Comments (5)
yes, it's supported:
samlp.auth({
// ...
encryptionPublicKey: fs.readFileSync(__dirname + '/your_rsa.pub'), // a valid RSA public key
encryptionCert: fs.readFileSync(__dirname + '/your_public_cert.pem') // a valid x509 certificate encoded as PEM
})
from node-samlp.
@mcastany , could you let me know whether encryption of SAML-Response is supported and expected to work?
from node-samlp.
Awesome, this is helpful 👍 Thanks @siacomuzzi
from node-samlp.
@siacomuzzi I'm trying to implement an IdP using this library. My understanding is that encryptionPublicKey
is the SP's public key which is used to encrypt the request, so that only the SP could decrypt it using it's private key.
Is that true?
Also, what is the purpose of encryptionCert
? Thanks!
from node-samlp.
encryptionPublicKey
: RSA public key used by the SAML IdP to encrypt the SAMLResponseencryptionCert
: a x509 certificate encoded as PEM used by the SAML IdP to embedded it in the SAMLResponse (inside<X509Data><X509Certificate>
node)
app.get('/samlp', samlp.auth({
encryptionPublicKey: fs.readFileSync(__dirname + '/idp_encrypt_rsa.pub'), // '-----BEGIN PUBLIC KEY-----',
encryptionCert: fs.readFileSync(__dirname + '/idp_encrypt_public_cert.pem'), // '-----BEGIN CERTIFICATE-----',
// ...
}));
Unfortunately, this module does not support encrypted SAMLRequests yet. Could you please explain me your requirements? A SAMLRequest usually doesn't contain much private data so there is little need to encrypt the request itself.
from node-samlp.
Related Issues (20)
- update xml-crypto dependency HOT 3
- Update saml dependency HOT 1
- Current backwards compatability checks are preventing dependencies from being updated. HOT 2
- Math.random() is not cryptographically secure HOT 1
- Add Organization Details to samlp.metadata
- Request for help
- Dynamically Set Audience
- Uncaught Exception Error in samlp.logout
- Update xml-crypto dependency to solve npm audit issue 1769 HOT 1
- Found Vulnerability ' Improper Input Validation ' and ' Prototype Pollution ' on Synk.io HOT 3
- Npm audit advisories found HOT 1
- Dependency querystring is deprecated. URLSearchParams API should be used instead HOT 1
- Function is not defined error HOT 1
- Request for upgrading the ejs package to the patched version 3.1.10
- Missing saml: prefix on Issuer and NameID tags in LogoutRequest HOT 1
- redirectEndpointPath documentation HOT 1
- 401 improvement HOT 1
- SAML assertion signing using HSM
- NPM Release for 3.4.2? HOT 1
- Can I get an example code
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from node-samlp.