123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211
/*** @file urn.ts* @author tngan* @desc  Includes all keywords need in samlify*/
export enum BindingNamespace {  Redirect = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',  Post = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',  SimpleSign = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign',  Artifact = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact'}
export enum MessageSignatureOrder {  STE = 'sign-then-encrypt',  ETS = 'encrypt-then-sign'}
export enum StatusCode {  // top-tier  Success = 'urn:oasis:names:tc:SAML:2.0:status:Success',  Requester = 'urn:oasis:names:tc:SAML:2.0:status:Requester',  Responder = 'urn:oasis:names:tc:SAML:2.0:status:Responder',  VersionMismatch = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch',  // second-tier to provide more information  AuthFailed = 'urn:oasis:names:tc:SAML:2.0:status:AuthnFailed',  InvalidAttrNameOrValue = 'urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue',  InvalidNameIDPolicy = 'urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy',  NoAuthnContext = 'urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext',  NoAvailableIDP = 'urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP',  NoPassive = 'urn:oasis:names:tc:SAML:2.0:status:NoPassive',  NoSupportedIDP = 'urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP',  PartialLogout = 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout',  ProxyCountExceeded = 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded',  RequestDenied = 'urn:oasis:names:tc:SAML:2.0:status:RequestDenied',  RequestUnsupported = 'urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported',  RequestVersionDeprecated = 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated',  RequestVersionTooHigh = 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh',  RequestVersionTooLow = 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow',  ResourceNotRecognized = 'urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized',  TooManyResponses = 'urn:oasis:names:tc:SAML:2.0:status:TooManyResponses',  UnknownAttrProfile = 'urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile',  UnknownPrincipal = 'urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal',  UnsupportedBinding = 'urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding',}
const namespace = {  binding: {    redirect: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',    post: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',    simpleSign: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign',    artifact: 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',  },  names: {    protocol: 'urn:oasis:names:tc:SAML:2.0:protocol',    assertion: 'urn:oasis:names:tc:SAML:2.0:assertion',    metadata: 'urn:oasis:names:tc:SAML:2.0:metadata',    userLogout: 'urn:oasis:names:tc:SAML:2.0:logout:user',    adminLogout: 'urn:oasis:names:tc:SAML:2.0:logout:admin',  },  authnContextClassRef: {    password: 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',    passwordProtectedTransport: 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport',  },  format: {    emailAddress: 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',    persistent: 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',    transient: 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',    entity: 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity',    unspecified: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',    kerberos: 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos',    windowsDomainQualifiedName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName',    x509SubjectName: 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName',  },  statusCode: {    // permissible top-level status codes    success: 'urn:oasis:names:tc:SAML:2.0:status:Success',    requester: 'urn:oasis:names:tc:SAML:2.0:status:Requester',    responder: 'urn:oasis:names:tc:SAML:2.0:status:Responder',    versionMismatch: 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch',    // second-level status codes    authFailed: 'urn:oasis:names:tc:SAML:2.0:status:AuthnFailed',    invalidAttrNameOrValue: 'urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue',    invalidNameIDPolicy: 'urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy',    noAuthnContext: 'urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext',    noAvailableIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoAvailableIDP',    