@janssenproject/cedarling_wasm 1.8.0-nodejs → 1.9.0

package/README.md

@@ -37,7 +37,7 @@ To run example using `index.html` you need execute following steps:
 1. Build wasm cedarling.
 2. Run webserver using `python3 -m http.server` or any other.
 3. Visit example app [localhost](http://localhost:8000/), on this app you will get log in browser console.
-    - Also you can try use cedarling with web app using [cedarling_app](http://localhost:8000/cedarling_app.html), using custom bootstrap properties and request.
+   - Also you can try use cedarling with web app using [cedarling_app](http://localhost:8000/cedarling_app.html), using custom bootstrap properties and request.
 
 ## WASM Usage
 
@@ -46,17 +46,17 @@ After building WASM bindings in folder `pkg` you can find where you can find `ce
 In `index.html` described simple usage of `cedarling wasm` API:
 
 ```js
-        import { BOOTSTRAP_CONFIG, REQUEST } from "/example_data.js" // Import js objects: bootstrap config and request
-        import initWasm, { init } from "/pkg/cedarling_wasm.js";
+import { BOOTSTRAP_CONFIG, REQUEST } from "/example_data.js"; // Import js objects: bootstrap config and request
+import initWasm, { init } from "/pkg/cedarling_wasm.js";
 
-        async function main() {
-            await initWasm(); // Initialize the WebAssembly module
+async function main() {
+  await initWasm(); // Initialize the WebAssembly module
 
-            let instance = await init(BOOTSTRAP_CONFIG);
-            let result = await instance.authorize(REQUEST);
-            console.log("result:", result);
-        }
-        main().catch(console.error);
+  let instance = await init(BOOTSTRAP_CONFIG);
+  let result = await instance.authorize(REQUEST);
+  console.log("result:", result);
+}
+main().catch(console.error);
 ```
 
 Before using any function from library you need initialize WASM runtime by calling `initWasm` function.
@@ -181,12 +181,12 @@ export class Diagnostics {
    *
    * The ids should be treated as unordered,
    */
-  readonly reason: (string)[];
+  readonly reason: string[];
   /**
    * Errors that occurred during authorization. The errors should be
    * treated as unordered, since policies may be evaluated in any order.
    */
-  readonly errors: (PolicyEvaluationError)[];
+  readonly errors: PolicyEvaluationError[];
 }
 
 /**
@@ -206,3 +206,34 @@ export class PolicyEvaluationError {
   readonly error: string;
 }
 ```
+
+## Configuration
+
+### ID Token Trust Mode
+
+The `CEDARLING_ID_TOKEN_TRUST_MODE` property controls how ID tokens are validated:
+
+- **`strict`** (default): Enforces strict validation rules
+  - ID token `aud` must match access token `client_id`
+  - If userinfo token is present, its `sub` must match the ID token `sub`
+- **`never`**: Disables ID token validation (useful for testing)
+- **`always`**: Always validates ID tokens when present
+- **`ifpresent`**: Validates ID tokens only if they are provided
+
+### Testing Configuration
+
+For testing scenarios, you may want to disable JWT validation. You can configure this in your bootstrap configuration:
+
+```javascript
+const BOOTSTRAP_CONFIG = {
+  CEDARLING_JWT_SIG_VALIDATION: "disabled",
+  CEDARLING_JWT_STATUS_VALIDATION: "disabled",
+  CEDARLING_ID_TOKEN_TRUST_MODE: "never",
+};
+```
+
+For complete configuration documentation, see [cedarling-properties.md](../../../docs/cedarling/cedarling-properties.md).
+
+```
+
+```

package/cedarling_wasm.d.ts

@@ -169,3 +169,80 @@ export class PolicyEvaluationError {
    */
   readonly error: string;
 }
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+  readonly memory: WebAssembly.Memory;
+  readonly __wbg_cedarling_free: (a: number, b: number) => void;
+  readonly init: (a: any) => any;
+  readonly cedarling_new: (a: any) => any;
+  readonly cedarling_new_from_map: (a: any) => any;
+  readonly cedarling_authorize: (a: number, b: any) => any;
+  readonly cedarling_authorize_unsigned: (a: number, b: any) => any;
+  readonly cedarling_pop_logs: (a: number) => [number, number, number];
+  readonly cedarling_get_log_by_id: (a: number, b: number, c: number) => [number, number, number];
+  readonly cedarling_get_log_ids: (a: number) => any;
+  readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number) => [number, number, number, number];
+  readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number) => [number, number, number, number];
+  readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
+  readonly cedarling_shut_down: (a: number) => any;
+  readonly __wbg_authorizeresult_free: (a: number, b: number) => void;
+  readonly __wbg_get_authorizeresult_workload: (a: number) => number;
+  readonly __wbg_set_authorizeresult_workload: (a: number, b: number) => void;
+  readonly __wbg_get_authorizeresult_person: (a: number) => number;
+  readonly __wbg_set_authorizeresult_person: (a: number, b: number) => void;
+  readonly __wbg_get_authorizeresult_decision: (a: number) => number;
+  readonly __wbg_set_authorizeresult_decision: (a: number, b: number) => void;
+  readonly __wbg_get_authorizeresult_request_id: (a: number) => [number, number];
+  readonly __wbg_set_authorizeresult_request_id: (a: number, b: number, c: number) => void;
+  readonly authorizeresult_json_string: (a: number) => [number, number];
+  readonly authorizeresult_principal: (a: number, b: number, c: number) => number;
+  readonly __wbg_authorizeresultresponse_free: (a: number, b: number) => void;
+  readonly authorizeresultresponse_decision: (a: number) => number;
+  readonly authorizeresultresponse_diagnostics: (a: number) => number;
+  readonly __wbg_diagnostics_free: (a: number, b: number) => void;
+  readonly diagnostics_reason: (a: number) => [number, number];
+  readonly diagnostics_errors: (a: number) => [number, number];
+  readonly __wbg_policyevaluationerror_free: (a: number, b: number) => void;
+  readonly policyevaluationerror_id: (a: number) => [number, number];
+  readonly policyevaluationerror_error: (a: number) => [number, number];
+  readonly __wbg_jsjsonlogic_free: (a: number, b: number) => void;
+  readonly jsjsonlogic_new: () => number;
+  readonly jsjsonlogic_apply: (a: number, b: any, c: any) => [number, number, number];
+  readonly ring_core_0_17_14__bn_mul_mont: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+  readonly __wbindgen_malloc: (a: number, b: number) => number;
+  readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+  readonly __wbindgen_exn_store: (a: number) => void;
+  readonly __externref_table_alloc: () => number;
+  readonly __wbindgen_export_4: WebAssembly.Table;
+  readonly __wbindgen_export_5: WebAssembly.Table;
+  readonly __externref_table_dealloc: (a: number) => void;
+  readonly __externref_drop_slice: (a: number, b: number) => void;
+  readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+  readonly _dyn_core__ops__function__FnMut_____Output___R_as_wasm_bindgen__closure__WasmClosure___describe__invoke__h8e11c17984e20636: (a: number, b: number) => void;
+  readonly closure539_externref_shim: (a: number, b: number, c: any) => void;
+  readonly closure1819_externref_shim: (a: number, b: number, c: any, d: any) => void;
+  readonly __wbindgen_start: () => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+/**
+* Instantiates the given `module`, which can either be bytes or
+* a precompiled `WebAssembly.Module`.
+*
+* @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+*
+* @returns {InitOutput}
+*/
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+* If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+* for everything else, calls `WebAssembly.instantiate` directly.
+*
+* @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+*
+* @returns {Promise<InitOutput>}
+*/
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;