@absolutejs/auth 0.55.5 → 0.55.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (219) hide show
  1. package/README.md +6 -1
  2. package/dist/agents/index.js +36 -6
  3. package/dist/agents/index.js.map +6 -5
  4. package/dist/index.d.ts +3400 -8
  5. package/dist/index.js +777 -522
  6. package/dist/index.js.map +17 -13
  7. package/dist/server.d.ts +6 -6
  8. package/dist/server.js +775 -522
  9. package/dist/server.js.map +18 -14
  10. package/package.json +1 -1
  11. package/dist/abuse/captcha.d.ts +0 -11
  12. package/dist/abuse/config.d.ts +0 -29
  13. package/dist/actions.d.ts +0 -27
  14. package/dist/adaptive/config.d.ts +0 -34
  15. package/dist/adaptive/fingerprint.d.ts +0 -2
  16. package/dist/adaptive/inMemoryStores.d.ts +0 -3
  17. package/dist/adaptive/postgresStores.d.ts +0 -245
  18. package/dist/adaptive/types.d.ts +0 -62
  19. package/dist/agents/config.d.ts +0 -44
  20. package/dist/agents/context.d.ts +0 -46
  21. package/dist/agents/idJag.d.ts +0 -49
  22. package/dist/agents/inMemoryStores.d.ts +0 -4
  23. package/dist/agents/oidcAdapter.d.ts +0 -12
  24. package/dist/agents/postgresStores.d.ts +0 -569
  25. package/dist/agents/principal.d.ts +0 -4
  26. package/dist/agents/registration.d.ts +0 -162
  27. package/dist/agents/registrationClient.d.ts +0 -50
  28. package/dist/agents/routes.d.ts +0 -214
  29. package/dist/agents/types.d.ts +0 -129
  30. package/dist/apikeys/config.d.ts +0 -64
  31. package/dist/apikeys/inMemoryStores.d.ts +0 -4
  32. package/dist/apikeys/postgresStores.d.ts +0 -359
  33. package/dist/apikeys/routes.d.ts +0 -83
  34. package/dist/apikeys/types.d.ts +0 -53
  35. package/dist/audit/config.d.ts +0 -9
  36. package/dist/audit/export.d.ts +0 -2
  37. package/dist/audit/inMemoryAuditStore.d.ts +0 -2
  38. package/dist/audit/integrity.d.ts +0 -19
  39. package/dist/audit/postgresAuditStore.d.ts +0 -116
  40. package/dist/audit/siem.d.ts +0 -11
  41. package/dist/audit/types.d.ts +0 -19
  42. package/dist/audit/wrap.d.ts +0 -9
  43. package/dist/authInstance.d.ts +0 -7
  44. package/dist/authorization/config.d.ts +0 -19
  45. package/dist/authorization/protectPermission.d.ts +0 -52
  46. package/dist/compliance/cipher.d.ts +0 -5
  47. package/dist/compliance/config.d.ts +0 -18
  48. package/dist/compliance/redaction.d.ts +0 -8
  49. package/dist/compliance/routes.d.ts +0 -89
  50. package/dist/constants.d.ts +0 -10
  51. package/dist/credentials/backgroundOps.d.ts +0 -45
  52. package/dist/credentials/config.d.ts +0 -68
  53. package/dist/credentials/emailValidation.d.ts +0 -9
  54. package/dist/credentials/emailVerification.d.ts +0 -83
  55. package/dist/credentials/import.d.ts +0 -34
  56. package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
  57. package/dist/credentials/legacyHashers.d.ts +0 -3
  58. package/dist/credentials/login.d.ts +0 -76
  59. package/dist/credentials/passwordPolicy.d.ts +0 -15
  60. package/dist/credentials/passwordReset.d.ts +0 -87
  61. package/dist/credentials/postgresCredentialStore.d.ts +0 -235
  62. package/dist/credentials/register.d.ts +0 -54
  63. package/dist/credentials/routes.d.ts +0 -201
  64. package/dist/credentials/types.d.ts +0 -26
  65. package/dist/crypto.d.ts +0 -32
  66. package/dist/errors.d.ts +0 -12
  67. package/dist/federation/tokenStore.d.ts +0 -29
  68. package/dist/fga/config.d.ts +0 -53
  69. package/dist/fga/inMemoryStores.d.ts +0 -3
  70. package/dist/fga/postgresStores.d.ts +0 -116
  71. package/dist/fga/redisCheckCache.d.ts +0 -11
  72. package/dist/fga/schema.d.ts +0 -2
  73. package/dist/fga/types.d.ts +0 -28
  74. package/dist/htmx/renderers.d.ts +0 -8
  75. package/dist/htmx/routes.d.ts +0 -514
  76. package/dist/htmx/types.d.ts +0 -129
