[ULP-3649][ULP-3712] Fix: URL fragments in SAML Sign in URLs

[ganeshrajsekar]

Description

Purpose: This PR solves an existing bug in SAML request URL construction during sign in. If the URL contains any fragments, the fragments are not always appended at the end of the URL after all the query params.

Eg: When parsing https://example.com/#Test.

• Actual: https://example.com/#Test?SAMLRequest=...&RelayState=...
• Expected: https://example.com/?SAMLRequest=...&RelayState=...#Test

The PR solves the problem by stripping fragments and query from URL and then appending them in the correct order after parsing stage.

References

ESD Ticket: https://auth0team.atlassian.net/browse/ESD-19892 for more context

Testing

Added Unit tests for this fix covering typical URL examples with/without fragments & with/without query params

• This change adds test coverage for new/changed/fixed functionality

Checklist

• I have added documentation for new/changed functionality in this PR or in auth0.com/docs -> Not Applicable for this change
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used, if not master

[sebadoom]

Some changes required. I would stick to common URL patterns, rather than weird combinations. That is, it is fine to include some weird cases, but the base common cases should all be covered.

[sebadoom]

Looks good. Please remove the templates from the PR description.