codemie-sdk 0.1.397 → 0.1.399

package/dist/index.d.cts

@@ -1944,6 +1944,8 @@ interface CodeMieClientConfig {
     auth_client_secret?: string;
     username?: string;
     password?: string;
+    external_token?: string;
+    external_idp?: string;
     cookies?: Record<string, string>;
     verify_ssl?: boolean;
 }

package/dist/index.d.ts

@@ -1944,6 +1944,8 @@ interface CodeMieClientConfig {
     auth_client_secret?: string;
     username?: string;
     password?: string;
+    external_token?: string;
+    external_idp?: string;
     cookies?: Record<string, string>;
     verify_ssl?: boolean;
 }

package/dist/index.js

@@ -13,13 +13,31 @@ var KeycloakCredentials = class {
   async getToken() {
     const { serverUrl, realmName } = this.config;
     const url = `${serverUrl}/realms/${realmName}/protocol/openid-connect/token`;
-    const payload = this.config.username && this.config.password ? this.createResourceOwnerCredentialsPayload() : this.createClientCredentialsPayload();
+    let payload;
+    if (this.config.externalToken && this.config.externalIdp) {
+      payload = this.createTokenExchangePayload();
+    } else if (this.config.username && this.config.password) {
+      payload = this.createResourceOwnerCredentialsPayload();
+    } else {
+      payload = this.createClientCredentialsPayload();
+    }
     const { data } = await axios.post(url, this.createSearchParams(payload), {
       headers: { "Content-Type": "application/x-www-form-urlencoded" },
       httpsAgent: this.httpAgent
     });
     return data.access_token;
   }
+  createTokenExchangePayload() {
+    const { clientId, clientSecret, externalToken, externalIdp } = this.config;
+    return {
+      grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+      client_id: clientId || DEFAULT_CLIENT_ID,
+      client_secret: clientSecret,
+      subject_token: externalToken,
+      subject_issuer: externalIdp,
+      requested_token_type: "urn:ietf:params:oauth:token-type:access_token"
+    };
+  }
   createResourceOwnerCredentialsPayload() {
     const { username, password, clientId } = this.config;
     return {
@@ -43,9 +61,12 @@ var KeycloakCredentials = class {
     );
   }
   validateConfigCredentials(config) {
-    if (!(config.clientId && config.clientSecret || config.username && config.password)) {
+    const hasClientCredentials = !!(config.clientId && config.clientSecret);
+    const hasUserCredentials = !!(config.username && config.password);
+    const hasExternalTokenCredentials = !!(config.externalToken && config.externalIdp);
+    if (!hasClientCredentials && !hasUserCredentials && !hasExternalTokenCredentials) {
       throw new Error(
-        "Either client credentials (clientId, clientSecret) or user credentials (username, password) must be provided"
+        "Either client credentials (clientId, clientSecret), user credentials (username, password), or external token credentials (externalToken, externalIdp) must be provided"
       );
     }
   }
@@ -1461,6 +1482,8 @@ var CodeMieClient = class {
       auth_client_secret,
       username,
       password,
+      external_token,
+      external_idp,
       cookies,
       verify_ssl = true
     } = config;
@@ -1481,6 +1504,8 @@ var CodeMieClient = class {
         clientSecret: auth_client_secret,
         username,
         password,
+        externalToken: external_token,
+        externalIdp: external_idp,
         verifySSL: verify_ssl
       });
       this.token = "";