@eudiplo/cli 9.1.0-main.f14d62f → 9.1.0-main.f567faa

package/dist/index.js

@@ -21839,7 +21839,7 @@ function resourceId(input) {
 }
 function bareFileVersion(kind, spec) {
   if (kind === "KeyChain") {
-    if (spec.usageType === "accessToken")
+    if (spec.usageType === "authorizationServer")
       return 4;
     if (spec.usageType === "federation")
       return 3;
@@ -21848,7 +21848,7 @@ function bareFileVersion(kind, spec) {
   if (kind === "RegistrarConfig")
     return "relyingPartyContact" in spec ? 2 : 1;
   if (kind === "KeyChainDefaults")
-    return "accessToken" in spec ? 2 : 1;
+    return "authorizationServer" in spec ? 2 : 1;
   if (kind === "Tenant") {
     if ("defaultKeyChains" in spec)
       return 3;
@@ -21948,7 +21948,7 @@ var issuanceConfigV5ToV6 = {
         severity: "warning",
         code: "ISSUANCE_SIGNING_KEY_ID_REMOVED",
         path: "/spec/signingKeyId",
-        message: `signingKeyId ${JSON.stringify(signingKeyId)} was removed. The built-in authorization server now signs access tokens with the tenant's access token key chain (usage type "accessToken"); to choose one, set token.signingKeyId of its entry.`
+        message: `signingKeyId ${JSON.stringify(signingKeyId)} was removed. The built-in authorization server now signs access tokens with the tenant's authorization server key chain (usage type "authorizationServer"); to choose one, set token.signingKeyId of its entry.`
       });
     }
     const servers = Array.isArray(rest.authorizationServers) ? rest.authorizationServers : [];
@@ -21958,9 +21958,9 @@ var issuanceConfigV5ToV6 = {
         return;
       issues.push({
         severity: "warning",
-        code: "ACCESS_TOKEN_KEY_CHAIN_REQUIRED",
+        code: "AUTHORIZATION_SERVER_KEY_CHAIN_REQUIRED",
         path: `/spec/authorizationServers/${index}/token/signingKeyId`,
-        message: `token.signingKeyId ${JSON.stringify(keyChainId)} must name a key chain with usage type "accessToken" from now on, else the import is refused. Remove it to use the tenant's access token key chain, or point it to such a key chain.`
+        message: `token.signingKeyId ${JSON.stringify(keyChainId)} must name a key chain with usage type "authorizationServer" from now on, else the import is refused. Remove it to use the tenant's authorization server key chain, or point it to such a key chain.`
       });
     });
     return { spec: "signingKeyId" in spec ? rest : spec, issues };
@@ -22132,21 +22132,21 @@ var CONFIG_MIGRATIONS = [
     migrate: (spec) => ({ spec })
   },
   {
-    id: "key-chain-v4-access-token-usage",
+    id: "key-chain-v4-authorization-server-usage",
     kind: "KeyChain",
     from: 3,
     to: 4,
-    // v4 only adds the usage type `accessToken`: a v3 spec is a valid v4
+    // v4 only adds the usage type `authorizationServer`: a v3 spec is a valid v4
     // spec.
     migrate: (spec) => ({ spec })
   },
   {
-    id: "key-chain-defaults-v2-access-token",
+    id: "key-chain-defaults-v2-authorization-server",
     kind: "KeyChainDefaults",
     from: 1,
     to: 2,
-    // v2 only adds the optional accessToken entry: a v1 spec is a valid
-    // v2 spec, whose tenant keeps using its oldest access token key
+    // v2 only adds the optional authorizationServer entry: a v1 spec is a valid
+    // v2 spec, whose tenant keeps using its oldest authorization server key
     // chain.
     migrate: (spec) => ({ spec })
   },
@@ -29435,8 +29435,8 @@ var CONFIG_SCHEMAS = [
             "type": "string",
             "minLength": 1
           },
-          "accessToken": {
-            "description": "ID of the access token key chain (usage type accessToken) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest access token key chain and creates one with ID access-token when the tenant has none.",
+          "authorizationServer": {
+            "description": "ID of the authorization server key chain (usage type authorizationServer) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest authorization server key chain and creates one with ID authorization-server when the tenant has none.",
             "type": "string",
             "minLength": 1
           }
@@ -35393,7 +35393,7 @@ var CONFIG_SCHEMAS = [
             "type": "string",
             "enum": [
               "access",
-              "accessToken",
+              "authorizationServer",
               "attestation",
               "trustList",
               "statusList",
@@ -36860,7 +36860,7 @@ var CONFIG_SCHEMAS = [
                           "minimum": 60
                         },
                         "signingKeyId": {
-                          "description": `ID of a key chain with usage type "accessToken" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.`,
+                          "description": `ID of a key chain with usage type "authorizationServer" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.`,
                           "type": "string",
                           "minLength": 1
                         },
@@ -37002,7 +37002,7 @@ var CONFIG_SCHEMAS = [
                           "minimum": 60
                         },
                         "signingKeyId": {
-                          "description": `ID of a key chain with usage type "accessToken" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.`,
+                          "description": `ID of a key chain with usage type "authorizationServer" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.`,
                           "type": "string",
                           "minLength": 1
                         },
@@ -37110,7 +37110,7 @@ var CONFIG_SCHEMAS = [
                           "minimum": 60
                         },
                         "signingKeyId": {
-                          "description": `ID of a key chain with usage type "accessToken" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.`,
+                          "description": `ID of a key chain with usage type "authorizationServer" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.`,
                           "type": "string",
                           "minLength": 1
                         },
@@ -40243,7 +40243,7 @@ function createDeploymentCommands(context, setExitCode) {
 // package.json
 var package_default = {
   name: "@eudiplo/cli",
-  version: "9.1.0-main.f14d62f",
+  version: "9.1.0-main.f567faa",
   description: "Deployment-aware command line tools for EUDIPLO",
   private: false,
   type: "module",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@eudiplo/cli",
-    "version": "9.1.0-main.f14d62f",
+    "version": "9.1.0-main.f567faa",
     "description": "Deployment-aware command line tools for EUDIPLO",
     "private": false,
     "type": "module",

