A web-based tool for debugging SAML responses. Paste in a URL containing a SAML response to decode and analyze the assertions, with optional signature verification.

• URL Parsing: Extract SAML responses from URLs (supports both SAMLResponse and RelayState parameters)
• Base64 Decoding: Automatically decode base64-encoded SAML responses
• XML Parsing: Parse and display SAML XML in a readable format
• Assertion Analysis: Extract and display all assertions with their attributes
• Signature Verification: Optional signature verification using provided certificates
• User-friendly UI: Clean interface with syntax highlighting and collapsible sections

├── backend/
│   ├── index.ts           # Main Hono server
│   └── routes/
│       └── saml.ts        # SAML processing endpoints
├── frontend/
│   ├── index.html         # Main HTML template
│   ├── components/
│   │   ├── App.tsx        # Main React component
│   │   ├── SamlDecoder.tsx # SAML decoding interface
│   │   └── AssertionViewer.tsx # Assertion display component
│   └── index.tsx          # Frontend entry point
├── shared/
│   ├── types.ts           # Shared TypeScript types
│   └── utils.ts           # Shared utility functions
└── README.md

1. Navigate to the application
2. Paste a URL containing a SAML response in the input field
3. Click "Decode SAML Response" to parse and display the response
4. Optionally provide a certificate for signature verification
5. View the decoded assertions and their attributes

• GET / - Serves the main application
• POST /api/saml/decode - Decodes SAML response from URL
• POST /api/saml/verify - Verifies SAML response signature

The application uses:

• Backend: Hono framework with TypeScript
• Frontend: React with TypeScript and TailwindCSS
• XML Processing: DOMParser for XML parsing
• Crypto: Web Crypto API for signature verification