贡献代码或提供与其他框架集成的用例  
+Welcome contributions or integration examples with frameworks
 
-```console
-yarn global add typescript
-yarn
-```
+---
 
-### Get Started
+## 安装 / Installation
+```js
+import * as samlify from 'samlify';
+import * as validator from '@authenio/samlify-xsd-schema-validator';
 
-```javascript
-const saml = require('samlify');
+// 设置模式验证器 / Set schema validator
+samlify.setSchemaValidator(validator);
 ```
-
-See full documentation [here](https://samlify.js.org/)
-
-### Example
-
-[react-samlify](https://github.com/passify/react-samlify) SP example powered by React, TypeScript and Webpack
-
-### Talks
-
-[An introduction to Single Sign On](http://www.slideshare.net/TonyNgan/an-introduction-of-single-sign-on)
-
-### License
-
-[MIT](LICENSE)
-
-### Copyright
-
-Copyright (C) 2016-present Tony Ngan, released under the MIT License.

package/build/.idea/deployment.xml

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="PublishConfigData" remoteFilesAllowedToDisappearOnAutoupload="false">
+    <serverData>
+      <paths name="阿里云">
+        <serverdata>
+          <mappings>
+            <mapping local="$PROJECT_DIR$" web="/" />
+          </mappings>
+        </serverdata>
+      </paths>
+    </serverData>
+  </component>
+</project>

package/{src → build}/.idea/modules.xml

@@ -2,7 +2,7 @@
 <project version="4">
   <component name="ProjectModuleManager">
     <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/src.iml" filepath="$PROJECT_DIR$/.idea/src.iml" />
+      <module fileurl="file://$PROJECT_DIR$/.idea/build.iml" filepath="$PROJECT_DIR$/.idea/build.iml" />
     </modules>
   </component>
 </project>

package/build/.idea/workspace.xml

@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="AutoImportSettings">
+    <option name="autoReloadType" value="SELECTIVE" />
+  </component>
+  <component name="ChangeListManager">
+    <list default="true" id="62d39b22-3a6c-46ad-a310-5763867fceca" name="更改" comment="" />
+    <option name="SHOW_DIALOG" value="false" />
+    <option name="HIGHLIGHT_CONFLICTS" value="true" />
+    <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
+    <option name="LAST_RESOLUTION" value="IGNORE" />
+  </component>
+  <component name="ProjectColorInfo"><![CDATA[{
+  "customColor": "",
+  "associatedIndex": 8
+}]]></component>
+  <component name="ProjectId" id="2x9vZR9T2RLN1zkgcrqNo4JQIUG" />
+  <component name="ProjectViewState">
+    <option name="hideEmptyMiddlePackages" value="true" />
+    <option name="showExcludedFiles" value="false" />
+    <option name="showLibraryContents" value="true" />
+  </component>
+  <component name="PropertiesComponent"><![CDATA[{
+  "keyToString": {
+    "ModuleVcsDetector.initialDetectionPerformed": "true",
+    "RunOnceActivity.ShowReadmeOnStart": "true",
+    "node.js.detected.package.eslint": "true",
+    "node.js.detected.package.tslint": "true",
+    "node.js.selected.package.eslint": "(autodetect)",
+    "node.js.selected.package.tslint": "(autodetect)",
+    "nodejs_package_manager_path": "npm",
+    "ts.external.directory.path": "D:\\software\\WebStorm 2022.3.3\\plugins\\javascript-plugin\\jsLanguageServicesImpl\\external",
+    "vue.rearranger.settings.migration": "true"
+  }
+}]]></component>
+  <component name="SharedIndexes">
+    <attachedChunks>
+      <set>
+        <option value="bundled-js-predefined-d6986cc7102b-f27c65a3e318-JavaScript-WS-251.23774.424" />
+      </set>
+    </attachedChunks>
+  </component>
+  <component name="TaskManager">
+    <task active="true" id="Default" summary="默认任务">
+      <changelist id="62d39b22-3a6c-46ad-a310-5763867fceca" name="更改" comment="" />
