@idpartners/client-attestation-sdk 1.0.0 → 1.0.1

package/dist/index.d.ts

@@ -21,6 +21,6 @@ export type { AttesterMetadata, AttesterProfile, AttesterTransport, MintResult }
 export type { TransportFailure } from "./errors.js";
 export { NOOP_LOGGER } from "./logging.js";
 export type { Logger, LogAttributes, LogLevel } from "./logging.js";
-export declare const VERSION = "1.0.0";
+export declare const VERSION = "1.0.1";
 /** draft-ietf-oauth-attestation-based-client-auth revision this SDK implements. */
 export declare const DRAFT_REVISION = "10";

package/dist/index.js

@@ -15,6 +15,6 @@ export { EvidenceNotFound, FileTokenSvidSource, GoogleMetadataSvidSource, autoDe
 export { ClientAttestation, ClientAttestationError, TransportError, DEFAULT_EXPIRY_SKEW_SECONDS, } from "./token-source.js";
 export { MintRequest, PingFederateProfile } from "./attester.js";
 export { NOOP_LOGGER } from "./logging.js";
-export const VERSION = "1.0.0";
+export const VERSION = "1.0.1";
 /** draft-ietf-oauth-attestation-based-client-auth revision this SDK implements. */
 export const DRAFT_REVISION = "10";

package/dist/token-source.d.ts

@@ -134,6 +134,7 @@ export declare class ClientAttestation {
      * as global `fetch`. For a DPoP-bound token it adds a fresh proof and, when the resource answers with
      * a `use_dpop_nonce` challenge and a `DPoP-Nonce`, resends ONCE with a proof carrying that nonce —
      * unless the body is a one-shot stream, which cannot be resent (the challenge response is returned).
+     * Redirects are returned without following them, even if the input or init requests redirect following.
      */
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
     /**

package/dist/token-source.js

@@ -140,6 +140,7 @@ export class ClientAttestation {
      * as global `fetch`. For a DPoP-bound token it adds a fresh proof and, when the resource answers with
      * a `use_dpop_nonce` challenge and a `DPoP-Nonce`, resends ONCE with a proof carrying that nonce —
      * unless the body is a one-shot stream, which cannot be resent (the challenge response is returned).
+     * Redirects are returned without following them, even if the input or init requests redirect following.
      */
     async fetch(input, init = {}) {
         const isRequest = typeof Request !== "undefined" && input instanceof Request;
@@ -154,7 +155,7 @@ export class ClientAttestation {
             dpopBound = DPOP_HEADER in auth;
             for (const [name, value] of Object.entries(auth))
                 headers.set(name, value);
-            return fetch(nextInput(), { ...init, headers });
+            return fetch(nextInput(), { ...init, headers, redirect: "manual" });
         };
         const first = await send();
         if (!dpopBound)

package/dist/validator/index.d.ts

@@ -16,4 +16,4 @@ export type { ValidationError } from "./errors.js";
 export * as errors from "./errors.js";
 export { ProtectedResource, bearerToken } from "./resource.js";
 export type { ProtectedResourceMetadata, AuthDecision } from "./resource.js";
-export declare const VALIDATOR_VERSION = "1.0.0";
+export declare const VALIDATOR_VERSION = "1.0.1";

package/dist/validator/index.js

@@ -9,4 +9,4 @@ export { AccessTokenValidator } from "./validator.js";
 export { DEFAULT_ALGORITHMS, DEFAULT_TOKEN_TYPES } from "./config.js";
 export * as errors from "./errors.js";
 export { ProtectedResource, bearerToken } from "./resource.js";
-export const VALIDATOR_VERSION = "1.0.0";
+export const VALIDATOR_VERSION = "1.0.1";

package/dist/validator/resource.d.ts

@@ -1,4 +1,4 @@
-import type { ValidationResult } from "./result.js";
+import { type ValidationResult } from "./result.js";
 import type { AccessTokenValidator } from "./validator.js";
 /** Extract the token from an `Authorization: Bearer <token>` header value, or null. */
 export declare function bearerToken(authorizationHeader?: string | null): string | null;

package/dist/validator/resource.js

@@ -8,6 +8,7 @@
  * a request guard that binds the token audience to this resource (RFC 8707). Protocol-neutral — not MCP-only.
  */
 import * as errors from "./errors.js";
+import { failure } from "./result.js";
 const WELL_KNOWN = "/.well-known/oauth-protected-resource";
 /** Extract the token from an `Authorization: Bearer <token>` header value, or null. */
 export function bearerToken(authorizationHeader) {
@@ -68,7 +69,13 @@ export class ProtectedResource {
         if (token == null) {
             return { authorized: false, status: 401, wwwAuthenticate: this.challenge(), errorDescription: "authentication required" };
         }
-        const result = await this.#validator.validate(token, requiredScopes);
+        let result = await this.#validator.validate(token, requiredScopes);
+        if (result.valid && !result.audience.includes(this.resource)) {
+            result = failure(errors.INVALID_AUDIENCE, "token audience is not this resource");
+        }
+        if (result.valid && result.claims.cnf != null) {
+            result = failure(errors.INVALID_TOKEN, "sender-constrained token requires proof verification");
+        }
         if (result.valid) {
             return { authorized: true, result, status: 200 };
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@idpartners/client-attestation-sdk",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Client-side builder SDK for OAuth Attestation-Based Client Authentication",
   "type": "module",
   "main": "dist/index.js",