@sap/xssec - npm Package Compare versions

Comparing version 4.2.1 to 4.2.2

CHANGELOG.md

 # Change Log
 All notable changes to this project will be documented in this file.
 
+## 4.2.2 - 2024-08-29
+- export some more internal classes for better test support
+- remove node-fetch dependency and use native https module instead
+
 ## 4.2.1 - 2024-07-25
@@ -5,0 +9,0 @@ - fix JWKS URL construction for XSA service bindings whose url contains already a path

package.json

 {
   "name": "@sap/xssec",
-  "version": "4.2.1",
+  "version": "4.2.2",
   "description": "XS Advanced Container Security API for node.js",
@@ -34,2 +34,3 @@ "main": "./src",
     "njwt": "^2.0.0",
+    "nock": "^13.5.5",
     "typescript": "^5.4.5"
@@ -39,5 +40,4 @@ },
     "debug": "^4.3.4",
-    "jwt-decode": "^4",
-    "node-fetch": "^2"
+    "jwt-decode": "^4"
   }
 }

src/index.js

 const createSecurityContext = require('./context/createSecurityContext');
+const IdentityServiceSecurityContext = require('./context/IdentityServiceSecurityContext');
+const XsuaaSecurityContext = require('./context/XsuaaSecurityContext');
+const XsaSecurityContext = require('./context/XsaSecurityContext');
+const UaaSecurityContext = require('./context/UaaSecurityContext');
 const IdentityService = require('./service/IdentityService');
@@ -19,2 +23,6 @@ const XsuaaService = require('./service/XsuaaService');
     createSecurityContext,
+    IdentityServiceSecurityContext,
+    XsuaaSecurityContext,
+    XsaSecurityContext,
+    UaaSecurityContext,
     IdentityService,
@@ -34,2 +42,2 @@ XsuaaService,
     Types,
-};
+};

src/util/constants.js

@@ -16,5 +16,10 @@ module.exports = {
     MAX_TIMEOUT: 5000,
-    GRANTTYPE_CLIENTCREDENTIALS: "client_credentials",
+    GRANTTYPE_SAML2BEARER: "urn:ietf:params:oauth:grant-type:saml2-bearer",
     GRANTTYPE_JWTBEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+    GRANTTYPE_USERTOKEN: "user_token",
+    GRANTTYPE_REFRESHTOKEN: "refresh_token",
     GRANTTYPE_PASSWORD: "password",
+    GRANTTYPE_CLIENTCREDENTIALS: "client_credentials",
+    GRANTTYPE_AUTHORIZATIONCODE: "authorization_code",
+    GRANTTYPE_IMPLICIT: "implicit",
     HTTP_SCHEME : "http://",
@@ -30,2 +35,2 @@ HTTPS_SCHEME : "https://",
     ZID_QUERY_PARAMETER: "zid",
-}
+}

src/util/request.js

@@ -1,2 +0,2 @@
-const fetch = require("node-fetch");
+const fetch = require("./fetch");
 
@@ -3,0 +3,0 @@ const { getLogger } = require("./logging");

types/index.d.ts

 import createSecurityContext = require("./context/createSecurityContext");
+import IdentityServiceSecurityContext = require("./context/IdentityServiceSecurityContext");
+import XsuaaSecurityContext = require("./context/XsuaaSecurityContext");
+import XsaSecurityContext = require("./context/XsaSecurityContext");
+import UaaSecurityContext = require("./context/UaaSecurityContext");
 import IdentityService = require("./service/IdentityService");
@@ -16,3 +20,3 @@ import XsuaaService = require("./service/XsuaaService");
 import Types = require("./util/Types");
-export { createSecurityContext, IdentityService, XsuaaService, XsaService, UaaService, XssecPassportStrategy, Token, IdentityServiceToken, XsuaaToken, XsaToken, UaaToken, errors, constants, v3, Types };
+export { createSecurityContext, IdentityServiceSecurityContext, XsuaaSecurityContext, XsaSecurityContext, UaaSecurityContext, IdentityService, XsuaaService, XsaService, UaaService, XssecPassportStrategy, Token, IdentityServiceToken, XsuaaToken, XsaToken, UaaToken, errors, constants, v3, Types };
 //# sourceMappingURL=index.d.ts.map

types/passport/XssecPassportStrategy.d.ts

@@ -6,3 +6,3 @@ export = XssecPassportStrategy;
      */
-    static "__#9@#buildPassportUser"(token: Token): {
+    static "__#10@#buildPassportUser"(token: Token): {
         id: any;
@@ -9,0 +9,0 @@ name: {

types/service/Service.d.ts

@@ -9,3 +9,3 @@ export = Service;
 declare class Service {
-    static "__#4@#sharedJwksCaches": {};
+    static "__#5@#sharedJwksCaches": {};
     /**
@@ -12,0 +12,0 @@ * Builds the configuration of this service based on the provided configuration and default values.

types/util/constants.d.ts

@@ -10,5 +10,10 @@ export let APP_TID_HEADER: string;
 export let MAX_TIMEOUT: number;
-export let GRANTTYPE_CLIENTCREDENTIALS: string;
+export let GRANTTYPE_SAML2BEARER: string;
 export let GRANTTYPE_JWTBEARER: string;
+export let GRANTTYPE_USERTOKEN: string;
+export let GRANTTYPE_REFRESHTOKEN: string;
 export let GRANTTYPE_PASSWORD: string;
+export let GRANTTYPE_CLIENTCREDENTIALS: string;
+export let GRANTTYPE_AUTHORIZATIONCODE: string;
+export let GRANTTYPE_IMPLICIT: string;
 export let HTTP_SCHEME: string;
@@ -15,0 +20,0 @@ export let HTTPS_SCHEME: string;

types/v3/createService.d.ts

 export = createServiceFromCredentials;
 /** Heuristic function for creating the correct service instance based on credentials. */
-declare function createServiceFromCredentials(credentials: any, serviceConfiguration: any): IdentityService | XsuaaService;
+declare function createServiceFromCredentials(credentials: any, serviceConfiguration: any): XsuaaService | IdentityService;
+import XsuaaService = require("../service/XsuaaService");
 import IdentityService = require("../service/IdentityService");
-import XsuaaService = require("../service/XsuaaService");
 //# sourceMappingURL=createService.d.ts.map

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

258105

increased by2.87%

Dependency count

2

decreased by-33.33%

Number of package files

181

increased by1.69%

Lines of code

4216

increased by4.64%

Worsened metrics

Dev dependency count

6

increased by20%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• - Removednode-fetch@^2

• - Removednode-fetch@2.7.0(transitive)

• - Removedtr46@0.0.3(transitive)

• - Removedwebidl-conversions@3.0.1(transitive)

• - Removedwhatwg-url@5.0.0(transitive)