\n 🔍 SAML Response Debugger\n

\n Decode and analyze SAML responses from URLs. Paste a URL containing a SAMLResponse parameter to get started.\n

\n\n \n

\n );\n}",[],[199,205,212],{"_107":219,"_100":220,"_152":221,"_154":206,"_155":138,"_156":222,"_158":159,"_109":223,"_104":31,"_161":180,"_163":224,"_164":27,"_165":-5,"_166":225,"_103":226},"da4bb16c-3751-11f0-b61e-9e149126039e","AssertionViewer.tsx","da4bb23e-3751-11f0-b61e-9e149126039e",9,["D",1747948514270],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from 'https://esm.sh/react@18.2.0';\nimport type { SamlAssertion } from '../../shared/types.ts';\n\ninterface AssertionViewerProps {\n assertions: SamlAssertion[];\n}\n\nexport default function AssertionViewer({ assertions }: AssertionViewerProps) {\n const [expandedAssertions, setExpandedAssertions] = useState>(new Set());\n\n const toggleAssertion = (assertionId: string) => {\n const newExpanded = new Set(expandedAssertions);\n if (newExpanded.has(assertionId)) {\n newExpanded.delete(assertionId);\n } else {\n newExpanded.add(assertionId);\n }\n setExpandedAssertions(newExpanded);\n };\n\n if (assertions.length === 0) {\n return (\n

📭

No assertions found in this SAML response.

\n );\n }\n\n return (\n

\n Assertions ({assertions.length})\n

\n \n {assertions.map((assertion, index) => {\n const isExpanded = expandedAssertions.has(assertion.id);\n \n return (\n

\n {/* Assertion Header */}\n toggleAssertion(assertion.id)}\n className=\"w-full px-4 py-3 text-left bg-gray-50 hover:bg-gray-100 rounded-t-lg focus:outline-none focus:ring-2 focus:ring-blue-500\"\n >\n

\n {isExpanded ? '🔽' : '▶️'} Assertion {index + 1}\n

\n ID: {assertion.id} • Issuer: {assertion.issuer}\n

\n {assertion.attributes.length} attributes\n

\n \n\n {/* Assertion Details */}\n {isExpanded && (\n

\n {/* Basic Information */}\n

Basic Information

\n ID:\n

{assertion.id}

\n Issue Instant:\n

{assertion.issueInstant}

\n Issuer:\n

{assertion.issuer}

\n\n {/* Subject */}\n {assertion.subject && (\n

Subject

\n Name ID:\n

{assertion.subject.nameId}

\n {assertion.subject.nameIdFormat && (\n

\n Format:\n

{assertion.subject.nameIdFormat}

\n )}\n {assertion.subject.subjectConfirmation && (\n

\n Confirmation Method:\n

{assertion.subject.subjectConfirmation.method}

\n {assertion.subject.subjectConfirmation.notOnOrAfter && (\n

\n Not On Or After:\n

{assertion.subject.subjectConfirmation.notOnOrAfter}

\n )}\n

\n )}\n\n {/* Conditions */}\n {assertion.conditions && (\n

Conditions

\n {assertion.conditions.notBefore && (\n

\n Not Before:\n

{assertion.conditions.notBefore}

\n )}\n {assertion.conditions.notOnOrAfter && (\n

\n Not On Or After:\n

{assertion.conditions.notOnOrAfter}

\n )}\n {assertion.conditions.audienceRestriction && assertion.conditions.audienceRestriction.length > 0 && (\n

\n Audience Restriction:\n {assertion.conditions.audienceRestriction.map((audience, idx) => (\n

{audience}

\n ))}\n

\n )}\n

\n )}\n\n {/* Authentication Statement */}\n {assertion.authnStatement && (\n

Authentication Statement

\n Authentication Instant:\n

{assertion.authnStatement.authnInstant}

\n {assertion.authnStatement.authnContext && (\n

\n Authentication Context:\n

{assertion.authnStatement.authnContext}

\n )}\n {assertion.authnStatement.sessionIndex && (\n

\n Session Index:\n

{assertion.authnStatement.sessionIndex}

\n )}\n

\n )}\n\n {/* Attributes */}\n

\n Attributes ({assertion.attributes.length})\n

\n {assertion.attributes.length === 0 ? (\n

No attributes found.

\n ) : (\n

\n {assertion.attributes.map((attribute, attrIndex) => (\n

{attribute.name}

\n {attribute.friendlyName && (\n

({attribute.friendlyName})

\n )}\n

\n \n {attribute.values.length} value{attribute.values.length !== 1 ? 's' : ''}\n \n

\n \n {attribute.nameFormat && (\n

Format: {attribute.nameFormat}

\n )}\n \n

\n {attribute.values.map((value, valueIndex) => (\n

\n {value}\n

\n ))}\n

\n )}\n

\n );\n })}\n

\n );\n}",[],[199,205,220],{"_107":228,"_100":229,"_152":230,"_154":206,"_155":138,"_156":231,"_158":159,"_109":232,"_104":31,"_161":180,"_163":233,"_164":27,"_165":-5,"_166":234,"_103":235},"c7b3da02-3751-11f0-a224-9e149126039e","SamlDecoder.tsx","c7b3db7e-3751-11f0-a224-9e149126039e",8,["D",1747948483078],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from 'https://esm.sh/react@18.2.0';\nimport AssertionViewer from './AssertionViewer.tsx';\nimport type { SamlResponse } from '../../shared/types.ts';\n\ninterface SamlDecoderProps {\n onDecode: (url: string, certificate?: string) => void;\n loading: boolean;\n error: string | null;\n samlResponse: SamlResponse | null;\n}\n\nexport default function SamlDecoder({ onDecode, loading, error, samlResponse }: SamlDecoderProps) {\n const [url, setUrl] = useState('');\n const [certificate, setCertificate] = useState('');\n const [showCertificate, setShowCertificate] = useState(false);\n const [activeTab, setActiveTab] = useState<'overview' | 'assertions' | 'raw'>('overview');\n\n const handleSubmit = (e: React.FormEvent) => {\n e.preventDefault();\n if (url.trim()) {\n onDecode(url.trim(), certificate.trim() || undefined);\n }\n };\n\n const formatXml = (xml: string) => {\n try {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n const serializer = new XMLSerializer();\n let formatted = serializer.serializeToString(doc);\n \n // Simple formatting\n formatted = formatted.replace(/>\\n<');\n const lines = formatted.split('\\n');\n let indent = 0;\n return lines.map(line => {\n if (line.includes('')[0] + '>')) {\n indent--;\n }\n const indentedLine = ' '.repeat(Math.max(0, indent)) + line.trim();\n if (line.includes('<') && !line.includes('')) {\n indent++;\n }\n return indentedLine;\n }).join('\\n');\n } catch {\n return xml;\n }\n };\n\n return (\n

