Socket
Socket
Sign inDemoInstall

passport-saml

Package Overview
Dependencies
Maintainers
4
Versions
68
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

passport-saml - npm Package Compare versions

Comparing version 0.33.0 to 0.34.0

10

lib/passport-saml/saml.js

@@ -586,3 +586,3 @@ var zlib = require('zlib');

// potential risk vector for signature scope issues, so treat this as an invalid signature
throw new Error('Invalid signature');
throw new Error('Invalid signature: multiple assertions');
}

@@ -616,3 +616,3 @@

!self.validateSignature(decryptedXml, decryptedAssertions[0], certs))
throw new Error('Invalid signature');
throw new Error('Invalid signature from encrypted assertion');

@@ -645,3 +645,3 @@ self.processValidlySignedAssertion(decryptedAssertions[0].toString(), inResponseTo, callback);

if (self.options.cert && !validSignature) {
throw new Error('Invalid signature');
throw new Error('Invalid signature: NoPassive');
}

@@ -678,3 +678,3 @@ return callback(null, null, false);

if (self.options.cert && !validSignature) {
throw new Error('Invalid signature');
throw new Error('Invalid signature: No response found');
}

@@ -923,3 +923,3 @@ var logoutResponse = doc.LogoutResponse;

if (self.options.cert && !self.validateSignature(xml, dom.documentElement, certs)) {
return callback(new Error('Invalid signature'));
return callback(new Error('Invalid signature on documentElement'));
}

@@ -926,0 +926,0 @@

{
"name": "passport-saml",
"version": "0.33.0",
"version": "0.34.0",
"license" : "MIT",

@@ -5,0 +5,0 @@ "keywords": [

@@ -242,6 +242,19 @@ Passport-SAML

A single instance of passport-saml will only authenticate users against a single identity provider. If you have a use case where different logins need to be routed to different identity providers, you can create multiple instances of passport-saml, and either dispatch to them with your own routing code, or use a library like https://www.npmjs.org/package/passports.
A single instance of passport-saml will only authenticate users against a
single identity provider. If you have a use case where different logins need
to be routed to different identity providers, you can create multiple instances
of passport-saml, and either dispatch to them with your own routing code, or
use a library like https://www.npmjs.org/package/passports.
To create multiple instances of `passport-saml` yourself, you'll end use calling
`passport.use()` multiple times with a unique name for each strategy. You
either need to pass the custom strategy name as the first argument to
`passport.use`, or use the `name` option described above.
Each instance will need its own callbackUrl as well it's own set of routes
to handle the outbound redirection, the inbound callback URL and displaying
the metadata.
### Is there an example I can look at?
Gerard Braad has provided an example app at https://github.com/gbraad/passport-saml-example/

Sorry, the diff of this file is too big to display

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc