samlesa 2.13.0 → 2.14.1

package/src/binding-redirect.ts

@@ -1,356 +0,0 @@
-/**
- * @file binding-redirect.ts
- * @author tngan
- * @desc Binding-level API, declare the functions using Redirect binding
- */
-import utility, {get} from './utility.js';
-import libsaml from './libsaml.js';
-import {BindingContext} from './entity.js';
-import {IdentityProvider as Idp} from './entity-idp.js';
-import {ServiceProvider as Sp} from './entity-sp.js';
-
-import {wording, namespace} from './urn.js';
-
-const binding = wording.binding;
-const urlParams = wording.urlParams;
-
-export interface BuildRedirectConfig {
-  baseUrl: string;
-  type: string;
-  isSigned: boolean;
-  context: string;
-  entitySetting: any;
-  relayState?: string;
-}
-
-/**
- * @private
- * @desc Helper of generating URL param/value pair
- * @param  {string} param     key
- * @param  {string} value     value of key
- * @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'
- * @return {string}
- */
-function pvPair(param: string, value: string, first?: boolean): string {
-  return (first === true ? '?' : '&') + param + '=' + value;
-}
-
-/**
- * @private
- * @desc Refractored part of URL generation for login/logout request
- * @param  {string} type
- * @param  {boolean} isSigned
- * @param  {string} rawSamlRequest
- * @param  {object} entitySetting
- * @return {string}
- */
-function buildRedirectURL(opts: BuildRedirectConfig) {
-  const {
-    baseUrl,
-    type,
-    isSigned,
-    context,
-    entitySetting,
-  } = opts;
-  let {relayState = ''} = opts;
-  let noParams = true
-  try {
-    noParams = new URL(baseUrl)?.searchParams?.size === 0
-  } catch {
-    noParams = true
-  }
-
-  const queryParam = libsaml.getQueryParamByType(type);
-  // In general, this xmlstring is required to do deflate -> base64 -> urlencode
-  const samlRequest = encodeURIComponent(utility.base64Encode(utility.deflateString(context)));
-  if (relayState !== '') {
-    relayState = pvPair(urlParams.relayState, encodeURIComponent(relayState));
-  }
-  if (isSigned) {
-    const sigAlg = pvPair(urlParams.sigAlg, encodeURIComponent(entitySetting.requestSignatureAlgorithm));
-    const octetString = samlRequest + relayState + sigAlg;
-    return baseUrl
-      + pvPair(queryParam, octetString, noParams)
-      + pvPair(urlParams.signature, encodeURIComponent(
-          libsaml.constructMessageSignature(
-            queryParam + '=' + octetString,
-            entitySetting.privateKey,
-            entitySetting.privateKeyPass,
-            undefined,
-            entitySetting.requestSignatureAlgorithm
-          ).toString()
-        )
-      );
-  }
-  return baseUrl + pvPair(queryParam, samlRequest + relayState, noParams);
-}
-
-/**
- * @desc Redirect URL for login request
- * @param  {object} entity                       object includes both idp and sp
- * @param  {function} customTagReplacement      used when developers have their own login response template
- * @return {string} redirect URL
- */
-function loginRequestRedirectURL(entity: {
-  idp: Idp,
-  sp: Sp
-}, customTagReplacement?: (template: string) => BindingContext): BindingContext {
-
-  const metadata: any = {idp: entity.idp.entityMeta, sp: entity.sp.entityMeta};
-  const spSetting: any = entity.sp.entitySetting;
-  let id: string = '';
-
-  if (metadata && metadata.idp && metadata.sp) {
-    const base = metadata.idp.getSingleSignOnService(binding.redirect);
-    let rawSamlRequest: string;
-    if (spSetting.loginRequestTemplate && customTagReplacement) {
-      const info = customTagReplacement(spSetting.loginRequestTemplate);
-      id = get(info, 'id', null);
-      rawSamlRequest = get(info, 'context', null);
-    } else {
-      const nameIDFormat = spSetting.nameIDFormat;
-      const selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-      id = spSetting.generateID();
-      rawSamlRequest = libsaml.replaceTagsByValue(libsaml.defaultLoginRequestTemplate.context, {
-        ID: id,
-        Destination: base,
-        Issuer: metadata.sp.getEntityID(),
-        IssueInstant: new Date().toISOString(),
-        NameIDFormat: selectedNameIDFormat,
-        AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.post),
-        EntityID: metadata.sp.getEntityID(),
