samlesa 3.4.0 → 3.4.2

package/build/src/extractor.js

@@ -2,6 +2,13 @@ import { select } from 'xpath';
 import { uniq, last, zipObject, notEmpty } from './utility.js'; // 假设这些工具函数存在
 import { getContext } from './api.js'; // 假设这个API存在
 import camelCase from 'camelcase';
+function toNodeArray(result) {
+    if (Array.isArray(result))
+        return result;
+    if (result != null && typeof result === 'object' && 'nodeType' in result)
+        return [result];
+    return [];
+}
 function buildAbsoluteXPath(paths) {
     if (!paths || paths.length === 0)
         return '';
@@ -693,7 +700,7 @@ export function extract(context, fields) {
             }
             try {
                 // @ts-ignore
-                const nodes = select(fullXPath, targetDoc);
+                const nodes = toNodeArray(select(fullXPath, targetDoc));
                 if (isKeyName) {
                     const keyNames = nodes.map((n) => n.nodeValue).filter(notEmpty);
                     return {
@@ -721,7 +728,7 @@ export function extract(context, fields) {
         if (Array.isArray(localPath) && localPath.length > 0 && Array.isArray(localPath[0])) {
             const multiXPaths = localPath.map(path => `${buildAbsoluteXPath(path)}/text()`).join(' | ');
             // @ts-ignore
-            const nodes = select(multiXPaths, targetDoc);
+            const nodes = toNodeArray(select(multiXPaths, targetDoc));
             return {
                 ...result,
                 [key]: uniq(nodes.map((n) => n.nodeValue).filter(notEmpty))
@@ -738,7 +745,7 @@ export function extract(context, fields) {
         // --- 新增：列表模式处理 (用于 SSO Service, ACS 等) ---
         if (listMode && attributes.length > 0) {
             // @ts-ignore
-            const nodes = select(baseXPath, targetDoc);
+            const nodes = toNodeArray(select(baseXPath, targetDoc));
             const resultList = nodes.map((node) => {
                 const attrResult = {};
                 attributes.forEach(attr => {
@@ -762,7 +769,7 @@ export function extract(context, fields) {
             const indexPath = buildAttributeXPath(index);
             const fullLocalXPath = `${baseXPath}${indexPath}`;
             // @ts-ignore
-            const parentNodes = select(baseXPath, targetDoc);
+            const parentNodes = toNodeArray(select(baseXPath, targetDoc));
             // @ts-ignore
             const parentAttributes = select(fullLocalXPath, targetDoc).map((n) => n.value);
             const childXPath = buildAbsoluteXPath([last(currentLocalPath)].concat(attributePath));
@@ -788,7 +795,7 @@ export function extract(context, fields) {
         // 特殊 case: 获取整个节点内容 (原有逻辑)
         if (isEntire) {
             // @ts-ignore
-            const node = select(baseXPath, targetDoc);
+            const node = toNodeArray(select(baseXPath, targetDoc));
             let value = null;
             if (node.length === 1) {
                 value = node[0].toString();
@@ -829,7 +836,7 @@ export function extract(context, fields) {
         if (attributes.length === 0 && !listMode) {
             let attributeValue = null;
             // @ts-ignore
-            const node = select(baseXPath, targetDoc);
+            const node = toNodeArray(select(baseXPath, targetDoc));
             if (node.length === 1) {
                 const fullPath = `string(${baseXPath}${attributeXPath})`;
                 // @ts-ignore
@@ -1258,7 +1265,7 @@ export function extractSpToll(context, fields) {
             }
             try {
                 // @ts-ignore
-                const nodes = select(fullXPath, targetDoc);
+                const nodes = toNodeArray(select(fullXPath, targetDoc));
                 if (isKeyName) {
                     const keyNames = nodes.map((n) => n.nodeValue).filter(notEmpty);
                     return { ...result, [key]: keyNames.length > 0 ? keyNames[0] : null };
@@ -1280,7 +1287,7 @@ export function extractSpToll(context, fields) {
             const multiXPaths = localPath.map(path => `${buildAbsoluteXPath(path)}/text()`).join(' | ');
             try {
                 // @ts-ignore
-                const nodes = select(multiXPaths, targetDoc);
+                const nodes = toNodeArray(select(multiXPaths, targetDoc));
                 return { ...result, [key]: uniq(nodes.map((n) => n.nodeValue).filter(notEmpty)) };
             }
             catch (e) {
@@ -1296,7 +1303,7 @@ export function extractSpToll(context, fields) {
         if (listMode) {
             try {
                 // @ts-ignore
-                const nodes = select(baseXPath, targetDoc);
+                const nodes = toNodeArray(select(baseXPath, targetDoc));
                 if (parseCallback) {
                     // 使用自定义回调函数处理列表
                     return { ...result, [key]: parseCallback(nodes) };
@@ -1337,7 +1344,7 @@ export function extractSpToll(context, fields) {
                 const indexPath = buildAttributeXPath(index);
                 const fullLocalXPath = `${baseXPath}${indexPath}`;
                 // @ts-ignore
-                const parentNodes = select(baseXPath, targetDoc);
+                const parentNodes = toNodeArray(select(baseXPath, targetDoc));
                 // @ts-ignore
                 const parentAttributes = select(fullLocalXPath, targetDoc).map((n) => n.value);
                 const childXPath = buildAbsoluteXPath([last(currentLocalPath)].concat(attributePath));
@@ -1376,7 +1383,7 @@ export function extractSpToll(context, fields) {
         if (isEntire) {
             try {
                 // @ts-ignore
-                const node = select(baseXPath, targetDoc);
+                const node = toNodeArray(select(baseXPath, targetDoc));
                 let value = null;
                 if (node.length === 1) {
                     value = node[0].toString();
@@ -1399,7 +1406,7 @@ export function extractSpToll(context, fields) {
         if (attributes.length > 1 && !listMode) {
             try {
                 // @ts-ignore
-                const baseNodeList = select(baseXPath, targetDoc);
+                const baseNodeList = toNodeArray(select(baseXPath, targetDoc));
                 if (baseNodeList.length === 0)
                     return { ...result, [key]: null };
                 const attributeValues = baseNodeList.map((node) => {
@@ -1438,7 +1445,7 @@ export function extractSpToll(context, fields) {
         if (attributes.length === 0 && !listMode) {
             try {
                 // @ts-ignore
-                const node = select(baseXPath, targetDoc);
+                const node = toNodeArray(select(baseXPath, targetDoc));
                 if (parseCallback) {
                     // 使用自定义回调函数处理单个节点
                     return { ...result, [key]: parseCallback(node[0]) };
@@ -1447,7 +1454,7 @@ export function extractSpToll(context, fields) {
                 if (node.length === 1) {
                     const fullPath = `string(${baseXPath})`;
                     // @ts-ignore
-                    attributeValue = select(fullPath, targetDoc);
+                    attributeValue = toNodeArray(select(fullPath, targetDoc));
                 }
                 if (node.length > 1) {
                     attributeValue = node.filter((n) => n.firstChild)

