@fabrika/iam-contract 0.2.0 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +3 -3
- package/src/index.ts +2 -6
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@fabrika/iam-contract",
|
|
3
|
-
"version": "0.2
|
|
3
|
+
"version": "0.3.2",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
@@ -24,7 +24,7 @@
|
|
|
24
24
|
"typecheck": "tsc --noEmit"
|
|
25
25
|
},
|
|
26
26
|
"dependencies": {
|
|
27
|
-
"@fabrika/app": "^0.2
|
|
28
|
-
"@fabrika/auth-core": "^0.2
|
|
27
|
+
"@fabrika/app": "^0.3.2",
|
|
28
|
+
"@fabrika/auth-core": "^0.3.2"
|
|
29
29
|
}
|
|
30
30
|
}
|
package/src/index.ts
CHANGED
|
@@ -93,7 +93,7 @@ export interface SessionDto {
|
|
|
93
93
|
principalId: string
|
|
94
94
|
/** How the human proved who they were; `local_dev` is IAM's `LOCAL_DEV_LOGIN` bypass. */
|
|
95
95
|
authenticationMethod: 'oidc' | 'password' | 'local_dev'
|
|
96
|
-
/** The app this session is bound to (an ADR-
|
|
96
|
+
/** The app this session is bound to (an ADR-0022 child); null = the IAM session itself. */
|
|
97
97
|
app: string | null
|
|
98
98
|
/** The IAM session this was derived from; null on an IAM session. Revoking that one revokes this. */
|
|
99
99
|
parentSessionId: string | null
|
|
@@ -369,7 +369,7 @@ export interface AppInput {
|
|
|
369
369
|
}
|
|
370
370
|
|
|
371
371
|
/**
|
|
372
|
-
* The public origins IAM will hand this app a session at (ADR-
|
|
372
|
+
* The public origins IAM will hand this app a session at (ADR-0022). Declarative: the whole set is
|
|
373
373
|
* stated, so removing one is the same call as adding one and a stale entry cannot survive a deploy.
|
|
374
374
|
*/
|
|
375
375
|
export interface SetReturnOriginsRequest {
|
|
@@ -439,8 +439,6 @@ export interface IamAdminRpcContract {
|
|
|
439
439
|
get: RpcProcedure<PrincipalIdInput, PrincipalDetail>
|
|
440
440
|
invite: RpcProcedure<InviteRequest, PrincipalListItem>
|
|
441
441
|
update: RpcProcedure<UpdatePrincipalInput, PrincipalListItem>
|
|
442
|
-
/** Cancel an unclaimed invite, or disable a claimed principal. */
|
|
443
|
-
delete: RpcProcedure<PrincipalIdInput, OkResponse>
|
|
444
442
|
}
|
|
445
443
|
/**
|
|
446
444
|
* Sessions an operator no longer trusts. Revoking an IAM session also ends every app session
|
|
@@ -463,9 +461,7 @@ export interface IamAdminRpcContract {
|
|
|
463
461
|
apps: {
|
|
464
462
|
list: RpcProcedure<void, ListResponse<AppDto>>
|
|
465
463
|
getSchema: RpcProcedure<AppInput, AppSchemaDto>
|
|
466
|
-
getReturnOrigins: RpcProcedure<AppInput, ReturnOriginsDto>
|
|
467
464
|
setReturnOrigins: RpcProcedure<SetReturnOriginsRequest, ReturnOriginsDto>
|
|
468
|
-
clearReturnOrigins: RpcProcedure<AppInput, ReturnOriginsDto>
|
|
469
465
|
}
|
|
470
466
|
roles: {
|
|
471
467
|
list: RpcProcedure<ListRolesInput, ListResponse<RoleDto>>
|