@mesh-tech/mesh-cli 0.34.2 → 0.34.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/build-info.json
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@mesh-tech/mesh-cli",
|
|
3
|
-
"version": "0.34.
|
|
3
|
+
"version": "0.34.3",
|
|
4
4
|
"description": "CLI for Mesh platform development utilities",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "UNLICENSED",
|
|
@@ -42,7 +42,7 @@
|
|
|
42
42
|
},
|
|
43
43
|
"devDependencies": {
|
|
44
44
|
"@mesh-tech/agent-contracts": "0.2.0",
|
|
45
|
-
"@mesh-tech/tsconfig": "2.
|
|
45
|
+
"@mesh-tech/tsconfig": "2.31.0",
|
|
46
46
|
"@mesh-tech/workflow-viz": "0.3.1",
|
|
47
47
|
"@tanstack/intent": "^0.3.6",
|
|
48
48
|
"@types/node": "^20.0.0",
|
|
@@ -57,6 +57,10 @@ proxy (`auth: { provider: "mesh" }`). The proxy pins its sign-in callback to
|
|
|
57
57
|
that Service's own ingress hostname; a Service that answers for more than one
|
|
58
58
|
hostname (`ingress.extraHostnames`) sets `auth.deriveRedirectUrl: true` so each
|
|
59
59
|
host gets its own callback, and registers a redirect URI per host at the IdP.
|
|
60
|
+
The proxy keeps each session in its cookie, which grows with the user's roles;
|
|
61
|
+
once a user holds enough of them the load balancer rejects every request with a
|
|
62
|
+
`400`. `auth.sessionStore: "redis"` keeps sessions in a small Redis the Service
|
|
63
|
+
creates for itself, so the cookie stays under 1KB.
|
|
60
64
|
|
|
61
65
|
`index.ts` owns the whole access surface, so there is nothing to create by
|
|
62
66
|
hand: `ZitadelAppIdentity` makes the app's Zitadel project + roles,
|