@maroonedsoftware/scim 0.2.23 → 0.3.0

package/dist/projection/attribute.projection.d.ts

@@ -0,0 +1,38 @@
+import { ScimSchema } from '../schemas/schema.types.js';
+/**
+ * Requested attribute projection for a SCIM response, from the `attributes` and
+ * `excludedAttributes` query parameters (RFC 7644 §3.9). The two are mutually
+ * exclusive; when a client sends both, `attributes` wins, being the more
+ * restrictive of the pair.
+ */
+export interface ScimProjection {
+    /** Attribute paths to return, in addition to those whose `returned` is `'always'`. */
+    attributes?: string[];
+    /** Attribute paths to omit. Attributes whose `returned` is `'always'` are never omitted. */
+    excludedAttributes?: string[];
+}
+/**
+ * Project a SCIM resource for the wire.
+ *
+ * Two things happen here, and only the first is optional:
+ *
+ * 1. `attributes` / `excludedAttributes` are applied, per RFC 7644 §3.9.
+ * 2. Attributes the schema declares `returned: 'never'` are stripped
+ *    unconditionally. `password` is the one that matters: it is `writeOnly` and
+ *    `never`, so a repository that round-trips whatever it stored must not be
+ *    able to hand it back to a provisioning client.
+ *
+ * Attributes declared `returned: 'request'` come back only when named in
+ * `attributes`. Keys no schema defines — a repository's own bookkeeping field,
+ * an extension the caller did not declare — are kept unless a projection
+ * excludes them, since the package cannot know they are safe to drop.
+ *
+ * @param resource - The resource to project. Not mutated.
+ * @param schemas  - The resource's schemas: the core one first, then any
+ *   extensions. An extension's attributes are matched under the resource key
+ *   named by its schema `id`.
+ * @param projection - The requested projection; omit for schema rules only.
+ * @returns A new resource object with the projection applied.
+ */
+export declare const projectScimResource: <T extends Record<string, unknown>>(resource: T, schemas: ScimSchema[], projection?: ScimProjection) => T;
+//# sourceMappingURL=attribute.projection.d.ts.map

package/dist/projection/attribute.projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute.projection.d.ts","sourceRoot":"","sources":["../../src/projection/attribute.projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4FAA4F;IAC5F,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAmED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,UAAU,CAAC,EACX,SAAS,UAAU,EAAE,EACrB,aAAY,cAAmB,KAC9B,CASF,CAAC"}

package/dist/projection/index.d.ts

@@ -0,0 +1,2 @@
+export * from './attribute.projection.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/projection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/projection/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/router/scim.router.d.ts

@@ -22,6 +22,15 @@ export interface CreateScimRouterOptions {
      * `serviceProviderService` `filter.maxResults` value, falling back to 200.
      */
     maxResults?: number;
+    /**
+     * Absolute base URL this router is reachable at, e.g.
+     * `https://api.example.com/scim/v2`. When set, `meta.location` and the
+     * `Location` response header are rendered against it, as RFC 7643 §3.1 wants
+     * a resource URI. Leave it unset to keep the previous behaviour of emitting a
+     * root-relative path (`/Users/{id}`), which is wrong for any deployment that
+     * mounts the router under a prefix.
+     */
+    baseUrl?: string;
 }
 /**
  * Build a SCIM 2.0 server router. Mount it inside a Koa app that already has

package/dist/router/scim.router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scim.router.d.ts","sourceRoot":"","sources":["../../src/router/scim.router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAU1F;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,WAAW,EAAE,eAAe,CAAC;IAC7B,gDAAgD;IAChD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,gFAAgF;IAChF,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,0FAA0F;IAC1F,WAAW,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,uBAAuB,KAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAkInG,CAAC"}
+{"version":3,"file":"scim.router.d.ts","sourceRoot":"","sources":["../../src/router/scim.router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAc1F;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,WAAW,EAAE,eAAe,CAAC;IAC7B,gDAAgD;IAChD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,gFAAgF;IAChF,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,0FAA0F;IAC1F,WAAW,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,uBAAuB,KAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,CA6InG,CAAC"}

package/dist/services/scim.group.service.d.ts

@@ -25,7 +25,8 @@ export declare class ScimGroupService {
     list(query: ScimListQuery): Promise<ScimListResult<ScimGroup>>;
     /**
      * Create a new group. Assigns a server-generated `id` and fills `meta`
-     * timestamps.
+     * timestamps. An `id` on the payload is ignored: RFC 7643 §3.1 makes it
+     * readOnly and server-assigned.
      *
      * @throws {ScimError} 400 `invalidValue` when `displayName` is missing.
      * @throws {ScimError} 409 `uniqueness` when `displayName` already exists.

package/dist/services/scim.group.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scim.group.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.group.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKxD;;;;GAIG;AACH,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMzC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAIpE;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA0B7D;;;;;;;OAOG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA2B1E;;;;;;OAMG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAY/D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAKzB"}
+{"version":3,"file":"scim.group.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.group.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKxD;;;;GAIG;AACH,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMzC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAIpE;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA4B7D;;;;;;;OAOG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA2B1E;;;;;;OAMG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAY/D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAKzB"}

package/dist/services/scim.user.service.d.ts

@@ -28,6 +28,9 @@ export declare class ScimUserService {
      * and `meta.lastModified`, and ensures the resource's `schemas` includes the
      * core User URN (and the EnterpriseUser URN when the extension is present).
      *
+     * An `id` on the payload is ignored: RFC 7643 §3.1 makes it readOnly and
+     * server-assigned.
+     *
      * @throws {ScimError} 400 `invalidValue` when `userName` is missing.
      * @throws {ScimError} 409 `uniqueness` when `userName` already exists.
      */

package/dist/services/scim.user.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scim.user.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.user.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMxD;;;;GAIG;AACH,qBACa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMxC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAInE;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA0B3D;;;;;;;;OAQG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2BxE;;;;;;;;;;OAUG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqB9D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAQzB"}
+{"version":3,"file":"scim.user.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.user.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMxD;;;;GAIG;AACH,qBACa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMxC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAInE;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA4B3D;;;;;;;;OAQG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2BxE;;;;;;;;;;OAUG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqB9D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAQzB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maroonedsoftware/scim",
-  "version": "0.2.23",
+  "version": "0.3.0",
   "description": "SCIM 2.0 (RFC 7643/7644) server toolkit for ServerKit — schemas, filter parser, PATCH applier, error envelope, and a Koa router with abstract repositories.",
   "author": {
     "name": "Marooned Software",
@@ -36,11 +36,11 @@
   "dependencies": {
     "injectkit": "^1.7.1",
     "luxon": "^3.7.2",
-    "@maroonedsoftware/authentication": "4.31.0",
+    "@maroonedsoftware/authentication": "4.33.0",
+    "@maroonedsoftware/koa": "3.2.5",
     "@maroonedsoftware/errors": "1.9.1",
-    "@maroonedsoftware/koa": "3.2.3",
-    "@maroonedsoftware/logger": "1.1.9",
-    "@maroonedsoftware/utilities": "1.11.5"
+    "@maroonedsoftware/utilities": "1.11.5",
+    "@maroonedsoftware/logger": "1.1.9"
   },
   "peerDependencies": {
     "@koa/router": "^15.2.0",