samlesa 2.14.8 → 2.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +8 -7
  2. package/build/src/schema/saml-schema-assertion-2.0.xsd +2 -3
  3. package/build/src/schemaValidator.js +7 -1
  4. package/package.json +1 -1
  5. package/types/src/schemaValidator.d.ts.map +1 -1
  6. package/build/src/schema/saml-schema-authn-context-2.0.xsd +0 -23
  7. package/build/src/schema/saml-schema-authn-context-auth-telephony-2.0.xsd +0 -81
  8. package/build/src/schema/saml-schema-authn-context-ip-2.0.xsd +0 -65
  9. package/build/src/schema/saml-schema-authn-context-ippword-2.0.xsd +0 -67
  10. package/build/src/schema/saml-schema-authn-context-kerberos-2.0.xsd +0 -83
  11. package/build/src/schema/saml-schema-authn-context-mobileonefactor-reg-2.0.xsd +0 -186
  12. package/build/src/schema/saml-schema-authn-context-mobileonefactor-unreg-2.0.xsd +0 -183
  13. package/build/src/schema/saml-schema-authn-context-mobiletwofactor-reg-2.0.xsd +0 -202
  14. package/build/src/schema/saml-schema-authn-context-mobiletwofactor-unreg-2.0.xsd +0 -200
  15. package/build/src/schema/saml-schema-authn-context-nomad-telephony-2.0.xsd +0 -81
  16. package/build/src/schema/saml-schema-authn-context-personal-telephony-2.0.xsd +0 -80
  17. package/build/src/schema/saml-schema-authn-context-pgp-2.0.xsd +0 -83
  18. package/build/src/schema/saml-schema-authn-context-ppt-2.0.xsd +0 -81
  19. package/build/src/schema/saml-schema-authn-context-pword-2.0.xsd +0 -64
  20. package/build/src/schema/saml-schema-authn-context-session-2.0.xsd +0 -64
  21. package/build/src/schema/saml-schema-authn-context-smartcard-2.0.xsd +0 -64
  22. package/build/src/schema/saml-schema-authn-context-smartcardpki-2.0.xsd +0 -129
  23. package/build/src/schema/saml-schema-authn-context-softwarepki-2.0.xsd +0 -129
  24. package/build/src/schema/saml-schema-authn-context-spki-2.0.xsd +0 -83
  25. package/build/src/schema/saml-schema-authn-context-srp-2.0.xsd +0 -82
  26. package/build/src/schema/saml-schema-authn-context-sslcert-2.0.xsd +0 -97
  27. package/build/src/schema/saml-schema-authn-context-telephony-2.0.xsd +0 -79
  28. package/build/src/schema/saml-schema-authn-context-timesync-2.0.xsd +0 -105
  29. package/build/src/schema/saml-schema-authn-context-types-2.0.xsd +0 -821
  30. package/build/src/schema/saml-schema-authn-context-x509-2.0.xsd +0 -83
  31. package/build/src/schema/saml-schema-authn-context-xmldsig-2.0.xsd +0 -83
  32. package/build/src/schema/saml-schema-x500-2.0.xsd +0 -20
  33. package/build/src/schema/saml-schema-xacml-2.0.xsd +0 -19
package/README.md CHANGED
@@ -41,7 +41,7 @@ Welcome contributions or integration examples with frameworks
41
41
  ---
42
42
 
43
43
  ## 安装 / Installation
44
- 宁应该在使用的前提下首先设置验证其
44
+ 您应该在使用的前提下首先设置验证其
45
45
  ```js
46
46
 
47
47
  import * as validator from '@authenio/samlify-xsd-schema-validator';
@@ -81,7 +81,7 @@ if (request.method === 'POST') {
81
81
  infoQuery.body = request.body
82
82
  dataResult = Extractor.extract(Base64.decode(decodeURIComponent(data.SAMLResponse)), loginResponseFields)
83
83
  }
84
- /** 宁应该自行实施根据响应提取出来的Issur去数据库查找元数据*/
84
+ /** 您应该自行实施根据响应提取出来的Issur去数据库查找元数据*/
85
85
  // 1. 提取SAML发行者信息
86
86
  if (!dataResult.issuer) {
87
87
  return reply.view('errorHtml.html', {
@@ -106,9 +106,11 @@ if(upaboveFieldCheckAllSuccess){
106
106
  return repla.view('success.ejs',{...your template data})
107
107
  }
108
108
  /*success.ejs template example */
109
