Zoltan Kochan
3b5af3f793
With `auth.scim.token`, pnpr serves the SCIM 2.0 `Users` endpoints and discovery documents under `/-/pnpr/v0/scim/v2`, authenticated only by that token. An OIDC sign-in creates no account row and its session lives in one replica's memory, so deleting an account is not enough to deprovision anyone. The SCIM directory is therefore one record in the hosted store, reloaded on the managed-state TTL like rosters and rules. Authentication refuses any user identity the directory marks inactive, and so does the npm login endpoint. Deactivating or deleting a user also revokes its stored tokens, removes its password account, and drops this replica's browser sessions for it. A deleted user stays in the record as inactive and unlisted, so the username keeps being refused until it is provisioned again. Provisioning creates no password: the identity provider is the sign-in path. Follow-up of pnpm/tasks#111.
562 lines
8.6 KiB
JSON
562 lines
8.6 KiB
JSON
{
|
|
"ignorePaths": [
|
|
"**/nodeReleaseKeys.ts",
|
|
"**/nodeReleaseKeys.d.ts",
|
|
"**/node_release_keys.rs",
|
|
"bench-work-env/**",
|
|
"target/**",
|
|
"vendor/**"
|
|
],
|
|
"words": [
|
|
"abrt",
|
|
"adduser",
|
|
"adipiscing",
|
|
"agentkeepalive",
|
|
"agentkeepalive's",
|
|
"aliasless",
|
|
"amet",
|
|
"andreineculau",
|
|
"APFS",
|
|
"appdata",
|
|
"applyq",
|
|
"archy",
|
|
"argumentless",
|
|
"armv",
|
|
"AUTHTOKEN",
|
|
"autocheckpoint",
|
|
"autocompleting",
|
|
"autofix",
|
|
"autofixed",
|
|
"autoinstalled",
|
|
"autozoom",
|
|
"babek",
|
|
"Backblaze",
|
|
"badheaders",
|
|
"baires",
|
|
"basedirs",
|
|
"bdist",
|
|
"behaviour",
|
|
"blabla",
|
|
"Bluesky",
|
|
"brasileiro",
|
|
"bryntum",
|
|
"btrfs",
|
|
"buildx",
|
|
"Bunzip",
|
|
"cafile",
|
|
"cafs",
|
|
"camelcase",
|
|
"canonicalizer",
|
|
"cantopen",
|
|
"canva",
|
|
"CDPATH",
|
|
"cerbos",
|
|
"certfile",
|
|
"chcp",
|
|
"chmods",
|
|
"clonedeep",
|
|
"clonefile",
|
|
"cmds",
|
|
"Codeberg",
|
|
"codegen",
|
|
"codeload",
|
|
"codenames",
|
|
"codesign",
|
|
"colorterm",
|
|
"compdef",
|
|
"COMPREPLY",
|
|
"comver",
|
|
"cooldown",
|
|
"copyfiles",
|
|
"corejs",
|
|
"corepack",
|
|
"corge",
|
|
"cowsay",
|
|
"creatordate",
|
|
"Creds",
|
|
"cryptiles",
|
|
"cves",
|
|
"CWORD",
|
|
"cwsay",
|
|
"cyclonedx",
|
|
"cygdrive",
|
|
"dashrc",
|
|
"deburr",
|
|
"dedup",
|
|
"denoland",
|
|
"denolib",
|
|
"dependson",
|
|
"deptype",
|
|
"desugared",
|
|
"desugars",
|
|
"devextreme",
