@contember/engine-tenant-api 2.0.0-alpha.21 → 2.0.0-alpha.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contember/engine-tenant-api",
-  "version": "2.0.0-alpha.21",
+  "version": "2.0.0-alpha.23",
   "license": "Apache-2.0",
   "main": "./dist/production/index.js",
   "typings": "./dist/types/index.d.ts",
@@ -26,16 +26,16 @@
     "generate": "gql-gen --config graphql.codegen.yml"
   },
   "dependencies": {
-    "@contember/authorization": "2.0.0-alpha.21",
-    "@contember/config-loader": "2.0.0-alpha.21",
-    "@contember/database": "2.0.0-alpha.21",
-    "@contember/database-migrations": "2.0.0-alpha.21",
-    "@contember/dic": "2.0.0-alpha.21",
-    "@contember/graphql-utils": "2.0.0-alpha.21",
-    "@contember/logger": "2.0.0-alpha.21",
-    "@contember/schema": "2.0.0-alpha.21",
-    "@contember/schema-utils": "2.0.0-alpha.21",
-    "@contember/typesafe": "2.0.0-alpha.21",
+    "@contember/authorization": "2.0.0-alpha.23",
+    "@contember/config-loader": "2.0.0-alpha.23",
+    "@contember/database": "2.0.0-alpha.23",
+    "@contember/database-migrations": "2.0.0-alpha.23",
+    "@contember/dic": "2.0.0-alpha.23",
+    "@contember/graphql-utils": "2.0.0-alpha.23",
+    "@contember/logger": "2.0.0-alpha.23",
+    "@contember/schema": "2.0.0-alpha.23",
+    "@contember/schema-utils": "2.0.0-alpha.23",
+    "@contember/typesafe": "2.0.0-alpha.23",
     "@graphql-tools/utils": "^10.5.5",
     "graphql-tag": "^2.12.6",
     "jose": "^5.8.0",
@@ -45,7 +45,7 @@
     "otpauth": "^9.3.4"
   },
   "devDependencies": {
-    "@contember/database-tester": "2.0.0-alpha.21",
+    "@contember/database-tester": "2.0.0-alpha.23",
     "@graphql-tools/schema": "^10.0.7",
     "@types/mustache": "^4.2.5",
     "@types/node": "^20.16.11",

package/src/model/service/idp/providers/OIDCHelpers.ts

@@ -25,7 +25,7 @@ export const initOIDCAuth = async (client: Client, { redirectUrl, scope, respons
 	}
 }
 
-export const handleOIDCResponse = async (client: Client, { sessionData, redirectUrl, ...otherData }: OIDCResponseData, fetchUserInfo?: boolean): Promise<IDPResponse> => {
+export const handleOIDCResponse = async (client: Client, { sessionData, redirectUrl, ...otherData }: OIDCResponseData, fetchUserInfo?: boolean, returnOIDCResult?: boolean): Promise<IDPResponse> => {
 	const params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)
 	if (params.state && !sessionData?.state) {
 		throw new IDPValidationError(`state is present in parameters, but missing in session data`)
@@ -35,9 +35,11 @@ export const handleOIDCResponse = async (client: Client, { sessionData, redirect
 		const claims = result.claims()
 		const { at_hash, c_hash, nonce, ...claimsWithoutHashes } = claims
 		const userInfo = result.access_token && fetchUserInfo ? await client.userinfo(result) : {}
-
+		const oidcResult = returnOIDCResult ? result : {}
+		
 		return {
 			externalIdentifier: claims.sub,
+			...oidcResult,
 			...claimsWithoutHashes,
 			...userInfo,
 		}

package/src/model/service/idp/providers/OIDCProvider.ts

@@ -24,7 +24,12 @@ export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration>
 	public async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {
 		const responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)
 		const client = await this.createOIDCClient(configuration)
-		return await handleOIDCResponse(client, responseData, configuration.fetchUserInfo)
+		return await handleOIDCResponse(
+			client,
+			responseData,
+			configuration.fetchUserInfo,
+			configuration.returnOIDCResult,
+		)
 	}
 
 

package/src/model/service/idp/providers/OIDCTypes.ts

@@ -13,6 +13,7 @@ export const OIDCConfigurationOptions = Typesafe.partial({
 	additionalAuthorizedParties: Typesafe.array(Typesafe.string),
 	idTokenSignedResponseAlg: Typesafe.string,
 	fetchUserInfo: Typesafe.boolean,
+	returnOIDCResult: Typesafe.boolean,
 })
 export const BaseOIDCConfiguration = Typesafe.intersection(
 	Typesafe.object({