@dereekb/firebase 13.11.8 → 13.11.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/firebase",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "sideEffects": false,
   "exports": {
     "./test": {
@@ -18,10 +18,10 @@
     }
   },
   "peerDependencies": {
-    "@dereekb/util": "13.11.8",
-    "@dereekb/date": "13.11.8",
-    "@dereekb/model": "13.11.8",
-    "@dereekb/rxjs": "13.11.8",
+    "@dereekb/util": "13.11.10",
+    "@dereekb/date": "13.11.10",
+    "@dereekb/model": "13.11.10",
+    "@dereekb/rxjs": "13.11.10",
     "@firebase/rules-unit-testing": "5.0.0",
     "arktype": "^2.2.0",
     "date-fns": "^4.1.0",

package/src/lib/model/oidcmodel/oidcmodel.interaction.oauth.d.ts

@@ -62,8 +62,15 @@ export interface OAuthInteractionConsentRequest {
      */
     readonly approved: boolean;
     /**
-     * Optional subset of OIDC scopes to grant. Must be a subset of
-     * `prompt.details.missingOIDCScope`.
+     * Optional subset of OIDC scopes to grant. Each value must be in either
+     * `prompt.details.missingOIDCScope` or already encountered on the
+     * existing Grant (granted or rejected previously). Values not in
+     * either set return `400 BAD_REQUEST`.
+     *
+     * Already-encountered values are accepted as silent no-ops, which lets a
+     * `prompt=consent` re-display submit the full requested scope set from
+     * the auth URL without rejection when the user has previously authorized
+     * the client.
      *
      * `openid` is always added by the server when it was requested,
      * regardless of whether it appears here. When omitted, every
@@ -71,16 +78,19 @@ export interface OAuthInteractionConsentRequest {
      */
     readonly grantedOIDCScopes?: readonly OidcScope[];
     /**
-     * Optional subset of OIDC claims to grant. Must be a subset of
-     * `prompt.details.missingOIDCClaims`. When omitted, every missing claim is granted.
+     * Optional subset of OIDC claims to grant. Each value must be in either
+     * `prompt.details.missingOIDCClaims` or already encountered on the
+     * existing Grant. Values in neither return `400 BAD_REQUEST`.
+     * When omitted, every missing claim is granted.
      */
     readonly grantedOIDCClaims?: readonly string[];
     /**
      * Optional subset of resource scopes to grant per resource indicator.
-     * Each entry's array must be a subset of the corresponding entry in
-     * `prompt.details.missingResourceScopes`. When omitted, every missing
-     * resource scope is granted. When an indicator is omitted, that
-     * indicator's resource scopes are granted in full.
+     * Each entry's array values must be in either the corresponding entry in
+     * `prompt.details.missingResourceScopes` or already encountered on the
+     * existing Grant for that indicator. Values in neither return `400 BAD_REQUEST`.
+     * When omitted, every missing resource scope is granted. When an
+     * indicator is omitted, that indicator's resource scopes are granted in full.
      */
     readonly grantedResourceScopes?: Readonly<Record<string, readonly string[]>>;
 }

package/test/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@dereekb/firebase/test",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "peerDependencies": {
-    "@dereekb/date": "13.11.8",
-    "@dereekb/firebase": "13.11.8",
-    "@dereekb/model": "13.11.8",
-    "@dereekb/rxjs": "13.11.8",
-    "@dereekb/util": "13.11.8",
+    "@dereekb/date": "13.11.10",
+    "@dereekb/firebase": "13.11.10",
+    "@dereekb/model": "13.11.10",
+    "@dereekb/rxjs": "13.11.10",
+    "@dereekb/util": "13.11.10",
     "@firebase/rules-unit-testing": "5.0.0",
     "date-fns": "^4.1.0",
     "firebase": "^12.12.1",