@3sixty/api-auth-entity-storage-models 0.20.0-next.0 → 0.20.0-next.1

package/README.md

@@ -22,4 +22,4 @@ The changes between each version can be found in [docs/changelog.md](docs/change
 
 ## Origin
 
-This package is derived from the original [iotaledger/twin-api](https://github.com/iotaledger/twin-api/tree/next/packages/api-auth-entity-storage-models) repository.
+This package is derived from the original [iotaledger/twin-api-auth](https://github.com/iotaledger/twin-api-auth/tree/next/packages/api-auth-entity-storage-models) repository.

package/dist/es/index.js

@@ -7,26 +7,16 @@ export * from "./models/api/IAdminUserGetResponse.js";
 export * from "./models/api/IAdminUserRemoveRequest.js";
 export * from "./models/api/IAdminUserUpdatePasswordRequest.js";
 export * from "./models/api/IAdminUserUpdateRequest.js";
-export * from "./models/api/IAuditCreateRequest.js";
-export * from "./models/api/IAuditGetRequest.js";
-export * from "./models/api/IAuditGetResponse.js";
-export * from "./models/api/IAuditQueryRequest.js";
-export * from "./models/api/IAuditQueryResponse.js";
-export * from "./models/api/IAuditRemoveRequest.js";
-export * from "./models/api/IAuditUpdateRequest.js";
 export * from "./models/api/ILoginRequest.js";
 export * from "./models/api/ILoginResponse.js";
 export * from "./models/api/ILogoutRequest.js";
+export * from "./models/api/IPasswordPolicyResponse.js";
 export * from "./models/api/IRefreshTokenRequest.js";
 export * from "./models/api/IRefreshTokenResponse.js";
 export * from "./models/api/IUpdatePasswordRequest.js";
-export * from "./models/authAuditEvent.js";
 export * from "./models/IAuthenticationAdminComponent.js";
-export * from "./models/IAuthenticationAuditComponent.js";
-export * from "./models/IAuthenticationAuditEntry.js";
 export * from "./models/IAuthenticationComponent.js";
-export * from "./models/IAuthenticationRateActionConfig.js";
-export * from "./models/IAuthenticationRateComponent.js";
 export * from "./models/IAuthenticationUser.js";
 export * from "./models/IAuthenticationUserSecure.js";
+export * from "./models/IPasswordOptions.js";
 //# sourceMappingURL=index.js.map

package/dist/es/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,iDAAiD,CAAC;AAChE,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./models/api/IAdminUserCreateRequest.js\";\nexport * from \"./models/api/IAdminUserGetByIdentityRequest.js\";\nexport * from \"./models/api/IAdminUserGetRequest.js\";\nexport * from \"./models/api/IAdminUserGetResponse.js\";\nexport * from \"./models/api/IAdminUserRemoveRequest.js\";\nexport * from \"./models/api/IAdminUserUpdatePasswordRequest.js\";\nexport * from \"./models/api/IAdminUserUpdateRequest.js\";\nexport * from \"./models/api/IAuditCreateRequest.js\";\nexport * from \"./models/api/IAuditGetRequest.js\";\nexport * from \"./models/api/IAuditGetResponse.js\";\nexport * from \"./models/api/IAuditQueryRequest.js\";\nexport * from \"./models/api/IAuditQueryResponse.js\";\nexport * from \"./models/api/IAuditRemoveRequest.js\";\nexport * from \"./models/api/IAuditUpdateRequest.js\";\nexport * from \"./models/api/ILoginRequest.js\";\nexport * from \"./models/api/ILoginResponse.js\";\nexport * from \"./models/api/ILogoutRequest.js\";\nexport * from \"./models/api/IRefreshTokenRequest.js\";\nexport * from \"./models/api/IRefreshTokenResponse.js\";\nexport * from \"./models/api/IUpdatePasswordRequest.js\";\nexport * from \"./models/authAuditEvent.js\";\nexport * from \"./models/IAuthenticationAdminComponent.js\";\nexport * from \"./models/IAuthenticationAuditComponent.js\";\nexport * from \"./models/IAuthenticationAuditEntry.js\";\nexport * from \"./models/IAuthenticationComponent.js\";\nexport * from \"./models/IAuthenticationRateActionConfig.js\";\nexport * from \"./models/IAuthenticationRateComponent.js\";\nexport * from \"./models/IAuthenticationUser.js\";\nexport * from \"./models/IAuthenticationUserSecure.js\";\n"]}
+{"version":3,"file":"index.js","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,iDAAiD,CAAC;AAChE,cAAc,yCAAyC,CAAC;AACxD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sCAAsC,CAAC;AACrD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC;AACtD,cAAc,8BAA8B,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./models/api/IAdminUserCreateRequest.js\";\nexport * from \"./models/api/IAdminUserGetByIdentityRequest.js\";\nexport * from \"./models/api/IAdminUserGetRequest.js\";\nexport * from \"./models/api/IAdminUserGetResponse.js\";\nexport * from \"./models/api/IAdminUserRemoveRequest.js\";\nexport * from \"./models/api/IAdminUserUpdatePasswordRequest.js\";\nexport * from \"./models/api/IAdminUserUpdateRequest.js\";\nexport * from \"./models/api/ILoginRequest.js\";\nexport * from \"./models/api/ILoginResponse.js\";\nexport * from \"./models/api/ILogoutRequest.js\";\nexport * from \"./models/api/IPasswordPolicyResponse.js\";\nexport * from \"./models/api/IRefreshTokenRequest.js\";\nexport * from \"./models/api/IRefreshTokenResponse.js\";\nexport * from \"./models/api/IUpdatePasswordRequest.js\";\nexport * from \"./models/IAuthenticationAdminComponent.js\";\nexport * from \"./models/IAuthenticationComponent.js\";\nexport * from \"./models/IAuthenticationUser.js\";\nexport * from \"./models/IAuthenticationUserSecure.js\";\nexport * from \"./models/IPasswordOptions.js\";\n"]}

