@ever-works/oidc-identity 1.0.2 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.cjs +256 -0
- package/dist/index.js +256 -0
- package/package.json +6 -6
package/dist/index.cjs
CHANGED
|
@@ -66,6 +66,254 @@ module.exports = __toCommonJS(src_exports);
|
|
|
66
66
|
// src/oidc-identity.plugin.ts
|
|
67
67
|
var import_node_crypto = require("crypto");
|
|
68
68
|
|
|
69
|
+
// ../../../node_modules/.pnpm/@ever-co+connect-contracts@1.0.0-rc.2/node_modules/@ever-co/connect-contracts/dist/index.js
|
|
70
|
+
var CONSTANTS = {
|
|
71
|
+
"$comment": "Wire constants of the Ever Platform modules. tools/split-integrations.mjs refreshes the fields read from the contract (contracts_version, code patterns, install_sources, products, stats_headers, feed_event_types, integration_keys, root_keys); every other value is a default a product may override by its own configuration.",
|
|
72
|
+
"contracts_version": "1.0.0-rc.2",
|
|
73
|
+
"connect_code_pattern": "^EVC(-[0-9A-HJKMNP-TV-Za-hj-kmnp-tv-z]{4}){3}$",
|
|
74
|
+
"link_code_pattern": "^EVL(-[0-9A-HJKMNP-TV-Za-hj-kmnp-tv-z]{4}){3}$",
|
|
75
|
+
"install_sources": "^(cloud|self-hosted|ever\\.sh|works_app|desktop|partner:[a-z0-9-]{2,32})$",
|
|
76
|
+
"products": [
|
|
77
|
+
"gauzy",
|
|
78
|
+
"teams",
|
|
79
|
+
"works",
|
|
80
|
+
"rec",
|
|
81
|
+
"traduora",
|
|
82
|
+
"demand"
|
|
83
|
+
],
|
|
84
|
+
"instance_kinds": [
|
|
85
|
+
"cloud",
|
|
86
|
+
"self_hosted",
|
|
87
|
+
"works_app"
|
|
88
|
+
],
|
|
89
|
+
"instance_token_prefix": "evit_",
|
|
90
|
+
"entitlement_typ": "ever-entitlement+jwt",
|
|
91
|
+
"intent_typ": "ever-intent+jwt",
|
|
92
|
+
"assertion_typ": "ever-assertion+jwt",
|
|
93
|
+
"key_manifest_typ": "ever-key-manifest+jwt",
|
|
94
|
+
"stats_link_typ": "ever-stats-link+jwt",
|
|
95
|
+
"client_assertion_typ": "JWT",
|
|
96
|
+
"client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
|
|
97
|
+
"entitlement_aud": "ever-connect",
|
|
98
|
+
"stats_headers": {
|
|
99
|
+
"key": "Ever-Stats-Key",
|
|
100
|
+
"signature": "Ever-Stats-Signature",
|
|
101
|
+
"key_id": "Ever-Stats-Key-Id"
|
|
102
|
+
},
|
|
103
|
+
"stats_signature_prefix": "ed25519=",
|
|
104
|
+
"feed_event_types": [
|
|
105
|
+
"ever.consent.consent.granted",
|
|
106
|
+
"ever.consent.consent.revoked",
|
|
107
|
+
"ever.consent.integration.disabled",
|
|
108
|
+
"ever.consent.integration.enabled",
|
|
109
|
+
"ever.consent.integration.scope_bumped",
|
|
110
|
+
"ever.entitlements.entitlement.issued",
|
|
111
|
+
"ever.entitlements.entitlement.revoked",
|
|
112
|
+
"ever.entitlements.usage.limit_reached",
|
|
113
|
+
"ever.registry.instance.approved",
|
|
114
|
+
"ever.registry.instance.connected",
|
|
115
|
+
"ever.registry.instance.disconnected",
|
|
116
|
+
"ever.registry.instance.key_rotated",
|
|
117
|
+
"ever.registry.instance.revoked",
|
|
118
|
+
"ever.registry.instance.seen",
|
|
119
|
+