\n {/* Input Form */}\n

\n \n URL with SAML Response\n \n setUrl(e.target.value)}\n placeholder=\"https://example.com/saml/acs?SAMLResponse=...\"\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent\"\n required\n />\n

\n\n

\n setShowCertificate(!showCertificate)}\n className=\"text-sm text-blue-600 hover:text-blue-800 mb-2\"\n >\n {showCertificate ? '🔽' : '▶️'} Optional: Add certificate for signature verification\n \n \n {showCertificate && (\n

\n \n X.509 Certificate (PEM format)\n \n setCertificate(e.target.value)}\n placeholder=\"-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----\"\n rows={6}\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent font-mono text-sm\"\n />\n

\n )}\n

\n\n \n {loading ? '🔄 Decoding...' : '🔍 Decode SAML Response'}\n \n \n

\n\n {/* Error Display */}\n {error && (\n

❌

Error

{error}

\n )}\n\n {/* Results */}\n {samlResponse && (\n

\n {/* Tabs */}\n

\n {[\n { id: 'overview', label: '📋 Overview', count: null },\n { id: 'assertions', label: '🎯 Assertions', count: samlResponse.assertions.length },\n { id: 'raw', label: '📄 Raw XML', count: null }\n ].map((tab) => (\n setActiveTab(tab.id as any)}\n className={`py-4 px-1 border-b-2 font-medium text-sm ${\n activeTab === tab.id\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n {tab.label}\n {tab.count !== null && (\n \n {tab.count}\n \n )}\n \n ))}\n

\n\n

\n {/* Overview Tab */}\n {activeTab === 'overview' && (\n

Response Overview

\n ID:\n

{samlResponse.id}

\n Version:\n

{samlResponse.version}

\n Issue Instant:\n

{samlResponse.issueInstant}

\n Issuer:\n

{samlResponse.issuer}

\n {samlResponse.destination && (\n

\n Destination:\n

{samlResponse.destination}

\n )}\n {samlResponse.inResponseTo && (\n

\n In Response To:\n

{samlResponse.inResponseTo}

\n )}\n

\n Status:\n

\n {samlResponse.status.statusCode}\n

\n {samlResponse.status.statusMessage && (\n

{samlResponse.status.statusMessage}

\n )}\n

\n Signature:\n

\n {samlResponse.signature?.present ? '✅ Present' : '❌ Not Present'}\n

\n )}\n\n {/* Assertions Tab */}\n {activeTab === 'assertions' && (\n \n )}\n\n {/* Raw XML Tab */}\n {activeTab === 'raw' && (\n

Raw SAML XML

\n                    {formatXml(samlResponse.rawXml)}\n

\n )}\n

\n );\n}",[],[199,205,229],[199,205],{"_107":238,"_100":239,"_152":240,"_154":200,"_155":138,"_156":179,"_158":159,"_109":241,"_104":31,"_161":242,"_163":243,"_164":27,"_165":-5,"_166":244,"_103":245},"ae423fdc-3751-11f0-b220-9e149126039e","index.html","ae4240c2-3751-11f0-b220-9e149126039e",["D",1747948440369],"file","\n\n\n \n \n SAML Response Debugger\n \n \n \n\n\n

