hanzoai/passport-saml
2
0
Fork 0
mirror of https://github.com/hanzoai/passport-saml.git synced 2026-09-24 17:01:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
686 Commits 1 Branch 82 Tags
master
Commit Graph
84 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark StosbergandGitHub 673330ce7a docs: move history note to the bottom and expand it. (#708) 2022-06-27 09:11:03 -04:00
Mark Stosberg 3b77be2674 internal: configure Github Issue chooser 2021-03-30 10:21:32 -04:00
Mark Stosberg 62afa852cd Create of Code of Conduct 
This is the standard Code of Conduct that Github recommends and I endorse. It's based on this, which is in turn based on Mozilla policies.

https://www.contributor-covenant.org/version/2/0/code_of_conduct/
 2021-03-29 09:15:18 -04:00
Mark Stosberg a4423c72d4 Release 2.0.4 2021-01-19 15:20:40 -05:00
Mark Stosberg d9725bb613 chore: Follow our Github release name convention. 2021-01-19 14:48:42 -05:00
Mark Stosberg 6c6d9232ab Release 2.0.2 2020-11-05 11:15:05 -05:00
Mark Stosberg bef47c2053 chore: release-it Github Release support. 2020-11-05 11:12:02 -05:00
Mark Stosberg 091e14e1fe chore: bump version in package-lock.json 
(should have been done earlier).
 2020-11-05 10:53:47 -05:00
Mark Stosberg b30710a0b1 deps: add release-it dev dep 2020-11-05 10:53:29 -05:00
Mark Stosberg c5b7829ab7 v2.0.1 2020-11-03 13:15:00 -05:00
Mark Stosberg d6d4474a2b v2.0.0 2020-11-03 11:15:54 -05:00
Mark Stosberg 176501129c v1.5.0 2020-11-03 09:42:13 -05:00
Mark Stosberg cddac9fb27 v1.4.2 2020-10-29 11:52:11 -04:00
Mark Stosberg 839492211a v1.4.1 2020-10-29 11:37:27 -04:00
Mark Stosberg ff76dc27cd chore: version bump to 1.4.0 2020-10-28 15:39:14 -04:00
Mark Stosberg 5fba271cba chore: Allow mocha globals in tests. 2020-10-28 15:37:35 -04:00
Mark Stosberg 371faa2f8a chore: update package-lock.json, remove yarn.lock. 2020-10-28 14:02:40 -04:00
Mark Stosberg d523da8e57 docs: remove badges broken by project rename. 2020-09-16 12:38:26 -04:00
Mark Stosberg 8da0b91d16 bump version to 1.3.5 2020-09-16 12:36:05 -04:00
Mark Stosberg 40356634c6 deps: really bump xml-encryption for node-forge sub-dep upgrade to address vuln. 2020-09-16 12:34:31 -04:00
Mark Stosberg 1782ae2056 docs: Update package.json / README to reflect site move. 2020-09-16 12:30:15 -04:00
Mark Stosberg 1527785100 deps: bump xml-encryption to address node-forge sub-dep vuln. 2020-09-16 12:30:15 -04:00
Mark StosbergandGitHub cf65cdfb30 Update issue templates 
Fix duplicate bug report templates.
 2020-09-16 12:22:05 -04:00
Mark StosbergandGitHub e071d5bbf6 Update issue templates 2020-09-16 12:20:25 -04:00
Mark Stosberg a8d6d5c6cc doc: announce site move. 2020-07-22 10:16:34 -04:00
Mark Stosberg c4dd4ba492 add yarn-error.log to .gitignore 2020-07-21 14:58:58 -04:00
Mark Stosberg 129e6c30d8 bump version. 2020-07-21 14:58:06 -04:00
Mark Stosberg 230e283dc5 Merge branch 'master' of github.com:bergie/passport-saml 2020-07-21 14:53:42 -04:00
Mark Stosberg 1f2dcd8313 v1.3.3 2020-02-19 10:01:54 -05:00
Mark Stosberg 50c156dcfb Merge branch 'master' of github.com:bergie/passport-saml 2020-02-19 09:58:30 -05:00
Mark Stosberg 1d8849701c v1.3.2 2020-02-12 14:55:57 -05:00
Mark StosbergandGitHub f5dff7246c Revert "convert privateCert to PEM for signing" (#421) 
* Revert "add documentation on privateCert options"

This reverts commit 44e739b59d.

