@owlmeans/server-oidc-rp 0.1.14 → 0.1.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -7,7 +7,7 @@ applyTo: "**/context.ts, **/modules.ts, **/*.ts, **/*.tsx"
|
|
|
7
7
|
# @owlmeans/server-oidc-rp
|
|
8
8
|
|
|
9
9
|
**Layer:** Server
|
|
10
|
-
**Install:** `"@owlmeans/server-oidc-rp": "^0.1.
|
|
10
|
+
**Install:** `"@owlmeans/server-oidc-rp": "^0.1.15"` in `dependencies`
|
|
11
11
|
|
|
12
12
|
## Key Exports
|
|
13
13
|
|
|
@@ -88,7 +88,7 @@ match by construction. Do not add query-stripping here.
|
|
|
88
88
|
- `setupAuthServiceModules(managerModules, AUTH_API)` exposes provider-list and token-update service modules protected by `GUARD_ED25519`.
|
|
89
89
|
- When a downstream app uses OIDC/Google only for login and maps users into `@owlmeans/server-auth-identity`, do not reintroduce `appendOidcGuard()`, `makeOidcGate()`, or `setupOidcGuard()` as product authorization. Use a product-specific `GateService` over local identity data.
|
|
90
90
|
|
|
91
|
-
## Integrated-IAM permissions claim
|
|
91
|
+
## Integrated-IAM permissions claim
|
|
92
92
|
|
|
93
93
|
- `extractPermissionSets(claim)` (exported) shape-validates a `permissions` token claim into
|
|
94
94
|
`PermissionSet[]`; non-conforming claims (e.g. anything Keycloak emits) return `undefined`.
|
package/agent-meta/manifest.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"package": "@owlmeans/server-oidc-rp",
|
|
4
|
-
"version": "0.1.
|
|
5
|
-
"generatedAt": "2026-08-
|
|
4
|
+
"version": "0.1.15",
|
|
5
|
+
"generatedAt": "2026-08-07T17:06:32.907Z",
|
|
6
6
|
"canonicalRepo": "https://github.com/owlmeans/common",
|
|
7
7
|
"entries": [
|
|
8
8
|
{
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@owlmeans/server-oidc-rp",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.15",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"scripts": {
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
"devDependencies": {
|
|
39
39
|
"@owlmeans/dep-config": "workspace:*",
|
|
40
|
-
"@owlmeans/test-auth": "^0.1.
|
|
40
|
+
"@owlmeans/test-auth": "^0.1.15",
|
|
41
41
|
"@types/bun": "^1.3.14",
|
|
42
42
|
"@types/node": "^26.1.0",
|
|
43
43
|
"nodemon": "^3.1.14",
|
|
@@ -45,21 +45,21 @@
|
|
|
45
45
|
},
|
|
46
46
|
"dependencies": {
|
|
47
47
|
"@noble/hashes": "^1.5.0",
|
|
48
|
-
"@owlmeans/auth": "^0.1.
|
|
49
|
-
"@owlmeans/auth-common": "^0.1.
|
|
50
|
-
"@owlmeans/basic-envelope": "^0.1.
|
|
51
|
-
"@owlmeans/client-entrypoint": "^0.1.
|
|
52
|
-
"@owlmeans/config": "^0.1.
|
|
53
|
-
"@owlmeans/context": "^0.1.
|
|
54
|
-
"@owlmeans/did": "^0.1.
|
|
55
|
-
"@owlmeans/entrypoint": "^0.1.
|
|
56
|
-
"@owlmeans/oidc": "^0.1.
|
|
57
|
-
"@owlmeans/resource": "^0.1.
|
|
58
|
-
"@owlmeans/route": "^0.1.
|
|
59
|
-
"@owlmeans/server-api": "^0.1.
|
|
60
|
-
"@owlmeans/server-auth": "^0.1.
|
|
61
|
-
"@owlmeans/server-context": "^0.1.
|
|
62
|
-
"@owlmeans/server-entrypoint": "^0.1.
|
|
48
|
+
"@owlmeans/auth": "^0.1.15",
|
|
49
|
+
"@owlmeans/auth-common": "^0.1.15",
|
|
50
|
+
"@owlmeans/basic-envelope": "^0.1.15",
|
|
51
|
+
"@owlmeans/client-entrypoint": "^0.1.15",
|
|
52
|
+
"@owlmeans/config": "^0.1.15",
|
|
53
|
+
"@owlmeans/context": "^0.1.15",
|
|
54
|
+
"@owlmeans/did": "^0.1.15",
|
|
55
|
+
"@owlmeans/entrypoint": "^0.1.15",
|
|
56
|
+
"@owlmeans/oidc": "^0.1.15",
|
|
57
|
+
"@owlmeans/resource": "^0.1.15",
|
|
58
|
+
"@owlmeans/route": "^0.1.15",
|
|
59
|
+
"@owlmeans/server-api": "^0.1.15",
|
|
60
|
+
"@owlmeans/server-auth": "^0.1.15",
|
|
61
|
+
"@owlmeans/server-context": "^0.1.15",
|
|
62
|
+
"@owlmeans/server-entrypoint": "^0.1.15",
|
|
63
63
|
"@scure/base": "^1.1.9",
|
|
64
64
|
"dayjs": "^1.11.13",
|
|
65
65
|
"jose": "6.2.3",
|