@orthacms/identity-provider-oidc 0.5.1 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/lib/claims.d.ts.map +1 -1
- package/dist/lib/oidc-provider.d.ts.map +1 -1
- package/dist/lib/oidc-provider.js +3 -1
- package/dist/lib/test-support.d.ts +1 -1
- package/dist/lib/test-support.d.ts.map +1 -1
- package/dist/lib/test-support.js +1 -1
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
# @orthacms/identity-provider-oidc
|
|
2
2
|
|
|
3
|
-
Part of [Ortha CMS](https://
|
|
3
|
+
Part of [Ortha CMS](https://orthacms.com) — the source is on
|
|
4
|
+
[GitHub](https://github.com/ortha-source/ortha-cms/tree/main/packages/identity/provider-oidc).
|
|
4
5
|
|
|
5
6
|
```sh
|
|
6
7
|
npm install @orthacms/identity-provider-oidc
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACH,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}
|
package/dist/lib/claims.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/lib/claims.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/lib/claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,UAAU,EAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CACrB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,kBAAkB,GAC3B,UAAU,CA2BZ"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oidc-provider.d.ts","sourceRoot":"","sources":["../../src/lib/oidc-provider.ts"],"names":[],"mappings":"AAOA,OAAO,EAQH,KAAK,WAAW,EAEnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAuCtE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,
|
|
1
|
+
{"version":3,"file":"oidc-provider.d.ts","sourceRoot":"","sources":["../../src/lib/oidc-provider.ts"],"names":[],"mappings":"AAOA,OAAO,EAQH,KAAK,WAAW,EAEnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAuCtE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,WAAW,CAuR1E"}
|
|
@@ -103,7 +103,9 @@ function createOidcProvider(config) {
|
|
|
103
103
|
url.searchParams.set('response_type', 'code');
|
|
104
104
|
url.searchParams.set('client_id', resolved.clientId);
|
|
105
105
|
url.searchParams.set('redirect_uri', request.redirectUri);
|
|
106
|
-
url.searchParams.set('scope', [
|
|
106
|
+
url.searchParams.set('scope', [
|
|
107
|
+
...new Set([...resolved.scopes, ...(request.scopes ?? [])])
|
|
108
|
+
].join(' '));
|
|
107
109
|
url.searchParams.set('state', request.state);
|
|
108
110
|
url.searchParams.set('nonce', request.nonce);
|
|
109
111
|
// The challenge, never the verifier: the browser carries this URL,
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { generateKeyPair } from 'jose';
|
|
2
2
|
import type { SsoAuthorizeRequest, SsoCallback } from '@orthacms/identity-domain';
|
|
3
3
|
export declare const ISSUER = "https://idp.test";
|
|
4
|
-
export declare const CLIENT_ID = "
|
|
4
|
+
export declare const CLIENT_ID = "orthacms";
|
|
5
5
|
export declare const REDIRECT_URI = "https://cms.test/api/auth/sso/idp/callback";
|
|
6
6
|
/** The one-attempt secrets a core would have minted. */
|
|
7
7
|
export declare const CORE_SECRETS: SsoAuthorizeRequest;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"test-support.d.ts","sourceRoot":"","sources":["../../src/lib/test-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,eAAe,EAAqB,MAAM,MAAM,CAAC;AAWrE,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"test-support.d.ts","sourceRoot":"","sources":["../../src/lib/test-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,eAAe,EAAqB,MAAM,MAAM,CAAC;AAWrE,OAAO,KAAK,EACR,mBAAmB,EACnB,WAAW,EACd,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,MAAM,qBAAqB,CAAC;AACzC,eAAO,MAAM,SAAS,aAAa,CAAC;AACpC,eAAO,MAAM,YAAY,+CAA+C,CAAC;AAEzE,wDAAwD;AACxD,eAAO,MAAM,YAAY,EAAE,mBAK1B,CAAC;AAEF,+CAA+C;AAC/C,MAAM,WAAW,WAAW;IACxB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,OAAO;IACpB,2BAA2B;IAC3B,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACtE,+CAA+C;IAC/C,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,sDAAsD;IACtD,aAAa,EAAE,eAAe,GAAG,IAAI,CAAC;IACtC,mEAAmE;IACnE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAsB,OAAO,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAgFzE;AAUD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACjC,GAAG,EAAE,OAAO,EACZ,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,uDACmB,CAAC;AAEzD,yEAAyE;AACzE,wBAAgB,YAAY,CACxB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACvC,WAAW,CAYb"}
|
package/dist/lib/test-support.js
CHANGED
|
@@ -6,7 +6,7 @@ exports.signLogoutToken = signLogoutToken;
|
|
|
6
6
|
exports.callbackWith = callbackWith;
|
|
7
7
|
const jose_1 = require("jose");
|
|
8
8
|
exports.ISSUER = 'https://idp.test';
|
|
9
|
-
exports.CLIENT_ID = '
|
|
9
|
+
exports.CLIENT_ID = 'orthacms';
|
|
10
10
|
exports.REDIRECT_URI = 'https://cms.test/api/auth/sso/idp/callback';
|
|
11
11
|
/** The one-attempt secrets a core would have minted. */
|
|
12
12
|
exports.CORE_SECRETS = {
|
package/package.json
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@orthacms/identity-provider-oidc",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.6.0",
|
|
4
4
|
"description": "@orthacms/identity-provider-oidc — part of Ortha CMS.",
|
|
5
5
|
"license": "MIT",
|
|
6
|
-
"homepage": "https://
|
|
6
|
+
"homepage": "https://orthacms.com",
|
|
7
7
|
"repository": {
|
|
8
8
|
"type": "git",
|
|
9
9
|
"url": "git+https://github.com/ortha-source/ortha-cms.git",
|
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
"dist"
|
|
26
26
|
],
|
|
27
27
|
"dependencies": {
|
|
28
|
-
"@orthacms/identity-domain": "^0.
|
|
28
|
+
"@orthacms/identity-domain": "^0.6.0",
|
|
29
29
|
"jose": "^6.2.0",
|
|
30
30
|
"tslib": "^2.3.0"
|
|
31
31
|
},
|