@aiam/ciba 0.9.1 → 0.9.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiam/ciba",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "OAuth 2.0 Device Authorization Grant CLI with cross-device push approval (Yjs sync, ECDH-encrypted token delivery, persistent device id)",
   "type": "module",
   "bin": {

package/token.mjs

@@ -106,16 +106,38 @@ function decrypt(map) {
 // ─── tryGet ───────────────────────────────────────────────────────────────────
 
 function tryGet(resourcesMap, deviceDoc, res) {
-  const key = res ? resourcesMap.get(res) : [...resourcesMap.values()][0];
-  if (!key) return null;
-  const map = deviceDoc.getMap(key);
-  const expiresAt = map.get('expires_at');
-  if (expiresAt && expiresAt < Date.now()) {
-    log(`  token for ${res ?? 'default'} found but expired`);
-    return null;
+  // Try the exact key first, then try known aliases.
+  const aliases = res ? [res] : [];
+  // If short name, also try known URN forms.
+  if (res && !res.includes(':')) {
+    // Read aliases from options if available (future: server can provide)
+    const opts = deviceDoc.getMap('options').get('resources') ?? {};
+    const meta = opts[res] ?? {};
+    if (meta.urn) aliases.push(meta.urn);
+    // Common fallbacks for known short names
+    if (res === 'webagents') aliases.push('urn:sap:destination:WEBAGENTS_BACKEND', 'urn:sap:destination:web_agents_gateway');
+    if (res === 'a2a') aliases.push('urn:sap:identity:application:provider:name:agent-gateway');
   }
-  if (!map.get('ciphertext')) return null;
-  return map;
+  // No resource = try first entry
+  if (!res) {
+    const first = [...resourcesMap.values()][0];
+    if (!first) return null;
+    const map = deviceDoc.getMap(first);
+    const expiresAt = map.get('expires_at');
+    if (expiresAt && expiresAt < Date.now()) return null;
+    if (!map.get('ciphertext')) return null;
+    return map;
+  }
+  for (const alias of aliases) {
+    const key = resourcesMap.get(alias);
+    if (!key) continue;
+    const map = deviceDoc.getMap(key);
+    const expiresAt = map.get('expires_at');
+    if (expiresAt && expiresAt < Date.now()) continue;
+    if (!map.get('ciphertext')) continue;
+    return map;
+  }
+  return null;
 }
 
 // ─── Output ───────────────────────────────────────────────────────────────────