samlesa 4.9.0 → 5.1.0

package/build/src/api.js

@@ -1,8 +1,10 @@
-import { DOMParser as dom } from '@xmldom/xmldom';
 import { validate as defaultValidator } from "./schemaValidator.js";
+import { createSilentDomParser, normalizeDomParserOptions } from './xmlParser.js';
+const defaultDomParserOptions = normalizeDomParserOptions();
 const context = {
     validate: defaultValidator,
-    dom: new dom()
+    domParserOptions: defaultDomParserOptions,
+    dom: createSilentDomParser(defaultDomParserOptions)
 };
 export function getContext() {
     return context;
@@ -15,5 +17,6 @@ export function setSchemaValidator(params) {
     context.validate = params.validate;
 }
 export function setDOMParserOptions(options = {}) {
-    context.dom = new dom(options);
+    context.domParserOptions = normalizeDomParserOptions(options);
+    context.dom = createSilentDomParser(context.domParserOptions);
 }

package/build/src/extractor.js

@@ -700,7 +700,13 @@ export const spMetadataFields = [
 ];
 export function extract(context, fields) {
     const { dom } = getContext();
-    const rootDoc = dom.parseFromString(context, 'application/xml');
+    let rootDoc;
+    try {
+        rootDoc = dom.parseFromString(context, 'application/xml');
+    }
+    catch {
+        return {};
+    }
     return fields.reduce((result, field) => {
         const key = field.key;
         // 安全解构，防止 undefined
@@ -713,7 +719,12 @@ export function extract(context, fields) {
         const listMode = field.listMode;
         let targetDoc = rootDoc;
         if (shortcut) {
-            targetDoc = dom.parseFromString(shortcut, 'application/xml');
+            try {
+                targetDoc = dom.parseFromString(shortcut, 'application/xml');
+            }
+            catch {
+                targetDoc = rootDoc;
+            }
         }
         // ==========================================================================
         // 【核心修复】特殊处理：证书和 KeyName 提取 (Hardcoded logic)
@@ -1259,12 +1270,7 @@ export function extractSpToll(context, fields) {
     try {
         rootDoc = dom.parseFromString(context, 'application/xml');
     }
-    catch (e) {
-        console.error('Failed to parse XML context:', e);
-        return {};
-    }
-    if (rootDoc.getElementsByTagName('parsererror').length > 0) {
-        console.error('XML Parse Error detected in context');
+    catch {
         return {};
     }
     return fields.reduce((result, field) => {
@@ -1282,7 +1288,7 @@ export function extractSpToll(context, fields) {
             try {
                 targetDoc = dom.parseFromString(shortcut, 'application/xml');
             }
-            catch (e) {
+            catch {
                 return result;
             }
         }
@@ -1370,7 +1376,6 @@ export function extractSpToll(context, fields) {
                 return { ...result, [key]: resultList };
             }
             catch (e) {
-                console.error(`Error extracting list ${key}:`, e);
                 return { ...result, [key]: [] };
             }
         }

package/build/src/flow.js

@@ -24,6 +24,25 @@ function getDefaultExtractorFields(parserType, assertion) {
             throw new Error('ERR_UNDEFINED_PARSERTYPE');
     }
 }
+function buildPostVerificationResult(parseResult, verificationResult, extra = {}) {
+    return {
+        ...parseResult,
+        verificationResult: {
+            isMessageSigned: verificationResult?.isMessageSigned,
+            MessageSignatureStatus: verificationResult?.MessageSignatureStatus,
+            isAssertionSigned: verificationResult?.isAssertionSigned,
+            AssertionSignatureStatus: verificationResult?.AssertionSignatureStatus,
+            encrypted: verificationResult?.encrypted,
+            decrypted: verificationResult?.decrypted,
+            type: verificationResult?.type,
+            status: verificationResult?.status,
+            hasUnsafeSignatureAlgorithm: verificationResult?.hasUnsafeSignatureAlgorithm,
+            unsafeSignatureAlgorithm: verificationResult?.unsafeSignatureAlgorithm,
+            verificationStrategy: extra?.verificationStrategy,
+            verifiedAssertions: extra?.verifiedAssertions ?? null,
+        },
+    };
+}
 function collectServiceLocations(entityMeta, serviceKey) {
     const serviceConfig = entityMeta?.meta?.[serviceKey];
     if (!serviceConfig) {
@@ -394,21 +413,10 @@ async function postFlow(options) {
     if (validationError) {
         return Promise.reject(validationError);
     }
-    return Promise.resolve({
-        ...parseResult,
-        verificationResult: {
-            isMessageSigned: verificationResult?.isMessageSigned,
-            MessageSignatureStatus: verificationResult?.MessageSignatureStatus,
-            isAssertionSigned: verificationResult?.isAssertionSigned,
-            AssertionSignatureStatus: verificationResult?.AssertionSignatureStatus,
-            encrypted: verificationResult?.encrypted,
-            decrypted: verificationResult?.decrypted,
-            type: verificationResult?.type, // 添加类型字段
-            status: verificationResult?.status,
-            hasUnsafeSignatureAlgorithm: verificationResult?.hasUnsafeSignatureAlgorithm,
-            unsafeSignatureAlgorithm: verificationResult?.unsafeSignatureAlgorithm
-        },
-    });
+    return Promise.resolve(buildPostVerificationResult(parseResult, verificationResult, {
+        verificationStrategy: 'single-assertion',
+        verifiedAssertions: [parseResult],
+    }));
 }
 // proceed the post Artifact flow
 async function postArtifactFlow(options) {

