@adonis-agora/authkit-server 0.34.0 → 0.35.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/index.d.ts +1 -0
- package/build/index.js +5 -0
- package/build/providers/authkit_server_provider.js +21 -13
- package/build/src/define_config.d.ts +31 -1
- package/build/src/define_config.js +11 -1
- package/build/src/events/dispatcher.d.ts +31 -0
- package/build/src/events/dispatcher.js +41 -1
- package/build/src/host/account_api/account_api_controller.js +2 -0
- package/build/src/host/adonis_auth_sync.d.ts +27 -0
- package/build/src/host/adonis_auth_sync.js +47 -0
- package/build/src/host/adonis_auth_user_provider.d.ts +38 -0
- package/build/src/host/adonis_auth_user_provider.js +74 -0
- package/build/src/host/app_key.d.ts +18 -0
- package/build/src/host/app_key.js +28 -0
- package/build/src/host/controllers/account_security_controller.js +2 -0
- package/build/src/host/controllers/account_session_controller.js +8 -0
- package/build/src/host/ui-dist/assets/{index-CRWcmsex.js → index-CCvSqT4s.js} +1 -1
- package/build/src/host/ui-dist/index.html +1 -1
- package/build/src/observability/telescope/data_providers.js +4 -1
- package/build/src/observability/telescope/extension.js +3 -1
- package/package.json +17 -12
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
9
9
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
|
10
10
|
<link href="https://fonts.googleapis.com/css2?family=Sora:wght@400;500;600;700&family=JetBrains+Mono:ital,wght@0,400;0,500;0,600;1,400&display=swap" rel="stylesheet">
|
|
11
|
-
<script type="module" crossorigin src="/__AUTHKIT_BASE__/assets/index-
|
|
11
|
+
<script type="module" crossorigin src="/__AUTHKIT_BASE__/assets/index-CCvSqT4s.js"></script>
|
|
12
12
|
<link rel="stylesheet" crossorigin href="/__AUTHKIT_BASE__/assets/index-DTSmD4RU.css">
|
|
13
13
|
</head>
|
|
14
14
|
<body>
|
|
@@ -216,7 +216,10 @@ export function authkitTokenActivityProvider() {
|
|
|
216
216
|
event: eventOf(e),
|
|
217
217
|
subject: p?.accountId ?? "",
|
|
218
218
|
actor: p?.actorId ?? "",
|
|
219
|
-
ip:
|
|
219
|
+
// `ip` is intentionally NOT surfaced: the diagnostics bridge emits a
|
|
220
|
+
// PII-free projection of each audit event (no `email`/`ip`/`metadata`)
|
|
221
|
+
// so a deleted account's PII never lands in Telescope's store. See
|
|
222
|
+
// `redactAuditEventForDiagnostics` in events/dispatcher.ts.
|
|
220
223
|
};
|
|
221
224
|
});
|
|
222
225
|
return { rows };
|
|
@@ -125,12 +125,14 @@ function authkitSecurityDashboard(opts) {
|
|
|
125
125
|
kind: "table",
|
|
126
126
|
title: "Recent token & impersonation events",
|
|
127
127
|
data: { provider: "authkit.tokenActivity" },
|
|
128
|
+
// No "IP" column: the diagnostics bridge emits a PII-free projection
|
|
129
|
+
// (no `email`/`ip`/`metadata`), so a deleted account's PII never lands
|
|
130
|
+
// in Telescope's store. See `redactAuditEventForDiagnostics`.
