@dereekb/util 13.11.8 → 13.11.10

package/eslint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/util/eslint",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "peerDependencies": {
     "@typescript-eslint/utils": "8.59.0"
   },

package/fetch/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@dereekb/util/fetch",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "peerDependencies": {
-    "@dereekb/util": "13.11.8",
+    "@dereekb/util": "13.11.10",
     "make-error": "^1.3.6",
     "fast-content-type-parse": "^3.0.0"
   },

package/index.cjs.js

@@ -8889,9 +8889,25 @@ var AUTH_ROLE_CLAIMS_DEFAULT_EMPTY_VALUE = null;
         forEachKeyValueAddToSet(claims, roles);
         return roles;
     };
+    var claimKeys = tuples.map(function(param) {
+        var _param = _sliced_to_array$h(param, 1), key = _param[0];
+        return key;
+    });
+    var copyClaims = function copyClaims(source) {
+        var result = {};
+        claimKeys.forEach(function(key) {
+            var value = source[key];
+            if (value !== undefined) {
+                result[key] = value;
+            }
+        });
+        return result;
+    };
     return {
         toClaims: toClaims,
         toRoles: toRoles,
+        claimKeys: claimKeys,
+        copyClaims: copyClaims,
         defaultClaimValue: defaultClaimValue,
         defaultEmptyValue: defaultEmptyValue
     };

package/index.esm.js

@@ -8887,9 +8887,25 @@ var AUTH_ROLE_CLAIMS_DEFAULT_EMPTY_VALUE = null;
         forEachKeyValueAddToSet(claims, roles);
         return roles;
     };
+    var claimKeys = tuples.map(function(param) {
+        var _param = _sliced_to_array$h(param, 1), key = _param[0];
+        return key;
+    });
+    var copyClaims = function copyClaims(source) {
+        var result = {};
+        claimKeys.forEach(function(key) {
+            var value = source[key];
+            if (value !== undefined) {
+                result[key] = value;
+            }
+        });
+        return result;
+    };
     return {
         toClaims: toClaims,
         toRoles: toRoles,
+        claimKeys: claimKeys,
+        copyClaims: copyClaims,
         defaultClaimValue: defaultClaimValue,
         defaultEmptyValue: defaultEmptyValue
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/util",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "sideEffects": false,
   "exports": {
     "./test": {

package/src/lib/auth/auth.role.claims.d.ts

@@ -110,12 +110,35 @@ export interface AuthRoleClaimsFactoryDefaults {
 }
 export type AuthRoleClaimsToRolesFunction<T extends AuthClaimsObject = AuthClaimsObject> = (roles: AuthRoleSet) => AuthClaimsUpdate<T>;
 export type AuthRoleRolesToClaimsFunction<T extends AuthClaimsObject = AuthClaimsObject> = (claims: AuthClaims<T> | AuthClaimsUpdate<T>) => AuthRoleSet;
+/**
+ * Picks the registered claim keys from a source claims object.
+ *
+ * Values that are `undefined` in the source are omitted from the result. `null` values
+ * are preserved so this also works with an {@link AuthClaimsUpdate} (where `null` means
+ * "explicitly clear"). Unknown keys on the source are ignored.
+ */
+export type AuthRoleClaimsCopyFunction<T extends AuthClaimsObject = AuthClaimsObject> = (source: AuthClaims<T> | AuthClaimsUpdate<T>) => AuthClaimsUpdate<T>;
 /**
  * Service used for converting claims to/from a roles set.
  */
 export interface AuthRoleClaimsService<T extends AuthClaimsObject> {
     readonly toClaims: AuthRoleClaimsToRolesFunction<T>;
     readonly toRoles: AuthRoleRolesToClaimsFunction<T>;
+    /**
+     * Claim keys registered with this service (in declaration order, excluding ignored/null entries).
+     *
+     * Useful for keeping a separate list of "allowed claims" — such as an OIDC scope's claim
+     * allow-list — in sync with the service's configuration.
+     */
+    readonly claimKeys: ReadonlyArray<keyof T & string>;
+    /**
+     * Returns a new object containing only the {@link claimKeys} present in the source.
+     *
+     * Intended for use when forwarding a subset of a user's auth claims to another system
+     * (e.g. building OIDC token claims from a Firebase Auth user record's custom claims),
+     * so the set of forwarded keys stays driven by the same registration that defines them.
+     */
+    readonly copyClaims: AuthRoleClaimsCopyFunction<T>;
     readonly defaultClaimValue: unknown;
     readonly defaultEmptyValue: unknown;
 }

package/test/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@dereekb/util/test",
-  "version": "13.11.8",
+  "version": "13.11.10",
   "peerDependencies": {
-    "@dereekb/util": "13.11.8",
+    "@dereekb/util": "13.11.10",
     "make-error": "^1.3.6"
   },
   "exports": {