* Fix multi saml strategy race conditions

node-saml#425

* Add warning for MultiSaml in Readme

This reverts commit f64cc7a.

* Return XML object for AttributeValue if not a string

* Test XML-valued AttributeValue returns object

Bumps [acorn](https://github.com/acornjs/acorn) from 7.1.0 to 7.4.0.
- [Release notes](https://github.com/acornjs/acorn/releases)
- [Commits](acornjs/acorn@7.1.0...7.4.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.20.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.15...4.17.20)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix duplicate bug report templates.

…dress vuln.

…lue-regression-some

Only make an attribute an object if it has child elements

…pto-upgrade

Upgrade xml-crypto dependancy

Fix typo

Node 8 LTS has been EOL since 2019-12-31. Current LTS is Node >=10, see: https://github.com/nodejs/Release.

Co-authored-by: Mark Stosberg <mark@rideamigos.com>

because we have barely valid typescript

Patches signature validation bypass using injected HMAC-SHA1 signature

…ibility

compatibility with @types/passport-saml, fixes node-saml#475

Q functions were replaced with corresponding native alternatives,
switching to async/await is not part of this PR

node-saml#455)

* validateSignature: Support XML docs that contain multiple signed nodes. Only select the signatures which reference the currentNode.

* validateSignature: Support XML docs that contain multiple signed nodes. Add tests.

Co-authored-by: Jeffrey <jeffrey@grexx.net>

…ned nodes (node-saml#455)" (node-saml#480)

This reverts commit 43df9ad.

…s. Only select the signatures which reference the currentNode. (node-saml#481)

Co-authored-by: Jeffrey <jeffrey@grexx.net>

This patch disables the `esmoduleInterop` setting that causes type
issues when the library is used by applications that do not transform
their code in this way.

Note the workaround for the `strategy.ts` file (import = require()) is
not ideal, but the export in that file is not a valid ES export, so
using this TS workaround to get past it.

fixes: node-saml#482

* feat(scoping): add scoping to authnrequest

* Correct case.

Co-authored-by: Rob Gijsens <rob.gijsens@ivengi.com>
Co-authored-by: Mark Stosberg <mark@rideamigos.com>

* Throw error objects instead of strings

While JS *technically* allows code to throw anything (including
undefined/null/NaN), it's often considered bad practice.

* Remove unnecessary wrapper object in assertion

* Allow for use of privateKey instead of privateCert

Co-authored-by: Mark Stosberg <mark@rideamigos.com>

(should have been done earlier).

…breaks-in-key

support windows line breaks in keys

Co-authored-by: Rob Gijsens <rob.gijsens@ivengi.com>

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](npm/ini@v1.3.5...v1.3.8)

Signed-off-by: dependabot[bot] <support@github.com>

…rn/ini-1.3.8

Bump ini from 1.3.5 to 1.3.8

add ts-ignore to generated type definitions for multisaml strategy

upgrade deps to latest versions

Co-authored-by: Rob Gijsens <rob.gijsens@ivengi.com>

Co-authored-by: Joshua Chen <jlchen@bethel.jw.org>

* refactor: reorder SAMLOptions types to compare with SamlConfig

* fix: expand types from SAMLOptions

* fix: derive SamlConfig from SAMLOptions

…l-crypto (node-saml#512)

…ode-saml#516)

* fix: Reexport SamlConfig type to solve a regression in consumer packages

* doc: Typo in template

https://github.com/github-tools/github-release-notes

This reverts commit 9bc09b9.

https://github.com/github-tools/github-release-notes