@opendatalabs/service-auth 1.0.0-next.2 → 1.0.0-next.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/registration/index.d.ts +2 -2
- package/dist/registration/index.d.ts.map +1 -1
- package/dist/registration/index.js +2 -2
- package/dist/registration/index.js.map +1 -1
- package/dist/registration/manifest.d.ts +3 -1
- package/dist/registration/manifest.d.ts.map +1 -1
- package/dist/registration/manifest.js +3 -1
- package/dist/registration/manifest.js.map +1 -1
- package/dist/registration/provision.d.ts +1 -1
- package/dist/registration/provision.d.ts.map +1 -1
- package/dist/registration/provision.js +1 -1
- package/dist/registration/provision.js.map +1 -1
- package/dist/registration/schema.d.ts +10 -0
- package/dist/registration/schema.d.ts.map +1 -1
- package/dist/registration/schema.js +10 -0
- package/dist/registration/schema.js.map +1 -1
- package/package.json +25 -31
|
@@ -2,6 +2,6 @@
|
|
|
2
2
|
* Registration: manifest schema + Hydra provisioning. INTERNAL Vana
|
|
3
3
|
* package; see ./manifest.ts and ./provision.ts.
|
|
4
4
|
*/
|
|
5
|
-
export { diffHydraClient, type HydraClientBody, loadManifest, ManifestValidationError, manifestToHydraClient, parseManifestText, serviceAuthManifestSchema, type ServiceAuthManifest, } from "./manifest";
|
|
6
|
-
export { HydraAdminApiError, provisionServiceClient, type ProvisionAction, type ProvisionFetch, type ProvisionOptions, type ProvisionResult, } from "./provision";
|
|
5
|
+
export { diffHydraClient, type HydraClientBody, loadManifest, ManifestValidationError, manifestToHydraClient, parseManifestText, serviceAuthManifestSchema, type ServiceAuthManifest, } from "./manifest.js";
|
|
6
|
+
export { HydraAdminApiError, provisionServiceClient, type ProvisionAction, type ProvisionFetch, type ProvisionOptions, type ProvisionResult, } from "./provision.js";
|
|
7
7
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registration/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registration/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC"}
|
|
@@ -2,6 +2,6 @@
|
|
|
2
2
|
* Registration: manifest schema + Hydra provisioning. INTERNAL Vana
|
|
3
3
|
* package; see ./manifest.ts and ./provision.ts.
|
|
4
4
|
*/
|
|
5
|
-
export { diffHydraClient, loadManifest, ManifestValidationError, manifestToHydraClient, parseManifestText, serviceAuthManifestSchema, } from "./manifest";
|
|
6
|
-
export { HydraAdminApiError, provisionServiceClient, } from "./provision";
|
|
5
|
+
export { diffHydraClient, loadManifest, ManifestValidationError, manifestToHydraClient, parseManifestText, serviceAuthManifestSchema, } from "./manifest.js";
|
|
6
|
+
export { HydraAdminApiError, provisionServiceClient, } from "./provision.js";
|
|
7
7
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registration/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAE1B,MAAM,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registration/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAKvB,MAAM,gBAAgB,CAAC"}
|
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
* client_id: <hydra_client_id>
|
|
13
13
|
* client_name: <service_id>
|
|
14
14
|
* token_endpoint_auth_method: private_key_jwt
|
|
15
|
+
* token_endpoint_auth_signing_alg: <token_endpoint_auth_signing_alg>
|
|
15
16
|
* jwks_uri: <jwks_uri>
|
|
16
17
|
* grant_types: <grant_types>
|
|
17
18
|
* audience: <allowed_audiences>
|
|
@@ -23,7 +24,7 @@
|
|
|
23
24
|
* (server-wide default of `opaque` is overridden here). See Hydra docs
|
|
24
25
|
* referenced in package README.