- /**/
110
- <!-- 隐藏的 SAML 表单 -->
111
- /*
109
+
110
+ ```
111
+
112
+ ```html
113
+ <!-- 实例用于提交post 请求隐藏的表单 -->
112
114
  <form id="saml-form" method="post" action="<%= entityEndpoint %>" style="display: none;">
113
115
  <input type="hidden" name="<%= type %>" value="<%= context %>" />
114
116
  <input type="hidden" name="RelayState" value="<%= relayState %>" />
@@ -124,6 +126,5 @@ if(upaboveFieldCheckAllSuccess){
124
126
  document.querySelector('.loading-subtext').textContent =
125
127
  '跳转时间较长，请检查网络或联系系统管理员';
126
128
  }, 1500);
127
- </script>*/
128
-
129
+ </script>
129
130
  ```
package/build/src/schema/saml-schema-assertion-2.0.xsd CHANGED
@@ -1,4 +1,3 @@
1
- <?xml version="1.0" encoding="US-ASCII"?>
2
1
  <schema
3
2
  targetNamespace="urn:oasis:names:tc:SAML:2.0:assertion"
4
3
  xmlns="http://www.w3.org/2001/XMLSchema"
@@ -10,9 +9,9 @@
10
9
  blockDefault="substitution"
11
10
  version="2.0">
12
11
  <import namespace="http://www.w3.org/2000/09/xmldsig#"
13
- schemaLocation="http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd"/>
12
+ schemaLocation="xmldsig-core-schema.xsd"/>
14
13
  <import namespace="http://www.w3.org/2001/04/xmlenc#"
15
- schemaLocation="http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/xenc-schema.xsd"/>
14
+ schemaLocation="xenc-schema.xsd"/>
16
15
  <annotation>
17
16
  <documentation>
18
17
  Document identifier: saml-schema-assertion-2.0
package/build/src/schemaValidator.js CHANGED
@@ -1,13 +1,19 @@
1
1
  import { validateXML } from 'xmllint-wasm';
2
2
  import * as fs from 'node:fs';
3
3
  import * as path from 'node:path';
4
+ import { fileURLToPath } from 'node:url';
5
+ const __filename = fileURLToPath(import.meta.url);
6
+ const __dirname = path.dirname(__filename);
4
7
  const schemas = [
5
8
  'saml-schema-protocol-2.0.xsd',
6
9
  'datatypes.dtd',
7
10
  'saml-schema-assertion-2.0.xsd',
8
11
  'xmldsig-core-schema.xsd',
9
12
  'XMLSchema.dtd',
10
- 'xenc-schema.xsd'
13
+ 'xenc-schema.xsd',
14
+ 'saml-schema-metadata-2.0.xsd',
15
+ 'saml-schema-ecp-2.0.xsd',
16
+ 'saml-schema-dce-2.0.xsd'
11
17
  ];
12
18
  export const validate = async (xml) => {
13
19
  const schemaPath = path.resolve(__dirname, 'schema');
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "samlesa",
3
- "version": "2.14.8",
3
+ "version": "2.15.0",
4
4
  "description": "High-level API for Single Sign On (SAML 2.0) baseed on samlify ",
5
5
  "main": "build/index.js",
6
6
  "keywords": [
package/types/src/schemaValidator.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/schemaValidator.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,QAAQ,GAAU,KAAK,MAAM,qBAmCzC,CAAC"}
1
+ {"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/schemaValidator.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,QAAQ,GAAU,KAAK,MAAM,qBAkCzC,CAAC"}
package/build/src/schema/saml-schema-authn-context-2.0.xsd DELETED
@@ -1,23 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
- <xs:schema
3
- targetNamespace="urn:oasis:names:tc:SAML:2.0:ac"
4
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
5
- xmlns="urn:oasis:names:tc:SAML:2.0:ac"
6
- blockDefault="substitution"
7
- version="2.0">
8
-
9
- <xs:annotation>
10
- <xs:documentation>
11
- Document identifier: saml-schema-authn-context-2.0
12
- Location: http://docs.oasis-open.org/security/saml/v2.0/
13
- Revision history:
14
- V2.0 (March, 2005):
15
- New core authentication context schema for SAML V2.0.