\n \n \n\n",[],[199,239],[199],{"_107":248,"_100":249,"_152":250,"_154":-5,"_155":138,"_156":251,"_158":159,"_109":252,"_104":31,"_161":162,"_163":-5,"_164":27,"_165":-5,"_166":253,"_103":271},"8cf3d462-3751-11f0-954c-9e149126039e","shared","678406b6-a7d0-4fcd-b3bd-02bc5188a447",2,["D",1747948384508],[254,262],{"_107":255,"_100":256,"_152":257,"_154":250,"_155":138,"_156":251,"_158":159,"_109":258,"_104":31,"_161":180,"_163":259,"_164":27,"_165":-5,"_166":260,"_103":261},"8cf3b4dc-3751-11f0-954c-9e149126039e","types.ts","8cf3b5a4-3751-11f0-954c-9e149126039e",["D",1747948384508],"// Shared types for SAML debugging tool\n\nexport interface SamlAssertion {\n id: string;\n issueInstant: string;\n issuer: string;\n subject?: {\n nameId: string;\n nameIdFormat?: string;\n subjectConfirmation?: {\n method: string;\n notOnOrAfter?: string;\n recipient?: string;\n inResponseTo?: string;\n };\n };\n conditions?: {\n notBefore?: string;\n notOnOrAfter?: string;\n audienceRestriction?: string[];\n };\n attributes: SamlAttribute[];\n authnStatement?: {\n authnInstant: string;\n authnContext?: string;\n sessionIndex?: string;\n };\n}\n\nexport interface SamlAttribute {\n name: string;\n friendlyName?: string;\n nameFormat?: string;\n values: string[];\n}\n\nexport interface SamlResponse {\n id: string;\n version: string;\n issueInstant: string;\n destination?: string;\n inResponseTo?: string;\n issuer: string;\n status: {\n statusCode: string;\n statusMessage?: string;\n };\n assertions: SamlAssertion[];\n signature?: {\n present: boolean;\n verified?: boolean;\n error?: string;\n };\n rawXml: string;\n}\n\nexport interface DecodeRequest {\n url: string;\n certificate?: string;\n}\n\nexport interface DecodeResponse {\n success: boolean;\n samlResponse?: SamlResponse;\n error?: string;\n}\n\nexport interface VerifyRequest {\n samlXml: string;\n certificate: string;\n}\n\nexport interface VerifyResponse {\n success: boolean;\n verified: boolean;\n error?: string;\n}",[],[249,256],{"_107":263,"_100":264,"_152":265,"_154":250,"_155":138,"_156":266,"_158":159,"_109":267,"_104":31,"_161":180,"_163":268,"_164":27,"_165":-5,"_166":269,"_103":270},"9265a038-3751-11f0-91f6-9e149126039e","utils.ts","9265a13c-3751-11f0-91f6-9e149126039e",3,["D",1747948393645],"// Shared utility functions for SAML processing\n\n/**\n * Extract SAML response from URL parameters\n */\nexport function extractSamlFromUrl(url: string): string | null {\n try {\n const urlObj = new URL(url);\n const samlResponse = urlObj.searchParams.get('SAMLResponse');\n return samlResponse;\n } catch (error) {\n return null;\n }\n}\n\n/**\n * Decode base64 string\n */\nexport function decodeBase64(encoded: string): string {\n try {\n // Handle URL-safe base64\n const normalized = encoded.replace(/-/g, '+').replace(/_/g, '/');\n // Add padding if needed\n const padded = normalized + '='.repeat((4 - normalized.length % 4) % 4);\n return atob(padded);\n } catch (error) {\n throw new Error('Invalid base64 encoding');\n }\n}\n\n/**\n * Format XML string with indentation\n */\nexport function formatXml(xml: string): string {\n try {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML');\n }\n \n return new XMLSerializer().serializeToString(doc);\n } catch (error) {\n return xml; // Return original if formatting fails\n }\n}\n\n/**\n * Get text content from XML element\n */\nexport function getElementText(element: Element | null): string {\n return element?.textContent?.trim() || '';\n}\n\n/**\n * Get attribute value from XML element\n */\nexport function getElementAttribute(element: Element | null, attributeName: string): string | undefined {\n return element?.getAttribute(attributeName) || undefined;\n}\n\n/**\n * Convert XML NodeList to Array\n */\nexport function nodeListToArray(nodeList: NodeListOf): Element[] {\n return Array.from(nodeList);\n}",[],[249,264],[249],{"_107":273,"_100":274,"_152":275,"_154":-5,"_155":138,"_156":191,"_158":159,"_109":276,"_104":31,"_161":242,"_163":277,"_164":27,"_165":-5,"_166":278,"_103":279},"87dec040-3751-11f0-b60f-9e149126039e","README.md","87dec112-3751-11f0-b60f-9e149126039e",["D",1747948375982],"# SAML Response Debugger\n\nA web-based tool for debugging SAML responses. Paste in a URL containing a SAML response to decode and analyze the assertions, with optional signature verification.\n\n## Features\n\n- **URL Parsing**: Extract SAML responses from URLs (supports both `SAMLResponse` and `RelayState` parameters)\n- **Base64 Decoding**: Automatically decode base64-encoded SAML responses\n- **XML Parsing**: Parse and display SAML XML in a readable format\n- **Assertion Analysis**: Extract and display all assertions with their attributes\n- **Signature Verification**: Optional signature verification using provided certificates\n- **User-friendly UI**: Clean interface with syntax highlighting and collapsible sections\n\n## Project Structure\n\n```\n├── backend/\n│ ├── index.ts # Main Hono server\n│ └── routes/\n│ └── saml.ts # SAML processing endpoints\n├── frontend/\n│ ├── index.html # Main HTML template\n│ ├── components/\n│ │ ├── App.tsx # Main React component\n│ │ ├── SamlDecoder.tsx # SAML decoding interface\n│ │ └── AssertionViewer.tsx # Assertion display component\n│ └── index.tsx # Frontend entry point\n├── shared/\n│ ├── types.ts # Shared TypeScript types\n│ └── utils.ts # Shared utility functions\n└── README.md\n```\n\n## Usage\n\n1. Navigate to the application\n2. Paste a URL containing a SAML response in the input field\n3. Click \"Decode SAML Response\" to parse and display the response\n4. Optionally provide a certificate for signature verification\n5. View the decoded assertions and their attributes\n\n## API Endpoints\n\n- `GET /` - Serves the main application\n- `POST /api/saml/decode` - Decodes SAML response from URL\n- `POST /api/saml/verify` - Verifies SAML response signature\n\n## Development\n\nThe application uses:\n- **Backend**: Hono framework with TypeScript\n- **Frontend**: React with TypeScript and TailwindCSS\n- **XML Processing**: DOMParser for XML parsing\n- **Crypto**: Web Crypto API for signature verification",[],[274],"files",[149,168,174,185,197,203,210,218,227,237,247,254,262,272],"counts",{"_284":31,"_285":191,"_286":31,"_287":31},"pulls","branches","forks","envVars","contents",[290,293,296,299],{"_107":150,"_100":151,"_152":153,"_154":-5,"_155":138,"_156":157,"_158":159,"_109":291,"_104":31,"_161":162,"_163":-5,"_164":27,"_165":-5,"_103":292},["D",1747948426155],[151],{"_107":198,"_100":199,"_152":200,"_154":-5,"_155":138,"_156":179,"_158":159,"_109":294,"_104":31,"_161":162,"_163":-5,"_164":27,"_165":-5,"_103":295},["D",1747948440369],[199],{"_107":248,"_100":249,"_152":250,"_154":-5,"_155":138,"_156":251,"_158":159,"_109":297,"_104":31,"_161":162,"_163":-5,"_164":27,"_165":-5,"_103":298},["D",1747948384508],[249],{"_107":273,"_100":274,"_152":275,"_154":-5,"_155":138,"_156":191,"_158":159,"_109":300,"_104":31,"_161":242,"_163":277,"_164":27,"_165":-5,"_103":301},["D",1747948375982],[274],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","routes/_app.x.