|
|
"devowl",
|
|
"dgimuvys",
|
|
"didyoumean",
|
|
"dirents",
|
|
"dirtyforms",
|
|
"diskusage",
|
|
"dislink",
|
|
"dpkg",
|
|
"drivelist",
|
|
"duplexify",
|
|
"eacces",
|
|
"eagain",
|
|
"ebadplatform",
|
|
"ebusy",
|
|
"eexist",
|
|
"ehrkoext",
|
|
"eintegrity",
|
|
"eisdir",
|
|
"elifecycle",
|
|
"elit",
|
|
"embedder",
|
|
"embedders",
|
|
"emfile",
|
|
"enametoolong",
|
|
"endgroup",
|
|
"endregion",
|
|
"eneedauth",
|
|
"enoent",
|
|
"enotdir",
|
|
"enotempty",
|
|
"enten",
|
|
"eotp",
|
|
"eperm",
|
|
"epipe",
|
|
"erofs",
|
|
"errcode",
|
|
"errorlevel",
|
|
"esac",
|
|
"esep",
|
|
"etamponi",
|
|
"exdev",
|
|
"execa",
|
|
"execpath",
|
|
"exploitability",
|
|
"fakehash",
|
|
"fastlist",
|
|
"fellback",
|
|
"fetchings",
|
|
"filenamify",
|
|
"filesystem",
|
|
"filesystems",
|
|
"fnumber",
|
|
"foobarqar",
|
|
"foofoo",
|
|
"footgun",
|
|
"forgejo",
|
|
"forwardable",
|
|
"fsevents",
|
|
"fslib",
|
|
"gabor",
|
|
"garply",
|
|
"gcttmf",
|
|
"getaddrinfo",
|
|
"getattr",
|
|
"ghes",
|
|
"ghsa",
|
|
"ghsas",
|
|
"gitdir",
|
|
"gitea",
|
|
"globalconfig",
|
|
"globstar",
|
|
"gnueabihf",
|
|
"gpgsign",
|
|
"grault",
|
|
"gruntfile",
|
|
"gwhitney",
|
|
"gypfile",
|
|
"haptics",
|
|
"hardlink",
|
|
"hardlinked",
|
|
"hardlinking",
|
|
"hardlinks",
|
|
"hashbang",
|
|
"hashless",
|
|
"highmaps",
|
|
"hikljmi",
|
|
"hoistable",
|
|
"homepath",
|
|
"hosters",
|
|
"hostnames",
|
|
"htpasswd",
|
|
"hyperdrive",
|
|
"idempotency",
|
|
"imagetools",
|
|
"imurmurhash",
|
|
"inodes",
|
|
"invalidformat",
|
|
"ionicons",
|
|
"isexe",
|
|
"istvan",
|
|
"italiano",
|
|
"jega",
|
|
"jhcg",
|
|
"jnbpamcxayl",
|
|
"journaled",
|
|
"junyi",
|
|
"kebabcase",
|
|
"kevva",
|
|
"keyfile",
|
|
"keyid",
|
|
"keytype",
|
|
"killcb",
|
|
"kochan",
|
|
"koorchik",
|
|
"kshrc",
|
|
"LASTEXITCODE",
|
|
"ldid",
|
|
"ldni",
|
|
"ledgered",
|
|
"leniolabs",
|
|
"libc",
|
|
"libnpmpublish",
|
|
"libnpx",
|
|
"libpnpm",
|
|
"libsql",
|
|
"libzip",
|
|
"licence",
|
|
"licences",
|
|
"lifecycles",
|
|
"lightningcss",
|
|
"linearization",
|
|
"linuxstatic",
|
|
"localappdata",
|
|
"lockfiles",
|
|
"loglevel",
|
|
"logstream",
|
|
"longlink",
|
|
"longpaths",
|
|
"loong",
|
|
"lowlink",
|
|
"ltrim",
|
|
"luca",
|
|
"malloc",
|
|
"manylinux",
|
|
"martensson",
|
|
"maxsockets",
|
|
"maxtimeout",
|
|
"mdast",
|
|
"metacharacter",
|
|
"metafile",
|
|
"millis",
|
|
"minioadmin",
|
|
"mintimeout",
|
|
"mkfifo",
|
|
"mksh",
|
|
"mmap",