* Revert "convert private cert to pem for signing"

This reverts commit 708b526b50.
 2020-02-12 14:46:14 -05:00
Mark Stosberg 164bc93a70 deps: bump yarn.lock to match package.json 2020-01-28 17:08:52 -05:00
Mark Stosberg d75c37e2d9 BugFix: Quit deleting 'name' option passed. 
Fixes #296
 2020-01-24 14:57:43 -05:00
Mark StosbergandGitHub 00c2000ffd add Node support policy to README 2019-10-25 13:51:32 -04:00
Mark Stosberg 1358803b32 Merge branch 'fix/validate-signature-in-redirect' 2019-10-23 20:35:32 -04:00
Mark Stosberg 53e7363567 refactor: replace 'self = this' with arrow functions 
Just modernizing the code some.
 2019-10-23 20:33:45 -04:00
Mark Stosberg dd1699ac04 Drop support for Node 6. 
It has been EOL'ed.
 2019-10-01 13:31:15 -04:00
Mark Stosberg 3ba244d285 bump version to 1.2.0 2019-09-12 13:30:38 -04:00
Mark Stosberg 16fb659906 v1.1.0: bump for release 2019-05-10 17:14:58 -04:00
Mark Stosberg 48ac6558ef rename comparisonType to RACComparison 
- 'comparisonType' is too generic.
 - Also, document in the main README.
 2019-03-26 14:28:52 -04:00
Mark Stosberg 98f1be76ba deps: bump deps 
Some deps had warnings about being outdated.
 2019-03-12 14:11:54 -04:00
Mark Stosberg d2c89947fc Drop support for Node 4. It is EOLed. 2018-12-02 11:02:16 -05:00
Mark Stosberg 562a21343b Add yarn.lock. 2018-12-02 10:49:52 -05:00
Mark Stosberg 677424cf2f bump version to v1.0.0. 2018-12-02 10:46:54 -05:00
Mark Stosberg 25ac94e37d Correct typo in README. Fixes #303. 2018-09-29 20:51:40 -04:00
Mark Stosberg f8140aa6bc start to use the debug module. 
So far, we have extra debugging for validatePostRespose when
DEBUG="passport-saml" is set the environment.
 2018-08-14 14:22:24 -04:00
Mark Stosberg 32f1a21c7c v0.34.0: release 2018-08-14 10:40:23 -04:00
Mark Stosberg 966b97a54e internal: provide unique failure messages for invalid signatures. Fixes #146 
Before, there were 6 different cases in which "Invalid Signature" could
be returned, making it hard to debug which case had been triggered.

Now we return a unique message in each case. For improvement backwards
compatibility, all cases still contain the string "Invalid signature",
so code that was checking for that regex will be fine.

If code was checking for the exact string "Invalid Signature", it will
need to be updated.
 2018-08-14 10:37:58 -04:00
Mark Stosberg 2de3528f30 package.json: bump version to 0.33.0 2018-02-16 14:59:18 -05:00
Mark Stosberg 8f1fe3269b docs: mention that disableRequestAuthnContext helps with AD FS 
Also, clarify that 'cert:' is  for the signature cert, not the
encryption certificate.
 2018-02-16 14:57:42 -05:00
Mark Stosberg 6e2418bae0 New Feature: allow customizing the name of the strategy. 
Using this option, you instantiate the strategy multiple times with
different configurations.
 2018-02-16 14:56:50 -05:00
Mark Stosberg 3165135d75 bump version to v0.32.1 2018-01-03 14:31:32 -05:00
Mark Stosberg be55ed383a README: link to where our Changes are documented. 2018-01-03 14:30:41 -05:00
Mark Stosberg 16ab443d13 jshint: fix jshint violation. 2017-11-01 13:00:20 -04:00
Mark Stosberg 2ba2565a77 v0.31.0 release 2017-11-01 11:02:13 -04:00
Mark Stosberg 94f02555c3 Merge branch 'master' of github.com:bergie/passport-saml 2017-11-01 11:00:41 -04:00
Mark Stosberg 086607434a README: update link description for ADFS docs. 2017-11-01 10:57:27 -04:00
Mark Stosberg 073b9db03b v0.30.0 2017-10-12 06:42:08 -04:00
Mark Stosberg aa4a6e2870 Ignore .tern-port files 2017-10-12 06:41:16 -04:00
Mark Stosberg 305afbd319 BugFix: Fail gracefully when SAML Response is invalid. Fixes #238 
Before, given junk input, validatePostResponse would fail with:

   TypeError: Cannot read property 'documentElement' of null

Now we'll fail with:

