@salesforce/lds-runtime-one-app 1.451.0-dev13 → 1.451.0-dev14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -2590,7 +2590,7 @@ function buildServiceDescriptor$d(luvio) {
|
|
|
2590
2590
|
},
|
|
2591
2591
|
};
|
|
2592
2592
|
}
|
|
2593
|
-
// version: 1.451.0-
|
|
2593
|
+
// version: 1.451.0-dev14-2ce0dd97dc
|
|
2594
2594
|
|
|
2595
2595
|
class AuraGraphQLNormalizedCacheControlCommand extends AuraNormalizedCacheControlCommand {
|
|
2596
2596
|
constructor(config, documentRootType, services) {
|
|
@@ -2929,7 +2929,7 @@ function buildServiceDescriptor$9(notifyRecordUpdateAvailable, getNormalizedLuvi
|
|
|
2929
2929
|
},
|
|
2930
2930
|
};
|
|
2931
2931
|
}
|
|
2932
|
-
// version: 1.451.0-
|
|
2932
|
+
// version: 1.451.0-dev14-2ce0dd97dc
|
|
2933
2933
|
|
|
2934
2934
|
class RetryService {
|
|
2935
2935
|
constructor(defaultRetryPolicy) {
|
|
@@ -5851,7 +5851,7 @@ function getEnvironmentSetting(name) {
|
|
|
5851
5851
|
}
|
|
5852
5852
|
return undefined;
|
|
5853
5853
|
}
|
|
5854
|
-
// version: 1.451.0-
|
|
5854
|
+
// version: 1.451.0-dev14-e7b4018fe5
|
|
5855
5855
|
|
|
5856
5856
|
/**
|
|
5857
5857
|
* Helpers for reaching the Aura framework from the LDS Aura runtime.
|
|
@@ -7677,7 +7677,7 @@ const SFAP_BASE_URL = 'api.salesforce.com';
|
|
|
7677
7677
|
// to. Distinct from SFAP's `sfap_api` so the Data360 host-rewrite interceptor only
|
|
7678
7678
|
// ever runs for that command — zero blast radius on the SFAP fleet.
|
|
7679
7679
|
//
|
|
7680
|
-
// The tag is deliberately named after the *mechanism* (the `
|
|
7680
|
+
// The tag is deliberately named after the *mechanism* (the `cdp_tse_url` host rewrite),
|
|
7681
7681
|
// not a capability, because this whole descriptor is interim: it exists only while
|
|
7682
7682
|
// the mint service returns the fixed SFAP `baseUri` regardless of platform. When the
|
|
7683
7683
|
// service returns the correct per-platform `baseUri`, the data 360 route can be re-evaluated.
|
|
@@ -7692,7 +7692,7 @@ const DATA_360_CDP_URL_REWRITE_AUTH_SCOPE = 'data_360_cdp_url_rewrite';
|
|
|
7692
7692
|
// (`<domain-suffix>`) is environment-dependent — it differs per deployment
|
|
7693
7693
|
// environment. This is why the interceptor strips any scheme before parsing
|
|
7694
7694
|
// and applies no host-suffix policy — see the interceptor docblock's trust boundary.
|
|
7695
|
-
const CDP_URL_CLAIM = '
|
|
7695
|
+
const CDP_URL_CLAIM = 'cdp_tse_url';
|
|
7696
7696
|
function buildDispatchingSfapJwtResolver(legacyResolver, parameterizedResolver) {
|
|
7697
7697
|
return {
|
|
7698
7698
|
getJwt(params) {
|
|
@@ -7742,14 +7742,14 @@ function buildJwtAuthorizedSfapFetchServiceDescriptor(logger) {
|
|
|
7742
7742
|
*
|
|
7743
7743
|
* Unlike SFAP, the per-tenant base host is NOT returned in the mint response's
|
|
7744
7744
|
* `baseUri` (which is the fixed SFAP host); it rides on the minted JWT as the
|
|
7745
|
-
* `
|
|
7745
|
+
* `cdp_tse_url` claim. The standard `JwtRequestModifier` only receives `extraInfo`,
|
|
7746
7746
|
* never the decoded claims, so the host rewrite cannot be expressed as a modifier
|
|
7747
7747
|
* — it must read the token directly. This descriptor therefore uses a bespoke
|
|
7748
7748
|
* interceptor ({@link buildData360HostRewriteInterceptor}) that mints the
|
|
7749
|
-
* parameterized SFAP JWT, attaches the Bearer token, decodes `
|
|
7749
|
+
* parameterized SFAP JWT, attaches the Bearer token, decodes `cdp_tse_url`, and
|
|
7750
7750
|
* rewrites the request host to that TSE.
|
|
7751
7751
|
*
|
|
7752
|
-
* It reuses the module's `sfapJwtManager`: `
|
|
7752
|
+
* It reuses the module's `sfapJwtManager`: `cdp_tse_url` is emitted on the same
|
|
7753
7753
|
* `SFAP_API`-scope JWT, so the Data360 command mints the same kind of token — it
|
|
7754
7754
|
* just forwards the data-cloud scopes via the context-seed `jwtMintParams`.
