52:I[707087,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/3j06ow7w40nxu.js","/_next/static/immutable/chunks/31nn7jwsjvqii.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"RegistryDependencies"] 53:I[314491,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/3j06ow7w40nxu.js","/_next/static/immutable/chunks/31nn7jwsjvqii.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"FilesView"] 54:T2123,"use client" import * as React from "react" import { Controller, useForm, useWatch } from "react-hook-form" import { zodResolver } from "@hookform/resolvers/zod" import { z } from "zod" import { cn } from "@/lib/utils" import { Button } from "@/components/ui/button" import { Field, FieldDescription, FieldError, FieldLabel, } from "@/components/ui/field" import { Input } from "@/components/ui/input" import { Alert, AlertTitle } from "@/components/ui/alert" import { ClaimChip, ClaimsList, claimRowsFromPolicy, claimsListValid, mergeClaimRows, } from "@/components/oidc/claims" import type { OidcPolicy } from "@/lib/oidc/policy" function CustomOidcIcon({ ...props }: React.ComponentProps<"svg">) { return ( ) } const issuerSchema = z .string() .min(1, "Enter the issuer URL.") .regex( /^https:\/\/[^?#\s]+$/, "Enter an https:// URL without query or fragment." ) const audienceSchema = z.string().min(1, "Enter the audience.") const subjectSchema = z.string() const extraClaimsSchema = z.array( z.object({ name: z.string(), values: z.string() }) ) const schema = z.object({ issuer: issuerSchema, audience: audienceSchema, subject: subjectSchema, extraClaims: extraClaimsSchema, }) type Fields = z.infer const DEFAULTS: Fields = { issuer: "", audience: "", subject: "", extraClaims: [], } const FIRST_CLASS_CLAIMS = ["aud", "sub"] function parsePastedIssuer(text: string) { const match = text .trim() .match(/^(https:\/\/[^?#\s]+?)\/\.well-known\/openid-configuration\/?$/) return match ? { issuer: match[1] } : null } // The escape hatch: any OIDC issuer. Matches broadly, so list it LAST in the // providers array — edit-routing tries providers in order. function compile(fields: Fields) { const claims: Record = {} if (fields.audience) { claims.aud = [fields.audience] } if (fields.subject) { claims.sub = [fields.subject] } mergeClaimRows(claims, fields.extraClaims, FIRST_CLASS_CLAIMS) return { issuer: fields.issuer, claims } } function parse(policy: OidcPolicy) { if (!policy.issuer.startsWith("https://")) { return null } if ((policy.claims.aud?.length ?? 0) > 1) { return null } if ((policy.claims.sub?.length ?? 0) > 1) { return null } const extraClaims = claimRowsFromPolicy(policy.claims, FIRST_CLASS_CLAIMS) if (extraClaims === null) { return null } return { issuer: policy.issuer, audience: policy.claims.aud?.[0] ?? "", subject: policy.claims.sub?.[0] ?? "", extraClaims, } } /** True when this form can represent the policy — for routing an edit. */ function matchesCustomPolicy(policy: OidcPolicy) { return parse(policy) !== null } function CustomPolicyForm({ defaultValue, onChange, onSubmit, className, }: { defaultValue?: OidcPolicy onChange?: (policy: OidcPolicy) => void onSubmit: (policy: OidcPolicy) => void className?: string }) { const form = useForm({ resolver: zodResolver(schema), mode: "onChange", defaultValues: defaultValue ? (parse(defaultValue) ?? DEFAULTS) : DEFAULTS, }) const watched = { issuer: useWatch({ control: form.control, name: "issuer" }), audience: useWatch({ control: form.control, name: "audience" }), subject: useWatch({ control: form.control, name: "subject" }), } const onChangeRef = React.useRef(onChange) React.useEffect(() => { onChangeRef.current = onChange }, [onChange]) React.useEffect(() => { return form.subscribe({ formState: { values: true }, callback: ({ values }) => { const policy = compile(values) onChangeRef.current?.( defaultValue?.label ? { ...policy, label: defaultValue.label } : policy ) }, }) }, [form, defaultValue?.label]) return (

{ if (!claimsListValid(fields.extraClaims, FIRST_CLASS_CLAIMS)) { return } const policy = compile(fields) onSubmit( defaultValue?.label ? { ...policy, label: defaultValue.label } : policy ) })} > ( Issuer iss field.onChange(event.target.value.trim())} onPaste={(event) => { const patch = parsePastedIssuer( event.clipboardData.getData("text") ) if (!patch) { return } event.preventDefault() form.reset( { ...form.getValues(), ...patch }, { keepDefaultValues: true } ) }} /> {fieldState.invalid && } The issuer's OIDC discovery root — pasting a discovery URL works too. )} /> ( Audience aud field.onChange(event.target.value.trim())} /> {fieldState.invalid && } The audience the caller requests its token for. Pick a value unique to your app. )} /> ( Subject sub field.onChange(event.target.value.trim())} /> {fieldState.invalid && } Optional: the issuer's primary identifier for the caller. )} /> ( )} /> {watched.issuer && watched.audience && !watched.subject ? ( Without a subject, every workload this issuer signs tokens for is trusted. ) : null} ) } export { CustomOidcIcon, CustomPolicyForm, matchesCustomPolicy } 51:["$","div",null,{"className":"mt-3 flex min-h-0 min-w-0 flex-1 flex-col gap-3","children":[["$","div",null,{"className":"flex shrink-0 items-start gap-3","children":[["$","div",null,{"className":"flex max-h-28 min-w-0 flex-1 flex-wrap items-center gap-2 overflow-y-auto","children":[["$","ul",null,{"className":"flex min-w-0 flex-wrap gap-2","aria-label":"Package dependencies","children":[["$","li","@hookform/resolvers",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/%40hookform%2Fresolvers","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"@hookform/resolvers"}]]}]}],["$","li","react-hook-form",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/react-hook-form","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"react-hook-form"}]]}]}],["$","li","zod",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/zod","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"zod"}]]}]}]]}],["$","$L52",null,{"namespace":"@oidc","registryDependencies":["https://ui.shadcn.com/oidc/r/policy.json","https://ui.shadcn.com/oidc/r/claims.json","button","field","input","alert"]}]]}],null]}],["$","$L53",null,{"files":[{"path":"registry/oidc/flavors/rhf-zod/provider-custom.tsx","content":"$54","type":"registry:component","target":"@components/oidc/provider-custom.tsx"}],"className":"h-[70svh] min-h-80"}]]}]