"ever.registry.managed_operation.requested",
|
|
120
|
+
"ever.registry.managed_operation.state_changed",
|
|
121
|
+
"ever.registry.membership.created",
|
|
122
|
+
"ever.registry.membership.removed",
|
|
123
|
+
"ever.registry.membership.role_changed",
|
|
124
|
+
"ever.registry.person.deletion_requested",
|
|
125
|
+
"ever.registry.person.export_requested",
|
|
126
|
+
"ever.registry.tenant_link.created",
|
|
127
|
+
"ever.registry.tenant_link.orphaned",
|
|
128
|
+
"ever.registry.tenant_link.resumed",
|
|
129
|
+
"ever.registry.tenant_link.suspended",
|
|
130
|
+
"ever.registry.tenant_link.unlinked"
|
|
131
|
+
],
|
|
132
|
+
"integration_keys": [
|
|
133
|
+
"instance_url",
|
|
134
|
+
"stats_link",
|
|
135
|
+
"ever_id_login",
|
|
136
|
+
"counterparty_lookup",
|
|
137
|
+
"counterparty_discoverable",
|
|
138
|
+
"profile_import",
|
|
139
|
+
"usage_reporting",
|
|
140
|
+
"app_sync",
|
|
141
|
+
"billing_link",
|
|
142
|
+
"webhooks",
|
|
143
|
+
"managed_operations",
|
|
144
|
+
"provider_access",
|
|
145
|
+
"marketplace_installs"
|
|
146
|
+
],
|
|
147
|
+
"key_manifest_path": "/.well-known/ever-keys.json",
|
|
148
|
+
"assertion_audience_path": "/v1/instances/token",
|
|
149
|
+
"assertion_max_ttl_s": 300,
|
|
150
|
+
"assertion_max_skew_s": 300,
|
|
151
|
+
"token_ttl_s": 3600,
|
|
152
|
+
"token_refresh_after_s": 3e3,
|
|
153
|
+
"key_rotation_overlap_s": 604800,
|
|
154
|
+
"entitlement": {
|
|
155
|
+
"validity_s": 604800,
|
|
156
|
+
"refresh_after_s": 21600,
|
|
157
|
+
"grace_s": 2592e3,
|
|
158
|
+
"max_reads_per_hour": 6
|
|
159
|
+
},
|
|
160
|
+
"key_manifest": {
|
|
161
|
+
"refresh_s": 86400,
|
|
162
|
+
"unknown_kid_refresh_min_s": 600,
|
|
163
|
+
"lifetime_s": 2592e3
|
|
164
|
+
},
|
|
165
|
+
"heartbeat_interval_s": 86400,
|
|
166
|
+
"heartbeat_after_boot_max_s": 300,
|
|
167
|
+
"heartbeat_min_interval_s": 60,
|
|
168
|
+
"feed": {
|
|
169
|
+
"wait_s": 25,
|
|
170
|
+
"interval_fallback_s": 900,
|
|
171
|
+
"page_limit": 50
|
|
172
|
+
},
|
|
173
|
+
"stats": {
|
|
174
|
+
"send_interval_s": 86400,
|
|
175
|
+
"min_interval_s": 3600,
|
|
176
|
+
"max_bytes": 16384,
|
|
177
|
+
"final_resend_days": [
|
|
178
|
+
1,
|
|
179
|
+
2,
|
|
180
|
+
3
|
|
181
|
+
],
|
|
182
|
+
"reports_per_day": 24
|
|
183
|
+
},
|
|
184
|
+
"lookup": {
|
|
185
|
+
"normalization_version": 1,
|
|
186
|
+
"max_hashes_per_query": 100,
|
|
187
|
+
"cache_positive_s": 86400,
|
|
188
|
+
"cache_negative_s": 3600,
|
|
189
|
+
"salt_cache_s": 86400
|
|
190
|
+
},
|
|
191
|
+
"mirror": {
|
|
192
|
+
"max_bytes": 4194304,
|
|
193
|
+
"interval_s": 30
|
|
194
|
+
},
|
|
195
|
+
"step_up_max_age_s": 300,
|
|
196
|
+
"stats_link_statement_max_age_s": 600,
|
|
197
|
+
"timeouts_ms": {
|
|
198
|
+
"read": 6e3,
|
|
199
|
+
"write": 1e4
|
|
200
|
+
},
|
|
201
|
+
"user_agent_pattern": "ever-connect-sdk/<sdk version> (<product>/<product version>)",
