Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade xmldom from 0.4.0 to 0.5.0 #5

Closed
wants to merge 125 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
125 commits
Select commit Hold shift + click to select a range
e70b6db
v1.3.2
markstos Feb 12, 2020
9f1a481
Merge branch 'master' of github.com:bergie/passport-saml
markstos Feb 19, 2020
74fa630
v1.3.3
markstos Feb 19, 2020
bf83d23
Fix typo
willemli Apr 29, 2020
ffbd2f6
Fix multi saml strategy race conditions (#426)
stavros-wb Jul 21, 2020
aafdc36
Merge branch 'master' of github.com:bergie/passport-saml
markstos Jul 21, 2020
66bf7d6
bump version.
markstos Jul 21, 2020
8fdd087
add yarn-error.log to .gitignore
markstos Jul 21, 2020
f64cc7a
doc: announce site move.
markstos Jul 22, 2020
bb025e6
Revert "doc: announce site move." (#446)
mans0954 Aug 21, 2020
aed4a3d
Return object for XML-valued AttributeValues (#447)
mans0954 Sep 3, 2020
8a8d82b
Bump acorn from 7.1.0 to 7.4.0 (#448)
dependabot[bot] Sep 16, 2020
5abba17
Bump lodash from 4.17.15 to 4.17.20 (#449)
dependabot[bot] Sep 16, 2020
85ffa05
Update issue templates
markstos Sep 16, 2020
bfcdb78
Update issue templates
markstos Sep 16, 2020
1e6ec39
deps: bump xml-encryption to address node-forge sub-dep vuln.
markstos Sep 16, 2020
af98f36
docs: Update package.json / README to reflect site move.
markstos Sep 16, 2020
b696e58
deps: really bump xml-encryption for node-forge sub-dep upgrade to ad…
markstos Sep 16, 2020
9115a02
bump version to 1.3.5
markstos Sep 16, 2020
e0480e1
docs: remove badges broken by project rename.
markstos Sep 16, 2020
43465d6
add catch block to NameID decryption (#461)
bryan-lockhart Oct 7, 2020
7995eef
Add test for issue 459
mans0954 Oct 8, 2020
df8eb78
Add GitHub Actions as Continuos Integration provider (#463)
walokra Oct 12, 2020
384b28d
Only make an attribute an object if it has child elements
mans0954 Oct 13, 2020
cbd1bc3
Merge pull request #464 from node-saml/csh-issue-459-attr-value-regre…
mans0954 Oct 13, 2020
cbf7483
Bump xml-crypto from 1.4.0 to 1.5.3
mans0954 Oct 15, 2020
b4b7fcc
Include package-lock.json in repo
mans0954 Oct 15, 2020
69c19b8
Merge pull request #465 from node-saml/csh-issue-456-xml-crypto-upgrade
mans0954 Oct 16, 2020
026edf2
try to use curl when wget is not available (#468)
rod-stuchi Oct 22, 2020
cb39845
Merge pull request #434 from willemli/patch-1
mans0954 Oct 28, 2020
08482ad
Drop support for Node 8
walokra Oct 12, 2020
dca2556
Add PR template (#473)
cjbarth Oct 28, 2020
aa7636b
support typescript compilation
gugu Oct 26, 2020
2545286
prepublish hook
gugu Oct 26, 2020
1a57f47
use src directory instead
gugu Oct 28, 2020
e835f03
temporary make eslint return true after linting
gugu Oct 28, 2020
8c0226c
typescript: fix test running
gugu Oct 28, 2020
c81a47c
don't package src folder
gugu Oct 28, 2020
104788e
bumped xml-crypto from 1.5.3 to 2.0.0
keiferc Oct 27, 2020
dc9eb8d
chore: update package-lock.json, remove yarn.lock.
markstos Oct 28, 2020
19afcb2
migrated secondary files to typescript, add .d.ts and sourcemaps
gugu Oct 28, 2020
7da6e80
add types to cache provider
gugu Oct 28, 2020
733e865
types for return values for algorithms
gugu Oct 28, 2020
33caa06
fix returning value for signer
gugu Oct 28, 2020
4e93c90
chore: Allow mocha globals in tests.
markstos Oct 28, 2020
cc24d78
chore: version bump to 1.4.0
markstos Oct 28, 2020
756ed75
compatibility with @types/passport-saml
gugu Oct 29, 2020
bd4bc79
Merge pull request #476 from node-saml/types-passport-compatibility
gugu Oct 29, 2020
c226896
v1.4.1
markstos Oct 29, 2020
b5aab06
saml.ts switched to typescript
gugu Oct 28, 2020
decc5d6
primary files use typescript
gugu Oct 29, 2020
4c14bea
v1.4.2
markstos Oct 29, 2020
056e6dd
outdated Q library was removed
gugu Oct 29, 2020
43df9ad
validateSignature: Support XML docs that contain multiple signed node…
vandernorth Oct 29, 2020
aa4fa86
Revert "validateSignature: Support XML docs that contain multiple sig…
cjbarth Oct 29, 2020
7b71596
validateSignature: Support XML docs that contain multiple signed node…
vandernorth Oct 29, 2020
91b6d72
fix: disable esmoduleInterop setting
robcresswell Oct 30, 2020
881208b
update version of xml2js to 0.4.23, fixes #479
gugu Nov 2, 2020
a11ad61
feat(authorize-request): idp scoping provider (#428)
rob-gijsens Nov 2, 2020
8678139
Always throw error objects instead of strings (#412)
Gekkio Nov 2, 2020
0f1a414
inlineSources option for better source maps (#487)
gugu Nov 2, 2020
8046db0
Allow for use of privateKey instead of privateCert (#488)
alon85 Nov 3, 2020
