如何在node.js中创建SAML断言签名

npm install xml-crypto
npm install xml-encryption
npm install xmlbuilder
npm install xmldom

const crypto = require('crypto');
const xmlCrypto = require('xml-crypto');
const xmlEncryption = require('xml-encryption');
const xmlBuilder = require('xmlbuilder');
const DOMParser = require('xmldom').DOMParser;

const signingAlgorithm = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256';
const privateKey = '-----BEGIN PRIVATE KEY-----\n[Your Private Key]\n-----END PRIVATE KEY-----';
const certificate = '-----BEGIN CERTIFICATE-----\n[Your Certificate]\n-----END CERTIFICATE-----';

function createSamlAssertion() {
  // 创建SAML断言的XML文档
  const xml = xmlBuilder.create('saml:Assertion', { version: '1.0', encoding: 'UTF-8' })
    .att('xmlns:saml', 'urn:oasis:names:tc:SAML:1.0:assertion')
    .att('xmlns:xsi', 'http://www.w3.org/2001/XMLSchema-instance')
    .att('xsi:schemaLocation', 'urn:oasis:names:tc:SAML:1.0:assertion SAMLAssertion.xsd')
    .ele('saml:Issuer', 'Your Issuer')
    .up()
    .ele('saml:Conditions')
    .up()
    .ele('saml:AuthenticationStatement')
    .up()
    .ele('saml:AttributeStatement')
    .up()
    .end({ pretty: true });

  // 对SAML断言进行签名
  const sig = new xmlCrypto.SignedXml();
  sig.addReference("//*[local-name(.)='Assertion']");
  sig.signingKey = privateKey;
  sig.signatureAlgorithm = signingAlgorithm;
  sig.computeSignature(xml.toString());

  // 将签名添加到SAML断言的XML文档中
  const signedXml = sig.getSignedXml();
  const doc = new DOMParser().parseFromString(signedXml);
  const signature = doc.getElementsByTagName('Signature')[0];
  xml.root().addChild(signature);

  // 返回SAML断言的XML文档
  return xml.toString();
}

const samlAssertion = createSamlAssertion();
console.log(samlAssertion);