Bump xml-encryption to 1.2.1 for modern algorithm support (#145)

auth0 · Feb 3, 2021 · 7c147a3 · 7c147a3
1 parent dcfcc47
commit 7c147a3
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 2 deletions.
diff --git a/lib/passport-wsfed-saml2/samlp.js b/lib/passport-wsfed-saml2/samlp.js
@@ -323,7 +323,12 @@ Samlp.prototype = {
           return done(new Error('Assertion is encrypted. Please set options.decryptionKey with your decryption private key.'));
         }
 
-        return xmlenc.decrypt(encryptedData, { key: this.options.decryptionKey, autopadding: this.options.autopadding }, done);
+        return xmlenc.decrypt(encryptedData, { 
+          key: this.options.decryptionKey, 
+          autopadding: this.options.autopadding,
+          disallowDecryptionWithInsecureAlgorithm: false,
+          warnInsecureAlgorithm: false
+        }, done);
       }
     }
 

diff --git a/package.json b/package.json
@@ -26,7 +26,7 @@
     "uid2": "0.0.x",
     "valid-url": "^1.0.9",
     "xml-crypto": "auth0/xml-crypto#v1.4.1-auth0.2",
-    "xml-encryption": "auth0/node-xml-encryption#v0.12.0",
+    "xml-encryption": "^1.2.1",
     "xml2js": "0.1.x",
     "xmldom": "auth0/xmldom#v0.1.19-auth0.2",
     "xpath": "0.0.5",