@kusinta/iot-schema 0.1.0-beta.10 → 0.1.0-beta.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kusinta/iot-schema",
-  "version": "0.1.0-beta.10",
+  "version": "0.1.0-beta.12",
   "type": "module",
   "license": "MIT",
   "files": ["src"],
@@ -21,6 +21,7 @@
     "./connector":              "./src/kusinta/iot/connector/v1/connector_pb.js",
     "./connector/service":      "./src/kusinta/iot/connector/v1/connector_service_pb.js",
     "./webrtc":                 "./src/kusinta/iot/webrtc/v1/envelope_pb.js",
+    "./webrtc/app-token":       "./src/kusinta/iot/webrtc/v1/app_token_pb.js",
     "./registration":           "./src/kusinta/iot/registration/v1/registration_pb.js",
     "./registration/service":   "./src/kusinta/iot/registration/v1/registration_service_pb.js",
     "./signaling":              "./src/kusinta/iot/signaling/v1/signaling_pb.js",

package/src/kusinta/iot/webrtc/v1/app_token_pb.d.ts

@@ -0,0 +1,85 @@
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
+// @generated from file kusinta/iot/webrtc/v1/app_token.proto (package kusinta.iot.webrtc.v1, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Role } from "../../access/v1/roles_pb.js";
+
+/**
+ * Describes the file kusinta/iot/webrtc/v1/app_token.proto.
+ */
+export declare const file_kusinta_iot_webrtc_v1_app_token: GenFile;
+
+/**
+ * AppTokenClaims is the contract for the payload of the JWT carried in
+ * AppHandshake.jwt. It is the single source of truth shared between
+ * mykusinta-api-server (which mints the token) and the gateway (which validates
+ * it locally against the mykusinta-api-server public key).
+ *
+ * This message is NOT sent on the wire — the wire value stays the signed,
+ * compact JWS string in AppHandshake.jwt. The fields here document the claim
+ * names and types each side must agree on. JWT libraries emit registered
+ * claims (iss/aud/sub) as flat strings and timestamps as NumericDate
+ * (seconds since the Unix epoch), so map to/from your native JWT library
+ * rather than serializing this message directly into the token.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.AppTokenClaims
+ */
+export declare type AppTokenClaims = Message<"kusinta.iot.webrtc.v1.AppTokenClaims"> & {
+  /**
+   * Registered claims (RFC 7519).
+   *
+   * issuer: "mykusinta-api-server"
+   *
+   * @generated from field: string iss = 1;
+   */
+  iss: string;
+
+  /**
+   * audience: the target GatewayId value
+   *
+   * @generated from field: string aud = 2;
+   */
+  aud: string;
+
+  /**
+   * subject: the UserId value
+   *
+   * @generated from field: string sub = 3;
+   */
+  sub: string;
+
+  /**
+   * issued-at  (JWT NumericDate on the wire)
+   *
+   * @generated from field: google.protobuf.Timestamp iat = 4;
+   */
+  iat?: Timestamp | undefined;
+
+  /**
+   * expiry     (JWT NumericDate on the wire)
+   *
+   * @generated from field: google.protobuf.Timestamp exp = 5;
+   */
+  exp?: Timestamp | undefined;
+
+  /**
+   * Custom claims.
+   * Carried in the JWT as the enum NAME string (e.g. "ROLE_PROPERTY_OWNER"),
+   * matching proto3 canonical JSON enum encoding — not the integer value.
+   * This keeps the claim self-describing and aligns with text-typed role
+   * storage in mykusinta-api-server.
+   *
+   * @generated from field: kusinta.iot.access.v1.Role role = 6;
+   */
+  role: Role;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.AppTokenClaims.
+ * Use `create(AppTokenClaimsSchema)` to create a new message.
+ */
+export declare const AppTokenClaimsSchema: GenMessage<AppTokenClaims>;
+

package/src/kusinta/iot/webrtc/v1/app_token_pb.js

@@ -0,0 +1,21 @@
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
+// @generated from file kusinta/iot/webrtc/v1/app_token.proto (package kusinta.iot.webrtc.v1, syntax proto3)
+/* eslint-disable */
+
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_kusinta_iot_access_v1_roles } from "../../access/v1/roles_pb.js";
+
+/**
+ * Describes the file kusinta/iot/webrtc/v1/app_token.proto.
+ */
+export const file_kusinta_iot_webrtc_v1_app_token = /*@__PURE__*/
+  fileDesc("CiVrdXNpbnRhL2lvdC93ZWJydGMvdjEvYXBwX3Rva2VuLnByb3RvEhVrdXNpbnRhLmlvdC53ZWJydGMudjEitAEKDkFwcFRva2VuQ2xhaW1zEgsKA2lzcxgBIAEoCRILCgNhdWQYAiABKAkSCwoDc3ViGAMgASgJEicKA2lhdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASJwoDZXhwGAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIpCgRyb2xlGAYgASgOMhsua3VzaW50YS5pb3QuYWNjZXNzLnYxLlJvbGVCAkgBYgZwcm90bzM", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles]);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.AppTokenClaims.
+ * Use `create(AppTokenClaimsSchema)` to create a new message.
+ */
+export const AppTokenClaimsSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_app_token, 0);
+

package/src/kusinta/iot/webrtc/v1/envelope_pb.d.ts

@@ -64,6 +64,10 @@ export declare const HandshakeRejectedSchema: GenMessage<HandshakeRejected>;
  */
 export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake"> & {
   /**
+   * Signed compact JWS. Its payload claims are documented by AppTokenClaims
+   * in app_token.proto — the shared contract between mykusinta-api-server
+   * (issuer) and the gateway (validator).
+   *
    * @generated from field: string jwt = 1;
    */
   jwt: string;