|
|
25
26
|
*/
|
|
26
|
-
import { serviceAuthManifestSchema, type ServiceAuthManifest } from "./schema";
|
|
27
|
+
import { serviceAuthManifestSchema, type ServiceAuthManifest } from "./schema.js";
|
|
27
28
|
export type { ServiceAuthManifest };
|
|
28
29
|
export { serviceAuthManifestSchema };
|
|
29
30
|
export declare class ManifestValidationError extends Error {
|
|
@@ -48,6 +49,7 @@ export interface HydraClientBody {
|
|
|
48
49
|
client_id: string;
|
|
49
50
|
client_name: string;
|
|
50
51
|
token_endpoint_auth_method: "private_key_jwt";
|
|
52
|
+
token_endpoint_auth_signing_alg: string;
|
|
51
53
|
jwks_uri: string;
|
|
52
54
|
grant_types: string[];
|
|
53
55
|
audience: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,mBAAmB,EAAE,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAC9C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAU3E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,UAAU,SAAa,GACtB,mBAAmB,CAwBrB;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAG9B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B,EAAE,iBAAiB,CAAC;IAC9C,+BAA+B,EAAE,MAAM,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,EAAE,KAAK,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,mBAAmB,GAC5B,eAAe,CAiBjB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,GACxC,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAchD"}
|
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
* client_id: <hydra_client_id>
|
|
13
13
|
* client_name: <service_id>
|
|
14
14
|
* token_endpoint_auth_method: private_key_jwt
|
|
15
|
+
* token_endpoint_auth_signing_alg: <token_endpoint_auth_signing_alg>
|
|
15
16
|
* jwks_uri: <jwks_uri>
|
|
16
17
|
* grant_types: <grant_types>
|
|
17
18
|
* audience: <allowed_audiences>
|
|
@@ -25,7 +26,7 @@
|
|
|
25
26
|
*/
|
|
26
27
|
import { readFile } from "node:fs/promises";
|
|
27
28
|
import { parse as parseYaml } from "yaml";
|
|
28
|
-
import { serviceAuthManifestSchema, } from "./schema";
|
|
29
|
+
import { serviceAuthManifestSchema, } from "./schema.js";
|
|
29
30
|
export { serviceAuthManifestSchema };
|
|
30
31
|
export class ManifestValidationError extends Error {
|
|
31
32
|
path;
|
|
@@ -70,6 +71,7 @@ export function manifestToHydraClient(manifest) {
|
|
|
70
71
|
client_id: manifest.hydra_client_id,
|
|
71
72
|
client_name: manifest.service_id,
|
|
72
73
|
token_endpoint_auth_method: "private_key_jwt",
|
|
74
|
+
token_endpoint_auth_signing_alg: manifest.token_endpoint_auth_signing_alg,
|
|
73
75
|
jwks_uri: manifest.jwks_uri,
|
|
74
76
|
grant_types: [...manifest.grant_types],
|
|
75
77
|
audience: [...manifest.allowed_audiences],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,yBAAyB,GAE1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAS;IACb,MAAM,CAA2C;IAC1D,YAAY,IAAY,EAAE,MAAgD;QACxE,KAAK,CACH,0BAA0B,IAAI,uBAAuB,MAAM;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACrC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,UAAU,GAAG,UAAU;IAEvB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,uBAAuB,CAAC,UAAU,EAAE;YAC5C;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aAC3D;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;YAClC,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAoBD,MAAM,UAAU,qBAAqB,CACnC,QAA6B;IAE7B,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,eAAe;QACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,0BAA0B,EAAE,iBAAiB;QAC7C,+BAA+B,EAAE,QAAQ,CAAC,+BAA+B;QACzE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QACzC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,qBAAqB,EAAE,KAAK;QAC5B,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAwB,EACxB,QAAyC;IAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAI,QAAoC,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
|
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
* sent. We do NOT import Account's `hydra-admin.ts` directly here
|
|
23
23
|
* because this package must not depend on apps/*.
|
|
24
24
|
*/
|
|
25
|
-
import { type HydraClientBody, type ServiceAuthManifest } from "./manifest";
|
|
25
|
+
import { type HydraClientBody, type ServiceAuthManifest } from "./manifest.js";
|
|
26
26
|
export type ProvisionFetch = (input: string, init?: RequestInit) => Promise<Response>;
|
|
27
27
|
export interface ProvisionOptions {
|
|
28
28
|
/** Hydra admin base URL, e.g. `https://oauth-admin-dev.vana.org`. */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/registration/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,mBAAmB,EACzB,MAAM,
|
|
1
|
+
{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/registration/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,cAAc,GAAG,CAC3B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpE,qBAAqB;IACrB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,4BAA4B;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,cAAM,kBAAmB,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBACX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM;CAMxD;AA2BD,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CAwF1B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
|
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
* sent. We do NOT import Account's `hydra-admin.ts` directly here
|
|
23
23
|
* because this package must not depend on apps/*.