16
- This is just an include of all types from the schema
17
- referred to in the include statement below.
18
- </xs:documentation>
19
- </xs:annotation>
20
-
21
- <xs:include schemaLocation="saml-schema-authn-context-types-2.0.xsd"/>
22
-
23
- </xs:schema>
package/build/src/schema/saml-schema-authn-context-auth-telephony-2.0.xsd DELETED
@@ -1,81 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
-
3
- <xs:schema targetNamespace="urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony"
4
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
5
- xmlns="urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony"
6
- finalDefault="extension"
7
- blockDefault="substitution"
8
- version="2.0">
9
-
10
- <xs:redefine schemaLocation="saml-schema-authn-context-types-2.0.xsd">
11
-
12
- <xs:annotation>
13
- <xs:documentation>
14
- Class identifier: urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony
15
- Document identifier: saml-schema-authn-context-auth-telephony-2.0
16
- Location: http://docs.oasis-open.org/security/saml/v2.0/
17
- Revision history:
18
- V2.0 (March, 2005):
19
- New authentication context class schema for SAML V2.0.
20
- </xs:documentation>
21
- </xs:annotation>
22
-
23
- <xs:complexType name="AuthnContextDeclarationBaseType">
24
- <xs:complexContent>
25
- <xs:restriction base="AuthnContextDeclarationBaseType">
26
- <xs:sequence>
27
- <xs:element ref="Identification" minOccurs="0"/>
28
- <xs:element ref="TechnicalProtection" minOccurs="0"/>
29
- <xs:element ref="OperationalProtection" minOccurs="0"/>
30
- <xs:element ref="AuthnMethod"/>
31
- <xs:element ref="GoverningAgreements" minOccurs="0"/>
32
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
33
- </xs:sequence>
34
- <xs:attribute name="ID" type="xs:ID" use="optional"/>
35
- </xs:restriction>
36
- </xs:complexContent>
37
- </xs:complexType>
38
-
39
- <xs:complexType name="AuthnMethodBaseType">
40
- <xs:complexContent>
41
- <xs:restriction base="AuthnMethodBaseType">
42
- <xs:sequence>
43
- <xs:element ref="PrincipalAuthenticationMechanism" minOccurs="0"/>
44
- <xs:element ref="Authenticator"/>
45
- <xs:element ref="AuthenticatorTransportProtocol"/>
46
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
47
- </xs:sequence>
48
- </xs:restriction>
49
- </xs:complexContent>
50
- </xs:complexType>
51
-
52
- <xs:complexType name="AuthenticatorBaseType">
53
- <xs:complexContent>
54
- <xs:restriction base="AuthenticatorBaseType">
55
- <xs:sequence>
56
- <xs:element ref="Password"/>
57
- <xs:element ref="SubscriberLineNumber"/>
58
- <xs:element ref="UserSuffix"/>
59
- </xs:sequence>
60
- </xs:restriction>
61
- </xs:complexContent>
62
- </xs:complexType>
63
-
64
- <xs:complexType name="AuthenticatorTransportProtocolType">
65
- <xs:complexContent>
66
- <xs:restriction base="AuthenticatorTransportProtocolType">
67
- <xs:sequence>
68
- <xs:choice>
69
- <xs:element ref="PSTN"/>
70
- <xs:element ref="ISDN"/>
71
- <xs:element ref="ADSL"/>
72
- </xs:choice>
73
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
74
- </xs:sequence>
75
- </xs:restriction>
76
- </xs:complexContent>
77
- </xs:complexType>
78
-
79
- </xs:redefine>
80
-
81
- </xs:schema>
package/build/src/schema/saml-schema-authn-context-ip-2.0.xsd DELETED
@@ -1,65 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
-
3
- <xs:schema
4
- targetNamespace="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol"
5
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
6
- xmlns="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol"
7
- finalDefault="extension"
8
- blockDefault="substitution"
9
- version="2.0">
10
-
11
- <xs:redefine schemaLocation="saml-schema-authn-context-types-2.0.xsd">
12
-
13
- <xs:annotation>
14
- <xs:documentation>
15
- Class identifier: urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol
16
- Document identifier: saml-schema-authn-context-ip-2.0
17
- Location: http://docs.oasis-open.org/security/saml/v2.0/
18
- Revision history:
19
- V2.0 (March, 2005):
20
- New authentication context class schema for SAML V2.0.
