Validate nameId format
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- TypeScript
- Stars
- 2.3k
- Forks
- 232
- PR merge metrics
- No merged PRs in 30d
Description
Is your proposal related to a problem?
We require an email as the nameId format, support validation of this so that the SAML configuration is correctly set up and we can flag it if not.
Describe the solution you'd like
saml20 already supports validateNameIDFormat when parsing metadata, pass in the option when calling it.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the SAML metadata parsing call that uses saml20 and read how its options are passed. Verify how validateNameIDFormat is exposed, then update the call so the email nameId requirement is enforced and confirm invalid SAML configuration is flagged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100