0f0a7966b1
## What it does ### Backend - [x] Add a mutation to create OIDC and SAML configuration - [x] Add a mutation to delete an SSO config - [x] Add a feature flag to toggle SSO - [x] Add a mutation to activate/deactivate an SSO config - [x] Add a mutation to delete an SSO config - [x] Add strategy to use OIDC or SAML - [ ] Improve error management ### Frontend - [x] Add section "security" in settings - [x] Add page to list SSO configurations - [x] Add page and forms to create OIDC or SAML configuration - [x] Add field to "connect with SSO" in the signin/signup process - [x] Trigger auth when a user switch to a workspace with SSO enable - [x] Add an option on the security page to activate/deactivate the global invitation link - [ ] Add new Icons for SSO Identity Providers (okta, Auth0, Azure, Microsoft) --------- Co-authored-by: Félix Malfait <felix@twenty.com> Co-authored-by: Charles Bochet <charles@twenty.com>
60 lines
1.8 KiB
TypeScript
60 lines
1.8 KiB
TypeScript
/* @license Enterprise */
|
|
|
|
import { z } from 'zod';
|
|
|
|
const validator = z.object({
|
|
entityID: z.string().url(),
|
|
ssoUrl: z.string().url(),
|
|
certificate: z.string().min(1),
|
|
});
|
|
|
|
export const parseSAMLMetadataFromXMLFile = (
|
|
xmlString: string,
|
|
):
|
|
| { success: true; data: z.infer<typeof validator> }
|
|
| { success: false; error: unknown } => {
|
|
try {
|
|
const parser = new DOMParser();
|
|
const xmlDoc = parser.parseFromString(xmlString, 'application/xml');
|
|
|
|
if (xmlDoc.getElementsByTagName('parsererror').length > 0) {
|
|
throw new Error('Error parsing XML');
|
|
}
|
|
|
|
const entityDescriptor = xmlDoc.getElementsByTagName(
|
|
'md:EntityDescriptor',
|
|
)?.[0];
|
|
const idpSSODescriptor = xmlDoc.getElementsByTagName(
|
|
'md:IDPSSODescriptor',
|
|
)?.[0];
|
|
const keyDescriptor = xmlDoc.getElementsByTagName('md:KeyDescriptor')[0];
|
|
const keyInfo = keyDescriptor.getElementsByTagName('ds:KeyInfo')[0];
|
|
const x509Data = keyInfo.getElementsByTagName('ds:X509Data')[0];
|
|
const x509Certificate = x509Data
|
|
.getElementsByTagName('ds:X509Certificate')?.[0]
|
|
.textContent?.trim();
|
|
|
|
const singleSignOnServices = Array.from(
|
|
idpSSODescriptor.getElementsByTagName('md:SingleSignOnService'),
|
|
).map((service) => ({
|
|
Binding: service.getAttribute('Binding'),
|
|
Location: service.getAttribute('Location'),
|
|
}));
|
|
|
|
const result = {
|
|
ssoUrl: singleSignOnServices.find((singleSignOnService) => {
|
|
return (
|
|
singleSignOnService.Binding ===
|
|
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
|
|
);
|
|
})?.Location,
|
|
certificate: x509Certificate,
|
|
entityID: entityDescriptor?.getAttribute('entityID'),
|
|
};
|
|
|
|
return { success: true, data: validator.parse(result) };
|
|
} catch (error) {
|
|
return { success: false, error };
|
|
}
|
|
};
|