@owlmeans/server-oidc-rp 0.1.17 → 0.1.18-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/agent-meta/manifest.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 2,
|
|
3
3
|
"package": "@owlmeans/server-oidc-rp",
|
|
4
|
-
"version": "0.1.
|
|
5
|
-
"generatedAt": "2026-08-
|
|
4
|
+
"version": "0.1.18-rc.0",
|
|
5
|
+
"generatedAt": "2026-08-16T22:20:50.509Z",
|
|
6
6
|
"canonicalRepo": "https://github.com/owlmeans/common",
|
|
7
7
|
"entries": [
|
|
8
8
|
{
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/actions/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAkBzE,eAAO,MAAM,IAAI,EAAE,
|
|
1
|
+
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/actions/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAkBzE,eAAO,MAAM,IAAI,EAAE,sBA0FjB,CAAA"}
|
package/build/actions/init.js
CHANGED
|
@@ -18,11 +18,18 @@ export const init = handleBody(async (body, ctx) => {
|
|
|
18
18
|
const context = assertContext(ctx);
|
|
19
19
|
const oidc = context.service(DEFAULT_ALIAS);
|
|
20
20
|
let client = null;
|
|
21
|
+
// Only the remote-lookup branch below actually resolves the client BY entityId. The default
|
|
22
|
+
// provider is picked by `def: true` alone, so persisting the caller-supplied entityId
|
|
23
|
+
// unconditionally records a value that was never verified against the registered provider —
|
|
24
|
+
// and the exchange step (utils/auth.ts) later requires an exact match on it, failing even
|
|
25
|
+
// though the very same default provider is trivially available there too.
|
|
26
|
+
let entityIdUsedForResolution = false;
|
|
21
27
|
const defaultClientId = oidc.getDefault();
|
|
22
28
|
if (defaultClientId != null) {
|
|
23
29
|
client = await oidc.getClient(defaultClientId);
|
|
24
30
|
}
|
|
25
31
|
if (client == null) {
|
|
32
|
+
entityIdUsedForResolution = true;
|
|
26
33
|
// if (!oidc.hasProvider({ entityId })) {
|
|
27
34
|
/**
|
|
28
35
|
* @TODO We need to move it to some remote resource.
|
|
@@ -63,7 +70,7 @@ export const init = handleBody(async (body, ctx) => {
|
|
|
63
70
|
id: verifierId(challenge),
|
|
64
71
|
verifier,
|
|
65
72
|
client: client.getClientId(),
|
|
66
|
-
entityId,
|
|
73
|
+
...(entityIdUsedForResolution ? { entityId } : {}),
|
|
67
74
|
}, { ttl: AUTHEN_TIMEFRAME / 1000 });
|
|
68
75
|
const [dispatcherUrl] = await context.entrypoint(DISPATCHER).call();
|
|
69
76
|
const cfg = client.getConfig();
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/actions/init.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAEjD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACzD,qDAAqD;AACrD,8CAA8C;AAE9C,OAAO,EAAE,cAAc,IAAI,MAAM,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,MAAM,CAAC,MAAM,IAAI,GAA2B,UAAU,CAAC,KAAK,EAAE,IAAwB,EAAE,GAAG,EAAE,EAAE;IAC7F,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;IAE5B,MAAM,OAAO,GAAG,aAAa,CAAkB,GAAG,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;IAE9D,IAAI,MAAM,GAA6B,IAAI,CAAA;
|
|
1
|
+
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/actions/init.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAEjD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACzD,qDAAqD;AACrD,8CAA8C;AAE9C,OAAO,EAAE,cAAc,IAAI,MAAM,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,MAAM,CAAC,MAAM,IAAI,GAA2B,UAAU,CAAC,KAAK,EAAE,IAAwB,EAAE,GAAG,EAAE,EAAE;IAC7F,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;IAE5B,MAAM,OAAO,GAAG,aAAa,CAAkB,GAAG,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;IAE9D,IAAI,MAAM,GAA6B,IAAI,CAAA;IAC3C,4FAA4F;IAC5F,sFAAsF;IACtF,4FAA4F;IAC5F,0FAA0F;IAC1F,0EAA0E;IAC1E,IAAI,yBAAyB,GAAG,KAAK,CAAA;IAErC,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;IACzC,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,yBAAyB,GAAG,IAAI,CAAA;QAChC,yCAAyC;QACzC;;;WAGG;QACH,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C,WAAW,CAAC,QAAQ,CAAC,IAAI,CAC1B,CAAC,IAAI,CAAC;YACL,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YAC7D,KAAK,EAAE,EAAE,QAAQ,EAAE;SACpB,CAAC,CAAA;QAEF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,WAAW,EAAE,CAAA;QACzB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qDAAqD,EAAE,SAAS,CAAC,CAAA;QAE7E,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,CAAA;QACzE,iFAAiF;QACjF,IAAI,QAAQ,IAAI,IAAI,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC1C,OAAO,QAAQ,CAAC,GAAG,CAAA;QACrB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAA;QAChD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAEjC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,EAAE,CAAA;QACzB,CAAC;QACD,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,oEAAoE;IACpE,+FAA+F;IAC/F,WAAW;IACX,oCAAoC;IACpC,8DAA8D;IAC9D,OAAO;IACP,IAAI;IAEJ,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAA;IAE3H,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;QACzB,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;QAC5B,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,EAAE,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAAC,CAAA;IAEpC,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAA2B,UAAU,CAAC,CAAC,IAAI,EAAE,CAAA;IAE7F,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,KAAK,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC;QACvC,cAAc,EAAE,SAAS;QACzB,qBAAqB,EAAE,MAAM;QAC7B,YAAY,EAAE,aAAa;KAC5B,CAAC,CAAA;IAEF,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAE9B,OAAO,GAAG,CAAA;AACZ,CAAC,CAAC,CAAA"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@owlmeans/server-oidc-rp",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.18-rc.1",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"scripts": {
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
"devDependencies": {
|
|
39
39
|
"@owlmeans/dep-config": "workspace:*",
|
|
40
|
-
"@owlmeans/test-auth": "^0.1.