+      <created>1747363159224</created>
+      <option name="number" value="Default" />
+      <option name="presentableId" value="Default" />
+      <updated>1747363159224</updated>
+      <workItem from="1747363160498" duration="1913000" />
+    </task>
+    <servers />
+  </component>
+  <component name="TypeScriptGeneratedFilesManager">
+    <option name="version" value="3" />
+  </component>
+</project>

package/build/index.js

@@ -1,55 +1,19 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setDOMParserOptions = exports.setSchemaValidator = exports.ServiceProviderInstance = exports.ServiceProvider = exports.IdentityProviderInstance = exports.IdentityProvider = exports.Extractor = exports.Constants = exports.SamlLib = exports.Utility = exports.SPMetadata = exports.IdPMetadata = void 0;
-// version <= 1.25
-const entity_idp_js_1 = __importStar(require("./src/entity-idp.js"));
-exports.IdentityProvider = entity_idp_js_1.default;
-Object.defineProperty(exports, "IdentityProviderInstance", { enumerable: true, get: function () { return entity_idp_js_1.IdentityProvider; } });
-const entity_sp_js_1 = __importStar(require("./src/entity-sp.js"));
-exports.ServiceProvider = entity_sp_js_1.default;
-Object.defineProperty(exports, "ServiceProviderInstance", { enumerable: true, get: function () { return entity_sp_js_1.ServiceProvider; } });
-var metadata_idp_js_1 = require("./src/metadata-idp.js");
-Object.defineProperty(exports, "IdPMetadata", { enumerable: true, get: function () { return __importDefault(metadata_idp_js_1).default; } });
-var metadata_sp_js_1 = require("./src/metadata-sp.js");
-Object.defineProperty(exports, "SPMetadata", { enumerable: true, get: function () { return __importDefault(metadata_sp_js_1).default; } });
-var utility_js_1 = require("./src/utility.js");
-Object.defineProperty(exports, "Utility", { enumerable: true, get: function () { return __importDefault(utility_js_1).default; } });
-var libsaml_js_1 = require("./src/libsaml.js");
-Object.defineProperty(exports, "SamlLib", { enumerable: true, get: function () { return __importDefault(libsaml_js_1).default; } });
-// roadmap
-// new name convention in version >= 3.0
-const Constants = __importStar(require("./src/urn.js"));
-exports.Constants = Constants;
-const Extractor = __importStar(require("./src/extractor.js"));
-exports.Extractor = Extractor;
-// exposed methods for customizing samlify
-const api_js_1 = require("./src/api.js");
-Object.defineProperty(exports, "setSchemaValidator", { enumerable: true, get: function () { return api_js_1.setSchemaValidator; } });
-Object.defineProperty(exports, "setDOMParserOptions", { enumerable: true, get: function () { return api_js_1.setDOMParserOptions; } });
+// version <= 1.25
+import IdentityProvider, { IdentityProvider as IdentityProviderInstance } from './src/entity-idp.js';
+import ServiceProvider, { ServiceProvider as ServiceProviderInstance } from './src/entity-sp.js';
+export { default as IdPMetadata } from './src/metadata-idp.js';
+export { default as SPMetadata } from './src/metadata-sp.js';
+export { default as Utility } from './src/utility.js';
+export { default as SamlLib } from './src/libsaml.js';
+// roadmap
+// new name convention in version >= 3.0
+import * as Constants from './src/urn.js';
+import * as Extractor from './src/extractor.js';
+// exposed methods for customizing samlify
+import { setSchemaValidator, setDOMParserOptions } from './src/api.js';
+export { Constants, Extractor, 
+// temp: resolve the conflict after version >= 3.0
+IdentityProvider, IdentityProviderInstance, ServiceProvider, ServiceProviderInstance, 