package/dist/es/models/IAuthenticationAdminComponent.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationAdminComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationAdminComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication admin component.\n */\nexport interface IAuthenticationAdminComponent extends IComponent {\n\t/**\n\t * Create a login for the user.\n\t * @param user The user to create.\n\t * @returns A promise that resolves when the user account has been created.\n\t */\n\tcreate(user: IAuthenticationUser & { password: string }): Promise<void>;\n\n\t/**\n\t * Update a login for the user.\n\t * @param user The user to update.\n\t * @returns A promise that resolves when the user account has been updated.\n\t */\n\tupdate(user: Partial<IAuthenticationUser>): Promise<void>;\n\n\t/**\n\t * Get a user by email.\n\t * @param email The email address of the user to get.\n\t * @returns The user details.\n\t */\n\tget(email: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Get a user by identity.\n\t * @param identity The identity of the user to get.\n\t * @returns The user details.\n\t */\n\tgetByIdentity(identity: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Remove a user.\n\t * @param email The email address of the user to remove.\n\t * @returns A promise that resolves when the user account has been removed.\n\t */\n\tremove(email: string): Promise<void>;\n\n\t/**\n\t * Update the user's password.\n\t * @param email The email address of the user to update.\n\t * @param newPassword The new password for the user.\n\t * @param currentPassword The current password, optional, if supplied will check against existing.\n\t * @returns A promise that resolves when the password has been updated.\n\t */\n\tupdatePassword(email: string, newPassword: string, currentPassword?: string): Promise<void>;\n}\n"]}
+{"version":3,"file":"IAuthenticationAdminComponent.js","sources":["../../../src/models/IAuthenticationAdminComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication admin component.\n */\nexport interface IAuthenticationAdminComponent extends IComponent {\n\t/**\n\t * Create a login for the user.\n\t * @param user The user to create.\n\t * @returns A promise that resolves when the user account has been created.\n\t */\n\tcreate(user: IAuthenticationUser & { password: string }): Promise<void>;\n\n\t/**\n\t * Update a login for the user.\n\t * @param user The user to update.\n\t * @returns A promise that resolves when the user account has been updated.\n\t */\n\tupdate(user: Partial<IAuthenticationUser>): Promise<void>;\n\n\t/**\n\t * Get a user by email.\n\t * @param email The email address of the user to get.\n\t * @returns The user details.\n\t */\n\tget(email: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Get a user by identity.\n\t * @param identity The identity of the user to get.\n\t * @returns The user details.\n\t */\n\tgetByIdentity(identity: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Remove a user.\n\t * @param email The email address of the user to remove.\n\t * @returns A promise that resolves when the user account has been removed.\n\t */\n\tremove(email: string): Promise<void>;\n\n\t/**\n\t * Update the user's password.\n\t * @param email The email address of the user to update.\n\t * @param newPassword The new password for the user.\n\t * @param currentPassword The current password, optional, if supplied will check against existing.\n\t * @returns A promise that resolves when the password has been updated.\n\t */\n\tupdatePassword(email: string, newPassword: string, currentPassword?: string): Promise<void>;\n}\n"]}

package/dist/es/models/IAuthenticationComponent.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\n\n/**\n * Contract definition for authentication component.\n */\nexport interface IAuthenticationComponent extends IComponent {\n\t/**\n\t * Perform a login for the user.\n\t * @param email The email address for the user.\n\t * @param password The password for the user.\n\t * @returns The authentication token for the user, if it uses a mechanism with public access.\n\t */\n\tlogin(\n\t\temail: string,\n\t\tpassword: string\n\t): Promise<{\n\t\ttoken?: string;\n\t\texpiry: number;\n\t}>;\n\n\t/**\n\t * Logout the current user.\n\t * @param token The token to logout, if it uses a mechanism with public access.\n\t * @returns A promise that resolves when the logout has been completed.\n\t */\n\tlogout(token?: string): Promise<void>;\n\n\t/**\n\t * Refresh the token.\n\t * @param token The token to refresh, if it uses a mechanism with public access.\n\t * @returns The refreshed token, if it uses a mechanism with public access.\n\t */\n\trefresh(token?: string): Promise<{\n\t\ttoken?: string;\n\t\texpiry: number;\n\t}>;\n\n\t/**\n\t * Update the user's password.\n\t * @param currentPassword The current password for the user.\n\t * @param newPassword The new password for the user.\n\t * @returns A promise that resolves when the password has been updated.\n\t */\n\tupdatePassword(currentPassword: string, newPassword: string): Promise<void>;\n}\n"]}
+{"version":3,"file":"IAuthenticationComponent.js","sources":["../../../src/models/IAuthenticationComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\nimport type { IPasswordOptions } from \"./IPasswordOptions.js\";\n\n/**\n * Contract definition for authentication component.\n */\nexport interface IAuthenticationComponent extends IComponent {\n\t/**\n\t * Perform a login for the user.\n\t * @param email The email address for the user.\n\t * @param password The password for the user.\n\t * @returns The authentication token for the user, if it uses a mechanism with public access.\n\t */\n\tlogin(\n\t\temail: string,\n\t\tpassword: string\n\t): Promise<{\n\t\ttoken?: string;\n\t\texpiry: number;\n\t}>;\n\n\t/**\n\t * Logout the current user.\n\t * @param token The token to logout, if it uses a mechanism with public access.\n\t * @returns A promise that resolves when the logout has been completed.\n\t */\n\tlogout(token?: string): Promise<void>;\n\n\t/**\n\t * Refresh the token.\n\t * @param token The token to refresh, if it uses a mechanism with public access.\n\t * @returns The refreshed token, if it uses a mechanism with public access.\n\t */\n\trefresh(token?: string): Promise<{\n\t\ttoken?: string;\n\t\texpiry: number;\n\t}>;\n\n\t/**\n\t * Update the user's password.\n\t * @param currentPassword The current password for the user.\n\t * @param newPassword The new password for the user.\n\t * @returns A promise that resolves when the password has been updated.\n\t */\n\tupdatePassword(currentPassword: string, newPassword: string): Promise<void>;\n\n\t/**\n\t * Get the password policy used for password validation.\n\t * @returns The password policy options.\n\t */\n\tpasswordPolicy(): Promise<IPasswordOptions>;\n}\n"]}