-        AllowCreate: spSetting.allowCreate,
-      } as any);
-    }
-    return {
-      id,
-      context: buildRedirectURL({
-        context: rawSamlRequest,
-        type: urlParams.samlRequest,
-        isSigned: metadata.sp.isAuthnRequestSigned(),
-        entitySetting: spSetting,
-        baseUrl: base,
-        relayState: spSetting.relayState,
-      }),
-    };
-  }
-  throw new Error('ERR_GENERATE_REDIRECT_LOGIN_REQUEST_MISSING_METADATA');
-}
-
-/**
- * @desc Redirect URL for login response
- * @param  {object} requestInfo             corresponding request, used to obtain the id
- * @param  {object} entity                      object includes both idp and sp
- * @param  {object} user                         current logged user (e.g. req.user)
- * @param  {String} relayState                the relaystate sent by sp corresponding request
- * @param  {function} customTagReplacement     used when developers have their own login response template
- * @param AttributeStatement
- */
-function loginResponseRedirectURL(requestInfo: any, entity: any, user: any = {}, relayState?: string, customTagReplacement?: (template: string) => BindingContext,AttributeStatement =[]): BindingContext {
-  const idpSetting = entity.idp.entitySetting;
-  const spSetting = entity.sp.entitySetting;
-  const metadata = {
-    idp: entity.idp.entityMeta,
-    sp: entity.sp.entityMeta,
-  };
-
-  let id: string = idpSetting.generateID();
-  if (metadata && metadata.idp && metadata.sp) {
-    const base = metadata.sp.getAssertionConsumerService(binding.redirect) ;
-    if(!base){
-      throw new Error('dont have a base url');
-    }
-    let rawSamlResponse: string;
-    //
-    const nameIDFormat = idpSetting.nameIDFormat;
-    const selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-    const nowTime = new Date();
-    // Five minutes later : nowtime  + 5 * 60 * 1000 (in milliseconds)
-    const fiveMinutesLaterTime = new Date(nowTime.getTime() + 300_000);
-    const now = nowTime.toISOString();
-    console.log(`现在是北京时间:${nowTime.toLocaleString()}`)
-    const sessionIndex = 'session'+idpSetting.generateID(); // 这个是当前系统的会话索引，用于单点注销
-    const tenHoursLaterTime = new Date(nowTime.getTime());
-    tenHoursLaterTime.setHours(tenHoursLaterTime.getHours() + 10);
-    const tenHoursLater = tenHoursLaterTime.toISOString();
-    const tvalue: any = {
-      ID: id,
-      AssertionID: idpSetting.generateID(),
-      Destination: base,
-      SubjectRecipient: base,
-      Issuer: metadata.idp.getEntityID(),
-      Audience: metadata.sp.getEntityID(),
-      EntityID: metadata.sp.getEntityID(),
-      IssueInstant: nowTime.toISOString(),
-      AssertionConsumerServiceURL: base,
-      StatusCode: namespace.statusCode.success,
-      // can be customized
-      ConditionsNotBefore: nowTime.toISOString(),
-      ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-      SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-      NameIDFormat: selectedNameIDFormat,
-      NameID: user.NameID || '',
-      InResponseTo: get(requestInfo, 'extract.request.id', ''),
-      AuthnStatement: `<saml:AuthnStatement AuthnInstant="${now}" SessionNotOnOrAfter="${tenHoursLater}" SessionIndex="${sessionIndex}"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement>`,
-      AttributeStatement: libsaml.attributeStatementBuilder(AttributeStatement),
-    };
-
-    if (idpSetting.loginResponseTemplate && customTagReplacement) {
-      const template = customTagReplacement(idpSetting.loginResponseTemplate.context);
-      id = get(template, 'id', null);
-      rawSamlResponse = get(template, 'context', null);
-    } else {
-
-      if (requestInfo !== null) {
-        tvalue.InResponseTo = requestInfo?.extract?.request?.id;
-      }
-      rawSamlResponse = libsaml.replaceTagsByValue(libsaml.defaultLoginResponseTemplate.context, tvalue);
-    }
-
-    const {privateKey, privateKeyPass, requestSignatureAlgorithm: signatureAlgorithm} = idpSetting;
-    const config = {
-      privateKey,
-      privateKeyPass,
-      signatureAlgorithm,
-      signingCert: metadata.idp.getX509Certificate('signing'),
-      isBase64Output: false,
-    };
-    // step: sign assertion ? -> encrypted ? -> sign message ?