|
|
7755
7755
|
*
|
|
@@ -7879,25 +7879,25 @@ function buildJwtRequestInterceptor(logger) {
|
|
|
7879
7879
|
/**
|
|
7880
7880
|
* Request interceptor for the direct-to-Data360 command. It cannot use the
|
|
7881
7881
|
* standard `JwtRequestModifier` seam because the tenant host is a JWT *claim*
|
|
7882
|
-
* (`
|
|
7882
|
+
* (`cdp_tse_url`), and modifiers only receive `extraInfo`. So — like the copilot
|
|
7883
7883
|
* interceptor that reads `decodedInfo.iss` — it holds the token directly:
|
|
7884
7884
|
*
|
|
7885
7885
|
* 1. Read the command's `jwtMintParams` off the per-request context seed and
|
|
7886
7886
|
* mint (via the parameterized SFAP resolver, routed by the dispatching
|
|
7887
7887
|
* resolver inside `sfapJwtManager`). Without mint params there is no token
|
|
7888
7888
|
* to authorize with, so leave the request untouched.
|
|
7889
|
-
* 2. Decode `
|
|
7890
|
-
* (TSE). `
|
|
7889
|
+
* 2. Decode `cdp_tse_url` from the JWT and resolve the tenant-specific endpoint
|
|
7890
|
+
* (TSE). `cdp_tse_url` is a bare host, so a scheme is prepended before parsing
|
|
7891
7891
|
* and the protocol is forced to `https:`.
|
|
7892
|
-
* 3. Only after a usable `
|
|
7892
|
+
* 3. Only after a usable `cdp_tse_url` is confirmed, attach `Authorization: Bearer
|
|
7893
7893
|
* <jwt>` and rewrite the request URL's host/protocol to the TSE.
|
|
7894
7894
|
*
|
|
7895
|
-
* **Trust boundary.** `
|
|
7895
|
+
* **Trust boundary.** `cdp_tse_url` is a claim on a first-party, server-minted JWT
|
|
7896
7896
|
* delivered over the same-origin Aura transport, so the interceptor does NOT police
|
|
7897
7897
|
* its contents (no host-suffix or format allowlist) — the routing host is the
|
|
7898
7898
|
* minting service's responsibility, and this mirrors the SFAP sibling, which
|
|
7899
7899
|
* likewise trusts the server-provided `baseUri` rewrite target. The one guard that
|
|
7900
|
-
* remains is shape hygiene: if `
|
|
7900
|
+
* remains is shape hygiene: if `cdp_tse_url` is absent/empty/non-string (org not
|
|
7901
7901
|
* CDP-provisioned, so the server's claim gate did not fire) the interceptor throws
|
|
7902
7902
|
* a developer-facing error instead of an opaque parse failure. A minted token is
|
|
7903
7903
|
* never attached until a usable host is in hand.
|
|
@@ -7933,7 +7933,7 @@ function buildData360HostRewriteInterceptor(logger) {
|
|
|
7933
7933
|
// eslint-disable-next-line @salesforce/lds/no-error-in-production
|
|
7934
7934
|
throw new Error(`Data360 fetch service: minted JWT has no usable "${CDP_URL_CLAIM}" claim; cannot route the request to a Data Cloud tenant endpoint.`);
|
|
7935
7935
|
}
|
|
7936
|
-
// `
|
|
7936
|
+
// `cdp_tse_url` is a bare host (no scheme); prepend https so `new URL`
|
|
7937
7937
|
// parses it as an origin. Force https regardless of any scheme in the
|
|
7938
7938
|
// claim — the TSE is always TLS.
|
|
7939
7939
|
const tse = new URL(`https://${cdpUrl.replace(/^[a-z]+:\/\//i, '')}`);
|
|
@@ -11554,4 +11554,4 @@ function ldsEngineCreator() {
|
|
|
11554
11554
|
}
|
|
11555
11555
|
|
|
11556
11556
|
export { LexRequestStrategy, PDL_ENGINE_REGISTRATION_ID, PdlPrefetcherEventType, PdlRequestPriority, buildPredictorForContext, configService, ldsEngineCreator as default, initializeLDS, initializeOneStore, notifyUpdateAvailableFactory, registerRequestStrategy, saveRequestAsPrediction, subscribeToPrefetcherEvents, unregisterRequestStrategy, whenPredictionsReady };
|
|
11557
|
-
// version: 1.451.0-
|
|
11557
|
+
// version: 1.451.0-dev14-2ce0dd97dc
|
|
@@ -11,14 +11,14 @@ export declare function buildJwtAuthorizedSfapFetchServiceDescriptor(logger: Log
|
|
|
11
11
|
*
|
|
12
12
|
* Unlike SFAP, the per-tenant base host is NOT returned in the mint response's
|
|
13
13
|
* `baseUri` (which is the fixed SFAP host); it rides on the minted JWT as the
|
|
14
|
-
* `
|
|
14
|
+
* `cdp_tse_url` claim. The standard `JwtRequestModifier` only receives `extraInfo`,
|
|
15
15
|
* never the decoded claims, so the host rewrite cannot be expressed as a modifier
|
|
16
16
|
* — it must read the token directly. This descriptor therefore uses a bespoke
|
|
17
17
|
* interceptor ({@link buildData360HostRewriteInterceptor}) that mints the
|
|
18
|
-
* parameterized SFAP JWT, attaches the Bearer token, decodes `
|
|
18
|
+
* parameterized SFAP JWT, attaches the Bearer token, decodes `cdp_tse_url`, and
|
|
19
19
|
* rewrites the request host to that TSE.