package/build/src/libsaml.js

@@ -17,6 +17,13 @@ import { getContext } from './api.js';
 import xmlEscape from 'xml-escape';
 import * as fs from 'fs';
 import { DOMParser } from '@xmldom/xmldom';
+function toNodeArray(result) {
+    if (Array.isArray(result))
+        return result;
+    if (result != null && typeof result === 'object' && 'nodeType' in result)
+        return [result];
+    return [];
+}
 const signatureAlgorithms = algorithms.signature;
 const digestAlgorithms = algorithms.signatureToDigestMap;
 const certUse = wording.certUse;
@@ -400,7 +407,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
          * @returns 验证结果对象
          */
         async verifySignature(xml, opts, self) {
-            const { dom } = getContext();
+            const { dom } = getContext(); // 现在正常了
             const doc = dom.parseFromString(xml, 'application/xml');
             const docParser = new DOMParser();
             // ✅ 优化1: 所有 XPath 路径改为精确匹配 SAML 2.0 标准
@@ -409,18 +416,14 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const wrappingElementsXPath = "/*[local-name() = 'Response']/*[local-name() = 'Assertion']/*[local-name() = 'Subject']/*[local-name() = 'SubjectConfirmation']/*[local-name() = 'SubjectConfirmationData']//*[local-name() = 'Assertion' or local-name() = 'Signature']";
             const encryptedAssertionsXPath = "/*[local-name() = 'Response']/*[local-name() = 'EncryptedAssertion']";
             // 检测包装攻击
-            // @ts-expect-error misssing Node properties are not needed
-            const wrappingElementNode = select(wrappingElementsXPath, doc);
+            const wrappingElementNode = toNodeArray(select(wrappingElementsXPath, doc));
             if (wrappingElementNode.length !== 0) {
                 throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');
             }
             // 获取各种元素
-            // @ts-expect-error misssing Node properties are not needed
-            const messageSignatureNode = select(messageSignatureXpath, doc);
-            // @ts-expect-error misssing Node properties are not needed
-            const assertionSignatureNode = select(assertionSignatureXpath, doc);
-            // @ts-expect-error misssing Node properties are not needed
-            const encryptedAssertions = select(encryptedAssertionsXPath, doc);
+            const messageSignatureNode = toNodeArray(select(messageSignatureXpath, doc));
+            const assertionSignatureNode = toNodeArray(select(assertionSignatureXpath, doc));
+            const encryptedAssertions = toNodeArray(select(encryptedAssertionsXPath, doc));
             // 初始化验证状态
             let isMessageSigned = messageSignatureNode.length > 0;
             let isAssertionSigned = assertionSignatureNode.length > 0;
@@ -448,18 +451,14 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     type = 'LogoutResponse';
                     break;
                 default:
-                    // @ts-expect-error misssing Node properties are not needed
                     if (rootElementName.includes('AuthnRequest')) {
                         type = 'AuthnRequest';
-                        // @ts-expect-error misssing Node properties are not needed
                     }
                     else if (rootElementName.includes('LogoutResponse')) {
                         type = 'LogoutResponse';
-                        // @ts-expect-error misssing Node properties are not needed
                     }
                     else if (rootElementName.includes('LogoutRequest')) {
                         type = 'LogoutRequest';
-                        // @ts-expect-error misssing Node properties are not needed
                     }
                     else if (rootElementName.includes('Response')) {
                         type = 'Response';
@@ -523,7 +522,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                         sig.publicCert = fs.readFileSync(opts.keyFile);
                     }
                     else if (opts.metadata) {
-                        // @ts-expect-error misssing Node properties are not needed
                         const certificateNode = select(".//*[local-name() = 'X509Certificate']", signatureNode);
                         let metadataCert = opts.metadata.getX509Certificate(certUse.signing);
                         if (Array.isArray(metadataCert)) {
@@ -549,7 +547,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                         }
                     }
                     sig.signatureAlgorithm = opts.signatureAlgorithm;
-                    // @ts-expect-error misssing Node properties are not needed
                     sig.loadSignature(signatureNode);
                     // 验证最外层消息签名
                     MessageSignatureStatus = sig.checkSignature(decryptedDoc.toString());
@@ -582,7 +579,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     sig.publicCert = fs.readFileSync(opts.keyFile);
                 }
                 else if (opts.metadata) {
-                    // @ts-expect-error misssing Node properties are not needed
                     const certificateNode = select(".//*[local-name() = 'X509Certificate']", signatureNode);
                     let metadataCert = opts.metadata.getX509Certificate(certUse.signing);
                     if (Array.isArray(metadataCert)) {
@@ -608,7 +604,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     }