29abcb8
v1.5.0
markstos Oct 30, 2020
0a9255f
strict TS types, Strategy and MultiSamlStrategy use native classes
gugu Oct 31, 2020
4382bea
as Node[] => as Attr[] in xpath response
gugu Nov 3, 2020
bfcff60
code style
gugu Nov 3, 2020
b2d5b0b
add multiSamlStrategy.d.ts to exclude for typescript
gugu Nov 3, 2020
13b491c
add multiSamlStrategy.d.ts to the package
gugu Nov 3, 2020
be111f3
v2.0.0
markstos Nov 3, 2020
c2f32c6
Add deprecation notice for privateCert; fix bug (#492)
cjbarth Nov 3, 2020
b349e4b
v2.0.1
markstos Nov 3, 2020
02c6c5a
normalize line endings before signature validation
mhassan1 Nov 5, 2020
dc1f2f0
deps: add release-it dev dep
markstos Nov 5, 2020
0da87a2
chore: bump version in package-lock.json
markstos Nov 5, 2020
02f3e09
chore: release-it Github Release support.
markstos Nov 5, 2020
711956c
Release 2.0.2
markstos Nov 5, 2020
d97d7e3
support windows line breaks in keys
gugu Nov 13, 2020
41f7807
Merge pull request #500 from node-saml/support-windows-line-breaks-in…
gugu Nov 13, 2020
3338516
Add support for prettier + eslint + watcher (#493)
cjbarth Nov 13, 2020
c5ceaca
fix(typing): multi saml stratey export (#503)
rob-gijsens Nov 19, 2020
9c9c53d
Fix typo in README (#506)
oakmac Dec 1, 2020
4dcef6b
add ts-ignore to generated type definitions for multisaml strategy
gugu Dec 4, 2020
f515f5e
run tsc when package is installed as github dependency
gugu Dec 4, 2020
f004897
Bump ini from 1.3.5 to 1.3.8
dependabot[bot] Dec 13, 2020
a625840
Merge pull request #513 from node-saml/dependabot/npm_and_yarn/ini-1.3.8
gugu Dec 13, 2020
28e481c
upgrade deps to latest versions
gugu Dec 13, 2020
a6b0042
Merge pull request #508 from node-saml/multisaml-tsignore-d-ts
gugu Dec 15, 2020
ed13176
Merge pull request #514 from node-saml/upgrade-deps
gugu Dec 15, 2020
f6329ea
docs(scoping): fix for example (#504)
rob-gijsens Dec 15, 2020
cfd08b6
fix(typing): Export Multi SAML types (#505)
echojoshchen Dec 15, 2020
29d997f
fix: derive SamlConfig from SAMLOptions (#515)
midgleyc Dec 15, 2020
915b31d
normalize signature line endings before loading signature block to xm…
mhassan1 Dec 17, 2020
51a154c
dev: add @types/xml-encryption
midgleyc Dec 19, 2020
c61cbad
Reexport SamlConfig type to solve a regression in consumer packages (…
carboneater Dec 21, 2020
9bc09b9
Generating changelog using gren
gugu Jan 7, 2021
c02cfc6
Revert "Generating changelog using gren"
gugu Jan 7, 2021
d0b71fd
Generating changelog using gren
gugu Jan 7, 2021
650d61e
correct changelog
gugu Jan 7, 2021
0c2206c
use PRs as a source for changelog
gugu Jan 7, 2021
9323c09
add more tags to PRs, remove tags without releases
gugu Jan 7, 2021
e3d9b86
Add code to use a ISO date. Set CHANGELOG generating script.
cjbarth Jan 7, 2021
e801935
regenerate changelog using ISO date format
gugu Jan 8, 2021
30ee467
correct commandline options for gren
gugu Jan 8, 2021
a74b1db
Use correct function argument list
cjbarth Jan 8, 2021
d03bc6d
Set config values for gren to be project-specific
cjbarth Jan 8, 2021
8eaf95c
Use Prettier on files modified
cjbarth Jan 8, 2021
dac23a1
Merge pull request #518 from node-saml/changelog
gugu Jan 10, 2021
5a6ca44
chore: Follow our Github release name convention.
markstos Nov 5, 2020
932da9d
Release 2.0.4
markstos Jan 19, 2021
6996cb8
Ignore `test` folder when building npm package (#526)
dosullivan557 Jan 29, 2021
c6c4510
async/await for saml.ts (#496)
gugu Jan 30, 2021
aefee33
Format code and enforce code style on PR (#527)
cjbarth Feb 3, 2021
add499c
Have build action run on PR
cjbarth Feb 3, 2021
e511c49
Fix code formatting
cjbarth Feb 3, 2021
ef175f3
Allow manual trigger of build action
cjbarth Feb 3, 2021
e4b3da7
Update readme on using multiSamlStrategy
gugu Feb 4, 2021
46c6df1
remove multisaml strategy in the old location
gugu Feb 7, 2021
6182dde
update tests to use multisamlstrategy.js from the correct place
gugu Feb 7, 2021
54809d1
Merge pull request #531 from node-saml/multisaml-strategy-readme
gugu Feb 7, 2021
54704de
async / await in cache interface (#532)
gugu Feb 10, 2021
ed4be0c
Allow for authnRequestBinding in SAML options (#529)
mhesler74 Feb 15, 2021
f1a436f
Tests use typescript (#534)
gugu Feb 19, 2021
8a1a377
remove old callback functions, tests use async/await (#545)
gugu Feb 23, 2021
30432b2
Merge remote-tracking branch 'upstream/master'
harrdou Mar 2, 2021
a85c0a6
fix: package.json & package-lock.json to reduce vulnerabilities
snyk-bot Mar 10, 2021
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
13 changes: 0 additions & 13 deletions .editorconfig