|
|
128
131
|
columns: [
|
|
129
132
|
{ key: "at", label: "When" },
|
|
130
133
|
{ key: "event", label: "Event" },
|
|
131
134
|
{ key: "subject", label: "Subject" },
|
|
132
135
|
{ key: "actor", label: "Actor" },
|
|
133
|
-
{ key: "ip", label: "IP" },
|
|
134
136
|
],
|
|
135
137
|
},
|
|
136
138
|
],
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@adonis-agora/authkit-server",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.35.0",
|
|
4
4
|
"description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"author": "dudousxd",
|
|
@@ -56,15 +56,16 @@
|
|
|
56
56
|
"peerDependencies": {
|
|
57
57
|
"@adonis-agora/durable": "^0.2.0",
|
|
58
58
|
"@adonis-agora/telescope": "^0.1.0",
|
|
59
|
-
"@adonisjs/ally": "6.3.0",
|
|
60
|
-
"@adonisjs/
|
|
61
|
-
"@adonisjs/
|
|
62
|
-
"@adonisjs/
|
|
63
|
-
"@adonisjs/
|
|
64
|
-
"@adonisjs/
|
|
65
|
-
"@adonisjs/
|
|
66
|
-
"@adonisjs/
|
|
67
|
-
"
|
|
59
|
+
"@adonisjs/ally": "^6.3.0",
|
|
60
|
+
"@adonisjs/auth": "^10.1.0",
|
|
61
|
+
"@adonisjs/core": "^7.3.3",
|
|
62
|
+
"@adonisjs/drive": "^4.0.0",
|
|
63
|
+
"@adonisjs/lock": "^2.1.0",
|
|
64
|
+
"@adonisjs/lucid": "^22.4.2",
|
|
65
|
+
"@adonisjs/redis": "^9.2.0",
|
|
66
|
+
"@adonisjs/session": "^8.1.0",
|
|
67
|
+
"@adonisjs/shield": "^9.0.0",
|
|
68
|
+
"edge.js": "^6.5.1"
|
|
68
69
|
},
|
|
69
70
|
"peerDependenciesMeta": {
|
|
70
71
|
"@adonis-agora/durable": {
|
|
@@ -79,6 +80,9 @@
|
|
|
79
80
|
"@adonisjs/ally": {
|
|
80
81
|
"optional": true
|
|
81
82
|
},
|
|
83
|
+
"@adonisjs/auth": {
|
|
84
|
+
"optional": true
|
|
85
|
+
},
|
|
82
86
|
"@adonisjs/drive": {
|
|
83
87
|
"optional": true
|
|
84
88
|
},
|
|
@@ -104,7 +108,8 @@
|
|
|
104
108
|
"@adonis-agora/durable": "^0.2.0",
|
|
105
109
|
"@adonis-agora/telescope": "^0.1.0",
|
|
106
110
|
"@adonisjs/ally": "6.3.0",
|
|
107
|
-
"@adonisjs/
|
|
111
|
+
"@adonisjs/auth": "10.1.0",
|
|
112
|
+
"@adonisjs/core": "7.3.5",
|
|
108
113
|
"@adonisjs/drive": "4.0.0",
|
|
109
114
|
"@adonisjs/lucid": "22.4.2",
|
|
110
115
|
"@adonisjs/session": "8.1.0",
|
|
@@ -135,7 +140,7 @@
|
|
|
135
140
|
"react-error-boundary": "6.1.2",
|
|
136
141
|
"nuqs": "2.8.9",
|
|
137
142
|
"recharts": "3.8.1",
|
|
138
|
-
"@adonis-agora/authkit-react": "0.
|
|
143
|
+
"@adonis-agora/authkit-react": "0.13.1"
|
|
139
144
|
},
|
|
140
145
|
"scripts": {
|
|
141
146
|
"build": "node scripts/build_host_css.mjs && node scripts/build_ui.mjs && tsc && node -e \"require('node:fs').cpSync('stubs','build/stubs',{recursive:true,filter:(s)=>!s.endsWith('.ts')})\" && node -e \"const fs=require('node:fs');if(fs.existsSync('assets'))fs.cpSync('assets','build/assets',{recursive:true})\" && node -e \"require('node:fs').cpSync('src/host/views','build/host/views',{recursive:true})\" && node -e \"const fs=require('node:fs');fs.mkdirSync('build/host/ui',{recursive:true});fs.readdirSync('src/host/ui').filter(f=>f.endsWith('.html')).forEach(f=>fs.copyFileSync('src/host/ui/'+f,'build/host/ui/'+f))\" && node -e \"require('node:fs').copyFileSync('commands/commands.json','build/commands/commands.json')\" && node -e \"const fs=require('node:fs');fs.mkdirSync('build/password',{recursive:true});fs.copyFileSync('src/password/common_passwords.txt','build/password/common_passwords.txt')\"",
|