Commit Graph

17 Commits

Author SHA1 Message Date
dependabot[bot]
c9a56026ff
build(deps): bump @boxyhq/saml20 from 1.10.2 to 1.12.1 (#1001)
* build(deps): bump @boxyhq/saml20 from 1.10.2 to 1.12.1

Bumps [@boxyhq/saml20](https://github.com/boxyhq/saml20) from 1.10.2 to 1.12.1.
- [Release notes](https://github.com/boxyhq/saml20/releases)
- [Changelog](https://github.com/ory/saml20/blob/main/.release-it.json)
- [Commits](https://github.com/boxyhq/saml20/compare/1.10.2...1.12.1)

---
updated-dependencies:
- dependency-name: "@boxyhq/saml20"
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* updated saml20

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Deepak Prabhakara <deepak.prabhakara@ory.sh>
2025-09-15 23:49:47 +01:00
Deepak Prabhakara
0ad3b3bfac
moved parsing of saml request to saml20 lib (#486) 2024-02-04 13:35:59 +00:00
Deepak Prabhakara
7ad7ec0186
fixed namespace login (#473) 2024-01-21 01:01:09 +00:00
Deepak Prabhakara
d18cf70c47
bypass validation for GET request until we figure out how to exchange the public key with the SP (#159) 2023-03-24 23:01:42 +00:00
Deepak Prabhakara
929fac62dd
check for missing signature and throw appropriate error (#80) 2022-10-12 19:11:50 +01:00
Deepak Prabhakara
331c3cf318
Switch to saml20 (#21)
* Use boxyhq/saml20

* use sign from saml20

* cleaned up GetKeyInfo

* cleaned up getPublicKeyPemFromCertificate

* cleaned up node-forge

* use hasValidSignature from saml20

* cleanup and update saml20 to the beta version

* throw an error if signature is not valid

* updated saml20
2022-04-26 18:02:12 +01:00
Kiran K
9bc55ea7f0
Validate AuthnRequest signature (#11)
* Validate AuthnRequest signature skelton

* Code refactor: Move the base64decode to common method

* wip

* Add signature validation

* Read the keys from config

* Lock dep version

Co-authored-by: Deepak Prabhakara <deepak@boxyhq.com>
2022-03-02 21:06:04 +00:00
Aswin V
cc68eca2f8 Handle POST binding 2022-02-24 22:06:25 +05:30
Kiran
9b86ea8b2e Code cleanup 2022-02-23 19:18:20 +05:30
Aswin V
da494e066a Use 302 redirect 2022-02-22 15:50:13 +05:30
Aswin V
6f9bab1969 Redirect to login after req parsing 2022-02-22 13:46:54 +05:30
Aswin V
4022901ea9 Add prettier config and format files 2022-02-22 11:06:06 +05:30
Aswin V
e25bb86413 parse SAML req 2022-02-22 11:05:42 +05:30
Kiran
631a3b6884 Fix the signing -wip 2022-02-21 21:37:39 +05:30
Kiran
b53c3b41b7 Fix the signing -wip 2022-02-21 21:06:25 +05:30
Kiran
aa76970fe7 cleanup util 2022-02-21 20:01:47 +05:30
Kiran
aaa007f005 Create saml response 2022-02-21 11:22:12 +05:30