@contember/engine-tenant-api 1.4.6 → 1.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contember/engine-tenant-api",
-  "version": "1.4.6",
+  "version": "1.4.9",
   "license": "Apache-2.0",
   "main": "dist/src/index.js",
   "typings": "dist/src/index.d.ts",
@@ -13,16 +13,16 @@
     "test": "vitest --dir ./tests/cases --no-threads"
   },
   "dependencies": {
-    "@contember/authorization": "1.4.6",
-    "@contember/config-loader": "1.4.6",
-    "@contember/database": "1.4.6",
-    "@contember/database-migrations": "1.4.6",
-    "@contember/dic": "1.4.6",
-    "@contember/graphql-utils": "1.4.6",
-    "@contember/logger": "1.4.6",
-    "@contember/schema": "1.4.6",
-    "@contember/schema-utils": "1.4.6",
-    "@contember/typesafe": "1.4.6",
+    "@contember/authorization": "1.4.9",
+    "@contember/config-loader": "1.4.9",
+    "@contember/database": "1.4.9",
+    "@contember/database-migrations": "1.4.9",
+    "@contember/dic": "1.4.9",
+    "@contember/graphql-utils": "1.4.9",
+    "@contember/logger": "1.4.9",
+    "@contember/schema": "1.4.9",
+    "@contember/schema-utils": "1.4.9",
+    "@contember/typesafe": "1.4.9",
     "@graphql-tools/utils": "^10.0.8",
     "graphql-tag": "^2.12.6",
     "jose": "^5.1.1",
@@ -32,7 +32,7 @@
     "otpauth": "^9.1.5"
   },
   "devDependencies": {
-    "@contember/database-tester": "1.4.6",
+    "@contember/database-tester": "1.4.9",
     "@graphql-codegen/cli": "^5.0.0",
     "@graphql-codegen/typescript": "^4.0.1",
     "@graphql-codegen/typescript-operations": "^4.0.1",

package/src/model/service/idp/providers/OIDCHelpers.ts

@@ -4,10 +4,6 @@ import { IDPValidationError } from '../IDPValidationError'
 import { IDPResponseError } from '../IDPResponseError'
 import { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'
 
-custom.setHttpOptionsDefaults({
-	timeout: 5000,
-})
-
 export const initOIDCAuth = async (client: Client, { redirectUrl, claims, responseMode }: { redirectUrl: string; claims?: string; responseMode?: string }): Promise<InitIDPAuthResult> => {
 	const nonce = generators.nonce()
 	const state = generators.state()

package/src/model/service/idp/providers/OIDCProvider.ts

@@ -1,4 +1,4 @@
-import { Client, Issuer } from 'openid-client'
+import { Client, custom, Issuer } from 'openid-client'
 import { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'
 import { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'
 import { catchTypesafe } from './helpers'
@@ -6,6 +6,7 @@ import { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'
 import { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'
 import { IDPValidationError } from '../IDPValidationError'
 
+const DEFAULT_OIDC_TIMEOUT = 5000
 
 export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {
 	private issuerCache: Record<string, Issuer<Client>> = {}
@@ -40,7 +41,7 @@ export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration>
 	private async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {
 		this.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)
 
-		return new this.issuerCache[configuration.url].Client(
+		const client = new this.issuerCache[configuration.url].Client(
 			{
 				client_id: configuration.clientId,
 				client_secret: configuration.clientSecret,
@@ -52,5 +53,9 @@ export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration>
 				additionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],
 			},
 		)
+
+		client[custom.http_options] = () => ({ timeout: configuration.timeout ?? DEFAULT_OIDC_TIMEOUT })
+
+		return client
 	}
 }

package/src/model/service/idp/providers/OIDCTypes.ts

@@ -13,6 +13,7 @@ export const OIDCConfigurationOptions = Typesafe.partial({
 	idTokenSignedResponseAlg: Typesafe.string,
 	fetchUserInfo: Typesafe.boolean,
 	returnOIDCResult: Typesafe.boolean,
+	timeout: Typesafe.number,
 })
 export const BaseOIDCConfiguration = Typesafe.intersection(
 	Typesafe.object({