package/dist/es/models/IAuthenticationUser.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationUser.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationUser.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUser {\n\t/**\n\t * The user e-mail address.\n\t */\n\temail: string;\n\n\t/**\n\t * The user identity.\n\t */\n\tuserIdentity: string;\n\n\t/**\n\t * The users organization.\n\t */\n\torganizationIdentity: string;\n\n\t/**\n\t * The scope assigned to the user, comma separated.\n\t */\n\tscope: string[];\n}\n"]}
+{"version":3,"file":"IAuthenticationUser.js","sources":["../../../src/models/IAuthenticationUser.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUser {\n\t/**\n\t * The user e-mail address.\n\t */\n\temail: string;\n\n\t/**\n\t * The user identity.\n\t */\n\tuserIdentity: string;\n\n\t/**\n\t * The users organization.\n\t */\n\torganizationIdentity: string;\n}\n"]}

package/dist/es/models/IAuthenticationUserSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationUserSecure.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationUserSecure.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUserSecure extends IAuthenticationUser {\n\t/**\n\t * The encrypted password for the user.\n\t */\n\tpassword: string;\n\n\t/**\n\t * The salt for the password.\n\t */\n\tsalt: string;\n\n\t/**\n\t * The tenant ID associated with the user, optional in single tenant contexts.\n\t */\n\ttenantId: string;\n}\n"]}
+{"version":3,"file":"IAuthenticationUserSecure.js","sources":["../../../src/models/IAuthenticationUserSecure.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUserSecure extends IAuthenticationUser {\n\t/**\n\t * The encrypted password for the user.\n\t */\n\tpassword: string;\n\n\t/**\n\t * The salt for the password.\n\t */\n\tsalt: string;\n\n\t/**\n\t * The tenant ID associated with the user, optional in single tenant contexts.\n\t */\n\ttenantId: string;\n}\n"]}

package/dist/es/models/{api/IAuditGetRequest.js → IPasswordOptions.js}

@@ -1,4 +1,4 @@
 // Copyright 2026 IOTA Stiftung.
 // SPDX-License-Identifier: Apache-2.0.
 export {};
-//# sourceMappingURL=IAuditGetRequest.js.map
+//# sourceMappingURL=IPasswordOptions.js.map

package/dist/es/models/IPasswordOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IPasswordOptions.js","sources":["../../../src/models/IPasswordOptions.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Password length validation options.\n */\nexport interface IPasswordOptions {\n\t/**\n\t * The minimum password length for validation.\n\t */\n\tminPasswordLength?: number;\n\n\t/**\n\t * The maximum password length for validation.\n\t */\n\tmaxPasswordLength?: number;\n}\n"]}

package/dist/es/models/api/IAdminUserCreateRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserCreateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserCreateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Create a new user as an admin.\n */\nexport interface IAdminUserCreateRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser & { password: string };\n}\n"]}
+{"version":3,"file":"IAdminUserCreateRequest.js","sources":["../../../../src/models/api/IAdminUserCreateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Create a new user as an admin.\n */\nexport interface IAdminUserCreateRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser & { password: string };\n}\n"]}

package/dist/es/models/api/IAdminUserGetByIdentityRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserGetByIdentityRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserGetByIdentityRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetByIdentityRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user identity.\n\t\t */\n\t\tidentity: string;\n\t};\n}\n"]}
+{"version":3,"file":"IAdminUserGetByIdentityRequest.js","sources":["../../../../src/models/api/IAdminUserGetByIdentityRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetByIdentityRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user identity.\n\t\t */\n\t\tidentity: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAdminUserGetRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserGetRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserGetRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n}\n"]}
+{"version":3,"file":"IAdminUserGetRequest.js","sources":["../../../../src/models/api/IAdminUserGetRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAdminUserGetResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserGetResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserGetResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetResponse {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser;\n}\n"]}
+{"version":3,"file":"IAdminUserGetResponse.js","sources":["../../../../src/models/api/IAdminUserGetResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetResponse {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser;\n}\n"]}

package/dist/es/models/api/IAdminUserRemoveRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserRemoveRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserRemoveRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Remove a user as an admin.\n */\nexport interface IAdminUserRemoveRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n}\n"]}
+{"version":3,"file":"IAdminUserRemoveRequest.js","sources":["../../../../src/models/api/IAdminUserRemoveRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Remove a user as an admin.\n */\nexport interface IAdminUserRemoveRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAdminUserUpdatePasswordRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserUpdatePasswordRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserUpdatePasswordRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Update a users password as an admin.\n */\nexport interface IAdminUserUpdatePasswordRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The new password for the user.\n\t\t */\n\t\tnewPassword: string;\n\n\t\t/**\n\t\t * The current password for the user.\n\t\t */\n\t\tcurrentPassword?: string;\n\t};\n}\n"]}
+{"version":3,"file":"IAdminUserUpdatePasswordRequest.js","sources":["../../../../src/models/api/IAdminUserUpdatePasswordRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Update a users password as an admin.\n */\nexport interface IAdminUserUpdatePasswordRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The new password for the user.\n\t\t */\n\t\tnewPassword: string;\n\n\t\t/**\n\t\t * The current password for the user.\n\t\t */\n\t\tcurrentPassword?: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAdminUserUpdateRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserUpdateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserUpdateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Update a user as an admin.\n */\nexport interface IAdminUserUpdateRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Partial<Omit<IAuthenticationUser, \"email\">>;\n}\n"]}
+{"version":3,"file":"IAdminUserUpdateRequest.js","sources":["../../../../src/models/api/IAdminUserUpdateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Update a user as an admin.\n */\nexport interface IAdminUserUpdateRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Partial<Omit<IAuthenticationUser, \"email\">>;\n}\n"]}