noPassive: 'urn:oasis:names:tc:SAML:2.0:status:NoPassive',    noSupportedIDP: 'urn:oasis:names:tc:SAML:2.0:status:NoSupportedIDP',    partialLogout: 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout',    proxyCountExceeded: 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded',    requestDenied: 'urn:oasis:names:tc:SAML:2.0:status:RequestDenied',    requestUnsupported: 'urn:oasis:names:tc:SAML:2.0:status:RequestUnsupported',    requestVersionDeprecated: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionDeprecated',    requestVersionTooHigh: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooHigh',    requestVersionTooLow: 'urn:oasis:names:tc:SAML:2.0:status:RequestVersionTooLow',    resourceNotRecognized: 'urn:oasis:names:tc:SAML:2.0:status:ResourceNotRecognized',    tooManyResponses: 'urn:oasis:names:tc:SAML:2.0:status:TooManyResponses',    unknownAttrProfile: 'urn:oasis:names:tc:SAML:2.0:status:UnknownAttrProfile',    unknownPrincipal: 'urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal',    unsupportedBinding: 'urn:oasis:names:tc:SAML:2.0:status:UnsupportedBinding',  },};
const tags = {  request: {    AllowCreate: '{AllowCreate}',    AssertionConsumerServiceURL: '{AssertionConsumerServiceURL}',    AuthnContextClassRef: '{AuthnContextClassRef}',    AssertionID: '{AssertionID}',    Audience: '{Audience}',    AuthnStatement: '{AuthnStatement}',    AttributeStatement: '{AttributeStatement}',    ConditionsNotBefore: '{ConditionsNotBefore}',    ConditionsNotOnOrAfter: '{ConditionsNotOnOrAfter}',    Destination: '{Destination}',    EntityID: '{EntityID}',    ID: '{ID}',    Issuer: '{Issuer}',    IssueInstant: '{IssueInstant}',    InResponseTo: '{InResponseTo}',    NameID: '{NameID}',    NameIDFormat: '{NameIDFormat}',    ProtocolBinding: '{ProtocolBinding}',    SessionIndex: '{SessionIndex}',    SubjectRecipient: '{SubjectRecipient}',    SubjectConfirmationDataNotOnOrAfter: '{SubjectConfirmationDataNotOnOrAfter}',    StatusCode: '{StatusCode}',  },  xmlTag: {    loginRequest: 'AuthnRequest',    logoutRequest: 'LogoutRequest',    loginResponse: 'Response',    logoutResponse: 'LogoutResponse',  },};
const messageConfigurations = {  signingOrder: {    SIGN_THEN_ENCRYPT: 'sign-then-encrypt',    ENCRYPT_THEN_SIGN: 'encrypt-then-sign',  },};
const algorithms = {  signature: {    RSA_SHA1: 'http://www.w3.org/2000/09/xmldsig#rsa-sha1',    RSA_SHA256: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',    RSA_SHA512: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512',  },  encryption: {    data: {      AES_128: 'http://www.w3.org/2001/04/xmlenc#aes128-cbc',      AES_256: 'http://www.w3.org/2001/04/xmlenc#aes256-cbc',      TRI_DEC: 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc',      AES_128_GCM: 'http://www.w3.org/2009/xmlenc11#aes128-gcm'    },    key: {      RSA_OAEP_MGF1P: 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p',      RSA_1_5: 'http://www.w3.org/2001/04/xmlenc#rsa-1_5',    },  },  digest: {    'http://www.w3.org/2000/09/xmldsig#rsa-sha1': 'http://www.w3.org/2000/09/xmldsig#sha1',    'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': 'http://www.w3.org/2001/04/xmlenc#sha256',    'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': 'http://www.w3.org/2001/04/xmlenc#sha512', // support hashing algorithm sha512 in xml-crypto after 0.8.0  },};
export enum ParserType {  SAMLRequest = 'SAMLRequest',  SAMLResponse = 'SAMLResponse',  LogoutRequest = 'LogoutRequest',  LogoutResponse = 'LogoutResponse'}
const wording = {  urlParams: {    samlRequest: 'SAMLRequest',    samlResponse: 'SAMLResponse',    logoutRequest: 'LogoutRequest',    logoutResponse: 'LogoutResponse',    sigAlg: 'SigAlg',    signature: 'Signature',    relayState: 'RelayState',  },  binding: {    redirect: 'redirect',    post: 'post',    simpleSign: 'simpleSign',    artifact: 'artifact',  },  certUse: {    signing: 'signing',    encrypt: 'encryption',  },  metadata: {    sp: 'metadata-sp',    idp: 'metadata-idp',  },};
// https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP// some idps restrict the order of elements in entity descriptorsconst elementsOrder = {  default: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService'],  onelogin: ['KeyDescriptor', 'NameIDFormat', 'SingleLogoutService', 'AssertionConsumerService'],  shibboleth: ['KeyDescriptor', 'SingleLogoutService', 'NameIDFormat', 'AssertionConsumerService', 'AttributeConsumingService'],};
export { namespace, tags, algorithms, wording, elementsOrder, messageConfigurations };