package/build/src/libsaml.js

@@ -15,7 +15,7 @@ import camelCase from 'camelcase';
 import { getContext } from './api.js';
 import xmlEscape from 'xml-escape';
 import * as fs from 'fs';
-import { DOMParser } from '@xmldom/xmldom';
+import { createSilentDomParser } from './xmlParser.js';
 function toNodeArray(result) {
     if (Array.isArray(result))
         return result;
@@ -506,9 +506,15 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
          * @returns Verification result object.
          */
         async verifySignature(xml, opts, self) {
+            try {
+                await this.isValidXml(xml);
+            }
+            catch (error) {
+                throw new Error('ERR_EXCEPTION_VALIDATE_XML');
+            }
             const { dom } = getContext();
             const doc = dom.parseFromString(xml, 'application/xml');
-            const docParser = new DOMParser();
+            const docParser = createSilentDomParser();
             // Use exact SAML 2.0 XPath targets.
             const messageSignatureXpath = "/*[local-name() = 'Response' or local-name() = 'AuthnRequest' or local-name() = 'LogoutRequest' or local-name() = 'LogoutResponse']/*[local-name() = 'Signature']";
             const assertionSignatureXpath = "/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']/*[local-name() = 'Signature']";
@@ -523,6 +529,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             const messageSignatureNode = toNodeArray(select(messageSignatureXpath, doc));
             const assertionSignatureNode = toNodeArray(select(assertionSignatureXpath, doc));
             const encryptedAssertions = toNodeArray(select(encryptedAssertionsXPath, doc));
+            const topLevelAssertionNodes = toNodeArray(select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", doc));
             // Initialize verification state.
             let isMessageSigned = messageSignatureNode.length > 0;
             let isAssertionSigned = assertionSignatureNode.length > 0;
@@ -566,6 +573,9 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                         type = 'Unknown';
                     }
             }
+            if (type === 'Response' && topLevelAssertionNodes.length + encryptedAssertions.length > 1) {
+                throw new Error('ERR_MULTIPLE_ASSERTION');
+            }
             let hasUnsafeSignatureAlgorithm = false;
             let unsafeSignatureAlgorithm = '';
             // Reject unsigned SAML responses that carry unsigned assertions.
@@ -593,6 +603,45 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 }
                 return signatureAlgorithm.value;
             };
+            const resolveVerificationPublicKeys = () => {
+                if (!opts.keyFile && !opts.metadata) {
+                    throw new Error('ERR_UNDEFINED_SIGNATURE_VERIFIER_OPTIONS');
+                }
+                if (opts.keyFile) {
+                    return resolveKeyFilePublicKeys(opts.keyFile, certificateValidationOptions('signing', opts, self));
+                }
+                return resolveSignaturePublicKeys(opts.metadata, certificateValidationOptions('signing', opts, self));
+            };
+            const verifyAssertionNodeSignature = (assertionNode) => {
+                const signatureNode = toNodeArray(select("./*[local-name() = 'Signature']", assertionNode))[0];
+                if (!signatureNode) {
+                    return {
+                        signed: false,
+                        verified: false,
+                    };
+                }
+                const signatureAlgorithm = getSignatureAlgorithm(signatureNode);
+                const checkResult = checkUnsafeSignatureAlgorithm(signatureAlgorithm);
+                hasUnsafeSignatureAlgorithm = hasUnsafeSignatureAlgorithm || checkResult.hasUnsafeSignatureAlgorithm;
+                if (!unsafeSignatureAlgorithm && checkResult.unsafeSignatureAlgorithm) {
+                    unsafeSignatureAlgorithm = checkResult.unsafeSignatureAlgorithm;
+                }
+                if (checkResult.hasUnsafeSignatureAlgorithm && !resolveAllowLegacySha1(opts, self)) {
+                    throw new Error('ERR_UNSAFE_SIGNATURE_ALGORITHM');
+                }
+                const publicKeys = resolveVerificationPublicKeys();
+                const assertionDoc = dom.parseFromString(assertionNode.toString(), 'application/xml');
+                const fullDocumentXml = doc.toString();
+                const assertionXml = assertionDoc.toString();
+                const verificationCandidates = isInclusiveCanonicalizationSignature(signatureNode)
+                    ? [fullDocumentXml, assertionXml]
+                    : [assertionXml, fullDocumentXml];
+                const verified = verifyXmlSignatureWithPublicKeys(signatureNode, verificationCandidates, publicKeys, signatureAlgorithm).verified;
+                return {
+                    signed: true,
+                    verified,
+                };
+            };
             // Handle outer message signature with encrypted assertion.
             if (isMessageSigned && encrypted) {
                 try {
@@ -650,16 +699,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 if (checkResult.hasUnsafeSignatureAlgorithm && !resolveAllowLegacySha1(opts, self)) {
                     throw new Error('ERR_UNSAFE_SIGNATURE_ALGORITHM');
                 }
-                let publicKeys = [];
-                if (!opts.keyFile && !opts.metadata) {
-                    throw new Error('ERR_UNDEFINED_SIGNATURE_VERIFIER_OPTIONS');
-                }
-                if (opts.keyFile) {
-                    publicKeys = resolveKeyFilePublicKeys(opts.keyFile, certificateValidationOptions('signing', opts, self));
-                }
-                else if (opts.metadata) {
-                    publicKeys = resolveSignaturePublicKeys(opts.metadata, certificateValidationOptions('signing', opts, self));
-                }
+                const publicKeys = resolveVerificationPublicKeys();
                 MessageSignatureStatus = verifyXmlSignatureWithPublicKeys(signatureNode, [doc.toString()], publicKeys, signatureAlgorithm).verified;
                 if (!MessageSignatureStatus) {
                     throw new Error('ERR_FAILED_TO_VERIFY_MESSAGE_SIGNATURE');
@@ -667,38 +707,8 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
             }
             // Verify assertion signatures with exact algorithm resolution.
             if (isAssertionSigned && !encrypted) {
-                const signatureNode = assertionSignatureNode[0];
-                const signatureAlgorithm = getSignatureAlgorithm(signatureNode);
-                const checkResult = checkUnsafeSignatureAlgorithm(signatureAlgorithm);
-                hasUnsafeSignatureAlgorithm = checkResult.hasUnsafeSignatureAlgorithm;
-                unsafeSignatureAlgorithm = checkResult.unsafeSignatureAlgorithm ?? "";
-                if (checkResult.hasUnsafeSignatureAlgorithm && !resolveAllowLegacySha1(opts, self)) {
-                    throw new Error('ERR_UNSAFE_SIGNATURE_ALGORITHM');
-                }
-                let publicKeys = [];
-                if (!opts.keyFile && !opts.metadata) {
-                    throw new Error('ERR_UNDEFINED_SIGNATURE_VERIFIER_OPTIONS');
-                }
-                if (opts.keyFile) {
-                    publicKeys = resolveKeyFilePublicKeys(opts.keyFile, certificateValidationOptions('signing', opts, self));
-                }
-                else if (opts.metadata) {
-                    publicKeys = resolveSignaturePublicKeys(opts.metadata, certificateValidationOptions('signing', opts, self));
-                }
-                // Locate the assertion node with exact matching.
-                const assertionNode = select("/*[local-name() = 'Response' or local-name() = 'AuthnRequest']/*[local-name() = 'Assertion']", doc)[0];
-                if (assertionNode) {
-                    const assertionDoc = dom.parseFromString(assertionNode.toString(), 'application/xml');
-                    const fullDocumentXml = doc.toString();
-                    const assertionXml = assertionDoc.toString();
-                    const verificationCandidates = isInclusiveCanonicalizationSignature(signatureNode)
-                        ? [fullDocumentXml, assertionXml]
-                        : [assertionXml, fullDocumentXml];
-                    AssertionSignatureStatus = verifyXmlSignatureWithPublicKeys(signatureNode, verificationCandidates, publicKeys, signatureAlgorithm).verified;
-                }
-                else {
-                    AssertionSignatureStatus = false;
-                }
+                const assertionStatus = verifyAssertionNodeSignature(topLevelAssertionNodes[0]);
+                AssertionSignatureStatus = assertionStatus.verified;
                 if (!AssertionSignatureStatus) {
                     throw new Error('ERR_FAILED_TO_VERIFY_ASSERTION_SIGNATURE');
                 }
@@ -757,7 +767,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
         verifySignatureSoap(xml, opts) {
             const { dom } = getContext();
             const doc = dom.parseFromString(xml, 'application/xml');
-            const docParser = new DOMParser();
+            const docParser = createSilentDomParser();
             // Define XPath expressions for SOAP messages.
             const artifactResolveXpath = "/*[local-name()='Envelope']/*[local-name()='Body']/*[local-name()='ArtifactResolve']";
             const artifactResponseXpath = "/*[local-name()='Envelope']/*[local-name()='Body']/*[local-name()='ArtifactResponse']";
@@ -844,9 +854,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                 // Handle signed content.
                 switch (rootNode?.localName) {
                     case 'Response':
-                        // @ts-expect-error
                         const encryptedAssert = toNodeArray(select("./*[local-name()='EncryptedAssertion']", rootNode));
-                        // @ts-expect-error
                         const assertions = toNodeArray(select("./*[local-name()='Assertion']", rootNode));
                         if (encryptedAssert.length === 1) {
                             return [true, encryptedAssert[0].toString(), true, false, hasUnsafeSignatureAlgorithm, unsafeSignatureAlgorithm];
@@ -1060,6 +1068,12 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
          * Synchronous assertion decryption helper with post-decryption signature validation.
          */
         async decryptAssertionAsync(here, entireXML, opts) {
+            try {
+                await this.isValidXml(entireXML);
+            }
+            catch (error) {
+                throw new Error('ERR_EXCEPTION_VALIDATE_XML');
+            }
             const hereSetting = here.entitySetting;
             const { dom } = getContext();
             const doc = dom.parseFromString(entireXML, 'application/xml');
@@ -1147,6 +1161,12 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
          * @returns Decrypted full SOAP XML and decrypted assertion XML.
          */
         async decryptAssertionSoap(self, entireXML) {
+            try {
+                await this.isValidXml(entireXML, true);
+            }
+            catch (error) {
+                throw new Error('ERR_EXCEPTION_VALIDATE_XML');
+            }
             let hereSetting = self.entitySetting;
             const { dom } = getContext();
             try {
@@ -1163,7 +1183,7 @@ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="{ID}"
                     throw new Error('ERR_ENCRYPTED_ASSERTION_NOT_FOUND');
                 }
                 if (encryptedAssertions.length > 1) {
-                    console.warn('Multiple encrypted assertions found; only the first one will be processed');
+                    throw new Error('ERR_MULTIPLE_ASSERTION');
                 }
                 const encAssertionNode = encryptedAssertions[0];
                 // Prepare the decryption key.

