@aauth/proxy 0.4.0 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-local.d.ts","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;
|
|
1
|
+
{"version":3,"file":"identity-local.d.ts","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AA+BrD,wBAAgB,YAAY,IAAI,WAAW,CAS1C;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAqBD,wBAAgB,+BAA+B,IAAI,gBAAgB,CAqBlE"}
|
package/dist/identity-local.js
CHANGED
|
@@ -10,6 +10,26 @@
|
|
|
10
10
|
// the agent proxy's request-signing path is unchanged; only token minting differs.
|
|
11
11
|
import { readFileSync } from 'node:fs';
|
|
12
12
|
import { createAgentToken, getAgentConfig, listAgentProviders } from '@aauth/local-keys';
|
|
13
|
+
// httpsig 2.0 (signature-key -08) takes the signing algorithm from the JWK's
|
|
14
|
+
// `alg` member, which must be fully specified (RFC 9864) — the polymorphic
|
|
15
|
+
// `EdDSA` is rejected. Neither WebCrypto/jose exportJWK (used by
|
|
16
|
+
// @aauth/local-keys for the ephemeral key) nor hand-written env JWKs reliably
|
|
17
|
+
// carry one, so derive it from the key material where that is unambiguous.
|
|
18
|
+
function withFullySpecifiedAlg(jwk) {
|
|
19
|
+
if (jwk.alg && jwk.alg !== 'EdDSA')
|
|
20
|
+
return jwk;
|
|
21
|
+
const derived = jwk.kty === 'OKP' && jwk.crv === 'Ed25519' ? 'Ed25519'
|
|
22
|
+
: jwk.kty === 'OKP' && jwk.crv === 'Ed448' ? 'Ed448'
|
|
23
|
+
: jwk.kty === 'EC' && jwk.crv === 'P-256' ? 'ES256'
|
|
24
|
+
: jwk.kty === 'EC' && jwk.crv === 'P-384' ? 'ES384'
|
|
25
|
+
: jwk.kty === 'EC' && jwk.crv === 'P-521' ? 'ES512'
|
|
26
|
+
: undefined;
|
|
27
|
+
if (!derived) {
|
|
28
|
+
// e.g. RSA: kty leaves padding and hash undetermined — refuse to guess.
|
|
29
|
+
throw new Error(`agent proxy: signing JWK needs a fully-specified alg (RFC 9864); cannot derive one from kty=${jwk.kty} crv=${jwk.crv}`);
|
|
30
|
+
}
|
|
31
|
+
return { ...jwk, alg: derived };
|
|
32
|
+
}
|
|
13
33
|
function required(name) {
|
|
14
34
|
const value = process.env[name];
|
|
15
35
|
if (!value)
|
|
@@ -21,7 +41,7 @@ export function loadIdentity() {
|
|
|
21
41
|
const agentToken = required('PROXY_AGENT_TOKEN');
|
|
22
42
|
const jwkJson = process.env.PROXY_AGENT_PRIVATE_JWK ??
|
|
23
43
|
readFileSync(process.env.PROXY_AGENT_KEY_FILE ?? '.secrets/proxy-agent-key.json', 'utf8');
|
|
24
|
-
return { psUrl, agentToken, agentPrivateJwk: JSON.parse(jwkJson) };
|
|
44
|
+
return { psUrl, agentToken, agentPrivateJwk: withFullySpecifiedAlg(JSON.parse(jwkJson)) };
|
|
25
45
|
}
|
|
26
46
|
export async function buildConfigFromLocalKeys(opts = {}) {
|
|
27
47
|
const agentUrl = opts.agentUrl ?? process.env.PROXY_AGENT_URL ?? listAgentProviders()[0];
|
|
@@ -36,7 +56,7 @@ export async function buildConfigFromLocalKeys(opts = {}) {
|
|
|
36
56
|
const { signingKey, signatureKey } = await createAgentToken({ agentUrl, local: opts.local });
|
|
37
57
|
return {
|
|
38
58
|
psUrl,
|
|
39
|
-
agentPrivateJwk: signingKey,
|
|
59
|
+
agentPrivateJwk: withFullySpecifiedAlg(signingKey),
|
|
40
60
|
agentToken: signatureKey.jwt,
|
|
41
61
|
};
|
|
42
62
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-local.js","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,sFAAsF;AAEtF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAIxF,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IAEhD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,+BAA+B,EAAE,MAAM,CAAC,CAAA;IAE3F,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;
|
|
1
|
+
{"version":3,"file":"identity-local.js","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,sFAAsF;AAEtF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAIxF,6EAA6E;AAC7E,2EAA2E;AAC3E,iEAAiE;AACjE,8EAA8E;AAC9E,2EAA2E;AAC3E,SAAS,qBAAqB,CAAyD,GAAM;IAC3F,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAA;IAC9C,MAAM,OAAO,GACX,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;QACtD,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;YACpD,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;gBACnD,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;oBACnD,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;wBACnD,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,wEAAwE;QACxE,MAAM,IAAI,KAAK,CACb,+FAA+F,GAAG,CAAC,GAAG,QAAQ,GAAG,CAAC,GAAG,EAAE,CACxH,CAAA;IACH,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAA;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IAEhD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,+BAA+B,EAAE,MAAM,CAAC,CAAA;IAE3F,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAA;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA8D,EAAE;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACjG,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,oBAAoB,CAAC,CAAA;IAEzG,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5F,OAAO;QACL,KAAK;QACL,eAAe,EAAE,qBAAqB,CAAC,UAAU,CAA+B;QAChF,UAAU,EAAE,YAAY,CAAC,GAAG;KAC7B,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,GAAW,EAAE,UAAU,GAAG,EAAE;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACxF,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,mCAAmC;AACnC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,6CAA6C;AAC7C,MAAM,UAAU,+BAA+B;IAC7C,IAAI,MAAM,GAAuB,IAAI,CAAA;IACrC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE;YACrB,IAAI,MAAM,EAAE,CAAC;gBACX,0DAA0D;gBAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;gBAC9E,wDAAwD;gBACxD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;gBAC3E,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;gBACxC,MAAM,GAAG,YAAY,EAAE,CAAA;gBACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;YACvC,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;YACvE,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;YAChD,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aauth/proxy",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.5.0",
|
|
4
4
|
"description": "The user's AAuth agent in MCP form — discovery, identity, interaction relay",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"exports": {
|
|
@@ -46,7 +46,7 @@
|
|
|
46
46
|
},
|
|
47
47
|
"dependencies": {
|
|
48
48
|
"@aauth/local-keys": "^1.1.0",
|
|
49
|
-
"@hellocoop/httpsig": "^
|
|
49
|
+
"@hellocoop/httpsig": "^2.0.0",
|
|
50
50
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
51
51
|
"uqr": "^0.1.3",
|
|
52
52
|
"zod": "^4.0.0"
|