  77. package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
  78. package/dist/linkedProviders/neonStores.d.ts +0 -484
  79. package/dist/linkedProviders/oauthResolver.d.ts +0 -9
  80. package/dist/linkedProviders/resolver.d.ts +0 -22
  81. package/dist/lockout/config.d.ts +0 -17
  82. package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
  83. package/dist/lockout/postgresLockoutStore.d.ts +0 -71
  84. package/dist/lockout/redisLockoutStore.d.ts +0 -3
  85. package/dist/lockout/types.d.ts +0 -12
  86. package/dist/mfa/backupCodes.d.ts +0 -5
  87. package/dist/mfa/challenge.d.ts +0 -70
  88. package/dist/mfa/config.d.ts +0 -50
  89. package/dist/mfa/gate.d.ts +0 -2
  90. package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
  91. package/dist/mfa/management.d.ts +0 -106
  92. package/dist/mfa/postgresMfaStore.d.ts +0 -206
  93. package/dist/mfa/rotation.d.ts +0 -17
  94. package/dist/mfa/routes.d.ts +0 -234
  95. package/dist/mfa/secret.d.ts +0 -2
  96. package/dist/mfa/sms.d.ts +0 -105
  97. package/dist/mfa/totp.d.ts +0 -91
  98. package/dist/mfa/types.d.ts +0 -23
  99. package/dist/migrations/generate.d.ts +0 -2
  100. package/dist/migrations/index.d.ts +0 -5
  101. package/dist/migrations/runner.d.ts +0 -13
  102. package/dist/migrations/types.d.ts +0 -14
  103. package/dist/oidc/clientAuth.d.ts +0 -19
  104. package/dist/oidc/clientIdMetadata.d.ts +0 -32
  105. package/dist/oidc/config.d.ts +0 -295
  106. package/dist/oidc/dpop.d.ts +0 -23
  107. package/dist/oidc/inMemoryStores.d.ts +0 -11
  108. package/dist/oidc/inMemoryVciStores.d.ts +0 -3
  109. package/dist/oidc/jar.d.ts +0 -14
  110. package/dist/oidc/keys.d.ts +0 -25
  111. package/dist/oidc/logout.d.ts +0 -38
  112. package/dist/oidc/mtls.d.ts +0 -11
  113. package/dist/oidc/par.d.ts +0 -28
  114. package/dist/oidc/postgresStores.d.ts +0 -1187
  115. package/dist/oidc/registration.d.ts +0 -138
  116. package/dist/oidc/routes.d.ts +0 -568
  117. package/dist/oidc/types.d.ts +0 -143
  118. package/dist/oidc/userinfo.d.ts +0 -21
  119. package/dist/oidc/vci.d.ts +0 -159
  120. package/dist/oidc/vciRoutes.d.ts +0 -92
  121. package/dist/organizations/config.d.ts +0 -46
  122. package/dist/organizations/inMemoryOrganizationStore.d.ts +0 -2
  123. package/dist/organizations/operations.d.ts +0 -39
  124. package/dist/organizations/postgresOrganizationStore.d.ts +0 -340
  125. package/dist/organizations/routes.d.ts +0 -298
  126. package/dist/organizations/types.d.ts +0 -45
  127. package/dist/passwordless/config.d.ts +0 -43
  128. package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +0 -2
  129. package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +0 -56
  130. package/dist/passwordless/routes.d.ts +0 -162
  131. package/dist/passwordless/types.d.ts +0 -9
  132. package/dist/portal/config.d.ts +0 -34
  133. package/dist/portal/inMemorySetupSessionStore.d.ts +0 -2
  134. package/dist/portal/operations.d.ts +0 -10
  135. package/dist/portal/postgresSetupSessionStore.d.ts +0 -116
  136. package/dist/portal/routes.d.ts +0 -160
  137. package/dist/portal/types.d.ts +0 -16
  138. package/dist/providers/clients.d.ts +0 -1818
  139. package/dist/providersFromEnv.d.ts +0 -19
  140. package/dist/roles/config.d.ts +0 -27
  141. package/dist/roles/inMemoryRoleStore.d.ts +0 -2
  142. package/dist/roles/operations.d.ts +0 -8
  143. package/dist/roles/postgresRoleStore.d.ts +0 -86
  144. package/dist/roles/resolver.d.ts +0 -17
  145. package/dist/roles/routes.d.ts +0 -105
  146. package/dist/roles/types.d.ts +0 -14
  147. package/dist/routes/authorize.d.ts +0 -102
  148. package/dist/routes/callback.d.ts +0 -64
  149. package/dist/routes/profile.d.ts +0 -70
  150. package/dist/routes/protectRoute.d.ts +0 -51
