move saml-provider-plugin to packages

.github/CODEOWNERS

@@ -743,7 +743,7 @@ packages/kbn-rule-data-utils @elastic/security-detections-response @elastic/resp
 x-pack/plugins/rule_registry @elastic/response-ops @elastic/obs-ux-management-team
 x-pack/plugins/runtime_fields @elastic/kibana-management
 packages/kbn-safer-lodash-set @elastic/kibana-security
-x-pack/test/security_api_integration/plugins/saml_provider @elastic/kibana-security
+packages/kbn-saml-provider-plugin @elastic/kibana-security
 x-pack/test/plugin_api_integration/plugins/sample_task_plugin @elastic/response-ops
 x-pack/test/task_manager_claimer_update_by_query/plugins/sample_task_plugin_mget @elastic/response-ops
 test/plugin_functional/plugins/saved_object_export_transforms @elastic/kibana-core

package.json

@@ -761,7 +761,6 @@
     "@kbn/rule-registry-plugin": "link:x-pack/plugins/rule_registry",
     "@kbn/runtime-fields-plugin": "link:x-pack/plugins/runtime_fields",
     "@kbn/safer-lodash-set": "link:packages/kbn-safer-lodash-set",
-    "@kbn/saml-provider-plugin": "link:x-pack/test/security_api_integration/plugins/saml_provider",
     "@kbn/sample-task-plugin": "link:x-pack/test/plugin_api_integration/plugins/sample_task_plugin",
     "@kbn/sample-task-plugin-update-by-query": "link:x-pack/test/task_manager_claimer_update_by_query/plugins/sample_task_plugin_mget",
     "@kbn/saved-object-export-transforms-plugin": "link:test/plugin_functional/plugins/saved_object_export_transforms",
@@ -1469,6 +1468,7 @@
     "@kbn/repo-path": "link:packages/kbn-repo-path",
     "@kbn/repo-source-classifier": "link:packages/kbn-repo-source-classifier",
     "@kbn/repo-source-classifier-cli": "link:packages/kbn-repo-source-classifier-cli",
+    "@kbn/saml-provider-plugin": "link:packages/kbn-saml-provider-plugin",
     "@kbn/security-api-integration-helpers": "link:x-pack/test/security_api_integration/packages/helpers",
     "@kbn/serverless-storybook-config": "link:packages/serverless/storybook/config",
     "@kbn/some-dev-log": "link:packages/kbn-some-dev-log",

packages/kbn-saml-provider-plugin/README.md

@@ -0,0 +1,3 @@
+# @kbn/saml-provider-plugin
+
+Saml provider plugin for testing purpose

x-pack/test/security_api_integration/packages/helpers/saml/saml_tools.ts → packages/kbn-saml-provider-plugin/helpers/saml_tools.ts

@@ -1,8 +1,10 @@
 /*
  * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
- * or more contributor license agreements. Licensed under the Elastic License
- * 2.0; you may not use this file except in compliance with the Elastic License
- * 2.0.
+ * or more contributor license agreements. Licensed under the "Elastic License
+ * 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side
+ * Public License v 1"; you may not use this file except in compliance with, at
+ * your election, the "Elastic License 2.0", the "GNU Affero General Public
+ * License v3.0 only", or the "Server Side Public License, v 1".
  */
 
 import crypto from 'crypto';

packages/kbn-saml-provider-plugin/index.ts

@@ -0,0 +1,21 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the "Elastic License
+ * 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side
+ * Public License v 1"; you may not use this file except in compliance with, at
+ * your election, the "Elastic License 2.0", the "GNU Affero General Public
+ * License v3.0 only", or the "Server Side Public License, v 1".
+ */
+
+import path from 'path';
+
+const resourcesPath = path.resolve(__dirname, 'resources');
+export const saml1IdPMetadataPath = path.resolve(resourcesPath, 'idp_metadata.xml');
+export const saml2IdPMetadataPath = path.resolve(resourcesPath, 'idp_metadata_2.xml');
+export const idpNeverLoginPath = path.resolve(resourcesPath, 'idp_metadata_never_login.xml');
+export const mockIdPMetadataPath = path.resolve(resourcesPath, 'idp_metadata_mock_idp.xml');
+export const pluginMetadataPath = path.resolve(resourcesPath, 'metadata.xml');
+
+export const pluginPath = path.resolve(__dirname);
+
+export * from './helpers/saml_tools';