|
|
202
|
+
"root_keys": [
|
|
203
|
+
{
|
|
204
|
+
"kid": "ever-202610-0d77",
|
|
205
|
+
"iss": "https://api-dev.ever.co",
|
|
206
|
+
"kty": "OKP",
|
|
207
|
+
"crv": "Ed25519",
|
|
208
|
+
"x": "cgULEqOov0n4s9I8luZboIgJp9mIGusmsSdSL4oCjKk",
|
|
209
|
+
"use": "sig",
|
|
210
|
+
"alg": "EdDSA"
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
"kid": "ever-202610-8704",
|
|
214
|
+
"iss": "https://api-stage.ever.co",
|
|
215
|
+
"kty": "OKP",
|
|
216
|
+
"crv": "Ed25519",
|
|
217
|
+
"x": "Ync-MW21JL72GOiS-RVrlvS3gyFH5Krh5f6I66jw1Qc",
|
|
218
|
+
"use": "sig",
|
|
219
|
+
"alg": "EdDSA"
|
|
220
|
+
}
|
|
221
|
+
],
|
|
222
|
+
"root_keys_file_env": "EVER_PLATFORM_ROOT_KEYS_FILE",
|
|
223
|
+
"root_keys_file_hosts": [
|
|
224
|
+
"localhost",
|
|
225
|
+
"127.0.0.0/8",
|
|
226
|
+
"::1",
|
|
227
|
+
"10.0.0.0/8",
|
|
228
|
+
"172.16.0.0/12",
|
|
229
|
+
"192.168.0.0/16",
|
|
230
|
+
"*.localhost"
|
|
231
|
+
]
|
|
232
|
+
};
|
|
233
|
+
var FEED_EVENT_TYPES = CONSTANTS.feed_event_types;
|
|
234
|
+
var PROBLEM_CODES = [
|
|
235
|
+
"validation_failed",
|
|
236
|
+
"not_found",
|
|
237
|
+
"unauthorized",
|
|
238
|
+
"forbidden_role",
|
|
239
|
+
"forbidden_scope",
|
|
240
|
+
"ambiguous_credentials",
|
|
241
|
+
"credential_revoked",
|
|
242
|
+
"instance_disconnected",
|
|
243
|
+
"instance_pending_approval",
|
|
244
|
+
"not_connection_owner",
|
|
245
|
+
"integration_disabled",
|
|
246
|
+
"integration_revoked",
|
|
247
|
+
"denied_by_policy",
|
|
248
|
+
"integration_not_available",
|
|
249
|
+
"entitlement_required",
|
|
250
|
+
"tier_required",
|
|
251
|
+
"limit_exceeded",
|
|
252
|
+
"rate_limited",
|
|
253
|
+
"idempotency_mismatch",
|
|
254
|
+
"idempotency_in_progress",
|
|
255
|
+
"stale_version",
|
|
256
|
+
"module_disabled",
|
|
257
|
+
"handle_taken",
|
|
258
|
+
"handle_reserved",
|
|
259
|
+
"handle_retired",
|
|
260
|
+
"handle_invalid",
|
|
261
|
+
"handle_held",
|
|
262
|
+
"handle_held_by_you",
|
|
263
|
+
"code_invalid",
|
|
264
|
+
"code_expired",
|
|
265
|
+
"product_mismatch",
|
|
266
|
+
"product_not_supported",
|
|
267
|
+
"key_mismatch",
|
|
268
|
+
"signature_invalid",
|
|
269
|
+
"unlinked_org",
|
|
270
|
+
"schema_violation",
|
|
271
|
+
"mirror_owned_field",
|
|
272
|
+
"illegal_transition",
|
|
273
|
+
"already_exists",
|
|
274
|
+
"already_completed",
|
|
275
|
+
"billing_active",
|
|
276
|
+
"sso_required",
|
|
277
|
+
"reauth_required",
|
|
278
|
+
"session_required",
|
|
279
|
+
"step_up_required",
|
|
280
|
+
"session_bound",
|
|
281
|
+
"authorization_pending",
|
|
282
|
+
"slow_down",
|
|
283
|
+
"expired_token",
|
|
284
|
+
"already_connected",
|
|
285
|
+
"already_linked",
|
|
286
|
+
"already_claimed",
|
|
287
|
+
"invalid_client",
|
|
288
|
+
"public_jwk_invalid",
|
|
289
|
+
"identifier_claimed",
|
|
290
|
+
"salt_version_unknown",
|
|
291
|
+
"salt_version_retired",
|
|
292
|
+
