@hyper.authio/bff 0.10.1 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/package.json +5 -2
package/README.md
CHANGED
|
@@ -278,3 +278,13 @@ Every invalid option is named at once, in one `AuthioConfigurationError`, when `
|
|
|
278
278
|
`AddAuthioBffUserToken()` on an `HttpClient` is `bff.userFetch()`; `MapAuthioRemoteApi` is `bff.remoteApi()` mounted
|
|
279
279
|
with `app.use`. There is no `403` access-denied answer: Express has no authorization policies to refuse with.
|
|
280
280
|
- YARP's per-request settings (`RequestConfig`, `HttpClientName`) become a `fetch` option on the remote API.
|
|
281
|
+
|
|
282
|
+
## Security
|
|
283
|
+
|
|
284
|
+
Report a vulnerability privately, by email to **security@hyperio.tech**, and not in an issue or anywhere else in
|
|
285
|
+
public. Authio's [vulnerability disclosure policy](https://authio.hyperio.tech/docs/trust/vulnerability-disclosure)
|
|
286
|
+
says what is in scope and what happens after a report. Only the latest published minor receives security fixes.
|
|
287
|
+
Questions and bugs that are not about security go to [support](https://authio.hyperio.tech/docs/account/support).
|
|
288
|
+
|
|
289
|
+
Em português: relate vulnerabilidades em sigilo, pelo e-mail **security@hyperio.tech**, e nunca numa issue nem em outro
|
|
290
|
+
lugar público. A política está no link acima.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@hyper.authio/bff",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.0",
|
|
4
4
|
"description": "Backend-for-Frontend for Authio on Express: server-side sessions, login/logout/user endpoints, anti-forgery, token refresh, remote API proxy and back-channel logout. Tokens never reach the browser.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
"build": "tsup"
|
|
33
33
|
},
|
|
34
34
|
"dependencies": {
|
|
35
|
-
"@hyper.authio/client": "0.
|
|
35
|
+
"@hyper.authio/client": "0.11.0"
|
|
36
36
|
},
|
|
37
37
|
"keywords": [
|
|
38
38
|
"authio",
|
|
@@ -49,6 +49,9 @@
|
|
|
49
49
|
"url": "git+https://github.com/LeonardoFerreira1209/authio-node.git",
|
|
50
50
|
"directory": "packages/bff"
|
|
51
51
|
},
|
|
52
|
+
"bugs": {
|
|
53
|
+
"url": "https://authio.hyperio.tech/docs/account/support"
|
|
54
|
+
},
|
|
52
55
|
"publishConfig": {
|
|
53
56
|
"access": "public"
|
|
54
57
|
},
|