feat: fix sec issues with dependencies

BREAKING CHANGE: xml-encryption major version bump, fix typo in config property
from `keyEncryptionAlgorighm` to `keyEncryptionAlgorithm` consumed by
new xml-encryption library version.

Author: siacomuzzi

lib/saml11.js

@@ -55,7 +55,7 @@ function extractSaml11Options(opts) {
  * @param [options.encryptionCert] {Buffer}
  * @param [options.encryptionPublicKey] {Buffer}
  * @param [options.encryptionAlgorithm] {string}
- * @param [options.keyEncryptionAlgorighm] {string}
+ * @param [options.keyEncryptionAlgorithm] {string}
  *
  * @param {Function} [callback] required if encrypting
  * @return {String|*}
@@ -88,7 +88,7 @@ exports.create = function(options, callback) {
  * @param [options.encryptionCert] {Buffer}
  * @param [options.encryptionPublicKey] {Buffer}
  * @param [options.encryptionAlgorithm] {string}
- * @param [options.keyEncryptionAlgorighm] {string}
+ * @param [options.keyEncryptionAlgorithm] {string}
  *
  * @param {Function} [callback] required if encrypting
  * @return {String|*}

lib/saml20.js

@@ -94,7 +94,7 @@ function extractSaml20Options(opts) {
  * @param [options.encryptionCert] {Buffer}
  * @param [options.encryptionPublicKey] {Buffer}
  * @param [options.encryptionAlgorithm] {string}
- * @param [options.keyEncryptionAlgorighm] {string}
+ * @param [options.keyEncryptionAlgorithm] {string}
  *
  * @param {Function} [callback] required if encrypting
  * @return {*}
@@ -133,7 +133,7 @@ exports.create = function createSignedAssertion(options, callback) {
  * @param [options.encryptionCert] {Buffer}
  * @param [options.encryptionPublicKey] {Buffer}
  * @param [options.encryptionAlgorithm] {string}
- * @param [options.keyEncryptionAlgorighm] {string}
+ * @param [options.keyEncryptionAlgorithm] {string}
  *
  * @param {Function} [callback] required if encrypting
  * @return {*}

lib/xml/encrypt.js

@@ -10,7 +10,7 @@ exports.fromEncryptXmlOptions = function (options) {
       rsa_pub: options.encryptionPublicKey,
       pem: options.encryptionCert,
       encryptionAlgorithm: options.encryptionAlgorithm || 'http://www.w3.org/2001/04/xmlenc#aes256-cbc',
-      keyEncryptionAlgorighm: options.keyEncryptionAlgorighm || 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p',
+      keyEncryptionAlgorithm: options.keyEncryptionAlgorithm || 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p',
     };
 
     // expose the encryptOptions as these are needed when adding the SubjectConfirmation

package.json

@@ -2,11 +2,11 @@
   "name": "saml",
   "version": "0.15.0",
   "devDependencies": {
-    "@commitlint/cli": "^9.1.2",
-    "@commitlint/config-conventional": "^9.1.2",
+    "@commitlint/cli": "^11.0.0",
+    "@commitlint/config-conventional": "^11.0.0",
     "chai": "^4.2.0",
     "husky": "^4.3.0",
-    "mocha": "3.5.3",
+    "mocha": "^8.2.0",
     "should": "~1.2.1",
     "standard-version": "^9.0.0"
   },
@@ -23,7 +23,7 @@
     "moment": "2.19.3",
     "valid-url": "~1.0.9",
     "xml-crypto": "~1.0.1",
-    "xml-encryption": "0.11.2",
+    "xml-encryption": "^1.2.1",
     "xml-name-validator": "~2.0.1",
     "xmldom": "=0.1.15",
     "xpath": "0.0.5"