zuplo 6.70.63 → 6.70.67

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (118) hide show
  1. package/docs/ai-gateway/fallback.mdx +132 -0
  2. package/docs/articles/api-key-api.mdx +1 -1
  3. package/docs/articles/api-key-best-practices.mdx +2 -2
  4. package/docs/articles/api-key-react-component.mdx +1 -1
  5. package/docs/articles/bypass-policy-for-testing.mdx +3 -3
  6. package/docs/articles/configuring-auth0-for-mcp-auth.mdx +1 -1
  7. package/docs/articles/configuring-okta-for-mcp-auth.mdx +1 -1
  8. package/docs/articles/health-checks.mdx +5 -5
  9. package/docs/articles/log-request-response-data.mdx +4 -4
  10. package/docs/articles/mcp-quickstart.mdx +3 -3
  11. package/docs/articles/multiple-auth-policies.mdx +3 -3
  12. package/docs/articles/plugin-azure-event-hubs.mdx +1 -1
  13. package/docs/articles/s3-signed-url-uploads.mdx +3 -4
  14. package/docs/articles/use-openapi-extension-data.mdx +1 -1
  15. package/docs/articles/waf-ddos-akamai.md +1 -1
  16. package/docs/articles/waf-ddos-aws-waf-shield.mdx +1 -1
  17. package/docs/articles/waf-ddos-fastly.mdx +1 -1
  18. package/docs/guides/geolocation-backend-routing.mdx +1 -1
  19. package/docs/guides/modify-openapi-paths.mdx +1 -1
  20. package/docs/handlers/legacy-dev-portal-handler.mdx +1 -1
  21. package/docs/handlers/redirect.mdx +3 -3
  22. package/docs/mcp-gateway/auth/manual-oauth-testing.mdx +2 -2
  23. package/docs/mcp-gateway/code-config/multi-upstream.mdx +1 -1
  24. package/docs/mcp-gateway/how-to/connect-upstream-oauth.mdx +4 -3
  25. package/docs/mcp-server/prompts.mdx +1 -1
  26. package/docs/policies/akamai-ai-firewall/schema.json +1 -1
  27. package/docs/policies/akamai-firewall-for-ai-inbound/schema.json +1 -1
  28. package/docs/policies/akamai-firewall-for-ai-outbound/schema.json +1 -1
  29. package/docs/policies/amberflo-metering-inbound/schema.json +1 -1
  30. package/docs/policies/api-key-inbound/schema.json +1 -1
  31. package/docs/policies/audit-log-inbound/schema.json +1 -1
  32. package/docs/policies/auth0-jwt-auth-inbound/schema.json +1 -1
  33. package/docs/policies/authzen-inbound/schema.json +1 -1
  34. package/docs/policies/axiomatics-authz-inbound/schema.json +1 -1
  35. package/docs/policies/basic-auth-inbound/schema.json +1 -1
  36. package/docs/policies/bot-detection-inbound/schema.json +1 -1
  37. package/docs/policies/brownout-inbound/schema.json +1 -1
  38. package/docs/policies/caching-inbound/schema.json +1 -1
  39. package/docs/policies/change-method-inbound/schema.json +1 -1
  40. package/docs/policies/clear-headers-inbound/schema.json +1 -1
  41. package/docs/policies/clear-headers-outbound/schema.json +1 -1
  42. package/docs/policies/clerk-jwt-auth-inbound/schema.json +1 -1
  43. package/docs/policies/cognito-jwt-auth-inbound/schema.json +1 -1
  44. package/docs/policies/comet-opik-tracing-inbound/schema.json +1 -1
  45. package/docs/policies/complex-rate-limit-inbound/schema.json +1 -1
  46. package/docs/policies/composite-inbound/schema.json +1 -1
  47. package/docs/policies/composite-outbound/schema.json +1 -1
  48. package/docs/policies/curity-phantom-token-inbound/schema.json +1 -1
  49. package/docs/policies/firebase-jwt-inbound/schema.json +1 -1
  50. package/docs/policies/formdata-to-json-inbound/schema.json +1 -1
  51. package/docs/policies/galileo-tracing-inbound/schema.json +1 -1
  52. package/docs/policies/geo-filter-inbound/schema.json +1 -1
  53. package/docs/policies/graphql-complexity-limit-inbound/schema.json +1 -1
  54. package/docs/policies/graphql-disable-introspection-inbound/schema.json +1 -1
  55. package/docs/policies/graphql-introspection-filter-outbound/schema.json +1 -1
  56. package/docs/policies/http-deprecation-outbound/schema.json +1 -1
  57. package/docs/policies/jwt-scopes-inbound/schema.json +1 -1
  58. package/docs/policies/ldap-auth-inbound/schema.json +1 -1
  59. package/docs/policies/mcp-auth0-oauth-inbound/schema.json +76 -1
  60. package/docs/policies/mcp-capability-filter-inbound/schema.json +1 -1
  61. package/docs/policies/mcp-clerk-oauth-inbound/schema.json +1 -1
  62. package/docs/policies/mcp-cognito-oauth-inbound/schema.json +1 -1
  63. package/docs/policies/mcp-entra-oauth-inbound/schema.json +1 -1
  64. package/docs/policies/mcp-google-oauth-inbound/schema.json +1 -1