package/build/src/libsamlSoap.js

@@ -1,10 +1,11 @@
 import fs from 'fs';
-import { DOMParser } from '@xmldom/xmldom';
 import { select } from 'xpath';
 import { SignedXml } from 'xml-crypto-next';
 import utility, { normalizeCertificates } from './utility.js';
 import { wording } from './urn.js';
 import { getContext } from './api.js';
+import { validate } from './schemaValidator.js';
+import { createSilentDomParser } from './xmlParser.js';
 function toNodeArray(result) {
     if (Array.isArray(result)) {
         return result;
@@ -73,7 +74,7 @@ function serializeWithInheritedNamespaces(node) {
     return serializedXml;
 }
 const certUse = wording.certUse;
-const docParser = new DOMParser();
+const docParser = createSilentDomParser();
 function certificateValidationOptions(opts) {
     return {
         expectedUse: 'signing',
@@ -110,6 +111,9 @@ function extractResolvedMessages(rootNode) {
     if (resolvedNodes.length === 0) {
         return [];
     }
+    if (resolvedNodes.length > 1) {
+        throw new Error('ERR_MULTIPLE_RESOLVED_MESSAGES');
+    }
     const resolvedNode = resolvedNodes[0];
     return uniqueXmlCandidates([
         serializeWithInheritedNamespaces(resolvedNode),
@@ -195,6 +199,12 @@ function parseUnsignedArtifactResponse(xml, artifactResponseNode) {
     };
 }
 async function verifyAndDecryptSoapMessage(xml, opts) {
+    try {
+        await validate(xml, true);
+    }
+    catch (error) {
+        throw new Error('ERR_EXCEPTION_VALIDATE_XML');
+    }
     const { dom } = getContext();
     const doc = dom.parseFromString(xml, 'application/xml');
     const artifactResolveXpath = "/*[local-name()='Envelope']/*[local-name()='Body']/*[local-name()='ArtifactResolve']";

package/build/src/metadata-idp.js

@@ -47,9 +47,6 @@ export class IdpMetadata extends Metadata {
                     IDPSSODescriptor.push({ ArtifactResolutionService: [{ _attr: attr }] });
                 });
             }
-            else {
-                console.warn('Construct identity  provider - missing endpoint of ArtifactResolutionService');
-            }
             if (isNonEmptyArray(singleLogoutService)) {
                 singleLogoutService.forEach((a, indexCount) => {
                     const attr = {};
@@ -61,9 +58,6 @@ export class IdpMetadata extends Metadata {
                     IDPSSODescriptor.push({ SingleLogoutService: [{ _attr: attr }] });
                 });
             }
-            else {
-                console.warn('Construct identity  provider - missing endpoint of SingleLogoutService');
-            }
             if (isNonEmptyArray(nameIDFormat)) {
                 nameIDFormat.forEach(f => IDPSSODescriptor.push({ NameIDFormat: f }));
             }

