anbaric-cloud-hosting 1.21.2 → 1.21.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anbaric-cloud-hosting",
-  "version": "1.21.2",
+  "version": "1.21.3",
   "description": "Anbaric Cloud hosting service: Postgres-backed job persistence and queuing exposed over an HTTP API",
   "license": "MIT",
   "author": "chris@anbaric.ai",
@@ -18,18 +18,18 @@
     "@aws-sdk/client-s3": "^3.1110.0",
     "@aws-sdk/client-secrets-manager": "^3.700.0",
     "@aws-sdk/client-servicediscovery": "^3.1110.0",
-    "anbaric-data-store": "^1.21.2",
-    "anbaric-plugins": "^1.21.2",
-    "anbaric-tsapi": "^1.21.2",
-    "anbaric-web": "^1.21.2",
+    "anbaric-data-store": "^1.21.3",
+    "anbaric-plugins": "^1.21.3",
+    "anbaric-tsapi": "^1.21.3",
+    "anbaric-web": "^1.21.3",
     "esbuild": "^0.28.2",
     "pg": "^8.16.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
     "@types/pg": "^8.15.0",
-    "anbaric-impl-cloud": "^1.21.2",
-    "anbaric-state-machine": "^1.21.2",
+    "anbaric-impl-cloud": "^1.21.3",
+    "anbaric-state-machine": "^1.21.3",
     "tsx": "^4.20.0",
     "typescript": "^7.0.2"
   },

package/src/auth/SessionSigner.ts

@@ -40,6 +40,8 @@ class SessionSigner {
             sub: user.id,
             tenant: tenant?.id,
             roles: user.roles.map(role => role.id),
+            name: user.name,
+            picture: user.picture,
             exp: nowSeconds() + this.ttlSeconds,
         };
         const payload = base64url(JSON.stringify(claims));
@@ -52,7 +54,7 @@ class SessionSigner {
         const [payload, signature] = token.split(".");
         if (!payload || !signature || !this.signatureMatches(payload, signature)) return undefined;
 
-        let claims : { sub? : unknown, tenant? : unknown, roles? : unknown, exp? : unknown };
+        let claims : { sub? : unknown, tenant? : unknown, roles? : unknown, name? : unknown, picture? : unknown, exp? : unknown };
         try {
             claims = JSON.parse(Buffer.from(payload, "base64url").toString());
         } catch {
@@ -64,7 +66,9 @@ class SessionSigner {
 
         const roles = Array.isArray(claims.roles) ? claims.roles.map(id => new Role(String(id))) : [];
         const tenant = typeof claims.tenant === "string" ? new Tenant(claims.tenant) : undefined;
-        return [new User(claims.sub, roles), tenant];
+        const name = typeof claims.name === "string" ? claims.name : undefined;
+        const picture = typeof claims.picture === "string" ? claims.picture : undefined;
+        return [new User(claims.sub, roles, [], name, picture), tenant];
     }
 
     // Sets (or, for a still-valid session, refreshes) the session cookie.

package/src/auth/User.ts

@@ -6,11 +6,16 @@ class User {
     readonly id : string;
     roles : Array<Role>;
     keyPairs : Array<KeyPair>;
+    readonly name? : string;
+    readonly picture? : string;
 
-    constructor(id : string, roles : Array<Role> = [], keyPairs : Array<KeyPair> = []) {
+    constructor(id : string, roles : Array<Role> = [], keyPairs : Array<KeyPair> = [],
+                name? : string, picture? : string) {
         this.id = id;
         this.roles = roles;
         this.keyPairs = keyPairs;
+        this.name = name;
+        this.picture = picture;
     }
 
     hasRole(role : Role) : boolean {

package/src/hosting/handlers/auth/WhoamiHandler.ts

@@ -8,6 +8,8 @@ class WhoamiHandler implements RequestHandler {
             return request.reply(200, {
                 id: request.user.id,
                 roles: request.user.roles.map(role => role.id),
+                name: request.user.name,
+                picture: request.user.picture,
             });
         }
         request.notFound();