|
|
"monorepolint",
|
|
"montudor",
|
|
"moonrepo",
|
|
"mountpoint",
|
|
"msgpack",
|
|
"msgpackr",
|
|
"msvc",
|
|
"msys",
|
|
"MSYSTEM",
|
|
"mtimes",
|
|
"musleabihf",
|
|
"mycomp",
|
|
"mycompany",
|
|
"myorg",
|
|
"mypackage",
|
|
"mytoken",
|
|
"napi",
|
|
"ndjson",
|
|
"nerfed",
|
|
"newteam",
|
|
"newversion",
|
|
"nistp",
|
|
"NOASSERTION",
|
|
"nodepath",
|
|
"nodetouch",
|
|
"noent",
|
|
"nonexec",
|
|
"noninjected",
|
|
"nonvulnerable",
|
|
"noopener",
|
|
"nopadding",
|
|
"noprofile",
|
|
"noproxy",
|
|
"norc",
|
|
"noreferrer",
|
|
"nosystem",
|
|
"nothrow",
|
|
"npath",
|
|
"npmcli",
|
|
"npmignore",
|
|
"npmjs",
|
|
"npmmirror",
|
|
"npmx",
|
|
"ntfs",
|
|
"nushell",
|
|
"ofjergrg",
|
|
"oldteam",
|
|
"onclickoutside",
|
|
"onstat",
|
|
"oomol",
|
|
"openharmony",
|
|
"openpgp",
|
|
"openpyxl",
|
|
"ossl",
|
|
"outfile",
|
|
"overrider",
|
|
"packlist",
|
|
"packr",
|
|
"packument",
|
|
"packuments",
|
|
"pacquet",
|
|
"paralleljs",
|
|
"parallelly",
|
|
"parseable",
|
|
"partialmatch",
|
|
"pathext",
|
|
"pathsep",
|
|
"peeker",
|
|
"pegjs",
|
|
"pgid",
|
|
"pids",
|
|
"pidtree",
|
|
"pify",
|
|
"pinnable",
|
|
"pkgid",
|
|
"pkgname",
|
|
"pkgs",
|
|
"plotly",
|
|
"plugh",
|
|
"pnpmfile",
|
|
"pnpmfiles",
|
|
"pnpmjs",
|
|
"pnpmrc",
|
|
"pnpmtest",
|
|
"pnpr",
|
|
"polyfilling",
|
|
"português",
|
|
"posix",
|
|
"postbuild",
|
|
"postfoo",
|
|
"postpack",
|
|
"postprepare",
|
|
"postpublish",
|
|
"postrestart",
|
|
"postshrinkwrap",
|
|
"poststart",
|
|
"poststop",
|
|
"posttest",
|
|
"postuninstall",
|
|
"postversion",
|
|
"preact",
|
|
"prebuild",
|
|
"prefoo",
|
|
"prefs",
|
|
"preinstall",
|
|
"premajor",
|
|
"preminor",
|
|
"preopens",
|
|
"prepatch",
|
|
"prepublish",
|
|
"prereleases",
|
|
"prerestart",
|
|
"preshrinkwrap",
|
|
"prestart",
|
|
"prestop",
|
|
"preuninstall",
|
|
"preversion",
|
|
"prioritizer",
|
|
"promisified",
|
|
"propfind",
|
|
"proxied",
|
|
"publickey",
|
|
"pwsh",
|
|
"pylock",
|
|
"pypi",
|
|
"pyproject",
|
|
"pythonhosted",
|
|
"qrcode",
|
|
"quux",
|
|
"rcompare",
|
|
"redownload",
|
|
"refclone",
|
|
"refetched",
|
|
"refetches",
|
|
"reflattened",
|
|
"reflink",
|
|
"reflinked",
|
|
"reflinks",
|
|
"rehoist",
|
|
"reimagining",
|
|
"reka",
|
|
"Rekor",
|
|
"relinks",
|
|
"renderable",
|
|
"reparses",
|
|
"replit",
|
|
"repoint",
|
|
"repointing",
|
|
"reqheaders",
|
|
"rescans",
|
|
"rescopable",
|
|
"rescope",
|
|
"rescoped",
|
|
"rescopes",
|
|
"rescoping",
