Auth hardening CI gaps + SDK consolidation: EMA leg 2 / scopes (#1527) (#1725)
Some checks failed
Run install, format, lint, build, and test on every push / build (push) Has been cancelled
Run install, format, lint, build, and test on every push / publish (push) Has been cancelled
Run install, format, lint, build, and test on every push / publish-github-container-registry (push) Has been cancelled
Some checks failed
Run install, format, lint, build, and test on every push / build (push) Has been cancelled
Run install, format, lint, build, and test on every push / publish (push) Has been cancelled
Run install, format, lint, build, and test on every push / publish-github-container-registry (push) Has been cancelled
Close #1527 acceptance gaps with automated tests (SEP-2468 iss, SEP-2207 offline_access, SEP-2351 discovery shapes, SEP-2352 AS-migration, EraNegotiationFailed→401 unwrap); lean EMA leg 2 and scope helpers on the v2 SDK; drop deprecated TS baseUrl. Reviewed LGTM.
This commit is contained in:
parent
ec185f1053
commit
a71e6d2012
1 changed files with 1513 additions and 852 deletions
|
|
@ -67,11 +67,13 @@ export async function mintEmaResourceTokens(
|
|||
}
|
||||
|
||||
const audience = ctx.resourceAsUrl.href.replace(/\/$/, "");
|
||||
// SDK leg-2 helper requires `resource` on the wire; fall back to PRM `resource`.
|
||||
const resource = ctx.resourceUrl?.href ?? ctx.resourceMetadata.resource;
|
||||
const idJag = await exchangeIdJag({
|
||||
idp: config.idp,
|
||||
idToken,
|
||||
audience,
|
||||
resource: ctx.resourceUrl?.href,
|
||||
resource,
|
||||
scope: ctx.scope,
|
||||
fetchFn: config.fetchFn,
|
||||
});
|
||||
|
|
|
|||
Loading…
Reference in a new issue