"hashes_invalid",
|
|
293
|
+
"lookup_key_required",
|
|
294
|
+
"required_component",
|
|
295
|
+
"resync_required",
|
|
296
|
+
"last_owner",
|
|
297
|
+
"last_auth_method",
|
|
298
|
+
"instances_linked",
|
|
299
|
+
"install_in_progress",
|
|
300
|
+
"slug_reserved",
|
|
301
|
+
"checklist_incomplete",
|
|
302
|
+
"scope_version_outdated",
|
|
303
|
+
"method_not_allowed",
|
|
304
|
+
"payload_too_large",
|
|
305
|
+
"unsupported_media_type",
|
|
306
|
+
"gone",
|
|
307
|
+
"unavailable",
|
|
308
|
+
"upstream",
|
|
309
|
+
"database_absent",
|
|
310
|
+
"database_unreachable",
|
|
311
|
+
"topic_private",
|
|
312
|
+
"keys_unavailable",
|
|
313
|
+
"internal_error"
|
|
314
|
+
];
|
|
315
|
+
var CODES = new Set(PROBLEM_CODES);
|
|
316
|
+
|
|
69
317
|
// ../../contracts/dist/index.js
|
|
70
318
|
var USER_SELECTABLE_WORK_KINDS = [
|
|
71
319
|
"website",
|
|
@@ -868,8 +1116,11 @@ var FLEET_JOB_DEFAULT_QUEUED_MAX_AGE_SEC = Object.freeze({
|
|
|
868
1116
|
});
|
|
869
1117
|
var FLEET_JOB_MAX_QUEUED_MAX_AGE_SEC = 7 * 24 * 60 * 60;
|
|
870
1118
|
var FLEET_AGENT_EXECUTION_MAX_INSTRUCTIONS_BYTES = 160 * 1024;
|
|
1119
|
+
var FLEET_AGENT_TASK_TIMELINE_MAX_BYTES = 48 * 1024;
|
|
1120
|
+
var FLEET_AGENT_TASK_TRANSCRIPT_MAX_BYTES = 64 * 1024;
|
|
871
1121
|
var FLEET_AGENT_TASK_QUESTION_MAX_FILE_BYTES = 64 * 1024;
|
|
872
1122
|
var FLEET_AGENT_TASK_QUESTION_MAX_CONTEXT_BYTES = 6 * 1024;
|
|
1123
|
+
var FLEET_NODE_MAX_MEMORY_MB = 1024 * 1024;
|
|
873
1124
|
var FLEET_MAX_DAILY_COST_CEILING_CENTS = 1e5 * 100;
|
|
874
1125
|
var FLEET_MAX_DISK_FREE_BYTES = 2 ** 60;
|
|
875
1126
|
var FLEET_DEFAULT_ENROLLMENT_TOKEN_TTL_MS = 15 * 6e4;
|
|
@@ -1273,6 +1524,11 @@ var READINESS_BLOCKERS = Object.freeze([
|
|
|
1273
1524
|
"withdrawn",
|
|
1274
1525
|
"other-refusals"
|
|
1275
1526
|
]);
|
|
1527
|
+
var EVER_STATS_KEY_HEADER = CONSTANTS.stats_headers.key;
|
|
1528
|
+
var EVER_STATS_SIGNATURE_HEADER = CONSTANTS.stats_headers.signature;
|
|
1529
|
+
var EVER_STATS_KEY_ID_HEADER = CONSTANTS.stats_headers.key_id;
|
|
1530
|
+
var EVER_STATS_SIGNATURE_PREFIX = CONSTANTS.stats_signature_prefix;
|
|
1531
|
+
var EVER_STATS_MAX_BODY_BYTES = CONSTANTS.stats.max_bytes;
|
|
1276
1532
|
|
|
1277
1533
|
// ../../plugin/dist/index.js
|
|
1278
1534
|
var DEFAULT_DIFF_MAX_BYTES = 256 * 1024;
|
package/dist/index.js
CHANGED
|
@@ -1,6 +1,254 @@
|
|
|
1
1
|
// src/oidc-identity.plugin.ts
|
|
2
2
|
import { randomBytes } from "crypto";
|
|
3
3
|
|
|
4
|
+
// ../../../node_modules/.pnpm/@ever-co+connect-contracts@1.0.0-rc.2/node_modules/@ever-co/connect-contracts/dist/index.js
|
|
5
|
+
var CONSTANTS = {
|
|
6
|
+
"$comment": "Wire constants of the Ever Platform modules. tools/split-integrations.mjs refreshes the fields read from the contract (contracts_version, code patterns, install_sources, products, stats_headers, feed_event_types, integration_keys, root_keys); every other value is a default a product may override by its own configuration.",
