@idp.global/interfaces 1.1.0 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/changelog.md CHANGED
@@ -1,7 +1,12 @@
1
1
  # Changelog
2
2
 
3
- ## Pending
3
+ ## 2026-06-10 - 1.2.0
4
4
 
5
+ ### Features
6
+
7
+ - add backend token to JWT blocklist request (request/jwt)
8
+ - Added optional backendToken support for authenticated GET blocklist retrieval.
9
+ - Documented that backendToken is omitted for PUSH requests to avoid sending the secret to clients.
5
10
 
6
11
  ## 2026-05-19 - 1.1.0
7
12
 
@@ -3,7 +3,7 @@
3
3
  */
4
4
  export const commitinfo = {
5
5
  name: '@idp.global/interfaces',
6
- version: '1.1.0',
6
+ version: '1.2.0',
7
7
  description: 'Shared TypeScript interfaces and TypedRequest contracts for the idp.global ecosystem.'
8
8
  };
9
9
  //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=
@@ -44,6 +44,7 @@ export interface IReq_PushPublicKeyForValidation extends plugins.typedRequestInt
44
44
  *
45
45
  * **For GET (client fires):**
46
46
  * - Fire with empty/undefined `blockedJwtIds` to request the full blocklist
47
+ * - Include `backendToken` to authenticate as a backend service
47
48
  * - Response contains the complete list of blocked JWT IDs
48
49
  * - Use `IdpClient.requests.getJwtIdBlocklist` for this direction
49
50
  *
@@ -55,6 +56,13 @@ export interface IReq_PushPublicKeyForValidation extends plugins.typedRequestInt
55
56
  export interface IReq_PushOrGetJwtIdBlocklist extends plugins.typedRequestInterfaces.implementsTR<plugins.typedRequestInterfaces.ITypedRequest, IReq_PushOrGetJwtIdBlocklist> {
56
57
  method: 'pushOrGetJwtIdBlocklist';
57
58
  request: {
59
+ /**
60
+ * Authenticates the requesting backend service in the GET direction
61
+ * (Client → idp.global). Required by the idp.global handler.
62
+ * Omitted in the PUSH direction (idp.global → Client) so the secret
63
+ * never travels to connected clients.
64
+ */
65
+ backendToken?: string;
58
66
  blockedJwtIds?: string[];
59
67
  };
60
68
  response: {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@idp.global/interfaces",
3
- "version": "1.1.0",
3
+ "version": "1.2.0",
4
4
  "private": false,
5
5
  "description": "Shared TypeScript interfaces and TypedRequest contracts for the idp.global ecosystem.",
6
6
  "exports": {
@@ -14,11 +14,11 @@
14
14
  "@tsclass/tsclass": "^9.5.1"
15
15
  },
16
16
  "devDependencies": {
17
- "@git.zone/tsbuild": "^4.4.1",
18
- "@git.zone/tsdoc": "^2.0.5",
17
+ "@git.zone/tsbuild": "^4.4.2",
18
+ "@git.zone/tsdoc": "^2.0.6",
19
19
  "@git.zone/tsrun": "^2.0.4",
20
20
  "@git.zone/tstest": "^3.6.6",
21
- "@types/node": "^25.9.0"
21
+ "@types/node": "^25.9.2"
22
22
  },
23
23
  "files": [
24
24
  "ts/**/*",
@@ -3,6 +3,6 @@
3
3
  */
4
4
  export const commitinfo = {
5
5
  name: '@idp.global/interfaces',
6
- version: '1.1.0',
6
+ version: '1.2.0',
7
7
  description: 'Shared TypeScript interfaces and TypedRequest contracts for the idp.global ecosystem.'
8
8
  }
package/ts/request/jwt.ts CHANGED
@@ -56,6 +56,7 @@ export interface IReq_PushPublicKeyForValidation
56
56
  *
57
57
  * **For GET (client fires):**
58
58
  * - Fire with empty/undefined `blockedJwtIds` to request the full blocklist
59
+ * - Include `backendToken` to authenticate as a backend service
59
60
  * - Response contains the complete list of blocked JWT IDs
60
61
  * - Use `IdpClient.requests.getJwtIdBlocklist` for this direction
61
62
  *
@@ -71,6 +72,13 @@ export interface IReq_PushOrGetJwtIdBlocklist
71
72
  > {
72
73
  method: 'pushOrGetJwtIdBlocklist';
73
74
  request: {
75
+ /**
76
+ * Authenticates the requesting backend service in the GET direction
77
+ * (Client → idp.global). Required by the idp.global handler.
78
+ * Omitted in the PUSH direction (idp.global → Client) so the secret
79
+ * never travels to connected clients.
80
+ */
81
+ backendToken?: string;
74
82
  blockedJwtIds?: string[];
75
83
  };
76
84
  response: {