@webpieces/http-routing
v0.4.979
Published
Decorator-based routing with auto-wiring for WebPieces
Maintainers
Readme
@webpieces/http-routing
Decorator-based routing with auto-wiring for WebPieces
Part of the WebPieces TypeScript framework.
Installation
npm install @webpieces/http-routingOIDC on private Cloud Run
@WpAuth([oidcSameProject()]) and @WpAuth([oidcSvcs([...])]) select client-side Google
ID-token generation. With invocation authentication and invoker IAM enabled, Cloud Run checks the
invocation before it reaches AuthFilter; the framework then checks the caller itself.
oidcSameProject() admits any service account of this service's GCP project (open off GCP, where
there is no project), and oidcSvcs([...]) only the listed accounts, which may belong to other
projects; an endpoint may pair the two, and the token is then verified once against both. A bound
OidcHook receives all of the endpoint's OIDC methods (OidcAuthMethods). Local tokens exercise
the filter chain without proving deployed IAM or Google signature validation.
See the Cloud Run OIDC security boundary for the
current verifier behavior and the assumptions required for that deployment model.
Documentation
See the main WebPieces README for complete documentation and examples.
License
Apache-2.0
Authentication and operation authorization are separate declarations. See the migration guide for policies, canonical context, token-free MCP invocation, and validator release ordering.