package/dist/es/models/api/ILoginRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"ILoginRequest.js","sourceRoot":"","sources":["../../../../src/models/api/ILoginRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a login on the server.\n */\nexport interface ILoginRequest {\n\t/**\n\t * The login details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The email address for the user.\n\t\t */\n\t\temail: string;\n\n\t\t/**\n\t\t * The password for the user.\n\t\t */\n\t\tpassword: string;\n\t};\n}\n"]}
+{"version":3,"file":"ILoginRequest.js","sources":["../../../../src/models/api/ILoginRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a login on the server.\n */\nexport interface ILoginRequest {\n\t/**\n\t * The login details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The email address for the user.\n\t\t */\n\t\temail: string;\n\n\t\t/**\n\t\t * The password for the user.\n\t\t */\n\t\tpassword: string;\n\t};\n}\n"]}

package/dist/es/models/api/ILoginResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"ILoginResponse.js","sourceRoot":"","sources":["../../../../src/models/api/ILoginResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { HeaderTypes } from \"@3sixty/web\";\n\n/**\n * Response from a login on the server.\n */\nexport interface ILoginResponse {\n\t/**\n\t * Response headers.\n\t */\n\theaders?: {\n\t\t/**\n\t\t * The cookie containing the auth token.\n\t\t */\n\t\t[HeaderTypes.SetCookie]?: string;\n\t};\n\n\t/**\n\t * The login response details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The expiry time of the token.\n\t\t */\n\t\texpiry: number;\n\t};\n}\n"]}
+{"version":3,"file":"ILoginResponse.js","sources":["../../../../src/models/api/ILoginResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { HeaderTypes } from \"@3sixty/web\";\n\n/**\n * Response from a login on the server.\n */\nexport interface ILoginResponse {\n\t/**\n\t * Response headers.\n\t */\n\theaders?: {\n\t\t/**\n\t\t * The cookie containing the auth token.\n\t\t */\n\t\t[HeaderTypes.SetCookie]?: string;\n\t};\n\n\t/**\n\t * The login response details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The expiry time of the token.\n\t\t */\n\t\texpiry: number;\n\t};\n}\n"]}

package/dist/es/models/api/ILogoutRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"ILogoutRequest.js","sourceRoot":"","sources":["../../../../src/models/api/ILogoutRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a logout on the auth token.\n */\nexport interface ILogoutRequest {\n\t/**\n\t * The logout token details.\n\t */\n\tbody?: {\n\t\t/**\n\t\t * The token to logout, if it uses a mechanism with public access.\n\t\t */\n\t\ttoken?: string;\n\t};\n}\n"]}
+{"version":3,"file":"ILogoutRequest.js","sources":["../../../../src/models/api/ILogoutRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a logout on the auth token.\n */\nexport interface ILogoutRequest {\n\t/**\n\t * The logout token details.\n\t */\n\tbody?: {\n\t\t/**\n\t\t * The token to logout, if it uses a mechanism with public access.\n\t\t */\n\t\ttoken?: string;\n\t};\n}\n"]}

package/dist/es/models/api/IPasswordPolicyResponse.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IPasswordPolicyResponse.js.map

package/dist/es/models/api/IPasswordPolicyResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IPasswordPolicyResponse.js","sources":["../../../../src/models/api/IPasswordPolicyResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IPasswordOptions } from \"../IPasswordOptions.js\";\n\n/**\n * Get the password policy.\n */\nexport interface IPasswordPolicyResponse {\n\t/**\n\t * The body of the response.\n\t */\n\tbody: IPasswordOptions;\n}\n"]}

package/dist/es/models/api/IRefreshTokenRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IRefreshTokenRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IRefreshTokenRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a refresh of the auth token.\n */\nexport interface IRefreshTokenRequest {\n\t/**\n\t * The refresh token details.\n\t */\n\tbody?: {\n\t\t/**\n\t\t * The token to refresh, if it uses a mechanism with public access.\n\t\t */\n\t\ttoken?: string;\n\t};\n}\n"]}
+{"version":3,"file":"IRefreshTokenRequest.js","sources":["../../../../src/models/api/IRefreshTokenRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Perform a refresh of the auth token.\n */\nexport interface IRefreshTokenRequest {\n\t/**\n\t * The refresh token details.\n\t */\n\tbody?: {\n\t\t/**\n\t\t * The token to refresh, if it uses a mechanism with public access.\n\t\t */\n\t\ttoken?: string;\n\t};\n}\n"]}

package/dist/es/models/api/IRefreshTokenResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"IRefreshTokenResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IRefreshTokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { HeaderTypes } from \"@3sixty/web\";\n\n/**\n * Response from a refresh on the auth token.\n */\nexport interface IRefreshTokenResponse {\n\t/**\n\t * Response headers.\n\t */\n\theaders?: {\n\t\t/**\n\t\t * The cookie containing the auth token.\n\t\t */\n\t\t[HeaderTypes.SetCookie]?: string;\n\t};\n\n\t/**\n\t * The refresh token details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The expiry time of the token.\n\t\t */\n\t\texpiry: number;\n\t};\n}\n"]}
+{"version":3,"file":"IRefreshTokenResponse.js","sources":["../../../../src/models/api/IRefreshTokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { HeaderTypes } from \"@3sixty/web\";\n\n/**\n * Response from a refresh on the auth token.\n */\nexport interface IRefreshTokenResponse {\n\t/**\n\t * Response headers.\n\t */\n\theaders?: {\n\t\t/**\n\t\t * The cookie containing the auth token.\n\t\t */\n\t\t[HeaderTypes.SetCookie]?: string;\n\t};\n\n\t/**\n\t * The refresh token details.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The expiry time of the token.\n\t\t */\n\t\texpiry: number;\n\t};\n}\n"]}