|
|
7
|
+
"contracts_version": "1.0.0-rc.2",
|
|
8
|
+
"connect_code_pattern": "^EVC(-[0-9A-HJKMNP-TV-Za-hj-kmnp-tv-z]{4}){3}$",
|
|
9
|
+
"link_code_pattern": "^EVL(-[0-9A-HJKMNP-TV-Za-hj-kmnp-tv-z]{4}){3}$",
|
|
10
|
+
"install_sources": "^(cloud|self-hosted|ever\\.sh|works_app|desktop|partner:[a-z0-9-]{2,32})$",
|
|
11
|
+
"products": [
|
|
12
|
+
"gauzy",
|
|
13
|
+
"teams",
|
|
14
|
+
"works",
|
|
15
|
+
"rec",
|
|
16
|
+
"traduora",
|
|
17
|
+
"demand"
|
|
18
|
+
],
|
|
19
|
+
"instance_kinds": [
|
|
20
|
+
"cloud",
|
|
21
|
+
"self_hosted",
|
|
22
|
+
"works_app"
|
|
23
|
+
],
|
|
24
|
+
"instance_token_prefix": "evit_",
|
|
25
|
+
"entitlement_typ": "ever-entitlement+jwt",
|
|
26
|
+
"intent_typ": "ever-intent+jwt",
|
|
27
|
+
"assertion_typ": "ever-assertion+jwt",
|
|
28
|
+
"key_manifest_typ": "ever-key-manifest+jwt",
|
|
29
|
+
"stats_link_typ": "ever-stats-link+jwt",
|
|
30
|
+
"client_assertion_typ": "JWT",
|
|
31
|
+
"client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
|
|
32
|
+
"entitlement_aud": "ever-connect",
|
|
33
|
+
"stats_headers": {
|
|
34
|
+
"key": "Ever-Stats-Key",
|
|
35
|
+
"signature": "Ever-Stats-Signature",
|
|
36
|
+
"key_id": "Ever-Stats-Key-Id"
|
|
37
|
+
},
|
|
38
|
+
"stats_signature_prefix": "ed25519=",
|
|
39
|
+
"feed_event_types": [
|
|
40
|
+
"ever.consent.consent.granted",
|
|
41
|
+
"ever.consent.consent.revoked",
|
|
42
|
+
"ever.consent.integration.disabled",
|
|
43
|
+
"ever.consent.integration.enabled",
|
|
44
|
+
"ever.consent.integration.scope_bumped",
|
|
45
|
+
"ever.entitlements.entitlement.issued",
|
|
46
|
+
"ever.entitlements.entitlement.revoked",
|
|
47
|
+
"ever.entitlements.usage.limit_reached",
|
|
48
|
+
"ever.registry.instance.approved",
|
|
49
|
+
"ever.registry.instance.connected",
|
|
50
|
+
"ever.registry.instance.disconnected",
|
|
51
|
+
"ever.registry.instance.key_rotated",
|
|
52
|
+
"ever.registry.instance.revoked",
|
|
53
|
+
"ever.registry.instance.seen",
|
|
54
|
+
"ever.registry.managed_operation.requested",
|
|
55
|
+
"ever.registry.managed_operation.state_changed",
|
|
56
|
+
"ever.registry.membership.created",
|
|
57
|
+
"ever.registry.membership.removed",
|
|
58
|
+
"ever.registry.membership.role_changed",
|
|
59
|
+
"ever.registry.person.deletion_requested",
|
|
60
|
+
"ever.registry.person.export_requested",
|
|
61
|
+
"ever.registry.tenant_link.created",
|
|
62
|
+
"ever.registry.tenant_link.orphaned",
|
|
63
|
+
"ever.registry.tenant_link.resumed",
|
|
64
|
+
"ever.registry.tenant_link.suspended",
|
|
65
|
+
"ever.registry.tenant_link.unlinked"
|
|
66
|
+
],
|
|
67
|
+
"integration_keys": [
|
|
68
|
+
"instance_url",
|
|
69
|
+
"stats_link",
|
|
70
|
+
"ever_id_login",
|
|
71
|
+
"counterparty_lookup",
|
|
72
|
+
"counterparty_discoverable",
|
|
73
|
+
