unoverse 0.1.208 → 0.1.209
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -430,7 +430,7 @@ resource "aws_elasticache_replication_group" "redis" {
|
|
|
430
430
|
|
|
431
431
|
# ── Cognito: user pool (Essentials) + pre-token Lambda ────────────────────────
|
|
432
432
|
# The Lambda is LOAD-BEARING: it puts email/roles/permissions on the ACCESS token
|
|
433
|
-
# (the platform's token contract,
|
|
433
|
+
# (the platform's token contract, docs/auth-security/IDENTITY.md). Roles come from Cognito
|
|
434
434
|
# groups. It lives in Terraform precisely so a pool rebuild cannot drop it — the
|
|
435
435
|
# documented Auth0 footgun, not repeated here.
|
|
436
436
|
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* Cognito Pre Token Generation (V2_0) — the platform's token contract.
|
|
3
3
|
*
|
|
4
4
|
* LOAD-BEARING. The platform reads sub/email/roles (and permissions) off the
|
|
5
|
-
* ACCESS token and never calls back to the IdP (docs/
|
|
5
|
+
* ACCESS token and never calls back to the IdP (docs/auth-security/IDENTITY.md). Without
|
|
6
6
|
* this Lambda, email-keyed features silently no-op and no role-gated surface
|
|
7
7
|
* (workflow:author builder, marketplace:publish publish, requires.role nodes)
|
|
8
8
|
* can ever pass. The Cognito equivalent of the Auth0 Post-Login Action.
|
package/package.json
CHANGED