cernont
654b297e2e
- Connexion API via proxy Angular (résolution CORS, base path /api) - Import CSS ng-zorro global pour les modales et composants - Filtres Camion/Show câblés sur l'affichage de la grille - Camions affichés via TrucksService (linkés au show du même créneau) - Panneau de détails : spectacles + camions du jour sélectionné - Modale de création de spectacle stylisée avec fond et centrage - Positionnement précis des events à la minute dans leur créneau - Auto-scroll vers l'heure courante au chargement - Ligne "maintenant" sur la colonne du jour actuel - Régénération des services OpenAPI (nouveaux noms de types) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
68 lines
3.0 KiB
TypeScript
68 lines
3.0 KiB
TypeScript
import { Response } from "express";
|
|
import { OAuthRegisteredClientsStore } from "./clients.js";
|
|
import { OAuthClientInformationFull, OAuthTokenRevocationRequest, OAuthTokens } from "../../shared/auth.js";
|
|
import { AuthInfo } from "./types.js";
|
|
export type AuthorizationParams = {
|
|
state?: string;
|
|
scopes?: string[];
|
|
codeChallenge: string;
|
|
redirectUri: string;
|
|
resource?: URL;
|
|
};
|
|
/**
|
|
* Implements an end-to-end OAuth server.
|
|
*/
|
|
export interface OAuthServerProvider {
|
|
/**
|
|
* A store used to read information about registered OAuth clients.
|
|
*/
|
|
get clientsStore(): OAuthRegisteredClientsStore;
|
|
/**
|
|
* Begins the authorization flow, which can either be implemented by this server itself or via redirection to a separate authorization server.
|
|
*
|
|
* This server must eventually issue a redirect with an authorization response or an error response to the given redirect URI. Per OAuth 2.1:
|
|
* - In the successful case, the redirect MUST include the `code` and `state` (if present) query parameters.
|
|
* - In the error case, the redirect MUST include the `error` query parameter, and MAY include an optional `error_description` query parameter.
|
|
*/
|
|
authorize(client: OAuthClientInformationFull, params: AuthorizationParams, res: Response): Promise<void>;
|
|
/**
|
|
* Returns the `codeChallenge` that was used when the indicated authorization began.
|
|
*/
|
|
challengeForAuthorizationCode(client: OAuthClientInformationFull, authorizationCode: string): Promise<string>;
|
|
/**
|
|
* Exchanges an authorization code for an access token.
|
|
*/
|
|
exchangeAuthorizationCode(client: OAuthClientInformationFull, authorizationCode: string, codeVerifier?: string, redirectUri?: string, resource?: URL): Promise<OAuthTokens>;
|
|
/**
|
|
* Exchanges a refresh token for an access token.
|
|
*/
|
|
exchangeRefreshToken(client: OAuthClientInformationFull, refreshToken: string, scopes?: string[], resource?: URL): Promise<OAuthTokens>;
|
|
/**
|
|
* Verifies an access token and returns information about it.
|
|
*/
|
|
verifyAccessToken(token: string): Promise<AuthInfo>;
|
|
/**
|
|
* Revokes an access or refresh token. If unimplemented, token revocation is not supported (not recommended).
|
|
*
|
|
* If the given token is invalid or already revoked, this method should do nothing.
|
|
*/
|
|
revokeToken?(client: OAuthClientInformationFull, request: OAuthTokenRevocationRequest): Promise<void>;
|
|
/**
|
|
* Whether to skip local PKCE validation.
|
|
*
|
|
* If true, the server will not perform PKCE validation locally and will pass the code_verifier to the upstream server.
|
|
*
|
|
* NOTE: This should only be true if the upstream server is performing the actual PKCE validation.
|
|
*/
|
|
skipLocalPkceValidation?: boolean;
|
|
}
|
|
/**
|
|
* Slim implementation useful for token verification
|
|
*/
|
|
export interface OAuthTokenVerifier {
|
|
/**
|
|
* Verifies an access token and returns information about it.
|
|
*/
|
|
verifyAccessToken(token: string): Promise<AuthInfo>;
|
|
}
|
|
//# sourceMappingURL=provider.d.ts.map
|