@tomato414941/foundation 0.6.0 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/guide.mjs +10 -5
  2. package/package.json +1 -1
package/guide.mjs CHANGED
@@ -104,12 +104,17 @@ export function guide(connectors) {
104
104
  ' scopes are the service\'s own names for what the connection may do (see each connector\'s scopes.documentation_url).',
105
105
  ' Ask for what the work needs; the owner sees each one before agreeing, and decides. Foundation adds only the few',
106
106
  ' it needs to know who authorized (scopes.base). facts.missing_scopes lists any the service did not grant.',
107
- ' The owner may connect with an OAuth app of their own instead of Foundation\'s (own_client in GET /v1/connectors):',
108
- ' add "client":{"client_id":"<name>","client_secret":"<name>"} naming the given grants that hold its ID and',
109
- ' secret (eBay also "ru_name"). Ask for those with a store request first. The app\'s redirect URL is',
110
- ' <this server>/oauth/<connector id>/callback. With their own app, the owner also decides which scopes can exist.',
107
+ ' A connection is made through an OAuth app: Foundation\'s own for the service, or one the owner holds (or was lent).',
108
+ ' GET /v1/holdings?kind=app the apps the owner may connect through, Foundation\'s included (foundation: true).',
109
+ ' Add "app":"<app id>" inside input to connect through one; without it, Foundation\'s is used, or on reconnecting,',
110
+ ' the app the connection was made through. With their own app the owner decides at the service which scopes can',
111
+ ' be granted at all, and what name the consent screen shows.',
112
+ ' POST /v1/requests {"kind":"app", "input":{"connector":"<id>"}, "purpose":"...", "steps":["..."]} asks the owner',
113
+ ' to register one: they make it at the service (redirect URL <this server>/oauth/<connector id>/callback) and',
114
+ ' type its client ID and secret on the page. result.app_id names it. You never see or handle its secret.',
115
+ ' GET /v1/connectors says which connectors take apps (apps.fields: what registering one asks for).',
111
116
  ' To reconnect, add "connection_id":"<existing id>" inside input. This updates that connection and keeps its id,',
112
- ' its scopes (add more with scopes) and the app it was made with.',
117
+ ' its scopes (add more with scopes) and the app it was made through.',
113
118
  ' Without connection_id, authorization creates a separate connection, even for the same service user. List and use',
114
119
  ' an existing connection when no new authorization is needed. Provider consent and revocation may affect several connections.',
115
120
  ' A connector whose flow is "role" (aws.role) has the owner make a role for Foundation in their own console and',
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@tomato414941/foundation",
3
- "version": "0.6.0",
3
+ "version": "0.7.0",
4
4
  "description": "Foundation CLI: make a key, and hand what is kept to a command without it passing through the agent.",
5
5
  "type": "module",
6
6
  "engines": {