auth0/node-saml issues and pull requests

#102 - fix: for webpack

Pull Request - State: open - Opened by adamjmcgrath 2 months ago

#101 - [Snyk] Upgrade @xmldom/xmldom from 0.7.13 to 0.8.10

Pull Request - State: open - Opened by hzalaz 10 months ago

#100 - [Snyk] Upgrade xpath from 0.0.5 to 0.0.34

Pull Request - State: open - Opened by hzalaz 10 months ago

#99 - The readme example returns undefined

Issue - State: open - Opened by ajinvise over 1 year ago - 3 comments

#97 - [Feature] Allow Node elements to be used as AttributeValue

Issue - State: open - Opened by mandalornl almost 2 years ago

#96 - Shift NotBefore -1 day to avoid timing issues when system clocks are not perfectly in sync

Issue - State: open - Opened by piejanssens almost 2 years ago

#95 - OpsLevel repo catalog - upload opslevel.yml

Pull Request - State: closed - Opened by sre-57-opslevel[bot] over 2 years ago

#94 - chore(release): 3.0.1

Pull Request - State: closed - Opened by madhuriravindramohan-okta over 2 years ago

#93 - fix: update async and moment dependencies to fix reported CVEs

Pull Request - State: closed - Opened by madhuriravindramohan-okta over 2 years ago

#92 - fix: update dependencies to fix reported CVEs. (CVE-2021-43138, CVE-2…

Pull Request - State: open - Opened by julienwoll over 2 years ago - 1 comment

#91 - Add missing index.d.ts file

Pull Request - State: open - Opened by MHeffley almost 3 years ago

#90 - Add index.d.ts file

Pull Request - State: open - Opened by MHeffley almost 3 years ago - 1 comment

#89 - Feature/async strategies (update #1)

Pull Request - State: open - Opened by D1plo1d almost 3 years ago

#88 - npm audit finds package "async" vulnerable to this issue GHSA-fwr7-v2mv-hh25

Issue - State: closed - Opened by RopoMen almost 3 years ago

#87 - fix: update async and moment dependencies to fix sec ussues

Pull Request - State: open - Opened by madzim almost 3 years ago

#86 - npm reports high vulnerabilities for moment and async

Issue - State: open - Opened by madzim almost 3 years ago - 2 comments

#85 - fix!: handle poorly formatted PEM files

Pull Request - State: closed - Opened by david-renaud-okta almost 3 years ago

#84 - How to generate SamlResponse?

Issue - State: open - Opened by abhijeet-toptal almost 3 years ago - 2 comments

#83 - triggering semgrep

Pull Request - State: closed - Opened by julienwoll almost 3 years ago

#82 - semgrep integration

Pull Request - State: closed - Opened by julienwoll almost 3 years ago

#81 - fix!: remove vulnerable node-forge dependency

Pull Request - State: closed - Opened by david-renaud-okta about 3 years ago

#80 - Fix moderate and low issues from npm audit related to node-forge

Issue - State: open - Opened by jasonhocker about 3 years ago

#79 - fix: remove vulnerable node-forge dependency

Pull Request - State: closed - Opened by david-renaud-okta about 3 years ago - 2 comments

#78 - fix(saml11): do not mutate moment() when `options.lifetimeInSeconds` is provided

Pull Request - State: closed - Opened by luuuis over 3 years ago

#77 - fix: update xmldom and xml-crypto to fix security issues

Pull Request - State: closed - Opened by CharlesRea over 3 years ago

#76 - Update npm modules - primarily to pull in latest xmldom

Pull Request - State: open - Opened by KrayzeeKev over 3 years ago - 2 comments

#75 - docs(readme): Document createUnsignedAssertion() and improve usage examples

Pull Request - State: open - Opened by esarafianou almost 4 years ago

#74 - feat: add external async signing and encryption strategies

Pull Request - State: open - Opened by troyfactor4 almost 4 years ago - 2 comments

#73 - Math.random() is not cryptographically secure

Issue - State: open - Opened by gen0cide about 4 years ago

#72 - feat: fix vulnerabilities reported by npm

Pull Request - State: closed - Opened by siacomuzzi over 4 years ago

#71 - feat: fix vulnerabilities reported by npm

Pull Request - State: closed - Opened by siacomuzzi over 4 years ago - 2 comments

#70 - Update xml-crypto from ~1.0.1 to 2.0.0 to resolve vulnerability GHSA-c27r-x354-4m68

Issue - State: closed - Opened by matsbauer711 over 4 years ago - 1 comment

#69 - [Snyk] Security upgrade xml-crypto from 1.0.2 to 2.0.0

Pull Request - State: closed - Opened by snyk-bot over 4 years ago - 1 comment

#68 - fix(xml-encryption): bump up xml-encryption to 1.2.1

Pull Request - State: closed - Opened by v2balasu over 4 years ago - 1 comment

#67 - Update xml-encryption version to resolve node-forge vulnerability

Issue - State: closed - Opened by v2balasu over 4 years ago - 1 comment

#66 - feat: adds saml.createUnsignedAssertion()

Pull Request - State: closed - Opened by luuuis over 4 years ago

#65 - Fixed critical vulnerability with mocha by updating mocha to version 4

Pull Request - State: closed - Opened by jungRoit almost 5 years ago - 1 comment

#64 - SAML assertion signing using HSM

Pull Request - State: open - Opened by troyfactor4 almost 5 years ago

#63 - SAML assertion signing using HSM

Issue - State: open - Opened by troyfactor4 almost 5 years ago - 1 comment
Labels: enhancement

#62 - Not working on Webpack

Issue - State: open - Opened by ryansmith94 almost 5 years ago - 1 comment
Labels: enhancement

#61 - How to get the attribute type to be unspecified

Issue - State: open - Opened by ChibiMora about 5 years ago
Labels: question

#60 - Update moment to resolve ReDOS attack.

