@uipath/auth 1.202.1-preview.220 → 1.202.1-preview.239

package/dist/index.browser.d.ts

@@ -4,7 +4,7 @@ export * from "./clientCredentials";
 export { type AuthFileConfig, InvalidBaseUrlError, setAuthFileConfig, } from "./config";
 export * from "./loginStatus";
 export * from "./logout";
-export { type IdentityType, parseAuthFlow, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
+export { type IdentityType, parseAuthFlow, readTokenScopes, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
 export { fetchTenantsAndOrganizations, type Tenant, type TenantsAndOrganizations, } from "./tenantSelection";
 export * from "./tokenRefresh";
 export { AUTH_FLOW_ENV_VAR, type AuthFlow, type BaseCredentials, } from "./types";

package/dist/index.browser.js

@@ -18518,6 +18518,12 @@ var resolveSessionIdentity = (accessToken, authFlow) => {
     identity.clientId = clientId;
   return identity;
 };
+var pickScopes = (claims) => {
+  const raw = claims?.scope;
+  const scopes = Array.isArray(raw) ? raw.filter((entry) => asString(entry) !== undefined) : typeof raw === "string" ? raw.split(/\s+/).filter(Boolean) : [];
+  return scopes.length > 0 ? scopes : undefined;
+};
+var readTokenScopes = (accessToken) => accessToken ? pickScopes(decodeClaims(accessToken)) : undefined;
 
 // src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
@@ -19765,6 +19771,7 @@ export {
   normalizeAuthProfileName,
   parseAuthFlow,
   parseJWT,
+  readTokenScopes,
   refreshAccessToken,
   resolveAuthProfileFilePath,
   resolveEnvFileLocationAsync,
@@ -19776,4 +19783,4 @@ export {
   setAuthFileConfig
 };
 
-//# debugId=2C66658C2F43E99364756E2164756E21
+//# debugId=F64954E7CFABA2DF64756E2164756E21

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export * from "./logout";
 export { clearRefreshBreaker, loadRefreshBreaker, type RefreshBreakerState, refreshTokenFingerprint, saveRefreshBreaker, } from "./refreshCircuitBreaker";
 export { type RobotClientModuleLoader, registerRobotClientLoader, } from "./robotClientFallback";
 export { INVALID_TENANT_CODE, InvalidTenantError, isTenantSelectionError, type SelectFromList, selectTenantWithDeps, TENANT_SELECTION_REQUIRED_CODE, TenantSelectionError, TenantSelectionRequiredError, } from "./selectTenant";
-export { type IdentityType, parseAuthFlow, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
+export { type IdentityType, parseAuthFlow, readTokenScopes, resolveSessionIdentity, type SessionIdentity, } from "./sessionIdentity";
 export { fetchTenantsAndOrganizations, type Tenant, type TenantsAndOrganizations, } from "./tenantSelection";
 export * from "./tokenRefresh";
 export { AUTH_FLOW_ENV_VAR, type AuthFlow, type BaseCredentials, } from "./types";

package/dist/index.js

@@ -2181,6 +2181,12 @@ var resolveSessionIdentity = (accessToken, authFlow) => {
     identity.clientId = clientId;
   return identity;
 };
+var pickScopes = (claims) => {
+  const raw = claims?.scope;
+  const scopes = Array.isArray(raw) ? raw.filter((entry) => asString(entry) !== undefined) : typeof raw === "string" ? raw.split(/\s+/).filter(Boolean) : [];
+  return scopes.length > 0 ? scopes : undefined;
+};
+var readTokenScopes = (accessToken) => accessToken ? pickScopes(decodeClaims(accessToken)) : undefined;
 
 // src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
@@ -3868,6 +3874,7 @@ export {
   parseAuthFlow,
   parseJWT,
   readAuthFromEnv,
+  readTokenScopes,
   refreshAccessToken,
   refreshTokenFingerprint,
   registerRobotClientLoader,
@@ -3883,4 +3890,4 @@ export {
   setAuthFileConfig
 };
 
-//# debugId=8ECD0F0A4A5E19F264756E2164756E21
+//# debugId=1E63E8BE4956323C64756E2164756E21

package/dist/sessionIdentity.d.ts

@@ -33,3 +33,15 @@ export declare const parseAuthFlow: (value: string | undefined) => AuthFlow | un
  * omit the fields than to guess at who is acting.
  */
 export declare const resolveSessionIdentity: (accessToken: string | undefined, authFlow?: AuthFlow) => SessionIdentity | undefined;
+/**
+ * Scopes carried by an access token, in the order Identity returned them.
+ *
+ * Deliberately independent of {@link resolveSessionIdentity}: a token can
+ * carry a `scope` claim while saying too little to name who is acting — no
+ * `sub_type`, no user claims, no known flow — and those are exactly the
+ * sessions that are hardest to diagnose.
+ *
+ * Read from an *unverified* claim (base64 decode, no signature check), for
+ * display only. Never branch on it for an authorization decision.
+ */
+export declare const readTokenScopes: (accessToken: string | undefined) => string[] | undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@uipath/auth",
     "license": "SEE LICENSE IN LICENSE.txt",
-    "version": "1.202.1-preview.220",
+    "version": "1.202.1-preview.239",
     "repository": {
         "type": "git",
         "url": "https://github.com/UiPath/cli.git",
@@ -37,5 +37,5 @@
         "mihaigirleanu",
         "vlad-uipath"
     ],
-    "gitHead": "a09041733b628c3f6b658a1f58349ea0f40bb492"
+    "gitHead": "97545a7857bdff7e6db62bbe13c6097607cf38f1"
 }