package/build/src/metadata-sp.js

@@ -23,9 +23,11 @@ function unwrapSingleEntityDescriptorMetadata(meta) {
         return meta;
     }
     const { dom } = getContext();
-    const rootDoc = dom.parseFromString(metadataText, 'application/xml');
-    const parserErrors = rootDoc.getElementsByTagName('parsererror');
-    if (parserErrors.length > 0) {
+    let rootDoc;
+    try {
+        rootDoc = dom.parseFromString(metadataText, 'application/xml');
+    }
+    catch {
         return meta;
     }
     const entityNodes = toNodeArray(
@@ -81,9 +83,6 @@ export class SpMetadata extends Metadata {
                         protocolSupportEnumeration: namespace.names.protocol,
                     },
                 }];
-            if (wantMessageSigned && signatureConfig === undefined) {
-                console.warn('Construct service provider - missing signatureConfig');
-            }
             for (const cert of castArrayOpt(signingCert)) {
                 descriptors.KeyDescriptor.push(libsaml.createKeySection('signing', cert).KeyDescriptor);
             }
@@ -149,9 +148,6 @@ export class SpMetadata extends Metadata {
                     descriptors.AssertionConsumerService.push([{ _attr: attr }]);
                 });
             }
-            else {
-                console.warn('Missing endpoint of AssertionConsumerService');
-            }
             // 修改原有处理逻辑
             if (isNonEmptyArray(attributeConsumingService)) {
                 attributeConsumingService.forEach((service, index) => {

package/build/src/saml2-enhancements-integration.js

@@ -3,12 +3,13 @@
  * @desc SAML 2.0 增强功能集成 - 自动应用到绑定和元数据生成
  */
 import { buildScoping, buildRequestedAuthnContext, buildOneTimeUse, buildProxyRestriction, buildOrganization, buildContactPerson, xmlToString, AuthnContextClassRef, Consent, } from './saml2-enhancements.js';
-import { DOMParser, XMLSerializer } from '@xmldom/xmldom';
+import { XMLSerializer } from '@xmldom/xmldom';
+import { parseXmlOrThrow } from './xmlParser.js';
 /**
  * 将增强功能应用到 AuthnRequest
  */
 export function applyAuthnRequestEnhancements(rawSamlRequest, enhancements) {
-    const doc = new DOMParser().parseFromString(rawSamlRequest, 'application/xml');
+    const doc = parseXmlOrThrow(rawSamlRequest, 'application/xml');
     const authnRequestElement = doc.documentElement;
     if (!authnRequestElement) {
         throw new Error('Invalid AuthnRequest XML');
@@ -44,7 +45,7 @@ export function applyAuthnRequestEnhancements(rawSamlRequest, enhancements) {
  * 将增强功能应用到 Conditions 元素
  */
 export function applyConditionsEnhancements(rawSamlResponse, enhancements) {
-    const doc = new DOMParser().parseFromString(rawSamlResponse, 'application/xml');
+    const doc = parseXmlOrThrow(rawSamlResponse, 'application/xml');
     const conditionsElements = doc.getElementsByTagName('saml:Conditions');
     if (conditionsElements.length > 0) {
         const conditionsElement = conditionsElements[0];
@@ -65,7 +66,7 @@ export function applyConditionsEnhancements(rawSamlResponse, enhancements) {
  * 将增强功能应用到 SubjectConfirmationData 元素
  */
 export function applySubjectConfirmationEnhancements(rawSamlResponse, enhancements) {
-    const doc = new DOMParser().parseFromString(rawSamlResponse, 'application/xml');
+    const doc = parseXmlOrThrow(rawSamlResponse, 'application/xml');
     const subjectConfirmationDataElements = doc.getElementsByTagName('saml:SubjectConfirmationData');
     if (subjectConfirmationDataElements.length > 0) {
         const element = subjectConfirmationDataElements[0];
@@ -85,7 +86,7 @@ export function applySubjectConfirmationEnhancements(rawSamlResponse, enhancemen
  * 将增强功能应用到元数据
  */
 export function applyMetadataEnhancements(rawMetadata, enhancements) {
-    const doc = new DOMParser().parseFromString(rawMetadata, 'application/xml');
+    const doc = parseXmlOrThrow(rawMetadata, 'application/xml');
     const entityDescriptor = doc.documentElement;
     if (!entityDescriptor) {
         throw new Error('Invalid Metadata XML');
@@ -136,7 +137,7 @@ function buildContactPersonElement(config, doc) {
 // ============================================================================
 function xmlObjectToElement(xmlObj, doc, defaultNs) {
     const xmlStr = xmlToString(xmlObj);
-    const tempDoc = new DOMParser().parseFromString(xmlStr, 'application/xml');
+    const tempDoc = parseXmlOrThrow(xmlStr, 'application/xml');
     return doc.importNode(tempDoc.documentElement, true);
 }
 // ============================================================================

package/build/src/schema/saml-schema-protocol-2.0.xsd

@@ -203,10 +203,10 @@
     <complexType name="ResponseType">
     	<complexContent>
             <extension base="samlp:StatusResponseType">
-                <choice minOccurs="0" maxOccurs="unbounded">
-                    <element ref="saml:Assertion"/>
-                    <element ref="saml:EncryptedAssertion"/>
-                </choice>
+                <choice>
+                    <element ref="saml:Assertion"/>
+                    <element ref="saml:EncryptedAssertion"/>
+                </choice>
             </extension>
     	</complexContent>
     </complexType>

