@hyper.authio/express 0.10.1 → 0.11.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/package.json +6 -3
package/README.md
CHANGED
|
@@ -106,6 +106,16 @@ and `sid`. Authio loads it in an iframe when a session ends; the handler checks
|
|
|
106
106
|
`client.validateFrontChannelLogout`, answers `200` with an empty page, `400` (`invalid_request`) for another issuer or a
|
|
107
107
|
`sid` without `iss`, and always sends `Cache-Control: no-store`.
|
|
108
108
|
|
|
109
|
+
## Security
|
|
110
|
+
|
|
111
|
+
Report a vulnerability privately, by email to **security@hyperio.tech**, and not in an issue or anywhere else in
|
|
112
|
+
public. Authio's [vulnerability disclosure policy](https://authio.hyperio.tech/docs/trust/vulnerability-disclosure)
|
|
113
|
+
says what is in scope and what happens after a report. Only the latest published minor receives security fixes.
|
|
114
|
+
Questions and bugs that are not about security go to [support](https://authio.hyperio.tech/docs/account/support).
|
|
115
|
+
|
|
116
|
+
Em português: relate vulnerabilidades em sigilo, pelo e-mail **security@hyperio.tech**, e nunca numa issue nem em outro
|
|
117
|
+
lugar público. A política está no link acima.
|
|
118
|
+
|
|
109
119
|
## License
|
|
110
120
|
|
|
111
121
|
MIT
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@hyper.authio/express",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.1",
|
|
4
4
|
"description": "Express middleware for Authio: bearer validation, scope/role/permission/group/claim/organization/acr/amr/client guards, and signed webhook routes.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -32,8 +32,8 @@
|
|
|
32
32
|
"build": "tsup"
|
|
33
33
|
},
|
|
34
34
|
"dependencies": {
|
|
35
|
-
"@hyper.authio/client": "0.
|
|
36
|
-
"@hyper.authio/server": "0.
|
|
35
|
+
"@hyper.authio/client": "0.11.1",
|
|
36
|
+
"@hyper.authio/server": "0.11.1"
|
|
37
37
|
},
|
|
38
38
|
"keywords": [
|
|
39
39
|
"authio",
|
|
@@ -48,6 +48,9 @@
|
|
|
48
48
|
"url": "git+https://github.com/LeonardoFerreira1209/authio-node.git",
|
|
49
49
|
"directory": "packages/express"
|
|
50
50
|
},
|
|
51
|
+
"bugs": {
|
|
52
|
+
"url": "https://authio.hyperio.tech/docs/account/support"
|
|
53
|
+
},
|
|
51
54
|
"publishConfig": {
|
|
52
55
|
"access": "public"
|
|
53
56
|
},
|