                 }
                 sig.signatureAlgorithm = signatureAlgorithm;
-                // @ts-expect-error misssing Node properties are not needed
                 sig.loadSignature(signatureNode);
                 MessageSignatureStatus = sig.checkSignature(doc.toString());
                 if (!MessageSignatureStatus) {
@@ -630,7 +625,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     sig.publicCert = fs.readFileSync(opts.keyFile);
                 }
                 else if (opts.metadata) {
-                    // @ts-expect-error misssing Node properties are not needed
                     const certificateNode = select(".//*[local-name() = 'X509Certificate']", signatureNode);
                     let metadataCert = opts.metadata.getX509Certificate(certUse.signing);
                     if (Array.isArray(metadataCert)) {
@@ -656,12 +650,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     }
                 }
                 sig.signatureAlgorithm = signatureAlgorithm;
-                // @ts-expect-error misssing Node properties are not needed
                 sig.loadSignature(signatureNode);
                 // ✅ 优化4: 修复断言节点获取路径（精确匹配）
-                const assertionNode = select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", 
-                // @ts-expect-error misssing Node properties are not needed
-                doc)[0];
+                const assertionNode = select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", doc)[0];
                 if (assertionNode) {
                     const assertionDoc = dom.parseFromString(assertionNode.toString(), 'application/xml');
                     AssertionSignatureStatus = sig.checkSignature(assertionDoc.toString());
@@ -699,11 +690,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             }
             // ✅ 优化5: 修复断言内容获取路径（精确匹配）
             else if (!encrypted && (isMessageSigned || isAssertionSigned)) {
-                const assertions = select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", 
-                // @ts-expect-error misssing Node properties are not needed
-                doc);
-                if (assertions.length > 0) {
-                    // @ts-expect-error misssing Node properties are not needed
+                const assertions = toNodeArray(select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", doc));
+                if (assertions?.length > 0) {
+                    // @ts-ignore
                     assertionContent = assertions[0].toString();
                 }
             }
@@ -735,9 +724,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const artifactResponseXpath = "/*[local-name()='Envelope']/*[local-name()='Body']/*[local-name()='ArtifactResponse']";
             // 检测 ArtifactResolve 或 ArtifactResponse 的存在
             // @ts-expect-error
-            const artifactResolveNodes = select(artifactResolveXpath, doc);
+            const artifactResolveNodes = toNodeArray(select(artifactResolveXpath, doc));
             // @ts-expect-error
-            const artifactResponseNodes = select(artifactResponseXpath, doc);
+            const artifactResponseNodes = toNodeArray(select(artifactResponseXpath, doc));
             // 根据消息类型选择合适的 XPath
             let basePath = "";
             if (artifactResolveNodes.length > 0) {
@@ -756,16 +745,16 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const encryptedAssertionsXpath = `${basePath}/*[local-name(.)='Response']/*[local-name(.)='EncryptedAssertion']`;
             // 包装攻击检测
             // @ts-expect-error
-            const wrappingElementNode = select(wrappingElementsXPath, doc);
+            const wrappingElementNode = toNodeArray(select(wrappingElementsXPath, doc));
             if (wrappingElementNode.length !== 0) {
                 throw new Error('ERR_POTENTIAL_WRAPPING_ATTACK');
             }
             // @ts-expect-error
-            const encryptedAssertions = select(encryptedAssertionsXpath, doc);
+            const encryptedAssertions = toNodeArray(select(encryptedAssertionsXpath, doc));
             // @ts-expect-error
-            const messageSignatureNode = select(messageSignatureXpath, doc);
+            const messageSignatureNode = toNodeArray(select(messageSignatureXpath, doc));
             // @ts-expect-error
-            const assertionSignatureNode = select(assertionSignatureXpath, doc);
+            const assertionSignatureNode = toNodeArray(select(assertionSignatureXpath, doc));
             let selection = [];
             if (messageSignatureNode.length > 0) {
                 selection = selection.concat(messageSignatureNode);
@@ -839,9 +828,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 switch (rootNode?.localName) {
                     case 'Response':
                         // @ts-expect-error
-                        const encryptedAssert = select("./*[local-name()='EncryptedAssertion']", rootNode);
+                        const encryptedAssert = toNodeArray(select("./*[local-name()='EncryptedAssertion']", rootNode));
                         // @ts-expect-error
-                        const assertions = select("./*[local-name()='Assertion']", rootNode);
+                        const assertions = toNodeArray(select("./*[local-name()='Assertion']", rootNode));
                         if (encryptedAssert.length === 1) {
