5de4e911e3Adds enterprise-managed authorization (EMA): browser-side IdP login + RFC 8693 token-exchange and JWT-bearer resource-token mint, per-server EMA opt-in in Server Settings, IdP config in Client Settings, and IdP clientSecret keychain storage. Includes the v2/main merge and review follow-ups (400 on malformed client config; normalizeIdpIssuer import consolidation).
31 lines
888 B
TypeScript
31 lines
888 B
TypeScript
export {
|
|
GRANT_TYPE_JWT_BEARER,
|
|
GRANT_TYPE_TOKEN_EXCHANGE,
|
|
IDP_OIDC_SCOPES,
|
|
TOKEN_TYPE_ID_JAG,
|
|
TOKEN_TYPE_ID_TOKEN,
|
|
} from "./constants.js";
|
|
export {
|
|
completeEmaIdpAuthorizationAndMint,
|
|
mintEmaResourceTokens,
|
|
refreshEmaResourceTokens,
|
|
startEmaIdpAuthorization,
|
|
trySilentEmaAuth,
|
|
type EmaFlowConfig,
|
|
type TrySilentEmaAuthResult,
|
|
} from "./emaFlow.js";
|
|
export { EmaTransportOAuthProvider } from "./transportProvider.js";
|
|
export { isJwtExpired, jwtExpiresAtMs } from "./jwt.js";
|
|
export {
|
|
clearEmaIdpSession,
|
|
getEmaIdpLoginState,
|
|
normalizeIdpIssuer,
|
|
type EmaIdpLoginState,
|
|
} from "./idpSession.js";
|
|
export { discoverEmaResourceContext, resolveEmaScopes } from "./resourceContext.js";
|
|
export {
|
|
EmaClientNotConfiguredError,
|
|
emaClientNotConfiguredMessage,
|
|
isEmaClientNotConfiguredError,
|
|
type EmaClientNotConfiguredReason,
|
|
} from "./clientConfigError.js";
|