@shipfox/api-auth-dto 10.2.0 → 12.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.turbo/turbo-build.log +1 -1
- package/CHANGELOG.md +10 -0
- package/dist/schemas/job-lease-token.d.ts +1 -1
- package/dist/schemas/job-lease-token.js +1 -1
- package/dist/schemas/job-lease-token.js.map +1 -1
- package/dist/tsconfig.test.tsbuildinfo +1 -1
- package/package.json +3 -3
- package/src/schemas/job-lease-token.ts +1 -1
- package/tsconfig.build.tsbuildinfo +1 -1
package/.turbo/turbo-build.log
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
$ shipfox-swc
|
|
2
|
-
Successfully compiled: 10 files with swc (
|
|
2
|
+
Successfully compiled: 10 files with swc (222.61ms)
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,15 @@
|
|
|
1
1
|
# @shipfox/api-auth-dto
|
|
2
2
|
|
|
3
|
+
## 12.0.0
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- f78740d: Remove Unicode dash punctuation from package prose and source comments.
|
|
8
|
+
- Updated dependencies [f78740d]
|
|
9
|
+
- Updated dependencies [34a5639]
|
|
10
|
+
- @shipfox/api-common-dto@12.0.0
|
|
11
|
+
- @shipfox/inter-module@0.2.3
|
|
12
|
+
|
|
3
13
|
## 10.2.0
|
|
4
14
|
|
|
5
15
|
### Minor Changes
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
2
|
/**
|
|
3
3
|
* Audience claim binding a token to the job-lease use case. Distinct from auth
|
|
4
|
-
* tokens (separate secret)
|
|
4
|
+
* tokens (separate secret): this is defense-in-depth so the two token classes stay
|
|
5
5
|
* non-interchangeable even if a verifier is ever misconfigured.
|
|
6
6
|
*/
|
|
7
7
|
export declare const JOB_LEASE_TOKEN_AUDIENCE = "runner-job-lease";
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
2
|
/**
|
|
3
3
|
* Audience claim binding a token to the job-lease use case. Distinct from auth
|
|
4
|
-
* tokens (separate secret)
|
|
4
|
+
* tokens (separate secret): this is defense-in-depth so the two token classes stay
|
|
5
5
|
* non-interchangeable even if a verifier is ever misconfigured.
|
|
6
6
|
*/ export const JOB_LEASE_TOKEN_AUDIENCE = 'runner-job-lease';
|
|
7
7
|
export const jobLeaseTokenClaimsSchema = z.object({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../../src/schemas/job-lease-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to the job-lease use case. Distinct from auth\n * tokens (separate secret)
|
|
1
|
+
{"version":3,"sources":["../../src/schemas/job-lease-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to the job-lease use case. Distinct from auth\n * tokens (separate secret): this is defense-in-depth so the two token classes stay\n * non-interchangeable even if a verifier is ever misconfigured.\n */\nexport const JOB_LEASE_TOKEN_AUDIENCE = 'runner-job-lease';\n\nexport const jobLeaseTokenClaimsSchema = z.object({\n workflowRunId: z.string().uuid(),\n workflowRunAttempt: z.number().int().positive().optional(),\n workflowRunAttemptId: z.string().uuid(),\n jobId: z.string().uuid(),\n jobExecutionId: z.string().uuid(),\n projectId: z.string().uuid(),\n workspaceId: z.string().uuid(),\n runnerSessionId: z.string().uuid(),\n // Narrows append-log authorization to the step attempt currently dispatched to the runner.\n currentStepId: z.string().uuid().optional(),\n currentStepAttempt: z.number().int().positive().optional(),\n aud: z.literal(JOB_LEASE_TOKEN_AUDIENCE),\n iat: z.number().int(),\n exp: z.number().int(),\n});\n\nexport type JobLeaseTokenClaims = z.infer<typeof jobLeaseTokenClaimsSchema>;\n"],"names":["z","JOB_LEASE_TOKEN_AUDIENCE","jobLeaseTokenClaimsSchema","object","workflowRunId","string","uuid","workflowRunAttempt","number","int","positive","optional","workflowRunAttemptId","jobId","jobExecutionId","projectId","workspaceId","runnerSessionId","currentStepId","currentStepAttempt","aud","literal","iat","exp"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB;;;;CAIC,GACD,OAAO,MAAMC,2BAA2B,mBAAmB;AAE3D,OAAO,MAAMC,4BAA4BF,EAAEG,MAAM,CAAC;IAChDC,eAAeJ,EAAEK,MAAM,GAAGC,IAAI;IAC9BC,oBAAoBP,EAAEQ,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IACxDC,sBAAsBZ,EAAEK,MAAM,GAAGC,IAAI;IACrCO,OAAOb,EAAEK,MAAM,GAAGC,IAAI;IACtBQ,gBAAgBd,EAAEK,MAAM,GAAGC,IAAI;IAC/BS,WAAWf,EAAEK,MAAM,GAAGC,IAAI;IAC1BU,aAAahB,EAAEK,MAAM,GAAGC,IAAI;IAC5BW,iBAAiBjB,EAAEK,MAAM,GAAGC,IAAI;IAChC,2FAA2F;IAC3FY,eAAelB,EAAEK,MAAM,GAAGC,IAAI,GAAGK,QAAQ;IACzCQ,oBAAoBnB,EAAEQ,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IACxDS,KAAKpB,EAAEqB,OAAO,CAACpB;IACfqB,KAAKtB,EAAEQ,MAAM,GAAGC,GAAG;IACnBc,KAAKvB,EAAEQ,MAAM,GAAGC,GAAG;AACrB,GAAG"}
|