  65. package/docs/policies/mcp-keycloak-oauth-inbound/schema.json +1 -1
  66. package/docs/policies/mcp-logto-oauth-inbound/schema.json +1 -1
  67. package/docs/policies/mcp-oauth-inbound/schema.json +76 -1
  68. package/docs/policies/mcp-okta-oauth-inbound/schema.json +1 -1
  69. package/docs/policies/mcp-onelogin-oauth-inbound/schema.json +1 -1
  70. package/docs/policies/mcp-ping-oauth-inbound/schema.json +1 -1
  71. package/docs/policies/mcp-token-exchange-inbound/schema.json +1 -1
  72. package/docs/policies/mcp-workos-oauth-inbound/schema.json +1 -1
  73. package/docs/policies/mock-api-inbound/schema.json +1 -1
  74. package/docs/policies/moesif-inbound/schema.json +1 -1
  75. package/docs/policies/monetization-inbound/schema.json +1 -1
  76. package/docs/policies/mtls-auth-inbound/intro.md +3 -3
  77. package/docs/policies/mtls-auth-inbound/schema.json +1 -1
  78. package/docs/policies/okta-fga-authz-inbound/schema.json +1 -1
  79. package/docs/policies/okta-jwt-auth-inbound/schema.json +1 -1
  80. package/docs/policies/open-id-jwt-auth-inbound/schema.json +1 -1
  81. package/docs/policies/openfga-authz-inbound/schema.json +1 -1
  82. package/docs/policies/openmeter-inbound/schema.json +1 -1
  83. package/docs/policies/prompt-injection-outbound/schema.json +1 -1
  84. package/docs/policies/propel-auth-jwt-inbound/schema.json +1 -1
  85. package/docs/policies/query-param-to-header-inbound/schema.json +1 -1
  86. package/docs/policies/quota-inbound/schema.json +1 -1
  87. package/docs/policies/rate-limit-inbound/schema.json +1 -1
  88. package/docs/policies/readme-metrics-inbound/schema.json +1 -1
  89. package/docs/policies/remove-headers-inbound/schema.json +1 -1
  90. package/docs/policies/remove-headers-outbound/schema.json +1 -1
  91. package/docs/policies/remove-query-params-inbound/schema.json +1 -1
  92. package/docs/policies/replace-string-outbound/schema.json +1 -1
  93. package/docs/policies/request-size-limit-inbound/schema.json +1 -1
  94. package/docs/policies/request-validation-inbound/schema.json +1 -1
  95. package/docs/policies/require-origin-inbound/schema.json +1 -1
  96. package/docs/policies/secret-masking-outbound/schema.json +1 -1
  97. package/docs/policies/semantic-cache-inbound/schema.json +1 -1
  98. package/docs/policies/set-body-inbound/schema.json +1 -1
  99. package/docs/policies/set-headers-inbound/schema.json +1 -1
  100. package/docs/policies/set-headers-outbound/schema.json +1 -1
  101. package/docs/policies/set-query-params-inbound/schema.json +1 -1
  102. package/docs/policies/set-status-outbound/schema.json +1 -1
  103. package/docs/policies/set-upstream-api-key-inbound/schema.json +1 -1
  104. package/docs/policies/sleep-inbound/schema.json +1 -1
  105. package/docs/policies/stripe-webhook-verification-inbound/schema.json +1 -1
  106. package/docs/policies/supabase-jwt-auth-inbound/schema.json +1 -1
  107. package/docs/policies/upstream-azure-ad-service-auth-inbound/schema.json +1 -1
  108. package/docs/policies/upstream-firebase-admin-auth-inbound/schema.json +1 -1
  109. package/docs/policies/upstream-firebase-user-auth-inbound/schema.json +1 -1
  110. package/docs/policies/upstream-gcp-federated-auth-inbound/schema.json +1 -1
  111. package/docs/policies/upstream-gcp-jwt-inbound/schema.json +1 -1
  112. package/docs/policies/upstream-gcp-service-auth-inbound/schema.json +1 -1
  113. package/docs/policies/upstream-zuplo-jwt-auth-inbound/schema.json +1 -1
  114. package/docs/policies/validate-json-schema-inbound/schema.json +1 -1
  115. package/docs/policies/web-bot-auth-inbound/schema.json +1 -1
  116. package/docs/policies/xml-to-json-outbound/schema.json +1 -1
  117. package/docs/programmable-api/zuplo-request.mdx +1 -1
  118. package/package.json +4 -4
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/remove-headers-outbound.json",
4
4
  "type": "object",
5
5
  "title": "Remove Response Headers",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/remove-query-params-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Remove Query Parameters",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/replace-string-outbound.json",
4
4
  "type": "object",
5
5
