🤖 Merge PR DefinitelyTyped#74826 [saml] Update types for v4.0.0 by @esetnik

Author: esetnik

types/saml/index.d.ts

@@ -14,6 +14,7 @@ export interface SamlSignedOpts {
     audiences?: string | string[] | undefined;
     cert: Buffer;
     digestAlgorithm?: string | undefined;
+    disallowEncryptionWithInsecureAlgorithm?: boolean | undefined;
     encryptionAlgorithm?: string | undefined;
     encryptionCert?: Buffer | undefined;
     encryptionPublicKey?: Buffer | undefined;
@@ -31,10 +32,12 @@ export interface SamlSignedOpts {
     recipient?: string | undefined;
     sessionIndex?: string | undefined;
     signatureAlgorithm?: string | undefined;
+    signatureIdAttribute?: string | undefined;
     signatureNamespacePrefix?: string | undefined;
     subjectConfirmationMethod?: string | undefined;
     typedAttributes?: boolean | undefined;
     uid?: string | undefined;
+    warnOnInsecureEncryptionAlgorithm?: boolean | undefined;
     xpathToNodeBeforeSignature?: string | undefined;
 }
 
@@ -44,6 +47,7 @@ export interface SamlUnassignedOpts {
     audiences?: string | string[] | undefined;
     cert?: Buffer | undefined;
     digestAlgorithm?: string | undefined;
+    disallowEncryptionWithInsecureAlgorithm?: boolean | undefined;
     encryptionAlgorithm?: string | undefined;
     encryptionCert?: Buffer | undefined;
     encryptionPublicKey?: Buffer | undefined;
@@ -65,6 +69,7 @@ export interface SamlUnassignedOpts {
     subjectConfirmationMethod?: string | undefined;
     typedAttributes?: boolean | undefined;
     uid?: string | undefined;
+    warnOnInsecureEncryptionAlgorithm?: boolean | undefined;
     xpathToNodeBeforeSignature?: string | undefined;
 }
 export namespace Saml11 {

types/saml/saml-tests.ts

@@ -85,3 +85,30 @@ Saml20.createUnsignedAssertion(
     },
     () => {},
 );
+
+// v4.0 encryption options
+Saml20.create(
+    {
+        cert: Buffer.from("certificate"),
+        key: Buffer.from("key"),
+        encryptionCert: Buffer.from("encryption-cert"),
+        encryptionAlgorithm: "http://www.w3.org/2009/xmlenc11#aes256-gcm",
+        keyEncryptionAlgorithm: "http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p",
+        disallowEncryptionWithInsecureAlgorithm: true,
+        warnOnInsecureEncryptionAlgorithm: false,
+    },
+    () => {},
+);
+
+// v4.0 signatureIdAttribute option
+Saml11.create({
+    cert: Buffer.from("certificate"),
+    key: Buffer.from("key"),
+    signatureIdAttribute: "ID",
+});
+
+// ReadonlyArray attribute values
+const attrs: SamlAttributes = {
+    email: "foo@bar.com",
+    groups: ["Group1", "Group2"] as ReadonlyArray<string>,
+};