package/templates/schemas/IssuanceConfig.schema.json

@@ -160,7 +160,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "ID of a key chain with usage type \"accessToken\" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },
@@ -302,7 +302,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "ID of a key chain with usage type \"accessToken\" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },
@@ -410,7 +410,7 @@
                     "minimum": 60
                   },
                   "signingKeyId": {
-                    "description": "ID of a key chain with usage type \"accessToken\" that signs the issued access tokens. Without it, the tenant's access token key chain signs them.",
+                    "description": "ID of a key chain with usage type \"authorizationServer\" that signs the issued access tokens. Without it, the tenant's authorization server key chain signs them.",
                     "type": "string",
                     "minLength": 1
                   },

package/templates/schemas/KeyChainConfigFile.schema.json

@@ -42,7 +42,7 @@
               "type": "string",
               "enum": [
                 "access",
-                "accessToken",
+                "authorizationServer",
                 "attestation",
                 "trustList",
                 "statusList",
@@ -1526,7 +1526,7 @@
           "type": "string",
           "enum": [
             "access",
-            "accessToken",
+            "authorizationServer",
             "attestation",
             "trustList",
             "statusList",

package/templates/schemas/KeyChainCreateDto.schema.json

@@ -6,7 +6,7 @@
       "type": "string",
       "enum": [
         "access",
-        "accessToken",
+        "authorizationServer",
         "attestation",
         "trustList",
         "statusList",

package/templates/schemas/KeyChainDefaultsConfigFile.schema.json

@@ -37,8 +37,8 @@
               "type": "string",
               "minLength": 1
             },
-            "accessToken": {
-              "description": "ID of the access token key chain (usage type accessToken) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest access token key chain and creates one with ID access-token when the tenant has none.",
+            "authorizationServer": {
+              "description": "ID of the authorization server key chain (usage type authorizationServer) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest authorization server key chain and creates one with ID authorization-server when the tenant has none.",
               "type": "string",
               "minLength": 1
             }
@@ -110,8 +110,8 @@
           "type": "string",
           "minLength": 1
         },
-        "accessToken": {
-          "description": "ID of the access token key chain (usage type accessToken) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest access token key chain and creates one with ID access-token when the tenant has none.",
+        "authorizationServer": {
+          "description": "ID of the authorization server key chain (usage type authorizationServer) that signs the access tokens of authorization servers without token.signingKeyId and is published in their JWKS. Without it, EUDIPLO uses the tenant's oldest authorization server key chain and creates one with ID authorization-server when the tenant has none.",
           "type": "string",
           "minLength": 1
         }

package/templates/schemas/KeyChainImportDto.schema.json

@@ -61,7 +61,7 @@
       "type": "string",
       "enum": [
         "access",
-        "accessToken",
+        "authorizationServer",
         "attestation",
         "trustList",
         "statusList",