@continuous-excellence/ze-great-dashboard-aws 0.27.13 → 0.28.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +9 -8
- package/dist/index.js +9 -8
- package/dist/lambda.mjs +1042 -259
- package/package.json +1 -1
package/dist/cli.js
CHANGED
|
@@ -304,14 +304,14 @@ var boardSchema = z2.object({
|
|
|
304
304
|
});
|
|
305
305
|
})
|
|
306
306
|
});
|
|
307
|
-
var authSchema = z2.
|
|
307
|
+
var authSchema = z2.strictObject({
|
|
308
308
|
issuer: z2.url(),
|
|
309
|
-
/**
|
|
310
|
-
client_id: z2.string().min(1)
|
|
311
|
-
|
|
312
|
-
|
|
313
|
-
|
|
314
|
-
|
|
309
|
+
/** Browser SPA client id. It is public, unlike every source credential. */
|
|
310
|
+
client_id: z2.string().min(1),
|
|
311
|
+
/** The separately registered API resource accepted by the dashboard proxy. */
|
|
312
|
+
audience: z2.string().min(1),
|
|
313
|
+
/** A deliberately portable, explicit identity boundary for the first direct-OIDC release. */
|
|
314
|
+
allow: z2.strictObject({ subjects: z2.array(z2.string().min(1)).min(1) })
|
|
315
315
|
});
|
|
316
316
|
var boardConfigSchema = z2.object({
|
|
317
317
|
sources: z2.record(z2.string().min(1), sourceSchema).default({}),
|
|
@@ -395,7 +395,8 @@ var clientEnvSchema = z3.object({
|
|
|
395
395
|
/** Omitted entirely when unauthenticated — presence is what turns auth on. */
|
|
396
396
|
auth: z3.object({
|
|
397
397
|
issuer: z3.string().min(1),
|
|
398
|
-
clientId: z3.string().min(1)
|
|
398
|
+
clientId: z3.string().min(1),
|
|
399
|
+
audience: z3.string().min(1)
|
|
399
400
|
}).optional()
|
|
400
401
|
});
|
|
401
402
|
var clientIdentityResponseSchema = clientEnvSchema.pick({ assetPath: true, assetPathId: true }).extend({ serverVersion: z3.string().min(1) });
|
package/dist/index.js
CHANGED
|
@@ -985,14 +985,14 @@ var boardSchema = z2.object({
|
|
|
985
985
|
});
|
|
986
986
|
})
|
|
987
987
|
});
|
|
988
|
-
var authSchema = z2.
|
|
988
|
+
var authSchema = z2.strictObject({
|
|
989
989
|
issuer: z2.url(),
|
|
990
|
-
/**
|
|
991
|
-
client_id: z2.string().min(1)
|
|
992
|
-
|
|
993
|
-
|
|
994
|
-
|
|
995
|
-
|
|
990
|
+
/** Browser SPA client id. It is public, unlike every source credential. */
|
|
991
|
+
client_id: z2.string().min(1),
|
|
992
|
+
/** The separately registered API resource accepted by the dashboard proxy. */
|
|
993
|
+
audience: z2.string().min(1),
|
|
994
|
+
/** A deliberately portable, explicit identity boundary for the first direct-OIDC release. */
|
|
995
|
+
allow: z2.strictObject({ subjects: z2.array(z2.string().min(1)).min(1) })
|
|
996
996
|
});
|
|
997
997
|
var boardConfigSchema = z2.object({
|
|
998
998
|
sources: z2.record(z2.string().min(1), sourceSchema).default({}),
|
|
@@ -1076,7 +1076,8 @@ var clientEnvSchema = z3.object({
|
|
|
1076
1076
|
/** Omitted entirely when unauthenticated — presence is what turns auth on. */
|
|
1077
1077
|
auth: z3.object({
|
|
1078
1078
|
issuer: z3.string().min(1),
|
|
1079
|
-
clientId: z3.string().min(1)
|
|
1079
|
+
clientId: z3.string().min(1),
|
|
1080
|
+
audience: z3.string().min(1)
|
|
1080
1081
|
}).optional()
|
|
1081
1082
|
});
|
|
1082
1083
|
var clientIdentityResponseSchema = clientEnvSchema.pick({ assetPath: true, assetPathId: true }).extend({ serverVersion: z3.string().min(1) });
|