$handle.$name.branch.$branch.history",{"_98":99,"_100":101,"_102":42,"_105":308,"_312":313,"_428":31,"_429":27},{"_107":108,"_100":101,"_109":309,"_111":-5,"_112":27,"_113":114,"_115":-5,"_116":-5,"_12":117,"_118":-5,"_119":27,"_120":-5,"_121":31,"_14":122,"_123":124,"_125":124,"_126":127,"_128":127,"_129":127,"_130":124,"_131":124,"_21":310,"_135":311,"_146":27},["D",1747948311169],{"_98":99,"_133":134},{"_104":137,"_100":42,"_107":138,"_139":108,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":101,"_145":99},"history",[314,319,328,336,344,352,360,365,370,375,383,391,397,410,415,423],{"_152":177,"_104":137,"_109":315,"_155":138,"_280":316},["D",1747948690947],[317],{"_107":175,"_155":138,"_152":177,"_100":176,"_163":181,"_161":180,"_104":179,"_154":171,"_109":315,"_156":137,"_165":-5,"_158":159,"_164":27,"_103":318},[151,170,176],{"_152":177,"_104":320,"_109":321,"_155":138,"_280":322},15,["D",1747948668069],[323],{"_107":324,"_155":138,"_152":177,"_100":176,"_163":325,"_161":180,"_104":326,"_154":171,"_109":321,"_156":320,"_165":-5,"_158":27,"_164":27,"_103":327},"35f7889c-3752-11f0-845a-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport { DOMParser } from 'https://esm.sh/@xmldom/xmldom@0.8.10';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64\n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Get text content from XML element\n */\nfunction getElementText(element: any): string {\n return element?.textContent?.trim() || '';\n}\n\n/**\n * Get attribute value from XML element\n */\nfunction getElementAttribute(element: any, attributeName: string): string | undefined {\n return element?.getAttribute(attributeName) || undefined;\n}\n\n/**\n * Convert XML NodeList to Array\n */\nfunction nodeListToArray(nodeList: any): any[] {\n if (!nodeList) return [];\n return Array.from(nodeList);\n}\n\n/**\n * Query selector that works with xmldom\n */\nfunction querySelector(doc: any, selector: string): any {\n // Simple implementation for common SAML selectors\n if (selector.includes('Response')) {\n return doc.getElementsByTagName('Response')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Response')[0];\n }\n if (selector.includes('Issuer')) {\n return doc.getElementsByTagName('Issuer')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Issuer')[0];\n }\n if (selector.includes('Status')) {\n return doc.getElementsByTagName('Status')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Status')[0];\n }\n if (selector.includes('StatusCode')) {\n return doc.getElementsByTagName('StatusCode')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'StatusCode')[0];\n }\n if (selector.includes('Assertion')) {\n return doc.getElementsByTagName('Assertion') || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n }\n return null;\n}\n\n/**\n * Query selector all that works with xmldom\n */\nfunction querySelectorAll(element: any, selector: string): any[] {\n if (selector.includes('Assertion')) {\n const assertions1 = element.getElementsByTagName('Assertion');\n const assertions2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n return [...Array.from(assertions1), ...Array.from(assertions2)];\n }\n if (selector.includes('Attribute')) {\n const attrs1 = element.getElementsByTagName('Attribute');\n const attrs2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Attribute');\n return [...Array.from(attrs1), ...Array.from(attrs2)];\n }\n if (selector.includes('AttributeValue')) {\n const values1 = element.getElementsByTagName('AttributeValue');\n const values2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'AttributeValue');\n return [...Array.from(values1), ...Array.from(values2)];\n }\n return [];\n}\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = querySelector(doc, 'Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(querySelector(doc, 'Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: any) {\n const statusElements = responseElement.getElementsByTagName('Status');\n const statusElement = statusElements.length > 0 ? statusElements[0] : \n responseElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Status')[0];\n \n let statusCodeElement = null;\n if (statusElement) {\n const statusCodes = statusElement.getElementsByTagName('StatusCode');\n statusCodeElement = statusCodes.length > 0 ? statusCodes[0] : \n statusElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'StatusCode')[0];\n }\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: undefined\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: any) {\n const signatures = element.getElementsByTagName('Signature');\n return {\n present: signatures.length > 0\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: any): SamlAssertion[] {\n const assertionElements = querySelectorAll(responseElement, 'Assertion');\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: any): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.getElementsByTagName('Issuer')[0] || \n assertionElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Issuer')[0]),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElements = assertionElement.getElementsByTagName('Subject');\n const subjectElement = subjectElements.length > 0 ? subjectElements[0] : \n assertionElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Subject')[0];\n \n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElements = assertionElement.getElementsByTagName('Conditions');\n const conditionsElement = conditionsElements.length > 0 ? conditionsElements[0] : \n assertionElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Conditions')[0];\n \n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElements = assertionElement.getElementsByTagName('AuthnStatement');\n const authnStatementElement = authnStatementElements.length > 0 ? authnStatementElements[0] : \n assertionElement.