@ever-works/oidc-identity 1.0.1 → 1.0.2

package/dist/testing/fake-oidc-provider.cjs

@@ -408,7 +408,10 @@ var FakeOidcProvider = class _FakeOidcProvider {
           return sendJson(response, 404, { error: "not_found" });
       }
     } catch (error) {
-      return sendJson(response, 500, { error: "fake_provider_error", error_description: String(error) });
+      return sendJson(response, 500, {
+        error: "fake_provider_error",
+        error_description: errorDescription(error)
+      });
     }
   }
   /** §10.4's "authorize (auto-approve a configured user)", with S256 required. */
@@ -474,7 +477,7 @@ var FakeOidcProvider = class _FakeOidcProvider {
     }
     void this.tokensFor(stored.nonce, stored.scope).then(
       (tokens) => sendJson(response, 200, tokens),
-      (error) => sendJson(response, 500, { error: "server_error", error_description: String(error) })
+      (error) => sendJson(response, 500, { error: "server_error", error_description: errorDescription(error) })
     );
   }
   handleDeviceCodeGrant(form, response) {
@@ -497,7 +500,7 @@ var FakeOidcProvider = class _FakeOidcProvider {
     const authorizedParty = this.isLocalClient(grant.clientId) ? grant.clientId : this.clientId;
     void this.tokensFor(null, grant.scope, authorizedParty).then(
       (tokens) => sendJson(response, 200, tokens),
-      (error) => sendJson(response, 500, { error: "server_error", error_description: String(error) })
+      (error) => sendJson(response, 500, { error: "server_error", error_description: errorDescription(error) })
     );
   }
   /** RFC 8628 §3.2's device authorization response. */
@@ -616,14 +619,16 @@ function randomId(prefix) {
 }
 function randomUserCode() {
   const alphabet = "BCDFGHJKLMNPQRSTVWXZ";
-  const bytes = (0, import_node_crypto.randomBytes)(8);
   let code = "";
   for (let index = 0; index < 8; index += 1) {
     if (index === 4) code += "-";
-    code += alphabet[bytes[index] % alphabet.length];
+    code += alphabet[(0, import_node_crypto.randomInt)(alphabet.length)];
   }
   return code;
 }
+function errorDescription(error) {
+  return error instanceof Error ? error.message : "unexpected fake provider failure";
+}
 function sendJson(response, status, body) {
   const payload = JSON.stringify(body);
   response.writeHead(status, {

package/dist/testing/fake-oidc-provider.js

@@ -1,5 +1,5 @@
 // src/testing/fake-oidc-provider.ts
-import { createHash, createSign, generateKeyPairSync, randomBytes } from "crypto";
+import { createHash, createSign, generateKeyPairSync, randomBytes, randomInt } from "crypto";
 import { createServer } from "http";
 var FAKE_BACKCHANNEL_LOGOUT_EVENT = "http://schemas.openid.net/event/backchannel-logout";
 var FAKE_DEFAULT_LOCAL_CLIENT_ID = "ever-works-cli";
@@ -380,7 +380,10 @@ var FakeOidcProvider = class _FakeOidcProvider {
           return sendJson(response, 404, { error: "not_found" });
       }
     } catch (error) {
-      return sendJson(response, 500, { error: "fake_provider_error", error_description: String(error) });
+      return sendJson(response, 500, {
+        error: "fake_provider_error",
+        error_description: errorDescription(error)
+      });
     }
   }
   /** §10.4's "authorize (auto-approve a configured user)", with S256 required. */
@@ -446,7 +449,7 @@ var FakeOidcProvider = class _FakeOidcProvider {
     }
     void this.tokensFor(stored.nonce, stored.scope).then(
       (tokens) => sendJson(response, 200, tokens),
-      (error) => sendJson(response, 500, { error: "server_error", error_description: String(error) })
+      (error) => sendJson(response, 500, { error: "server_error", error_description: errorDescription(error) })
     );
   }
   handleDeviceCodeGrant(form, response) {
@@ -469,7 +472,7 @@ var FakeOidcProvider = class _FakeOidcProvider {
     const authorizedParty = this.isLocalClient(grant.clientId) ? grant.clientId : this.clientId;
     void this.tokensFor(null, grant.scope, authorizedParty).then(
       (tokens) => sendJson(response, 200, tokens),
-      (error) => sendJson(response, 500, { error: "server_error", error_description: String(error) })
+      (error) => sendJson(response, 500, { error: "server_error", error_description: errorDescription(error) })
     );
   }
   /** RFC 8628 §3.2's device authorization response. */
@@ -588,14 +591,16 @@ function randomId(prefix) {
 }
 function randomUserCode() {
   const alphabet = "BCDFGHJKLMNPQRSTVWXZ";
-  const bytes = randomBytes(8);
   let code = "";
   for (let index = 0; index < 8; index += 1) {
     if (index === 4) code += "-";
-    code += alphabet[bytes[index] % alphabet.length];
+    code += alphabet[randomInt(alphabet.length)];
   }
   return code;
 }
+function errorDescription(error) {
+  return error instanceof Error ? error.message : "unexpected fake provider failure";
+}
 function sendJson(response, status, body) {
   const payload = JSON.stringify(body);
   response.writeHead(status, {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ever-works/oidc-identity",
-	"version": "1.0.1",
+	"version": "1.0.2",
 	"description": "OpenID Connect identity provider plugin (Ever ID) for Ever Works",
 	"author": {
 		"name": "Ever Co. LTD",
@@ -81,8 +81,8 @@
 		"url": "https://github.com/ever-works/ever-works/issues"
 	},
 	"everworksRelease": {
-		"contentHash": "sha256:d6ab8f43c74717409b5ee7e719ac9452397a0aacfca5420ef64e29cee4d8d870",
-		"commit": "481654e1181e43571ceb71e50ec465d9df360cb2",
-		"source": "https://github.com/ever-works/ever-works/tree/481654e1181e43571ceb71e50ec465d9df360cb2/packages/plugins/oidc-identity"
+		"contentHash": "sha256:552140351eaaf6816279d379bc870b24c4f112caf37ec7868700970d48f658b0",
+		"commit": "32c8673882bba70458ac7c38f17f49a608e856a0",
+		"source": "https://github.com/ever-works/ever-works/tree/32c8673882bba70458ac7c38f17f49a608e856a0/packages/plugins/oidc-identity"
 	}
 }