-    if (metadata.sp.isWantAssertionsSigned()) {
-      rawSamlResponse = libsaml.constructSAMLSignature({
-        ...config,
-        rawSamlMessage: rawSamlResponse,
-        transformationAlgorithms: spSetting.transformationAlgorithms,
-        referenceTagXPath: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']",
-        signatureConfig: {
-          prefix: 'ds',
-          location: {
-            reference: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']",
-            action: 'after'
-          },
-        },
-      });
-    }
-
-    // Like in post binding, SAML response is always signed
-    return {
-      id,
-      context: buildRedirectURL({
-        baseUrl: base,
-        type: urlParams.samlResponse,
-        isSigned: true,
-        context: rawSamlResponse,
-        entitySetting: idpSetting,
-        relayState,
-      }),
-    };
-  }
-  throw new Error('ERR_GENERATE_REDIRECT_LOGIN_RESPONSE_MISSING_METADATA');
-}
-
-/**
- * @desc Redirect URL for logout request
- * @param  {object} user                        current logged user (e.g. req.user)
- * @param  {object} entity                      object includes both idp and sp
- * @param  {function} customTagReplacement     used when developers have their own login response template
- * @return {string} redirect URL
- */
-function logoutRequestRedirectURL(user, entity, relayState?: string, customTagReplacement?: (template: string, tags: object) => BindingContext): BindingContext {
-  const metadata = {init: entity.init.entityMeta, target: entity.target.entityMeta};
-  const initSetting = entity.init.entitySetting;
-  let id: string = initSetting.generateID();
-  const nameIDFormat = initSetting.nameIDFormat;
-  const selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-
-  if (metadata && metadata.init && metadata.target) {
-    const base = metadata.target.getSingleLogoutService(binding.redirect);
-    let rawSamlRequest: string = '';
-    const requiredTags = {
-      ID: id,
-      Destination: base,
-      EntityID: metadata.init.getEntityID(),
-      Issuer: metadata.init.getEntityID(),
-      IssueInstant: new Date().toISOString(),
-      NameIDFormat: selectedNameIDFormat,
-      NameID: user.NameID || '',
-      SessionIndex: user.sessionIndex,
-    };
-    if (initSetting.logoutRequestTemplate && customTagReplacement) {
-      const info = customTagReplacement(initSetting.logoutRequestTemplate, requiredTags);
-      id = get(info, 'id', null);
-      rawSamlRequest = get(info, 'context', null);
-    } else {
-      rawSamlRequest = libsaml.replaceTagsByValue(libsaml.defaultLogoutRequestTemplate.context, requiredTags as any);
-    }
-    return {
-      id,
-      context: buildRedirectURL({
-        context: rawSamlRequest,
-        relayState,
-        type: urlParams.logoutRequest,
-        isSigned: entity.target.entitySetting.wantLogoutRequestSigned,
-        entitySetting: initSetting,
-        baseUrl: base,
-      }),
-    };
-  }
-  throw new Error('ERR_GENERATE_REDIRECT_LOGOUT_REQUEST_MISSING_METADATA');
-}
-
-/**
- * @desc Redirect URL for logout response