"profile_import",
|
|
74
|
+
"usage_reporting",
|
|
75
|
+
"app_sync",
|
|
76
|
+
"billing_link",
|
|
77
|
+
"webhooks",
|
|
78
|
+
"managed_operations",
|
|
79
|
+
"provider_access",
|
|
80
|
+
"marketplace_installs"
|
|
81
|
+
],
|
|
82
|
+
"key_manifest_path": "/.well-known/ever-keys.json",
|
|
83
|
+
"assertion_audience_path": "/v1/instances/token",
|
|
84
|
+
"assertion_max_ttl_s": 300,
|
|
85
|
+
"assertion_max_skew_s": 300,
|
|
86
|
+
"token_ttl_s": 3600,
|
|
87
|
+
"token_refresh_after_s": 3e3,
|
|
88
|
+
"key_rotation_overlap_s": 604800,
|
|
89
|
+
"entitlement": {
|
|
90
|
+
"validity_s": 604800,
|
|
91
|
+
"refresh_after_s": 21600,
|
|
92
|
+
"grace_s": 2592e3,
|
|
93
|
+
"max_reads_per_hour": 6
|
|
94
|
+
},
|
|
95
|
+
"key_manifest": {
|
|
96
|
+
"refresh_s": 86400,
|
|
97
|
+
"unknown_kid_refresh_min_s": 600,
|
|
98
|
+
"lifetime_s": 2592e3
|
|
99
|
+
},
|
|
100
|
+
"heartbeat_interval_s": 86400,
|
|
101
|
+
"heartbeat_after_boot_max_s": 300,
|
|
102
|
+
"heartbeat_min_interval_s": 60,
|
|
103
|
+
"feed": {
|
|
104
|
+
"wait_s": 25,
|
|
105
|
+
"interval_fallback_s": 900,
|
|
106
|
+
"page_limit": 50
|
|
107
|
+
},
|
|
108
|
+
"stats": {
|
|
109
|
+
"send_interval_s": 86400,
|
|
110
|
+
"min_interval_s": 3600,
|
|
111
|
+
"max_bytes": 16384,
|
|
112
|
+
"final_resend_days": [
|
|
113
|
+
1,
|
|
114
|
+
2,
|
|
115
|
+
3
|
|
116
|
+
],
|
|
117
|
+
"reports_per_day": 24
|
|
118
|
+
},
|
|
119
|
+
"lookup": {
|
|
120
|
+
"normalization_version": 1,
|
|
121
|
+
"max_hashes_per_query": 100,
|
|
122
|
+
"cache_positive_s": 86400,
|
|
123
|
+
"cache_negative_s": 3600,
|
|
124
|
+
"salt_cache_s": 86400
|
|
125
|
+
},
|
|
126
|
+
"mirror": {
|
|
127
|
+
"max_bytes": 4194304,
|
|
128
|
+
"interval_s": 30
|
|
129
|
+
},
|
|
130
|
+
"step_up_max_age_s": 300,
|
|
131
|
+
"stats_link_statement_max_age_s": 600,
|
|
132
|
+
"timeouts_ms": {
|
|
133
|
+
"read": 6e3,
|
|
134
|
+
"write": 1e4
|
|
135
|
+
},
|
|
136
|
+
"user_agent_pattern": "ever-connect-sdk/<sdk version> (<product>/<product version>)",
|
|
137
|
+
"root_keys": [
|
|
138
|
+
{
|
|
139
|
+
"kid": "ever-202610-0d77",
|
|
140
|
+
"iss": "https://api-dev.ever.co",
|
|
141
|
+
"kty": "OKP",
|
|
142
|
+
"crv": "Ed25519",
|
|
143
|
+
"x": "cgULEqOov0n4s9I8luZboIgJp9mIGusmsSdSL4oCjKk",
|
|
144
|
+
"use": "sig",
|
|
145
|
+
"alg": "EdDSA"
|
|
146
|
+
},
|
|
147
|
+
{
|
|
148
|
+
"kid": "ever-202610-8704",
|
|
149
|
+
"iss": "https://api-stage.ever.co",
|
|
150
|
+
"kty": "OKP",
|
|
151
|
+
"crv": "Ed25519",
|
|
152
|
+
"x": "Ync-MW21JL72GOiS-RVrlvS3gyFH5Krh5f6I66jw1Qc",
|
|
153
|
+
"use": "sig",
|
|
154
|
+
"alg": "EdDSA"
|
|
155
|
+
}
|
|
156
|
+
],
|
|
157
|
+
"root_keys_file_env": "EVER_PLATFORM_ROOT_KEYS_FILE",
|
|
158
|
+
"root_keys_file_hosts": [
|
|
159
|
+
"localhost",
|
|
160
|
+
"127.0.0.0/8",
|
|
161
|
+
"::1",
|
|
162
|
+
"10.0.0.0/8",
|
|
163
|
+
"172.16.0.0/12",
|
|
164
|
