alepha 0.19.0 → 0.19.2

package/dist/security/index.js

@@ -16,7 +16,7 @@ const userAccountInfoSchema = t.object({
 	username: t.optional(t.text({ description: "Preferred username of the user." })),
 	picture: t.optional(t.text({ description: "URL to the user's profile picture." })),
 	sessionId: t.optional(t.text({ description: "Session identifier for the user, if applicable." })),
-	organizations: t.optional(t.array(t.text(), { description: "List of organizations the user belongs to." })),
+	organization: t.optional(t.uuid({ description: "Organization the user belongs to." })),
 	roles: t.optional(t.array(t.text(), { description: "List of roles assigned to the user." })),
 	realm: t.optional(t.text({ description: "The realm (issuer) the user was authenticated from." }))
 });
@@ -1417,21 +1417,21 @@ var JwtProvider = class {
 	*/
 	setKeyLoader(name, secretKeyOrJwks) {
 		if (typeof secretKeyOrJwks === "object") {
-			this.log.info(`will verify JWTs from key '${name}' with JWKS object (x${secretKeyOrJwks.keys.length})`);
+			this.log.debug(`will verify JWTs from key '${name}' with JWKS object`);
 			this.keystore.push({
 				name,
 				keyLoader: createLocalJWKSet(secretKeyOrJwks)
 			});
 		} else if (this.isSecretKey(secretKeyOrJwks)) {
 			const secretKey = this.encoder.encode(secretKeyOrJwks);
-			this.log.info(`will verify JWTs from issuer '${name}' with secret key (${secretKey.length} bytes)`);
+			this.log.debug(`will verify JWTs from issuer '${name}' with secret key`);
 			this.keystore.push({
 				name,
 				secretKey: secretKeyOrJwks,
 				keyLoader: () => Promise.resolve(createSecretKey(secretKey))
 			});
 		} else {
-			this.log.info(`will verify JWTs from issuer '${name}' with JWKS ${secretKeyOrJwks}`);
+			this.log.debug(`will verify JWTs from issuer '${name}' with JWKS`, { url: secretKeyOrJwks });
 			this.keystore.push({
 				name,
 				keyLoader: createRemoteJWKSet(new URL(secretKeyOrJwks))
@@ -1671,7 +1671,7 @@ var SecurityProvider = class {
 		const username = this.getUsernameFromPayload(payload);
 		const picture = this.getPictureFromPayload(payload);
 		const name = this.getNameFromPayload(payload);
-		const organizations = this.getOrganizationsFromPayload(payload);
+		const organization = this.getOrganizationFromPayload(payload);
 		const rolesFromSystem = this.getRoles(realmName);
 		const roles = rolesFromPayload.reduce((arr, roleName) => arr.concat(rolesFromSystem.filter((it) => it.name === roleName)), []).map((it) => it.name);
 		const realm = this.realms.find((it) => it.name === realmName);
@@ -1683,7 +1683,7 @@ var SecurityProvider = class {
 			email,
 			username,
 			picture,
-			organizations,
+			organization,
 			sessionId
 		};
 	}
@@ -2001,12 +2001,9 @@ var SecurityProvider = class {
 		if (typeof payload.given_name === "string" && typeof payload.family_name === "string") return `${payload.given_name} ${payload.family_name}`.trim();
 		return this.UNKNOWN_USER_NAME;
 	}
-	getOrganizationsFromPayload(payload) {
+	getOrganizationFromPayload(payload) {
 		if (!payload) return;
-		if (payload.organization) {
-			if (typeof payload.organization === "string") return [payload.organization];
-			if (Array.isArray(payload.organization)) return payload.organization;
-		}
+		if (typeof payload.organization === "string") return payload.organization;
 	}
 };
 //#endregion
@@ -2147,7 +2144,7 @@ var IssuerPrimitive = class extends Primitive {
 				email: user.email,
 				preferred_username: user.username,
 				picture: user.picture,
-				organizations: user.organizations,
+				organization: user.organization,
 				roles: user.roles
 			}, this.name),
 			token_type: "Bearer",