@tensorgrad/oauth 0.1.0 → 0.1.1

package/README.md

@@ -45,6 +45,7 @@ console.log(TENSORGRAD_ISSUER);
 
 ```ts
 import {
+  DEFAULT_TG_SCOPES,
   TENSORGRAD_ISSUER,
   assertGrantedScopes,
   createAuthorizationUrl,
@@ -84,7 +85,7 @@ export default {
         },
         {
           redirectUri,
-          scope: ["openid", "profile", "email"],
+          scope: DEFAULT_TG_SCOPES,
           state,
           codeChallenge: pkce.codeChallenge,
           codeChallengeMethod: pkce.codeChallengeMethod
@@ -125,7 +126,7 @@ export default {
         codeVerifier
       });
 
-      assertGrantedScopes(token.scope, ["openid", "profile", "email"]);
+      assertGrantedScopes(token.scope, DEFAULT_TG_SCOPES);
 
       const userFromToken = normalizeTgUser(token.user);
       const userFromUserInfo = normalizeTgUser(
@@ -149,6 +150,7 @@ export default {
 
 - `openid` is mandatory and the library enforces that when building authorize URLs.
 - tensorGrad currently uses `https://www.tensorgrad.com` as the OAuth provider.
+- `DEFAULT_TG_SCOPES` is the recommended scope set for first-party apps.
 - `assertGrantedScopes(token.scope, ["admin"])` is the simplest way to require admin access.
 - `isAdminScopeGranted(token.scope)` is available when you only need a boolean check.
 - app session and logout handling stay in the consuming app.

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export declare const TENSORGRAD_ISSUER = "https://www.tensorgrad.com";
+export declare const DEFAULT_TG_SCOPES: readonly ["openid", "profile", "email"];
 export interface tgOAuthConfig {
     issuer: string;
     clientId: string;

package/dist/index.js

@@ -1,4 +1,5 @@
 export const TENSORGRAD_ISSUER = "https://www.tensorgrad.com";
+export const DEFAULT_TG_SCOPES = ["openid", "profile", "email"];
 const MIN_STATE_BYTES = 16;
 const MAX_RANDOM_BYTES = 96;
 const MIN_PKCE_RANDOM_BYTES = 32;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tensorgrad/oauth",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Small OAuth client SDK for tensorGrad SSO integrations.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,6 +27,10 @@
     "tensorgrad",
     "sso"
   ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tensorGrad/tgAuth"
+  },
   "license": "MIT",
   "devDependencies": {
     "typescript": "^5.9.2"