@betterportal/auth-workos 10.1.67 → 10.1.68

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/README.md +2 -0
  2. package/lib/bp-contracts/org.betterportal.auth.workos.json +3 -3
  3. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.d.ts +1 -1
  4. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.d.ts.map +1 -1
  5. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.js +1 -1
  6. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.js.map +1 -1
  7. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.d.ts +1 -1
  8. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.d.ts.map +1 -1
  9. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.js +1 -1
  10. package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.js.map +1 -1
  11. package/lib/schemas/service-betterportal-auth-workos.json +1 -1
  12. package/lib/schemas/service-betterportal-auth-workos.plugin.json +1 -1
  13. package/package.json +3 -3
package/README.md CHANGED
@@ -21,3 +21,5 @@ Registry org: `betterportal`.
21
21
  After-login and after-logout destinations are app-owned `app.auth.redirects` view references configured in Tenants & Apps, not provider addon fields.
22
22
 
23
23
  Role sync keeps BP as the permission source of truth. WorkOS permission slugs are short service-owned keys, `bp_<shortId>_<read|create|update|delete>`, with the full tenant/service/view mapping stored in `workosStatePath`. Roles are mirrored per app from WorkOS role slugs into BP app roles.
24
+
25
+ The manifest advertises role-sync endpoints through the standard `auth.roles.sync.view`, `auth.permissions.sync`, and `auth.roles.sync` operation roles. Consumers discover their published paths instead of depending on WorkOS route names.
package/lib/bp-contracts/org.betterportal.auth.workos.json CHANGED
@@ -4,7 +4,7 @@
4
4
  "pluginId": "org.betterportal.auth.workos",
5
5
  "title": "BetterPortal WorkOS",
6
6
  "description": "WorkOS-backed auth service for BetterPortal apps.",
7
- "version": "10.1.67",
7
+ "version": "10.1.68",
8
8
  "category": "service",
9
9
  "deploymentModes": [
10
10
  "self-hosted"
@@ -94,7 +94,7 @@
94
94
  "kind": "default"
95
95
  },
96
96
  "robots": [],
97
- "role": "auth.roles.sync",
97
+ "role": "auth.roles.sync.view",
98
98
  "dependencies": [],
99
99
  "apiContracts": [],
100
100
  "demoScenarios": [],
@@ -170,7 +170,7 @@
170
170
  "kind": "default"
171
171
  },
172
172
  "robots": [],
173
- "role": "auth.roles.sync",
173
+ "role": "auth.permissions.sync",
174
174
  "dependencies": [],
175
175
  "apiContracts": [],
176
176
  "demoScenarios": [],
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.d.ts CHANGED
@@ -4,7 +4,7 @@ import type { Plugin } from "../../../../../index.js";
4
4
  export declare const operationId = "workos.roles.fragment.read";
5
5
  export declare const title = "WorkOS Role Sync";
6
6
  export declare const description = "Render the WorkOS role synchronization controls.";
7
- export declare const role = "auth.roles.sync";
7
+ export declare const role = "auth.roles.sync.view";
8
8
  export declare const auth: ApiAuthRequirement;
9
9
  export declare const cacheHints: CacheHints;
10
10
  export declare const QuerySchema: av.ObjectSchema<{
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,kBAAkB,EAA0B,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,eAAO,MAAM,WAAW,+BAA+B,CAAC;AACxD,eAAO,MAAM,KAAK,qBAAqB,CAAC;AACxC,eAAO,MAAM,WAAW,qDAAqD,CAAC;AAC9E,eAAO,MAAM,IAAI,oBAAoB,CAAC;AACtC,eAAO,MAAM,IAAI,EAAE,kBAA8J,CAAC;AAClL,eAAO,MAAM,UAAU,EAAE,UAA0C,CAAC;AACpE,eAAO,MAAM,WAAW;;;EAAqF,CAAC;AAC9G,eAAO,MAAM,SAAS;;;oFAC6E,CAAC;AACpG,eAAe,SAAS,CAAC"}
1
