SnapOtter 54132d1833 feat(enterprise): add SAML 2.0 SSO with SP-initiated login ...

Implements SAML SSO using @node-saml/node-saml, gated behind
SAML_ENABLED env var and the saml_sso enterprise license feature.

- SAML env vars (entity ID, callback URL, IdP SSO URL, IdP cert,
  auto-create/auto-link users, default role, provider name,
  username/email attribute mapping) with validation in superRefine
- SAML plugin with three routes: metadata (GET), login (GET),
  and ACS callback (POST with form-urlencoded content type parser)
- Callback uses the shared external-auth resolver for user
  resolution (same pattern as OIDC: match/link/create/deny)
- Auth config endpoint exposes samlEnabled and samlProviderName
- Session loginMethod detection updated for SAML auth provider
- Frontend login page shows SAML SSO button when enabled
- i18n strings for SAML error messages across all 21 locales

2026-06-13 22:27:56 +08:00

..

ai

fix(ai): broaden SSRF pre-scan regex to cover srcset, poster, formaction, @import

2026-06-13 10:36:12 +08:00

doc-engine

fix(doc-engine): treat qpdf exit code 3 (warnings) as success, not failure

2026-06-13 14:58:16 +08:00

enterprise

fix: sort enterprise exports for Biome lint compliance

2026-06-13 17:07:49 +08:00

image-engine

test: testing overhaul -- CI e2e gates, parallel suites, generated matrices, mutation testing (#215)

2026-06-10 22:01:13 +08:00

media-engine

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

shared

feat(enterprise): add SAML 2.0 SSO with SP-initiated login

2026-06-13 22:27:56 +08:00