                             return [true, encryptedAssert[0].toString(), true, false, hasUnsafeSignatureAlgorithm, unsafeSignatureAlgorithm];
                         }
@@ -903,7 +892,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
          */
         constructMessageSignature(octetString, key, passphrase, isBase64, signingAlgorithm) {
             try {
-                const algorithm = getSigningAlgorithm(signingAlgorithm);
+                const algorithm = getSigningAlgorithm(signingAlgorithm ?? signatureAlgorithms.RSA_SHA256);
                 const privateKeyPem = utility.readPrivateKey(key, passphrase); // 假设utility对象存在
                 const signer = crypto.createSign(algorithm);
                 signer.update(octetString, 'utf8');
@@ -975,12 +964,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 }
                 const sourceEntitySetting = sourceEntity.entitySetting;
                 const targetEntityMetadata = targetEntity.entityMeta;
-                console.log(targetEntityMetadata);
-                console.log("看一下是什么=====");
                 const { dom } = getContext();
                 const doc = dom.parseFromString(xml, 'application/xml');
-                // @ts-expect-error misssing Node properties are not needed
-                const assertions = select("//*[local-name(.)='Assertion']", doc);
+                const assertions = toNodeArray(select("//*[local-name(.)='Assertion']", doc));
                 if (!Array.isArray(assertions) || assertions.length === 0) {
                     throw new Error('ERR_NO_ASSERTION');
                 }
@@ -1013,7 +999,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                         }
                         const { encryptedAssertion: encAssertionPrefix } = sourceEntitySetting.tagPrefix;
                         const encryptAssertionDoc = dom.parseFromString(`<${encAssertionPrefix}:EncryptedAssertion xmlns:${encAssertionPrefix}="${namespace.names.assertion}">${res}</${encAssertionPrefix}:EncryptedAssertion>`, 'application/xml');
-                        // @ts-expect-error misssing Node properties are not needed
                         doc.documentElement.replaceChild(encryptAssertionDoc.documentElement, rawAssertionNode);
                         return resolve(utility.base64Encode(doc.toString()));
                     });
@@ -1033,8 +1018,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const hereSetting = here.entitySetting;
             const { dom } = getContext();
             const doc = dom.parseFromString(entireXML, 'application/xml');
-            // @ts-expect-error misssing Node properties are not needed
-            const encryptedAssertions = select("/*[contains(local-name(), 'Response')]/*[local-name(.)='EncryptedAssertion']", doc);
+            const encryptedAssertions = toNodeArray(select("/*[contains(local-name(), 'Response')]/*[local-name(.)='EncryptedAssertion']", doc));
             if (!Array.isArray(encryptedAssertions) || encryptedAssertions.length === 0) {
                 throw new Error('ERR_UNDEFINED_ENCRYPTED_ASSERTION');
             }
@@ -1068,12 +1052,10 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const decryptedAssertionDoc = dom.parseFromString(decryptedResult, 'application/xml');
             let AssertionSignatureStatus = false;
             // 检查解密后的断言是否有签名
-            // @ts-expect-error misssing Node properties are not needed
-            const assertionSignatureNode = select("/*[local-name(.)='Assertion']/*[local-name(.)='Signature']", decryptedAssertionDoc);
+            const assertionSignatureNode = toNodeArray(select("/*[local-name(.)='Assertion']/*[local-name(.)='Signature']", decryptedAssertionDoc));
             if (assertionSignatureNode.length > 0 && opts) {
                 // 解密后的断言有签名，需要验证
                 const signatureNode = assertionSignatureNode[0];
-                // @ts-expect-error misssing Node properties are not needed
                 const signatureAlgorithm = xpath.select1(".//*[local-name(.)='SignatureMethod']/@Algorithm", signatureNode);
                 let checkResult = checkUnsafeSignatureAlgorithm(signatureAlgorithm.value || '');
                 hasUnsafeSignatureAlgorithm = checkResult.hasUnsafeSignatureAlgorithm;
@@ -1086,7 +1068,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     sig.publicCert = fs.readFileSync(opts.keyFile);
                 }
                 else if (opts.metadata) {
-                    // @ts-expect-error misssing Node properties are not needed
                     const certificateNode = select(".//*[local-name(.)='X509Certificate']", signatureNode);
                     let metadataCert = opts.metadata.getX509Certificate(certUse.signing);
                     if (Array.isArray(metadataCert)) {
@@ -1116,7 +1097,6 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 hasUnsafeSignatureAlgorithm = checkSafeResult.hasUnsafeSignatureAlgorithm;
                 unsafeSignatureAlgorithm = checkSafeResult.unsafeSignatureAlgorithm ?? "";
                 sig.signatureAlgorithm = opts.signatureAlgorithm;
-                // @ts-expect-error misssing Node properties are not needed
                 sig.loadSignature(signatureNode);
                 // 验证解密后断言的签名
                 const assertionDocForVerification = dom.parseFromString(decryptedResult, 'application/xml');

