@marktiderman/genesis-connect 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +40 -2
package/package.json
CHANGED
|
@@ -1,10 +1,22 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@marktiderman/genesis-connect",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.3",
|
|
4
4
|
"private": false,
|
|
5
5
|
"type": "module",
|
|
6
6
|
"sideEffects": false,
|
|
7
7
|
"description": "Connect an outside account, server side: encrypted secrets with key versioning (AES-256-GCM, HKDF per purpose, a keyring with rotation) and an OAuth connector kit (authorization code with PKCE, a signed state, the verifier in a cookie, a pinned callback origin) on Web Request and Response, with Google built in. fetch and WebCrypto only, no dependencies: Node 20+, edge and Workers. Part of the Genesis framework.",
|
|
8
|
+
"keywords": [
|
|
9
|
+
"genesis",
|
|
10
|
+
"genesis-framework",
|
|
11
|
+
"oauth",
|
|
12
|
+
"integrations",
|
|
13
|
+
"secrets",
|
|
14
|
+
"encryption"
|
|
15
|
+
],
|
|
16
|
+
"homepage": "https://github.com/marktiderman/genesis/tree/main/packages/connect#readme",
|
|
17
|
+
"bugs": {
|
|
18
|
+
"url": "https://github.com/marktiderman/genesis/issues"
|
|
19
|
+
},
|
|
8
20
|
"repository": {
|
|
9
21
|
"type": "git",
|
|
10
22
|
"url": "git+https://github.com/marktiderman/genesis.git",
|
|
@@ -52,7 +64,33 @@
|
|
|
52
64
|
"@types/node": "^22",
|
|
53
65
|
"tsup": "^8.3.0",
|
|
54
66
|
"typescript": "~6.0.3",
|
|
55
|
-
"vitest": "^
|
|
67
|
+
"vitest": "^5.0.5"
|
|
68
|
+
},
|
|
69
|
+
"genesis": {
|
|
70
|
+
"layer": "primitive",
|
|
71
|
+
"group": "data",
|
|
72
|
+
"owner": "@marktiderman",
|
|
73
|
+
"doctor": {
|
|
74
|
+
"prefer": [
|
|
75
|
+
{
|
|
76
|
+
"id": "secrets-use-connect",
|
|
77
|
+
"need": "storing an outside account's secrets or OAuth",
|
|
78
|
+
"level": "warn",
|
|
79
|
+
"forbid": {
|
|
80
|
+
"imports": [
|
|
81
|
+
"crypto-js",
|
|
82
|
+
"simple-oauth2",
|
|
83
|
+
"client-oauth2"
|
|
84
|
+
],
|
|
85
|
+
"pattern": "\\bcreateCipheriv\\s*\\("
|
|
86
|
+
},
|
|
87
|
+
"use": "the keyring (sealWithKey, openWithKey) and createConnector",
|
|
88
|
+
"import": "@marktiderman/genesis-connect",
|
|
89
|
+
"docs": "https://github.com/marktiderman/genesis/blob/main/packages/connect/README.md",
|
|
90
|
+
"why": "Secrets need versioned keys, per-purpose derivation and rotation, and OAuth needs PKCE and a signed state; hand-rolled crypto gets one of them wrong."
|
|
91
|
+
}
|
|
92
|
+
]
|
|
93
|
+
}
|
|
56
94
|
},
|
|
57
95
|
"scripts": {
|
|
58
96
|
"build": "tsup && node ../../scripts/check-exports-resolve.mjs",
|