@opendatalabs/service-auth 1.0.0-next.3 → 1.0.0-next.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/registration/manifest.d.ts +2 -0
- package/dist/registration/manifest.d.ts.map +1 -1
- package/dist/registration/manifest.js +2 -0
- package/dist/registration/manifest.js.map +1 -1
- package/dist/registration/schema.d.ts +10 -0
- package/dist/registration/schema.d.ts.map +1 -1
- package/dist/registration/schema.js +10 -0
- package/dist/registration/schema.js.map +1 -1
- package/package.json +1 -1
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
* client_id: <hydra_client_id>
|
|
13
13
|
* client_name: <service_id>
|
|
14
14
|
* token_endpoint_auth_method: private_key_jwt
|
|
15
|
+
* token_endpoint_auth_signing_alg: <token_endpoint_auth_signing_alg>
|
|
15
16
|
* jwks_uri: <jwks_uri>
|
|
16
17
|
* grant_types: <grant_types>
|
|
17
18
|
* audience: <allowed_audiences>
|
|
@@ -48,6 +49,7 @@ export interface HydraClientBody {
|
|
|
48
49
|
client_id: string;
|
|
49
50
|
client_name: string;
|
|
50
51
|
token_endpoint_auth_method: "private_key_jwt";
|
|
52
|
+
token_endpoint_auth_signing_alg: string;
|
|
51
53
|
jwks_uri: string;
|
|
52
54
|
grant_types: string[];
|
|
53
55
|
audience: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,mBAAmB,EAAE,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAC9C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAU3E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,UAAU,SAAa,GACtB,mBAAmB,CAwBrB;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAG9B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B,EAAE,iBAAiB,CAAC;IAC9C,+BAA+B,EAAE,MAAM,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,EAAE,KAAK,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,mBAAmB,GAC5B,eAAe,CAiBjB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,GACxC,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAchD"}
|
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
* client_id: <hydra_client_id>
|
|
13
13
|
* client_name: <service_id>
|
|
14
14
|
* token_endpoint_auth_method: private_key_jwt
|
|
15
|
+
* token_endpoint_auth_signing_alg: <token_endpoint_auth_signing_alg>
|
|
15
16
|
* jwks_uri: <jwks_uri>
|
|
16
17
|
* grant_types: <grant_types>
|
|
17
18
|
* audience: <allowed_audiences>
|
|
@@ -70,6 +71,7 @@ export function manifestToHydraClient(manifest) {
|
|
|
70
71
|
client_id: manifest.hydra_client_id,
|
|
71
72
|
client_name: manifest.service_id,
|
|
72
73
|
token_endpoint_auth_method: "private_key_jwt",
|
|
74
|
+
token_endpoint_auth_signing_alg: manifest.token_endpoint_auth_signing_alg,
|
|
73
75
|
jwks_uri: manifest.jwks_uri,
|
|
74
76
|
grant_types: [...manifest.grant_types],
|
|
75
77
|
audience: [...manifest.allowed_audiences],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/registration/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,yBAAyB,GAE1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAS;IACb,MAAM,CAA2C;IAC1D,YAAY,IAAY,EAAE,MAAgD;QACxE,KAAK,CACH,0BAA0B,IAAI,uBAAuB,MAAM;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACrC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,UAAU,GAAG,UAAU;IAEvB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,uBAAuB,CAAC,UAAU,EAAE;YAC5C;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aAC3D;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;YAClC,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAoBD,MAAM,UAAU,qBAAqB,CACnC,QAA6B;IAE7B,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,eAAe;QACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,0BAA0B,EAAE,iBAAiB;QAC7C,+BAA+B,EAAE,QAAQ,CAAC,+BAA+B;QACzE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QACzC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,qBAAqB,EAAE,KAAK;QAC5B,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAwB,EACxB,QAAyC;IAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAI,QAAoC,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
|
|
@@ -27,6 +27,14 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
27
27
|
service_id: z.ZodString;
|
|
28
28
|
hydra_client_id: z.ZodString;
|
|
29
29
|
token_endpoint_auth_method: z.ZodLiteral<"private_key_jwt">;
|
|
30
|
+
/**
|
|
31
|
+
* JWS `alg` Hydra enforces for the `client_assertion` JWT on the token
|
|
32
|
+
* endpoint. Hydra defaults to `RS256` when the field is unset, but the
|
|
33
|
+
* SDK (`createServiceAuthClient`) signs with `ES256`, so we default
|
|
34
|
+
* here too. Override only if a specific service signs with something
|
|
35
|
+
* else.
