SAML; Dashboard

app/routing/routers/auth/mfa.routes.js

@@ -8,12 +8,22 @@ const mfa_routes = {
     get: {
         '/setup': [
             'middleware::auth:UserOnly',
+            ['middleware::auth:RequireTrust', { scope: 'mfa.enable' }],
             'controller::auth:MFA.setup',
         ],
         '/challenge': [
             'middleware::auth:DMZOnly',
             'controller::auth:MFA.challenge',
         ],
+        '/disable': [
+            'middleware::auth:UserOnly',
+            'controller::auth:MFA.get_disable',
+        ],
+        '/disable/process': [
+            'middleware::auth:UserOnly',
+            ['middleware::auth:RequireTrust', { scope: 'mfa.disable' }],
+            'controller::auth:MFA.do_disable',
+        ],
     },
 
     post: {

app/routing/routers/auth/password.routes.js

@@ -0,0 +1,16 @@
+const password_routes = {
+    prefix: '/password',
+
+    middleware: [
+        'auth:UserOnly',
+    ],
+
+    get: {
+        '/reset': [
+            ['middleware::auth:RequireTrust', { scope: 'password.reset' }],
+            'controller::auth:Password.get_reset',
+        ],
+    },
+}
+
+module.exports = exports = password_routes

app/routing/routers/auth/saml.routes.js

@@ -0,0 +1,33 @@
+const saml_routes = {
+    prefix: '/saml',
+
+    middleware: [
+
+    ],
+
+    // TODO SLO
+
+    get: {
+        '/metadata.xml': ['controller::saml:SAML.get_metadata'],
+        '/sso': [
+            'middleware::SAMLRequest',
+            'middleware::auth:UserOnly',
+            'controller::saml:SAML.get_sso',
+        ],
+        '/logout': [
+            'middleware::SAMLRequest',
+            'middleware::auth:UserOnly',
+            'controller::saml:SAML.get_logout',
+        ],
+    },
+
+    post: {
+        '/logout': [
+            'middleware::SAMLRequest',
+            'middleware::auth:UserOnly',
+            'controller::saml:SAML.post_logout',
+        ],
+    },
+}
+
+module.exports = exports = saml_routes

app/routing/routers/auth/trust.routes.js

@@ -0,0 +1,18 @@
+const trust_routes = {
+    prefix: '/auth/trust',
+
+    middleware: [
+        'auth:UserOnly',
+    ],
+
+    get: {
+        '/token/issue': ['controller::auth:Trust.get_issue'],
+        // '/token/continue': ['controller::auth:Trust.get_continue'],
+    },
+
+    post: {
+
+    },
+}
+
+module.exports = exports = trust_routes