@webda/auth 4.0.0-beta.12 → 4.0.0-beta.13

package/webda.module.json

@@ -255,6 +255,10 @@
             },
             "type": "array"
           },
+          "baseUrl": {
+            "description": "Optional canonical origin (e.g. \"https://api.example.com\") used to build emailed verification and recovery links\ninstead of trusting the request Host header",
+            "type": "string"
+          },
           "mailer": {
             "default": "Mailer",
             "description": "Mailer service name",
@@ -559,7 +563,14 @@
     },
     "Authentication.providers.input": {
       "type": "object",
-      "properties": {}
+      "properties": {},
+      "x-webda-rest": {
+        "method": "get",
+        "template": "auth/providers",
+        "path": [],
+        "query": [],
+        "body": []
+      }
     },
     "Authentication.providers.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -601,14 +612,28 @@
     },
     "Authentication.me.input": {
       "type": "object",
-      "properties": {}
+      "properties": {},
+      "x-webda-rest": {
+        "method": "get",
+        "template": "auth/me",
+        "path": [],
+        "query": [],
+        "body": []
+      }
     },
     "Authentication.me.output": {
       "$schema": "http://json-schema.org/draft-07/schema#"
     },
     "Authentication.logout.input": {
       "type": "object",
-      "properties": {}
+      "properties": {},
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/logout",
+        "path": [],
+        "query": [],
+        "body": []
+      }
     },
     "Authentication.logout.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -623,7 +648,16 @@
       },
       "required": [
         "refreshToken"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/refresh",
+        "path": [],
+        "query": [],
+        "body": [
+          "refreshToken"
+        ]
+      }
     },
     "Authentication.refresh.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -649,7 +683,14 @@
     },
     "Authentication.idents.input": {
       "type": "object",
-      "properties": {}
+      "properties": {},
+      "x-webda-rest": {
+        "method": "get",
+        "template": "auth/idents",
+        "path": [],
+        "query": [],
+        "body": []
+      }
     },
     "Authentication.idents.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -700,7 +741,17 @@
       "required": [
         "provider",
         "providerUid"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/idents/unlink",
+        "path": [],
+        "query": [],
+        "body": [
+          "provider",
+          "providerUid"
+        ]
+      }
     },
     "Authentication.unlink.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -708,7 +759,14 @@
     },
     "CertificateProvider.link.input": {
       "type": "object",
-      "properties": {}
+      "properties": {},
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/certificate/link",
+        "path": [],
+        "query": [],
+        "body": []
+      }
     },
     "CertificateProvider.link.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -796,7 +854,17 @@
       "required": [
         "email",
         "password"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/email/login",
+        "path": [],
+        "query": [],
+        "body": [
+          "email",
+          "password"
+        ]
+      }
     },
     "EmailPasswordProvider.login.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -873,7 +941,19 @@
       "required": [
         "email",
         "password"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/email/register",
+        "path": [],
+        "query": [],
+        "body": [
+          "email",
+          "password",
+          "token",
+          "profile"
+        ]
+      }
     },
     "EmailPasswordProvider.register.output": {
       "$schema": "http://json-schema.org/draft-07/schema#"
@@ -887,7 +967,16 @@
       },
       "required": [
         "email"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/email/verification",
+        "path": [],
+        "query": [],
+        "body": [
+          "email"
+        ]
+      }
     },
     "EmailPasswordProvider.startVerification.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -902,7 +991,16 @@
       },
       "required": [
         "token"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/email/verify",
+        "path": [],
+        "query": [],
+        "body": [
+          "token"
+        ]
+      }
     },
     "EmailPasswordProvider.verify.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -927,7 +1025,16 @@
       },
       "required": [
         "email"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/password/recovery",
+        "path": [],
+        "query": [],
+        "body": [
+          "email"
+        ]
+      }
     },
     "EmailPasswordProvider.startRecovery.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -946,7 +1053,17 @@
       "required": [
         "token",
         "password"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/password/recover",
+        "path": [],
+        "query": [],
+        "body": [
+          "token",
+          "password"
+        ]
+      }
     },
     "EmailPasswordProvider.recover.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",
@@ -960,12 +1077,75 @@
         },
         "next": {
           "type": "string"
+        },
+        "escrow": {
+          "additionalProperties": false,
+          "description": "Keyring key wrapped by a KDF-derived KEK (AES-GCM), the parameters are stored so they can evolve\n\n`kid` is the active key the keyring was encrypted for when the escrow was made, in clear and outside the AAD: the\nserver refuses an escrow made for another key than its active one (a device that missed a rotation).",
+          "properties": {
+            "ct": {
+              "type": "string"
+            },
+            "iv": {
+              "type": "string"
+            },
+            "kdf": {
+              "description": "Supported password KDFs",
+              "enum": [
+                "argon2id",
+                "pbkdf2-sha256"
+              ],
+              "type": "string"
+            },
+            "kdfParams": {
+              "type": "object"
+            },
+            "kid": {
+              "description": "Active key id when the escrow was created",
+              "type": "string"
+            },
+            "kind": {
+              "enum": [
+                "password",
+                "recovery"
+              ],
+              "type": "string"
+            },
+            "salt": {
+              "type": "string"
+            },
+            "v": {
+              "const": 1,
+              "type": "number"
+            }
+          },
+          "required": [
+            "ct",
+            "iv",
+            "kdf",
+            "kdfParams",
+            "kid",
+            "kind",
+            "salt",
+            "v"
+          ],
+          "type": "object"
         }
       },
       "required": [
         "current",
         "next"
-      ]
+      ],
+      "x-webda-rest": {
+        "method": "post",
+        "template": "auth/password/change",
+        "path": [],
+        "query": [],
+        "body": [
+          "current",
+          "next",
+          "escrow"
+        ]
+      }
     },
     "EmailPasswordProvider.changePassword.output": {
       "$schema": "http://json-schema.org/draft-07/schema#",