21
- </xs:documentation>
22
- </xs:annotation>
23
-
24
- <xs:complexType name="AuthnContextDeclarationBaseType">
25
- <xs:complexContent>
26
- <xs:restriction base="AuthnContextDeclarationBaseType">
27
- <xs:sequence>
28
- <xs:element ref="Identification" minOccurs="0"/>
29
- <xs:element ref="TechnicalProtection" minOccurs="0"/>
30
- <xs:element ref="OperationalProtection" minOccurs="0"/>
31
- <xs:element ref="AuthnMethod"/>
32
- <xs:element ref="GoverningAgreements" minOccurs="0"/>
33
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
34
- </xs:sequence>
35
- <xs:attribute name="ID" type="xs:ID" use="optional"/>
36
- </xs:restriction>
37
- </xs:complexContent>
38
- </xs:complexType>
39
-
40
- <xs:complexType name="AuthnMethodBaseType">
41
- <xs:complexContent>
42
- <xs:restriction base="AuthnMethodBaseType">
43
- <xs:sequence>
44
- <xs:element ref="PrincipalAuthenticationMechanism" minOccurs="0"/>
45
- <xs:element ref="Authenticator"/>
46
- <xs:element ref="AuthenticatorTransportProtocol" minOccurs="0"/>
47
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
48
- </xs:sequence>
49
- </xs:restriction>
50
- </xs:complexContent>
51
- </xs:complexType>
52
-
53
- <xs:complexType name="AuthenticatorBaseType">
54
- <xs:complexContent>
55
- <xs:restriction base="AuthenticatorBaseType">
56
- <xs:sequence>
57
- <xs:element ref="IPAddress"/>
58
- </xs:sequence>
59
- </xs:restriction>
60
- </xs:complexContent>
61
- </xs:complexType>
62
-
63
- </xs:redefine>
64
-
65
- </xs:schema>
package/build/src/schema/saml-schema-authn-context-ippword-2.0.xsd DELETED
@@ -1,67 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
-
3
- <xs:schema targetNamespace="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"
4
- xmlns:ac="urn:oasis:names:tc:SAML:2.0:ac"
5
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
6
- xmlns="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"
7
- finalDefault="extension"
8
- blockDefault="substitution"
9
- version="2.0">
10
-
11
- <xs:redefine schemaLocation="saml-schema-authn-context-types-2.0.xsd">
12
-
13
- <xs:annotation>
14
- <xs:documentation>
15
- Class identifier: urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword
16
- Document identifier: saml-schema-authn-context-ippword-2.0
17
- Location: http://docs.oasis-open.org/security/saml/v2.0/
18
- Revision history:
19
- V2.0 (March, 2005):
20
- New authentication context class schema for SAML V2.0.
