build(deps): bump @boxyhq/saml20 from 1.10.2 to 1.12.1 (#1001)

* build(deps): bump @boxyhq/saml20 from 1.10.2 to 1.12.1

Bumps [@boxyhq/saml20](https://github.com/boxyhq/saml20) from 1.10.2 to 1.12.1.
- [Release notes](https://github.com/boxyhq/saml20/releases)
- [Changelog](https://github.com/ory/saml20/blob/main/.release-it.json)
- [Commits](https://github.com/boxyhq/saml20/compare/1.10.2...1.12.1)

---
updated-dependencies:
- dependency-name: "@boxyhq/saml20"
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* updated saml20

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Deepak Prabhakara <deepak.prabhakara@ory.sh>
This commit is contained in:
dependabot[bot] 2025-09-15 23:49:47 +01:00 committed by GitHub
parent 8c1fddb8e3
commit c9a56026ff
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 6 additions and 7 deletions

8
package-lock.json generated
View File

@ -9,7 +9,7 @@
"version": "1.4.1", "version": "1.4.1",
"license": "Apache 2.0", "license": "Apache 2.0",
"dependencies": { "dependencies": {
"@boxyhq/saml20": "1.10.2", "@boxyhq/saml20": "1.12.1",
"daisyui": "4.12.24", "daisyui": "4.12.24",
"next": "15.5.3", "next": "15.5.3",
"react": "19.1.1", "react": "19.1.1",
@ -50,9 +50,9 @@
} }
}, },
"node_modules/@boxyhq/saml20": { "node_modules/@boxyhq/saml20": {
"version": "1.10.2", "version": "1.12.1",
"resolved": "https://registry.npmjs.org/@boxyhq/saml20/-/saml20-1.10.2.tgz", "resolved": "https://registry.npmjs.org/@boxyhq/saml20/-/saml20-1.12.1.tgz",
"integrity": "sha512-B7Z3bbgc2T3+284nqyciHeQpu4+isBITuRKeLsznHIkunXb/viakkfGJOmW78ohmtGz0P73lu6mAuQBm8ASAJA==", "integrity": "sha512-lAHJ13kTZqPgSFUuAV8+kg5As3/MoSfiEr96tNKP0sj6c6o/Sbwn6DIhUZLQRNzDtmyAu9zuQk3vdbY5BK56Xg==",
"license": "MIT", "license": "MIT",
"dependencies": { "dependencies": {
"@xmldom/xmldom": "0.9.8", "@xmldom/xmldom": "0.9.8",

View File

@ -14,7 +14,7 @@
"release": "git checkout release && git merge origin/main && release-it && git checkout main && git merge origin/release && git push origin main" "release": "git checkout release && git merge origin/main && release-it && git checkout main && git merge origin/release && git push origin main"
}, },
"dependencies": { "dependencies": {
"@boxyhq/saml20": "1.10.2", "@boxyhq/saml20": "1.12.1",
"daisyui": "4.12.24", "daisyui": "4.12.24",
"next": "15.5.3", "next": "15.5.3",
"react": "19.1.1", "react": "19.1.1",

View File

@ -34,8 +34,7 @@ async function processSAMLRequest(req: NextApiRequest, res: NextApiResponse, isP
const { id, audience, acsUrl, providerName, publicKey } = await saml.parseSAMLRequest(rawRequest, isPost); const { id, audience, acsUrl, providerName, publicKey } = await saml.parseSAMLRequest(rawRequest, isPost);
if (isPost) { if (isPost) {
const { valid } = await saml.hasValidSignature(rawRequest, publicKey, null); if (!saml.validateSignature(rawRequest, publicKey, null)) {
if (!valid) {
throw new Error('Invalid signature'); throw new Error('Invalid signature');
} }
} }