security patch (#492)

tngan · Oct 13, 2022 · 1a69c39 · 1a69c39
1 parent 7daa9d1
commit 1a69c39
Show file tree

Hide file tree

Showing 5 changed files with 470 additions and 454 deletions.
diff --git a/package.json b/package.json
@@ -31,15 +31,15 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@authenio/xml-encryption": "^2.0.0",
-    "@xmldom/xmldom": "^0.7.4",
+    "@authenio/xml-encryption": "^2.0.1",
+    "@xmldom/xmldom": "^0.8.3",
     "camelcase": "^6.2.0",
     "node-forge": "^1.3.0",
     "node-rsa": "^1.1.1",
     "pako": "^1.0.10",
     "uuid": "^8.3.2",
     "xml": "^1.0.1",
-    "xml-crypto": "^2.1.3",
+    "xml-crypto": "^3.0.0",
     "xpath": "^0.0.32"
   },
   "devDependencies": {

diff --git a/src/metadata.ts b/src/metadata.ts
@@ -116,7 +116,7 @@ export default class Metadata implements MetadataInterface {
   * @param  {string} use declares the type of certificate
   * @return {string} certificate in string format
   */
-  public getX509Certificate(use: string): string | string[] {
+  public getX509Certificate(use: string) {
     return this.meta.certificate[use] || null;
   }
 

diff --git a/test/flow.ts b/test/flow.ts
@@ -297,7 +297,7 @@ test('create login request with post simpleSign binding using [custom template]'
 test('create login response with undefined binding', async t => {
   const user = { email: '[email protected]' };
   const error = await t.throwsAsync(() => idp.createLoginResponse(sp, {}, 'undefined', user, createTemplateCallback(idp, sp, binding.post, user)));
-  t.is(error.message, 'ERR_CREATE_RESPONSE_UNDEFINED_BINDING');
+  t.is(error?.message, 'ERR_CREATE_RESPONSE_UNDEFINED_BINDING');
 });
 
 test('create redirect login response', async t => {