search

GEOLYTIX / xyz

An open source javascript framework for spatial data and application interfaces.
MIT License
88 stars 26 forks source link

Include SAML module from fork #463

Open dbauszus-glx opened 2 years ago

dbauszus-glx commented 2 years ago

The SAML2 library has some security vulnerabilities in dependencies which haven't been addressed for a while. In order to include the module in the package.json we need to create a fork of the SAML2 library with the security concernes being addressed by ourselves.

dbauszus-glx commented 2 years ago

We have now published a fork of the saml2-js library to npm as @geolytix/saml2-js

dbauszus-glx commented 1 week ago

The issues seem to have been resolved in the v4+ release of the saml2-js library.

The saml2-js library should be installed as an optional dependency with the module fully tested and documented.