@owlmeans/web-auth 0.1.18-rc.18 → 0.1.18-rc.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/agent-meta/manifest.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 2,
|
|
3
3
|
"package": "@owlmeans/web-auth",
|
|
4
|
-
"version": "0.1.18-rc.
|
|
5
|
-
"generatedAt": "2026-
|
|
4
|
+
"version": "0.1.18-rc.19",
|
|
5
|
+
"generatedAt": "2026-09-01T12:04:42.736Z",
|
|
6
6
|
"canonicalRepo": "https://github.com/owlmeans/common",
|
|
7
7
|
"entries": [
|
|
8
8
|
{
|
|
@@ -8,7 +8,7 @@ user-invocable: false
|
|
|
8
8
|
# @owlmeans/web-auth
|
|
9
9
|
|
|
10
10
|
**Layer:** Web
|
|
11
|
-
**Install:** `"@owlmeans/web-auth": "^0.1.18-rc.
|
|
11
|
+
**Install:** `"@owlmeans/web-auth": "^0.1.18-rc.19"` in `dependencies`
|
|
12
12
|
|
|
13
13
|
Web-side auth UI plugins that register into the shared `@owlmeans/client-auth/manager` plugin registry
|
|
14
14
|
(mirrors `@owlmeans/web-oidc-rp`). Currently ships the **PK-based supervisor** login form.
|
|
@@ -29,8 +29,19 @@ Web-side auth UI plugins that register into the shared `@owlmeans/client-auth/ma
|
|
|
29
29
|
```ts
|
|
30
30
|
import { appendSupervisorAuth } from '@owlmeans/web-auth'
|
|
31
31
|
// in your web client makeContext():
|
|
32
|
-
appendSupervisorAuth(context) // enabled
|
|
32
|
+
appendSupervisorAuth(context) // enabled where cfg.debug.supervisor === true
|
|
33
33
|
```
|
|
34
|
+
|
|
35
|
+
**It reads `cfg.debug.supervisor`, and deliberately NOT `cfg.debug.all`.** Whole families of
|
|
36
|
+
OwlMeans applications set `debug.all` for reasons that have nothing to do with authentication — a
|
|
37
|
+
Viable-generated target sets it for itself — so gating on it put an operator login on every one of
|
|
38
|
+
them, in production, reachable by anyone who typed the URL. `{ enabled: true }` forces it on for a
|
|
39
|
+
consumer that relied on the old default.
|
|
40
|
+
|
|
41
|
+
Registering the plugin is not enough to make it OFFERED: `supervisorClientPlugin` carries
|
|
42
|
+
`restricted: true`, so the sign-in screen shows it only where the configuration names it. That is
|
|
43
|
+
what `appendSupervisorAuth` writes into `cfg.security.auth.login.overrides` when it enables the
|
|
44
|
+
plugin — pass `{ offer: false }` to register it without advertising it.
|
|
34
45
|
The form renders at `SUPERVISOR_LOGIN_PATH` via the standard `CAUTHEN_AUTHEN_TYPED` route — no extra
|
|
35
46
|
route registration needed. Test ids: `supervisor-auth-form`, `supervisor-user-id`, `supervisor-pk`,
|
|
36
47
|
`supervisor-submit`, `supervisor-error`.
|