package/build/src/libsamlSoap.js

@@ -6,6 +6,13 @@ import utility, { flattenDeep } from "./utility.js";
 import libsaml from "./libsaml.js";
 import { wording } from "./urn.js";
 import { DOMParser } from '@xmldom/xmldom';
+function toNodeArray(result) {
+    if (Array.isArray(result))
+        return result;
+    if (result != null && typeof result === 'object' && 'nodeType' in result)
+        return [result];
+    return [];
+}
 const certUse = wording.certUse;
 const docParser = new DOMParser();
 async function verifyAndDecryptSoapMessage(xml, opts) {
@@ -18,9 +25,9 @@ async function verifyAndDecryptSoapMessage(xml, opts) {
     const artifactResponseXpath = "/*[local-name()='Envelope']/*[local-name()='Body']/*[local-name()='ArtifactResponse']";
     // 检测 ArtifactResolve 或 ArtifactResponse 的存在
     // @ts-expect-error
-    const artifactResolveNodes = select(artifactResolveXpath, doc);
+    const artifactResolveNodes = toNodeArray(select(artifactResolveXpath, doc));
     // @ts-expect-error
-    const artifactResponseNodes = select(artifactResponseXpath, doc);
+    const artifactResponseNodes = toNodeArray(select(artifactResponseXpath, doc));
     // 根据消息类型选择合适的 XPath
     let basePath = "";
     if (artifactResolveNodes?.length > 0) {
@@ -37,7 +44,7 @@ async function verifyAndDecryptSoapMessage(xml, opts) {
     // 基于 SOAP 结构重新定义 XPath
     const messageSignatureXpath = `${basePath}/*[local-name(.)='Signature']`;
     // @ts-expect-error
-    const messageSignatureNode = select(messageSignatureXpath, doc);
+    const messageSignatureNode = toNodeArray(select(messageSignatureXpath, doc));
     let selection = [];
     if (messageSignatureNode?.length > 0) {
         selection = selection.concat(messageSignatureNode);

package/build/src/metadata.js

@@ -5,7 +5,7 @@
  */
 import * as fs from 'fs';
 import { namespace } from './urn.js';
-import { extractSpToll } from './extractor.js';
+import { extract } from './extractor.js';
 import { isString } from './utility.js';
 export default class Metadata {
     /**
@@ -15,7 +15,7 @@ export default class Metadata {
     constructor(xml, extraParse = []) {
         this.xmlString = xml.toString();
         this.xmlString = xml.toString();
-        this.meta = extractSpToll(this.xmlString, extraParse.concat([
+        this.meta = extract(this.xmlString, extraParse.concat([
             {
                 key: 'entityDescriptor',
                 localPath: ['EntityDescriptor'],

package/build/src/urn.js

@@ -186,7 +186,8 @@ const algorithms = {
         // XML Signature 1.1 PSS 填充 (更安全)
         RSA_PSS_SHA256: 'http://www.w3.org/2007/05/xmldsig-more#rsa-pss-sha256',
         // EdDSA (Ed25519)
-        EDDSA_ED25519: 'http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519'
+        EDDSA_ED25519: 'http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519',
+        EDDSA_ED488: 'http://www.w3.org/2021/04/xmldsig-more#eddsa-ed448'
     },
     // 2. 摘要算法定义 (DigestMethod)
     // 注意：这里直接使用标准推荐的 URI，SHA-2xx 系列推荐使用 xmlenc 命名空间
@@ -214,7 +215,8 @@ const algorithms = {
         'http://www.w3.org/2007/05/xmldsig-more#ecdsa-sha512': 'http://www.w3.org/2001/04/xmlenc#sha512',
         'http://www.w3.org/2007/05/xmldsig-more#rsa-pss-sha256': 'http://www.w3.org/2001/04/xmlenc#sha256',
         // EdDSA 比较特殊，它内部硬编码了 SHA-512，但在 XML 结构中如果需要显式声明 DigestMethod，通常指向 SHA-512
-        'http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519': 'http://www.w3.org/2001/04/xmlenc#sha512'
+        'http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519': 'http://www.w3.org/2001/04/xmlenc#sha512',
+        'http://www.w3.org/2021/04/xmldsig-more#eddsa-ed448': 'http://www.w3.org/2001/04/xmldsig-more#shake256'
     },
     encryption: {
         data: {

package/build/src/utility.js

@@ -275,6 +275,7 @@ export function readPrivateKey(keyString, passphrase, isOutputString = true) {
                 break;
             case 'ec':
             case 'ed25519':
+            case 'ed448':
                 exportType = 'pkcs8'; // ECC/Ed25519 标准格式
                 break;
             default:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "samlesa",
-  "version": "3.4.0",
+  "version": "3.4.2",
   "description": "High-level API for Single Sign On (SAML 2.0) baseed on samlify ",
   "main": "build/index.js",
   "keywords": [
@@ -42,7 +42,6 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@xmldom/is-dom-node": "^1.0.1",
     "@xmldom/xmldom": "^0.9.8",
     "axios": "^1.13.5",
     "camelcase": "^9.0.0",
@@ -52,12 +51,12 @@
     "vite-tsconfig-paths": "^6.1.1",
     "xml": "^1.0.1",
     "xml-crypto": "^6.1.2",
-    "xml-crypto-next": "^7.0.1",
+    "xml-crypto-next": "^7.0.4",
     "xml-encryption-next": "^4.6.0",
     "xml-escape": "^1.1.0",
     "xml2js": "^0.6.2",
     "xmllint-wasm": "^5.1.0",
-    "xpath": "^0.0.32"
+    "xpath": "^0.0.34"
   },
   "devDependencies": {
     "@types/node": "^25.3.2",

package/types/src/binding-artifact.d.ts

@@ -22,7 +22,7 @@ declare function parseLoginRequestResolve(params: {
     sp: ServiceProvider;
     xml: string;
 }): Promise<{
-    samlContent: string | boolean | null;
+    samlContent: any;
     extract: any;
 }>;
 declare function parseLoginResponseResolve(params: {

package/types/src/entity-sp.d.ts

@@ -46,7 +46,7 @@ export declare class ServiceProvider extends Entity {
      * @param  {request}   req                      request
      */
     parseLoginRequestResolve(idp: any, xml: any): Promise<{
-        samlContent: string | boolean | null;
+        samlContent: any;
         extract: any;
     }>;
     parseLoginResponseResolve(idp: IdentityProvider, art: string, request: ESamlHttpRequest): Promise<{

