@eudiplo/cli 9.1.0-main.c6ae22c → 9.1.0-main.cd87b41

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/dist/commands/config/portability/migrations.spec.js +3 -2
  2. package/dist/commands/config/portability/migrations.spec.js.map +1 -1
  3. package/dist/commands/config/portability/upgrade.d.ts.map +1 -1
  4. package/dist/commands/config/portability/upgrade.js +2 -7
  5. package/dist/commands/config/portability/upgrade.js.map +1 -1
  6. package/dist/commands/config/validate/registry.json +21 -0
  7. package/dist/index.js +14084 -4437
  8. package/package.json +4 -4
  9. package/templates/demo-config/key-chains/status-list.json +3 -3
  10. package/templates/schemas/CreateFederationTrustAnchorDto.schema.json +82 -0
  11. package/templates/schemas/CredentialConfigCreate.schema.json +236 -6
  12. package/templates/schemas/CredentialConfigFile.schema.json +797 -1
  13. package/templates/schemas/FederationTrustAnchorConfigFile.schema.json +60 -0
  14. package/templates/schemas/IssuanceConfig.schema.json +77 -2
  15. package/templates/schemas/IssuanceConfigFile.schema.json +739 -1
  16. package/templates/schemas/KeyChainConfigFile.schema.json +370 -1
  17. package/templates/schemas/KeyChainCreateDto.schema.json +1 -0
  18. package/templates/schemas/KeyChainDefaultsConfigFile.schema.json +65 -0
  19. package/templates/schemas/KeyChainImportDto.schema.json +1 -0
  20. package/templates/schemas/TenantConfigFile.schema.json +395 -0
  21. package/templates/schemas/UpdateFederationTrustAnchorDto.schema.json +70 -0
  22. package/templates/schemas.manifest.json +4 -0
package/templates/schemas/TenantConfigFile.schema.json CHANGED
@@ -5,6 +5,132 @@
5
5
  "description": "Configuration file identified by its $schema URL.",
6
6
  "oneOf": [
7
7
  {
8
+ "type": "object",
9
+ "properties": {
10
+ "$schema": {
11
+ "type": "string",
12
+ "const": "https://eudiplo.dev/schemas/v4/TenantConfigFile.schema.json"
13
+ },
14
+ "metadata": {
15
+ "type": "object",
16
+ "properties": {
17
+ "generation": {
18
+ "type": "integer",
19
+ "minimum": 1,
20
+ "maximum": 9007199254740991
21
+ },
22
+ "ownership": {
23
+ "type": "string",
24
+ "enum": [
25
+ "unmanaged",
26
+ "file-managed"
27
+ ]
28
+ }
29
+ },
30
+ "additionalProperties": false
31
+ },
32
+ "spec": {
33
+ "type": "object",
34
+ "properties": {
35
+ "name": {
36
+ "default": "EUDIPLO",
37
+ "description": "Display name of the tenant.",
38
+ "type": "string",
39
+ "minLength": 1
40
+ },
41
+ "description": {
42
+ "description": "Optional tenant description.",
43
+ "type": "string",
44
+ "minLength": 1
45
+ },
46
+ "sessionConfig": {
47
+ "description": "Optional tenant-specific session storage configuration.",
48
+ "type": "object",
49
+ "properties": {
50
+ "ttlSeconds": {
51
+ "description": "Session time-to-live in seconds.",
52
+ "type": "integer",
53
+ "minimum": 60,
54
+ "maximum": 9007199254740991
55
+ },
56
+ "cleanupMode": {
57
+ "description": "Whether to fully delete or anonymize expired sessions.",
58
+ "type": "string",
59
+ "enum": [
60
+ "full",
61
+ "anonymize"
62
+ ]
63
+ }
64
+ },
65
+ "additionalProperties": false
66
+ },
67
+ "statusListConfig": {
68
+ "description": "Optional tenant-specific status list defaults.",
69
+ "type": "object",
70
+ "properties": {
71
+ "capacity": {
72
+ "description": "Default status list capacity.",
73
+ "type": "integer",
74
+ "minimum": 100,
75
+ "maximum": 9007199254740991
76
+ },
77
+ "bits": {
78
+ "description": "Bits-per-status setting (1, 2, 4, or 8).",
79
+ "anyOf": [
80
+ {
81
+ "type": "number",
82
+ "const": 1
83
+ },
84
+ {
85
+ "type": "number",
86
+ "const": 2
87
+ },
88
+ {
89
+ "type": "number",
90
+ "const": 4
91
+ },
92
+ {
93
+ "type": "number",
94
+ "const": 8
95
+ }
96
+ ]
97
+ },
98
+ "ttl": {
99
+ "description": "JWT TTL for status list tokens in seconds.",
100
+ "type": "integer",
101
+ "minimum": 60,
102
+ "maximum": 9007199254740991
103
+ },
104
+ "immediateUpdate": {
105
+ "description": "Regenerate status list JWTs immediately after status updates.",
106
+ "type": "boolean"
107
+ },
108
+ "enableAggregation": {
109
+ "description": "Include aggregation_uri in generated status list JWTs.",
110
+ "type": "boolean"
111
+ }
112
+ },
113
+ "additionalProperties": false
114
+ }
115
+ },
116
+ "required": [
117
+ "name"
118
+ ],
119
+ "additionalProperties": false,
120
+ "description": "Payload used when importing tenant metadata from config files."