|
|
40
|
+
"@owlmeans/test-auth": "^0.1.18-rc.1",
|
|
41
41
|
"@types/bun": "^1.3.14",
|
|
42
42
|
"@types/node": "^26.1.0",
|
|
43
43
|
"nodemon": "^3.1.14",
|
|
@@ -45,21 +45,21 @@
|
|
|
45
45
|
},
|
|
46
46
|
"dependencies": {
|
|
47
47
|
"@noble/hashes": "^1.5.0",
|
|
48
|
-
"@owlmeans/auth": "^0.1.
|
|
49
|
-
"@owlmeans/auth-common": "^0.1.
|
|
50
|
-
"@owlmeans/basic-envelope": "^0.1.
|
|
51
|
-
"@owlmeans/client-entrypoint": "^0.1.
|
|
52
|
-
"@owlmeans/config": "^0.1.
|
|
53
|
-
"@owlmeans/context": "^0.1.
|
|
54
|
-
"@owlmeans/did": "^0.1.
|
|
55
|
-
"@owlmeans/entrypoint": "^0.1.
|
|
56
|
-
"@owlmeans/oidc": "^0.1.
|
|
57
|
-
"@owlmeans/resource": "^0.1.
|
|
58
|
-
"@owlmeans/route": "^0.1.
|
|
59
|
-
"@owlmeans/server-api": "^0.1.
|
|
60
|
-
"@owlmeans/server-auth": "^0.1.
|
|
61
|
-
"@owlmeans/server-context": "^0.1.
|
|
62
|
-
"@owlmeans/server-entrypoint": "^0.1.
|
|
48
|
+
"@owlmeans/auth": "^0.1.18-rc.1",
|
|
49
|
+
"@owlmeans/auth-common": "^0.1.18-rc.1",
|
|
50
|
+
"@owlmeans/basic-envelope": "^0.1.18-rc.1",
|
|
51
|
+
"@owlmeans/client-entrypoint": "^0.1.18-rc.1",
|
|
52
|
+
"@owlmeans/config": "^0.1.18-rc.1",
|
|
53
|
+
"@owlmeans/context": "^0.1.18-rc.1",
|
|
54
|
+
"@owlmeans/did": "^0.1.18-rc.1",
|
|
55
|
+
"@owlmeans/entrypoint": "^0.1.18-rc.1",
|
|
56
|
+
"@owlmeans/oidc": "^0.1.18-rc.1",
|
|
57
|
+
"@owlmeans/resource": "^0.1.18-rc.1",
|
|
58
|
+
"@owlmeans/route": "^0.1.18-rc.1",
|
|
59
|
+
"@owlmeans/server-api": "^0.1.18-rc.1",
|
|
60
|
+
"@owlmeans/server-auth": "^0.1.18-rc.1",
|
|
61
|
+
"@owlmeans/server-context": "^0.1.18-rc.1",
|
|
62
|
+
"@owlmeans/server-entrypoint": "^0.1.18-rc.1",
|
|
63
63
|
"@scure/base": "^2.3.0",
|
|
64
64
|
"dayjs": "^1.11.13",
|
|
65
65
|
"jose": "6.2.5",
|
package/src/actions/init.ts
CHANGED
|
@@ -27,12 +27,19 @@ export const init: RefedEntrypointHandler = handleBody(async (body: OIDCAuthInit
|
|
|
27
27
|
const oidc = context.service<OidcClientService>(DEFAULT_ALIAS)
|
|
28
28
|
|
|
29
29
|
let client: OidcClientAdapter | null = null
|
|
30
|
+
// Only the remote-lookup branch below actually resolves the client BY entityId. The default
|
|
31
|
+
// provider is picked by `def: true` alone, so persisting the caller-supplied entityId
|
|
32
|
+
// unconditionally records a value that was never verified against the registered provider —
|
|
33
|
+
// and the exchange step (utils/auth.ts) later requires an exact match on it, failing even
|
|
34
|
+
// though the very same default provider is trivially available there too.
|
|
35
|
+
let entityIdUsedForResolution = false
|
|
30
36
|
|
|
31
37
|
const defaultClientId = oidc.getDefault()
|
|
32
38
|
if (defaultClientId != null) {
|
|
33
39
|
client = await oidc.getClient(defaultClientId)
|
|
34
40
|
}
|
|
35
41
|
if (client == null) {
|
|
42
|
+
entityIdUsedForResolution = true
|
|
36
43
|
// if (!oidc.hasProvider({ entityId })) {
|
|
37
44
|
/**
|
|
38
45
|
* @TODO We need to move it to some remote resource.
|
|
@@ -83,7 +90,7 @@ export const init: RefedEntrypointHandler = handleBody(async (body: OIDCAuthInit
|
|
|
83
90
|
id: verifierId(challenge),
|
|
84
91
|
verifier,
|
|
85
92
|
client: client.getClientId(),
|
|
86
|
-
entityId,
|
|
93
|
+
...(entityIdUsedForResolution ? { entityId } : {}),
|
|
87
94
|
}, { ttl: AUTHEN_TIMEFRAME / 1000 })
|
|
88
95
|
|
|
89
96
|
const [dispatcherUrl] = await context.entrypoint<ClientEntrypoint<string>>(DISPATCHER).call()
|