express-openid-connect - npm Package Compare versions

Comparing version 2.13.0 to 2.14.0

index.d.ts

 // Type definitions for express-openid-connect
 
+import type { Agent as HttpAgent } from 'http';
+import type { Agent as HttpsAgent } from 'https';
 import {
@@ -504,3 +506,3 @@ AuthorizationParameters,
      */
-    callback?: string;
+    callback?: string | false;
   };
@@ -595,2 +597,18 @@
   /**
+   * Specify an Agent or Agents to pass to the underlying http client https://github.com/sindresorhus/got/
+   *
+   * An object representing `http`, `https` and `http2` keys for [`http.Agent`](https://nodejs.org/api/http.html#http_class_http_agent),
+   * [`https.Agent`](https://nodejs.org/api/https.html#https_class_https_agent) and [`http2wrapper.Agent`](https://github.com/szmarczak/http2-wrapper#new-http2agentoptions) instance.
+   *
+   * See https://github.com/sindresorhus/got/blob/v11.8.6/readme.md#agent
+   *
+   * For a proxy agent see https://www.npmjs.com/package/proxy-agent
+   */
+  httpAgent?: {
+    http?: HttpAgent | false;
+    https?: HttpsAgent | false;
+    http2?: unknown | false;
+  };
+
+  /**
    * Optional User-Agent header value for oidc client requests.  Default is `express-openid-connect/{version}`.
@@ -776,2 +794,3 @@ */
    * Defaults to "Lax" but will be adjusted based on {@link AuthorizationParameters.response_type}.
+   * When setting to 'None' (uncommon), you should implement CSRF protection on your own routes
    */
@@ -778,0 +797,0 @@ sameSite?: string;

lib/client.js

@@ -34,2 +34,3 @@ const { Issuer, custom } = require('openid-client');
     options.timeout = config.httpTimeout;
+    options.agent = config.httpAgent;
     return options;
@@ -36,0 +37,0 @@ };

lib/config.js

@@ -264,2 +264,3 @@ const Joi = require('joi');
   httpUserAgent: Joi.string().optional(),
+  httpAgent: Joi.object().optional(),
 });
@@ -266,0 +267,0 @@

package.json

 {
   "name": "express-openid-connect",
-  "version": "2.13.0",
+  "version": "2.14.0",
   "description": "Express middleware to protect web applications using OpenID Connect.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/auth0/express-openid-connect",

No alert changes

Improved metrics

Total package byte prevSize

93335

increased by1.07%

Lines of code

2593

increased by0.78%

No dependency changes