package/types/src/extractor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractor.d.ts","sourceRoot":"","sources":["../../src/extractor.ts"],"names":[],"mappings":"AAMA,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC;IAEnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,MAAM,eAAe,GAAG,cAAc,EAAE,CAAC;AA4B/C,eAAO,MAAM,kBAAkB,EAAE,eAsFhC,CAAC;AAKF,eAAO,MAAM,qBAAqB,EAAE,eAKnC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAKpC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,eAGvC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,eAG/C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,eAGxC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,eAAe,CAWrE,CAAC;AAqMF,eAAO,MAAM,mBAAmB,EAAE,eAMjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAKF,eAAO,MAAM,iBAAiB,EAAE,eAiI/B,CAAC;AAOF,eAAO,MAAM,gBAAgB,EAAE,eAyL9B,CAAC;AAEF,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAiN/D;AASD,eAAO,MAAM,2BAA2B,EAAE,eAkZzC,CAAC;AAIF;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAkRrE;AAKD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,OAE5C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,OAEzC;AAGD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,OAExC;AACD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,OAEjD;AACD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAC,GAAG,EAAC,GAAG,OAEtD"}
+{"version":3,"file":"extractor.d.ts","sourceRoot":"","sources":["../../src/extractor.ts"],"names":[],"mappings":"AAMA,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC;IAEnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,MAAM,MAAM,eAAe,GAAG,cAAc,EAAE,CAAC;AA4B/C,eAAO,MAAM,kBAAkB,EAAE,eAsFhC,CAAC;AAKF,eAAO,MAAM,qBAAqB,EAAE,eAKnC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAKpC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,eAGvC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,eAG/C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,eAGxC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,eAAe,CAWrE,CAAC;AAqMF,eAAO,MAAM,mBAAmB,EAAE,eAMjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAKF,eAAO,MAAM,iBAAiB,EAAE,eAiI/B,CAAC;AAOF,eAAO,MAAM,gBAAgB,EAAE,eAyL9B,CAAC;AAEF,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAiN/D;AASD,eAAO,MAAM,2BAA2B,EAAE,eAkZzC,CAAC;AAIF;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAkRrE;AAKD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,OAE5C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,OAEzC;AAGD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,OAExC;AACD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,OAEjD;AACD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAC,GAAG,EAAC,GAAG,OAEtD"}

package/types/src/flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,UAAU;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAqsBD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BhG;AAED,wBAAgB,IAAI,CAAC,OAAO,KAAA,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BjD"}
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,UAAU;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAqsBD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BhG;AAED,wBAAgB,IAAI,CAAC,OAAO,KAAA,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BjD"}

package/types/src/libsaml.d.ts

@@ -199,20 +199,7 @@ declare const _default: {
      * @param self
      * @returns 验证结果对象
      */
-    verifySignature(xml: string, opts: SignatureVerifierOptions, self: any): Promise<{
-        isMessageSigned: boolean;
-        MessageSignatureStatus: boolean;
-        isAssertionSigned: boolean;
-        AssertionSignatureStatus: boolean;
-        encrypted: boolean;
-        decrypted: boolean;
-        type: "AuthnRequest" | "LogoutRequest" | "Response" | "LogoutResponse" | "Unknown";
-        status: boolean;
-        samlContent: string;
-        assertionContent: null;
-        hasUnsafeSignatureAlgorithm: boolean;
-        unsafeSignatureAlgorithm: string;
-    }>;
+    verifySignature(xml: string, opts: SignatureVerifierOptions, self: any): Promise<any>;
     verifySignatureSoap(xml: string, opts: SignatureVerifierOptions): (string | boolean | null)[];
     /**
      * @desc Helper function to create the key section in metadata (abstraction for signing and encrypt use)