121
+ }
122
+ },
123
+ "required": [
124
+ "$schema",
125
+ "metadata",
126
+ "spec"
127
+ ],
128
+ "additionalProperties": false
129
+ },
130
+ {
131
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
132
+ "$id": "https://eudiplo.dev/schemas/v1/TenantConfigFile.schema.json",
133
+ "title": "TenantConfigFile",
8
134
  "type": "object",
9
135
  "properties": {
10
136
  "$schema": {
@@ -127,6 +253,275 @@
127
253
  ],
128
254
  "additionalProperties": false
129
255
  },
256
+ {
257
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
258
+ "$id": "https://eudiplo.dev/schemas/v2/TenantConfigFile.schema.json",
259
+ "title": "TenantConfigFile",
260
+ "type": "object",
261
+ "properties": {
262
+ "$schema": {
263
+ "type": "string",
264
+ "const": "https://eudiplo.dev/schemas/v2/TenantConfigFile.schema.json"
265
+ },
266
+ "metadata": {
267
+ "type": "object",
268
+ "properties": {
269
+ "generation": {
270
+ "type": "integer",
271
+ "minimum": 1,
272
+ "maximum": 9007199254740991
273
+ },
274
+ "ownership": {
275
+ "type": "string",
276
+ "enum": [
277
+ "unmanaged",
278
+ "file-managed"
279
+ ]
280
+ }
281
+ },
282
+ "additionalProperties": false
283
+ },
284
+ "spec": {
285
+ "type": "object",
286
+ "properties": {
287
+ "name": {
288
+ "default": "EUDIPLO",
289
+ "description": "Display name of the tenant.",
290
+ "type": "string",
291
+ "minLength": 1
292
+ },
293
+ "description": {
294
+ "description": "Optional tenant description.",
295
+ "type": "string",
296
+ "minLength": 1
297
+ },
298
+ "sessionConfig": {
299
+ "description": "Optional tenant-specific session storage configuration.",
300
+ "type": "object",
301
+ "properties": {
302
+ "ttlSeconds": {
303
+ "description": "Session time-to-live in seconds.",
304
+ "type": "integer",
305
+ "minimum": 60,
306
+ "maximum": 9007199254740991
307
+ },
308
+ "cleanupMode": {
309
+ "description": "Whether to fully delete or anonymize expired sessions.",
310
+ "type": "string",
311
+ "enum": [
312
+ "full",
313
+ "anonymize"
314
+ ]
315
+ }
316
+ },
317
+ "additionalProperties": false
318
+ },
319
+ "statusListConfig": {
320
+ "description": "Optional tenant-specific status list defaults.",
321
+ "type": "object",
322
+ "properties": {
323
+ "capacity": {
324
+ "description": "Default status list capacity.",
325
+ "type": "integer",
326
+ "minimum": 100,
327
+ "maximum": 9007199254740991
328
+ },
329
+ "bits": {
330
+ "description": "Bits-per-status setting (1, 2, 4, or 8).",
331
+ "anyOf": [
332
+ {
333
+ "type": "number",
334
+ "const": 1
335
+ },
336
+ {
337
+ "type": "number",
338
+ "const": 2
339
+ },
340
+ {
341
+ "type": "number",
342
+ "const": 4
343
+ },
344
+ {
345
+ "type": "number",
346
+ "const": 8
347
+ }
348
+ ]
349
+ },
350
+ "ttl": {
351
+ "description": "JWT TTL for status list tokens in seconds.",
352
+ "type": "integer",
353
+ "minimum": 60,
354
+ "maximum": 9007199254740991
355
+ },
356
+ "immediateUpdate": {
357
+ "description": "Regenerate status list JWTs immediately after status updates.",
358
+ "type": "boolean"
359
+ },
360
+ "enableAggregation": {
361
+ "description": "Include aggregation_uri in generated status list JWTs.",
362
+ "type": "boolean"
363
+ }
364
+ },
365
+ "additionalProperties": false
366
+ },
367
+ "defaultAccessKeyChainId": {
368
+ "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
369
+ "type": "string",
370
+ "minLength": 1
371
+ }
372
+ },
373
+ "required": [
374
+ "name"
375
+ ],
376
+ "additionalProperties": false,
377
+ "description": "Payload used when importing tenant metadata from config files."