x-pack/test/security_api_integration/plugins/saml_provider/kibana.jsonc → packages/kbn-saml-provider-plugin/kibana.jsonc

@@ -2,12 +2,13 @@
   "type": "plugin",
   "id": "@kbn/saml-provider-plugin",
   "owner": "@elastic/kibana-security",
+  "devOnly": true,
   "plugin": {
     "id": "samlProviderPlugin",
     "server": true,
     "browser": false,
     "optionalPlugins": [
       "cloud"
     ]
-  }
+  },
 }

packages/kbn-saml-provider-plugin/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "@kbn/saml-provider-plugin",
+  "private": true,
+  "version": "1.0.0",
+  "license": "Elastic License 2.0 OR AGPL-3.0-only OR SSPL-1.0"
+}

x-pack/test/security_api_integration/plugins/saml_provider/server/index.ts → packages/kbn-saml-provider-plugin/server/index.ts

@@ -1,8 +1,10 @@
 /*
  * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
- * or more contributor license agreements. Licensed under the Elastic License
- * 2.0; you may not use this file except in compliance with the Elastic License
- * 2.0.
+ * or more contributor license agreements. Licensed under the "Elastic License
+ * 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side
+ * Public License v 1"; you may not use this file except in compliance with, at
+ * your election, the "Elastic License 2.0", the "GNU Affero General Public
+ * License v3.0 only", or the "Server Side Public License, v 1".
  */
 
 import type { CloudSetup } from '@kbn/cloud-plugin/server';

x-pack/test/security_api_integration/plugins/saml_provider/server/init_routes.ts → packages/kbn-saml-provider-plugin/server/init_routes.ts

@@ -1,15 +1,14 @@
 /*
  * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
- * or more contributor license agreements. Licensed under the Elastic License
- * 2.0; you may not use this file except in compliance with the Elastic License
- * 2.0.
+ * or more contributor license agreements. Licensed under the "Elastic License
+ * 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side
+ * Public License v 1"; you may not use this file except in compliance with, at
+ * your election, the "Elastic License 2.0", the "GNU Affero General Public
+ * License v3.0 only", or the "Server Side Public License, v 1".
  */
 
 import type { CoreSetup, PluginInitializerContext } from '@kbn/core/server';
-import {
-  getSAMLRequestId,
-  getSAMLResponse,
-} from '@kbn/security-api-integration-helpers/saml/saml_tools';
+import { getSAMLRequestId, getSAMLResponse } from '../helpers/saml_tools';
 
 import type { PluginSetupDependencies } from '.';
 

packages/kbn-saml-provider-plugin/tsconfig.json

@@ -0,0 +1,21 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "target/types",
+    "types": [
+      "jest",
+      "node"
+    ]
+  },
+  "include": [
+    "**/*.ts",
+  ],
+  "exclude": [
+    "target/**/*"
+  ],
+  "kbn_references": [
+    "@kbn/dev-utils",
+    "@kbn/cloud-plugin",
+    "@kbn/core",
+  ]
+}

