@hyper.authio/express 0.9.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -1
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -45,7 +45,10 @@ app.post("/api/payouts", requireAuthio(requirePermission("payouts", "create"), a
|
|
|
45
45
|
|
|
46
46
|
- `authioBearer(verifierOrOptions, { optional?, problemDetails?, passErrors? })` validates the token and puts
|
|
47
47
|
`{ user, token }` on `req.authio`; it answers `401` with `WWW-Authenticate`. With `optional`, a request without a
|
|
48
|
-
token goes through unauthenticated.
|
|
48
|
+
token goes through unauthenticated. It takes the verifier's options (`introspection`, `client`…): when the client's
|
|
49
|
+
access token format is `Lightweight`, use `introspection: "activeCheck"` (or `"introspectionOnly"`), so the guards
|
|
50
|
+
see the roles and permissions only the introspection answer carries
|
|
51
|
+
([Lightweight and reference access tokens](../server/README.md#lightweight-and-reference-access-tokens)).
|
|
49
52
|
- `requireScope`, `requireRole`, `requirePermission`, `requireGroup`, `requireClaim`, `requireOrganization`,
|
|
50
53
|
`requireAuthenticationLevel`, `requireAuthenticationMethod`, `requireRecentAuthentication`, `requireCallerKind` and
|
|
51
54
|
`requireClient` answer `403`, with `insufficient_scope` in `WWW-Authenticate` when a scope is missing. A refusal that
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@hyper.authio/express",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.10.1",
|
|
4
4
|
"description": "Express middleware for Authio: bearer validation, scope/role/permission/group/claim/organization/acr/amr/client guards, and signed webhook routes.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -32,8 +32,8 @@
|
|
|
32
32
|
"build": "tsup"
|
|
33
33
|
},
|
|
34
34
|
"dependencies": {
|
|
35
|
-
"@hyper.authio/client": "0.
|
|
36
|
-
"@hyper.authio/server": "0.
|
|
35
|
+
"@hyper.authio/client": "0.10.1",
|
|
36
|
+
"@hyper.authio/server": "0.10.1"
|
|
37
37
|
},
|
|
38
38
|
"keywords": [
|
|
39
39
|
"authio",
|