@webpieces/http-client-node 0.4.861 → 0.4.863
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -0
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -121,6 +121,15 @@ for (const webhook of webhooks) {
|
|
|
121
121
|
as its own node on the runtime architecture graph, and two services delivering over the same
|
|
122
122
|
contract converge on one box.
|
|
123
123
|
|
|
124
|
+
## `@WpAuthOidc`: generate the credential the Cloud Run edge expects
|
|
125
|
+
|
|
126
|
+
The shared contract tells `OutboundAuthFilter` to mint a Google ID token for the final
|
|
127
|
+
base URL and send it in `Authorization: Bearer`. A private Cloud Run service verifies
|
|
128
|
+
that invocation token and enforces invoker IAM before the container runs. Webpieces retains
|
|
129
|
+
supplementary server checks; its empty caller list relies on edge authorization. Off-GCP
|
|
130
|
+
clients mint unsigned synthetic tokens for local tests. See [Cloud Run OIDC](../../../docs/architecture/cloud-run-oidc.md)
|
|
131
|
+
for deployment assumptions and why a direct application-verifier test does not test the edge.
|
|
132
|
+
|
|
124
133
|
## Signing an OUTBOUND webhook — `@WpAuthWebhook`, the other way round
|
|
125
134
|
|
|
126
135
|
`@WpAuthWebhook(name)` names a signing SCHEME, not a direction. Inbound, a vendor signs and your bound
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@webpieces/http-client-node",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.863",
|
|
4
4
|
"description": "Server-side HTTP client for webpieces: inversify-wired, reads RequestContext directly, mints OIDC/shared-secret delivery auth, resolves Cloud Run URLs from a service name",
|
|
5
5
|
"type": "commonjs",
|
|
6
6
|
"main": "./src/index.js",
|
|
@@ -22,10 +22,10 @@
|
|
|
22
22
|
"access": "public"
|
|
23
23
|
},
|
|
24
24
|
"dependencies": {
|
|
25
|
-
"@webpieces/core-context": "0.4.
|
|
26
|
-
"@webpieces/core-util": "0.4.
|
|
27
|
-
"@webpieces/gcp-identity": "0.4.
|
|
28
|
-
"@webpieces/http-client-core": "0.4.
|
|
25
|
+
"@webpieces/core-context": "0.4.863",
|
|
26
|
+
"@webpieces/core-util": "0.4.863",
|
|
27
|
+
"@webpieces/gcp-identity": "0.4.863",
|
|
28
|
+
"@webpieces/http-client-core": "0.4.863",
|
|
29
29
|
"inversify": "7.10.4",
|
|
30
30
|
"reflect-metadata": "0.2.2"
|
|
31
31
|
}
|