This file was deleted.

2 changes: 2 additions & 0 deletions .eslintignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
node_modules
lib
22 changes: 22 additions & 0 deletions .eslintrc.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
{
"env": {
"node": true,
"mocha": true,
"es6": false
},
"root": true,
"parser": "@typescript-eslint/parser",
"plugins": ["@typescript-eslint", "prettier"],
"parserOptions": {
"ecmaVersion": 6
},
"extends": [
"eslint:recommended",
"plugin:@typescript-eslint/eslint-recommended",
"plugin:@typescript-eslint/recommended",
"prettier"
],
"rules": {
"no-console": "warn"
}
}
43 changes: 43 additions & 0 deletions .github/ISSUE_TEMPLATE/bug-report.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
---
name: Bug report
about: Create a report to help us improve
title: "[BUG]"
labels: bug
assignees: ""
---

<!--
Thanks for submitting a bug report or featureq request to help us improve.

If you have a support question about how to use the module, no one is monitoring the issues
to answer those. Consider posting on StackOverflow instead using the "passport-saml" tag.
-->

** Spec-driven development **

This project is focused on compliance with the SAML 2.0 specification. For any bug report that
involves the SAML spec, please link to the related parts of the spec and quote the passages too.

Start here: http://saml.xml.org/saml-specifications

You might also check the spec to confirm that it doesn't address your particular bug and mention
that you found no references in the spec concerning your issue.

** Community development model **

passport-saml is maintained by a number of current users. There is no author or primary maintainer
waiting to write your tests and documentation for you. To increase the odds that your issue
is promptly dealt with, consider a pull request to address the issue that includes test coverage
and updated documentation.

