@naylence/runtime 0.3.18 → 0.3.20

package/dist/browser/index.cjs

@@ -515,12 +515,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 let initialized = false;
 const runtimePlugin = {
@@ -25863,9 +25863,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$z.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$z.error('node_attach_authorization_validation_failed', {
@@ -40279,6 +40285,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/browser/index.mjs

@@ -513,12 +513,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 let initialized = false;
 const runtimePlugin = {
@@ -25861,9 +25861,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$z.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$z.error('node_attach_authorization_validation_failed', {
@@ -40277,6 +40283,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/cjs/naylence/fame/security/auth/oauth2-client-credentials-token-provider.js

@@ -152,5 +152,50 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 exports.OAuth2ClientCredentialsTokenProvider = OAuth2ClientCredentialsTokenProvider;

package/dist/cjs/naylence/fame/security/default-security-manager.js

@@ -692,9 +692,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger.error('node_attach_authorization_validation_failed', {

package/dist/cjs/version.js

@@ -1,10 +1,10 @@
 "use strict";
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 /**
  * The package version, injected at build time.
  * @internal
  */
-exports.VERSION = '0.3.18';
+exports.VERSION = '0.3.20';

package/dist/esm/naylence/fame/security/auth/oauth2-client-credentials-token-provider.js

@@ -149,4 +149,49 @@ export class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }

package/dist/esm/naylence/fame/security/default-security-manager.js

@@ -689,9 +689,15 @@ export class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger.error('node_attach_authorization_validation_failed', {

package/dist/esm/version.js

@@ -1,7 +1,7 @@
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-export const VERSION = '0.3.18';
+export const VERSION = '0.3.20';

package/dist/node/index.cjs

@@ -14,12 +14,12 @@ var fastify = require('fastify');
 var websocketPlugin = require('@fastify/websocket');
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -25750,9 +25750,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$z.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$z.error('node_attach_authorization_validation_failed', {
@@ -40081,6 +40087,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/node/index.mjs

@@ -13,12 +13,12 @@ import fastify from 'fastify';
 import websocketPlugin from '@fastify/websocket';
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -25749,9 +25749,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$z.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$z.error('node_attach_authorization_validation_failed', {
@@ -40080,6 +40086,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/node/node.cjs

@@ -4426,12 +4426,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 let initialized = false;
 const runtimePlugin = {
@@ -26938,9 +26938,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$C.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$C.error('node_attach_authorization_validation_failed', {
@@ -42415,6 +42421,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/node/node.mjs

@@ -4425,12 +4425,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.18
+// Generated from package.json version: 0.3.20
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.18';
+const VERSION = '0.3.20';
 
 let initialized = false;
 const runtimePlugin = {
@@ -26937,9 +26937,15 @@ class DefaultSecurityManager {
                     hasNodeAttachValidation(authorizer)) {
                     try {
                         const validated = await authorizer.validateNodeAttachRequest(_node, envelope.frame, authResult);
-                        if (validated) {
-                            finalAuthResult = validated;
+                        if (validated === undefined) {
+                            logger$C.warning('node_attach_validation_rejected', {
+                                envp_id: envelope.id,
+                                frame_type: envelope.frame.type,
+                                origin_type: context.originType ?? 'unknown',
+                            });
+                            return null;
                         }
+                        finalAuthResult = validated;
                     }
                     catch (error) {
                         logger$C.error('node_attach_authorization_validation_failed', {
@@ -42414,6 +42420,51 @@ class OAuth2ClientCredentialsTokenProvider {
         }
         return DEFAULT_EXPIRY_SECONDS;
     }
+    async getIdentity() {
+        const token = await this.getToken();
+        const tokenValue = token.value;
+        const parts = tokenValue.split('.');
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        try {
+            const payloadSegment = parts[1];
+            // Fix padding for base64url
+            const padding = '='.repeat((4 - (payloadSegment.length % 4)) % 4);
+            const base64 = (payloadSegment + padding)
+                .replace(/-/g, '+')
+                .replace(/_/g, '/');
+            let jsonString;
+            if (typeof Buffer !== 'undefined') {
+                jsonString = Buffer.from(base64, 'base64').toString('utf-8');
+            }
+            else if (typeof atob === 'function') {
+                jsonString = atob(base64);
+                try {
+                    jsonString = decodeURIComponent(jsonString
+                        .split('')
+                        .map(function (c) {
+                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+                    })
+                        .join(''));
+                }
+                catch {
+                    // ignore
+                }
+            }
+            else {
+                return undefined;
+            }
+            const payload = JSON.parse(jsonString);
+            if (payload && typeof payload.sub === 'string') {
+                return { subject: payload.sub, claims: payload };
+            }
+        }
+        catch {
+            // ignore decoding errors
+        }
+        return undefined;
+    }
 }
 
 var oauth2ClientCredentialsTokenProvider = /*#__PURE__*/Object.freeze({

package/dist/types/naylence/fame/security/auth/oauth2-client-credentials-token-provider.d.ts

@@ -1,6 +1,7 @@
 import { type CredentialProvider } from '../credential/credential-provider.js';
 import type { Token } from './token.js';
-import type { TokenProvider } from './token-provider.js';
+import type { IdentityExposingTokenProvider } from './token-provider.js';
+import type { AuthIdentity } from './auth-identity.js';
 interface FetchLike {
     (input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
 }
@@ -13,7 +14,7 @@ export interface OAuth2ClientCredentialsTokenProviderOptions {
     fetchImpl?: FetchLike;
     clockSkewSeconds?: number;
 }
-export declare class OAuth2ClientCredentialsTokenProvider implements TokenProvider {
+export declare class OAuth2ClientCredentialsTokenProvider implements IdentityExposingTokenProvider {
     private cachedToken;
     private readonly options;
     constructor(rawOptions: OAuth2ClientCredentialsTokenProviderOptions | Record<string, unknown>);
@@ -22,5 +23,6 @@ export declare class OAuth2ClientCredentialsTokenProvider implements TokenProvid
     private fetchNewToken;
     private resolveFetch;
     private resolveExpiresIn;
+    getIdentity(): Promise<AuthIdentity | undefined>;
 }
 export {};

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.3.18";
+export declare const VERSION = "0.3.20";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naylence/runtime",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "type": "module",
   "description": "Naylence Runtime - Complete TypeScript runtime",
   "author": "Naylence Dev <naylencedev@gmail.com>",