@executor-js/react
1.4.32
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.12
- @executor-js/api@1.4.32
1.4.31
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.11
- @executor-js/api@1.4.31
1.4.30
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.10
- @executor-js/api@1.4.30
1.4.29
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.9
- @executor-js/api@1.4.29
1.4.28
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.8
- @executor-js/api@1.4.28
1.4.27
Patch Changes
1.4.26
Patch Changes
-
#943
f485e4aThanks @RhysSullivan! - One auth model across OpenAPI, GraphQL, and MCP- Every protocol plugin now stores the same placements-based auth methods (the new
@executor-js/sdk/http-authvocabulary): an API-key method carries any mix of header and query placements, each rendered from its own credential input — so one source can declare OAuth, a bearer-header-plus-team-id-query method, a plain bearer, and a query token side by side, and one connection can carry several values (e.g. both Datadog keys). - MCP and GraphQL gain what only OpenAPI could do before: multi-placement methods, query-parameter credentials (servers like ui.sh's
?token=), and multi-input connections. Rendering, catalog projection, slug normalization, and the React method editor/codec are shared instead of triplicated; the connect modal collects one value per input. - Invoking with an unresolvable credential input now fails with
connection_value_missing(naming the missing inputs) instead of silently dialing unauthenticated. - Stored integration configs are rewritten to the canonical shape by a one-off migration: local and self-host run it automatically at startup; cloud operators run
bun run db:migrate-auth:prodbefore deploying. Connection bindings and stored credential values are preserved exactly. - Authoring: apikey methods are authored in ONE request-shaped dialect on every plugin — it reads like the request it produces:
{ type: "apiKey", headers: { Authorization: ["Bearer ", variable("token")] }, queryParams: { team_id: [variable("team_id")] } }(variable()is exported from each plugin; a plain-string value is a static literal). Inputs normalize to the canonical placements model, which is what stored configs and the catalog read as. Authoring is strict where the renderer is: a value carries at most one variable, as the final part. - Every method is keyed by
kind— OpenAPI's oauth templates re-key from the retiredtype: "oauth"spelling tokind: "oauth2"(matching MCP/GraphQL); the one-off migration rewrites stored entries. - Breaking (wire): the retired single-placement inputs (
headerNameon MCP,in/nameon GraphQL), raw canonical-placement inputs, andtype: "oauth"oauth inputs are rejected. Themcp.addServersingularauthshorthand still works.
- Every protocol plugin now stores the same placements-based auth methods (the new
-
Updated dependencies []:
- @executor-js/sdk@1.5.4
- @executor-js/api@1.4.26
1.4.25
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.3
- @executor-js/api@1.4.25
1.4.24
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.2
- @executor-js/api@1.4.24
1.4.23
Patch Changes
- Updated dependencies []:
- @executor-js/sdk@1.5.1
- @executor-js/api@1.4.23