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'AuthnStatement')[0];\n \n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",5,[151,170,176],{"_152":177,"_104":329,"_109":330,"_155":138,"_280":331},14,["D",1747948648894],[332],{"_107":333,"_155":138,"_152":177,"_100":176,"_163":334,"_161":180,"_104":157,"_154":171,"_109":330,"_156":329,"_165":-5,"_158":27,"_164":27,"_103":335},"2a8a3ffe-3752-11f0-b92a-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport { DOMParser } from 'https://esm.sh/@xmldom/xmldom@0.8.10';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64\n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Get text content from XML element\n */\nfunction getElementText(element: any): string {\n return element?.textContent?.trim() || '';\n}\n\n/**\n * Get attribute value from XML element\n */\nfunction getElementAttribute(element: any, attributeName: string): string | undefined {\n return element?.getAttribute(attributeName) || undefined;\n}\n\n/**\n * Convert XML NodeList to Array\n */\nfunction nodeListToArray(nodeList: any): any[] {\n if (!nodeList) return [];\n return Array.from(nodeList);\n}\n\n/**\n * Query selector that works with xmldom\n */\nfunction querySelector(doc: any, selector: string): any {\n // Simple implementation for common SAML selectors\n if (selector.includes('Response')) {\n return doc.getElementsByTagName('Response')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Response')[0];\n }\n if (selector.includes('Issuer')) {\n return doc.getElementsByTagName('Issuer')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Issuer')[0];\n }\n if (selector.includes('Status')) {\n return doc.getElementsByTagName('Status')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Status')[0];\n }\n if (selector.includes('StatusCode')) {\n return doc.getElementsByTagName('StatusCode')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'StatusCode')[0];\n }\n if (selector.includes('Assertion')) {\n return doc.getElementsByTagName('Assertion') || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n }\n return null;\n}\n\n/**\n * Query selector all that works with xmldom\n */\nfunction querySelectorAll(element: any, selector: string): any[] {\n if (selector.includes('Assertion')) {\n const assertions1 = element.getElementsByTagName('Assertion');\n const assertions2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n return [...Array.from(assertions1), ...Array.from(assertions2)];\n }\n if (selector.includes('Attribute')) {\n const attrs1 = element.getElementsByTagName('Attribute');\n const attrs2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Attribute');\n return [...Array.from(attrs1), ...Array.from(attrs2)];\n }\n if (selector.includes('AttributeValue')) {\n const values1 = element.getElementsByTagName('AttributeValue');\n const values2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'AttributeValue');\n return [...Array.from(values1), ...Array.from(values2)];\n }\n return [];\n}\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = querySelector(doc, 'Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(querySelector(doc, 'Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: Element) {\n const statusElement = responseElement.querySelector('Status, samlp\\\\:Status, saml2p\\\\:Status');\n const statusCodeElement = statusElement?.querySelector('StatusCode, samlp\\\\:StatusCode, saml2p\\\\:StatusCode');\n const statusMessageElement = statusElement?.querySelector('StatusMessage, samlp\\\\:StatusMessage, saml2p\\\\:StatusMessage');\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: getElementText(statusMessageElement)\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: Element) {\n const signatureElement = element.querySelector('Signature, ds\\\\:Signature');\n return {\n present: !!signatureElement\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: Element): SamlAssertion[] {\n const assertionElements = nodeListToArray(\n responseElement.querySelectorAll('Assertion, saml\\\\:Assertion, saml2\\\\:Assertion')\n );\n\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: Element): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElement = assertionElement.querySelector('Subject, saml\\\\:Subject, saml2\\\\:Subject');\n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElement = assertionElement.querySelector('Conditions, saml\\\\:Conditions, saml2\\\\:Conditions');\n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElement = assertionElement.querySelector('AuthnStatement, saml\\\\:AuthnStatement, saml2\\\\:AuthnStatement');\n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",[151,170,176],{"_152":177,"_104":337,"_109":338,"_155":138,"_280":339},13,["D",1747948638092],[340],{"_107":341,"_155":138,"_152":177,"_100":176,"_163":342,"_161":180,"_104":266,"_154":171,"_109":338,"_156":337,"_165":-5,"_158":27,"_164":27,"_103":343},"241a161c-3752-11f0-8e10-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport { DOMParser } from 'https://esm.sh/@xmldom/xmldom@0.8.10';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64\n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Get text content from XML element\n */\nfunction getElementText(element: any): string {\n return element?.textContent?.trim() || '';\n}\n\n/**\n * Get attribute value from XML element\n */\nfunction getElementAttribute(element: any, attributeName: string): string | undefined {\n return element?.getAttribute(attributeName) || undefined;\n}\n\n/**\n * Convert XML NodeList to Array\n */\nfunction nodeListToArray(nodeList: any): any[] {\n if (!nodeList) return [];\n return Array.from(nodeList);\n}\n\n/**\n * Query selector that works with xmldom\n */\nfunction querySelector(doc: any, selector: string): any {\n // Simple implementation for common SAML selectors\n if (selector.includes('Response')) {\n return doc.getElementsByTagName('Response')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Response')[0];\n }\n if (selector.includes('Issuer')) {\n return doc.getElementsByTagName('Issuer')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Issuer')[0];\n }\n if (selector.includes('Status')) {\n return doc.getElementsByTagName('Status')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'Status')[0];\n }\n if (selector.includes('StatusCode')) {\n return doc.getElementsByTagName('StatusCode')[0] || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:protocol', 'StatusCode')[0];\n }\n if (selector.includes('Assertion')) {\n return doc.getElementsByTagName('Assertion') || \n doc.