package/dist/es/models/api/IUpdatePasswordRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IUpdatePasswordRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IUpdatePasswordRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Update the current user's password.\n */\nexport interface IUpdatePasswordRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The current password for the user.\n\t\t */\n\t\tcurrentPassword: string;\n\n\t\t/**\n\t\t * The new password for the user.\n\t\t */\n\t\tnewPassword: string;\n\t};\n}\n"]}
+{"version":3,"file":"IUpdatePasswordRequest.js","sources":["../../../../src/models/api/IUpdatePasswordRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Update the current user's password.\n */\nexport interface IUpdatePasswordRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The current password for the user.\n\t\t */\n\t\tcurrentPassword: string;\n\n\t\t/**\n\t\t * The new password for the user.\n\t\t */\n\t\tnewPassword: string;\n\t};\n}\n"]}

package/dist/types/index.d.ts

@@ -5,25 +5,15 @@ export * from "./models/api/IAdminUserGetResponse.js";
 export * from "./models/api/IAdminUserRemoveRequest.js";
 export * from "./models/api/IAdminUserUpdatePasswordRequest.js";
 export * from "./models/api/IAdminUserUpdateRequest.js";
-export * from "./models/api/IAuditCreateRequest.js";
-export * from "./models/api/IAuditGetRequest.js";
-export * from "./models/api/IAuditGetResponse.js";
-export * from "./models/api/IAuditQueryRequest.js";
-export * from "./models/api/IAuditQueryResponse.js";
-export * from "./models/api/IAuditRemoveRequest.js";
-export * from "./models/api/IAuditUpdateRequest.js";
 export * from "./models/api/ILoginRequest.js";
 export * from "./models/api/ILoginResponse.js";
 export * from "./models/api/ILogoutRequest.js";
+export * from "./models/api/IPasswordPolicyResponse.js";
 export * from "./models/api/IRefreshTokenRequest.js";
 export * from "./models/api/IRefreshTokenResponse.js";
 export * from "./models/api/IUpdatePasswordRequest.js";
-export * from "./models/authAuditEvent.js";
 export * from "./models/IAuthenticationAdminComponent.js";
-export * from "./models/IAuthenticationAuditComponent.js";
-export * from "./models/IAuthenticationAuditEntry.js";
 export * from "./models/IAuthenticationComponent.js";
-export * from "./models/IAuthenticationRateActionConfig.js";
-export * from "./models/IAuthenticationRateComponent.js";
 export * from "./models/IAuthenticationUser.js";
 export * from "./models/IAuthenticationUserSecure.js";
+export * from "./models/IPasswordOptions.js";

package/dist/types/models/IAuthenticationComponent.d.ts

@@ -1,4 +1,5 @@
 import type { IComponent } from "@3sixty/core";
+import type { IPasswordOptions } from "./IPasswordOptions.js";
 /**
  * Contract definition for authentication component.
  */
@@ -35,4 +36,9 @@ export interface IAuthenticationComponent extends IComponent {
      * @returns A promise that resolves when the password has been updated.
      */
     updatePassword(currentPassword: string, newPassword: string): Promise<void>;
+    /**
+     * Get the password policy used for password validation.
+     * @returns The password policy options.
+     */
+    passwordPolicy(): Promise<IPasswordOptions>;
 }

package/dist/types/models/IAuthenticationUser.d.ts

@@ -14,8 +14,4 @@ export interface IAuthenticationUser {
      * The users organization.
      */
     organizationIdentity: string;
-    /**
-     * The scope assigned to the user, comma separated.
-     */
-    scope: string[];
 }

package/dist/types/models/IPasswordOptions.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Password length validation options.
+ */
+export interface IPasswordOptions {
+    /**
+     * The minimum password length for validation.
+     */
+    minPasswordLength?: number;
+    /**
+     * The maximum password length for validation.
+     */
+    maxPasswordLength?: number;
+}

package/dist/types/models/api/IPasswordPolicyResponse.d.ts

@@ -0,0 +1,10 @@
+import type { IPasswordOptions } from "../IPasswordOptions.js";
+/**
+ * Get the password policy.
+ */
+export interface IPasswordPolicyResponse {
+    /**
+     * The body of the response.
+     */
+    body: IPasswordOptions;
+}

package/docs/changelog.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## [0.20.0-next.1](https://github.com/3sixtyglobal/api-auth/compare/api-auth-entity-storage-models-v0.20.0-next.0...api-auth-entity-storage-models-v0.20.0-next.1) (2026-10-23)
+
+
+### Features
+
+* authorization ([#3](https://github.com/3sixtyglobal/api-auth/issues/3)) ([5688693](https://github.com/3sixtyglobal/api-auth/commit/568869364065b9d2c82c5c17c81f07cbdc64ec8b))
+* initial commit ([b9112fb](https://github.com/3sixtyglobal/api-auth/commit/b9112fb6994758b43effdde1b9e41435ff50fe50))
+* publish packages under the [@3sixty](https://github.com/3sixty) namespace ([6c22482](https://github.com/3sixtyglobal/api-auth/commit/6c2248295620000807ff91087c3b1dfc9b018b31))
+* updated ts compile ([83c72bd](https://github.com/3sixtyglobal/api-auth/commit/83c72bd5d2e9d81208b7a2755450d96fbbb04004))

package/docs/examples.md

@@ -47,8 +47,7 @@ const createRequest: IAdminUserCreateRequest = {
     email: 'bob@example.org',
     password: 'initial-password',
     userIdentity: 'did:example:bob',
-    organizationIdentity: 'did:example:org',
-    scope: ['admin', 'auditor']
+    organizationIdentity: 'did:example:org'
   }
 };
 
@@ -57,18 +56,20 @@ const updateRequest: IAdminUserUpdateRequest = {
     email: 'bob@example.org'
   },
   body: {
-    userIdentity: 'did:example:bob:ops',
-    scope: ['admin']
+    userIdentity: 'did:example:bob:ops'
   }
 };
 
-console.log(createRequest.body.scope.length); // 2
+console.log(updateRequest.body.userIdentity); // did:example:bob:ops
 ```
 
 ## Authentication Responses
 
