A TypeScript library that decodes a MYSAPSSO2 logon ticket into its user, client, system and validity fields, and returns the signature without validating it, so it never shows a ticket is genuine.
A MYSAPSSO2 cookie taken from a browser session is base64 and unreadable as it stands. decodeSAPSSO2 returns the ticket's version, id, username, client, system, issue time and validity hours; tryDecodeSAPSSO2 returns an error instead of throwing, and startTime and expirationTime turn the last two fields into dates. The signature comes back as a base64 string the package states it does not validate, so decoding a ticket says who it was issued for and when it runs out, never that it is genuine. It is a library installed from npm, with no command line or interface of its own.
AuthenticationABAPAuthenticationcapabilityEstablishing who is calling: validating credentials or tokens, resolving the user, and making that identity available to the application. [Authorization](capability:authorization) decides what that identity may do; [identity provisioning](capability:identity-provisioning) manages its lifecycle across systems.
Who is behind it
Marcello UrbaniMarcello UrbaniPersonMaintains this In the atlas: maintains 14, contributes to 21@marcellourbanimaintainer
What it declares
Every artifact
Type
Package
Origin
Independently maintained
As a package
Where it runs
does not say
declared, Where the library runs once installed: inside its host (loaded into the CAP application, installed into the ABAP system, loaded by the UI5 application), in a program of your own, or only at build time.
Distributed through
does not say
declared, How it is installed, as its documentation tells a user to get it.
Connections1
Group by
NodeRelationConditionBasis
Functional1
AuthenticationAuthenticationcapabilityEstablishing who is calling and making that identity availableSAP and community, narrow by design
→provides
Reads the user, client, system and validity window out of a MYSAPSSO2 ticket, so a caller holding one can see who it was issued for and when it expires. It states that it does not validate the ticket, and returns the signature untouched.
provides Authentication
Functional, stated
For
Reads the user, client, system and validity window out of a MYSAPSSO2 ticket, so a caller holding one can see who it was issued for and when it expires. It states that it does not validate the ticket, and returns the signature untouched.
Basis
“This decodes MYSAPSSO2 tickets, does not validate them or attempt”marcellourbani/decodesapsso2 — README, checked “The signature is not validated, just exposed as a base64 encoded string”marcellourbani/decodesapsso2 — README, checked
stated
provides Authentication
Functional, stated
For
Reads the user, client, system and validity window out of a MYSAPSSO2 ticket, so a caller holding one can see who it was issued for and when it expires. It states that it does not validate the ticket, and returns the signature untouched.
Basis
“This decodes MYSAPSSO2 tickets, does not validate them or attempt”marcellourbani/decodesapsso2 — README, checked “The signature is not validated, just exposed as a base64 encoded string”marcellourbani/decodesapsso2 — README, checked
Establishing who is calling and making that identity available
The signature is not validated, just exposed as a base64 encoded string
Example usage
import { Validation } from "io-ts"import { decodeSAPSSO2, tryDecodeSAPSSO2, SAPSSO2Ticket, startTime, expirationTime } from "decodesapsso2"const rawticket = "" // a base64 ticket, usually found as MYSAPSSO2 cookie in a browser session// Either an error or a decoded tickerconst ticketValidation: Validation<SAPSSO2Ticket> = tryDecodeSAPSSO2(rawticket)// a ticket, throws on errorconst ticket: SAPSSO2Ticket = decodeSAPSSO2(rawticket)const ticketStartTime: Date = startTime(ticket)const ticketExpiration: Date = expirationTime(ticket)
AuthenticationAuthenticationcapabilityEstablishing who is calling: validating credentials or tokens, resolving the user, and making that identity available to the application. Authorization decides what that identity may do; identity provisioning manages its lifecycle across systems.SAP and community, narrow by design
abap_jwt_generatorabap_jwt_generatorpackageGenerates a signed JSON Web Token in ABAP from an explicit header and claim, a stored profile in table ZJWT_PROFILE, or a shared secret, signing through a PSE profile or with the secret.independent, abapGenerates signed JSON Web Tokens in ABAP
abap-pwnedpasswordsabap-pwnedpasswordspackageChecks from ABAP whether a password appears in the Have I Been Pwned breached-password list, wrapping the Pwned Passwords API V3 in one call that answers with a boolean.independent, abapChecks passwords against Have I Been Pwned from ABAP
abapOAuthAzureabapOAuthAzurepackageAn Enhancement Spot OA2C_SPECIFICS implementation for Microsoft Azure, written against ABAP's OAuth 2.0 Client API, with a one-sentence README that leaves configuration to SAP's help page.independent, abapOA2C_SPECIFICS implementation for Microsoft Azure OAuth 2.0 in ABAP
abap2oauth2abap2oauth2packageAn ABAP API for OAuth 2.0 authentication that registers a provider's client ID and secret as a named consumer and implements signature method 3, the one Google uses.independent, abapABAP API for OAuth 2.0 authentication
abapNTLMabapNTLMpackageAn HTTP NTLM client for ABAP, with the RC4, MD4 and DES algorithms the protocol needs implemented in ABAP, which its maintainer says seems to work only some of the time.independent, abapHTTP NTLM client for ABAP
abap_cloud_platformabap_cloud_platformpackageA TypeScript library of the Cloud Foundry calls that walk down to an ABAP service instance, read its SAP_ADT service key and log a user in, so a tool outside the system can reach it.independent, btpTypeScript library reaching ABAP service instances on Cloud Foundry
Cloud ConnectorCloud ConnectorappSAP's on-premises agent that links SAP BTP applications to systems in a customer's own network, as a reverse invoke proxy that exposes only the systems and resources it is configured to allow.sap official, btpSAP's on-premises agent linking SAP BTP to customer-network systems
abap-aws-sigv4abap-aws-sigv4packageSigns outbound HTTP calls to AWS APIs with AWS Signature Version 4, directly from ABAP.independent, abapSigns outbound HTTP calls to AWS APIs with AWS Signature Version 4, directly from ABAP.