Pull Request - State: closed - Opened by TimFerrell about 5 years ago

#59 - Vulnerability issue in moment in versions < 2.19.3

Issue - State: closed - Opened by pavankumartp about 5 years ago - 4 comments

#58 - cert is reworked to be optional, since it is not mandatory for xml signature library

Pull Request - State: open - Opened by MingZhang-PS about 5 years ago

#57 - why the cert must be provided as well if private key is already present in options

Issue - State: open - Opened by MingZhang-PS over 5 years ago
Labels: enhancement

#56 - unable to set "NameQualifier" and "SPNameQualifier" for saml:NameID

Issue - State: open - Opened by MingZhang-PS over 5 years ago

#55 - Saml assertion subject

Pull Request - State: closed - Opened by mjmoore004 over 5 years ago

#54 - Add maxClockSkewInSeconds for NotBefore value (default is 0)

Pull Request - State: open - Opened by eladab almost 6 years ago

#53 - Use [email protected]

Pull Request - State: open - Opened by LoneRifle about 6 years ago

#52 - Use [email protected]

Pull Request - State: closed - Opened by LoneRifle about 6 years ago

#51 - Update moment to a patched version

Pull Request - State: closed - Opened by edpaget over 6 years ago - 1 comment

#50 - Use [email protected]

Pull Request - State: closed - Opened by LoneRifle over 6 years ago

#49 - Use [email protected]

Pull Request - State: closed - Opened by LoneRifle over 6 years ago

#48 - chore - updating xml-encryption to 0.11.2 to resolve licensing issues.

Pull Request - State: closed - Opened by neverendingqs over 6 years ago - 1 comment

#47 - Setting a session index of 0 causes it to be skipped

Issue - State: open - Opened by sstaszkiewicz-copperleaf over 6 years ago
Labels: bug

#46 - Avoiding invalid SAML format when no attributes are given

Pull Request - State: closed - Opened by GreenGremlin over 6 years ago - 1 comment

#45 - Next release timing / Travis build failures

Issue - State: open - Opened by zachelrath almost 7 years ago - 3 comments

#44 - Add a keyInfoProvider option to support use of <RetrivalMethod>

Pull Request - State: open - Opened by ChadKillingsworth almost 7 years ago

#43 - Add option to back up the issue instant to account for clock skew

Pull Request - State: open - Opened by zachelrath almost 7 years ago

#42 - Add option to adjust issue instant to account for clock skew

Issue - State: open - Opened by zachelrath almost 7 years ago

#41 - Dependency Moment:2.15.2 is vulnerable according to nodesecurity.io

Issue - State: closed - Opened by Dobbychen about 7 years ago - 2 comments

#40 - Upgrade moment

Pull Request - State: closed - Opened by spalger about 7 years ago - 2 comments

#39 - Add support for xml

Pull Request - State: closed - Opened by nwhatt about 7 years ago

#38 - NSP Issue regarding ReDOS

Issue - State: closed - Opened by alexlapinski about 7 years ago - 3 comments

#37 - added clone() to now instance, so it's not mutated

Pull Request - State: open - Opened by georgibakken about 7 years ago

#36 - added SessionNotOnOrAfter support to Saml2.0

Pull Request - State: open - Opened by hauntingEcho over 7 years ago

#35 - pinned mocha to ^3 [resolves #34]

Pull Request - State: closed - Opened by hauntingEcho over 7 years ago

#34 - mocha version incompatible with node versions specified for travis

Issue - State: closed - Opened by hauntingEcho over 7 years ago

#33 - SAML 2.0 - empty object passed to options.attributes creates malformed assertion

Issue - State: closed - Opened by hauntingEcho over 7 years ago

#32 - SAML 1.1 - the moment variable "now" is mutated for AuthenticationInstant

Issue - State: closed - Opened by georgibakken over 7 years ago - 2 comments

#31 - getAttributeType() of saml20 could be made more specific for number data type

Issue - State: open - Opened by yesvivek over 7 years ago
Labels: enhancement

#30 - Adding code to support NameQualifier and SPNameQualifier

Pull Request - State: open - Opened by pushpabrol over 7 years ago

#29 - Fix unhandled exception when cert is invalid

Pull Request - State: closed - Opened by sandrinodimattia over 7 years ago

#28 - added missing saml: namespace to AttributeStatement

Pull Request - State: closed - Opened by bschelling over 7 years ago - 5 comments

#27 - Remove audience restriction when no audience is set

Pull Request - State: closed - Opened by mcastany over 7 years ago

#26 - Bumped xml-crypto to have the latest changes

Pull Request - State: closed - Opened by mcastany over 7 years ago

#25 - only include AttributeStatement if attributes are specified in options

Pull Request - State: closed - Opened by barrettc over 7 years ago - 3 comments

#24 - Fixed snyk report issues with dependencies

Pull Request - State: closed - Opened by eugeniop almost 8 years ago

#23 - SAML 1.1: Added possiblity to use urn:bea:security:saml:groups as attribute

Pull Request - State: open - Opened by georgibakken about 8 years ago

#22 - SAML 1.1: Added option for adding NameQualifier attribute in AttributeStatement

Pull Request - State: open - Opened by georgibakken about 8 years ago

#21 - SAML 1.1: Added support for 'sender-vouches' in subject confirmation method

Pull Request - State: open - Opened by georgibakken about 8 years ago