- * @param  {object} requescorresponding request, used to obtain the id
- * @param  {object} entity                      object includes both idp and sp
- * @param  {function} customTagReplacement     used when developers have their own login response template
- */
-function logoutResponseRedirectURL(requestInfo: any, entity: any, relayState?: string, customTagReplacement?: (template: string) => BindingContext): BindingContext {
-  const metadata = {
-    init: entity.init.entityMeta,
-    target: entity.target.entityMeta,
-  };
-  const initSetting = entity.init.entitySetting;
-  let id: string = initSetting.generateID();
-  if (metadata && metadata.init && metadata.target) {
-    const base = metadata.target.getSingleLogoutService(binding.redirect);
-    let rawSamlResponse: string;
-    if (initSetting.logoutResponseTemplate && customTagReplacement) {
-      const template = customTagReplacement(initSetting.logoutResponseTemplate);
-      id = get(template, 'id', null);
-      rawSamlResponse = get(template, 'context', null);
-    } else {
-      const tvalue: any = {
-        ID: id,
-        Destination: base,
-        Issuer: metadata.init.getEntityID(),
-        EntityID: metadata.init.getEntityID(),
-        IssueInstant: new Date().toISOString(),
-        StatusCode: namespace.statusCode.success,
-      };
-      if (requestInfo && requestInfo.extract && requestInfo.extract.request) {
-        tvalue.InResponseTo = requestInfo?.extract?.request?.id;
-      }
-      rawSamlResponse = libsaml.replaceTagsByValue(libsaml.defaultLogoutResponseTemplate.context, tvalue);
-    }
-    return {
-      id,
-      context: buildRedirectURL({
-        baseUrl: base,
-        type: urlParams.logoutResponse,
-        isSigned: entity.target.entitySetting.wantLogoutResponseSigned,
-        context: rawSamlResponse,
-        entitySetting: initSetting,
-        relayState,
-      }),
-    };
-  }
-  throw new Error('ERR_GENERATE_REDIRECT_LOGOUT_RESPONSE_MISSING_METADATA');
-}
-
-const redirectBinding = {
-  loginRequestRedirectURL,
-  loginResponseRedirectURL,
-  logoutRequestRedirectURL,
-  logoutResponseRedirectURL,
-};
-
-export default redirectBinding;

package/src/binding-simplesign.ts

@@ -1,238 +0,0 @@
-/**
-* @file binding-simplesign.ts
-* @author Orange
-* @desc Binding-level API, declare the functions using POST SimpleSign binding
-*/
-
-import { wording, StatusCode } from './urn.js';
-import { BindingContext, SimpleSignComputedContext } from './entity.js';
-import libsaml from './libsaml.js';
-import utility, { get } from './utility.js';
-
-const binding = wording.binding;
-const urlParams = wording.urlParams;
-
-export interface BuildSimpleSignConfig {
-  type: string;
-  context: string;
-  entitySetting: any;
-  relayState?: string;
-}
-
-export interface BindingSimpleSignContext {
-  id: string;
-  context: string;
-  signature: any;
-  sigAlg: string;
-}
-
-/**
-* @private
-* @desc Helper of generating URL param/value pair
-* @param  {string} param     key
-* @param  {string} value     value of key
-* @param  {boolean} first    determine whether the param is the starting one in order to add query header '?'