+
"192.168.0.0/16",
|
|
165
|
+
"*.localhost"
|
|
166
|
+
]
|
|
167
|
+
};
|
|
168
|
+
var FEED_EVENT_TYPES = CONSTANTS.feed_event_types;
|
|
169
|
+
var PROBLEM_CODES = [
|
|
170
|
+
"validation_failed",
|
|
171
|
+
"not_found",
|
|
172
|
+
"unauthorized",
|
|
173
|
+
"forbidden_role",
|
|
174
|
+
"forbidden_scope",
|
|
175
|
+
"ambiguous_credentials",
|
|
176
|
+
"credential_revoked",
|
|
177
|
+
"instance_disconnected",
|
|
178
|
+
"instance_pending_approval",
|
|
179
|
+
"not_connection_owner",
|
|
180
|
+
"integration_disabled",
|
|
181
|
+
"integration_revoked",
|
|
182
|
+
"denied_by_policy",
|
|
183
|
+
"integration_not_available",
|
|
184
|
+
"entitlement_required",
|
|
185
|
+
"tier_required",
|
|
186
|
+
"limit_exceeded",
|
|
187
|
+
"rate_limited",
|
|
188
|
+
"idempotency_mismatch",
|
|
189
|
+
"idempotency_in_progress",
|
|
190
|
+
"stale_version",
|
|
191
|
+
"module_disabled",
|
|
192
|
+
"handle_taken",
|
|
193
|
+
"handle_reserved",
|
|
194
|
+
"handle_retired",
|
|
195
|
+
"handle_invalid",
|
|
196
|
+
"handle_held",
|
|
197
|
+
"handle_held_by_you",
|
|
198
|
+
"code_invalid",
|
|
199
|
+
"code_expired",
|
|
200
|
+
"product_mismatch",
|
|
201
|
+
"product_not_supported",
|
|
202
|
+
"key_mismatch",
|
|
203
|
+
"signature_invalid",
|
|
204
|
+
"unlinked_org",
|
|
205
|
+
"schema_violation",
|
|
206
|
+
"mirror_owned_field",
|
|
207
|
+
"illegal_transition",
|
|
208
|
+
"already_exists",
|
|
209
|
+
"already_completed",
|
|
210
|
+
"billing_active",
|
|
211
|
+
"sso_required",
|
|
212
|
+
"reauth_required",
|
|
213
|
+
"session_required",
|
|
214
|
+
"step_up_required",
|
|
215
|
+
"session_bound",
|
|
216
|
+
"authorization_pending",
|
|
217
|
+
"slow_down",
|
|
218
|
+
"expired_token",
|
|
219
|
+
"already_connected",
|
|
220
|
+
"already_linked",
|
|
221
|
+
"already_claimed",
|
|
222
|
+
"invalid_client",
|
|
223
|
+
"public_jwk_invalid",
|
|
224
|
+
"identifier_claimed",
|
|
225
|
+
"salt_version_unknown",
|
|
226
|
+
"salt_version_retired",
|
|
227
|
+
"hashes_invalid",
|
|
228
|
+
"lookup_key_required",
|
|
229
|
+
"required_component",
|
|
230
|
+
"resync_required",
|
|
231
|
+
"last_owner",
|
|
232
|
+
"last_auth_method",
|
|
233
|
+
"instances_linked",
|
|
234
|
+
"install_in_progress",
|
|
235
|
+
"slug_reserved",
|
|
236
|
+
"checklist_incomplete",
|
|
237
|
+
"scope_version_outdated",
|
|
238
|
+
"method_not_allowed",
|
|
239
|
+
"payload_too_large",
|
|
240
|
+
"unsupported_media_type",
|
|
241
|
+
"gone",
|
|
242
|
+
"unavailable",
|
|
243
|
+
"upstream",
|
|
244
|
+
"database_absent",
|
|
245
|
+
"database_unreachable",
|
|
246
|
+
"topic_private",
|
|
247
|
+
"keys_unavailable",
|
|
248
|
+
"internal_error"
|
|
249
|
+
];
|
|
250
|
+
var CODES = new Set(PROBLEM_CODES);
|
|
251
|
+
|
|
4
252
|
// ../../contracts/dist/index.js
|
|
5
253
|
var USER_SELECTABLE_WORK_KINDS = [
|
|
6
254
|
"website",
|
|