tsconfig.base.json

@@ -1480,8 +1480,8 @@
       "@kbn/runtime-fields-plugin/*": ["x-pack/plugins/runtime_fields/*"],
       "@kbn/safer-lodash-set": ["packages/kbn-safer-lodash-set"],
       "@kbn/safer-lodash-set/*": ["packages/kbn-safer-lodash-set/*"],
-      "@kbn/saml-provider-plugin": ["x-pack/test/security_api_integration/plugins/saml_provider"],
-      "@kbn/saml-provider-plugin/*": ["x-pack/test/security_api_integration/plugins/saml_provider/*"],
+      "@kbn/saml-provider-plugin": ["packages/kbn-saml-provider-plugin"],
+      "@kbn/saml-provider-plugin/*": ["packages/kbn-saml-provider-plugin/*"],
       "@kbn/sample-task-plugin": ["x-pack/test/plugin_api_integration/plugins/sample_task_plugin"],
       "@kbn/sample-task-plugin/*": ["x-pack/test/plugin_api_integration/plugins/sample_task_plugin/*"],
       "@kbn/sample-task-plugin-update-by-query": ["x-pack/test/task_manager_claimer_update_by_query/plugins/sample_task_plugin_mget"],

x-pack/test/api_integration/deployment_agnostic/default_configs/stateful.config.base.ts

@@ -22,6 +22,10 @@ import {
 import path from 'path';
 import { REPO_ROOT } from '@kbn/repo-info';
 import { STATEFUL_ROLES_ROOT_PATH } from '@kbn/es';
+import {
+  mockIdPMetadataPath as idpPath,
+  pluginPath as samlIdPPlugin,
+} from '@kbn/saml-provider-plugin';
 import { dockerImage } from '../../../fleet_api_integration/config.base';
 import { DeploymentAgnosticCommonServices, services } from '../services';
 
@@ -61,15 +65,6 @@ export function createStatefulTestConfig<T extends DeploymentAgnosticCommonServi
 
     const xPackAPITestsConfig = await readConfigFile(require.resolve('../../config.ts'));
 
-    // TODO: move to kbn-es because currently metadata file has hardcoded entityID and Location
-    const idpPath = require.resolve(
-      '@kbn/security-api-integration-helpers/saml/idp_metadata_mock_idp.xml'
-    );
-    const samlIdPPlugin = path.resolve(
-      __dirname,
-      '../../../security_api_integration/plugins/saml_provider'
-    );
-
     const servers = {
       kibana: {
         ...kbnTestConfig.getUrlParts(systemIndicesSuperuser),

x-pack/test/cloud_integration/config.ts

@@ -7,6 +7,10 @@
 
 import { resolve } from 'path';
 import { FtrConfigProviderContext } from '@kbn/test';
+import {
+  pluginMetadataPath as idpPath,
+  pluginPath as samlIdPPlugin,
+} from '@kbn/saml-provider-plugin';
 import { services } from '../functional/services';
 import { pageObjects } from '../functional/page_objects';
 
@@ -25,8 +29,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   );
 
   const kibanaPort = kibanaFunctionalConfig.get('servers.kibana.port');
-  const idpPath = resolve(__dirname, './plugins/saml_provider/metadata.xml');
-  const samlIdPPlugin = resolve(__dirname, './plugins/saml_provider');
 
   return {
     testFiles: [...(RUN_FULLSTORY_TESTS ? [resolve(__dirname, './tests/fullstory')] : [])],

x-pack/test/functional_cloud/config.ts

@@ -4,18 +4,17 @@
  * 2.0; you may not use this file except in compliance with the Elastic License
  * 2.0.
  */
-import { resolve } from 'path';
+
 import { FtrConfigProviderContext } from '@kbn/test';
+import {
+  pluginMetadataPath as idpPath,
+  pluginPath as samlIdPPlugin,
+} from '@kbn/saml-provider-plugin';
 
 export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const functionalConfig = await readConfigFile(require.resolve('../functional/config.base.js'));
 
   const kibanaPort = functionalConfig.get('servers.kibana.port');
-  const idpPath = resolve(
-    __dirname,
-    '../security_api_integration/plugins/saml_provider/metadata.xml'
-  );
-  const samlIdPPlugin = resolve(__dirname, '../security_api_integration/plugins/saml_provider');
 
