@naylence/runtime 0.3.21 → 0.3.22

package/dist/cjs/naylence/fame/node/default-node-identity-policy.js

@@ -2,10 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DefaultNodeIdentityPolicy = void 0;
 const core_1 = require("@naylence/core");
-const token_provider_factory_js_1 = require("../security/auth/token-provider-factory.js");
-const token_provider_js_1 = require("../security/auth/token-provider.js");
-const logging_js_1 = require("../util/logging.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.node.default_node_identity_policy');
+/**
+ * Default node identity policy that preserves the current node ID.
+ *
+ * This policy does NOT derive identity from tokens or grants.
+ * For token-subject-based identity, use TokenSubjectNodeIdentityPolicy.
+ */
 class DefaultNodeIdentityPolicy {
     async resolveInitialNodeId(context) {
         if (context.configuredId) {
@@ -17,44 +19,10 @@ class DefaultNodeIdentityPolicy {
         return await (0, core_1.generateIdAsync)({ mode: 'fingerprint' });
     }
     async resolveAdmissionNodeId(context) {
-        // Try to extract identity from grants first
-        if (context.grants && context.grants.length > 0) {
-            for (const grant of context.grants) {
-                try {
-                    const auth = grant.auth;
-                    if (!auth) {
-                        continue;
-                    }
-                    const tokenProviderConfig = (auth.tokenProvider ??
-                        auth.token_provider);
-                    if (!tokenProviderConfig ||
-                        typeof tokenProviderConfig.type !== 'string') {
-                        continue;
-                    }
-                    const provider = await token_provider_factory_js_1.TokenProviderFactory.createTokenProvider(tokenProviderConfig);
-                    if ((0, token_provider_js_1.isIdentityExposingTokenProvider)(provider)) {
-                        const identity = await provider.getIdentity();
-                        if (identity && identity.subject) {
-                            logger.debug('identity_extracted_from_grant', {
-                                identity_id: identity.subject,
-                                grant_type: grant.type,
-                            });
-                            return identity.subject;
-                        }
-                    }
-                }
-                catch (error) {
-                    logger.warning('identity_extraction_failed', {
-                        error: error instanceof Error ? error.message : String(error),
-                        grant_type: grant.type,
-                    });
-                }
-            }
+        if (context.currentNodeId) {
+            return context.currentNodeId;
         }
-        if (!context.currentNodeId) {
-            return await (0, core_1.generateIdAsync)({ mode: 'fingerprint' });
-        }
-        return context.currentNodeId;
+        return await (0, core_1.generateIdAsync)({ mode: 'fingerprint' });
     }
 }
 exports.DefaultNodeIdentityPolicy = DefaultNodeIdentityPolicy;

package/dist/cjs/version.js

@@ -1,10 +1,10 @@
 "use strict";
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.21
+// Generated from package.json version: 0.3.22
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 /**
  * The package version, injected at build time.
  * @internal
  */
-exports.VERSION = '0.3.21';
+exports.VERSION = '0.3.22';

package/dist/esm/naylence/fame/node/default-node-identity-policy.js

@@ -1,8 +1,10 @@
 import { generateIdAsync } from '@naylence/core';
-import { TokenProviderFactory } from '../security/auth/token-provider-factory.js';
-import { isIdentityExposingTokenProvider } from '../security/auth/token-provider.js';
-import { getLogger } from '../util/logging.js';
-const logger = getLogger('naylence.fame.node.default_node_identity_policy');
+/**
+ * Default node identity policy that preserves the current node ID.
+ *
+ * This policy does NOT derive identity from tokens or grants.
+ * For token-subject-based identity, use TokenSubjectNodeIdentityPolicy.
+ */
 export class DefaultNodeIdentityPolicy {
     async resolveInitialNodeId(context) {
         if (context.configuredId) {
@@ -14,43 +16,9 @@ export class DefaultNodeIdentityPolicy {
         return await generateIdAsync({ mode: 'fingerprint' });
     }
     async resolveAdmissionNodeId(context) {
-        // Try to extract identity from grants first
-        if (context.grants && context.grants.length > 0) {
-            for (const grant of context.grants) {
-                try {
-                    const auth = grant.auth;
-                    if (!auth) {
-                        continue;
-                    }
-                    const tokenProviderConfig = (auth.tokenProvider ??
-                        auth.token_provider);
-                    if (!tokenProviderConfig ||
-                        typeof tokenProviderConfig.type !== 'string') {
-                        continue;
-                    }
-                    const provider = await TokenProviderFactory.createTokenProvider(tokenProviderConfig);
-                    if (isIdentityExposingTokenProvider(provider)) {
-                        const identity = await provider.getIdentity();
-                        if (identity && identity.subject) {
-                            logger.debug('identity_extracted_from_grant', {
-                                identity_id: identity.subject,
-                                grant_type: grant.type,
-                            });
-                            return identity.subject;
-                        }
-                    }
-                }
-                catch (error) {
-                    logger.warning('identity_extraction_failed', {
-                        error: error instanceof Error ? error.message : String(error),
-                        grant_type: grant.type,
-                    });
-                }
-            }
+        if (context.currentNodeId) {
+            return context.currentNodeId;
         }
-        if (!context.currentNodeId) {
-            return await generateIdAsync({ mode: 'fingerprint' });
-        }
-        return context.currentNodeId;
+        return await generateIdAsync({ mode: 'fingerprint' });
     }
 }

package/dist/esm/version.js

@@ -1,7 +1,7 @@
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.21
+// Generated from package.json version: 0.3.22
 /**
  * The package version, injected at build time.
  * @internal
  */
-export const VERSION = '0.3.21';
+export const VERSION = '0.3.22';