package/types/src/libsaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"libsaml.d.ts","sourceRoot":"","sources":["../../src/libsaml.ts"],"names":[],"mappings":"AAQA,OAAQ,KAAK,MAAM,MAAM,aAAa,CAAA;AAItC,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAerD;;;;GAIG;AAGH,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;CACnE;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;CAC1D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;CAC7D;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAC9D;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;CAC/D;AAED,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,KAAK,KAAA,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACvD,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC;IAC/D,yBAAyB,EAAE,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,0BAA0B,KAAK,MAAM,CAAC;IAC1K,sBAAsB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAC/D,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjF,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;IAC7D,yBAAyB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAE5I,sBAAsB,EAAE,CAAC,QAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACzH,UAAU,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IACrE,gBAAgB,EAAE,CAAC,YAAY,KAAA,EAAE,YAAY,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,gBAAgB,EAAE,CAAC,IAAI,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtE,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAEnD,2BAA2B,EAAE,oBAAoB,CAAC;IAClD,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,iCAAiC,EAAE,0BAA0B,CAAC;IAC9D,wBAAwB,EAAE,iBAAiB,CAAC;IAC5C,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,6BAA6B,EAAE,sBAAsB,CAAC;CACvD;;6CAwN4C,OAAO,KAAG,MAAM;gCA3MxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAgBkB,MAAM;;;;IAwO/D;;;;;OAKG;+BACwB,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAS9E;;;;;;OAMG;IACH,eAAe;6CAC0B,GAAG,EAAE,GAAG,MAAM;IA0CvD;;;OAGG;iCAC0B;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE,GAAG,CAAC;QACjB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,GAAG,CAAC;QACpB,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KACrF,GAAG,MAAM;2CA0D6B,MAAM,mBAAmB,MAAM;;;;;;;;;;;;;IAmCtE;;;;;;OAMG;yBAEwB,MAAM,QAAQ,wBAAwB,QAAQ,GAAG;;;;;;;;;;;;;;6BA4WnD,MAAM,QAAQ,wBAAwB;IAuK/D;;;;;OAKG;0BACmB,MAAM,cAAc,MAAM,GAAG,MAAM,GAAG,YAAY;IAsBxE;;;;;;;;OAQG;2CAGY,MAAM,OAChB,MAAM,eACE,MAAM,aACR,OAAO,qBACC,MAAM,GAC1B,MAAM,GAAG,MAAM;IAyBd;;;;;;;OAOG;qCAES,GAAG,eACF,MAAM,aACR,MAAM,GAAG,MAAM,oBACR,MAAM;IAmB1B;;;;SAIK;gCACyB,MAAM,oBAAmB,GAAG;;;;IAWxD;;;;;;OAMG;iEAEgD,MAAM;IA6DzD;;OAEG;IACH;;OAEG;+CACmC,MAAM,SAAS,wBAAwB;;;;;;IA0H7E;;;;;OAKG;+BAC8B,GAAG,aAAa,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA8EnF;;OAEG;sBACqB,MAAM,SAAQ,OAAO;;AA8BjD,wBAAyB"}
+{"version":3,"file":"libsaml.d.ts","sourceRoot":"","sources":["../../src/libsaml.ts"],"names":[],"mappings":"AAQA,OAAQ,KAAK,MAAM,MAAM,aAAa,CAAA;AAItC,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAoBrD;;;;GAIG;AAGH,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;CACnE;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;CAC1D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;CAC7D;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAC9D;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;CAC/D;AAED,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,KAAK,KAAA,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACvD,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC;IAC/D,yBAAyB,EAAE,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,0BAA0B,KAAK,MAAM,CAAC;IAC1K,sBAAsB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAC/D,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjF,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;IAC7D,yBAAyB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAE5I,sBAAsB,EAAE,CAAC,QAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACzH,UAAU,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IACrE,gBAAgB,EAAE,CAAC,YAAY,KAAA,EAAE,YAAY,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,gBAAgB,EAAE,CAAC,IAAI,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtE,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAEnD,2BAA2B,EAAE,oBAAoB,CAAC;IAClD,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,iCAAiC,EAAE,0BAA0B,CAAC;IAC9D,wBAAwB,EAAE,iBAAiB,CAAC;IAC5C,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,6BAA6B,EAAE,sBAAsB,CAAC;CACvD;;6CAwN4C,OAAO,KAAG,MAAM;gCA3MxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAgBkB,MAAM;;;;IAwO/D;;;;;OAKG;+BACwB,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAS9E;;;;;;OAMG;IACH,eAAe;6CAC0B,GAAG,EAAE,GAAG,MAAM;IA0CvD;;;OAGG;iCAC0B;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE,GAAG,CAAC;QACjB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,GAAG,CAAC;QACpB,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KACrF,GAAG,MAAM;2CA0D6B,MAAM,mBAAmB,MAAM;;;;;;;;;;;;;IAmCtE;;;;;;OAMG;yBAEwB,MAAM,QAAQ,wBAAwB,QAAQ,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;6BA0WlE,MAAM,QAAQ,wBAAwB;IAuK/D;;;;;OAKG;0BACmB,MAAM,cAAc,MAAM,GAAG,MAAM,GAAG,YAAY;IAsBxE;;;;;;;;OAQG;2CAGY,MAAM,OAChB,MAAM,eACE,MAAM,aACR,OAAO,qBACC,MAAM,GAC1B,MAAM,GAAG,MAAM;IAyBd;;;;;;;OAOG;qCAES,GAAG,eACF,MAAM,aACR,MAAM,GAAG,MAAM,oBACR,MAAM;IAmB1B;;;;SAIK;gCACyB,MAAM,oBAAmB,GAAG;;;;IAWxD;;;;;;OAMG;iEAEgD,MAAM;IA2DzD;;OAEG;IACH;;OAEG;+CACmC,MAAM,SAAS,wBAAwB;;;;;;IAsH7E;;;;;OAKG;+BAC8B,GAAG,aAAa,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA8EnF;;OAEG;sBACqB,MAAM,SAAQ,OAAO;;AA8BjD,wBAAyB"}

package/types/src/libsamlSoap.d.ts

@@ -1,5 +1,5 @@
 import { SignatureVerifierOptions } from "./libsaml.js";
-declare function verifyAndDecryptSoapMessage(xml: any, opts: SignatureVerifierOptions): Promise<(boolean | null)[] | (string | boolean)[]>;
+declare function verifyAndDecryptSoapMessage(xml: any, opts: SignatureVerifierOptions): Promise<any[]>;
 declare const _default: {
     verifyAndDecryptSoapMessage: typeof verifyAndDecryptSoapMessage;
 };

package/types/src/libsamlSoap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"libsamlSoap.d.ts","sourceRoot":"","sources":["../../src/libsamlSoap.ts"],"names":[],"mappings":"AAKA,OAAgB,EAAC,wBAAwB,EAAC,MAAM,cAAc,CAAC;AAQ/D,iBAAe,2BAA2B,CAAC,GAAG,KAAA,EAAE,IAAI,EAAE,wBAAwB,sDA4C7E;;;;AA8ED,wBAEC"}
+{"version":3,"file":"libsamlSoap.d.ts","sourceRoot":"","sources":["../../src/libsamlSoap.ts"],"names":[],"mappings":"AAKA,OAAgB,EAAC,wBAAwB,EAAC,MAAM,cAAc,CAAC;AAY/D,iBAAe,2BAA2B,CAAC,GAAG,KAAA,EAAE,IAAI,EAAE,wBAAwB,kBA4C7E;;;;AA8ED,wBAEC"}