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n }\n return null;\n}\n\n/**\n * Query selector all that works with xmldom\n */\nfunction querySelectorAll(element: any, selector: string): any[] {\n if (selector.includes('Assertion')) {\n const assertions1 = element.getElementsByTagName('Assertion');\n const assertions2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Assertion');\n return [...Array.from(assertions1), ...Array.from(assertions2)];\n }\n if (selector.includes('Attribute')) {\n const attrs1 = element.getElementsByTagName('Attribute');\n const attrs2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Attribute');\n return [...Array.from(attrs1), ...Array.from(attrs2)];\n }\n if (selector.includes('AttributeValue')) {\n const values1 = element.getElementsByTagName('AttributeValue');\n const values2 = element.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'AttributeValue');\n return [...Array.from(values1), ...Array.from(values2)];\n }\n return [];\n}\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = doc.querySelector('Response, samlp\\\\:Response, saml2p\\\\:Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(responseElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: Element) {\n const statusElement = responseElement.querySelector('Status, samlp\\\\:Status, saml2p\\\\:Status');\n const statusCodeElement = statusElement?.querySelector('StatusCode, samlp\\\\:StatusCode, saml2p\\\\:StatusCode');\n const statusMessageElement = statusElement?.querySelector('StatusMessage, samlp\\\\:StatusMessage, saml2p\\\\:StatusMessage');\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: getElementText(statusMessageElement)\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: Element) {\n const signatureElement = element.querySelector('Signature, ds\\\\:Signature');\n return {\n present: !!signatureElement\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: Element): SamlAssertion[] {\n const assertionElements = nodeListToArray(\n responseElement.querySelectorAll('Assertion, saml\\\\:Assertion, saml2\\\\:Assertion')\n );\n\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: Element): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElement = assertionElement.querySelector('Subject, saml\\\\:Subject, saml2\\\\:Subject');\n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElement = assertionElement.querySelector('Conditions, saml\\\\:Conditions, saml2\\\\:Conditions');\n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElement = assertionElement.querySelector('AuthnStatement, saml\\\\:AuthnStatement, saml2\\\\:AuthnStatement');\n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",[151,170,176],{"_152":177,"_104":345,"_109":346,"_155":138,"_280":347},12,["D",1747948578087],[348],{"_107":349,"_155":138,"_152":177,"_100":176,"_163":350,"_161":180,"_104":251,"_154":171,"_109":346,"_156":345,"_165":-5,"_158":27,"_164":27,"_103":351},"0056105a-3752-11f0-93d8-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport { DOMParser } from 'https://esm.sh/@xmldom/xmldom@0.8.10';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64\n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Get text content from XML element\n */\nfunction getElementText(element: Element | null): string {\n return element?.textContent?.trim() || '';\n}\n\n/**\n * Get attribute value from XML element\n */\nfunction getElementAttribute(element: Element | null, attributeName: string): string | undefined {\n return element?.getAttribute(attributeName) || undefined;\n}\n\n/**\n * Convert XML NodeList to Array\n */\nfunction nodeListToArray(nodeList: NodeListOf): Element[] {\n return Array.from(nodeList);\n}\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = doc.querySelector('Response, samlp\\\\:Response, saml2p\\\\:Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(responseElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: Element) {\n const statusElement = responseElement.querySelector('Status, samlp\\\\:Status, saml2p\\\\:Status');\n const statusCodeElement = statusElement?.querySelector('StatusCode, samlp\\\\:StatusCode, saml2p\\\\:StatusCode');\n const statusMessageElement = statusElement?.querySelector('StatusMessage, samlp\\\\:StatusMessage, saml2p\\\\:StatusMessage');\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: getElementText(statusMessageElement)\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: Element) {\n const signatureElement = element.querySelector('Signature, ds\\\\:Signature');\n return {\n present: !!signatureElement\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: Element): SamlAssertion[] {\n const assertionElements = nodeListToArray(\n responseElement.querySelectorAll('Assertion, saml\\\\:Assertion, saml2\\\\:Assertion')\n );\n\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: Element): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElement = assertionElement.querySelector('Subject, saml\\\\:Subject, saml2\\\\:Subject');\n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElement = assertionElement.querySelector('Conditions, saml\\\\:Conditions, saml2\\\\:Conditions');\n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElement = assertionElement.querySelector('AuthnStatement, saml\\\\:AuthnStatement, saml2\\\\:AuthnStatement');\n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",[151,170,176],{"_152":177,"_104":353,"_109":354,"_155":138,"_280":355},11,["D",1747948573191],[356],{"_107":357,"_155":138,"_152":177,"_100":176,"_163":358,"_161":180,"_104":191,"_154":171,"_109":354,"_156":353,"_165":-5,"_158":27,"_164":27,"_103":359},"fd6a4c58-3751-11f0-8e76-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport { DOMParser } from 'https://esm.sh/@xmldom/xmldom@0.8.10';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64\n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = doc.querySelector('Response, samlp\\\\:Response, saml2p\\\\:Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(responseElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: Element) {\n const statusElement = responseElement.querySelector('Status, samlp\\\\:Status, saml2p\\\\:Status');\n const statusCodeElement = statusElement?.querySelector('StatusCode, samlp\\\\:StatusCode, saml2p\\\\:StatusCode');\n const statusMessageElement = statusElement?.querySelector('StatusMessage, samlp\\\\:StatusMessage, saml2p\\\\:StatusMessage');\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: