snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/authsources.php

@@ -0,0 +1,74 @@
+<?php
+
+$config = array(
+
+	'admin' => array(
+		'core:AdminPassword',
+	),
+
+	'example-userpass' => array(
+		'exampleauth:UserPass',
+		'samluser1:password' => array(
+			'uid' => array('1'),
+			'username' => 'samluser1',
+			'cn' => 'Saml User 1',
+			'eduPersonAffiliation' => array('group1'),
+			'email' => 'samluser1@example.com',
+		),
+		'samluser2:password' => array(
+			'uid' => array('2'),
+			'username' => 'samluser2',
+			'cn' => 'Saml User 2',
+			'eduPersonAffiliation' => array('group2'),
+			'email' => 'user_for_saml_merge@email.com',
+		),
+		'samluser3:password' => array(
+			'uid' => array('3'),
+			'username' => 'user_for_saml_merge2',
+			'cn' => 'Saml User 3',
+			'eduPersonAffiliation' => array('group2'),
+			'email' => 'samluser3@example.com',
+		),
+		'samluser4:password' => array(
+			'uid' => array('4'),
+			'username' => 'samluser4',
+			'cn' => 'Saml User 4',
+			'eduPersonAffiliation' => array('group4'),
+			'email' => 'samluser4@example.com',
+			'role' => 'saml-role',
+		),
+		'samluser5:password' => array(
+			'uid' => array('5'),
+			'username' => 'samluser5',
+			'eduPersonAffiliation' => array('group5'),
+			'email' => 'samluser5@example.com',
+		),
+		'samluser6:password' => array(
+			'uid' => array('6'),
+			'username' => 'samluser6',
+			'displayName' => 'Saml User 6 Display Name',
+			'eduPersonAffiliation' => array('group6'),
+			'email' => 'samluser6@example.com',
+		),
+		'samluser7:password' => array(
+			'uid' => array('7'),
+			'username' => 'samluser7',
+			'cn' => 'Saml User 7',
+			'eduPersonAffiliation' => array('group7'),
+			'email' => 'samluser7@example.com',
+			'channels' => array('saml-channel-1', 'saml-channel-2'),
+		),
+		'samlusernoname:password' => array(
+			'uid' => array('5'),
+			'cn' => 'Saml User No Username',
+			'eduPersonAffiliation' => array('group2'),
+			'email' => 'samlusernoname@example.com',
+		),
+		'samlusernoname2:password' => array(
+			'uid' => array('6'),
+			'cn' => 'Saml User No Username 2',
+			'eduPersonAffiliation' => array('group2'),
+			'email' => 'samlusernoname2@example.com',
+		),
+	),
+);

