@svadmin/sso 0.11.2 → 0.11.5

package/dist/auth-provider.js

@@ -85,6 +85,9 @@ function readOptionalTokenString(response, field, fallback, fallbackMessage) {
         ? fallback
         : requireTokenString(response, field, fallbackMessage);
 }
+function authorizationScheme(tokenType) {
+    return tokenType.toLowerCase() === 'bearer' ? 'Bearer' : tokenType;
+}
 function normalizeTokenResponse(body, defaults, fallbackMessage) {
     const response = readTokenResponse(body, fallbackMessage);
     const accessToken = requireTokenString(response, 'access_token', fallbackMessage);
@@ -93,7 +96,7 @@ function normalizeTokenResponse(body, defaults, fallbackMessage) {
         id_token: typeof response.id_token === 'string' ? response.id_token : defaults.idToken,
         refresh_token: readOptionalTokenString(response, 'refresh_token', defaults.refreshToken, fallbackMessage),
         expires_at: getAccessTokenExpiry(response, accessToken),
-        token_type: readOptionalTokenString(response, 'token_type', defaults.tokenType, fallbackMessage) ?? defaults.tokenType,
+        token_type: authorizationScheme(readOptionalTokenString(response, 'token_type', defaults.tokenType, fallbackMessage) ?? defaults.tokenType),
     };
 }
 function generateRandomString(length) {
@@ -349,7 +352,7 @@ export function createSSOAuthProvider(config) {
             const accessToken = await sessions.getAccessToken(options);
             const session = sessions.getSession();
             return accessToken && session?.access_token === accessToken
-                ? `${session.token_type} ${accessToken}`
+                ? `${authorizationScheme(session.token_type)} ${accessToken}`
                 : null;
         },
     };
@@ -413,9 +416,10 @@ export function createSSOAuthProvider(config) {
                 sessions.clearSession();
             }
             try {
-                const endpoints = await discover();
-                if (typeof window !== 'undefined' && endpoints.end_session_endpoint) {
-                    const logoutUrl = new URL(endpoints.end_session_endpoint, window.location.href);
+                const endSessionEndpoint = config.endSessionEndpoint
+                    ?? (await discover()).end_session_endpoint;
+                if (typeof window !== 'undefined' && endSessionEndpoint) {
+                    const logoutUrl = new URL(endSessionEndpoint, window.location.href);
                     logoutUrl.searchParams.set('client_id', config.clientId);
                     logoutUrl.searchParams.delete('id_token_hint');
                     if (session?.id_token)

package/package.json

@@ -1,12 +1,14 @@
 {
   "name": "@svadmin/sso",
-  "version": "0.11.2",
+  "version": "0.11.5",
   "type": "module",
   "description": "OIDC/OAuth2 SSO AuthProvider plugin for svadmin — supports Okta, Azure AD, Cognito, Keycloak, Google",
   "license": "MIT",
   "keywords": [
     "svadmin",
     "sso",
+    "auth",
+    "authentication",
     "oidc",
     "oauth2",
     "okta",
@@ -32,10 +34,10 @@
     "dist"
   ],
   "peerDependencies": {
-    "@svadmin/core": "^0.32.2"
+    "@svadmin/core": "^0.33.0"
   },
   "devDependencies": {
-    "typescript": "^6.0.3"
+    "typescript": "^7.0.2"
   },
   "scripts": {
     "build": "bun ../../scripts/build-node-package.ts"