21
- </xs:documentation>
22
- </xs:annotation>
23
-
24
- <xs:complexType name="AuthnContextDeclarationBaseType">
25
- <xs:complexContent>
26
- <xs:restriction base="AuthnContextDeclarationBaseType">
27
- <xs:sequence>
28
- <xs:element ref="Identification" minOccurs="0"/>
29
- <xs:element ref="TechnicalProtection" minOccurs="0"/>
30
- <xs:element ref="OperationalProtection" minOccurs="0"/>
31
- <xs:element ref="AuthnMethod"/>
32
- <xs:element ref="GoverningAgreements" minOccurs="0"/>
33
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
34
- </xs:sequence>
35
- <xs:attribute name="ID" type="xs:ID" use="optional"/>
36
- </xs:restriction>
37
- </xs:complexContent>
38
- </xs:complexType>
39
-
40
- <xs:complexType name="AuthnMethodBaseType">
41
- <xs:complexContent>
42
- <xs:restriction base="AuthnMethodBaseType">
43
- <xs:sequence>
44
- <xs:element ref="PrincipalAuthenticationMechanism" minOccurs="0"/>
45
- <xs:element ref="Authenticator"/>
46
- <xs:element ref="AuthenticatorTransportProtocol" minOccurs="0"/>
47
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
48
- </xs:sequence>
49
- </xs:restriction>
50
- </xs:complexContent>
51
- </xs:complexType>
52
-
53
- <xs:complexType name="AuthenticatorBaseType">
54
- <xs:complexContent>
55
- <xs:restriction base="AuthenticatorBaseType">
56
- <xs:sequence>
57
- <xs:element ref="Password"/>
58
- <xs:element ref="IPAddress"/>
59
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
60
- </xs:sequence>
61
- </xs:restriction>
62
- </xs:complexContent>
63
- </xs:complexType>
64
-
65
- </xs:redefine>
66
-
67
- </xs:schema>
package/build/src/schema/saml-schema-authn-context-kerberos-2.0.xsd DELETED
@@ -1,83 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
-
3
- <xs:schema targetNamespace="urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos"
4
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
5
- xmlns="urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos"
6
- finalDefault="extension"
7
- blockDefault="substitution"
8
- version="2.0">
9
-
10
- <xs:redefine schemaLocation="saml-schema-authn-context-types-2.0.xsd">
11
-
12
- <xs:annotation>
13
- <xs:documentation>
14
- Class identifier: urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos
15
- Document identifier: saml-schema-authn-context-kerberos-2.0
16
- Location: http://docs.oasis-open.org/security/saml/v2.0/
17
- Revision history:
18
- V2.0 (March, 2005):
19
- New authentication context class schema for SAML V2.0.
20
- </xs:documentation>
21
- </xs:annotation>
22
-
23
- <xs:complexType name="AuthnContextDeclarationBaseType">
24
- <xs:complexContent>
25
- <xs:restriction base="AuthnContextDeclarationBaseType">
26
- <xs:sequence>
27
- <xs:element ref="Identification" minOccurs="0"/>
28
- <xs:element ref="TechnicalProtection" minOccurs="0"/>
29
- <xs:element ref="OperationalProtection" minOccurs="0"/>
30
- <xs:element ref="AuthnMethod"/>
31
- <xs:element ref="GoverningAgreements" minOccurs="0"/>
32
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
33
- </xs:sequence>
34
- <xs:attribute name="ID" type="xs:ID" use="optional"/>
35
- </xs:restriction>
36
- </xs:complexContent>
37
- </xs:complexType>
38
-
39
- <xs:complexType name="AuthnMethodBaseType">
40
- <xs:complexContent>
41
- <xs:restriction base="AuthnMethodBaseType">
42
- <xs:sequence>
43
- <xs:element ref="PrincipalAuthenticationMechanism"/>
44
- <xs:element ref="Authenticator"/>
45
- <xs:element ref="AuthenticatorTransportProtocol" minOccurs="0"/>
46
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
47
- </xs:sequence>
48
- </xs:restriction>
49
- </xs:complexContent>
50
- </xs:complexType>
51
-
52
- <xs:complexType name="PrincipalAuthenticationMechanismType">
53
- <xs:complexContent>