package/build/src/schemaValidator.js

@@ -2,7 +2,7 @@ import { validateXML } from 'xmllint-wasm';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { DOMParser } from '@xmldom/xmldom';
+import { parseXmlOrThrow } from './xmlParser.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const normalSchemas = [
@@ -35,6 +35,13 @@ const metadataSchemas = [
     'xenc-schema.xsd',
     'xenc-schema-11.xsd',
 ];
+const samlpNamespace = 'urn:oasis:names:tc:SAML:2.0:protocol';
+const soapResolvedMessageNames = new Set([
+    'Response',
+    'AuthnRequest',
+    'LogoutRequest',
+    'LogoutResponse',
+]);
 function detectXXEIndicators(samlString) {
     const xxePatterns = [
         /<!DOCTYPE\b[^>]*>/gi,
@@ -61,13 +68,80 @@ function detectXXEIndicators(samlString) {
     return Object.keys(matches).length > 0 ? matches : null;
 }
 function assertSafeXmlParse(xml) {
-    const parser = new DOMParser();
-    const xmlDoc = parser.parseFromString(xml, 'text/xml');
-    const parserError = xmlDoc.getElementsByTagName('parsererror');
-    if (parserError.length > 0 || xmlDoc.doctype) {
+    const xmlDoc = parseXmlOrThrow(xml, 'text/xml');
+    if (xmlDoc.doctype) {
         throw new Error('ERR_EXCEPTION_VALIDATE_XML');
     }
 }
+function isElementNode(node) {
+    return !!node && node.nodeType === 1;
+}
+function escapeAttributeValue(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/"/g, '&quot;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+function collectNamespaceDeclarations(node) {
+    const declarations = new Map();
+    let current = node.parentNode;
+    while (isElementNode(current)) {
+        for (let index = 0; index < current.attributes.length; index += 1) {
+            const attribute = current.attributes.item(index);
+            if (!attribute) {
+                continue;
+            }
+            if (attribute.name === 'xmlns' || attribute.name.startsWith('xmlns:')) {
+                if (!declarations.has(attribute.name)) {
+                    declarations.set(attribute.name, attribute.value);
+                }
+            }
+        }
+        current = current.parentNode;
+    }
+    return declarations;
+}
+function hasNamespaceDeclaration(serializedXml, name) {
+    const rootStartTag = serializedXml.match(/^<[^>]+>/)?.[0] || '';
+    return new RegExp(`(?:^|\\s)${name.replace(':', '\\:')}\\s*=`).test(rootStartTag);
+}
+function serializeWithInheritedNamespaces(node) {
+    if (!isElementNode(node)) {
+        return node.toString();
+    }
+    let serializedXml = node.toString();
+    const declarationsToAdd = [];
+    for (const [name, value] of collectNamespaceDeclarations(node)) {
+        if (!hasNamespaceDeclaration(serializedXml, name)) {
+            declarationsToAdd.push(`${name}="${escapeAttributeValue(value)}"`);
+        }
+    }
+    if (declarationsToAdd.length === 0) {
+        return serializedXml;
+    }
+    return serializedXml.replace(/^<([^\s/>]+)([^>]*)>/, (_match, tagName, attributes) => `<${tagName} ${declarationsToAdd.join(' ')}${attributes}>`);
+}
+async function validateSoapResolvedMessages(xml) {
+    const xmlDoc = parseXmlOrThrow(xml, 'text/xml');
+    const artifactResponses = xmlDoc.getElementsByTagNameNS(samlpNamespace, 'ArtifactResponse');
+    for (let index = 0; index < artifactResponses.length; index += 1) {
+        const artifactResponse = artifactResponses.item(index);
+        if (!artifactResponse) {
+            continue;
+        }
+        const resolvedMessages = Array.from(artifactResponse.childNodes).filter((node) => isElementNode(node) &&
+            node.namespaceURI === samlpNamespace &&
+            typeof node.localName === 'string' &&
+            soapResolvedMessageNames.has(node.localName));
+        if (resolvedMessages.length > 1) {
+            throw new Error('ERR_MULTIPLE_RESOLVED_MESSAGES');
+        }
+        if (resolvedMessages.length === 1) {
+            await validate(serializeWithInheritedNamespaces(resolvedMessages[0]));
+        }
+    }
+}
 async function loadSchemas(schemaNames) {
     const schemaPath = path.resolve(__dirname, 'schema');
     return Promise.all(schemaNames.map(async (file) => ({
@@ -90,6 +164,9 @@ export const validate = async (xml, isSoap = false) => {
         preload: [schemas[0], ...schemas.slice(1)],
     });
     if (validationResult.valid) {
+        if (isSoap) {
+            await validateSoapResolvedMessages(xml);
+        }
         return true;
     }
     throw validationResult.errors;
@@ -113,10 +190,8 @@ export const validateMetadata = async (xml, isParse = false) => {
     if (!isParse) {
         return true;
     }
-    const parser = new DOMParser();
-    const xmlDoc = parser.parseFromString(xml, 'text/xml');
-    const parserError = xmlDoc.getElementsByTagName('parsererror');
-    if (parserError.length > 0 || xmlDoc.doctype) {
+    const xmlDoc = parseXmlOrThrow(xml, 'text/xml');
+    if (xmlDoc.doctype) {
         throw new Error('ERR_EXCEPTION_VALIDATE_XML');
     }
     const idpDescriptor = xmlDoc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:metadata', 'IDPSSODescriptor');

package/build/src/validator.js

@@ -1,8 +1,7 @@
 function verifyTime(utcNotBefore, utcNotOnOrAfter, drift = [0, 0]) {
     const now = new Date();
     if (!utcNotBefore && !utcNotOnOrAfter) {
-        // show warning because user intends to have time check but the document doesn't include corresponding information
-        console.warn('You intend to have time validation however the document doesn\'t include the valid range.');
+        // No time bounds means there is nothing to enforce at this layer.
         return true;
     }
     let notBeforeLocal = null;

package/build/src/xmlParser.js

@@ -0,0 +1,18 @@
+import { DOMParser } from '@xmldom/xmldom';
+function silentFatalOnError(level, message) {
+    if (level === 'fatalError') {
+        throw new Error(String(message).trim());
+    }
+}
+export function normalizeDomParserOptions(options = {}) {
+    return {
+        ...options,
+        onError: options.onError ?? silentFatalOnError,
+    };
+}
+export function createSilentDomParser(options = {}) {
+    return new DOMParser(normalizeDomParserOptions(options));
+}
+export function parseXmlOrThrow(xml, mimeType = 'application/xml', options = {}) {
+    return createSilentDomParser(options).parseFromString(xml, mimeType);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "samlesa",
-  "version": "4.9.0",
+  "version": "5.1.0",
   "description": "High-level API for Single Sign On (SAML 2.0) baseed on samlify ",
   "main": "build/index.js",
   "keywords": [

