@productcraft/platform-auth 0.0.6 → 0.0.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -6
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -170,10 +170,10 @@ await platformAuth.client.POST(
|
|
|
170
170
|
{
|
|
171
171
|
params: { ... },
|
|
172
172
|
body: {
|
|
173
|
-
name: "
|
|
174
|
-
description: "Read-only access to all
|
|
173
|
+
name: "mail-read-only",
|
|
174
|
+
description: "Read-only access to all Mail resources",
|
|
175
175
|
policy: [
|
|
176
|
-
{ effect: "allow", actions: ["
|
|
176
|
+
{ effect: "allow", actions: ["mail.read", "mail.list"], resources: ["*"] },
|
|
177
177
|
],
|
|
178
178
|
},
|
|
179
179
|
},
|
|
@@ -194,10 +194,13 @@ const { data: policy } = await platformAuth.client.POST(
|
|
|
194
194
|
params: { path: { workspace_slug: "acme" } },
|
|
195
195
|
body: {
|
|
196
196
|
name: "ci-staging-deploy",
|
|
197
|
-
description: "
|
|
197
|
+
description: "Auth + Mail for the staging pipeline",
|
|
198
198
|
policy: [
|
|
199
|
-
|
|
200
|
-
|
|
199
|
+
// Permission action prefixes rebranded (heimdall.* → auth.*, envoi.* → mail.*),
|
|
200
|
+
// but resource-URN namespaces intentionally stay pcft:heimdall: / pcft:envoi: —
|
|
201
|
+
// the services still emit those resource prefixes.
|
|
202
|
+
{ effect: "allow", actions: ["auth.create", "auth.read", "auth.update"], resources: ["pcft:heimdall:app/*"] },
|
|
203
|
+
{ effect: "allow", actions: ["mail.read", "mail.send"], resources: ["*"] },
|
|
201
204
|
],
|
|
202
205
|
},
|
|
203
206
|
},
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@productcraft/platform-auth",
|
|
3
|
-
"version": "0.0.
|
|
3
|
+
"version": "0.0.8",
|
|
4
4
|
"description": "PlatformUser auth, workspaces, members, invites, roles + IAM policies, API keys, service activation, and the introspect endpoint every ProductCraft backend uses to resolve permissions. Generated from the production OpenAPI spec.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.cjs",
|
|
@@ -40,7 +40,7 @@
|
|
|
40
40
|
},
|
|
41
41
|
"dependencies": {
|
|
42
42
|
"openapi-fetch": "^0.13.0",
|
|
43
|
-
"@productcraft/core": "^0.0.
|
|
43
|
+
"@productcraft/core": "^0.0.5"
|
|
44
44
|
},
|
|
45
45
|
"scripts": {
|
|
46
46
|
"build": "tsup"
|