samlv2

type CanonicalizerAlgorithm string

type Option func(*SAMLProvider) error

type SAMLConfig struct {
	// Identity Provider SSO URL
	IdentityProviderSSOURL string

	// Identity Provider Issuer
	IdentityProviderIssuer string

	// Service Provider Issuer
	ServiceProviderIssuer string

	// Metadata is metadata.xml that has all the above
	// attributes plus signing IDP certificate.
	Metadata string

	//PublicKey certificate is an optional Root CA PEM certificate
	//gets added to Saml Provider's list of root CAs
	PublicKey []byte

	//PrivateKey is an optional private PEM certificate
	//counterpart to a PublicKey.
	//Public/PrivateKey is used to re-encrypt SAML response
	PrivateKey []byte

	//Assertion Consumer Service URL
	AssertionConsumerServiceURL string

	// SAML Audience
	AudienceURI string

	// Canonicalization Algorithm for XML signing
	SigningXMLCanonicalizer CanonicalizerAlgorithm
}

type SAMLProvider struct {
	//Config references SAML configuration
	Config *SAMLConfig
	//Log is the default logger
	Log logger.Logger
	//SkipSignatureValidation skips validating SAML response signature
	SkipSignatureValidation bool
	//ValidateEncryptionCert validates signature certificates if set to true
	ValidateEncryptionCert bool
	//Provider is SAMLv2 service provider
	Provider *saml2.SAMLServiceProvider
	//ClientKeyStore to sign Authn requests
	ClientKeyStore dsig.X509KeyStore
}

type X509KeyStore struct {
	// contains filtered or unexported fields
}