54
- <xs:restriction base="PrincipalAuthenticationMechanismType">
55
- <xs:sequence>
56
- <xs:element ref="RestrictedPassword"/>
57
- </xs:sequence>
58
- <xs:attribute name="preauth" type="xs:integer" use="optional"/>
59
- </xs:restriction>
60
- </xs:complexContent>
61
- </xs:complexType>
62
-
63
- <xs:complexType name="AuthenticatorBaseType">
64
- <xs:complexContent>
65
- <xs:restriction base="AuthenticatorBaseType">
66
- <xs:sequence>
67
- <xs:element ref="SharedSecretChallengeResponse"/>
68
- </xs:sequence>
69
- </xs:restriction>
70
- </xs:complexContent>
71
- </xs:complexType>
72
-
73
- <xs:complexType name="SharedSecretChallengeResponseType">
74
- <xs:complexContent>
75
- <xs:restriction base="SharedSecretChallengeResponseType">
76
- <xs:attribute name="method" type="xs:anyURI" fixed="urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos"/>
77
- </xs:restriction>
78
- </xs:complexContent>
79
- </xs:complexType>
80
-
81
- </xs:redefine>
82
-
83
- </xs:schema>
package/build/src/schema/saml-schema-authn-context-mobileonefactor-reg-2.0.xsd DELETED
@@ -1,186 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
-
3
- <xs:schema targetNamespace="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract"
4
- xmlns:xs="http://www.w3.org/2001/XMLSchema"
5
- xmlns="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract"
6
- finalDefault="extension"
7
- blockDefault="substitution"
8
- version="2.0">
9
-
10
- <xs:redefine schemaLocation="saml-schema-authn-context-types-2.0.xsd">
11
-
12
- <xs:annotation>
13
- <xs:documentation>
14
- Class identifier: urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract
15
- Document identifier: saml-schema-authn-context-mobileonefactor-reg-2.0
16
- Location: http://docs.oasis-open.org/security/saml/v2.0/
17
- Revision history:
18
- V2.0 (March, 2005):
19
- New authentication context class schema for SAML V2.0.
20
- </xs:documentation>
21
- </xs:annotation>
22
-
23
- <xs:complexType name="AuthnContextDeclarationBaseType">
24
- <xs:complexContent>
25
- <xs:restriction base="AuthnContextDeclarationBaseType">
26
- <xs:sequence>
27
- <xs:element ref="Identification" minOccurs="0"/>
28
- <xs:element ref="TechnicalProtection" minOccurs="0"/>
29
- <xs:element ref="OperationalProtection" minOccurs="0"/>
30
- <xs:element ref="AuthnMethod"/>
31
- <xs:element ref="GoverningAgreements" minOccurs="0"/>
32
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
33
- </xs:sequence>
34
- <xs:attribute name="ID" type="xs:ID" use="optional"/>
35
- </xs:restriction>
36
- </xs:complexContent>
37
- </xs:complexType>
38
-
39
- <xs:complexType name="AuthnMethodBaseType">
40
- <xs:complexContent>
41
- <xs:restriction base="AuthnMethodBaseType">
42
- <xs:sequence>
43
- <xs:element ref="PrincipalAuthenticationMechanism" minOccurs="0"/>
44
- <xs:element ref="Authenticator"/>
45
- <xs:element ref="AuthenticatorTransportProtocol" minOccurs="0"/>
46
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
47
- </xs:sequence>
48
- </xs:restriction>
49
- </xs:complexContent>
50
- </xs:complexType>
51
-
52
- <xs:complexType name="AuthenticatorBaseType">
53
- <xs:complexContent>
54
- <xs:restriction base="AuthenticatorBaseType">
55
- <xs:sequence>
56
- <xs:choice>
57
- <xs:element ref="DigSig"/>
58
- <xs:element ref="ZeroKnowledge"/>
59
- <xs:element ref="SharedSecretChallengeResponse"/>
60
- <xs:element ref="SharedSecretDynamicPlaintext"/>
61
- <xs:element ref="AsymmetricDecryption"/>
62
- <xs:element ref="AsymmetricKeyAgreement"/>
63
- </xs:choice>
64
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
65
- </xs:sequence>
66
- </xs:restriction>
67
- </xs:complexContent>
68
- </xs:complexType>
69
-
70
- <xs:complexType name="AuthenticatorTransportProtocolType">
