samlify

samlify copied to clipboard

Problem with Auth0 redirect logout page

1

Hi! I am calling createLogoutRequest as is set in tests, but when Auth0 receives the request it redirects to the issuer and returns the error "No active session(s) found matching...

agonzaleznutra

octet string builder

2

Adds `octetStringBuilder` to libsaml to DRY up the signature alg code. The octet string is needed in four places: creating and verifying the signature for the Redirect and SimpleSign bindings....

mastermatt

Sometimes a SAML server may not have a value for a particular attribute-user combination, in which case it may return an empty tag: ```xml ``` In this case, the current...

sambostock

This should address [#437](https://github.com/tngan/samlify/issues/437) I added a test case to prove it works and my changes should be non-intrusive on calls without AssertionConsumerServiceIndex. It seems this throws a warning "metadata...

stjeffrey

Also posted this on the nextjs issues board but as typically its a bit slow to get a response I wanted to put it out here to see if anyone...

boncz92

WantsAssertionsSigned Property Not Validated By SP

2

Whilst I'm testing my project I have noticed that the SP doesn't check if the IDP has signed the assertion in the SAMLResponse as per the SP's metadata. Can you...

williwlwilliwll

Is samlify IdP suitable for use in production?

3

Hi, @tngan and the samlify community. I already have an auth service written in NestJS where users can sign up and sign in, recover their passwords and verify an email....

ghost

Invalid XML attributes due to characters not escaped

2

For example, a `&` in ACS URL is not replaced by `&` in the `loginRequestRedirectURL` function so the generated XML is not valid and authentication fails. More important, this could...

jer-sen

fix: update validator to use samlify-validator-js

5

@authenio/samlify-node-xmllint has a built in memory leak every time you run the SAML schema validator. It was related to a library it depends on, node-xmllint, where the source code does...

ivarconr

Documentation says the extracted result has an `attribute` property. Upon inspection, it appears this an `attributes` property.

pauldraper