@structured-id/ui-core 1.1.0 → 1.3.0

package/src/generated/sid/v1/authn/system_integration.client.ts

@@ -0,0 +1,73 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/authn/system_integration.proto" (package "sid.v1.authn", syntax proto3)
+// tslint:disable
+import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
+import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
+import { SystemIntegrationService } from "./system_integration";
+import { stackIntercept } from "@protobuf-ts/runtime-rpc";
+import type { AccountConnection } from "./system_integration";
+import type { GetAccountConnectionRequest } from "./system_integration";
+import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
+import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
+/**
+ * SystemIntegrationService gives a system integration's backend its
+ * connection details, so an operator never copies issuer handles or client
+ * identifiers by hand.
+ *
+ * Internal only, no HTTP annotation: the account BFF calls it over the
+ * deployment's gRPC channel to SID.
+ *
+ * @generated from protobuf service sid.v1.authn.SystemIntegrationService
+ */
+export interface ISystemIntegrationServiceClient {
+    /**
+     * The connection details of the account integration (SID's own account
+     * UI), for its BFF. The request proves possession of one of the account
+     * client's registered keys; the answer is public metadata only, no secret
+     * is distributed and the private key never leaves the BFF.
+     *
+     * An invalid, expired, replayed or unregistered proof is UNAUTHENTICATED
+     * (TOKEN_INVALID). An integration that is not provisioned, or whose client
+     * an administrator disabled, is FAILED_PRECONDITION
+     * (SYSTEM_INTEGRATION_UNAVAILABLE): the BFF is not ready and serves no
+     * sign-in until it is.
+     *
+     * @generated from protobuf rpc: GetAccountConnection
+     */
+    getAccountConnection(input: GetAccountConnectionRequest, options?: RpcOptions): UnaryCall<GetAccountConnectionRequest, AccountConnection>;
+}
+/**
+ * SystemIntegrationService gives a system integration's backend its
+ * connection details, so an operator never copies issuer handles or client
+ * identifiers by hand.
+ *
+ * Internal only, no HTTP annotation: the account BFF calls it over the
+ * deployment's gRPC channel to SID.
+ *
+ * @generated from protobuf service sid.v1.authn.SystemIntegrationService
+ */
+export class SystemIntegrationServiceClient implements ISystemIntegrationServiceClient, ServiceInfo {
+    typeName = SystemIntegrationService.typeName;
+    methods = SystemIntegrationService.methods;
+    options = SystemIntegrationService.options;
+    constructor(private readonly _transport: RpcTransport) {
+    }
+    /**
+     * The connection details of the account integration (SID's own account
+     * UI), for its BFF. The request proves possession of one of the account
+     * client's registered keys; the answer is public metadata only, no secret
+     * is distributed and the private key never leaves the BFF.
+     *
+     * An invalid, expired, replayed or unregistered proof is UNAUTHENTICATED
+     * (TOKEN_INVALID). An integration that is not provisioned, or whose client
+     * an administrator disabled, is FAILED_PRECONDITION
+     * (SYSTEM_INTEGRATION_UNAVAILABLE): the BFF is not ready and serves no
+     * sign-in until it is.
+     *
+     * @generated from protobuf rpc: GetAccountConnection
+     */
+    getAccountConnection(input: GetAccountConnectionRequest, options?: RpcOptions): UnaryCall<GetAccountConnectionRequest, AccountConnection> {
+        const method = this.methods[0], opt = this._transport.mergeOptions(options);
+        return stackIntercept<GetAccountConnectionRequest, AccountConnection>("unary", this._transport, method, opt, input);
+    }
+}

