Add flatten audience flag to client-assertion generation (#587)

Author: guyp-descope

README.md

@@ -1234,6 +1234,7 @@ const clientAssertionRes = await descopeClient.management.jwt.generateClientAsse
   'client-id-123', // subject
   ['https://example.com/token'], // audience
   300, // expiresIn - number of seconds the token will will be valid for
+  false, // Optional. flattenAudience - set the audience claim as one string instead of array of strings (for case only one audience value has given)
 );
 // clientAssertionRes.data.jwt contains the client assertion JWT
 ```

lib/management/jwt.test.ts

@@ -278,4 +278,42 @@ describe('Management JWT', () => {
       });
     });
   });
+
+  describe('generateClientAssertionJwtWithFlattenedAudience', () => {
+    it('should send the correct generateClientAssertionJwt request and receive correct response', async () => {
+      const httpResponse = {
+        ok: true,
+        json: () => mockJWTResponse,
+        clone: () => ({
+          json: () => Promise.resolve(mockJWTResponse),
+        }),
+        status: 200,
+      };
+      mockHttpClient.post.mockResolvedValue(httpResponse);
+
+      const resp: SdkResponse<ClientAssertionResponse> =
+        await management.jwt.generateClientAssertionJwt(
+          'https://example.com/issuer',
+          'https://example.com/subject',
+          ['https://example.com/token'],
+          300,
+          true,
+        );
+
+      expect(mockHttpClient.post).toHaveBeenCalledWith(apiPaths.jwt.clientAssertion, {
+        issuer: 'https://example.com/issuer',
+        subject: 'https://example.com/subject',
+        audience: ['https://example.com/token'],
+        expiresIn: 300,
+        flattenAudience: true,
+      });
+
+      expect(resp).toEqual({
+        code: 200,
+        data: mockJWTResponse,
+        ok: true,
+        response: httpResponse,
+      });
+    });
+  });
 });

lib/management/jwt.ts

@@ -78,9 +78,16 @@ const withJWT = (httpClient: HttpClient) => ({
     subject: string,
     audience: string[],
     expiresIn: number,
+    flattenAudience?: boolean,
   ): Promise<SdkResponse<ClientAssertionResponse>> =>
     transformResponse(
-      httpClient.post(apiPaths.jwt.clientAssertion, { issuer, subject, audience, expiresIn }),
+      httpClient.post(apiPaths.jwt.clientAssertion, {
+        issuer,
+        subject,
+        audience,
+        expiresIn,
+        flattenAudience,
+      }),
     ),
 });