+ {"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,kBAAkB,EAA0B,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,eAAO,MAAM,WAAW,+BAA+B,CAAC;AACxD,eAAO,MAAM,KAAK,qBAAqB,CAAC;AACxC,eAAO,MAAM,WAAW,qDAAqD,CAAC;AAC9E,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAC3C,eAAO,MAAM,IAAI,EAAE,kBAA8J,CAAC;AAClL,eAAO,MAAM,UAAU,EAAE,UAA0C,CAAC;AACpE,eAAO,MAAM,WAAW;;;EAAqF,CAAC;AAC9G,eAAO,MAAM,SAAS;;;oFAC6E,CAAC;AACpG,eAAe,SAAS,CAAC"}
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.js CHANGED
@@ -3,7 +3,7 @@ import * as av from "anyvali";
3
3
  export const operationId = "workos.roles.fragment.read";
4
4
  export const title = "WorkOS Role Sync";
5
5
  export const description = "Render the WorkOS role synchronization controls.";
6
- export const role = "auth.roles.sync";
6
+ export const role = "auth.roles.sync.view";
7
7
  export const auth = { required: true, permissions: [{ serviceId: "org.betterportal.auth.workos", viewId: "workos-role-sync.index", permissions: ["read"] }] };
8
8
  export const cacheHints = { ttlSeconds: 0, varyBy: [] };
9
9
  export const QuerySchema = av.object({ tenantId: av.string().minLength(1), appId: av.string().minLength(1) });
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAoE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AACxD,MAAM,CAAC,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAC9E,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AACtC,MAAM,CAAC,MAAM,IAAI,GAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,EAAE,wBAAwB,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAClL,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAClG,GAAG,CAAC,MAAiB,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAA6B,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACpG,eAAe,SAAS,CAAC"}
1
+ {"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAoE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AACxD,MAAM,CAAC,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAC9E,MAAM,CAAC,MAAM,IAAI,GAAG,sBAAsB,CAAC;AAC3C,MAAM,CAAC,MAAM,IAAI,GAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,EAAE,wBAAwB,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAClL,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAClG,GAAG,CAAC,MAAiB,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAA6B,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACpG,eAAe,SAAS,CAAC"}
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.d.ts CHANGED
@@ -4,7 +4,7 @@ import type { Plugin } from "../../../../../../index.js";
4
4
  export declare const operationId = "workos.permissions.sync";
5
5
  export declare const title = "Sync WorkOS Permissions";
6
6
  export declare const description = "Synchronize BetterPortal permissions to WorkOS.";
7
- export declare const role = "auth.roles.sync";
7
+ export declare const role = "auth.permissions.sync";
8
8
  export declare const auth: ApiAuthRequirement;
9
9
  export declare const cacheHints: CacheHints;
10
10
  export declare const QuerySchema: av.ObjectSchema<{
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"POST.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,kBAAkB,EAA0B,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,eAAO,MAAM,WAAW,4BAA4B,CAAC;AACrD,eAAO,MAAM,KAAK,4BAA4B,CAAC;AAC/C,eAAO,MAAM,WAAW,oDAAoD,CAAC;AAC7E,eAAO,MAAM,IAAI,oBAAoB,CAAC;AACtC,eAAO,MAAM,IAAI,EAAE,kBAAsK,CAAC;AAC1L,eAAO,MAAM,UAAU,EAAE,UAA0C,CAAC;AACpE,eAAO,MAAM,WAAW;;;EAAqF,CAAC;AAC9G,eAAO,MAAM,UAAU;;;oFAC+D,CAAC;AACvF,eAAe,UAAU,CAAC"}
1
