@webpieces/http-routing 0.4.860 → 0.4.862
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/package.json +4 -4
package/README.md
CHANGED
|
@@ -10,6 +10,16 @@ Part of the [WebPieces TypeScript](https://github.com/deanhiller/webpieces-ts) f
|
|
|
10
10
|
npm install @webpieces/http-routing
|
|
11
11
|
```
|
|
12
12
|
|
|
13
|
+
## OIDC on private Cloud Run
|
|
14
|
+
|
|
15
|
+
`@WpAuthOidc()` primarily selects client-side Google ID-token generation. With invocation
|
|
16
|
+
authentication and invoker IAM enabled, Cloud Run checks the invocation before it reaches
|
|
17
|
+
`AuthFilter`; the framework retains supplementary server validation. No callers means delegate
|
|
18
|
+
caller authorization to the edge; explicit callers add an application allow-list. Local tokens
|
|
19
|
+
exercise the filter chain without proving deployed IAM or Google signature validation.
|
|
20
|
+
See [the Cloud Run OIDC security boundary](../../../docs/architecture/cloud-run-oidc.md) for the
|
|
21
|
+
current verifier behavior and the assumptions required for that deployment model.
|
|
22
|
+
|
|
13
23
|
## Documentation
|
|
14
24
|
|
|
15
25
|
See the main [WebPieces README](https://github.com/deanhiller/webpieces-ts#readme) for complete documentation and examples.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@webpieces/http-routing",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.862",
|
|
4
4
|
"description": "Decorator-based routing with auto-wiring for WebPieces",
|
|
5
5
|
"type": "commonjs",
|
|
6
6
|
"main": "./src/index.js",
|
|
@@ -22,9 +22,9 @@
|
|
|
22
22
|
},
|
|
23
23
|
"dependencies": {
|
|
24
24
|
"@inversifyjs/binding-decorators": "1.1.5",
|
|
25
|
-
"@webpieces/core-context": "0.4.
|
|
26
|
-
"@webpieces/core-util": "0.4.
|
|
27
|
-
"@webpieces/gcp-identity": "0.4.
|
|
25
|
+
"@webpieces/core-context": "0.4.862",
|
|
26
|
+
"@webpieces/core-util": "0.4.862",
|
|
27
|
+
"@webpieces/gcp-identity": "0.4.862",
|
|
28
28
|
"inversify": "7.10.4",
|
|
29
29
|
"jsonwebtoken": "9.0.2",
|
|
30
30
|
"minimatch": "10.0.1"
|