+// set context
+setSchemaValidator, setDOMParserOptions };
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kBAAkB;AAClB,qEAAqG;AAmBnG,2BAnBK,uBAAgB,CAmBL;AAChB,yGApB6C,gCAAwB,OAoB7C;AAnB1B,mEAAiG;AAoB/F,0BApBK,sBAAe,CAoBL;AACf,wGArB2C,8BAAuB,OAqB3C;AAnBzB,yDAA+D;AAAtD,+HAAA,OAAO,OAAe;AAC/B,uDAA6D;AAApD,6HAAA,OAAO,OAAc;AAC9B,+CAAsD;AAA7C,sHAAA,OAAO,OAAW;AAC3B,+CAAsD;AAA7C,sHAAA,OAAO,OAAW;AAC3B,UAAU;AACV,wCAAwC;AACxC,wDAA0C;AAOxC,8BAAS;AANX,8DAAgD;AAO9C,8BAAS;AALX,0CAA0C;AAC1C,yCAAuE;AAWrE,mGAXO,2BAAkB,OAWP;AAClB,oGAZ2B,4BAAmB,OAY3B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,OAAO,gBAAgB,EAAE,EAAE,gBAAgB,IAAI,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,eAAe,EAAE,EAAE,eAAe,IAAI,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEjG,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACtD,UAAU;AACV,wCAAwC;AACxC,OAAO,KAAK,SAAS,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAEhD,0CAA0C;AAC1C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EACL,SAAS,EACT,SAAS;AACT,kDAAkD;AAClD,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,uBAAuB;AACvB,cAAc;AACd,kBAAkB,EAClB,mBAAmB,EACpB,CAAC"}

package/build/src/api.js

@@ -1,25 +1,19 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setDOMParserOptions = exports.setSchemaValidator = exports.getContext = void 0;
-const xmldom_1 = require("@xmldom/xmldom");
-const context = {
-    validate: undefined,
-    dom: new xmldom_1.DOMParser()
-};
-function getContext() {
-    return context;
-}
-exports.getContext = getContext;
-function setSchemaValidator(params) {
-    if (typeof params.validate !== 'function') {
-        throw new Error('validate must be a callback function having one argument as xml input');
-    }
-    // assign the validate function to the context
-    context.validate = params.validate;
-}
-exports.setSchemaValidator = setSchemaValidator;
-function setDOMParserOptions(options = {}) {
-    context.dom = new xmldom_1.DOMParser(options);
-}
-exports.setDOMParserOptions = setDOMParserOptions;
+import { DOMParser as dom } from '@xmldom/xmldom';
+const context = {
+    validate: undefined,
+    dom: new dom()
+};
+export function getContext() {
+    return context;
+}
+export function setSchemaValidator(params) {
+    if (typeof params.validate !== 'function') {
+        throw new Error('validate must be a callback function having one argument as xml input');
+    }
+    // assign the validate function to the context
+    context.validate = params.validate;
+}
+export function setDOMParserOptions(options = {}) {
+    context.dom = new dom(options);
+}
 //# sourceMappingURL=api.js.map

package/build/src/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":";;;AAAA,2CAA+E;AAa/E,MAAM,OAAO,GAAY;IACvB,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,IAAI,kBAAG,EAAE;CACf,CAAC;AAEF,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAFD,gCAEC;AAED,SAAgB,kBAAkB,CAAC,MAAwB;IAEzD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;KAC1F;IAED,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AAErC,CAAC;AATD,gDASC;AAED,SAAgB,mBAAmB,CAAC,UAA4B,EAAE;IAChE,OAAO,CAAC,GAAG,GAAG,IAAI,kBAAG,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAFD,kDAEC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAalD,MAAM,OAAO,GAAY;IACvB,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,IAAI,GAAG,EAAE;CACf,CAAC;AAEF,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IAEzD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AAErC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAA4B,EAAE;IAChE,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}