+ {"version":3,"file":"POST.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,kBAAkB,EAA0B,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,eAAO,MAAM,WAAW,4BAA4B,CAAC;AACrD,eAAO,MAAM,KAAK,4BAA4B,CAAC;AAC/C,eAAO,MAAM,WAAW,oDAAoD,CAAC;AAC7E,eAAO,MAAM,IAAI,0BAA0B,CAAC;AAC5C,eAAO,MAAM,IAAI,EAAE,kBAAsK,CAAC;AAC1L,eAAO,MAAM,UAAU,EAAE,UAA0C,CAAC;AACpE,eAAO,MAAM,WAAW;;;EAAqF,CAAC;AAC9G,eAAO,MAAM,UAAU;;;oFAC+D,CAAC;AACvF,eAAe,UAAU,CAAC"}
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.js CHANGED
@@ -3,7 +3,7 @@ import * as av from "anyvali";
3
3
  export const operationId = "workos.permissions.sync";
4
4
  export const title = "Sync WorkOS Permissions";
5
5
  export const description = "Synchronize BetterPortal permissions to WorkOS.";
6
- export const role = "auth.roles.sync";
6
+ export const role = "auth.permissions.sync";
7
7
  export const auth = { required: true, permissions: [{ serviceId: "org.betterportal.auth.workos", viewId: "workos-role-sync.permissions", permissions: ["create"] }] };
8
8
  export const cacheHints = { ttlSeconds: 0, varyBy: [] };
9
9
  export const QuerySchema = av.object({ tenantId: av.string().minLength(1), appId: av.string().minLength(1) });
package/lib/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"POST.js","sourceRoot":"","sources":["../../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAoE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AACrD,MAAM,CAAC,MAAM,KAAK,GAAG,yBAAyB,CAAC;AAC/C,MAAM,CAAC,MAAM,WAAW,GAAG,iDAAiD,CAAC;AAC7E,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AACtC,MAAM,CAAC,MAAM,IAAI,GAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1L,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACnG,GAAG,CAAC,MAAiB,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAA6B,EAAE,GAAG,CAAC,CAAC,CAAC;AACvF,eAAe,UAAU,CAAC"}
1
+ {"version":3,"file":"POST.js","sourceRoot":"","sources":["../../../../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/.well-known/bp/config/workos-role-sync/permissions/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAoE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AACrD,MAAM,CAAC,MAAM,KAAK,GAAG,yBAAyB,CAAC;AAC/C,MAAM,CAAC,MAAM,WAAW,GAAG,iDAAiD,CAAC;AAC7E,MAAM,CAAC,MAAM,IAAI,GAAG,uBAAuB,CAAC;AAC5C,MAAM,CAAC,MAAM,IAAI,GAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1L,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACnG,GAAG,CAAC,MAAiB,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAA6B,EAAE,GAAG,CAAC,CAAC,CAAC;AACvF,eAAe,UAAU,CAAC"}
package/lib/schemas/service-betterportal-auth-workos.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "pluginName": "org.betterportal.auth.workos",
3
3
  "events": {},
4
- "version": "10.1.67",
4
+ "version": "10.1.68",
5
5
  "configSchema": {
6
6
  "anyvaliVersion": "1.0",
7
7
  "schemaVersion": "1.1",
package/lib/schemas/service-betterportal-auth-workos.plugin.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "id": "service-betterportal-auth-workos",
3
3
  "name": "org.betterportal.auth.workos",
4
- "version": "10.1.67",
4
+ "version": "10.1.68",
5
5
  "description": "BetterPortal WorkOS auth service",
6
6
  "category": "service",
7
7
  "tags": [
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@betterportal/auth-workos",
3
- "version": "10.1.67",
3
+ "version": "10.1.68",
4
4
  "description": "BetterPortal WorkOS auth service for Node.js",
5
5
  "main": "lib/index.js",
6
6
  "types": "src/index.ts",
@@ -33,8 +33,8 @@
33
33
  "typescript": "^6.0.3"
34
34
  },
35
35
  "dependencies": {
36
- "@betterportal/framework": "10.1.67",
37
- "@betterportal/plugin-bsb": "10.1.67",
36
+ "@betterportal/framework": "10.1.68",
37
+ "@betterportal/plugin-bsb": "10.1.68",
38
38
  "@bsb/base": "^9.6.70",
39
39
  "@workos-inc/node": "^10.7.0",
40
40
  "anyvali": "^1.0.6",