|
|
20
20
|
*
|
|
21
|
-
* It reuses the module's `sfapJwtManager`: `
|
|
21
|
+
* It reuses the module's `sfapJwtManager`: `cdp_tse_url` is emitted on the same
|
|
22
22
|
* `SFAP_API`-scope JWT, so the Data360 command mints the same kind of token — it
|
|
23
23
|
* just forwards the data-cloud scopes via the context-seed `jwtMintParams`.
|
|
24
24
|
*
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@salesforce/lds-runtime-one-app",
|
|
3
|
-
"version": "1.451.0-
|
|
3
|
+
"version": "1.451.0-dev14",
|
|
4
4
|
"license": "SEE LICENSE IN LICENSE.txt",
|
|
5
5
|
"description": "LDS engine for the one.app (LEX) runtime.",
|
|
6
6
|
"main": "dist/oneAppLdsEngineCreator.js",
|
|
@@ -36,15 +36,15 @@
|
|
|
36
36
|
"devDependencies": {
|
|
37
37
|
"@conduit-client/service-provisioner": "3.26.1-dev3",
|
|
38
38
|
"@conduit-client/tools-core": "3.26.1-dev3",
|
|
39
|
-
"@salesforce/lds-adapters-apex": "^1.451.0-
|
|
40
|
-
"@salesforce/lds-adapters-uiapi": "^1.451.0-
|
|
41
|
-
"@salesforce/lds-ads-bridge": "^1.451.0-
|
|
42
|
-
"@salesforce/lds-aura-storage": "^1.451.0-
|
|
43
|
-
"@salesforce/lds-bindings": "^1.451.0-
|
|
44
|
-
"@salesforce/lds-instrumentation": "^1.451.0-
|
|
45
|
-
"@salesforce/lds-network-adapter": "^1.451.0-
|
|
46
|
-
"@salesforce/lds-network-aura": "^1.451.0-
|
|
47
|
-
"@salesforce/lds-network-fetch": "^1.451.0-
|
|
39
|
+
"@salesforce/lds-adapters-apex": "^1.451.0-dev14",
|
|
40
|
+
"@salesforce/lds-adapters-uiapi": "^1.451.0-dev14",
|
|
41
|
+
"@salesforce/lds-ads-bridge": "^1.451.0-dev14",
|
|
42
|
+
"@salesforce/lds-aura-storage": "^1.451.0-dev14",
|
|
43
|
+
"@salesforce/lds-bindings": "^1.451.0-dev14",
|
|
44
|
+
"@salesforce/lds-instrumentation": "^1.451.0-dev14",
|
|
45
|
+
"@salesforce/lds-network-adapter": "^1.451.0-dev14",
|
|
46
|
+
"@salesforce/lds-network-aura": "^1.451.0-dev14",
|
|
47
|
+
"@salesforce/lds-network-fetch": "^1.451.0-dev14",
|
|
48
48
|
"jwt-encode": "1.0.1"
|
|
49
49
|
},
|
|
50
50
|
"dependencies": {
|
|
@@ -76,11 +76,11 @@
|
|
|
76
76
|
"@luvio/network-adapter-composable": "0.161.2",
|
|
77
77
|
"@luvio/network-adapter-fetch": "0.161.2",
|
|
78
78
|
"@lwc/state": "^0.29.0",
|
|
79
|
-
"@salesforce/lds-adapters-onestore-graphql": "^1.451.0-
|
|
79
|
+
"@salesforce/lds-adapters-onestore-graphql": "^1.451.0-dev14",
|
|
80
80
|
"@salesforce/lds-adapters-uiapi-lex": "^1.415.0",
|
|
81
|
-
"@salesforce/lds-durable-storage": "^1.451.0-
|
|
82
|
-
"@salesforce/lds-luvio-service": "^1.451.0-
|
|
83
|
-
"@salesforce/lds-luvio-uiapi-records-service": "^1.451.0-
|
|
81
|
+
"@salesforce/lds-durable-storage": "^1.451.0-dev14",
|
|
82
|
+
"@salesforce/lds-luvio-service": "^1.451.0-dev14",
|
|
83
|
+
"@salesforce/lds-luvio-uiapi-records-service": "^1.451.0-dev14"
|
|
84
84
|
},
|
|
85
85
|
"luvioBundlesize": [
|
|
86
86
|
{
|