@entifix/testing-auth 0.5.0 → 0.6.0

package/dist/stub-layers.d.ts

@@ -10,8 +10,8 @@ import { Layer } from 'effect';
  * not check a signature, so wiring this into anything reachable from a network
  * is an open door. It exists so an example can serve `$metadata` without an
  * identity provider — and it does that by replacing the *port*, not by adding
- * an unauthenticated branch to `entity-metadata-route.ts`. ADR 0026's point is
- * that the descriptor is filtered by the verified principal; a hole punched in
+ * an unauthenticated branch to `entity-metadata-route.ts`. The point of serving
+ * the descriptor is that it is filtered by the verified principal; a hole punched in
  * the route for a demo would become the adoption pattern.
  */
 export declare const makeFixedTokenService: (claims?: TokenClaims) => TokenService;

package/dist/stub-layers.js

@@ -9,8 +9,8 @@ import { STUB_CLAIMS, stubAccessToken } from './stub-principal.js';
  * not check a signature, so wiring this into anything reachable from a network
  * is an open door. It exists so an example can serve `$metadata` without an
  * identity provider — and it does that by replacing the *port*, not by adding
- * an unauthenticated branch to `entity-metadata-route.ts`. ADR 0026's point is
- * that the descriptor is filtered by the verified principal; a hole punched in
+ * an unauthenticated branch to `entity-metadata-route.ts`. The point of serving
+ * the descriptor is that it is filtered by the verified principal; a hole punched in
  * the route for a demo would become the adoption pattern.
  */ export const makeFixedTokenService = (claims = STUB_CLAIMS)=>({
         // A stub token carries its own `exp`, so the requested lifetime is not read;