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/config.php

@@ -0,0 +1,112 @@
+<?php
+$config = array(
+	'baseurlpath' => 'simplesaml/',
+	'certdir' => 'cert/',
+	'loggingdir' => 'log/',
+	'datadir' => 'data/',
+	'tempdir' => '/tmp/simplesaml',
+	'debug' => true,
+	'showerrors' => true,
+	'errorreporting' => true,
+	'debug.validatexml' => false,
+	'auth.adminpassword' => 'secret',
+	'admin.protectindexpage' => false,
+	'admin.protectmetadata' => false,
+	'secretsalt' => 'defaultsecretsalt',
+	'technicalcontact_name' => 'Administrator',
+	'technicalcontact_email' => 'na@example.org',
+	'timezone' => null,
+	'logging.level' => SimpleSAML_Logger::DEBUG,
+	'logging.handler' => 'errorlog',
+	//'logging.format' => '%date{%b %d %H:%M:%S} %process %level %stat[%trackid] %msg',
+	'logging.facility' => defined('LOG_LOCAL5') ? constant('LOG_LOCAL5') : LOG_USER,
+	'logging.processname' => 'simplesamlphp',
+	'logging.logfile' => 'simplesamlphp.log',
+	'statistics.out' => array(
+	),
+	'database.dsn' => 'mysql:host=localhost;dbname=saml',
+	'database.username' => 'simplesamlphp',
+	'database.password' => 'secret',
+	'database.prefix' => '',
+	'database.persistent' => false,
+	'database.slaves' => array(
+	),
+	'enable.saml20-idp' => true,
+	'enable.shib13-idp' => true,
+	'enable.adfs-idp' => false,
+	'enable.wsfed-sp' => false,
+	'enable.authmemcookie' => false,
+	'session.duration' => 8 * (60 * 60), // 8 hours.
+	'session.datastore.timeout' => (4 * 60 * 60), // 4 hours
+	'session.state.timeout' => (60 * 60), // 1 hour
+	'session.cookie.name' => 'SimpleSAMLSessionIDIdp',
+	'session.cookie.lifetime' => 0,
+	'session.cookie.path' => '/',
+	'session.cookie.domain' => null,
+	'session.cookie.secure' => false,
+	'session.cookie.samesite' => 'Lax',
+	'enable.http_post' => false,
+	'session.phpsession.cookiename' => 'PHPSESSIDIDP',
+	'session.phpsession.savepath' => null,
+	'session.phpsession.httponly' => true,
+	'session.authtoken.cookiename' => 'SimpleSAMLAuthTokenIdp',
+	'session.rememberme.enable' => false,
+	'session.rememberme.checked' => false,
+	'session.rememberme.lifetime' => (14 * 86400),
+	'language.available' => array(
+		'en', 'no', 'nn', 'se', 'da', 'de', 'sv', 'fi', 'es', 'fr', 'it', 'nl', 'lb', 'cs',
+		'sl', 'lt', 'hr', 'hu', 'pl', 'pt', 'pt-br', 'tr', 'ja', 'zh', 'zh-tw', 'ru', 'et',
+		'he', 'id', 'sr', 'lv', 'ro', 'eu'
+	),
+	'language.rtl' => array('ar', 'dv', 'fa', 'ur', 'he'),
+	'language.default' => 'en',
+	'language.parameter.name' => 'language',
+	'language.parameter.setcookie' => true,
+	'language.cookie.name' => 'language',
+	'language.cookie.domain' => null,
+	'language.cookie.path' => '/',
+	'language.cookie.lifetime' => (60 * 60 * 24 * 900),
+	'attributes.extradictionary' => null,
+	'theme.use' => 'default',
+	'default-wsfed-idp' => 'urn:federation:pingfederate:localhost',
+	'idpdisco.enableremember' => true,
+	'idpdisco.rememberchecked' => true,
+	'idpdisco.validate' => true,
+	'idpdisco.extDiscoveryStorage' => null,
+	'idpdisco.layout' => 'dropdown',
+	'shib13.signresponse' => true,
+	'authproc.idp' => array(
+		30 => 'core:LanguageAdaptor',
+		45 => array(
+			'class'         => 'core:StatisticsWithAttribute',
+			'attributename' => 'realm',
+			'type'          => 'saml20-idp-SSO',
+		),
+		50 => 'core:AttributeLimit',
+		99 => 'core:LanguageAdaptor',
+	),
+	'authproc.sp' => array(
+		90 => 'core:LanguageAdaptor',
+	),
+	'metadata.sources' => array(
+		array('type' => 'flatfile'),
+	),
+	'store.type'                    => 'phpsession',
+	'store.sql.dsn'                 => 'sqlite:/path/to/sqlitedatabase.sq3',
+	'store.sql.username' => null,
+	'store.sql.password' => null,
+	'store.sql.prefix' => 'SimpleSAMLphp',
+	'memcache_store.servers' => array(
+		array(
+			array('hostname' => 'localhost'),
+		),
+	),
+	'memcache_store.prefix' => null,
+	'memcache_store.expires' => 36 * (60 * 60), // 36 hours.
+	'metadata.sign.enable' => false,
+	'metadata.sign.privatekey' => null,
+	'metadata.sign.privatekey_pass' => null,
+	'metadata.sign.certificate' => null,
+	'proxy' => null,
+	'trusted.url.domains' => array('localhost:3000'),
+);

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/saml20-idp-hosted.php

@@ -0,0 +1,23 @@
+<?php
+
+$metadata['http://localhost:3000/_saml/metadata/test-sp'] = [
+    'entityid' => 'http://localhost:3000/_saml/metadata/test-sp',
+    'host' => '__DEFAULT__',
+    'privatekey' => 'server.pem',
+    'certificate' => 'server.crt',
+    'auth' => 'example-userpass',
+    'redirect.sign' => true,
+
+    /*
+     * Force the NameID to be the raw email attribute value in emailAddress
+     * format, bypassing SimpleSAMLphp's default persistent (hashed) nameID
+     * generation.
+     */
+    'authproc' => [
+        100 => [
+            'class' => 'saml:AttributeNameID',
+            'attribute' => 'email',
+            'Format' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+        ],
+    ],
+];

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/saml20-sp-remote.php

@@ -0,0 +1,31 @@
+<?php
+
+$metadata['http://localhost:3000/_saml/metadata/test-sp'] = array (
+	'entityid' => 'http://localhost:3000/_saml/metadata/test-sp',
+	'contacts' => array (
+	),
+	'metadata-set' => 'saml20-sp-remote',
+	'AssertionConsumerService' => array (
+		0 => array (
+			'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
+			'Location' => 'http://localhost:3000/_saml/validate/test-sp',
+			'index' => 1,
+			'isDefault' => true,
+		),
+	),
+	'SingleLogoutService' => array (
+		0 => array (
+			'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
+			'Location' => 'http://localhost:3000/_saml/logout/test-sp/',
+			'ResponseLocation' => 'http://localhost:3000/_saml/logout/test-sp/',
+		),
+	),
+	'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+	// Other settings that may be useful for testing, but are not compatible with the existing e2e tests
+	'privatekey' => 'server.pem',
+	'certificate' => 'server.crt',
+	'redirect.sign' => true,
+	// 'redirect.validate' => true,
+	// 'validate.logout' => true,
+	// 'assertion.encryption' => true,
+);

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/server_crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

apps/meteor/tests/e2e/containers/saml/config/simplesamlphp/server_pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----