getElementText(statusMessageElement)\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: Element) {\n const signatureElement = element.querySelector('Signature, ds\\\\:Signature');\n return {\n present: !!signatureElement\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: Element): SamlAssertion[] {\n const assertionElements = nodeListToArray(\n responseElement.querySelectorAll('Assertion, saml\\\\:Assertion, saml2\\\\:Assertion')\n );\n\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: Element): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElement = assertionElement.querySelector('Subject, saml\\\\:Subject, saml2\\\\:Subject');\n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElement = assertionElement.querySelector('Conditions, saml\\\\:Conditions, saml2\\\\:Conditions');\n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElement = assertionElement.querySelector('AuthnStatement, saml\\\\:AuthnStatement, saml2\\\\:AuthnStatement');\n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",[151,170,176],{"_152":188,"_104":189,"_109":361,"_155":138,"_280":362},["D",1747948516897],[363],{"_107":186,"_155":138,"_152":188,"_100":187,"_163":193,"_161":192,"_104":191,"_154":153,"_109":361,"_156":189,"_165":-5,"_158":159,"_164":27,"_103":364},[151,187],{"_152":221,"_104":222,"_109":366,"_155":138,"_280":367},["D",1747948514270],[368],{"_107":219,"_155":138,"_152":221,"_100":220,"_163":224,"_161":180,"_104":31,"_154":206,"_109":366,"_156":222,"_165":-5,"_158":159,"_164":27,"_103":369},[199,205,220],{"_152":230,"_104":231,"_109":371,"_155":138,"_280":372},["D",1747948483078],[373],{"_107":228,"_155":138,"_152":230,"_100":229,"_163":233,"_161":180,"_104":31,"_154":206,"_109":371,"_156":231,"_165":-5,"_158":159,"_164":27,"_103":374},[199,205,229],{"_152":213,"_104":207,"_109":376,"_155":138,"_280":377},["D",1747948449486],[378,380],{"_107":211,"_155":138,"_152":213,"_100":212,"_163":215,"_161":180,"_104":31,"_154":206,"_109":376,"_156":207,"_165":-5,"_158":159,"_164":27,"_103":379},[199,205,212],{"_107":204,"_155":138,"_152":206,"_100":205,"_163":-5,"_161":162,"_104":31,"_154":200,"_109":381,"_156":207,"_165":-5,"_158":159,"_164":27,"_103":382},["D",1747948449486],[199,205],{"_152":240,"_104":179,"_109":384,"_155":138,"_280":385},["D",1747948440369],[386,388],{"_107":238,"_155":138,"_152":240,"_100":239,"_163":243,"_161":242,"_104":31,"_154":200,"_109":384,"_156":179,"_165":-5,"_158":159,"_164":27,"_103":387},[199,239],{"_107":198,"_155":138,"_152":200,"_100":199,"_163":-5,"_161":162,"_104":31,"_154":-5,"_109":389,"_156":179,"_165":-5,"_158":159,"_164":27,"_103":390},["D",1747948440369],[199],{"_152":188,"_104":326,"_109":392,"_155":138,"_280":393},["D",1747948432757],[394],{"_107":395,"_155":138,"_152":188,"_100":187,"_163":193,"_161":180,"_104":31,"_154":153,"_109":392,"_156":326,"_165":-5,"_158":27,"_164":27,"_103":396},"a9b5b3f4-3751-11f0-8254-9e149126039e",[151,187],{"_152":177,"_104":157,"_109":398,"_155":138,"_280":399},["D",1747948426155],[400,404,407],{"_107":401,"_155":138,"_152":177,"_100":176,"_163":402,"_161":180,"_104":31,"_154":171,"_109":398,"_156":157,"_165":-5,"_158":27,"_164":27,"_103":403},"a5c6d07a-3751-11f0-8254-9e149126039e","import { Hono } from 'https://esm.sh/hono@3.11.7';\nimport type { \n DecodeRequest, \n DecodeResponse, \n SamlResponse, \n SamlAssertion, \n SamlAttribute \n} from '../../shared/types.ts';\nimport { \n extractSamlFromUrl, \n decodeBase64, \n getElementText, \n getElementAttribute, \n nodeListToArray \n} from '../../shared/utils.ts';\n\nconst app = new Hono();\n\n/**\n * Parse SAML XML and extract structured data\n */\nfunction parseSamlXml(xml: string): SamlResponse {\n const parser = new DOMParser();\n const doc = parser.parseFromString(xml, 'text/xml');\n \n if (doc.documentElement.nodeName === 'parsererror') {\n throw new Error('Invalid XML format');\n }\n\n const responseElement = doc.querySelector('Response, samlp\\\\:Response, saml2p\\\\:Response');\n if (!responseElement) {\n throw new Error('No SAML Response element found');\n }\n\n // Extract response-level information\n const response: SamlResponse = {\n id: getElementAttribute(responseElement, 'ID') || '',\n version: getElementAttribute(responseElement, 'Version') || '',\n issueInstant: getElementAttribute(responseElement, 'IssueInstant') || '',\n destination: getElementAttribute(responseElement, 'Destination'),\n inResponseTo: getElementAttribute(responseElement, 'InResponseTo'),\n issuer: getElementText(responseElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n status: parseStatus(responseElement),\n assertions: parseAssertions(responseElement),\n signature: parseSignature(responseElement),\n rawXml: xml\n };\n\n return response;\n}\n\n/**\n * Parse status from SAML response\n */\nfunction parseStatus(responseElement: Element) {\n const statusElement = responseElement.querySelector('Status, samlp\\\\:Status, saml2p\\\\:Status');\n const statusCodeElement = statusElement?.querySelector('StatusCode, samlp\\\\:StatusCode, saml2p\\\\:StatusCode');\n const statusMessageElement = statusElement?.querySelector('StatusMessage, samlp\\\\:StatusMessage, saml2p\\\\:StatusMessage');\n \n return {\n statusCode: getElementAttribute(statusCodeElement, 'Value') || 'Unknown',\n statusMessage: getElementText(statusMessageElement)\n };\n}\n\n/**\n * Parse signature information\n */\nfunction parseSignature(element: Element) {\n const signatureElement = element.querySelector('Signature, ds\\\\:Signature');\n return {\n present: !!signatureElement\n };\n}\n\n/**\n * Parse all assertions from SAML response\n */\nfunction parseAssertions(responseElement: Element): SamlAssertion[] {\n const assertionElements = nodeListToArray(\n responseElement.querySelectorAll('Assertion, saml\\\\:Assertion, saml2\\\\:Assertion')\n );\n\n return assertionElements.map(parseAssertion);\n}\n\n/**\n * Parse individual assertion\n */\nfunction parseAssertion(assertionElement: Element): SamlAssertion {\n const assertion: SamlAssertion = {\n id: getElementAttribute(assertionElement, 'ID') || '',\n issueInstant: getElementAttribute(assertionElement, 'IssueInstant') || '',\n issuer: getElementText(assertionElement.querySelector('Issuer, saml\\\\:Issuer, saml2\\\\:Issuer')),\n attributes: parseAttributes(assertionElement)\n };\n\n // Parse subject\n const subjectElement = assertionElement.querySelector('Subject, saml\\\\:Subject, saml2\\\\:Subject');\n if (subjectElement) {\n assertion.subject = parseSubject(subjectElement);\n }\n\n // Parse conditions\n const conditionsElement = assertionElement.querySelector('Conditions, saml\\\\:Conditions, saml2\\\\:Conditions');\n if (conditionsElement) {\n assertion.conditions = parseConditions(conditionsElement);\n }\n\n // Parse authentication statement\n const authnStatementElement = assertionElement.querySelector('AuthnStatement, saml\\\\:AuthnStatement, saml2\\\\:AuthnStatement');\n if (authnStatementElement) {\n assertion.authnStatement = parseAuthnStatement(authnStatementElement);\n }\n\n return assertion;\n}\n\n/**\n * Parse subject from assertion\n */\nfunction parseSubject(subjectElement: Element) {\n const nameIdElement = subjectElement.querySelector('NameID, saml\\\\:NameID, saml2\\\\:NameID');\n const subjectConfirmationElement = subjectElement.querySelector('SubjectConfirmation, saml\\\\:SubjectConfirmation, saml2\\\\:SubjectConfirmation');\n \n const subject: any = {\n nameId: getElementText(nameIdElement),\n nameIdFormat: getElementAttribute(nameIdElement, 'Format')\n };\n\n if (subjectConfirmationElement) {\n const confirmationDataElement = subjectConfirmationElement.querySelector('SubjectConfirmationData, saml\\\\:SubjectConfirmationData, saml2\\\\:SubjectConfirmationData');\n subject.subjectConfirmation = {\n method: getElementAttribute(subjectConfirmationElement, 'Method') || '',\n notOnOrAfter: getElementAttribute(confirmationDataElement, 'NotOnOrAfter'),\n recipient: getElementAttribute(confirmationDataElement, 'Recipient'),\n inResponseTo: getElementAttribute(confirmationDataElement, 'InResponseTo')\n };\n }\n\n return subject;\n}\n\n/**\n * Parse conditions from assertion\n */\nfunction parseConditions(conditionsElement: Element) {\n const audienceRestrictionElements = nodeListToArray(\n conditionsElement.querySelectorAll('AudienceRestriction Audience, saml\\\\:AudienceRestriction saml\\\\:Audience, saml2\\\\:AudienceRestriction saml2\\\\:Audience')\n );\n\n return {\n notBefore: getElementAttribute(conditionsElement, 'NotBefore'),\n notOnOrAfter: getElementAttribute(conditionsElement, 'NotOnOrAfter'),\n audienceRestriction: audienceRestrictionElements.map(el => getElementText(el))\n };\n}\n\n/**\n * Parse authentication statement\n */\nfunction parseAuthnStatement(authnStatementElement: Element) {\n const authnContextElement = authnStatementElement.querySelector('AuthnContext AuthnContextClassRef, saml\\\\:AuthnContext saml\\\\:AuthnContextClassRef, saml2\\\\:AuthnContext saml2\\\\:AuthnContextClassRef');\n \n return {\n authnInstant: getElementAttribute(authnStatementElement, 'AuthnInstant') || '',\n authnContext: getElementText(authnContextElement),\n sessionIndex: getElementAttribute(authnStatementElement, 'SessionIndex')\n };\n}\n\n/**\n * Parse attributes from assertion\n */\nfunction parseAttributes(assertionElement: Element): SamlAttribute[] {\n const attributeElements = nodeListToArray(\n assertionElement.querySelectorAll('AttributeStatement Attribute, saml\\\\:AttributeStatement saml\\\\:Attribute, saml2\\\\:AttributeStatement saml2\\\\:Attribute')\n );\n\n return attributeElements.map(attributeElement => {\n const valueElements = nodeListToArray(\n attributeElement.querySelectorAll('AttributeValue, saml\\\\:AttributeValue, saml2\\\\:AttributeValue')\n );\n\n return {\n name: getElementAttribute(attributeElement, 'Name') || '',\n friendlyName: getElementAttribute(attributeElement, 'FriendlyName'),\n nameFormat: getElementAttribute(attributeElement, 'NameFormat'),\n values: valueElements.map(el => getElementText(el))\n };\n });\n}\n\n// Decode SAML response from URL\napp.post('/decode', async (c) => {\n try {\n const body: DecodeRequest = await c.req.json();\n \n if (!body.url) {\n return c.json({\n success: false,\n error: 'URL is required'\n }, 400);\n }\n\n // Extract SAML response from URL\n const encodedSaml = extractSamlFromUrl(body.url);\n if (!encodedSaml) {\n return c.json({\n success: false,\n error: 'No SAMLResponse parameter found in URL'\n }, 400);\n }\n\n // Decode base64\n const decodedXml = decodeBase64(encodedSaml);\n \n // Parse SAML XML\n const samlResponse = parseSamlXml(decodedXml);\n\n return c.json({\n success: true,\n samlResponse\n });\n\n } catch (error) {\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\n// Verify SAML signature (placeholder - would need crypto implementation)\napp.post('/verify', async (c) => {\n try {\n const body = await c.req.json();\n \n // This is a placeholder for signature verification\n // In a real implementation, you would:\n // 1. Parse the certificate\n // 2. Extract the signature from the SAML response\n // 3. Verify the signature using the certificate's public key\n \n return c.json({\n success: true,\n verified: false,\n error: 'Signature verification not yet implemented'\n });\n\n } catch (error) {\n return c.json({\n success: false,\n verified: false,\n error: error instanceof Error ? error.message : 'Unknown error occurred'\n }, 500);\n }\n});\n\nexport default app;",[151,170,176],{"_107":169,"_155":138,"_152":171,"_100":170,"_163":-5,"_161":162,"_104":31,"_154":153,"_109":405,"_156":157,"_165":-5,"_158":159,"_164":27,"_103":406},["D",1747948426155],[151,170],{"_107":150,"_155":138,"_152":153,"_100":151,"_163":-5,"_161":162,"_104":31,"_154":-5,"_109":408,"_156":157,"_165":-5,"_158":159,"_164":27,"_103":409},["D",1747948426155],[151],{"_152":265,"_104":266,"_109":411,"_155":138,"_280":412},["D",1747948393645],[413],{"_107":263,"_155":138,"_152":265,"_100":264,"_163":268,"_161":180,"_104":31,"_154":250,"_109":411,"_156":266,"_165":-5,"_158":159,"_164":27,"_103":414},[249,264],{"_152":250,"_104":251,"_109":416,"_155":138,"_280":417},["D",1747948384508],[418,420],{"_107":248,"_155":138,"_152":250,"_100":249,"_163":-5,"_161":162,"_104":31,"_154":-5,"_109":416,"_156":251,"_165":-5,"_158":159,"_164":27,"_103":419},[249],{"_107":255,"_155":138,"_152":257,"_100":256,"_163":259,"_161":180,"_104":31,"_154":250,"_109":421,"_156":251,"_165":-5,"_158":159,"_164":27,"_103":422},["D",1747948384508],[249,256],{"_152":275,"_104":191,"_109":424,"_155":138,"_280":425},["D",1747948375982],[426],{"_107":273,"_155":138,"_152":275,"_100":274,"_163":277,"_161":242,"_104":31,"_154":-5,"_109":424,"_156":191,"_165":-5,"_158":159,"_164":27,"_103":427},[274],"page","hasNext","routes/_app","actionData","errors"]

History