Use node-saml implementation with sender-vouches

gregorwolf · Jan 21, 2024 · 87589d0 · 87589d0
1 parent f5052af
commit 87589d0
Show file tree

Hide file tree

Showing 3 changed files with 90 additions and 41 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -26,7 +26,7 @@
     "helmet": "^7.1.0",
     "passport": "^0.7.0",
     "passport-azure-ad": "latest",
-    "saml": "^3.0.1",
+    "saml": "https://github.com/skat/node-saml.git",
     "sqlite3": "^5.1.7"
   },
   "devDependencies": {

diff --git a/srv/saml-service.js b/srv/saml-service.js
@@ -2,7 +2,7 @@ const cds = require("@sap/cds");
 const LOG = cds.log("saml-service");
 
 const fs = require("fs");
-var saml = require("saml").Saml20; // or Saml11
+var saml = require("saml").Saml11; // Saml20 or Saml11
 
 module.exports = class SamlService extends cds.Service {
   init() {
@@ -11,7 +11,9 @@ module.exports = class SamlService extends cds.Service {
       key: fs.readFileSync("./certificates/idp.example.com-key.pem").toString(),
       issuer: "https://idp.example.com",
       lifetimeInSeconds: 600,
+      offset: 60,
       audiences: "http://A4H",
+      subjectConfirmationMethod: "sender-vouches",
       attributes: {
         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name":
           "Gregor Wolf",