@fiado/api-invoker 4.26.0 → 4.27.0

package/bin/platformRbac/api/PlatformRbacBusinessApi.d.ts

@@ -1,6 +1,6 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 /**
  * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
@@ -25,4 +25,5 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
     verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
     authorize(input: AuthorizeRequest): Promise<ApiGatewayResponse<AuthorizeResponse>>;
     effectivePermissions(cognitoSub: string, tenantId?: string): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+    getInjectableUserAttributes(cognitoSub: string, tenantId: string): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }

package/bin/platformRbac/api/PlatformRbacBusinessApi.js

@@ -58,6 +58,10 @@ let PlatformRbacBusinessApi = class PlatformRbacBusinessApi {
             : base;
         return await this.httpRequest.get(url);
     }
+    async getInjectableUserAttributes(cognitoSub, tenantId) {
+        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
 };
 PlatformRbacBusinessApi = __decorate([
     injectable(),

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.d.ts

@@ -1,5 +1,5 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 /**
  * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
  * para los 3 endpoints internos del Custom Auth Challenge flow (MFA).
@@ -55,4 +55,10 @@ export interface IPlatformRbacBusinessApi {
      * rbac identifique el silo (sin él, el resolve cae a la rama platform → 404).
      */
     effectivePermissions(cognitoSub: string, tenantId?: string): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+    /**
+     * GET /internal/users/{cognitoSub}/injectable-attributes?tenantId= — devuelve los campos
+     * personalizados del usuario marcados injectToToken (ya filtrados y con valor). Invocado por
+     * jwt-inyector-trigger para estampar el claim `customAttributes`. DEC-RBAC-022.
+     */
+    getInjectableUserAttributes(cognitoSub: string, tenantId: string): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "4.26.0",
+  "version": "4.27.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^2.0.2",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.87.0",
+    "@fiado/type-kit": "^3.89.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/platformRbac/api/PlatformRbacBusinessApi.ts

@@ -12,6 +12,7 @@ import {
     AuthorizeRequest,
     AuthorizeResponse,
     EffectivePermissionsResponse,
+    InjectableUserAttributesResponse,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 
@@ -77,4 +78,12 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
             : base;
         return await this.httpRequest.get(url);
     }
+
+    async getInjectableUserAttributes(
+        cognitoSub: string,
+        tenantId: string,
+    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>> {
+        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
 }

package/src/platformRbac/api/interfaces/IPlatformRbacBusinessApi.ts

@@ -9,6 +9,7 @@ import {
     AuthorizeRequest,
     AuthorizeResponse,
     EffectivePermissionsResponse,
+    InjectableUserAttributesResponse,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
 
 /**
@@ -81,4 +82,14 @@ export interface IPlatformRbacBusinessApi {
         cognitoSub: string,
         tenantId?: string,
     ): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+
+    /**
+     * GET /internal/users/{cognitoSub}/injectable-attributes?tenantId= — devuelve los campos
+     * personalizados del usuario marcados injectToToken (ya filtrados y con valor). Invocado por
+     * jwt-inyector-trigger para estampar el claim `customAttributes`. DEC-RBAC-022.
+     */
+    getInjectableUserAttributes(
+        cognitoSub: string,
+        tenantId: string,
+    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }