@kwirthmagnify/kwirth-common-back 0.5.17 → 0.5.18

package/dist/IIdpConnector.d.ts

@@ -25,6 +25,7 @@ export interface IIdpCallbackContext {
     code: string;
     codeVerifier: string;
     redirectUri: string;
+    params?: Record<string, string>;
 }
 export interface IIdpConnector {
     connectorId: string;

package/dist/oidc.js

@@ -46,7 +46,13 @@ async function oidcBuildAuthorizationUrl(config, ctx, defaultIssuer) {
 }
 async function oidcHandleCallback(config, ctx, defaultIssuer) {
     const client = await makeClient(config, ctx.redirectUri, defaultIssuer);
-    const tokenSet = await client.callback(ctx.redirectUri, { code: ctx.code }, { code_verifier: ctx.codeVerifier });
+    // pasamos los params crudos del callback (incluyen iss para RFC 9207 y state); el state ya lo
+    // valida el core, pero openid-client exige checks.state si el param state viene presente.
+    const params = ctx.params ?? { code: ctx.code };
+    const checks = { code_verifier: ctx.codeVerifier };
+    if (params.state !== undefined)
+        checks.state = params.state;
+    const tokenSet = await client.callback(ctx.redirectUri, params, checks);
     const claims = tokenSet.claims();
     return {
         email: String(claims.email ?? ''),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kwirthmagnify/kwirth-common-back",
-  "version": "0.5.17",
+  "version": "0.5.18",
   "description": "Backend interfaces for building Kwirth provider and channel plugins",
   "scripts": {
     "build": "tsc"