prividium 1.5.0 → 1.6.0

package/README.md

@@ -269,6 +269,9 @@ interface PrividiumConfig {
   authBaseUrl: string; // Authorization service base URL
   prividiumApiBaseUrl: string; // Permissions API service base URL
   redirectUrl: string; // OAuth redirect URL
+  org?: string; // Local development/testing only: selects an organization so the auth popup shows that
+  // org's branding and routes login to its identity provider. In production the organization is
+  // determined by the deployment address (subdomain) and this value is ignored. (optional)
   storage?: Storage; // Custom storage implementation (optional)
   onAuthExpiry?: () => void; // Called when authentication expires (optional)
 }

package/dist/sdk/admin-api/schemas.d.ts

@@ -1,8 +1,6 @@
 import { z } from 'zod';
 export declare const adminUserSchema: z.ZodObject<{
     id: z.ZodString;
-    oidcSub: z.ZodNullable<z.ZodString>;
-    oidcIssuer: z.ZodNullable<z.ZodString>;
     displayName: z.ZodString;
     source: z.ZodEnum<{
         oidc: "oidc";
@@ -11,8 +9,6 @@ export declare const adminUserSchema: z.ZodObject<{
         crypto_native: "crypto_native";
         m2m_app: "m2m_app";
     }>;
-    organizationId: z.ZodNullable<z.ZodString>;
-    walletToken: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
     organization: z.ZodNullable<z.ZodObject<{

package/dist/sdk/admin-api/schemas.js

@@ -34,14 +34,12 @@ const userOrganizationSchema = z.object({
     name: z.string()
 });
 const userSourceSchema = z.enum(['oidc', 'adminPanel', 'tenant', 'crypto_native', 'm2m_app']);
+// Mirrors the permissions-api user response, which omits server-owned secrets (walletToken) and
+// external IdP identity (oidcSub/oidcIssuer); organizationId is redundant with `organization`.
 export const adminUserSchema = z.object({
     id: z.string(),
-    oidcSub: z.string().nullable(),
-    oidcIssuer: z.string().nullable(),
     displayName: z.string(),
     source: userSourceSchema,
-    organizationId: z.string().nullable(),
-    walletToken: z.string().nullable(),
     createdAt: z.string(),
     updatedAt: z.string(),
     organization: userOrganizationSchema.nullable(),

package/dist/sdk/admin-api/types.d.ts

@@ -20,12 +20,8 @@ export interface AdminUserOrganization {
 }
 export interface AdminUser {
     id: string;
-    oidcSub: string | null;
-    oidcIssuer: string | null;
     displayName: string;
     source: AdminUserSource;
-    organizationId: string | null;
-    walletToken: string | null;
     createdAt: string;
     updatedAt: string;
     organization: AdminUserOrganization | null;

package/dist/sdk/popup-auth.d.ts

@@ -5,6 +5,7 @@ export interface PopupAuthConfig {
     authBaseUrl: string;
     clientId: string;
     redirectUri: string;
+    org?: string;
     tokenManager: TokenManager;
 }
 export declare class PopupAuth {

package/dist/sdk/popup-auth.js

@@ -123,6 +123,9 @@ export class PopupAuth {
         url.searchParams.set('redirect_uri', this.config.redirectUri);
         url.searchParams.set('state', state);
         url.searchParams.set('response_type', 'token');
+        if (this.config.org) {
+            url.searchParams.set('org', this.config.org);
+        }
         if (scopes?.length) {
             for (const scope of scopes) {
                 url.searchParams.append('scope', scope);

package/dist/sdk/prividium-chain.js

@@ -14,6 +14,7 @@ export function createPrividiumChain(config) {
         clientId: config.clientId,
         authBaseUrl: config.authBaseUrl,
         redirectUri: config.redirectUrl,
+        org: config.org,
         tokenManager
     });
     const getAuthHeaders = () => {

package/dist/sdk/types.d.ts

@@ -11,6 +11,13 @@ export interface PrividiumConfig {
     chain: Omit<Chain, 'rpcUrls'>;
     authBaseUrl: string;
     redirectUrl: string;
+    /**
+     * Local development/testing only. Selects an organization so the auth popup shows that
+     * organization's branding and routes login to its identity provider (forwarded to the User
+     * Panel as `?org=<id>`). In production the organization is determined by the deployment
+     * address (subdomain) and this value is ignored.
+     */
+    org?: string;
     /**
      * @deprecated use the `prividiumApiBaseUrl` field instead
      */