-* @return {string}
-*/
-function pvPair(param: string, value: string, first?: boolean): string {
-  return (first === true ? '?' : '&') + param + '=' + value;
-}
-/**
-* @private
-* @desc Refactored part of simple signature generation for login/logout request
-* @param  {string} type
-* @param  {string} rawSamlRequest
-* @param  {object} entitySetting
-* @return {string}
-*/
-function buildSimpleSignature(opts: BuildSimpleSignConfig) : string {
-  const {
-    type,
-    context,
-    entitySetting,
-  } = opts;
-  let { relayState = '' } = opts;
-  const queryParam = libsaml.getQueryParamByType(type);
-
-  if (relayState !== '') {
-    relayState = pvPair(urlParams.relayState, relayState);
-  }
-
-  const sigAlg = pvPair(urlParams.sigAlg, entitySetting.requestSignatureAlgorithm);
-  const octetString = context + relayState + sigAlg;
-  return libsaml.constructMessageSignature(
-    queryParam + '=' + octetString,
-    entitySetting.privateKey,
-    entitySetting.privateKeyPass,
-    undefined,
-    entitySetting.requestSignatureAlgorithm
-  ).toString();
-}
-
-/**
-* @desc Generate a base64 encoded login request
-* @param  {string} referenceTagXPath           reference uri
-* @param  {object} entity                      object includes both idp and sp
-* @param  {function} customTagReplacement     used when developers have their own login response template
-*/
-function base64LoginRequest(entity: any, customTagReplacement?: (template: string) => BindingContext): SimpleSignComputedContext {
-  const metadata = { idp: entity.idp.entityMeta, sp: entity.sp.entityMeta };
-  const spSetting = entity.sp.entitySetting;
-  let id: string = '';
-
-  if (metadata && metadata.idp && metadata.sp) {
-    const base = metadata.idp.getSingleSignOnService(binding.simpleSign);
-    let rawSamlRequest: string;
-    if (spSetting.loginRequestTemplate && customTagReplacement) {
-      const info = customTagReplacement(spSetting.loginRequestTemplate.context);
-      id = get(info, 'id', null);
-      rawSamlRequest = get(info, 'context', null);
-    } else {
-      const nameIDFormat = spSetting.nameIDFormat;
-      const selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-      id = spSetting.generateID();
-      rawSamlRequest = libsaml.replaceTagsByValue(libsaml.defaultLoginRequestTemplate.context, {
-        ID: id,
-        Destination: base,
-        Issuer: metadata.sp.getEntityID(),
-        IssueInstant: new Date().toISOString(),
-        AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.simpleSign),
-        EntityID: metadata.sp.getEntityID(),
-        AllowCreate: spSetting.allowCreate,
-        NameIDFormat: selectedNameIDFormat
-      } as any);
-    }
-
-    let simpleSignatureContext : any = null;
-    if (metadata.idp.isWantAuthnRequestsSigned()) {
-        const simpleSignature = buildSimpleSignature({
-            type: urlParams.samlRequest,
-            context: rawSamlRequest,
-            entitySetting: spSetting,
-            relayState: spSetting.relayState,
-        });
-
-        simpleSignatureContext = {
-          signature: simpleSignature,
-          sigAlg: spSetting.requestSignatureAlgorithm,
-        };
-    }
-    // No need to embeded XML signature
-    return {
-      id,
-      context: utility.base64Encode(rawSamlRequest),
-      ...simpleSignatureContext,
-    };
-  }
-  throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_REQUEST_MISSING_METADATA');
-}
-/**
- * @desc Generate a base64 encoded login response
- * @param  {object} requestInfo                 corresponding request, used to obtain the id
- * @param  {object} entity                      object includes both idp and sp
- * @param  {object} user                        current logged user (e.g. req.user)
- * @param  {string}  relayState               the relay state
- * @param  {function} customTagReplacement     used when developers have their own login response template
- * @param AttributeStatement
- */
-async function base64LoginResponse(requestInfo: any = {}, entity: any, user: any = {}, relayState?: string, customTagReplacement?: (template: string) => BindingContext, AttributeStatement:[] = []): Promise<BindingSimpleSignContext> {