  "title": "Replace String in Response Body",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/request-size-limit-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Request Size Limit",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/request-validation-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Request Validation",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/require-origin-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Require Origin",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/secret-masking-outbound.json",
4
4
  "type": "object",
5
5
  "title": "Secret Masking",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/semantic-cache-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Semantic Cache",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-body-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Set Body",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-headers-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Add or Set Request Headers",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-headers-outbound.json",
4
4
  "type": "object",
5
5
  "title": "Set Headers",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-query-params-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Add or Set Query Parameters",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-status-outbound.json",
4
4
  "type": "object",
5
5
  "title": "Set Status Code",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/set-upstream-api-key-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Set Upstream API Key",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/sleep-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Sleep / Delay",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/stripe-webhook-verification-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Stripe Webhook Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/supabase-jwt-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Supabase JWT Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-azure-ad-service-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream Azure AD Service Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-firebase-admin-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream Firebase Admin Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-firebase-user-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream Firebase User Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-gcp-federated-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream GCP Federated Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-gcp-jwt-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream GCP Self-Signed JWT",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-gcp-service-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream GCP Service Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/upstream-zuplo-jwt-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Upstream Zuplo JWT",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/validate-json-schema-inbound.json",
4
4
  "type": "object",
5
5
  "title": "JSON Body Validation",
6
6
  "isDeprecated": true,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/web-bot-auth-inbound.json",
4
4
  "type": "object",
5
5
  "title": "Web Bot Auth",
6
6
  "isDeprecated": false,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft-07/schema",
3
- "$id": "http://zuplo.com/schemas/policies/auth0-jwt-auth-inbound.json",
3
+ "$id": "https://cdn.zuplo.com/policies/runtime/schemas/xml-to-json-outbound.json",
4
4
  "type": "object",
5
5
  "title": "XML to JSON",
6
6
  "isDeprecated": false,
@@ -96,7 +96,7 @@ To access the array of values in this case you can instead use the URL type and
96
96
 
97
97
  ```ts
98
98
  const url = new URL(request.url);
99
- const foo = url.searchParams.get("foo");
99
+ const foo = url.searchParams.getAll("foo");
100
100
  // foo will be an array here
101
101
  ```
102
102
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "zuplo",
3
- "version": "6.70.63",
3
+ "version": "6.70.67",
4
4
  "type": "module",
5
5
  "description": "The programmable API Gateway",
6
6
  "author": "Zuplo, Inc.",
@@ -19,9 +19,9 @@
19
19
  "zuplo": "zuplo.js"
20
20
  },
21
21
  "dependencies": {
22
- "@zuplo/cli": "6.70.63",
23
- "@zuplo/core": "6.70.63",
24
- "@zuplo/runtime": "6.70.63",
22
+ "@zuplo/cli": "6.70.67",
23
+ "@zuplo/core": "6.70.67",
24
+ "@zuplo/runtime": "6.70.67",
25
25
  "@zuplo/test": "1.4.0"
26
26
  }
27
27
  }