@janssenproject/cedarling_wasm 0.0.404-nodejs → 0.0.405-nodejs

package/README.md

@@ -53,7 +53,9 @@ async function main() {
   await initWasm(); // Initialize the WebAssembly module
 
   let instance = await init(BOOTSTRAP_CONFIG);
-  let result = await instance.authorize_unsigned(REQUEST_UNSIGNED);
+  // authorize calls take the request as a JSON string: it crosses the
+  // JS/WASM boundary as one string copy parsed by serde_json
+  let result = await instance.authorize_unsigned(JSON.stringify(REQUEST_UNSIGNED));
   console.log("result:", result);
 }
 main().catch(console.error);
@@ -110,12 +112,13 @@ export class Cedarling {
    * residual-dependent requests fail closed with `Decision::Deny` and surface
    * residual policy ids in `response.diagnostics.reason`.
    */
-  authorize_unsigned(request: any): Promise<AuthorizeResult>;
+  authorize_unsigned(request: string): Promise<AuthorizeResult>;
   /**
    * Authorize multi-issuer request.
    * Makes authorization decision based on multiple JWT tokens from different issuers
+   * The request is passed as a JSON string.
    */
-  authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
+  authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
   /**
    * Get logs and remove them from the storage.
    * Returns `Array` of `Map`
@@ -418,6 +421,10 @@ Cedarling supports multiple ways to load policy stores. **In WASM environments,
 // Option 1: Fetch policy store from URL (simple)
 const BOOTSTRAP_CONFIG = {
   CEDARLING_POLICY_STORE_URI: "https://example.com/policy-store.cjar",
+  // Optional: re-fetch every 60s and atomically swap on change.
+  // Default is 0 (load-once-at-startup). See "Refreshing the policy store"
+  // in docs/cedarling/reference/cedarling-properties.md for details.
+  CEDARLING_POLICY_STORE_REFRESH_INTERVAL: 60,
   // ... other config
 };
 const cedarling = await init(BOOTSTRAP_CONFIG);

package/cedarling_wasm.d.ts

@@ -65,9 +65,19 @@ export class Cedarling {
     [Symbol.dispose](): void;
     /**
      * Authorize multi-issuer request.
-     * Makes authorization decision based on multiple JWT tokens from different issuers
+     * Makes authorization decision based on multiple JWT tokens from different issuers.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`AuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer(JSON.stringify(request));
+     * ```
      */
-    authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
+    authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -76,8 +86,18 @@ export class Cedarling {
      * partial evaluation; residual-dependent requests fail closed with
      * `Decision::Deny` and surface residual policy ids in
      * `response.diagnostics.reason`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`RequestUnsigned`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned(JSON.stringify(request));
+     * ```
      */
-    authorize_unsigned(request: any): Promise<AuthorizeResult>;
+    authorize_unsigned(request: string): Promise<AuthorizeResult>;
     /**
      * Clear all entries from the data store.
      *