@lukoweb/apitogo 0.2.24 → 0.2.26

package/dist/cli/cli.js

@@ -8060,7 +8060,8 @@ function authenticationFor(plan2) {
       // Accounts are made at the identity (its own sign-up page), never at the plans backend.
       native: { enabled: false }
     };
-  return { type: "openid", ...plan2.auth };
+  const { audience: _audience, ...signIn } = plan2.auth ?? {};
+  return { type: "openid", ...signIn };
 }
 var PREVIEW_BANNER_MESSAGE = "Preview mode: sign-in and plans use a stand-in manifest. Run `apitogo deploy` for the real services.";
 function renderWrapper(plan2) {
@@ -9967,7 +9968,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.2.24",
+  version: "0.2.26",
   type: "module",
   sideEffects: [
     "**/*.css",
@@ -10058,6 +10059,7 @@ var package_default = {
     "@fontsource/ibm-plex-sans": "^5.3.0",
     "@fontsource/jetbrains-mono": "^5.3.0",
     "@fontsource/space-grotesk": "^5.3.0",
+    "@graphql-tools/utils": "12.1.0",
     "@graphql-typed-document-node/core": "3.2.0",
     "@hono/node-server": "1.19.11",
     "@lekoarts/rehype-meta-as-attributes": "3.0.3",
@@ -10131,6 +10133,7 @@ var package_default = {
     "javascript-stringify": "2.1.0",
     "json-schema-to-typescript-lite": "15.0.0",
     loglevel: "1.9.2",
+    "lru-cache": "10.4.3",
     "lucide-react": "0.577.0",
     "mdast-util-from-markdown": "2.0.2",
     "mdast-util-mdx": "3.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lukoweb/apitogo",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "type": "module",
   "sideEffects": [
     "**/*.css",
@@ -184,6 +184,7 @@
     "@fontsource/ibm-plex-sans": "^5.3.0",
     "@fontsource/jetbrains-mono": "^5.3.0",
     "@fontsource/space-grotesk": "^5.3.0",
+    "@graphql-tools/utils": "12.1.0",
     "@graphql-typed-document-node/core": "3.2.0",
     "@hono/node-server": "1.19.11",
     "@lekoarts/rehype-meta-as-attributes": "3.0.3",
@@ -257,6 +258,7 @@
     "javascript-stringify": "2.1.0",
     "json-schema-to-typescript-lite": "15.0.0",
     "loglevel": "1.9.2",
+    "lru-cache": "10.4.3",
     "lucide-react": "0.577.0",
     "mdast-util-from-markdown": "2.0.2",
     "mdast-util-mdx": "3.0.0",

package/src/config/v2/wrapper.ts

@@ -321,7 +321,10 @@ function authenticationFor(plan: PortalPlan): Record<string, unknown> {
       // Accounts are made at the identity (its own sign-up page), never at the plans backend.
       native: { enabled: false },
     };
-  return { type: "openid", ...plan.auth };
+  // The audience is for the gateway and the token, not for the sign-in request: the portal would send it as an extra
+  // request parameter and the identity refuses a sign-in request that carries one.
+  const { audience: _audience, ...signIn } = plan.auth ?? {};
+  return { type: "openid", ...signIn };
 }
 
 /** Shown on every page of a preview run, so a stand-in manifest is never mistaken for a deployed portal. */