 ```typescript
-import type { ILoginResponse } from '@3sixty/api-auth-entity-storage-models';
+import type {
+  ILoginResponse,
+  IPasswordPolicyResponse
+} from '@3sixty/api-auth-entity-storage-models';
 
 const loginResponse: ILoginResponse = {
   body: {
@@ -76,5 +77,13 @@ const loginResponse: ILoginResponse = {
   }
 };
 
+const passwordPolicyResponse: IPasswordPolicyResponse = {
+  body: {
+    minPasswordLength: 8,
+    maxPasswordLength: 128
+  }
+};
+
 console.log(loginResponse.body.expiry); // 3600
+console.log(passwordPolicyResponse.body.minPasswordLength); // 8
 ```

package/docs/reference/index.md

@@ -3,13 +3,10 @@
 ## Interfaces
 
 - [IAuthenticationAdminComponent](interfaces/IAuthenticationAdminComponent.md)
-- [IAuthenticationAuditComponent](interfaces/IAuthenticationAuditComponent.md)
-- [IAuthenticationAuditEntry](interfaces/IAuthenticationAuditEntry.md)
 - [IAuthenticationComponent](interfaces/IAuthenticationComponent.md)
-- [IAuthenticationRateActionConfig](interfaces/IAuthenticationRateActionConfig.md)
-- [IAuthenticationRateComponent](interfaces/IAuthenticationRateComponent.md)
 - [IAuthenticationUser](interfaces/IAuthenticationUser.md)
 - [IAuthenticationUserSecure](interfaces/IAuthenticationUserSecure.md)
+- [IPasswordOptions](interfaces/IPasswordOptions.md)
 - [IAdminUserCreateRequest](interfaces/IAdminUserCreateRequest.md)
 - [IAdminUserGetByIdentityRequest](interfaces/IAdminUserGetByIdentityRequest.md)
 - [IAdminUserGetRequest](interfaces/IAdminUserGetRequest.md)
@@ -17,24 +14,10 @@
 - [IAdminUserRemoveRequest](interfaces/IAdminUserRemoveRequest.md)
 - [IAdminUserUpdatePasswordRequest](interfaces/IAdminUserUpdatePasswordRequest.md)
 - [IAdminUserUpdateRequest](interfaces/IAdminUserUpdateRequest.md)
-- [IAuditCreateRequest](interfaces/IAuditCreateRequest.md)
-- [IAuditGetRequest](interfaces/IAuditGetRequest.md)
-- [IAuditGetResponse](interfaces/IAuditGetResponse.md)
-- [IAuditQueryRequest](interfaces/IAuditQueryRequest.md)
-- [IAuditQueryResponse](interfaces/IAuditQueryResponse.md)
-- [IAuditRemoveRequest](interfaces/IAuditRemoveRequest.md)
-- [IAuditUpdateRequest](interfaces/IAuditUpdateRequest.md)
 - [ILoginRequest](interfaces/ILoginRequest.md)
 - [ILoginResponse](interfaces/ILoginResponse.md)
 - [ILogoutRequest](interfaces/ILogoutRequest.md)
+- [IPasswordPolicyResponse](interfaces/IPasswordPolicyResponse.md)
 - [IRefreshTokenRequest](interfaces/IRefreshTokenRequest.md)
 - [IRefreshTokenResponse](interfaces/IRefreshTokenResponse.md)
 - [IUpdatePasswordRequest](interfaces/IUpdatePasswordRequest.md)
-
-## Type Aliases
-
-- [AuthAuditEvent](type-aliases/AuthAuditEvent.md)
-
-## Variables
-
-- [AuthAuditEvent](variables/AuthAuditEvent.md)

package/docs/reference/interfaces/IAuthenticationComponent.md

@@ -105,3 +105,17 @@ The new password for the user.
 `Promise`\<`void`\>
 
 A promise that resolves when the password has been updated.
+
+***
+
+### passwordPolicy() {#passwordpolicy}
+
+> **passwordPolicy**(): `Promise`\<[`IPasswordOptions`](IPasswordOptions.md)\>
+
+Get the password policy used for password validation.
+
+#### Returns
+
+`Promise`\<[`IPasswordOptions`](IPasswordOptions.md)\>
+
+The password policy options.

package/docs/reference/interfaces/IAuthenticationUser.md

@@ -29,11 +29,3 @@ The user identity.
 > **organizationIdentity**: `string`
 
 The users organization.
-
-***
-
-### scope {#scope}
-
-> **scope**: `string`[]
-
-The scope assigned to the user, comma separated.

package/docs/reference/interfaces/IAuthenticationUserSecure.md

@@ -44,18 +44,6 @@ The users organization.
 
 ***
 
-### scope {#scope}
-
-> **scope**: `string`[]
-
-The scope assigned to the user, comma separated.
-
-#### Inherited from
-
-[`IAuthenticationUser`](IAuthenticationUser.md).[`scope`](IAuthenticationUser.md#scope)
-
-***
-
 ### password {#password}
 
 > **password**: `string`

package/docs/reference/interfaces/IPasswordOptions.md

@@ -0,0 +1,19 @@
+# Interface: IPasswordOptions
+
+Password length validation options.
+
+## Properties
+
+### minPasswordLength? {#minpasswordlength}
+
+> `optional` **minPasswordLength?**: `number`
+
+The minimum password length for validation.
+
+***
+
+### maxPasswordLength? {#maxpasswordlength}
+
+> `optional` **maxPasswordLength?**: `number`
+
+The maximum password length for validation.

package/docs/reference/interfaces/IPasswordPolicyResponse.md

@@ -0,0 +1,11 @@
+# Interface: IPasswordPolicyResponse
+
+Get the password policy.
+
+## Properties
+
+### body {#body}
+
+> **body**: [`IPasswordOptions`](IPasswordOptions.md)
+
+The body of the response.

package/package.json

@@ -1,10 +1,10 @@
 {
 	"name": "@3sixty/api-auth-entity-storage-models",
-	"version": "0.20.0-next.0",
+	"version": "0.20.0-next.1",
 	"description": "Contracts for authentication flows and admin user management with entity storage.",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/3sixtyglobal/api.git",
+		"url": "git+https://github.com/3sixtyglobal/api-auth.git",
 		"directory": "packages/api-auth-entity-storage-models"
 	},
 	"author": "martyn.janes@iota.org",
@@ -49,7 +49,7 @@
 		"schemas"
 	],
 	"bugs": {
-		"url": "git+https://github.com/3sixtyglobal/api/issues"
+		"url": "git+https://github.com/3sixtyglobal/api-auth/issues"
 	},
 	"homepage": "https://3sixty.global"
 }

package/dist/es/models/IAuthenticationAuditComponent.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuthenticationAuditComponent.js.map