package/src/generated/sid/v1/authn/system_integration.ts

@@ -0,0 +1,218 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/authn/system_integration.proto" (package "sid.v1.authn", syntax proto3)
+// tslint:disable
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+/**
+ * @generated from protobuf message sid.v1.authn.GetAccountConnectionRequest
+ */
+export interface GetAccountConnectionRequest {
+    /**
+     * A JWT (RFC 7519) the BFF signs, per request, with the private key of one
+     * of the account client's registered keys, named by the JWS `kid` header.
+     * Claims: `iss` and `sub` both equal that `kid`; `aud` is the installation
+     * URL followed by `/account/connection`; `exp` at most five minutes ahead;
+     * a unique `jti`, accepted once. Carries no secret.
+     *
+     * @generated from protobuf field: string proof = 1
+     */
+    proof: string;
+}
+/**
+ * What the account BFF needs to sign users in and call the account API.
+ *
+ * @generated from protobuf message sid.v1.authn.AccountConnection
+ */
+export interface AccountConnection {
+    /**
+     * Exact issuer identifier the account client is registered under, the
+     * canonical URL `https://<host>/i/<handle>`. The BFF discovers its
+     * endpoints at `<issuer>/.well-known/openid-configuration` and accepts only
+     * authorization responses and tokens naming this issuer (RFC 9207 §2.4).
+     *
+     * @generated from protobuf field: string issuer = 1
+     */
+    issuer: string;
+    /**
+     * The account web client's `client_id`, assigned at provisioning and never
+     * changed; the `iss` and `sub` of its token endpoint assertions.
+     *
+     * @generated from protobuf field: string client_id = 2
+     */
+    clientId: string;
+    /**
+     * Resource indicator of the account API (RFC 8707 §2): the `resource` the
+     * BFF requests and the `aud` of the access tokens it obtains.
+     *
+     * @generated from protobuf field: string resource = 3
+     */
+    resource: string;
+    /**
+     * Scopes the BFF requests: sign-in scopes and the account API's.
+     *
+     * @generated from protobuf field: repeated string scopes = 4
+     */
+    scopes: string[];
+    /**
+     * The client's registered redirect URI, the BFF's callback on the account
+     * origin; an authorization request naming another is refused.
+     *
+     * @generated from protobuf field: string redirect_uri = 5
+     */
+    redirectUri: string;
+    /**
+     * How the client authenticates at the token endpoint (RFC 7591 §2):
+     * always `private_key_jwt`.
+     *
+     * @generated from protobuf field: string token_endpoint_auth_method = 6
+     */
+    tokenEndpointAuthMethod: string;
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class GetAccountConnectionRequest$Type extends MessageType<GetAccountConnectionRequest> {
+    constructor() {
+        super("sid.v1.authn.GetAccountConnectionRequest", [
+            { no: 1, name: "proof", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetAccountConnectionRequest>): GetAccountConnectionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.proof = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetAccountConnectionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetAccountConnectionRequest): GetAccountConnectionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string proof */ 1:
+                    message.proof = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetAccountConnectionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string proof = 1; */
+        if (message.proof !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.proof);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.GetAccountConnectionRequest
+ */
+export const GetAccountConnectionRequest = new GetAccountConnectionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AccountConnection$Type extends MessageType<AccountConnection> {
+    constructor() {
+        super("sid.v1.authn.AccountConnection", [
+            { no: 1, name: "issuer", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "resource", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "redirect_uri", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "token_endpoint_auth_method", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AccountConnection>): AccountConnection {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.issuer = "";
+        message.clientId = "";
+        message.resource = "";
+        message.scopes = [];
+        message.redirectUri = "";
+        message.tokenEndpointAuthMethod = "";
+        if (value !== undefined)
+            reflectionMergePartial<AccountConnection>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccountConnection): AccountConnection {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string issuer */ 1:
+                    message.issuer = reader.string();
+                    break;
+                case /* string client_id */ 2:
+                    message.clientId = reader.string();
+                    break;
+                case /* string resource */ 3:
+                    message.resource = reader.string();
+                    break;
+                case /* repeated string scopes */ 4:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* string redirect_uri */ 5:
+                    message.redirectUri = reader.string();
+                    break;
+                case /* string token_endpoint_auth_method */ 6:
+                    message.tokenEndpointAuthMethod = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AccountConnection, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string issuer = 1; */
+        if (message.issuer !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.issuer);
+        /* string client_id = 2; */
+        if (message.clientId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.clientId);
+        /* string resource = 3; */
+        if (message.resource !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.resource);
+        /* repeated string scopes = 4; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(4, WireType.LengthDelimited).string(message.scopes[i]);
+        /* string redirect_uri = 5; */
+        if (message.redirectUri !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.redirectUri);
+        /* string token_endpoint_auth_method = 6; */
+        if (message.tokenEndpointAuthMethod !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.tokenEndpointAuthMethod);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.AccountConnection
+ */
+export const AccountConnection = new AccountConnection$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.authn.SystemIntegrationService
+ */
+export const SystemIntegrationService = new ServiceType("sid.v1.authn.SystemIntegrationService", [
+    { name: "GetAccountConnection", options: {}, I: GetAccountConnectionRequest, O: AccountConnection }
+]);