   return {
     ...functionalConfig.getAll(),

x-pack/test/security_api_integration/login_selector.config.ts

@@ -9,6 +9,7 @@ import { readFileSync } from 'fs';
 import { resolve } from 'path';
 
 import { CA_CERT_PATH, KBN_CERT_PATH, KBN_KEY_PATH } from '@kbn/dev-utils';
+import { saml1IdPMetadataPath, saml2IdPMetadataPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 export default async function ({ readConfigFile }: FtrConfigProviderContext) {
@@ -32,13 +33,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
     '@kbn/security-api-integration-helpers/pki/kibana_ca.crt'
   );
 
-  const saml1IdPMetadataPath = require.resolve(
-    '@kbn/security-api-integration-helpers/saml/idp_metadata.xml'
-  );
-  const saml2IdPMetadataPath = require.resolve(
-    '@kbn/security-api-integration-helpers/saml/idp_metadata_2.xml'
-  );
-
   const servers = {
     ...xPackAPITestsConfig.get('servers'),
     elasticsearch: {

x-pack/test/security_api_integration/packages/helpers/tsconfig.json

@@ -14,6 +14,5 @@
     "target/**/*"
   ],
   "kbn_references": [
-    "@kbn/dev-utils",
   ]
 }

x-pack/test/security_api_integration/saml.config.ts

@@ -7,6 +7,7 @@
 
 import { resolve } from 'path';
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -15,7 +16,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   const testEndpointsPlugin = resolve(__dirname, '../security_functional/plugins/test_endpoints');
 

x-pack/test/security_api_integration/saml.http2.config.ts

@@ -6,6 +6,7 @@
  */
 
 import { CA_CERT_PATH } from '@kbn/dev-utils';
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 import { configureHTTP2 } from '@kbn/test-suites-src/common/configure_http2';
 
@@ -14,7 +15,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const functionalConfig = await readConfigFile(require.resolve('./saml.config'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   return configureHTTP2({
     ...functionalConfig.getAll(),

x-pack/test/security_api_integration/saml_cloud.config.ts

@@ -5,6 +5,7 @@
  * 2.0.
  */
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -13,7 +14,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   return {
     testFiles: [require.resolve('./tests/saml_cloud')],

x-pack/test/security_api_integration/session_concurrent_limit.config.ts

@@ -7,6 +7,7 @@
 
 import { resolve } from 'path';
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -17,7 +18,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   const testEndpointsPlugin = resolve(__dirname, '../security_functional/plugins/test_endpoints');
 

x-pack/test/security_api_integration/session_idle.config.ts

@@ -7,6 +7,7 @@
 
 import { resolve } from 'path';
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -17,7 +18,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   const testEndpointsPlugin = resolve(__dirname, '../security_functional/plugins/test_endpoints');
 

x-pack/test/security_api_integration/session_invalidate.config.ts

@@ -7,6 +7,7 @@
 
 import { resolve } from 'path';
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -17,7 +18,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   return {
     testFiles: [resolve(__dirname, './tests/session_invalidate')],

x-pack/test/security_api_integration/session_lifespan.config.ts

@@ -7,6 +7,7 @@
 
 import { resolve } from 'path';
 
+import { saml1IdPMetadataPath as idpPath } from '@kbn/saml-provider-plugin';
 import type { FtrConfigProviderContext } from '@kbn/test';
 
 import { services } from './services';
@@ -17,7 +18,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
   const xPackAPITestsConfig = await readConfigFile(require.resolve('../api_integration/config.ts'));
 
   const kibanaPort = xPackAPITestsConfig.get('servers.kibana.port');
-  const idpPath = require.resolve('@kbn/security-api-integration-helpers/saml/idp_metadata.xml');
 
   return {
     testFiles: [resolve(__dirname, './tests/session_lifespan')],