package/dist/es/models/IAuthenticationAuditComponent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthenticationAuditComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationAuditComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\nimport type { AuthAuditEvent } from \"./authAuditEvent.js\";\nimport type { IAuthenticationAuditEntry } from \"./IAuthenticationAuditEntry.js\";\n\n/**\n * Contract definition for authentication audit component.\n */\nexport interface IAuthenticationAuditComponent extends IComponent {\n\t/**\n\t * Create a new audit entry.\n\t * @param entry The audit entry to be logged.\n\t * @returns The unique identifier of the created audit entry.\n\t */\n\tcreate(entry: Omit<IAuthenticationAuditEntry, \"id\" | \"dateCreated\">): Promise<string>;\n\n\t/**\n\t * Get an audit entry by id.\n\t * @param id The unique identifier of the audit entry.\n\t * @returns The audit entry.\n\t */\n\tget(id: string): Promise<IAuthenticationAuditEntry>;\n\n\t/**\n\t * Update an audit entry.\n\t * @param id The unique identifier of the audit entry to update.\n\t * @param entry The fields to update on the audit entry.\n\t * @returns A promise that resolves when the audit entry has been updated.\n\t */\n\tupdate(\n\t\tid: string,\n\t\tentry: Partial<Omit<IAuthenticationAuditEntry, \"id\" | \"dateCreated\">>\n\t): Promise<void>;\n\n\t/**\n\t * Remove an audit entry.\n\t * @param id The unique identifier of the audit entry to remove.\n\t * @returns A promise that resolves when the audit entry has been removed.\n\t */\n\tremove(id: string): Promise<void>;\n\n\t/**\n\t * Query the audit entries.\n\t * @param options The query options.\n\t * @param options.actorId The actor identifier to filter the audit entries, optional.\n\t * @param options.organizationId The organization identifier to filter the audit entries, optional.\n\t * @param options.tenantId The tenant identifier to filter the audit entries, optional.\n\t * @param options.nodeId The node identifier to filter the audit entries, optional.\n\t * @param options.event The audit event to filter the audit entries, optional.\n\t * @param options.startDate The start date to filter the audit entries, optional.\n\t * @param options.endDate The end date to filter the audit entries, optional.\n\t * @param cursor The cursor for pagination.\n\t * @param limit The maximum number of entries to return.\n\t * @returns The audit entries.\n\t */\n\tquery(\n\t\toptions?: {\n\t\t\tactorId?: string;\n\t\t\torganizationId?: string;\n\t\t\ttenantId?: string;\n\t\t\tnodeId?: string;\n\t\t\tevent?: AuthAuditEvent | string;\n\t\t\tstartDate?: string;\n\t\t\tendDate?: string;\n\t\t},\n\t\tcursor?: string,\n\t\tlimit?: number\n\t): Promise<{\n\t\tentries: IAuthenticationAuditEntry[];\n\t\tcursor?: string;\n\t}>;\n}\n"]}

package/dist/es/models/IAuthenticationAuditEntry.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuthenticationAuditEntry.js.map

package/dist/es/models/IAuthenticationAuditEntry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthenticationAuditEntry.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationAuditEntry.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { AuthAuditEvent } from \"./authAuditEvent.js\";\n\n/**\n * Contract definition for authentication audit entry.\n */\nexport interface IAuthenticationAuditEntry {\n\t/**\n\t * The unique identifier for the audit entry.\n\t */\n\tid: string;\n\n\t/**\n\t * The audit event that occurred.\n\t */\n\tevent: AuthAuditEvent | string;\n\n\t/**\n\t * The timestamp of the audit entry in ISO 8601 format.\n\t */\n\tdateCreated: string;\n\n\t/**\n\t * The actor identifier, could be e-mail, username, or other unique identifier.\n\t */\n\tactorId?: string;\n\n\t/**\n\t * The node identifier associated with the audit entry, if applicable.\n\t */\n\tnodeId?: string;\n\n\t/**\n\t * The organization identifier associated with the audit entry, if applicable.\n\t */\n\torganizationId?: string;\n\n\t/**\n\t * The tenant identifier associated with the audit entry, if applicable.\n\t */\n\ttenantId?: string;\n\n\t/**\n\t * The hashed IP addresses of the client.\n\t */\n\tipAddressHashes?: string[];\n\n\t/**\n\t * The user agent string of the client.\n\t */\n\tuserAgent?: string;\n\n\t/**\n\t * The correlation ID for request tracing.\n\t */\n\tcorrelationId?: string;\n\n\t/**\n\t * Additional data related to the audit entry, such as IP address, user agent, etc.\n\t */\n\tdata?: unknown;\n}\n"]}

package/dist/es/models/IAuthenticationRateActionConfig.js

@@ -1,4 +0,0 @@
-// Copyright 2026 IOTA Stiftung.
-// SPDX-License-Identifier: Apache-2.0.
-export {};
-//# sourceMappingURL=IAuthenticationRateActionConfig.js.map

package/dist/es/models/IAuthenticationRateActionConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthenticationRateActionConfig.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationRateActionConfig.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Configuration for an authentication rate limited action.\n */\nexport interface IAuthenticationRateActionConfig {\n\t/**\n\t * Maximum number of failed attempts allowed per window.\n\t */\n\tmaxAttempts: number;\n\n\t/**\n\t * Rate limit window duration in minutes.\n\t */\n\twindowMinutes: number;\n}\n"]}

package/dist/es/models/IAuthenticationRateComponent.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuthenticationRateComponent.js.map

