add error handling to saml-certs

Signed-off-by: Simeon Keske <git@n0emis.eu>
Signed-off-by: Leo Maroni <git@em0lar.de>
This commit is contained in:
Simeon Keske 2020-05-06 16:28:34 +02:00 committed by Leo Maroni
parent 35ec617007
commit bab0409ed0
No known key found for this signature in database
GPG key ID: B1ADA545CD2CBACD

View file

@ -16,8 +16,21 @@ passport.use(new SamlStrategy({
callbackUrl: config.serverURL + '/auth/saml/callback',
entryPoint: config.saml.idpSsoUrl,
issuer: config.saml.issuer || config.serverURL,
cert: fs.readFileSync(config.saml.idpCert, 'utf-8'),
privateCert: config.saml.clientCert === undefined ? undefined : fs.readFileSync(config.saml.clientCert, 'utf-8'),
privateCert: config.saml.clientCert === undefined ? undefined : (function () {
try {
return fs.readFileSync(config.saml.clientCert, 'utf-8')
} catch (e) {
logger.error('saml client certificate not found at: ' + config.saml.clientCert)
}
}()),
cert: (function () {
try {
return fs.readFileSync(config.saml.idpCert, 'utf-8')
} catch (e) {
logger.error('saml idp certificate not found at: ' + config.saml.idpCert)
process.exit(1)
}
}()),
identifierFormat: config.saml.identifierFormat,
disableRequestedAuthnContext: config.saml.disableRequestedAuthnContext
}, function (user, done) {