samlp

import express from 'express'; import samlp from 'samlp'; import fs from 'fs'; import path from 'path'; const app = express(); const PORT = process.env.PORT || 3000; // Dummy user object for demonstration const dummyUser = { id: 'user123', email: 'test@example.com', name: 'Test User' }; // Minimal SAMLP configuration const samlpOptions = { issuer: 'http://localhost:3000/samlp', cert: fs.readFileSync(path.join(process.cwd(), 'some-cert.pem'), 'utf8'), // Ensure 'some-cert.pem' exists key: fs.readFileSync(path.join(process.cwd(), 'some-cert.key'), 'utf8'), // Ensure 'some-cert.key' exists getPostURL: function (audience, samlRequestDom, req, callback) { // In a real scenario, this would dynamically determine the SP's AssertionConsumerService URL // For quickstart, we'll just return a placeholder or a mock SP URL. // Usually, the `audience` from SAMLRequest can help determine the SP. console.log('SAML Request received from audience:', audience); // For a minimal example, let's assume a fixed SP URL for posting the assertion const spAcsUrl = 'http://localhost:8080/saml/acs'; // Replace with a real SP's ACS URL return callback(null, spAcsUrl); }, getUserFromRequest: function (req) { // In a real app, this would get the authenticated user from req.user or session return dummyUser; }, profileMapper: samlp.PassportProfileMapper, signatureAlgorithm: 'rsa-sha256', digestAlgorithm: 'sha256', signResponse: false, signAssertion: true }; app.get('/samlp', (req, res, next) => { // Simulate a pre-authenticated user for the IdP flow req.user = dummyUser; samlp.auth(samlpOptions)(req, res, next); }); // SAML IdP Metadata endpoint app.get('/samlp/FederationMetadata/2007-06/FederationMetadata.xml', samlp.metadata(samlpOptions)); app.listen(PORT, () => { console.log(`SAML IdP listening on port ${PORT}`); console.log('Access SAML Login Initiator via: http://localhost:3000/samlp'); console.log('Access SAML Metadata via: http://localhost:3000/samlp/FederationMetadata/2007-06/FederationMetadata.xml'); });