@janssenproject/cedarling_wasm 0.0.369-nodejs → 0.0.370-nodejs

package/README.md

@@ -104,8 +104,11 @@ export class Cedarling {
    */
   static new_from_map(config: Map<any, any>): Promise<Cedarling>;
   /**
-   * Authorize request for unsigned principals.
-   * makes authorization decision based on the [`RequestUnsigned`]
+   * Authorize an unsigned request carrying an optional single principal.
+   * Makes an authorization decision based on the [`RequestUnsigned`].
+   * When `principal` is omitted / `null` the core uses Cedar partial evaluation;
+   * residual-dependent requests fail closed with `Decision::Deny` and surface
+   * residual policy ids in `response.diagnostics.reason`.
    */
   authorize_unsigned(request: any): Promise<AuthorizeResult>;
   /**
@@ -261,13 +264,9 @@ export class AuthorizeResult {
    */
   json_string(): string;
   /**
-   * Get authorization responses for all principals
+   * Cedar authorization response for the request.
    */
-  principals: Record<string, AuthorizeResultResponse>;
-  /**
-   * Get result for a specific principal
-   */
-  principal(principal: string): AuthorizeResultResponse | undefined;
+  response: AuthorizeResultResponse;
   /**
    * Result of authorization
    * true means `ALLOW`

package/cedarling_wasm.d.ts

@@ -20,7 +20,6 @@ export class AuthorizeResult {
      * Convert `AuthorizeResult` to json string value
      */
     json_string(): string;
-    principal(principal: string): AuthorizeResultResponse | undefined;
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -33,6 +32,10 @@ export class AuthorizeResult {
      * Request ID of the authorization request
      */
     request_id: string;
+    /**
+     * Cedar authorization response for the request.
+     */
+    response: AuthorizeResultResponse;
 }
 
 /**
@@ -66,8 +69,13 @@ export class Cedarling {
      */
     authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
     /**
-     * Authorize request for unsigned principals.
-     * makes authorization decision based on the [`RequestUnsigned`]
+     * Authorize an unsigned request carrying an optional single principal.
+     * Makes an authorization decision based on the [`RequestUnsigned`].
+     *
+     * When `principal` is omitted / `null` on the JS side the core uses Cedar
+     * partial evaluation; residual-dependent requests fail closed with
+     * `Decision::Deny` and surface residual policy ids in
+     * `response.diagnostics.reason`.
      */
     authorize_unsigned(request: any): Promise<AuthorizeResult>;
     /**

package/cedarling_wasm.js

@@ -38,16 +38,6 @@ class AuthorizeResult {
             wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
         }
     }
-    /**
-     * @param {string} principal
-     * @returns {AuthorizeResultResponse | undefined}
-     */
-    principal(principal) {
-        const ptr0 = passStringToWasm0(principal, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.authorizeresult_principal(this.__wbg_ptr, ptr0, len0);
-        return ret === 0 ? undefined : AuthorizeResultResponse.__wrap(ret);
-    }
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -76,6 +66,14 @@ class AuthorizeResult {
             wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
         }
     }
+    /**
+     * Cedar authorization response for the request.
+     * @returns {AuthorizeResultResponse}
+     */
+    get response() {
+        const ret = wasm.__wbg_get_authorizeresult_response(this.__wbg_ptr);
+        return AuthorizeResultResponse.__wrap(ret);
+    }
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -96,6 +94,15 @@ class AuthorizeResult {
         const len0 = WASM_VECTOR_LEN;
         wasm.__wbg_set_authorizeresult_request_id(this.__wbg_ptr, ptr0, len0);
     }
+    /**
+     * Cedar authorization response for the request.
+     * @param {AuthorizeResultResponse} arg0
+     */
+    set response(arg0) {
+        _assertClass(arg0, AuthorizeResultResponse);
+        var ptr0 = arg0.__destroy_into_raw();
+        wasm.__wbg_set_authorizeresult_response(this.__wbg_ptr, ptr0);
+    }
 }
 if (Symbol.dispose) AuthorizeResult.prototype[Symbol.dispose] = AuthorizeResult.prototype.free;
 exports.AuthorizeResult = AuthorizeResult;
@@ -174,8 +181,13 @@ class Cedarling {
         return ret;
     }
     /**
-     * Authorize request for unsigned principals.
-     * makes authorization decision based on the [`RequestUnsigned`]
+     * Authorize an unsigned request carrying an optional single principal.
+     * Makes an authorization decision based on the [`RequestUnsigned`].
+     *
+     * When `principal` is omitted / `null` on the JS side the core uses Cedar
+     * partial evaluation; residual-dependent requests fail closed with
+     * `Decision::Deny` and surface residual policy ids in
+     * `response.diagnostics.reason`.
      * @param {any} request
      * @returns {Promise<AuthorizeResult>}
      */
@@ -1890,22 +1902,22 @@ function __wbg_get_imports() {
             console.warn(...arg0);
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2231, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2202, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h10797b50422db1d9);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 656, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 631, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hc1f7fa9b168b3277);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 611, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 587, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 772, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 748, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1de102d8396d84e7);
             return ret;
         },
@@ -1950,8 +1962,8 @@ function __wbg_get_imports() {
     };
 }
 
-function wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb(arg0, arg1) {
-    wasm.wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb(arg0, arg1);
+function wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66(arg0, arg1) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66(arg0, arg1);
 }
 
 function wasm_bindgen__convert__closures_____invoke__h1de102d8396d84e7(arg0, arg1) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@janssenproject/cedarling_wasm",
   "description": "The Cedarling is a performant local authorization service that runs the Rust Cedar Engine",
-  "version": "0.0.369-nodejs",
+  "version": "0.0.370-nodejs",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",