Variable authenticateSoapCaller

Type Declaration

• • (
        spec: {
            fields?: Record<string, unknown>;
            implicitCertificates?: string[];
            rootLocalName: string;
            tlsCertificate?: string;
            xml: string;
        },
    ): {
        assessment: Assessment;
        errorCode: string;
        refuse: boolean;
        via: string;
        why: string;
    }

  • Authenticates the caller of a SOAP responder (artifact resolution, the SAML 1.1 responder): a signature verifying against the party's registered certificates, or a TLS client certificate that is one of them.

    An anonymous caller is refused where signed requests are required (STS-SAML-0077) and accepted where they are not.

    Parameters

    • spec: {
          fields?: Record<string, unknown>;
          implicitCertificates?: string[];
          rootLocalName: string;
          tlsCertificate?: string;
          xml: string;
      }

      the message, its root's local name, the entry's fields, the TLS client certificate and any implicitly trusted certificates

    Returns {
        assessment: Assessment;
        errorCode: string;
        refuse: boolean;
        via: string;
        why: string;
    }

    { refuse, errorCode, why, via, assessment }, via being signature, tls or none