3

I have a completely working Saml based login. The strategy looks like this:

    mySamlStrategy = new SamlStrategy(
    {
        protocol: "https://",
        host: "myhost.com",
        path: "/login/callback",
        identifierFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:entity",
        entryPoint: "myidpentrypoint",
        issuer: "passport-saml",
        signatureAlgorithm: "sha256",
        decryptionPvk: fs.readFileSync(config.sslKey, "utf-8"),
        privateCert: fs.readFileSync(config.sslKey, "utf-8")
    },
    function (profile, done) {
        console.log("PROFILE " + profile);
        return done(null, profile);
        //have tried done(null, profile); too with same result
    }
)

The problem is the function is never called. It does not logs the profile.

My authentication route looks like this:

router.all("/login", logincheck, passport.authenticate("saml", { session: true, failureFlash: true }), function (req, res, next) {
  console.log(req.session.redirectTo);
  if (req.user) {
    console.log(req.user);
    console.log("ALREADY LOGGED IN");
    next();
  } else {
    console.log("GOING TO LOGIN");
    res.redirect(307, "/login/callback");
  }
}
);

Here too, the function after the passport.authenticate is never called. My login callback route looks like this:

router.post("/login/callback", function (req, res, next) {
  if (req.body.SAMLResponse) {
    console.log("GETTING SAML RESPONSE");
    req.session.user = req.body.SAMLResponse;
    let parser = new Saml2js(req.session.user);
    req.session.userData = parser.toObject();
    require("../helpers/logLogin")(req.session.userData);
    console.log(req.session.userData.userId);
    res.redirect(302, req.session.redirectTo);
  } else {
    console.log("NO SAML - UNAUTHORIZED");
    res.sendStatus(404);
  }
});

An interesting fact is that passport never calls my serialize and deserialize functions which are as follows:

passport.serializeUser(function (user, done) {
  console.log("+++++" + user);
  done(null, user);
});

passport.deserializeUser(function (user, done) {
  console.log("-----" + user);
  done(null, user);
});

Notes: I have initialized passport and passport session. The authentication works, only the callbacks does not.

I have spent a lot of time debugging this, but with no result. I have tried most of the solutions here and on other websites. Any help is highly appreciated.

Adi.P
  • 370
  • 1
  • 12

0 Answers0