    SAMLResponse is not valid base64-encoded XML

To make this work, we primarily just needed to as a simple additional error check,
but to throw the error properly, we needed to move a bit of logic into
a nearby promise, but keeping some variable definitions in the outer
scope where they continue to be expected.
 2017-10-10 17:00:58 -04:00
Mark Stosberg a780d0707c docs: Improve docs for privateKey format. Ref #230 2017-10-10 16:25:17 -04:00
Mark Stosberg 0d4647979c Drop support for Node versions < 4. 
They are not supported upstream and we were having problems with our
dependencies having already dropped support.
 2017-10-10 14:58:20 -04:00
Mark Stosberg 8980d25729 v0.20.2 2017-10-10 13:28:34 -04:00
Mark Stosberg 83a26d6ae3 Update dependencies to be current. 
Also, update "license" field to be current syntax.

The old "licenses" structure is deprecated.
Reference: https://docs.npmjs.com/files/package.json
 2017-10-10 13:17:09 -04:00
Mark Stosberg 0704821e1a Update devDeps to address security issues with old versions. 2017-10-10 13:04:15 -04:00
Mark Stosberg 663db184b8 v0.20.1 2017-10-10 12:55:44 -04:00
Mark Stosberg b76cd1fa4d Merge branch 'master' of github.com:bergie/passport-saml 2017-10-10 12:52:57 -04:00
Mark StosbergandGitHub 42eb8f69f0 Merge pull request #216 from alvinward/master 
Add support for ProviderName attribute
 2017-10-09 15:48:08 -04:00
Mark StosbergandGitHub c30df53b93 Merge branch 'master' into master 2017-10-09 15:47:43 -04:00
Mark Stosberg 011d0758c5 v.0.20.0 2017-10-09 15:31:07 -04:00
Mark StosbergandGitHub 92f1047faf Merge pull request #202 from cjbarth/readme-badges 
Add badges to readme
 2017-10-09 15:12:47 -04:00
Mark StosbergandGitHub ff41c29d4c Merge pull request #133 from markstos/patch-1 
Update README to clarify that saml.cert requires a PEM-encoded x509 c…
 2017-10-09 15:10:10 -04:00
Mark StosbergandGitHub 4b3e9cb4b2 Merge branch 'master' into patch-1 2017-10-09 15:09:50 -04:00
Mark Stosberg 691122e02d deps: bump xml-encryption version from 0.10 to 0.11.0 
The primary change in xml-encryption between versions was that
xml-encryption bumped it's own dependencies to address a potential
security issue.

xml-encryption no longer supports Node 0.8.0, so we need to bump our
Node version as well.

Only officially supported Node.js versions can be expected to be
supported here.
 2017-10-09 15:03:07 -04:00
Mark Stosberg a84a722aaf test: refactor: re-use certificate variable instead of copy/pasting whole cert. 
copy/pasting a large chunk of encrypted text throughout the test file
was error prone.

Instead, we use a much shorter variable name for for the chunk.
 2017-10-09 11:34:49 -04:00
Mark Stosberg 648926972e test: refactor: Better organize validatePostResponse tests 
Before, these tests were spread out in 3 sub-sections. One was
not labeled and the other two were not labeled as being for
validatePostResponse.

Now, more tests for this function are grouped together and clearly
labeled, more consistent with how other tests in the file are handled.
 2017-10-09 11:16:44 -04:00
Mark Stosberg c9d160595b jslint: Add expected comma 2017-10-09 11:16:26 -04:00
Mark Stosberg 67029ae6ae bump version to v0.16.2 2017-10-07 08:47:47 -04:00
Mark Stosberg 15ac857fa3 README: improve config option formatting. 2017-10-07 08:46:45 -04:00
Mark Stosberg 4d97ffcb79 README: link to related sections and clarify decryptionCert docs 
Before it wasn't clear whether `decryptionCert` referred to
`decryptionPvk` or the public cert it is paired with. Adding the word
"public" clarifies that.
 2017-10-05 17:02:14 -04:00
Mark Stosberg 01611572d1 Fixes #170: Clarify that the certificate are looking for is: 
1. public, not private
2. a signing certificate and not an encryption certificate
 2016-12-30 10:12:57 -05:00
Mark Stosberg 0f0fc47ec4 Clarify that cert value should a single line. Fixes #134 
Format was confirmed by checking test data here:
https://github.com/bergie/passport-saml/blob/master/test/tests.js
 2016-01-14 13:34:43 -05:00
Mark Stosberg 7f44166cfd Update README to clarify that saml.cert requires a PEM-encoded x509 certificate. 2016-01-14 13:12:34 -05:00