71
- <xs:complexContent>
72
- <xs:restriction base="AuthenticatorTransportProtocolType">
73
- <xs:sequence>
74
- <xs:choice>
75
- <xs:element ref="SSL"/>
76
- <xs:element ref="MobileNetworkNoEncryption"/>
77
- <xs:element ref="MobileNetworkRadioEncryption"/>
78
- <xs:element ref="MobileNetworkEndToEndEncryption"/>
79
- <xs:element ref="WTLS"/>
80
- </xs:choice>
81
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
82
- </xs:sequence>
83
- </xs:restriction>
84
- </xs:complexContent>
85
- </xs:complexType>
86
-
87
- <xs:complexType name="OperationalProtectionType">
88
- <xs:complexContent>
89
- <xs:restriction base="OperationalProtectionType">
90
- <xs:sequence>
91
- <xs:element ref="SecurityAudit"/>
92
- <xs:element ref="DeactivationCallCenter"/>
93
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
94
- </xs:sequence>
95
- </xs:restriction>
96
- </xs:complexContent>
97
- </xs:complexType>
98
-
99
- <xs:complexType name="TechnicalProtectionBaseType">
100
- <xs:complexContent>
101
- <xs:restriction base="TechnicalProtectionBaseType">
102
- <xs:sequence>
103
- <xs:choice>
104
- <xs:element ref="PrivateKeyProtection"/>
105
- <xs:element ref="SecretKeyProtection"/>
106
- </xs:choice>
107
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
108
- </xs:sequence>
109
- </xs:restriction>
110
- </xs:complexContent>
111
- </xs:complexType>
112
-
113
- <xs:complexType name="PrivateKeyProtectionType">
114
- <xs:complexContent>
115
- <xs:restriction base="PrivateKeyProtectionType">
116
- <xs:sequence>
117
- <xs:element ref="KeyStorage"/>
118
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
119
- </xs:sequence>
120
- </xs:restriction>
121
- </xs:complexContent>
122
- </xs:complexType>
123
-
124
- <xs:complexType name="SecretKeyProtectionType">
125
- <xs:complexContent>
126
- <xs:restriction base="SecretKeyProtectionType">
127
- <xs:sequence>
128
- <xs:element ref="KeyStorage"/>
129
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
130
- </xs:sequence>
131
- </xs:restriction>
132
- </xs:complexContent>
133
- </xs:complexType>
134
-
135
- <xs:complexType name="KeyStorageType">
136
- <xs:complexContent>
137
- <xs:restriction base="KeyStorageType">
138
- <xs:attribute name="medium" use="required">
139
- <xs:simpleType>
140
- <xs:restriction base="mediumType">
141
- <xs:enumeration value="smartcard"/>
142
- <xs:enumeration value="MobileDevice"/>
143
- <xs:enumeration value="MobileAuthCard"/>
144
- </xs:restriction>
145
- </xs:simpleType>
146
- </xs:attribute>
147
- </xs:restriction>
148
- </xs:complexContent>
149
- </xs:complexType>
150
-
151
- <xs:complexType name="SecurityAuditType">
152
- <xs:complexContent>
153
- <xs:restriction base="SecurityAuditType">
154
- <xs:sequence>
155
- <xs:element ref="SwitchAudit"/>
156
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
157
- </xs:sequence>
158
- </xs:restriction>
159
- </xs:complexContent>
160
- </xs:complexType>
161
-
162
- <xs:complexType name="IdentificationType">
163
- <xs:complexContent>
164
- <xs:restriction base="IdentificationType">
165
- <xs:sequence>
166
- <xs:element ref="PhysicalVerification"/>
167
- <xs:element ref="WrittenConsent"/>
168
- <xs:element ref="GoverningAgreements"/>
169
- <xs:element ref="Extension" minOccurs="0" maxOccurs="unbounded"/>
170
- </xs:sequence>
171
- <xs:attribute name="nym">
172
- <xs:simpleType>
173
- <xs:restriction base="nymType">
174
- <xs:enumeration value="anonymity"/>
175
- <xs:enumeration value="verinymity"/>
176
- <xs:enumeration value="pseudonymity"/>
177
- </xs:restriction>
178
- </xs:simpleType>
179
- </xs:attribute>
180
- </xs:restriction>
181
- </xs:complexContent>
182
- </xs:complexType>
183
-
184
- </xs:redefine>
185
-
186
- </xs:schema>