|
|
36
|
+
*/
|
|
37
|
+
token_endpoint_auth_signing_alg: z.ZodDefault<z.ZodEnum<["ES256", "RS256", "PS256", "ES384", "ES512", "RS384", "RS512"]>>;
|
|
30
38
|
jwks_uri: z.ZodString;
|
|
31
39
|
allowed_audiences: z.ZodArray<z.ZodString, "many">;
|
|
32
40
|
allowed_scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -40,6 +48,7 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
40
48
|
service_id: string;
|
|
41
49
|
hydra_client_id: string;
|
|
42
50
|
token_endpoint_auth_method: "private_key_jwt";
|
|
51
|
+
token_endpoint_auth_signing_alg: "ES256" | "RS256" | "PS256" | "ES384" | "ES512" | "RS384" | "RS512";
|
|
43
52
|
jwks_uri: string;
|
|
44
53
|
allowed_audiences: string[];
|
|
45
54
|
allowed_scopes: string[];
|
|
@@ -56,6 +65,7 @@ export declare const serviceAuthManifestSchema: z.ZodObject<{
|
|
|
56
65
|
allowed_audiences: string[];
|
|
57
66
|
access_token_strategy: "jwt";
|
|
58
67
|
owner_team: string;
|
|
68
|
+
token_endpoint_auth_signing_alg?: "ES256" | "RS256" | "PS256" | "ES384" | "ES512" | "RS384" | "RS512" | undefined;
|
|
59
69
|
allowed_scopes?: string[] | undefined;
|
|
60
70
|
grant_types?: "client_credentials"[] | undefined;
|
|
61
71
|
key_rotation_policy?: string | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB;;;;IAalC;;;;;;OAMG;;;;;;;;;IAmBH,8DAA8D;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGvD,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
|
|
@@ -37,6 +37,16 @@ export const serviceAuthManifestSchema = z
|
|
|
37
37
|
.min(1)
|
|
38
38
|
.regex(/^[a-zA-Z0-9][a-zA-Z0-9-]*$/u),
|
|
39
39
|
token_endpoint_auth_method: z.literal("private_key_jwt"),
|
|
40
|
+
/**
|
|
41
|
+
* JWS `alg` Hydra enforces for the `client_assertion` JWT on the token
|
|
42
|
+
* endpoint. Hydra defaults to `RS256` when the field is unset, but the
|
|
43
|
+
* SDK (`createServiceAuthClient`) signs with `ES256`, so we default
|
|
44
|
+
* here too. Override only if a specific service signs with something
|
|
45
|
+
* else.
|
|
46
|
+
*/
|
|
47
|
+
token_endpoint_auth_signing_alg: z
|
|
48
|
+
.enum(["ES256", "RS256", "PS256", "ES384", "ES512", "RS384", "RS512"])
|
|
49
|
+
.default("ES256"),
|
|
40
50
|
jwks_uri: z.string().url(),
|
|
41
51
|
allowed_audiences: z.array(z.string().min(1)).min(1),
|
|
42
52
|
allowed_scopes: z.array(z.string()).default([]),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE;QAC9B,OAAO,EAAE,yCAAyC;KACnD,CAAC;IACJ,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,6BAA6B,CAAC;IACvC,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE;QAC3B,OAAO,EAAE,gEAAgE;KAC1E,CAAC;SACD,OAAO,CAAC,KAAK,CAAC;IACjB,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC"}
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/registration/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE;QAC9B,OAAO,EAAE,yCAAyC;KACnD,CAAC;IACJ,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,6BAA6B,CAAC;IACvC,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxD;;;;;;OAMG;IACH,+BAA+B,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACrE,OAAO,CAAC,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,oBAAoB,EAAE;QAC3B,OAAO,EAAE,gEAAgE;KAC1E,CAAC;SACD,OAAO,CAAC,KAAK,CAAC;IACjB,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC"}
|
package/package.json
CHANGED