package/dist/stub-layers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/stub-layers.ts"],"sourcesContent":["import type { PolicyDecision } from '@entifix/authz';\nimport { PolicyDecisionTag } from '@entifix/authz';\nimport type { TokenClaims, TokenService } from '@entifix/business';\nimport { TokenServiceTag } from '@entifix/business';\nimport { Effect, Layer } from 'effect';\n\nimport { STUB_CLAIMS, stubAccessToken } from './stub-principal.js';\n\n/**\n * A `TokenService` that trusts every token and answers with fixed claims.\n *\n * ⚠️ **This is the whole reason the package is `type:testing`.** `verify` does\n * not check a signature, so wiring this into anything reachable from a network\n * is an open door. It exists so an example can serve `$metadata` without an\n * identity provider — and it does that by replacing the *port*, not by adding\n * an unauthenticated branch to `entity-metadata-route.ts`. ADR 0026's point is\n * that the descriptor is filtered by the verified principal; a hole punched in\n * the route for a demo would become the adoption pattern.\n */\nexport const makeFixedTokenService = (\n  claims: TokenClaims = STUB_CLAIMS,\n): TokenService => ({\n  // A stub token carries its own `exp`, so the requested lifetime is not read;\n  // and `verify` ignores the token by design — see the note above.\n  sign: signed => Effect.succeed(stubAccessToken(signed)),\n  verify: () => Effect.succeed(claims),\n});\n\nexport const FixedTokenServiceLayer = (\n  claims: TokenClaims = STUB_CLAIMS,\n): Layer.Layer<TokenServiceTag> =>\n  Layer.succeed(TokenServiceTag, makeFixedTokenService(claims));\n\n/** A `PolicyDecision` that grants every request. */\nexport const AllowAllPolicy: PolicyDecision = { decide: () => true };\n\nexport const AllowAllPolicyLayer: Layer.Layer<PolicyDecisionTag> =\n  Layer.succeed(PolicyDecisionTag, AllowAllPolicy);\n"],"names":["PolicyDecisionTag","TokenServiceTag","Effect","Layer","STUB_CLAIMS","stubAccessToken","makeFixedTokenService","claims","sign","signed","succeed","verify","FixedTokenServiceLayer","AllowAllPolicy","decide","AllowAllPolicyLayer"],"mappings":"AACA,SAASA,iBAAiB,QAAQ,iBAAiB;AAEnD,SAASC,eAAe,QAAQ,oBAAoB;AACpD,SAASC,MAAM,EAAEC,KAAK,QAAQ,SAAS;AAEvC,SAASC,WAAW,EAAEC,eAAe,QAAQ,sBAAsB;AAEnE;;;;;;;;;;CAUC,GACD,OAAO,MAAMC,wBAAwB,CACnCC,SAAsBH,WAAW,GACf,CAAA;QAClB,6EAA6E;QAC7E,iEAAiE;QACjEI,MAAMC,CAAAA,SAAUP,OAAOQ,OAAO,CAACL,gBAAgBI;QAC/CE,QAAQ,IAAMT,OAAOQ,OAAO,CAACH;IAC/B,CAAA,EAAG;AAEH,OAAO,MAAMK,yBAAyB,CACpCL,SAAsBH,WAAW,GAEjCD,MAAMO,OAAO,CAACT,iBAAiBK,sBAAsBC,SAAS;AAEhE,kDAAkD,GAClD,OAAO,MAAMM,iBAAiC;IAAEC,QAAQ,IAAM;AAAK,EAAE;AAErE,OAAO,MAAMC,sBACXZ,MAAMO,OAAO,CAACV,mBAAmBa,gBAAgB"}
+{"version":3,"sources":["../src/stub-layers.ts"],"sourcesContent":["import type { PolicyDecision } from '@entifix/authz';\nimport { PolicyDecisionTag } from '@entifix/authz';\nimport type { TokenClaims, TokenService } from '@entifix/business';\nimport { TokenServiceTag } from '@entifix/business';\nimport { Effect, Layer } from 'effect';\n\nimport { STUB_CLAIMS, stubAccessToken } from './stub-principal.js';\n\n/**\n * A `TokenService` that trusts every token and answers with fixed claims.\n *\n * ⚠️ **This is the whole reason the package is `type:testing`.** `verify` does\n * not check a signature, so wiring this into anything reachable from a network\n * is an open door. It exists so an example can serve `$metadata` without an\n * identity provider — and it does that by replacing the *port*, not by adding\n * an unauthenticated branch to `entity-metadata-route.ts`. The point of serving\n * the descriptor is that it is filtered by the verified principal; a hole punched in\n * the route for a demo would become the adoption pattern.\n */\nexport const makeFixedTokenService = (\n  claims: TokenClaims = STUB_CLAIMS,\n): TokenService => ({\n  // A stub token carries its own `exp`, so the requested lifetime is not read;\n  // and `verify` ignores the token by design — see the note above.\n  sign: signed => Effect.succeed(stubAccessToken(signed)),\n  verify: () => Effect.succeed(claims),\n});\n\nexport const FixedTokenServiceLayer = (\n  claims: TokenClaims = STUB_CLAIMS,\n): Layer.Layer<TokenServiceTag> =>\n  Layer.succeed(TokenServiceTag, makeFixedTokenService(claims));\n\n/** A `PolicyDecision` that grants every request. */\nexport const AllowAllPolicy: PolicyDecision = { decide: () => true };\n\nexport const AllowAllPolicyLayer: Layer.Layer<PolicyDecisionTag> =\n  Layer.succeed(PolicyDecisionTag, AllowAllPolicy);\n"],"names":["PolicyDecisionTag","TokenServiceTag","Effect","Layer","STUB_CLAIMS","stubAccessToken","makeFixedTokenService","claims","sign","signed","succeed","verify","FixedTokenServiceLayer","AllowAllPolicy","decide","AllowAllPolicyLayer"],"mappings":"AACA,SAASA,iBAAiB,QAAQ,iBAAiB;AAEnD,SAASC,eAAe,QAAQ,oBAAoB;AACpD,SAASC,MAAM,EAAEC,KAAK,QAAQ,SAAS;AAEvC,SAASC,WAAW,EAAEC,eAAe,QAAQ,sBAAsB;AAEnE;;;;;;;;;;CAUC,GACD,OAAO,MAAMC,wBAAwB,CACnCC,SAAsBH,WAAW,GACf,CAAA;QAClB,6EAA6E;QAC7E,iEAAiE;QACjEI,MAAMC,CAAAA,SAAUP,OAAOQ,OAAO,CAACL,gBAAgBI;QAC/CE,QAAQ,IAAMT,OAAOQ,OAAO,CAACH;IAC/B,CAAA,EAAG;AAEH,OAAO,MAAMK,yBAAyB,CACpCL,SAAsBH,WAAW,GAEjCD,MAAMO,OAAO,CAACT,iBAAiBK,sBAAsBC,SAAS;AAEhE,kDAAkD,GAClD,OAAO,MAAMM,iBAAiC;IAAEC,QAAQ,IAAM;AAAK,EAAE;AAErE,OAAO,MAAMC,sBACXZ,MAAMO,OAAO,CAACV,mBAAmBa,gBAAgB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entifix/testing-auth",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Authentication stubs for tests: a fixed token service, an allow-all policy, and ready-made session cookies.",
   "license": "MIT",
   "repository": {
@@ -52,9 +52,9 @@
   },
   "dependencies": {
     "@swc/helpers": "0.5.23",
-    "@entifix/business": "0.5.0",
-    "@entifix/authz": "0.5.0",
-    "@entifix/core": "0.5.0"
+    "@entifix/authz": "0.6.0",
+    "@entifix/business": "0.6.0",
+    "@entifix/core": "0.6.0"
   },
   "peerDependencies": {
     "effect": "^4.0.5"