passport-saml-encrypted - npm Package Compare versions

Comparing version 0.1.1 to 0.1.2

lib/saml.js

@@ -308,2 +308,7 @@ var zlib = require('zlib');
 
+      var expires = new Date(self.getElement(assertion, 'Conditions')[0]['$'].NotOnOrAfter);
+      if (expires < Date.now()) {
+        return callback(new Error('Expired SAML assertion'), null, false);
+      }
+
       profile = {};
@@ -315,2 +320,7 @@ var issuer = self.getElement(assertion, 'Issuer');
 
+      var authnStatement = self.getElement(assertion, "AuthnStatement");
+      if (authnStatement.constructor === Array && authnStatement.length > 0 && authnStatement[0]['$']) {
+        profile._authnStatement = authnStatement[0]['$'];
+      }
+      
       var subject = self.getElement(assertion, 'Subject');
@@ -317,0 +327,0 @@ if (subject) {

package.json

 {
   "name": "passport-saml-encrypted",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "A Passport strategy for handling encrypted SAML authentication responses",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

25228

increased by1.87%

Lines of code

434

increased by1.88%

No dependency changes