uma

@solidlab/uma

This package implements a UMA Authorization Service as defined by the User-Managed Access (UMA) 2.0 Grant for OAuth 2.0 Authorization specification.

Details

This package uses the Components.JS semantic dependency injection framework in TypeScript, along with Digita's HandlersJS library.

Configurations

A default configuration for ComponentsJS dependency injection is provided in config/default.json. Note that this default configuration does not yet use Solid OIDC authentication, but rather allows for dummy tokens to authenticate with. Modules for enabling Solid OIDC authentication are present in the package, such that they can be swapped in.

Known limitations

Unused parameters in token request

For token requests with grant_type urn:ietf:params:oauth:grant-type:uma-ticket, the token endpoint will ignore paramters pct and scope defined as optional in section 3.3.1 of the specification.