378
+ }
379
+ },
380
+ "required": [
381
+ "$schema",
382
+ "metadata",
383
+ "spec"
384
+ ],
385
+ "additionalProperties": false
386
+ },
387
+ {
388
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
389
+ "$id": "https://eudiplo.dev/schemas/v3/TenantConfigFile.schema.json",
390
+ "title": "TenantConfigFile",
391
+ "type": "object",
392
+ "properties": {
393
+ "$schema": {
394
+ "type": "string",
395
+ "const": "https://eudiplo.dev/schemas/v3/TenantConfigFile.schema.json"
396
+ },
397
+ "metadata": {
398
+ "type": "object",
399
+ "properties": {
400
+ "generation": {
401
+ "type": "integer",
402
+ "minimum": 1,
403
+ "maximum": 9007199254740991
404
+ },
405
+ "ownership": {
406
+ "type": "string",
407
+ "enum": [
408
+ "unmanaged",
409
+ "file-managed"
410
+ ]
411
+ }
412
+ },
413
+ "additionalProperties": false
414
+ },
415
+ "spec": {
416
+ "type": "object",
417
+ "properties": {
418
+ "name": {
419
+ "default": "EUDIPLO",
420
+ "description": "Display name of the tenant.",
421
+ "type": "string",
422
+ "minLength": 1
423
+ },
424
+ "description": {
425
+ "description": "Optional tenant description.",
426
+ "type": "string",
427
+ "minLength": 1
428
+ },
429
+ "sessionConfig": {
430
+ "description": "Optional tenant-specific session storage configuration.",
431
+ "type": "object",
432
+ "properties": {
433
+ "ttlSeconds": {
434
+ "description": "Session time-to-live in seconds.",
435
+ "type": "integer",
436
+ "minimum": 60,
437
+ "maximum": 9007199254740991
438
+ },
439
+ "cleanupMode": {
440
+ "description": "Whether to fully delete or anonymize expired sessions.",
441
+ "type": "string",
442
+ "enum": [
443
+ "full",
444
+ "anonymize"
445
+ ]
446
+ }
447
+ },
448
+ "additionalProperties": false
449
+ },
450
+ "statusListConfig": {
451
+ "description": "Optional tenant-specific status list defaults.",
452
+ "type": "object",
453
+ "properties": {
454
+ "capacity": {
455
+ "description": "Default status list capacity.",
456
+ "type": "integer",
457
+ "minimum": 100,
458
+ "maximum": 9007199254740991
459
+ },
460
+ "bits": {
461
+ "description": "Bits-per-status setting (1, 2, 4, or 8).",
462
+ "anyOf": [
463
+ {
464
+ "type": "number",
465
+ "const": 1
466
+ },
467
+ {
468
+ "type": "number",
469
+ "const": 2
470
+ },
471
+ {
472
+ "type": "number",
473
+ "const": 4
474
+ },
475
+ {
476
+ "type": "number",
477
+ "const": 8
478
+ }
479
+ ]
480
+ },
481
+ "ttl": {
482
+ "description": "JWT TTL for status list tokens in seconds.",
483
+ "type": "integer",
484
+ "minimum": 60,
485
+ "maximum": 9007199254740991
486
+ },
487
+ "immediateUpdate": {
488
+ "description": "Regenerate status list JWTs immediately after status updates.",
489
+ "type": "boolean"
490
+ },
491
+ "enableAggregation": {
492
+ "description": "Include aggregation_uri in generated status list JWTs.",
493
+ "type": "boolean"
494
+ }
495
+ },
496
+ "additionalProperties": false
497
+ },
498
+ "defaultKeyChains": {
499
+ "type": "object",
500
+ "properties": {
501
+ "access": {
502
+ "description": "ID of the access key chain used where no configuration names one: presentation requests of configurations without accessKeyChainId and the signed issuer metadata. Without it, EUDIPLO picks one of the tenant's access key chains by rule.",
503
+ "type": "string",
504
+ "minLength": 1
505
+ }
506
+ },
507
+ "additionalProperties": false,
508
+ "description": "The tenant's key chain per usage type, used where no configuration names one. A usage type without an entry uses a key chain picked by rule."