  151. package/dist/routes/refresh.d.ts +0 -74
  152. package/dist/routes/revoke.d.ts +0 -73
  153. package/dist/routes/sessions.d.ts +0 -103
  154. package/dist/routes/signout.d.ts +0 -70
  155. package/dist/routes/stepUp.d.ts +0 -48
  156. package/dist/routes/userStatus.d.ts +0 -72
  157. package/dist/scim/config.d.ts +0 -57
  158. package/dist/scim/extensions.d.ts +0 -30
  159. package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
  160. package/dist/scim/postgresScimTokenStore.d.ts +0 -86
  161. package/dist/scim/routes.d.ts +0 -366
  162. package/dist/scim/serialize.d.ts +0 -83
  163. package/dist/scim/types.d.ts +0 -54
  164. package/dist/serverConfig.d.ts +0 -10
  165. package/dist/session/access.d.ts +0 -33
  166. package/dist/session/anonymous.d.ts +0 -12
  167. package/dist/session/cleanup.d.ts +0 -45
  168. package/dist/session/impersonation.d.ts +0 -34
  169. package/dist/session/inMemoryStore.d.ts +0 -7
  170. package/dist/session/internalData.d.ts +0 -34
  171. package/dist/session/multiSession.d.ts +0 -27
  172. package/dist/session/neonStore.d.ts +0 -513
  173. package/dist/session/promote.d.ts +0 -23
  174. package/dist/session/redisStore.d.ts +0 -6
  175. package/dist/session/sessionsConfig.d.ts +0 -9
  176. package/dist/session/state.d.ts +0 -33
  177. package/dist/session/types.d.ts +0 -20
  178. package/dist/session/userSessions.d.ts +0 -19
  179. package/dist/sso/config.d.ts +0 -149
  180. package/dist/sso/discoveryRoute.d.ts +0 -63
  181. package/dist/sso/inMemorySamlServiceProviderStore.d.ts +0 -2
  182. package/dist/sso/inMemorySsoConnectionStore.d.ts +0 -2
  183. package/dist/sso/oidcRoutes.d.ts +0 -98
  184. package/dist/sso/postgresSamlServiceProviderStore.d.ts +0 -101
  185. package/dist/sso/postgresSsoConnectionStore.d.ts +0 -116
  186. package/dist/sso/samlIdpRoutes.d.ts +0 -139
  187. package/dist/sso/samlRoutes.d.ts +0 -178
  188. package/dist/sso/types.d.ts +0 -53
  189. package/dist/stores/postgres.d.ts +0 -5
  190. package/dist/stores/redis.d.ts +0 -5
  191. package/dist/telemetry/tracing.d.ts +0 -15
  192. package/dist/tenancy.d.ts +0 -9
  193. package/dist/typeGuards.d.ts +0 -6
  194. package/dist/typebox.d.ts +0 -4
  195. package/dist/types.d.ts +0 -421
  196. package/dist/utils.d.ts +0 -45
  197. package/dist/vault/config.d.ts +0 -20
  198. package/dist/vault/inMemoryVaultStore.d.ts +0 -2
  199. package/dist/vault/postgresVaultStore.d.ts +0 -86
  200. package/dist/vault/types.d.ts +0 -14
  201. package/dist/vc/inMemoryVpStores.d.ts +0 -2
  202. package/dist/vc/openid4vp.d.ts +0 -82
  203. package/dist/vc/postgresVcStores.d.ts +0 -300
  204. package/dist/vc/sdJwt.d.ts +0 -37
  205. package/dist/vc/statusList.d.ts +0 -29
  206. package/dist/vc/statusListRoutes.d.ts +0 -63
  207. package/dist/vc/vpRoutes.d.ts +0 -120
  208. package/dist/webauthn/adapter.d.ts +0 -59
  209. package/dist/webauthn/config.d.ts +0 -36
  210. package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +0 -2
  211. package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +0 -146
  212. package/dist/webauthn/routes.d.ts +0 -155
  213. package/dist/webauthn/types.d.ts +0 -17
  214. package/dist/webhooks/config.d.ts +0 -34
  215. package/dist/webhooks/dispatcher.d.ts +0 -3
  216. package/dist/webhooks/inMemoryStore.d.ts +0 -2
  217. package/dist/webhooks/postgresStore.d.ts +0 -116
  218. package/dist/webhooks/sign.d.ts +0 -11
  219. package/dist/webhooks/types.d.ts +0 -25
@@ -1,43 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { RouteString, UserSessionId } from '../types';
4
- import type { PasswordlessTokenStore } from './types';
5
- export declare const DEFAULT_MAGIC_LINK_TTL_MS: number;
6
- export declare const DEFAULT_OTP_LENGTH = 6;