package/types/src/api.d.ts

@@ -1,4 +1,4 @@
-import { DOMParser as dom } from '@xmldom/xmldom';
+import { DOMParser as dom, type DOMParserOptions } from '@xmldom/xmldom';
 interface Context extends ValidatorContext, DOMParserContext {
 }
 type ValidateFunction = (xml: string, isSoap?: boolean) => Promise<any>;
@@ -7,9 +7,10 @@ interface ValidatorContext {
 }
 interface DOMParserContext {
     dom: dom;
+    domParserOptions: DOMParserOptions;
 }
 export declare function getContext(): Context;
 export declare function setSchemaValidator(params: ValidatorContext): void;
-export declare function setDOMParserOptions(options?: {}): void;
+export declare function setDOMParserOptions(options?: DOMParserOptions): void;
 export {};
 //# sourceMappingURL=api.d.ts.map

package/types/src/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAKlD,UAAU,OAAQ,SAAQ,gBAAgB,EAAE,gBAAgB;CAAG;AAG/D,KAAK,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAKxE,UAAU,gBAAgB;IACxB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,UAAU,gBAAgB;IACxB,GAAG,EAAE,GAAG,CAAC;CACV;AAOD,wBAAgB,UAAU,IAAG,OAAO,CAEnC;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAE,IAAI,CAShE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,KAAK,GAAE,IAAI,CAErD"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,GAAG,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAMzE,UAAU,OAAQ,SAAQ,gBAAgB,EAAE,gBAAgB;CAAG;AAG/D,KAAK,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAKxE,UAAU,gBAAgB;IACxB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,UAAU,gBAAgB;IACxB,GAAG,EAAE,GAAG,CAAC;IACT,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAUD,wBAAgB,UAAU,IAAG,OAAO,CAEnC;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAE,IAAI,CAShE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,gBAAqB,GAAE,IAAI,CAGvE"}

package/types/src/extractor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractor.d.ts","sourceRoot":"","sources":["../../src/extractor.ts"],"names":[],"mappings":"AAMA,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC;IAEnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,MAAM,MAAM,eAAe,GAAG,cAAc,EAAE,CAAC;AA4B/C,eAAO,MAAM,kBAAkB,EAAE,eAsFhC,CAAC;AAKF,eAAO,MAAM,qBAAqB,EAAE,eAsBnC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAsBpC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,eAGvC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,eAG/C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,eAGxC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,eAAe,CAarE,CAAC;AAqMF,eAAO,MAAM,mBAAmB,EAAE,eAMjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAKF,eAAO,MAAM,iBAAiB,EAAE,eAiI/B,CAAC;AAOF,eAAO,MAAM,gBAAgB,EAAE,eAyL9B,CAAC;AAEF,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAiN/D;AASD,eAAO,MAAM,2BAA2B,EAAE,eAkZzC,CAAC;AAIF;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OAkRrE;AAKD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,OAE5C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,OAEzC;AAGD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,OAExC;AACD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,OAEjD;AACD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,OAE9C;AACD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,OAErD"}
+{"version":3,"file":"extractor.d.ts","sourceRoot":"","sources":["../../src/extractor.ts"],"names":[],"mappings":"AAMA,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC;IAEnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,MAAM,MAAM,eAAe,GAAG,cAAc,EAAE,CAAC;AA4B/C,eAAO,MAAM,kBAAkB,EAAE,eAsFhC,CAAC;AAKF,eAAO,MAAM,qBAAqB,EAAE,eAsBnC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAsBpC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,eAGvC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,eAG/C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,eAGxC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,eAAe,CAarE,CAAC;AAqMF,eAAO,MAAM,mBAAmB,EAAE,eAMjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAKF,eAAO,MAAM,iBAAiB,EAAE,eAiI/B,CAAC;AAOF,eAAO,MAAM,gBAAgB,EAAE,eAyL9B,CAAC;AAEF,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OA0N/D;AASD,eAAO,MAAM,2BAA2B,EAAE,eAkZzC,CAAC;AAIF;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,OA2QrE;AAKD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,OAE5C;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,OAEzC;AAGD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,OAExC;AACD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,OAEjD;AACD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,OAE9C;AACD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,OAErD"}

package/types/src/flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,UAAU;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAgsBD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BhG;AAED,wBAAgB,IAAI,CAAC,OAAO,KAAA,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BjD"}
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,UAAU;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAysBD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BhG;AAED,wBAAgB,IAAI,CAAC,OAAO,KAAA,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BjD"}

