@volter/twin-googleoauth 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -31,6 +31,12 @@
|
|
|
31
31
|
// for a replay.
|
|
32
32
|
import { applyTwinWrite, projectResources } from '@volter/world-core';
|
|
33
33
|
export const SERVICE = 'googleoauth';
|
|
34
|
+
// THE CONTRACT OTHER PACKS READ (architecture A3: Google's credentials, issued here, authorize the Google API packs,
|
|
35
|
+
// which read these rows through the kernel's `projectOwnerResources('googleoauth', root)`, never import this pack and
|
|
36
|
+
// never write them; googlecalendar's semantics/shared.ts is the reader). Renaming a field here breaks them:
|
|
37
|
+
// access_token id = the token itself { clientId, sub, scope (space-separated), expiresAt (epoch seconds), revoked,
|
|
38
|
+
// serviceAccountEmail (a JWT-bearer grant's token: no account row) }
|
|
39
|
+
// account id = the account's sub { email, name, … }
|
|
34
40
|
export const RESOURCE_TYPES = [
|
|
35
41
|
'oauth_client',
|
|
36
42
|
'account',
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@volter/twin-googleoauth",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.1",
|
|
4
4
|
"description": "Local Google OAuth 2.0 / OpenID Connect twin — the real consent screen, the real authorization-code round trip, and real RS256 id_tokens an unmodified OAuth client library completes a full flow against. Built on @volter/world-core.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"twin",
|
|
@@ -57,10 +57,10 @@
|
|
|
57
57
|
"react-dom": "^19.2.7"
|
|
58
58
|
},
|
|
59
59
|
"peerDependencies": {
|
|
60
|
-
"@volter/world-core": "2.0.
|
|
60
|
+
"@volter/world-core": "2.0.1"
|
|
61
61
|
},
|
|
62
62
|
"devDependencies": {
|
|
63
|
-
"@volter/world-core": "2.0.
|
|
63
|
+
"@volter/world-core": "2.0.1",
|
|
64
64
|
"@volter/world-tooling": "0.1.0",
|
|
65
65
|
"google-auth-library": "^9.15.1",
|
|
66
66
|
"@types/bun": "^1.2.20",
|
package/src/googleoauth-store.ts
CHANGED
|
@@ -33,6 +33,13 @@ import { applyTwinWrite, projectResources, type TwinResource } from '@volter/wor
|
|
|
33
33
|
|
|
34
34
|
export const SERVICE = 'googleoauth';
|
|
35
35
|
|
|
36
|
+
// THE CONTRACT OTHER PACKS READ (architecture A3: Google's credentials, issued here, authorize the Google API packs,
|
|
37
|
+
// which read these rows through the kernel's `projectOwnerResources('googleoauth', root)`, never import this pack and
|
|
38
|
+
// never write them; googlecalendar's semantics/shared.ts is the reader). Renaming a field here breaks them:
|
|
39
|
+
// access_token id = the token itself { clientId, sub, scope (space-separated), expiresAt (epoch seconds), revoked,
|
|
40
|
+
// serviceAccountEmail (a JWT-bearer grant's token: no account row) }
|
|
41
|
+
// account id = the account's sub { email, name, … }
|
|
42
|
+
|
|
36
43
|
export const RESOURCE_TYPES = [
|
|
37
44
|
'oauth_client',
|
|
38
45
|
'account',
|