I have a completely working Saml based login. The strategy looks like this:
mySamlStrategy = new SamlStrategy(
{
protocol: "https://",
host: "myhost.com",
path: "/login/callback",
identifierFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:entity",
entryPoint: "myidpentrypoint",
issuer: "passport-saml",
signatureAlgorithm: "sha256",
decryptionPvk: fs.readFileSync(config.sslKey, "utf-8"),
privateCert: fs.readFileSync(config.sslKey, "utf-8")
},
function (profile, done) {
console.log("PROFILE " + profile);
return done(null, profile);
//have tried done(null, profile); too with same result
}
)
The problem is the function is never called. It does not logs the profile.
My authentication route looks like this:
router.all("/login", logincheck, passport.authenticate("saml", { session: true, failureFlash: true }), function (req, res, next) {
console.log(req.session.redirectTo);
if (req.user) {
console.log(req.user);
console.log("ALREADY LOGGED IN");
next();
} else {
console.log("GOING TO LOGIN");
res.redirect(307, "/login/callback");
}
}
);
Here too, the function after the passport.authenticate is never called. My login callback route looks like this:
router.post("/login/callback", function (req, res, next) {
if (req.body.SAMLResponse) {
console.log("GETTING SAML RESPONSE");
req.session.user = req.body.SAMLResponse;
let parser = new Saml2js(req.session.user);
req.session.userData = parser.toObject();
require("../helpers/logLogin")(req.session.userData);
console.log(req.session.userData.userId);
res.redirect(302, req.session.redirectTo);
} else {
console.log("NO SAML - UNAUTHORIZED");
res.sendStatus(404);
}
});
An interesting fact is that passport never calls my serialize and deserialize functions which are as follows:
passport.serializeUser(function (user, done) {
console.log("+++++" + user);
done(null, user);
});
passport.deserializeUser(function (user, done) {
console.log("-----" + user);
done(null, user);
});
Notes: I have initialized passport and passport session. The authentication works, only the callbacks does not.
I have spent a lot of time debugging this, but with no result. I have tried most of the solutions here and on other websites. Any help is highly appreciated.