|
|
"resolv",
|
|
"revisioned",
|
|
"rimrafed",
|
|
"riscv",
|
|
"rmgr",
|
|
"rpmdevtools",
|
|
"rpmlint",
|
|
"rsort",
|
|
"rstacruz",
|
|
"rushstack",
|
|
"rustc",
|
|
"rustup",
|
|
"safecrlf",
|
|
"sccache",
|
|
"scim",
|
|
"scopeless",
|
|
"scriptless",
|
|
"sdiff",
|
|
"searchexclude",
|
|
"searchlimit",
|
|
"searchopts",
|
|
"searchstaleness",
|
|
"secp",
|
|
"sels",
|
|
"semistrict",
|
|
"serde",
|
|
"serp",
|
|
"serverjs",
|
|
"setgid",
|
|
"SETLOCAL",
|
|
"setx",
|
|
"shasums",
|
|
"sheetjs",
|
|
"Sherov",
|
|
"shlex",
|
|
"shrc",
|
|
"SIGPIPE",
|
|
"sigstore",
|
|
"sindresorhus",
|
|
"sirv",
|
|
"skopeo",
|
|
"SLSA",
|
|
"soporan",
|
|
"sopts",
|
|
"spdxdocs",
|
|
"SPDXID",
|
|
"sqld",
|
|
"srcset",
|
|
"ssri",
|
|
"stackblitz",
|
|
"stacktracey",
|
|
"statter",
|
|
"stdtype",
|
|
"streamsearch",
|
|
"stringifying",
|
|
"strongconnect",
|
|
"subcmd",
|
|
"subdep",
|
|
"subdependencies",
|
|
"subdependency",
|
|
"subdeps",
|
|
"subdir",
|
|
"subdirs",
|
|
"subkey",
|
|
"subkeys",
|
|
"subpkg",
|
|
"subresource",
|
|
"supercede",
|
|
"Swatinem",
|
|
"syml",
|
|
"symref",
|
|
"syncer",
|
|
"syscall",
|
|
"syscalls",
|
|
"systemroot",
|
|
"szia",
|
|
"tabtab",
|
|
"taffydb",
|
|
"taiki",
|
|
"tarballtemplate",
|
|
"Tarjan",
|
|
"taskkill",
|
|
"teambit",
|
|
"tempy",
|
|
"testcase",
|
|
"thesys",
|
|
"tlog",
|
|
"TLSV",
|
|
"toctou",
|
|
"todomvc",
|
|
"toplevel",
|
|
"TOTP",
|
|
"tsgo",
|
|
"tsparticles",
|
|
"turso",
|
|
"typecheck",
|
|
"typeflag",
|
|
"TYPELESS",
|
|
"unallowed",
|
|
"Unawaited",
|
|
"uncacheable",
|
|
"unconfigured",
|
|
"undeprecate",
|
|
"underperformance",
|
|
"undispatched",
|
|
"undollar",
|
|
"unextractable",
|
|
"Unincluded",
|
|
"uninstallation",
|
|
"unmigrated",
|
|
"unnest",
|
|
"unparseable",
|
|
"unreleasable",
|
|
"unreviewed",
|
|
"Unseparated",
|
|
"unskip",
|
|
"unstar",
|
|
"untracks",
|
|
"unvalidated",
|
|
"usecase",
|
|
"userconfig",
|
|
"userprofile",
|
|
"ustar",
|
|
"uuidv",
|
|
"valign",
|
|
"venv",
|
|
"versionless",
|
|
"vuln",
|
|
"wabt",
|
|
"waitpid",
|
|
"wakeup",
|
|
"wasi",
|
|
"wasip",
|
|
"wbem",
|
|
"webauth",
|
|
"webcontainer",
|
|
"webdav",
|
|
"WIFEXITED",
|
|
"windir",
|
|
"windowspowershell",
|
|
"winst",
|
|
"wordbreaks",
|
|
"workleap",
|
|
"worktree",
|
|
"worktrees",
|
|
"wrappy",
|
|
"wslpath",
|
|
"WTERMSIG",
|
|
"xattr",
|
|
"xattrs",
|
|
"xmarw",
|
|
"yazl",
|
|
"zdotdir",
|
|
"zkochan",
|
|
"zoli",
|
|
"zoltan"
|
|
]
|
|
}
|