package/types/src/libsaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"libsaml.d.ts","sourceRoot":"","sources":["../../src/libsaml.ts"],"names":[],"mappings":"AAMA,OAAgB,EAMd,KAAK,4BAA4B,EAClC,MAAM,cAAc,CAAC;AACtB,OAAQ,KAAK,MAAM,MAAM,aAAa,CAAA;AAItC,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAkIrD;;;;GAIG;AAGH,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;CACnE;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;CAC1D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;CAC7D;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAC9D;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;CAC/D;AAED,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,KAAK,KAAA,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACvD,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC;IAC/D,yBAAyB,EAAE,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,0BAA0B,KAAK,MAAM,CAAC;IAC1K,sBAAsB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAC/D,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjF,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;IAC7D,yBAAyB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,wBAAwB,KAAK,MAAM,CAAC;IAExL,sBAAsB,EAAE,CAAC,QAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,wBAAwB,KAAK,OAAO,CAAC;IACrK,UAAU,EAAE,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,EAAE,4BAA4B,KAAK;QACzH,UAAU,EAAE,MAAM,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,MAAM,CAAC;KACtB,CAAC;IACF,gBAAgB,EAAE,CAAC,YAAY,KAAA,EAAE,YAAY,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,gBAAgB,EAAE,CAAC,IAAI,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtE,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAEnD,2BAA2B,EAAE,oBAAoB,CAAC;IAClD,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,iCAAiC,EAAE,0BAA0B,CAAC;IAC9D,wBAAwB,EAAE,iBAAiB,CAAC;IAC5C,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,6BAA6B,EAAE,sBAAsB,CAAC;CACvD;;6CA6S4C,OAAO,KAAG,MAAM;gCAhSxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAgBkB,MAAM;;;;IA6T/D;;;;;OAKG;+BACwB,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAS9E;;;;;;OAMG;IACH,eAAe;6CAC0B,GAAG,EAAE,GAAG,MAAM;IA0CvD;;;OAGG;iCAC0B;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE,GAAG,CAAC;QACjB,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,GAAG,CAAC;QACpB,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KACrF,GAAG,MAAM;2CAoE6B,MAAM,mBAAmB,MAAM;;;;;;;;;;;IAKtE;;;;;;OAMG;yBAEwB,MAAM,QAAQ,wBAAwB,QAAQ,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;6BAwUlE,MAAM,QAAQ,wBAAwB;IAyJ/D;;;;;OAKG;0BACmB,MAAM,cAAc,MAAM,GAAG,MAAM,GAAG,YAAY;IAsBxE;;;;;;;;OAQG;2CAGY,MAAM,OAChB,MAAM,eACE,MAAM,aACR,OAAO,qBACC,MAAM,oBACP,wBAAwB,GAC3C,MAAM,GAAG,MAAM;IAyBd;;;;;;;OAOG;qCAES,GAAG,eACF,MAAM,aACR,MAAM,GAAG,MAAM,oBACR,MAAM,oBACN,wBAAwB;IAoC5C;;;;SAIK;gCAEgB,MAAM,GAAG,MAAM,oBACf,GAAG,sBACD,4BAA4B;;;;IAiBjD;;;;;;OAMG;iEAEgD,MAAM;IAqEzD;;OAEG;IACH;;OAEG;gDAC0C,MAAM,SAAS,wBAAwB;;;;;;IA2GpF;;;;;OAKG;+BAC8B,GAAG,aAAa,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAmFnF;;OAEG;sBACqB,MAAM,SAAQ,OAAO;;AA8BjD,wBAAyB"}
+{"version":3,"file":"libsaml.d.ts","sourceRoot":"","sources":["../../src/libsaml.ts"],"names":[],"mappings":"AAMA,OAAgB,EAMd,KAAK,4BAA4B,EAClC,MAAM,cAAc,CAAC;AACtB,OAAQ,KAAK,MAAM,MAAM,aAAa,CAAA;AAItC,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAkIrD;;;;GAIG;AAGH,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;CACnE;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;CAC1D;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;CAC7D;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAC9D;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;CAC/D;AAED,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,KAAK,KAAA,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACvD,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC;IAC/D,yBAAyB,EAAE,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,0BAA0B,KAAK,MAAM,CAAC;IAC1K,sBAAsB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAC/D,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjF,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;IAC7D,yBAAyB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,wBAAwB,KAAK,MAAM,CAAC;IAExL,sBAAsB,EAAE,CAAC,QAAQ,KAAA,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,wBAAwB,KAAK,OAAO,CAAC;IACrK,UAAU,EAAE,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,EAAE,4BAA4B,KAAK;QACzH,UAAU,EAAE,MAAM,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,MAAM,CAAC;KACtB,CAAC;IACF,gBAAgB,EAAE,CAAC,YAAY,KAAA,EAAE,YAAY,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,gBAAgB,EAAE,CAAC,IAAI,KAAA,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtE,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpD,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAEnD,2BAA2B,EAAE,oBAAoB,CAAC;IAClD,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,iCAAiC,EAAE,0BAA0B,CAAC;IAC9D,wBAAwB,EAAE,iBAAiB,CAAC;IAC5C,4BAA4B,EAAE,qBAAqB,CAAC;IACpD,6BAA6B,EAAE,sBAAsB,CAAC;CACvD;;6CA6S4C,OAAO,KAAG,MAAM;gCAhSxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAgBkB,MAAM;;;;IA6T/D;;;;;OAKG;+BACwB,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAS9E;;;;;;OAMG;IACH,eAAe;6CAC0B,GAAG,EAAE,GAAG,MAAM;IA0CvD;;;OAGG;iCAC0B;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE,GAAG,CAAC;QACjB,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,GAAG,CAAC;QACpB,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KACrF,GAAG,MAAM;2CAoE6B,MAAM,mBAAmB,MAAM;;;;;;;;;;;IAKtE;;;;;;OAMG;yBAEwB,MAAM,QAAQ,wBAAwB,QAAQ,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;6BA4UlE,MAAM,QAAQ,wBAAwB;IAuJ/D;;;;;OAKG;0BACmB,MAAM,cAAc,MAAM,GAAG,MAAM,GAAG,YAAY;IAsBxE;;;;;;;;OAQG;2CAGY,MAAM,OAChB,MAAM,eACE,MAAM,aACR,OAAO,qBACC,MAAM,oBACP,wBAAwB,GAC3C,MAAM,GAAG,MAAM;IAyBd;;;;;;;OAOG;qCAES,GAAG,eACF,MAAM,aACR,MAAM,GAAG,MAAM,oBACR,MAAM,oBACN,wBAAwB;IAoC5C;;;;SAIK;gCAEgB,MAAM,GAAG,MAAM,oBACf,GAAG,sBACD,4BAA4B;;;;IAiBjD;;;;;;OAMG;iEAEgD,MAAM;IAqEzD;;OAEG;IACH;;OAEG;gDAC0C,MAAM,SAAS,wBAAwB;;;;;;IAiHpF;;;;;OAKG;+BAC8B,GAAG,aAAa,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAyFnF;;OAEG;sBACqB,MAAM,SAAQ,OAAO;;AA8BjD,wBAAyB"}

package/types/src/libsamlSoap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"libsamlSoap.d.ts","sourceRoot":"","sources":["../../src/libsamlSoap.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AA2F7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAAC;IAC7C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IACrC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAkKD,iBAAe,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoCpH;;;;AAED,wBAEE"}
+{"version":3,"file":"libsamlSoap.d.ts","sourceRoot":"","sources":["../../src/libsamlSoap.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AA6F7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAAC;IAC7C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IACrC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAsKD,iBAAe,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0CpH;;;;AAED,wBAEE"}

