SAML Response encryption - setting encryptionCert and encryptionPublicKey is not working about node-samlp HOT 5 CLOSED

yes, it's supported:

samlp.auth({
  // ...
  encryptionPublicKey: fs.readFileSync(__dirname + '/your_rsa.pub'), // a valid RSA public key
  encryptionCert: fs.readFileSync(__dirname + '/your_public_cert.pem') // a valid x509 certificate encoded as PEM
})

from node-samlp.

@mcastany , could you let me know whether encryption of SAML-Response is supported and expected to work?

from node-samlp.

Awesome, this is helpful 👍 Thanks @siacomuzzi

from node-samlp.

@siacomuzzi I'm trying to implement an IdP using this library. My understanding is that encryptionPublicKey is the SP's public key which is used to encrypt the request, so that only the SP could decrypt it using it's private key.
Is that true?
Also, what is the purpose of encryptionCert? Thanks!

from node-samlp.

• encryptionPublicKey: RSA public key used by the SAML IdP to encrypt the SAMLResponse
• encryptionCert: a x509 certificate encoded as PEM used by the SAML IdP to embedded it in the SAMLResponse (inside <X509Data><X509Certificate> node)

app.get('/samlp', samlp.auth({
  encryptionPublicKey: fs.readFileSync(__dirname + '/idp_encrypt_rsa.pub'), // '-----BEGIN PUBLIC KEY-----',
  encryptionCert: fs.readFileSync(__dirname + '/idp_encrypt_public_cert.pem'), // '-----BEGIN CERTIFICATE-----',
  // ...
}));

Unfortunately, this module does not support encrypted SAMLRequests yet. Could you please explain me your requirements? A SAMLRequest usually doesn't contain much private data so there is little need to encrypt the request itself.

from node-samlp.