@cloudflare/workers-oauth-provider 1.2.1 → 1.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
`@cloudflare/workers-oauth-provider` adds OAuth 2.1 authorization to HTTP APIs and remote MCP servers running on Cloudflare Workers.
|
|
4
4
|
|
|
5
|
-
> **Upgrading from 0.x, 1.0 or 1.1?** Read the [migration guide](docs/migration-1.
|
|
5
|
+
> **Upgrading from 0.x, 1.0 or 1.1?** Read the [migration guide](docs/migration-1.x.md), which covers every change since 0.10 with code, or point your coding agent at [`skills/migrate-to-1.x/`](skills/migrate-to-1.x/SKILL.md), which also ships in the npm package.
|
|
6
6
|
|
|
7
7
|
## Install
|
|
8
8
|
|
package/dist/oauth-provider.d.ts
CHANGED
|
@@ -255,7 +255,13 @@ interface EmaTrustedIssuer {
|
|
|
255
255
|
issuer: string;
|
|
256
256
|
/** HTTPS JWKS endpoint used to validate assertion signatures. */
|
|
257
257
|
jwksUri: string;
|
|
258
|
-
/**
|
|
258
|
+
/**
|
|
259
|
+
* Allowed JWT signing algorithms for this issuer: `RS256`, `ES256`, or both.
|
|
260
|
+
* Defaults to `['RS256']`, so an IdP that signs ID-JAGs with `ES256` must list it.
|
|
261
|
+
* Use the algorithm the IdP signs ID-JAGs with, which its documentation or a
|
|
262
|
+
* sample assertion's `alg` header shows. `id_token_signing_alg_values_supported`
|
|
263
|
+
* describes ID tokens and may differ.
|
|
264
|
+
*/
|
|
259
265
|
algorithms?: string[];
|
|
260
266
|
/** Expected authorization server audience. Defaults to this provider's issuer URL. */
|
|
261
267
|
audience?: string;
|