@@ -803,8 +1051,11 @@ var FLEET_JOB_DEFAULT_QUEUED_MAX_AGE_SEC = Object.freeze({
|
|
|
803
1051
|
});
|
|
804
1052
|
var FLEET_JOB_MAX_QUEUED_MAX_AGE_SEC = 7 * 24 * 60 * 60;
|
|
805
1053
|
var FLEET_AGENT_EXECUTION_MAX_INSTRUCTIONS_BYTES = 160 * 1024;
|
|
1054
|
+
var FLEET_AGENT_TASK_TIMELINE_MAX_BYTES = 48 * 1024;
|
|
1055
|
+
var FLEET_AGENT_TASK_TRANSCRIPT_MAX_BYTES = 64 * 1024;
|
|
806
1056
|
var FLEET_AGENT_TASK_QUESTION_MAX_FILE_BYTES = 64 * 1024;
|
|
807
1057
|
var FLEET_AGENT_TASK_QUESTION_MAX_CONTEXT_BYTES = 6 * 1024;
|
|
1058
|
+
var FLEET_NODE_MAX_MEMORY_MB = 1024 * 1024;
|
|
808
1059
|
var FLEET_MAX_DAILY_COST_CEILING_CENTS = 1e5 * 100;
|
|
809
1060
|
var FLEET_MAX_DISK_FREE_BYTES = 2 ** 60;
|
|
810
1061
|
var FLEET_DEFAULT_ENROLLMENT_TOKEN_TTL_MS = 15 * 6e4;
|
|
@@ -1208,6 +1459,11 @@ var READINESS_BLOCKERS = Object.freeze([
|
|
|
1208
1459
|
"withdrawn",
|
|
1209
1460
|
"other-refusals"
|
|
1210
1461
|
]);
|
|
1462
|
+
var EVER_STATS_KEY_HEADER = CONSTANTS.stats_headers.key;
|
|
1463
|
+
var EVER_STATS_SIGNATURE_HEADER = CONSTANTS.stats_headers.signature;
|
|
1464
|
+
var EVER_STATS_KEY_ID_HEADER = CONSTANTS.stats_headers.key_id;
|
|
1465
|
+
var EVER_STATS_SIGNATURE_PREFIX = CONSTANTS.stats_signature_prefix;
|
|
1466
|
+
var EVER_STATS_MAX_BODY_BYTES = CONSTANTS.stats.max_bytes;
|
|
1211
1467
|
|
|
1212
1468
|
// ../../plugin/dist/index.js
|
|
1213
1469
|
var DEFAULT_DIFF_MAX_BYTES = 256 * 1024;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ever-works/oidc-identity",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.4",
|
|
4
4
|
"description": "OpenID Connect identity provider plugin (Ever ID) for Ever Works",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Ever Co. LTD",
|
|
@@ -38,14 +38,14 @@
|
|
|
38
38
|
"test:coverage": "vitest run --coverage"
|
|
39
39
|
},
|
|
40
40
|
"peerDependencies": {
|
|
41
|
-
"@ever-works/plugin": "^1.2.
|
|
41
|
+
"@ever-works/plugin": "^1.2.4"
|
|
42
42
|
},
|
|
43
43
|
"dependencies": {
|
|
44
44
|
"jose": "^6",
|
|
45
45
|
"openid-client": "^6"
|
|
46
46
|
},
|
|
47
47
|
"devDependencies": {
|
|
48
|
-
"@ever-works/plugin": "^1.2.
|
|
48
|
+
"@ever-works/plugin": "^1.2.4",
|
|
49
49
|
"@types/node": "^26.6.4",
|
|
50
50
|
"ajv": "^8.18.0",
|
|
51
51
|
"ajv-formats": "^3.0.1",
|
|
@@ -81,8 +81,8 @@
|
|
|
81
81
|
"url": "https://github.com/ever-works/ever-works/issues"
|
|
82
82
|
},
|
|
83
83
|
"everworksRelease": {
|
|
84
|
-
"contentHash": "sha256:
|
|
85
|
-
"commit": "
|
|
86
|
-
"source": "https://github.com/ever-works/ever-works/tree/
|
|
84
|
+
"contentHash": "sha256:16b32409bd6fdaa8b6aab4bd22b10d8bdb25e9cc9012bcf648fe4efe6d6a032a",
|
|
85
|
+
"commit": "db9734a246fefc8963505af3712703524107f75a",
|
|
86
|
+
"source": "https://github.com/ever-works/ever-works/tree/db9734a246fefc8963505af3712703524107f75a/packages/plugins/oidc-identity"
|
|
87
87
|
}
|
|
88
88
|
}
|