**To Reproduce**

Steps to reproduce the behavior. Ideally, expressesd through an automated test.

**Expected behavior**
A clear and concise description of what you expected to happen.

**Environment**

- Node.js version:
- passport-saml version:
40 changes: 40 additions & 0 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
---
name: Feature request
about: Suggest an idea for this project
title: "[ENHANCE]"
labels: enhancement
assignees: ""
---

<!--
Thanks for submitting a bug report or featureq request to help us improve.

If you have a support question about how to use the module, no one is monitoring the issues
to answer those. Consider posting on StackOverflow instead using the "passport-saml" tag.
-->

** Spec-driven development **

This project is focused on compliance with the SAML 2.0 specification. For any bug report that
involves the SAML spec, please link to the related parts of the spec and quote the passages too.

Start here: http://saml.xml.org/saml-specifications

You might also check the spec to confirm that it doesn't address your particular bug and mention
that you found no references in the spec concerning your issue.

** Community development model **

passport-saml is maintained by a number of current users. There is no author or primary maintainer
waiting to write your tests and documentation for you. To increase the odds that your issue
is promptly dealt with, consider a pull request to address the issue that includes test coverage
and updated documentation.

**Is your feature request related to a problem? Please describe.**
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

**Describe the solution you'd like**
A clear and concise description of what you want to happen.

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.
18 changes: 18 additions & 0 deletions .github/pull_request_template.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Description

Thank you for taking the time to create a PR to support this community-maintained project. We are all volunteers here, so features are only added by contributers like you. Please also be patient while the maintainers work to review your proposed changes for quality and effacy.

Please include a _summary of the change_ and, where appropriate, _which issue is addressed_.

Your description should also include a _comment about the use-case_ for this change, including what systems you may be interfacing with that require this change. This will help future users know how this library is being used in the wild and how well supported it is.

If the change involves the SAML specification, please _include a link to the relavent part(s) of the SAML specificaiton_. Doing so speeds up the review process and helps the maintainers make sure that this project remains spec-compliant. You might start [here](https://www.oasis-open.org/standards#samlv2.0) to find the part of the specificaiton that relates to this PR.

_Please include tests._ Doing so will ensure that the changes made in this PR are not undone or otherwise corrupted by future changes.

# Checklist:

- Issue Addressed: [ ]
- Link to SAML spec: [ ]
- Tests included? [ ]
- Documentation updated? [ ]
27 changes: 27 additions & 0 deletions .github/workflows/workflow.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
name: Build Status

on:
workflow_dispatch:
push:
branches: [master]
pull_request:
branches: [master]

jobs:
build:
runs-on: ubuntu-latest

strategy:
matrix:
node-version: [10.x, 12.x, 14.x]

steps:
- uses: actions/checkout@v2
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v1
with:
node-version: ${{ matrix.node-version }}
- run: npm ci
- run: npm test
env:
CI: true
10 changes: 7 additions & 3 deletions .gitignore
Original file line number Diff line number Diff line change
@@ -1,3 +1,7 @@
node_modules/
.tern-port
.idea
lib
node_modules/
.tern-port
.idea
yarn-error.log
.DS_Store
.eslintcache
23 changes: 23 additions & 0 deletions .grenrc.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
module.exports = {
dataSource: "prs",
prefix: "",
onlyMilestones: false,
ignoreTagsWith: ["v0.32.0", "0.0.3"],
tags: "all",
groupBy: false,
changelogFilename: "CHANGELOG.md",
username: "node-saml",
repo: "passport-saml",
template: {
release: function (placeholders) {
let dateParts = placeholders.date.split("/");
let placeholdersDate = new Date(
Number(dateParts[2]),
Number(dateParts[1]) - 1,
Number(dateParts[0])
);
let isoDateString = placeholdersDate.toISOString().split("T")[0];
return `## ${placeholders.release} (${isoDateString})\n${placeholders.body}`;
},
},
};
9 changes: 9 additions & 0 deletions .mocharc.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
{
"diff": true,
"extension": "spec.ts",
"package": "./package.json",
"reporter": "spec",
"require": ["choma", "ts-node/register"],
"files": "test/**/*.spec.ts",
"watch-files": "test/**/*.spec.ts"
}
4 changes: 4 additions & 0 deletions .prettierignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
# Ignore artifacts:
node_modules
lib
package-lock.json
3 changes: 3 additions & 0 deletions .prettierrc.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
{
"printWidth": 100
}