@urun-sh/next 0.2.54 → 0.2.56
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/dist/index.cjs +3 -3
- package/dist/index.d.cts +2 -1
- package/dist/index.js +3 -3
- package/package.json +1 -1
package/dist/index.d.cts
CHANGED
|
@@ -55,7 +55,8 @@ declare function resolveCredential(env?: Record<string, string | undefined>): Pr
|
|
|
55
55
|
* SECURITY MODEL of the per-request body: the browser may only NARROW the
|
|
56
56
|
* scope your options configured — request a SUBSET of a configured function /
|
|
57
57
|
* origin allowlist, LOWER the expiry, and maxSessionS folds by MIN. It can
|
|
58
|
-
* never widen anything,
|
|
58
|
+
* never widen anything, it can never choose its own `subject`, and it can
|
|
59
|
+
* never declare `dev` mode (server-side only — see `URUN_DEV`). Identity
|
|
59
60
|
* is server-derived: `options.subject` when configured, otherwise the ONE
|
|
60
61
|
* fixed {@link DEFAULT_ONRAMP_SUBJECT} — the dev/single-identity setup, where
|
|
61
62
|
* every tab and browser is the SAME user sharing ONE session. Real multi-user
|