feat: allow token request without ticket

Signed-off-by: Wouter Termont <wouter.termont@ugent.be>

Author: termontwouter

packages/uma/src/dialog/BaseNegotiator.ts

@@ -95,7 +95,9 @@ export class BaseNegotiator implements Negotiator {
       return stored;
     }
 
-    if (!permissions) this.error(BadRequestHttpError, 'The provided ticket is not valid.');
+    if (!permissions) {
+      this.error(BadRequestHttpError, 'A token request without existing ticket should include requested permissions.');
+    }
 
     return await this.ticketingStrategy.initializeTicket(permissions);
   }

packages/uma/src/dialog/Input.ts

@@ -5,7 +5,7 @@ import { Permission } from "../views/Permission";
  * A ReType constant for {@link DialogInput:type}.
  */
 export const DialogInput = ({
-  ticket: string,
+  ticket: $(string),
   claim_token: $(string),
   claim_token_format: $(string), // TODO: switch to array of claims objects with unknown structure
   pct: $(string),

packages/uma/src/routes/Token.ts

@@ -37,9 +37,11 @@ export class TokenRequestHandler implements HttpHandler {
 
     const params = input.request.body;
 
-    if (params['grant_type'] !== 'urn:ietf:params:oauth:grant-type:uma-ticket') {
-      throw new BadRequestHttpError(`Expected 'grant_type' to be set to 'urn:ietf:params:oauth:grant-type:uma-ticket'`);
-    }
+    // if (params['grant_type'] !== 'urn:ietf:params:oauth:grant-type:uma-ticket') {
+    //   throw new BadRequestHttpError(
+    //     `Expected 'grant_type' to be set to 'urn:ietf:params:oauth:grant-type:uma-ticket'
+    //   `);
+    // }
 
     try {
       reType(params, DialogInput);