|
|
24
24
|
*/
|
|
25
|
-
import { diffHydraClient, manifestToHydraClient, } from "./manifest";
|
|
25
|
+
import { diffHydraClient, manifestToHydraClient, } from "./manifest.js";
|
|
26
26
|
class HydraAdminApiError extends Error {
|
|
27
27
|
status;
|
|
28
28
|
body;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/registration/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,eAAe,EAEf,qBAAqB,GAEtB,MAAM,
|
|
1
|
+
{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/registration/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,eAAe,EAEf,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AA2CvB,MAAM,kBAAmB,SAAQ,KAAK;IAC3B,MAAM,CAAS;IACf,IAAI,CAAU;IACvB,YAAY,MAAc,EAAE,IAAa,EAAE,IAAY;QACrD,KAAK,CAAC,uCAAuC,IAAI,YAAY,MAAM,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAyB;IAEzB,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAA6B,EAC7B,OAAyB;IAEzB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IAEvC,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChD,GAAG,CAAC,eAAe,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1C,GAAG,CAAC,uBAAuB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;IAE7B,oBAAoB;IACpB,MAAM,MAAM,GAAG,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,IAAI,QAAQ,GAAoC,IAAI,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC3B,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAA6B,CAAC;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAClC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,kBAAkB,CAC1B,OAAO,CAAC,MAAM,EACd,MAAM,SAAS,CAAC,OAAO,CAAC,EACxB,OAAO,MAAM,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAoB,QAAQ;QACtC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAC9B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,QAAQ,CAAC;IAEb,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IACD,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,gBAAgB,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAC1B,IAAI,CAAC,MAAM,EACX,MAAM,SAAS,CAAC,IAAI,CAAC,EACrB,qBAAqB,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EACpE;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAC1B,IAAI,CAAC,MAAM,EACX,MAAM,SAAS,CAAC,IAAI,CAAC,EACrB,sBAAsB,OAAO,CAAC,SAAS,EAAE,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,MAAM,MAAM,YAAY,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
|
|
@@ -27,6 +27,14 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
27
27
|
service_id: z.ZodString;
|
|
28
28
|
hydra_client_id: z.ZodString;
|
|
29
29
|
token_endpoint_auth_method: z.ZodLiteral<"private_key_jwt">;
|
|
30
|
+
/**
|
|
31
|
+
* JWS `alg` Hydra enforces for the `client_assertion` JWT on the token
|
|
32
|
+
* endpoint. Hydra defaults to `RS256` when the field is unset, but the
|
|
33
|
+
* SDK (`createServiceAuthClient`) signs with `ES256`, so we default
|
|
34
|
+
* here too. Override only if a specific service signs with something
|
|
35
|
+
* else.
|
|
36
|
+
*/
|
|
37
|
+
token_endpoint_auth_signing_alg: z.ZodDefault<z.ZodEnum<["ES256", "RS256", "PS256", "ES384", "ES512", "RS384", "RS512"]>>;
|
|
30
38
|
jwks_uri: z.ZodString;
|
|
31
39
|
allowed_audiences: z.ZodArray<z.ZodString, "many">;
|
|
32
40
|
allowed_scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -40,6 +48,7 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
40
48
|
service_id: string;
|
|
41
49
|
hydra_client_id: string;
|
|
42
50
|
token_endpoint_auth_method: "private_key_jwt";
|
|
51
|
+
token_endpoint_auth_signing_alg: "ES256" | "RS256" | "PS256" | "ES384" | "ES512" | "RS384" | "RS512";
|
|
43
52
|
jwks_uri: string;
|
|
44
53
|
allowed_audiences: string[];
|
|
45
54
|
allowed_scopes: string[];
|
|
@@ -56,6 +65,7 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
56
65
|
allowed_audiences: string[];
|
|
57
66
|
access_token_strategy: "jwt";
|
|
58
67
|
owner_team: string;
|
|
68
|
+
token_endpoint_auth_signing_alg?: "ES256" | "RS256" | "PS256" | "ES384" | "ES512" | "RS384" | "RS512" | undefined;
|
|
59
69
|
allowed_scopes?: string[] | undefined;
|
|
60
70
|
grant_types?: "client_credentials"[] | undefined;
|
|
61
71
|
key_rotation_policy?: string | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB;;;;IAalC;;;;;;OAMG;;;;;;;;;IAmBH,8DAA8D;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGvD,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
|
|
@@ -37,6 +37,16 @@ export const serviceAuthManifestSchema = z
|
|
|
37
37
|
.min(1)
|
|
38
38
|
.regex(/^[a-zA-Z0-9][a-zA-Z0-9-]*$/u),
|
|
39
39
|
token_endpoint_auth_method: z.literal("private_key_jwt"),
|
|
40
|
+
/**
|
|
41
|
+
* JWS `alg` Hydra enforces for the `client_assertion` JWT on the token
|
|
42
|
+
* endpoint. Hydra defaults to `RS256` when the field is unset, but the
|
|
43
|
+
* SDK (`createServiceAuthClient`) signs with `ES256`, so we default
|
|
44
|
+
* here too. Override only if a specific service signs with something
|
|
45
|
+
* else.