509
+ }
510
+ },
511
+ "required": [
512
+ "name"
513
+ ],
514
+ "additionalProperties": false,
515
+ "description": "Payload used when importing tenant metadata from config files."
516
+ }
517
+ },
518
+ "required": [
519
+ "$schema",
520
+ "metadata",
521
+ "spec"
522
+ ],
523
+ "additionalProperties": false
524
+ },
130
525
  {
131
526
  "type": "object",
132
527
  "properties": {
package/templates/schemas/UpdateFederationTrustAnchorDto.schema.json ADDED
@@ -0,0 +1,70 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "type": "object",
4
+ "properties": {
5
+ "entityId": {
6
+ "type": "string",
7
+ "minLength": 1,
8
+ "maxLength": 2048,
9
+ "description": "Entity identifier of the trust anchor, exactly as configured in `federation.trustAnchors` and DCQL `openid_federation` values."
10
+ },
11
+ "description": {
12
+ "anyOf": [
13
+ {
14
+ "type": "string",
15
+ "minLength": 1,
16
+ "maxLength": 1000
17
+ },
18
+ {
19
+ "type": "null"
20
+ }
21
+ ],
22
+ "description": "Optional description of the trust anchor."
23
+ },
24
+ "jwks": {
25
+ "type": "object",
26
+ "properties": {
27
+ "keys": {
28
+ "minItems": 1,
29
+ "maxItems": 20,
30
+ "type": "array",
31
+ "items": {
32
+ "type": "object",
33
+ "properties": {
34
+ "kty": {
35
+ "type": "string",
36
+ "enum": [
37
+ "EC",
38
+ "RSA",
39
+ "OKP"
40
+ ],
41
+ "description": "Key type of the public federation key."
42
+ },
43
+ "kid": {
44
+ "type": "string",
45
+ "minLength": 1,
46
+ "maxLength": 256,
47
+ "description": "Key ID. Federation statements name their signing key with `kid`."
48
+ }
49
+ },
50
+ "required": [
51
+ "kty",
52
+ "kid"
53
+ ],
54
+ "additionalProperties": {},
55
+ "description": "Public federation key of the trust anchor as a JWK."
56
+ },
57
+ "description": "The trust anchor's federation keys."
58
+ }
59
+ },
60
+ "required": [
61
+ "keys"
62
+ ],
63
+ "additionalProperties": false,
64
+ "description": "JWK set with the federation keys of the trust anchor, obtained out of band (OpenID Federation 1.0 Section 10.2)."
65
+ }
66
+ },
67
+ "additionalProperties": false,
68
+ "$id": "./UpdateFederationTrustAnchorDto.schema.json",
69
+ "title": "UpdateFederationTrustAnchorDto"
70
+ }
package/templates/schemas.manifest.json CHANGED
@@ -6,6 +6,7 @@
6
6
  "ConfigDocumentMetadata.schema.json",
7
7
  "CreateAttributeProviderDto.schema.json",
8
8
  "CreateClientDto.schema.json",
9
+ "CreateFederationTrustAnchorDto.schema.json",
9
10
  "CreateRegistrarConfigDto.schema.json",
10
11
  "CreateStatusListDto.schema.json",
11
12
  "CreateTenantDto.schema.json",
@@ -14,11 +15,13 @@
14
15
  "CredentialConfigFile.schema.json",
15
16
  "DCQL.schema.json",
16
17
  "EmbeddedDisclosurePolicy.schema.json",
18
+ "FederationTrustAnchorConfigFile.schema.json",
17
19
  "ImportTenantDto.schema.json",
18
20
  "IssuanceConfig.schema.json",
19
21
  "IssuanceConfigFile.schema.json",
20
22
  "KeyChainConfigFile.schema.json",
21
23
  "KeyChainCreateDto.schema.json",
24
+ "KeyChainDefaultsConfigFile.schema.json",
22
25
  "KeyChainImportDto.schema.json",
23
26
  "KeyChainUpdateDto.schema.json",
24
27
  "KmsConfigDto.schema.json",
@@ -38,6 +41,7 @@
38
41
  "TrustListCreateDto.schema.json",
39
42
  "UpdateAttributeProviderDto.schema.json",
40
43
  "UpdateClientDto.schema.json",
44
+ "UpdateFederationTrustAnchorDto.schema.json",
41
45
  "UpdateStatusListConfigDto.schema.json",
42
46
  "UpdateStatusListDto.schema.json",
43
47
  "UpdateTenantDto.schema.json",