samltest

type AssertionOption struct {
	Issuer       string // entity ID
	NameID       string
	NameIDFormat string
	Recipient    string
	Audience     string // entity ID
	RequestID    string
	Attributes   []saml.Attribute
}

type AssertionOptions func(opt *AssertionOption)

type AttributeOptions func(attr *saml.Attribute)

type BindableSamlTypes interface {
	saml.LogoutRequest | saml.LogoutResponse | saml.AuthnRequest | saml.Response
}

type BindingParseResult struct {
	Binding string
	Values  url.Values
	Encoded string
	Decoded []byte
}

type ClientStoreMockOption struct {
	Clients           []samlctx.SamlClient
	SPs               []*saml.ServiceProvider
	ClientsProperties map[string]MockedClientProperties
}

type ClientStoreMockOptions func(opt *ClientStoreMockOption)

type ExtIDPProperties struct {
	Domain string `json:"domain"`
	Name   string `json:"name"`
	IdName string `json:"id-name"`
}

type ExtSamlMetadata struct {
	EntityId         string
	Domain           string
	Source           string
	Name             string
	IdName           string
	RequireSignature bool
	TrustCheck       bool
	TrustedKeys      []string
}

type IDPMockOption struct {
	Properties IDPProperties
}

type IDPMockOptions func(opt *IDPMockOption)

type IDPProperties struct {
	ProviderProperties
	ExtIDPProperties
	SSOPath string `json:"sso"`
	SLOPath string `json:"slo"`
}

type IdpManagerMockOption struct {
	IDPList       []idp.IdentityProvider
	IDPProperties map[string]IDPProperties
	Delegates     []idp.IdentityProviderManager
}

type IdpManagerMockOptions func(opt *IdpManagerMockOption)

type LogoutResponseOption struct {
	Issuer    string // entity ID
	Recipient string
	Audience  string // entity ID
	RequestID string
	Success   bool
}

type LogoutResponseOptions func(opt *LogoutResponseOption)

type MockSamlClientStore struct {
	// contains filtered or unexported fields
}

type MockedClientOption struct {
	Properties MockedClientProperties
	SP         *saml.ServiceProvider
}

type MockedClientOptions func(opt *MockedClientOption)

type MockedClientProperties struct {
	SPProperties
	SkipEncryption            bool                      `json:"skip-encryption"`
	SkipSignatureVerification bool                      `json:"skip-signature-verification"`
	TenantRestriction         utils.CommaSeparatedSlice `json:"tenant-restriction"`
	TenantRestrictionType     string                    `json:"tenant-restriction-type"`
}

type MockedIdpManager struct {
	// contains filtered or unexported fields
}

type MockedIdpProvider struct {
	ExtSamlMetadata
}

type MockedSamlAssertionAuthentication struct {
	Account       security.Account
	DetailsMap    map[string]interface{}
	SamlAssertion *saml.Assertion
}

type MockedSamlClient struct {
	EntityId                             string
	MetadataSource                       string
	SkipAssertionEncryption              bool
	SkipAuthRequestSignatureVerification bool
	MetadataRequireSignature             bool
	MetadataTrustCheck                   bool
	MetadataTrustedKeys                  []string
	TenantRestrictions                   utils.StringSet
	TenantRestrictionType                string
}

type ProviderProperties struct {
	EntityID         string `json:"entity-id"`
	MetadataSource   string `json:"metadata-source"`
	CertsSource      string `json:"certs"`
	PrivateKeySource string `json:"private-key"`
}

type SPMockOption struct {
	Properties SPProperties
	IDP        *saml.IdentityProvider
}

type SPMockOptions func(opt *SPMockOption)

type SPProperties struct {
	ProviderProperties
	ACSPath string         `json:"acs"`
	SLOPath string         `json:"slo"`
	IDP     *IDPProperties `json:"idp"`
}