-  const idpSetting = entity.idp.entitySetting;
-  const spSetting = entity.sp.entitySetting;
-  const id = idpSetting.generateID();
-  const metadata = {
-    idp: entity.idp.entityMeta,
-    sp: entity.sp.entityMeta,
-  };
-  const nameIDFormat = idpSetting.nameIDFormat;
-  const selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-  if (metadata && metadata.idp && metadata.sp) {
-    const base = metadata.sp.getAssertionConsumerService(binding.simpleSign);
-    let rawSamlResponse: string;
-    const nowTime = new Date();
-    // Five minutes later : nowtime  + 5 * 60 * 1000 (in milliseconds)
-    const fiveMinutesLaterTime = new Date(nowTime.getTime() + 300_000 );
-    const now = nowTime.toISOString();
-    console.log(`现在是北京时间:${nowTime.toLocaleString()}`)
-    const sessionIndex = 'session'+idpSetting.generateID(); // 这个是当前系统的会话索引，用于单点注销
-    const tenHoursLaterTime = new Date(nowTime.getTime());
-    tenHoursLaterTime.setHours(tenHoursLaterTime.getHours() + 10);
-    const tenHoursLater = tenHoursLaterTime.toISOString();
-    const tvalue: any = {
-      ID: id,
-      AssertionID: idpSetting.generateID(),
-      Destination: base,
-      Audience: metadata.sp.getEntityID(),
-      EntityID: metadata.sp.getEntityID(),
-      SubjectRecipient: base,
-      Issuer: metadata.idp.getEntityID(),
-      IssueInstant: nowTime.toISOString(),
-      AssertionConsumerServiceURL: base,
-      StatusCode: StatusCode.Success,
-      // can be customized
-      ConditionsNotBefore: nowTime.toISOString(),
-      ConditionsNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-      SubjectConfirmationDataNotOnOrAfter: fiveMinutesLaterTime.toISOString(),
-      NameIDFormat: selectedNameIDFormat,
-      NameID: user.NameID || '',
-      InResponseTo: get(requestInfo, 'extract.request.id', ''),
-      AuthnStatement: `<saml:AuthnStatement AuthnInstant="${now}" SessionNotOnOrAfter="${tenHoursLater}" SessionIndex="${sessionIndex}"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement>`,
-      AttributeStatement: libsaml.attributeStatementBuilder(AttributeStatement),
-    };
-    if (idpSetting.loginResponseTemplate && customTagReplacement) {
-      const template = customTagReplacement(idpSetting.loginResponseTemplate.context);
-      rawSamlResponse = get(template, 'context', null);
-    } else {
-      if (requestInfo !== null) {
-        tvalue.InResponseTo = requestInfo?.extract?.request?.id;
-      }
-      rawSamlResponse = libsaml.replaceTagsByValue(libsaml.defaultLoginResponseTemplate.context, tvalue);
-    }
-    const { privateKey, privateKeyPass, requestSignatureAlgorithm: signatureAlgorithm } = idpSetting;
-    const config = {
-      privateKey,
-      privateKeyPass,
-      signatureAlgorithm,
-      signingCert: metadata.idp.getX509Certificate('signing'),
-      isBase64Output: false,
-    };
-    // step: sign assertion ? -> encrypted ? -> sign message ?
-    if (metadata.sp.isWantAssertionsSigned()) {
-      rawSamlResponse = libsaml.constructSAMLSignature({
-        ...config,
-        rawSamlMessage: rawSamlResponse,
-        transformationAlgorithms: spSetting.transformationAlgorithms,
-        referenceTagXPath: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']",
-        signatureConfig: {
-          prefix: 'ds',
-          location: { reference: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']", action: 'after' },
-        },
-      });
-    }
-
-    // SAML response must be signed sign message first, then encrypt
-    let simpleSignature: string = '';
-    // like in post and redirect bindings, login response is always signed.
-    simpleSignature = buildSimpleSignature({
-        type: urlParams.samlResponse,
-        context: rawSamlResponse,
-        entitySetting: idpSetting,
-        relayState: relayState,
-    } );
-
-    return Promise.resolve({
-      id,
-      context: utility.base64Encode(rawSamlResponse),
-      signature: simpleSignature,
-      sigAlg: idpSetting.requestSignatureAlgorithm,
-    });
-
-  }
-  throw new Error('ERR_GENERATE_POST_SIMPLESIGN_LOGIN_RESPONSE_MISSING_METADATA');
-}
-
-const simpleSignBinding = {
-    base64LoginRequest,
-    base64LoginResponse,
-  };
-
-export default simpleSignBinding;