Upgrade passport-saml to overleaf fork of 3.0.0 and xml-crypto to 2.1.2 (#4190)

* Use overleaf fork of passport-saml and remove existing monkey patch

* Update xml-crypto to 2.1.2

* New way of loading MultiSamlStrategy

* Rename privateCert privateKey

* Add promisified SAML Cache Provider functions for passport-saml 3.0.0

* Remove test which checked xml-crypto version for old patch

* Sign mock SAML responses with test saml-key and provide saml-cert to test settings

* Decaffeinate createMockSamlResponse.js

* Add (unused) cert property to SAML config for metadata endpoint

Removes non-needed `cert` property from `settings.test.js`

* Allow SAMLManager to accept either privateKey or privateCert (legacy) config keys

Co-authored-by: Christopher Hoskin <christopher.hoskin@gmail.com>
GitOrigin-RevId: bdb9d1c9bf72a7fbf60c0b2afa9068e7a8c147d3

services/web/package.json

@@ -135,7 +135,7 @@
     "passport-local": "^1.0.0",
     "passport-oauth2": "^1.5.0",
     "passport-orcid": "0.0.4",
-    "passport-saml": "^1.3.3",
+    "passport-saml": "https://github.com/overleaf/passport-saml/releases/download/v3.0.0-overleaf/passport-saml-3.0.0-overleaf.tar.gz",
     "passport-twitter": "^1.0.4",
     "pdfjs-dist": "^2.2.228",
     "prop-types": "^15.7.2",
@@ -169,7 +169,7 @@
     "uuid": "^3.0.1",
     "valid-data-url": "^2.0.0",
     "valid-url": "^1.0.9",
-    "xml-crypto": "1.4.0",
+    "xml-crypto": "^2.1.2",
     "xml2js": "^0.4.22",
     "xregexp": "^4.3.0",
     "yauzl": "^2.10.0"