@checkstack/auth-common 0.6.1 → 0.6.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/package.json +2 -2
- package/src/rpc-contract.ts +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,22 @@
|
|
|
1
1
|
# @checkstack/auth-common
|
|
2
2
|
|
|
3
|
+
## 0.6.3
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Updated dependencies [8d1ef12]
|
|
8
|
+
- @checkstack/common@0.7.0
|
|
9
|
+
|
|
10
|
+
## 0.6.2
|
|
11
|
+
|
|
12
|
+
### Patch Changes
|
|
13
|
+
|
|
14
|
+
- 889dd8c: Fix session loss for LDAP and SAML authentication strategies
|
|
15
|
+
|
|
16
|
+
The auth bridge was joining multiple `Set-Cookie` headers into a single comma-separated string, which corrupted cookie attributes. This caused the `session_token` cookie to inherit the 5-minute `maxAge` from the `session_data` cache cookie instead of the intended 7-day expiry. After the cookie expired from the browser, `get-session` returned `null` and all API calls failed with 401.
|
|
17
|
+
|
|
18
|
+
Changed the `createSession` RPC contract to return `setCookies: string[]` (array) instead of `setCookie: string`, and updated LDAP/SAML consumers to use `Headers.append("Set-Cookie", ...)` to set each cookie as a separate header.
|
|
19
|
+
|
|
3
20
|
## 0.6.1
|
|
4
21
|
|
|
5
22
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@checkstack/auth-common",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.3",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"exports": {
|
|
6
6
|
".": {
|
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
}
|
|
10
10
|
},
|
|
11
11
|
"dependencies": {
|
|
12
|
-
"@checkstack/common": "0.6.
|
|
12
|
+
"@checkstack/common": "0.6.5",
|
|
13
13
|
"@orpc/contract": "^1.13.14",
|
|
14
14
|
"zod": "^4.0.0"
|
|
15
15
|
},
|
package/src/rpc-contract.ts
CHANGED
|
@@ -356,7 +356,7 @@ export const authContract = {
|
|
|
356
356
|
access: [],
|
|
357
357
|
})
|
|
358
358
|
.input(CreateSessionInputSchema)
|
|
359
|
-
.output(z.object({ sessionId: z.string(),
|
|
359
|
+
.output(z.object({ sessionId: z.string(), setCookies: z.array(z.string()) })),
|
|
360
360
|
|
|
361
361
|
getUserById: proc({
|
|
362
362
|
operationType: "query",
|