@crouter/identity 0.3.380 → 0.3.382
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
<a href="https://github.com/crouton-labs/crouter/blob/main/LICENSE"><img alt="license" src="https://img.shields.io/badge/license-GPL--3.0-blue"></a>
|
|
8
8
|
</p>
|
|
9
9
|
|
|
10
|
-
`@crouter/identity` is the token contract shared by crouter's runtime, [`@crouter/sdk`](
|
|
10
|
+
`@crouter/identity` is the token contract shared by crouter's runtime, [`@crouter/sdk`](https://www.npmjs.com/package/@crouter/sdk) and [`@crouter/plugin`](https://www.npmjs.com/package/@crouter/plugin). It does two things: it verifies the signed JWTs that a crouter cloud directory issues (access tokens, ID tokens, outbound provider tokens and grant-sync notices) against the directory's published keys, and it parses and compares scope strings such as `crtr:llm` or `crtr:memory:read:user:work/`. It is ESM-only, depends only on [`jose`](https://github.com/panva/jose), and has no side effects on import.
|
|
11
11
|
|
|
12
12
|
It is a verifier, not an identity provider. It never issues, signs or stores tokens, and it does not run a login flow; the directory does that. Most applications do not import it directly: the SDK's OAuth helpers and the plugin kit's `auth` option call it for you. Use it when you write your own provider or service that receives these tokens.
|
|
13
13
|
|
|
@@ -81,8 +81,8 @@ Paths are relative and refuse `..`, `:`, backslashes, whitespace and empty segme
|
|
|
81
81
|
|
|
82
82
|
## Related
|
|
83
83
|
|
|
84
|
-
- [`@crouter/sdk`](
|
|
85
|
-
- [`@crouter/plugin`](
|
|
84
|
+
- [`@crouter/sdk`](https://www.npmjs.com/package/@crouter/sdk): uses this package for ID-token verification and scope validation in its OAuth helpers.
|
|
85
|
+
- [`@crouter/plugin`](https://www.npmjs.com/package/@crouter/plugin): verifies the directory's outbound tokens for providers registered in the directory.
|
|
86
86
|
- [Main repository](https://github.com/crouton-labs/crouter): the `crtr` CLI, the `crtrd` daemon, and [contributing guidelines](https://github.com/crouton-labs/crouter/blob/main/CONTRIBUTING.md).
|
|
87
87
|
|
|
88
88
|
## License
|