package/types/src/metadata-idp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metadata-idp.d.ts","sourceRoot":"","sources":["../../src/metadata-idp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,QAAQ,EAAE,EAAE,KAAM,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAQ,KAAK,EAAsB,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAM9E,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;CAE9D;AAKD,MAAM,CAAC,OAAO,WAAU,IAAI,EAAE,sBAAsB,eAEnD;AAED,qBAAa,WAAY,SAAQ,QAAQ;gBAC3B,IAAI,EAAE,sBAAsB;IAuHxC;;;MAGE;IACF,yBAAyB,IAAI,OAAO;IAQpC;;;;MAIE;IACF,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;IAUxD;;;;OAIG;IACH,4BAA4B,CAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;CAUhE"}
+{"version":3,"file":"metadata-idp.d.ts","sourceRoot":"","sources":["../../src/metadata-idp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,QAAQ,EAAE,EAAE,KAAM,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAQ,KAAK,EAAsB,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAM9E,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;CAE9D;AAKD,MAAM,CAAC,OAAO,WAAU,IAAI,EAAE,sBAAsB,eAEnD;AAED,qBAAa,WAAY,SAAQ,QAAQ;gBAC3B,IAAI,EAAE,sBAAsB;IAmHxC;;;MAGE;IACF,yBAAyB,IAAI,OAAO;IAQpC;;;;MAIE;IACF,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;IAUxD;;;;OAIG;IACH,4BAA4B,CAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;CAUhE"}

package/types/src/metadata-sp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metadata-sp.d.ts","sourceRoot":"","sources":["../../src/metadata-sp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,QAAQ,EAAE,EAAC,KAAK,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQxD,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;CAE7D;AAYD,KAAK,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC7C,UAAU,mBAAmB;IAC3B,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,6BAA6B,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACxD;AAqCD,MAAM,CAAC,OAAO,WAAU,IAAI,EAAE,qBAAqB,cAElD;AAED;;EAEE;AACF,qBAAa,UAAW,SAAQ,QAAQ;IAEtC;;;MAGE;gBACU,IAAI,EAAE,qBAAqB;IAmOvC;;;MAGE;IACK,sBAAsB,IAAI,OAAO;IAOxC;;;MAGE;IACK,oBAAoB,IAAI,OAAO;IAOtC;;;;MAIE;IACK,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IACrD,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM;CAmItG"}
+{"version":3,"file":"metadata-sp.d.ts","sourceRoot":"","sources":["../../src/metadata-sp.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AACF,OAAO,QAAQ,EAAE,EAAC,KAAK,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQxD,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;CAE7D;AAYD,KAAK,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC7C,UAAU,mBAAmB;IAC3B,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,6BAA6B,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACxD;AAsCD,MAAM,CAAC,OAAO,WAAU,IAAI,EAAE,qBAAqB,cAElD;AAED;;EAEE;AACF,qBAAa,UAAW,SAAQ,QAAQ;IAEtC;;;MAGE;gBACU,IAAI,EAAE,qBAAqB;IA6NvC;;;MAGE;IACK,sBAAsB,IAAI,OAAO;IAOxC;;;MAGE;IACK,oBAAoB,IAAI,OAAO;IAOtC;;;;MAIE;IACK,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IACrD,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM;CAmItG"}

package/types/src/saml2-enhancements-integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saml2-enhancements-integration.d.ts","sourceRoot":"","sources":["../../src/saml2-enhancements-integration.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EASH,oBAAoB,EACpB,OAAO,EACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACR,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACzB,MAAM,YAAY,CAAC;AAGpB;;GAEG;AACH,wBAAgB,6BAA6B,CACzC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,0BAA0B,GACzC,MAAM,CAqCR;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACvC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,wBAAwB,GACvC,MAAM,CAqBR;AAED;;GAEG;AACH,wBAAgB,oCAAoC,CAChD,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,6BAA6B,GAC5C,MAAM,CAmBR;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sBAAsB,GACrC,MAAM,CAuBR;AAkDD,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"saml2-enhancements-integration.d.ts","sourceRoot":"","sources":["../../src/saml2-enhancements-integration.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EASH,oBAAoB,EACpB,OAAO,EACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACR,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACzB,MAAM,YAAY,CAAC;AAIpB;;GAEG;AACH,wBAAgB,6BAA6B,CACzC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,0BAA0B,GACzC,MAAM,CAqCR;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACvC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,wBAAwB,GACvC,MAAM,CAqBR;AAED;;GAEG;AACH,wBAAgB,oCAAoC,CAChD,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,6BAA6B,GAC5C,MAAM,CAmBR;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sBAAsB,GACrC,MAAM,CAuBR;AAkDD,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC"}

package/types/src/schemaValidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/schemaValidator.ts"],"names":[],"mappings":"AA2FA,eAAO,MAAM,QAAQ,GAAU,KAAK,MAAM,EAAE,SAAQ,OAAe,qBAoBlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,KAAK,MAAM,EAAE,UAAS,OAAe;;;EAsD3E,CAAC"}
+{"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/schemaValidator.ts"],"names":[],"mappings":"AA4LA,eAAO,MAAM,QAAQ,GAAU,KAAK,MAAM,EAAE,SAAQ,OAAe,qBAuBlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,KAAK,MAAM,EAAE,UAAS,OAAe;;;EAoD3E,CAAC"}

package/types/src/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/validator.ts"],"names":[],"mappings":"AACA,KAAK,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvC,iBAAS,UAAU,CACf,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,KAAK,GAAE,cAAuB,GAC/B,OAAO,CAgCT;AAED,OAAO,EACL,UAAU,EACX,CAAC"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/validator.ts"],"names":[],"mappings":"AACA,KAAK,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvC,iBAAS,UAAU,CACf,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,KAAK,GAAE,cAAuB,GAC/B,OAAO,CA+BT;AAED,OAAO,EACL,UAAU,EACX,CAAC"}

package/types/src/xmlParser.d.ts

@@ -0,0 +1,5 @@
+import { DOMParser, type DOMParserOptions } from '@xmldom/xmldom';
+export declare function normalizeDomParserOptions(options?: DOMParserOptions): DOMParserOptions;
+export declare function createSilentDomParser(options?: DOMParserOptions): DOMParser;
+export declare function parseXmlOrThrow(xml: string, mimeType?: string, options?: DOMParserOptions): import("@xmldom/xmldom").Document;
+//# sourceMappingURL=xmlParser.d.ts.map

package/types/src/xmlParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xmlParser.d.ts","sourceRoot":"","sources":["../../src/xmlParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAQlE,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,gBAAqB,GAAG,gBAAgB,CAK1F;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,gBAAqB,aAEnE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,MAA0B,EAAE,OAAO,GAAE,gBAAqB,qCAEhH"}