saml2-js - npm Package Compare versions

Comparing version 1.1.0 to 1.2.0

lib-js/saml2.js

@@ -474,3 +474,3 @@ // Generated by CoffeeScript 1.7.1
 
-parse_authn_response = function(saml_response, sp_private_key, idp_certificates, allow_unencrypted, cb) {
+parse_authn_response = function(saml_response, sp_private_key, idp_certificates, allow_unencrypted, ignore_signature, cb) {
   var decrypted_assertion, user;
@@ -498,5 +498,5 @@ user = {};
       decrypted_assertion = (new xmldom.DOMParser()).parseFromString(result);
-      if (!_.some(idp_certificates, function(cert) {
+      if (!(ignore_signature || _.some(idp_certificates, function(cert) {
         return check_saml_signature(result, cert);
-      })) {
+      }))) {
         return cb_wf(new Error("SAML Assertion signature check failed! (checked " + idp_certificates.length + " certificate(s))"));
@@ -634,3 +634,3 @@ }
               response.type = 'authn_response';
-              return parse_authn_response(saml_response, _this.private_key, identity_provider.certificates, options.allow_unencrypted_assertion, cb_wf);
+              return parse_authn_response(saml_response, _this.private_key, identity_provider.certificates, options.allow_unencrypted_assertion, options.ignore_signature, cb_wf);
             case saml_response.getElementsByTagNameNS(XMLNS.SAMLP, 'LogoutResponse').length !== 1:
@@ -637,0 +637,0 @@ if (!check_status_success(saml_response)) {

package.json

 {
   "name": "saml2-js",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "SAML 2.0 node helpers",
@@ -5,0 +5,0 @@ "author": "Clever",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

114444

increased by0.06%

No dependency changes