From 072e97b956b9cd488ce73cd93eb16bd8c9bb21a5 Mon Sep 17 00:00:00 2001
From: Tuan Dang <dangtony98@gmail.com>
Date: Tue, 17 Oct 2023 16:51:46 +0100
Subject: [PATCH] Fix azure samlConfig

---
 backend/src/utils/auth.ts | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/backend/src/utils/auth.ts b/backend/src/utils/auth.ts
index 2a85bc96c..5681a36ef 100644
--- a/backend/src/utils/auth.ts
+++ b/backend/src/utils/auth.ts
@@ -291,23 +291,19 @@ const initializePassport = async () => {
         });
         
         interface ISAMLConfig {
-          path: string;
-          callbackURL: string;
+          callbackUrl: string;
           entryPoint: string;
           issuer: string;
           cert: string;
           audience: string;
-          protocol: string;
           wantAuthnResponseSigned?: boolean;
         }
         
         const samlConfig: ISAMLConfig = ({
-          path: `/api/v1/sso/saml2/${ssoIdentifier}`,
-          callbackURL: `/api/v1/sso/saml2/${ssoIdentifier}`,
+          callbackUrl: `${await getSiteURL()}/api/v1/sso/saml2/${ssoIdentifier}`,
           entryPoint: ssoConfig.entryPoint,
           issuer: ssoConfig.issuer,
           cert: ssoConfig.cert,
-          protocol: "https://",
           audience: await getSiteURL()
         });
         
@@ -316,7 +312,7 @@ const initializePassport = async () => {
         }
         
         if (ssoConfig.authProvider.toString() === AuthMethod.AZURE_SAML.toString()) {
-          samlConfig.wantAuthnResponseSigned = false;
+          samlConfig.audience = `spn:${ssoConfig.issuer}`;
         }
         
         req.ssoConfig = ssoConfig;