@mcp-abap-adt/auth-broker 5.0.4 → 5.0.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -9,6 +9,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
9
9
 
10
10
  Thank you to all contributors! See [CONTRIBUTORS.md](../../CONTRIBUTORS.md) for the complete list.
11
11
 
12
+ ## [5.0.5] - 2026-10-12
13
+
14
+ The library's code and runtime dependencies are the same as 5.0.4. What changed is the
15
+ docs, the README's connection note included, and the tests.
16
+
17
+ ### Changed
18
+ - The tests and live checks run on `@mcp-abap-adt/connection` 15.0.0 (dev dependency
19
+ `^15.0.0`, on `@mcp-abap-adt/interfaces-adt-connection` 2.0.0, one copy). Their
20
+ end-to-end suite is renamed `adtConnector.test.ts`.
21
+ - The docs name `connection` 14 or 15 as the connector `getProvider`'s provider is for.
22
+ The README says why a consumer that also uses `adt-clients` should take 15.
23
+
12
24
  ## [5.0.4] - 2026-10-12
13
25
 
14
26
  The first published release after 5.0.1. The code is the same as 5.0.2 and 5.0.3, which were
package/README.md CHANGED
@@ -4,7 +4,7 @@
4
4
  A per-destination credential broker for SAP BTP and ABAP systems. For a destination — a name,
5
5
  such as `TRIAL` — `getProvider` builds the `IAuthProvider` the destination states (basic, SNC, a
6
6
  UAA, OIDC or SAML grant, or a credential handed over) from the *means* in the service key store
7
- and the *secret* in the session store, ready for a `@mcp-abap-adt/connection` 14 connector, and
7
+ and the *secret* in the session store, ready for a `@mcp-abap-adt/connection` 14 or 15 connector, and
8
8
  stores back every token or set of SAML session cookies that provider obtains or renews. The
9
9
  token API (`getToken`, `refreshToken`, `createTokenRefresher`) serves whoever wants a token and
10
10
  nothing else. It decides nothing about tokens itself: whether the cached token is still good,
@@ -43,7 +43,7 @@ same repository. This package has no `bin`.
43
43
  npm install @mcp-abap-adt/auth-broker @mcp-abap-adt/auth-providers @mcp-abap-adt/auth-errors @mcp-abap-adt/auth-stores
44
44
  ```
45
45
 
46
- 5.0.4 depends on `@mcp-abap-adt/auth-providers` `^6.0.0`, `@mcp-abap-adt/auth-errors`
46
+ 5.0.5 depends on `@mcp-abap-adt/auth-providers` `^6.0.0`, `@mcp-abap-adt/auth-errors`
47
47
  `^2.2.0`, `@mcp-abap-adt/interfaces-auth` `^7.5.0`, `@mcp-abap-adt/interfaces-auth-sap`
48
48
  `^3.3.0`, `@mcp-abap-adt/interfaces-auth-broker` `^1.3.0` and
49
49
  `@mcp-abap-adt/interfaces-utils` `^1.1.0`. Declare `auth-providers` yourself — the renewal
@@ -100,7 +100,7 @@ const provider = await broker.getProvider('TRIAL', { signal: session.signal });
100
100
  ```
101
101
 
102
102
  `getProvider(destination)` returns the `IAuthProvider` (from `@mcp-abap-adt/interfaces-auth`
103
- 7) that a `@mcp-abap-adt/connection` 14 connector takes as it is. The broker reads two stores,
103
+ 7) that a `@mcp-abap-adt/connection` 14 or 15 connector takes as it is. The broker reads two stores,
104
104
  each for one role:
105
105
 
106
106
  - **the means** — `authType`, `grantType`, basic's user and password, the SNC, OIDC and SAML
@@ -842,12 +842,15 @@ const current = await tokenRefresher.getToken();
842
842
  const renewed = await tokenRefresher.refreshToken();
843
843
  ```
844
844
 
845
- A `@mcp-abap-adt/connection` 14 connector takes an `IAuthProvider` instead: give it `await
845
+ A `@mcp-abap-adt/connection` 14 or 15 connector takes an `IAuthProvider` instead: give it `await
846
846
  broker.getProvider('TRIAL', { signal })`.
847
847
 
848
848
  Use `@mcp-abap-adt/connection` 14.1.0 or later. From 14.1.0 its `disconnect()` sends the
849
849
  session's logoff. An earlier 14.x left each closed connection's SAP session open until the
850
850
  server's own timeout, so a process that connects again and again collects sessions.
851
+ Connection 15 is built on `@mcp-abap-adt/interfaces-adt-connection` 2, as `adt-clients` is.
852
+ If your consumer uses both, choose 15: with 14 it installs two copies of that contract.
853
+ The broker hands either one the same `IAuthProvider`.
851
854
 
852
855
  ## Errors
853
856
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mcp-abap-adt/auth-broker",
3
- "version": "5.0.4",
3
+ "version": "5.0.5",
4
4
  "description": "Per-destination credential broker for SAP BTP and ABAP: the IAuthProvider a destination states, built from its key store and session store, with every secret it obtains stored back; and a token API",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
66
66
  "devDependencies": {
67
67
  "@mcp-abap-adt/auth-mocks": "^0.4.0",
68
68
  "@mcp-abap-adt/auth-stores": "^5.0.0",
69
- "@mcp-abap-adt/connection": "^14.1.0",
69
+ "@mcp-abap-adt/connection": "^15.0.0",
70
70
  "@mcp-abap-adt/logger": "^0.4.0",
71
71
  "@types/js-yaml": "^4.0.9",
72
72
  "js-yaml": "^4.1.1",