[oidc-provider] v8.5.0 bump

panva · panva · commit a3e7f1ca0073 · 2024-06-29T14:22:58.000+02:00
diff --git a/types/oidc-provider/index.d.ts b/types/oidc-provider/index.d.ts
@@ -17,7 +17,7 @@ export type FindAccount = (
     token?: AuthorizationCode | AccessToken | DeviceCode | BackchannelAuthenticationRequest,
 ) => CanBePromise<Account | undefined>;
 export type TokenFormat = "opaque" | "jwt";
-export type FapiProfile = "1.0 ID2" | "1.0 Final";
+export type FapiProfile = "1.0 ID2" | "1.0 Final" | "2.0";
 
 export type TTLFunction<T> = (ctx: KoaContextWithOIDC, token: T, client: Client) => number;
 
@@ -56,6 +56,7 @@ export interface AllClientMetadata {
     redirect_uris?: string[] | undefined;
     grant_types?: string[] | undefined;
     response_types?: ResponseType[] | undefined;
+    response_modes?: string[] | undefined;
 
     application_type?: "web" | "native" | undefined;
     client_id_issued_at?: number | undefined;
@@ -103,7 +104,6 @@ export interface AllClientMetadata {
     authorization_signed_response_alg?: SigningAlgorithm | undefined;
     authorization_encrypted_response_alg?: EncryptionAlgValues | undefined;
     authorization_encrypted_response_enc?: EncryptionEncValues | undefined;
-    web_message_uris?: string[] | undefined;
     tls_client_certificate_bound_access_tokens?: boolean | undefined;
 
     require_signed_request_object?: boolean | undefined;
@@ -604,9 +604,9 @@ declare class IdToken {
 
 declare class Client {
     responseTypeAllowed(type: ResponseType): boolean;
+    responseModeAllowed(type: string, responseType: ResponseType, fapiProfile: FapiProfile | undefined): boolean;
     grantTypeAllowed(type: string): boolean;
     redirectUriAllowed(redirectUri: string): boolean;
-    webMessageUriAllowed(webMessageUri: string): boolean;
     requestUriAllowed(requestUri: string): boolean;
     postLogoutRedirectUriAllowed(postLogoutRedirectUri: string): boolean;
     includeSid(): boolean;
@@ -621,6 +621,7 @@ declare class Client {
     readonly grantTypes?: string[] | undefined;
     readonly redirectUris?: string[] | undefined;
     readonly responseTypes?: ResponseType[] | undefined;
+    readonly responseModes?: string[] | undefined;
 
     readonly applicationType?: "web" | "native" | undefined;
     readonly clientIdIssuedAt?: number | undefined;
@@ -670,7 +671,6 @@ declare class Client {
     readonly authorizationSignedResponseAlg?: string | undefined;
     readonly authorizationEncryptedResponseAlg?: string | undefined;
     readonly authorizationEncryptedResponseEnc?: string | undefined;
-    readonly webMessageUris?: string[] | undefined;
     readonly tlsClientCertificateBoundAccessTokens?: boolean | undefined;
 
     readonly backchannelUserCodeParameter?: boolean | undefined;
@@ -681,6 +681,7 @@ declare class Client {
     [key: string]: unknown;
 
     static find(id: string): Promise<Client | undefined>;
+    static validate(metadata: ClientMetadata): Promise<void>;
 }
 
 export interface ResourceServer {
@@ -756,7 +757,6 @@ declare class OIDCContext {
     readonly prompts: Set<string>;
     readonly result?: InteractionResults | undefined;
 
-    readonly webMessageUriCheckPerformed?: boolean | undefined;
     readonly redirectUriCheckPerformed?: boolean | undefined;
     readonly trusted?: string[] | undefined;
     readonly registrationAccessToken?: RegistrationAccessToken | undefined;
@@ -966,7 +966,11 @@ export interface Configuration {
 
     discovery?: UnknownObject | undefined;
 
-    extraParams?: string[] | undefined;
+    extraParams?: string[] | {
+        [param: string]:
+            | null
+            | ((ctx: KoaContextWithOIDC, value: string | undefined, client: Client) => CanBePromise<void>);
+    } | undefined;
 
     features?:
         | {
@@ -979,6 +983,13 @@ export interface Configuration {
             claimsParameter?:
                 | {
                     enabled?: boolean | undefined;
+                    assertClaimsParameter?:
+                        | ((
+                            ctx: KoaContextWithOIDC,
+                            claims: ClaimsParameter,
+                            client: Client,
+                        ) => CanBePromise<void>)
+                        | undefined;
                 }
                 | undefined;
 
@@ -1092,6 +1103,7 @@ export interface Configuration {
                     enabled?: boolean | undefined;
                     nonceSecret?: Buffer | undefined;
                     requireNonce?: (ctx: KoaContextWithOIDC) => boolean;
+                    allowReplay?: boolean;
                 }
                 | undefined;
 
@@ -1161,6 +1173,7 @@ export interface Configuration {
             pushedAuthorizationRequests?:
                 | {
                     requirePushedAuthorizationRequests?: boolean | undefined;
+                    allowUnregisteredRedirectUris?: boolean | undefined;
                     enabled?: boolean | undefined;
                 }
                 | undefined;
@@ -2292,9 +2305,6 @@ export namespace errors {
     class UnsupportedResponseType extends OIDCProviderError {
         constructor(description?: string, detail?: string);
     }
-    class WebMessageUriMismatch extends OIDCProviderError {
-        constructor(description?: string, detail?: string);
-    }
     class CustomOIDCProviderError extends OIDCProviderError {
         constructor(message: string, description?: string);
     }
diff --git a/types/oidc-provider/oidc-provider-tests.ts b/types/oidc-provider/oidc-provider-tests.ts
@@ -27,6 +27,17 @@ new Provider("https://op.example.com", {
     },
 });
 
+new Provider("https://op.example.com", {
+    extraParams: {
+        foo: null,
+        bar: (ctx, value, client) => {
+            ctx.oidc.issuer.substring(0);
+            value?.substring(0);
+            client.clientId.substring(0);
+        },
+    },
+});
+
 new Provider("https://op.example.com", {
     adapter: class Adapter {
         name: string;
diff --git a/types/oidc-provider/package.json b/types/oidc-provider/package.json
@@ -1,7 +1,7 @@
 {
     "private": true,
     "name": "@types/oidc-provider",
-    "version": "8.4.9999",
+    "version": "8.5.9999",
     "projects": [
         "https://github.com/panva/node-oidc-provider"
     ],

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"private": true,`
`3`	`3`	`"name": "@types/oidc-provider",`
`4`		`- "version": "8.4.9999",`
	`4`	`+ "version": "8.5.9999",`
`5`	`5`	`"projects": [`
`6`	`6`	`"https://github.com/panva/node-oidc-provider"`
`7`	`7`	`],`