package/types/src/urn.d.ts

@@ -167,6 +167,7 @@ declare const algorithms: {
         RSA_SHA512: string;
         RSA_PSS_SHA256: string;
         EDDSA_ED25519: string;
+        EDDSA_ED488: string;
     };
     digest: {
         SHA1: string;
@@ -190,6 +191,7 @@ declare const algorithms: {
         'http://www.w3.org/2007/05/xmldsig-more#ecdsa-sha512': string;
         'http://www.w3.org/2007/05/xmldsig-more#rsa-pss-sha256': string;
         'http://www.w3.org/2007/05/xmldsig-more#eddsa-ed25519': string;
+        'http://www.w3.org/2021/04/xmldsig-more#eddsa-ed448': string;
     };
     encryption: {
         data: {

package/types/src/urn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"urn.d.ts","sourceRoot":"","sources":["../../src/urn.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oBAAY,gBAAgB;IAC1B,QAAQ,uDAAuD;IAC/D,IAAI,mDAAmD;IACvD,UAAU,8DAA8D;IACxE,QAAQ,uDAAuD;CAChE;AAED,oBAAY,qBAAqB;IAC/B,GAAG,sBAAsB;IACzB,GAAG,sBAAsB;CAC1B;AAED,oBAAY,UAAU;IAEpB,OAAO,+CAA+C;IACtD,SAAS,iDAAiD;IAC1D,SAAS,iDAAiD;IAC1D,eAAe,uDAAuD;IAEtE,UAAU,mDAAmD;IAC7D,sBAAsB,8DAA8D;IACpF,mBAAmB,2DAA2D;IAC9E,cAAc,sDAAsD;IACpE,cAAc,sDAAsD;IACpE,SAAS,iDAAiD;IAC1D,cAAc,sDAAsD;IACpE,aAAa,qDAAqD;IAClE,kBAAkB,0DAA0D;IAC5E,aAAa,qDAAqD;IAClE,kBAAkB,0DAA0D;IAC5E,wBAAwB,gEAAgE;IACxF,qBAAqB,6DAA6D;IAClF,oBAAoB,4DAA4D;IAChF,qBAAqB,6DAA6D;IAClF,gBAAgB,wDAAwD;IACxE,kBAAkB,0DAA0D;IAC5E,gBAAgB,wDAAwD;IACxE,kBAAkB,0DAA0D;CAC7E;AAED,QAAA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Fd,CAAC;AAEF,QAAA,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BT,CAAC;AAEF,QAAA,MAAM,qBAAqB;;;;;CAK1B,CAAC;AAEF,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAgFZ;;;WAGG;;;;;;;;;;;;;CAwBN,CAAC;AAaF,oBAAY,UAAU;IACpB,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;CAClC;AAED,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;CAyBZ,CAAC;AAIF,QAAA,MAAM,aAAa;;;;CAIlB,CAAC;AAEF,OAAO,EAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAC,CAAC"}
+{"version":3,"file":"urn.d.ts","sourceRoot":"","sources":["../../src/urn.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oBAAY,gBAAgB;IAC1B,QAAQ,uDAAuD;IAC/D,IAAI,mDAAmD;IACvD,UAAU,8DAA8D;IACxE,QAAQ,uDAAuD;CAChE;AAED,oBAAY,qBAAqB;IAC/B,GAAG,sBAAsB;IACzB,GAAG,sBAAsB;CAC1B;AAED,oBAAY,UAAU;IAEpB,OAAO,+CAA+C;IACtD,SAAS,iDAAiD;IAC1D,SAAS,iDAAiD;IAC1D,eAAe,uDAAuD;IAEtE,UAAU,mDAAmD;IAC7D,sBAAsB,8DAA8D;IACpF,mBAAmB,2DAA2D;IAC9E,cAAc,sDAAsD;IACpE,cAAc,sDAAsD;IACpE,SAAS,iDAAiD;IAC1D,cAAc,sDAAsD;IACpE,aAAa,qDAAqD;IAClE,kBAAkB,0DAA0D;IAC5E,aAAa,qDAAqD;IAClE,kBAAkB,0DAA0D;IAC5E,wBAAwB,gEAAgE;IACxF,qBAAqB,6DAA6D;IAClF,oBAAoB,4DAA4D;IAChF,qBAAqB,6DAA6D;IAClF,gBAAgB,wDAAwD;IACxE,kBAAkB,0DAA0D;IAC5E,gBAAgB,wDAAwD;IACxE,kBAAkB,0DAA0D;CAC7E;AAED,QAAA,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Fd,CAAC;AAEF,QAAA,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BT,CAAC;AAEF,QAAA,MAAM,qBAAqB;;;;;CAK1B,CAAC;AAEF,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmFZ;;;WAGG;;;;;;;;;;;;;CAwBN,CAAC;AAaF,oBAAY,UAAU;IACpB,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;CAClC;AAED,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;CAyBZ,CAAC;AAIF,QAAA,MAAM,aAAa;;;;CAIlB,CAAC;AAEF,OAAO,EAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAC,CAAC"}