@sebspark/gcp-iam 0.4.1 → 1.1.0

package/dist/index.d.mts

@@ -8,11 +8,22 @@ import { Logger } from 'winston';
  * @param logger An optional logger to use for logging.
  * @returns A JWT.
  */
-declare const getApiGatewayToken: ({ apiURL, key, ttl, logger, }: {
+declare const getApiGatewayTokenByUrl: ({ apiURL, key, ttl, logger, }: {
     apiURL: string;
     key?: string;
     ttl?: number;
     logger?: Logger;
 }) => Promise<string>;
+/**
+ *
+ * @param key Clears a cached JWT by key.
+ */
+declare const clearCache: (key: string) => Promise<void>;
+/**
+ * Generates a JWT for the API Gateway, using Client ID as audience.
+ * @param clientId OAUTH Client ID.
+ * @returns ID Token.
+ */
+declare const getApiGatewayTokenByClientId: (clientId: string, logger?: Logger) => Promise<string>;
 
-export { getApiGatewayToken };
+export { clearCache, getApiGatewayTokenByClientId, getApiGatewayTokenByUrl };

package/dist/index.d.ts

@@ -8,11 +8,22 @@ import { Logger } from 'winston';
  * @param logger An optional logger to use for logging.
  * @returns A JWT.
  */
-declare const getApiGatewayToken: ({ apiURL, key, ttl, logger, }: {
+declare const getApiGatewayTokenByUrl: ({ apiURL, key, ttl, logger, }: {
     apiURL: string;
     key?: string;
     ttl?: number;
     logger?: Logger;
 }) => Promise<string>;
+/**
+ *
+ * @param key Clears a cached JWT by key.
+ */
+declare const clearCache: (key: string) => Promise<void>;
+/**
+ * Generates a JWT for the API Gateway, using Client ID as audience.
+ * @param clientId OAUTH Client ID.
+ * @returns ID Token.
+ */
+declare const getApiGatewayTokenByClientId: (clientId: string, logger?: Logger) => Promise<string>;
 
-export { getApiGatewayToken };
+export { clearCache, getApiGatewayTokenByClientId, getApiGatewayTokenByUrl };

package/dist/index.js

@@ -20,7 +20,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
-  getApiGatewayToken: () => getApiGatewayToken
+  clearCache: () => clearCache,
+  getApiGatewayTokenByClientId: () => getApiGatewayTokenByClientId,
+  getApiGatewayTokenByUrl: () => getApiGatewayTokenByUrl
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -62,12 +64,15 @@ var LruCache = class {
       ttl: ttl || this.defaultTTL
     });
   }
+  clear(key) {
+    this.values.delete(key);
+  }
 };
 
 // src/apiGatewayToken.ts
 var expInSeconds = 60 * 60;
 var apiGatewayJwtCache = new LruCache();
-var getApiGatewayToken = async ({
+var getApiGatewayTokenByUrl = async ({
   apiURL,
   key,
   ttl,
@@ -120,7 +125,26 @@ var getApiGatewayToken = async ({
     return signedJWT;
   } catch (error) {
     if (process.env.GCP_IAM_SOFT_FAIL === "true") {
-      logger?.warn("Soft fail enabled, returning empty JWT");
+      logger?.info("Soft fail enabled, returning empty JWT");
+      return "";
+    }
+    logger?.error("Error generating system JWT", error);
+    throw new Error(`Error generating system JWT: ${JSON.stringify(error)}`);
+  }
+};
+var clearCache = async (key) => {
+  apiGatewayJwtCache.clear(key);
+};
+var getApiGatewayTokenByClientId = async (clientId, logger) => {
+  try {
+    const auth = new import_google_auth_library.GoogleAuth({
+      scopes: "https://www.googleapis.com/auth/cloud-platform"
+    });
+    const client = await auth.getIdTokenClient(clientId);
+    return await client.idTokenProvider.fetchIdToken(clientId);
+  } catch (error) {
+    if (process.env.GCP_IAM_SOFT_FAIL === "true") {
+      logger?.info("Soft fail enabled, returning empty JWT");
       return "";
     }
     logger?.error("Error generating system JWT", error);
@@ -129,5 +153,7 @@ var getApiGatewayToken = async ({
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  getApiGatewayToken
+  clearCache,
+  getApiGatewayTokenByClientId,
+  getApiGatewayTokenByUrl
 });

package/dist/index.mjs

@@ -36,12 +36,15 @@ var LruCache = class {
       ttl: ttl || this.defaultTTL
     });
   }
+  clear(key) {
+    this.values.delete(key);
+  }
 };
 
 // src/apiGatewayToken.ts
 var expInSeconds = 60 * 60;
 var apiGatewayJwtCache = new LruCache();
-var getApiGatewayToken = async ({
+var getApiGatewayTokenByUrl = async ({
   apiURL,
   key,
   ttl,
@@ -94,7 +97,26 @@ var getApiGatewayToken = async ({
     return signedJWT;
   } catch (error) {
     if (process.env.GCP_IAM_SOFT_FAIL === "true") {
-      logger?.warn("Soft fail enabled, returning empty JWT");
+      logger?.info("Soft fail enabled, returning empty JWT");
+      return "";
+    }
+    logger?.error("Error generating system JWT", error);
+    throw new Error(`Error generating system JWT: ${JSON.stringify(error)}`);
+  }
+};
+var clearCache = async (key) => {
+  apiGatewayJwtCache.clear(key);
+};
+var getApiGatewayTokenByClientId = async (clientId, logger) => {
+  try {
+    const auth = new GoogleAuth({
+      scopes: "https://www.googleapis.com/auth/cloud-platform"
+    });
+    const client = await auth.getIdTokenClient(clientId);
+    return await client.idTokenProvider.fetchIdToken(clientId);
+  } catch (error) {
+    if (process.env.GCP_IAM_SOFT_FAIL === "true") {
+      logger?.info("Soft fail enabled, returning empty JWT");
       return "";
     }
     logger?.error("Error generating system JWT", error);
@@ -102,5 +124,7 @@ var getApiGatewayToken = async ({
   }
 };
 export {
-  getApiGatewayToken
+  clearCache,
+  getApiGatewayTokenByClientId,
+  getApiGatewayTokenByUrl
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebspark/gcp-iam",
-  "version": "0.4.1",
+  "version": "1.1.0",
   "license": "Apache-2.0",
   "main": "dist/index.js",
   "module": "dist/index.mjs",