mocksaml/pages/api/saml/auth.ts

import { createHash } from 'crypto';
import config from 'lib/env';
import type { NextApiRequest, NextApiResponse } from 'next';
import type { User } from 'types';
import {
  createResponseForm,
  createResponseXML,
  fetchPrivateKey,
  fetchPublicKey,
  signResponseXML,
} from 'utils';

export default async function handler(req: NextApiRequest, res: NextApiResponse) {
  if (req.method === 'POST') {
    const email = req.body.email;

    if (!email.endsWith('@example.com') && !email.endsWith('@example.org')) {
      res.status(403).send(`${email} denied access`);
    }

    const id = createHash('sha256').update(email).digest('hex');

    const user: User = {
      id,
      email,
      firstName: id,
      lastName: id,
    };

    const xml = await createResponseXML({
      idpIdentityId: config.entityId,
      audience: req.body.audience,
      acsUrl: req.body.acsUrl,
      samlReqId: req.body.id,
      user: user,
    });

    const signingKey = fetchPrivateKey();
    const publicKey = fetchPublicKey();
    const xmlSigned = await signResponseXML(xml, signingKey, publicKey);

    const encodedSamlResponse = Buffer.from(xmlSigned).toString('base64');

    const html = createResponseForm(req.body.relayState, encodedSamlResponse, req.body.acsUrl);

    res.send(html);
  } else {
    res.status(405).send(`Method ${req.method} Not Allowed`);
  }
}