package/dist/es/models/IAuthenticationRateComponent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthenticationRateComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationRateComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@3sixty/core\";\nimport type { IAuthenticationRateActionConfig } from \"./IAuthenticationRateActionConfig.js\";\n\n/**\n * Contract definition for authentication rate component.\n */\nexport interface IAuthenticationRateComponent extends IComponent {\n\t/**\n\t * The service needs to be started when the application is initialized.\n\t * @param nodeLoggingComponentType The node logging component type.\n\t * @returns A promise that resolves when the service has been started.\n\t */\n\tstart(nodeLoggingComponentType?: string): Promise<void>;\n\n\t/**\n\t * The component needs to be stopped when the node is closed.\n\t * @param nodeLoggingComponentType The node logging component type.\n\t * @returns A promise that resolves when the service has been stopped.\n\t */\n\tstop(nodeLoggingComponentType?: string): Promise<void>;\n\n\t/**\n\t * Register or update rate-limit configuration for an action.\n\t * @param action The action name.\n\t * @param config The action configuration.\n\t * @returns A promise that resolves when the action configuration has been stored.\n\t */\n\tregisterAction(action: string, config: IAuthenticationRateActionConfig): Promise<void>;\n\n\t/**\n\t * Unregister rate-limit configuration for an action.\n\t * @param action The action name.\n\t * @returns A promise that resolves when the action configuration has been removed.\n\t */\n\tunregisterAction(action: string): Promise<void>;\n\n\t/**\n\t * Check the authentication rate for a given action and identifier.\n\t * @param action The action to be checked.\n\t * @param identifier The identifier to be checked.\n\t * @returns The result of the rate check.\n\t */\n\tcheck(action: string, identifier: string): Promise<string>;\n\n\t/**\n\t * Clear the authentication rate entry for the given action and identifier.\n\t * @param action The action to clear.\n\t * @param identifier The identifier to clear.\n\t * @returns A promise that resolves when the rate entry has been removed.\n\t */\n\tclear(action: string, identifier: string): Promise<void>;\n}\n"]}

package/dist/es/models/api/IAuditCreateRequest.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuditCreateRequest.js.map

package/dist/es/models/api/IAuditCreateRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditCreateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditCreateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationAuditEntry } from \"../IAuthenticationAuditEntry.js\";\n\n/**\n * Create an authentication audit entry.\n */\nexport interface IAuditCreateRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Omit<IAuthenticationAuditEntry, \"id\" | \"dateCreated\">;\n}\n"]}

package/dist/es/models/api/IAuditGetRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditGetRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditGetRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Get an authentication audit entry by id.\n */\nexport interface IAuditGetRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The audit entry id.\n\t\t */\n\t\tid: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAuditGetResponse.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuditGetResponse.js.map

package/dist/es/models/api/IAuditGetResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditGetResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditGetResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationAuditEntry } from \"../IAuthenticationAuditEntry.js\";\n\n/**\n * Response from getting an authentication audit entry.\n */\nexport interface IAuditGetResponse {\n\t/**\n\t * The response body.\n\t */\n\tbody: IAuthenticationAuditEntry;\n}\n"]}

package/dist/es/models/api/IAuditQueryRequest.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuditQueryRequest.js.map

package/dist/es/models/api/IAuditQueryRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditQueryRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditQueryRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { AuthAuditEvent } from \"../authAuditEvent.js\";\n\n/**\n * Query authentication audit entries.\n */\nexport interface IAuditQueryRequest {\n\t/**\n\t * The query parameters for the request.\n\t */\n\tquery?: {\n\t\t/**\n\t\t * The actor identifier to filter by.\n\t\t */\n\t\tactorId?: string;\n\n\t\t/**\n\t\t * The organization identifier to filter by.\n\t\t */\n\t\torganizationId?: string;\n\n\t\t/**\n\t\t * The tenant identifier to filter by.\n\t\t */\n\t\ttenantId?: string;\n\n\t\t/**\n\t\t * The node identifier to filter by.\n\t\t */\n\t\tnodeId?: string;\n\n\t\t/**\n\t\t * The event to filter by.\n\t\t */\n\t\tevent?: AuthAuditEvent | string;\n\n\t\t/**\n\t\t * The inclusive start date for filtering, in ISO 8601 format.\n\t\t */\n\t\tstartDate?: string;\n\n\t\t/**\n\t\t * The inclusive end date for filtering, in ISO 8601 format.\n\t\t */\n\t\tendDate?: string;\n\n\t\t/**\n\t\t * The pagination cursor.\n\t\t */\n\t\tcursor?: string;\n\n\t\t/**\n\t\t * The maximum number of results to return.\n\t\t */\n\t\tlimit?: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAuditQueryResponse.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuditQueryResponse.js.map

package/dist/es/models/api/IAuditQueryResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditQueryResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditQueryResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationAuditEntry } from \"../IAuthenticationAuditEntry.js\";\n\n/**\n * Response from querying authentication audit entries.\n */\nexport interface IAuditQueryResponse {\n\t/**\n\t * The response body.\n\t */\n\tbody: {\n\t\t/**\n\t\t * The returned audit entries.\n\t\t */\n\t\tentries: IAuthenticationAuditEntry[];\n\n\t\t/**\n\t\t * The cursor to retrieve the next page, if any.\n\t\t */\n\t\tcursor?: string;\n\t};\n}\n"]}

package/dist/es/models/api/IAuditRemoveRequest.js

@@ -1,4 +0,0 @@
-// Copyright 2026 IOTA Stiftung.
-// SPDX-License-Identifier: Apache-2.0.
-export {};
-//# sourceMappingURL=IAuditRemoveRequest.js.map

package/dist/es/models/api/IAuditRemoveRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuditRemoveRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAuditRemoveRequest.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Remove an authentication audit entry.\n */\nexport interface IAuditRemoveRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The audit entry id.\n\t\t */\n\t\tid: string;\n\t};\n}\n"]}