|
|
46
|
+
*/
|
|
47
|
+
token_endpoint_auth_signing_alg: z
|
|
48
|
+
.enum(["ES256", "RS256", "PS256", "ES384", "ES512", "RS384", "RS512"])
|
|
49
|
+
.default("ES256"),
|
|
40
50
|
jwks_uri: z.string().url(),
|
|
41
51
|
allowed_audiences: z.array(z.string().min(1)).min(1),
|
|
42
52
|
allowed_scopes: z.array(z.string()).default([]),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE;QAC9B,OAAO,EAAE,yCAAyC;KACnD,CAAC;IACJ,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,6BAA6B,CAAC;IACvC,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE;QAC3B,OAAO,EAAE,gEAAgE;KAC1E,CAAC;SACD,OAAO,CAAC,KAAK,CAAC;IACjB,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC"}
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE;QAC9B,OAAO,EAAE,yCAAyC;KACnD,CAAC;IACJ,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,6BAA6B,CAAC;IACvC,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxD;;;;;;OAMG;IACH,+BAA+B,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACrE,OAAO,CAAC,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE;QAC3B,OAAO,EAAE,gEAAgE;KAC1E,CAAC;SACD,OAAO,CAAC,KAAK,CAAC;IACjB,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@opendatalabs/service-auth",
|
|
3
|
-
"version": "1.0.0-next.
|
|
3
|
+
"version": "1.0.0-next.4",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "OAuth private_key_jwt service-to-service auth helper (RFC 7521/7523/9068) for Vana.",
|
|
6
6
|
"license": "MIT",
|
|
@@ -24,48 +24,42 @@
|
|
|
24
24
|
"jwt",
|
|
25
25
|
"vana"
|
|
26
26
|
],
|
|
27
|
+
"main": "./dist/client/index.js",
|
|
28
|
+
"types": "./dist/client/index.d.ts",
|
|
27
29
|
"exports": {
|
|
28
|
-
"./client":
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
"./
|
|
30
|
+
"./client": {
|
|
31
|
+
"types": "./dist/client/index.d.ts",
|
|
32
|
+
"default": "./dist/client/index.js"
|
|
33
|
+
},
|
|
34
|
+
"./resource-server": {
|
|
35
|
+
"types": "./dist/resource-server/index.d.ts",
|
|
36
|
+
"default": "./dist/resource-server/index.js"
|
|
37
|
+
},
|
|
38
|
+
"./jwks": {
|
|
39
|
+
"types": "./dist/jwks/index.d.ts",
|
|
40
|
+
"default": "./dist/jwks/index.js"
|
|
41
|
+
},
|
|
42
|
+
"./registration": {
|
|
43
|
+
"types": "./dist/registration/index.d.ts",
|
|
44
|
+
"default": "./dist/registration/index.js"
|
|
45
|
+
},
|
|
46
|
+
"./testkit": {
|
|
47
|
+
"types": "./dist/testkit/index.d.ts",
|
|
48
|
+
"default": "./dist/testkit/index.js"
|
|
49
|
+
}
|
|
33
50
|
},
|
|
34
51
|
"files": [
|
|
35
52
|
"dist",
|
|
36
53
|
"README.md"
|
|
37
54
|
],
|
|
38
55
|
"publishConfig": {
|
|
39
|
-
"access": "public"
|
|
40
|
-
"main": "./dist/client/index.js",
|
|
41
|
-
"types": "./dist/client/index.d.ts",
|
|
42
|
-
"exports": {
|
|
43
|
-
"./client": {
|
|
44
|
-
"types": "./dist/client/index.d.ts",
|
|
45
|
-
"default": "./dist/client/index.js"
|
|
46
|
-
},
|
|
47
|
-
"./resource-server": {
|
|
48
|
-
"types": "./dist/resource-server/index.d.ts",
|
|
49
|
-
"default": "./dist/resource-server/index.js"
|
|
50
|
-
},
|
|
51
|
-
"./jwks": {
|
|
52
|
-
"types": "./dist/jwks/index.d.ts",
|
|
53
|
-
"default": "./dist/jwks/index.js"
|
|
54
|
-
},
|
|
55
|
-
"./registration": {
|
|
56
|
-
"types": "./dist/registration/index.d.ts",
|
|
57
|
-
"default": "./dist/registration/index.js"
|
|
58
|
-
},
|
|
59
|
-
"./testkit": {
|
|
60
|
-
"types": "./dist/testkit/index.d.ts",
|
|
61
|
-
"default": "./dist/testkit/index.js"
|
|
62
|
-
}
|
|
63
|
-
}
|
|
56
|
+
"access": "public"
|
|
64
57
|
},
|
|
65
58
|
"scripts": {
|
|
66
59
|
"typecheck": "tsc --noEmit",
|
|
67
60
|
"test": "vitest run",
|
|
68
61
|
"build": "tsc -p tsconfig.build.json",
|
|
62
|
+
"prepare": "tsc -p tsconfig.build.json",
|
|
69
63
|
"prepack": "pnpm build",
|
|
70
64
|
"provision": "tsx ./bin/provision.ts"
|
|
71
65
|
},
|