Overview - Ping-javascript-sdk

ping-javascript-sdk

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
631
f90e946e refactor(oidc-client): move useParFlow derivation out of authorizeµ parameter default
by Ryan Bas
Succeeded
631
af739c4e feat(oidc-client): add-par-support
by Ryan Bas
Succeeded
631
afac822b fix(journey-client,device-client): fix AbortSignal cross-realm failure on Node 24 Node 24 tightened undici's instanceof AbortSignal check. When vitest runs under jsdom, RTK's createAsyncThunk picks up jsdom's AbortController, producing a signal that fails instanceof in native fetch. Switch both store test files to @vitest-environment node. The redirect test that needed window.location.assign is updated to use vi.stubGlobal instead of vi.spyOn so it works without a DOM environment.
by Ryan Bas
Succeeded
631
673dc21a feat(oidc-client): add-par-support
by Ryan Bas
Succeeded
631
2f3564a4 refactor(oidc-client): move Micro helpers into micros.ts; utils.ts holds only pure utilities Establish the convention: any function returning a Micro lives in authorize.request.micros.ts and ends in µ. authorize.request.utils.ts now contains only pure stateless utilities (type guards, error converters, URL builders) with no dependency on the Effect library.
by Ryan Bas
Succeeded
631
08f8d740 refactor(oidc-client): move Micro helpers into micros.ts; utils.ts holds only pure utilities Establish the convention: any function returning a Micro lives in authorize.request.micros.ts and ends in µ. authorize.request.utils.ts now contains only pure stateless utilities (type guards, error converters, URL builders) with no dependency on the Effect library.
by Ryan Bas
Succeeded
631
b9122fe0 fix(oidc-client): address PAR code review — correctness, security, error handling - Fix: spurious await on Micro value in client.store authorize path - Fix: validateParResponse uses toDispatchError for SerializedError, preserving diagnostic info instead of silently dropping it - Fix: optional chaining on wellknown?.require_pushed_authorization_requests in authorizeµ default param (prevents synchronous throw outside Micro) - Fix: scope PAR dispatch tapError inside flatMap to prevent double-logging with misleading "Error dispatching PAR authorize request" message - Fix: dispatchAuthorizeIframe validates code+state shape before succeeding - Fix: add credentials: include to PAR endpoint FetchArgs for SSO support - Fix: correct misleading log in authorizeIframe error path - Feat: surface expires_in from PAR response; warn when TTL < 30s - Test: add PAR 400 error e2e scenario to mock server and par.spec.ts - Chore: remove console.log debug artifacts from client.store.test.ts
by Ryan Bas
Succeeded
631
2b472c83 feat(oidc-client): add-par-support
by Ryan Bas
Succeeded
631
f38ce4e5 feat(davinci-client): enforce PAR when server mandates it via well-known If require_pushed_authorization_requests is true in the OIDC discovery response, the server will reject any direct authorize request. This change stores the PAR endpoint and mandate flag from the well-known response in the config slice, then performs a PAR POST before the authorize redirect whenever the server requires it.
by Ryan Bas
Succeeded
631
a3bcb7af fix(oidc-client): address PAR code review — correctness, security, error handling - Fix: spurious await on Micro value in client.store authorize path - Fix: validateParResponse uses toDispatchError for SerializedError, preserving diagnostic info instead of silently dropping it - Fix: optional chaining on wellknown?.require_pushed_authorization_requests in authorizeµ default param (prevents synchronous throw outside Micro) - Fix: scope PAR dispatch tapError inside flatMap to prevent double-logging with misleading "Error dispatching PAR authorize request" message - Fix: dispatchAuthorizeIframe validates code+state shape before succeeding - Fix: add credentials: include to PAR endpoint FetchArgs for SSO support - Fix: correct misleading log in authorizeIframe error path - Feat: surface expires_in from PAR response; warn when TTL < 30s - Test: add PAR 400 error e2e scenario to mock server and par.spec.ts - Chore: remove console.log debug artifacts from client.store.test.ts
by Ryan Bas
Succeeded
631
e81b87e9 refactor(oidc-client): finalize authorize.request layer split — remove bridge re-exports
by Ryan Bas
Succeeded
631
3cac9c26 feat(oidc-client): add-par-support
by Ryan Bas
Succeeded
631
ff206e79 feat(oidc-client): add-par-support
by Ryan Bas
Succeeded
631
2b25bc83 fix(oidc-client): harden error paths and fix wellknown e2e test assertion The bad-wellknown e2e test was asserting on a message from the authorize.background() code path, but the factory itself returns early with a "Failed to fetch well-known configuration" error when the HTTP fetch fails — the background path is never reached. Also moves pure helper functions out of authorize.request.utils into authorize.request to reduce circular dependency risk, and simplifies buildAuthorizeOptions to a plain function instead of a Micro effect.
by Ryan Bas
Succeeded
631
40745d15 fix(oidc-client): harden error paths from PR review - toAuthorizationError: validate type/error_description fields instead of casting; prevents server-injected strings from bypassing the typed-error contract - client.store factory: return immediately on wellknown fetch failure instead of logging and falling through with undefined data - PAR error logging: include error type+code in log message so PAR_STORAGE_ERROR is not reported as 'Error creating PAR authorize URL'; add tapError to the authorize.url() PAR path which had no logging
by Ryan Bas
Succeeded
631
e9691581 feat(e2e): add journey login step to PAR page to establish AM session before background auth
by Ryan Bas
Failed
631
e9691581 feat(e2e): add journey login step to PAR page to establish AM session before background auth
by Ryan Bas
Failed
631
a3f968a9 fix(oidc-client): strip prompt from PAR POST body, append to slim authorize URL AM evaluates prompt=none eagerly at push-time — with no active session it returns invalid_request instead of login_required, breaking background PAR auth. Per RFC 9126 intent, prompt belongs on the final redirect URL so the authorization server evaluates it at request-time. Also adds e2e fixtures and tests for background PAR (ParClient) and fixes the redirect test's authorize URL filter to correctly identify the slim PAR URL.
by Ryan Bas
Failed
631
a3f968a9 fix(oidc-client): strip prompt from PAR POST body, append to slim authorize URL AM evaluates prompt=none eagerly at push-time — with no active session it returns invalid_request instead of login_required, breaking background PAR auth. Per RFC 9126 intent, prompt belongs on the final redirect URL so the authorization server evaluates it at request-time. Also adds e2e fixtures and tests for background PAR (ParClient) and fixes the redirect test's authorize URL filter to correctly identify the slim PAR URL.
by Ryan Bas
Failed
631
a3f968a9 fix(oidc-client): strip prompt from PAR POST body, append to slim authorize URL AM evaluates prompt=none eagerly at push-time — with no active session it returns invalid_request instead of login_required, breaking background PAR auth. Per RFC 9126 intent, prompt belongs on the final redirect URL so the authorization server evaluates it at request-time. Also adds e2e fixtures and tests for background PAR (ParClient) and fixes the redirect test's authorize URL filter to correctly identify the slim PAR URL.
by Ryan Bas