npmpackage.info

Gathering detailed insights and metrics for passport-wsfed-saml2-inlinexmlcrypto

passport-wsfed-saml2-inlinexmlcrypto - 0.5.0-0 | npmpackage.info

passport-wsfed-saml2-inlinexmlcrypto

passport strategy for both WS-fed and SAML2 protocol

0.5.0-0

MIT

JavaScript

5.6

Installations

npm install passport-wsfed-saml2-inlinexmlcrypto

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>= 0.6.0

NPM Version

1.2.32 Pull Requests

Open

21

Total

130

Closed

29

Merged

80

Issues

Open

21

Total

56

Closed

35

Releases

Update .npmignore

v4.5.1

Updated on Jun 16, 2021

v4.5.0 Add Destination and AssertionConsumerServiceURL as SAML request template variables

v4.5.0

Updated on Jun 09, 2021

v4.4.0 Use @auth0/xmldom

v4.4.0

Updated on Mar 02, 2021

v4.3.0 Add support for modern encryption algorithms

v4.3.0

Updated on Feb 03, 2021

Support Node 10

v4.0.0

Updated on Jun 14, 2019

Handle exception when requestTemplate is malformed between placeholders (#90)

v3.0.12

Updated on Jul 24, 2018

View All 10 releases

Languages

JavaScript

EJS

JavaScript (99.55%)

EJS (0.45%)

Developer

auth0

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

49 Stars

71 Commits

62 Forks

86 Watchers

31 Branches

63 Contributors

Updated on May 20, 2025

Maintainers

View All 63 Contributors

Package Meta Information

Latest Version

0.5.0-0

Package Id

passport-wsfed-saml2-inlinexmlcrypto@0.5.0-0

Size

75.94 kB

NPM Version

1.2.32

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

passport xml2js xmldom xtend ejs

Dev Dependencies

chai express mocha request xmldom cheerio xpath xtend moment saml wsfed should samlp

Passport-wsfed-saml2

This is a ws-federation protocol + SAML2 tokens authentication provider for Passport.

The code was originally based on Henri Bergius's passport-saml library.

Passport-wsfed-saml2 has been tested to work with both Windows Azure Active Directory / Access Control Service and with Microsoft Active Directory Federation Services.

Installation

$ npm install passport-wsfed-saml2

Usage

Configure strategy

This example utilizes a development namespace (auth10-dev) on Windows Azure Access Control Service and is using Google as the only identity provider configured for the sample application.

1passport.use(new wsfedsaml2(
2  {
3    path: '/login/callback',
4    realm: 'urn:node:app',
5    homeRealm: '', // optionally specify an identity provider to avoid showing the idp selector
6    identityProviderUrl: 'https://auth10-dev.accesscontrol.windows.net/v2/wsfederation',
7    cert: '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'
8  },
9  function(profile, done) {
10    findByEmail(profile.email, function(err, user) {
11      if (err) {
12        return done(err);
13      }
14      return done(null, user);
15    });
16  })
17));

Provide the authentication callback

You need to provide a route corresponding to the path configuration parameter given to the strategy:

1app.post('/login/callback',
2  passport.authenticate('wsfed-saml2', { failureRedirect: '/', failureFlash: true }),
3  function(req, res) {
4    res.redirect('/');
5  }
6);

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

6

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

1

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.6

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More