@declarion/embed 0.28.2 → 0.30.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/server.d.ts +2 -11
- package/dist/server.js +1 -3
- package/package.json +1 -1
package/dist/server.d.ts
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
import type { EmbedToken } from "./types";
|
|
2
2
|
/**
|
|
3
3
|
* Options for `createEmbedSession`. `apiKey`, `declarionOrigin`, and the
|
|
4
|
-
* three identity fields are required; `ttlSeconds` and
|
|
5
|
-
*
|
|
4
|
+
* three identity fields are required; `ttlSeconds` is optional and forwarded
|
|
5
|
+
* to the action unchanged.
|
|
6
6
|
*/
|
|
7
7
|
export interface CreateEmbedSessionOptions {
|
|
8
8
|
/**
|
|
@@ -31,15 +31,6 @@ export interface CreateEmbedSessionOptions {
|
|
|
31
31
|
* 900 and raises values below 60 to 60.
|
|
32
32
|
*/
|
|
33
33
|
readonly ttlSeconds?: number;
|
|
34
|
-
/**
|
|
35
|
-
* Optional permission RESTRICTION. When omitted, the embed token carries
|
|
36
|
-
* the target user's full effective permissions - the embedded screen lets
|
|
37
|
-
* the user do exactly what they are allowed. When provided, the token is
|
|
38
|
-
* restricted to this explicit allow-list: wildcards are rejected and every
|
|
39
|
-
* entry MUST be held by the target user. Use it to harden a deliberately
|
|
40
|
-
* limited iframe (for example a public, read-only embed).
|
|
41
|
-
*/
|
|
42
|
-
readonly permissions?: readonly string[];
|
|
43
34
|
/**
|
|
44
35
|
* Optional `AbortSignal` to cancel the mint request (e.g. a host request
|
|
45
36
|
* timeout). Forwarded to `fetch`.
|
package/dist/server.js
CHANGED
|
@@ -17,9 +17,7 @@ async function n(n) {
|
|
|
17
17
|
user_email: n.userEmail,
|
|
18
18
|
screen_code: n.screenCode,
|
|
19
19
|
ttl_seconds: n.ttlSeconds ?? 600
|
|
20
|
-
}
|
|
21
|
-
n.permissions && n.permissions.length > 0 && (i.permissions = n.permissions);
|
|
22
|
-
let a = await fetch(r, {
|
|
20
|
+
}, a = await fetch(r, {
|
|
23
21
|
method: "POST",
|
|
24
22
|
headers: {
|
|
25
23
|
"content-type": "application/json",
|