7
- export declare const DEFAULT_OTP_TTL_MS: number;
8
- export declare const DEFAULT_PASSWORDLESS_ROUTE: RouteString;
9
- export declare const DEFAULT_PASSWORDLESS_SESSION_TTL_MS: number;
10
- export type MagicLinkMessage = {
11
- email: string;
12
- expiresAt: number;
13
- token: string;
14
- };
15
- export type PasswordlessOtpMessage = {
16
- code: string;
17
- email: string;
18
- expiresAt: number;
19
- };
20
- export type PasswordlessConfig<UserType> = {
21
- getUserByEmail: (email: string) => Promise<UserType | null | undefined> | UserType | null | undefined;
22
- passwordlessTokenStore: PasswordlessTokenStore;
23
- getUserId?: (user: UserType) => string;
24
- magicLinkTokenDurationMs?: number;
25
- onCreateUser?: (context: {
26
- email: string;
27
- }) => Promise<UserType> | UserType;
28
- onPasswordlessLogin?: (context: {
29
- user: UserType;
30
- userSessionId: UserSessionId;
31
- }) => void | Promise<void>;
32
- onSendMagicLink?: (message: MagicLinkMessage) => void | Promise<void>;
33
- onSendOtp?: (message: PasswordlessOtpMessage) => void | Promise<void>;
34
- otpDurationMs?: number;
35
- otpLength?: number;
36
- passwordlessRoute?: RouteString;
37
- sessionDurationMs?: number;
38
- };
39
- export type PasswordlessRouteProps<UserType> = PasswordlessConfig<UserType> & {
40
- authSessionStore?: AuthSessionStore<UserType>;
41
- cookieSecure?: boolean;
42
- emit?: AuditEmitter;
43
- };
@@ -1,2 +0,0 @@
1
- import type { PasswordlessTokenStore } from './types';
2
- export declare const createInMemoryPasswordlessTokenStore: () => PasswordlessTokenStore;
@@ -1,56 +0,0 @@
1
- import { type AnyPgDatabase } from '../stores/postgres';
2
- import type { PasswordlessTokenStore } from './types';
3
- export declare const passwordlessTokensTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
4
- name: "auth_passwordless_tokens";
5
- schema: undefined;
6
- columns: {
7
- email: import("drizzle-orm/pg-core").PgBuildColumn<"auth_passwordless_tokens", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
8
- name: string;
9
- tableName: "auth_passwordless_tokens";
10
- dataType: "string";
11
- data: string;
12
- driverParam: string;
13
- notNull: true;
14
- hasDefault: false;
15
- isPrimaryKey: false;
16
- isAutoincrement: false;
17
- hasRuntimeDefault: false;
18
- enumValues: undefined;
19
- identity: undefined;
20
- generated: undefined;
21
- }>;
22
- expires_at_ms: import("drizzle-orm/pg-core").PgBuildColumn<"auth_passwordless_tokens", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgBigInt53Builder>, {
23
- name: string;
24
- tableName: "auth_passwordless_tokens";
25
- dataType: "number int53";
26
- data: number;
27
- driverParam: string | number;
28
- notNull: true;
29
- hasDefault: false;
30
- isPrimaryKey: false;
31
- isAutoincrement: false;
32
- hasRuntimeDefault: false;
33
- enumValues: undefined;
34
- identity: undefined;
35
- generated: undefined;
36
- }>;
37
- token_hash: import("drizzle-orm/pg-core").PgBuildColumn<"auth_passwordless_tokens", import("drizzle-orm/pg-core").SetIsPrimaryKey<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
38
- name: string;
39
- tableName: "auth_passwordless_tokens";
40
- dataType: "string";
41
- data: string;
42
- driverParam: string;
43
- notNull: true;
44
- hasDefault: false;
45
- isPrimaryKey: false;
46
- isAutoincrement: false;
47
- hasRuntimeDefault: false;
48
- enumValues: undefined;
49
- identity: undefined;
50
- generated: undefined;
51
- }>;
52
- };
53
- dialect: "pg";
54
- }>;
55
- export declare const createNeonPasswordlessTokenStore: (databaseUrl: string) => PasswordlessTokenStore;
56
- export declare const createPostgresPasswordlessTokenStore: <DB extends AnyPgDatabase>(db: DB) => PasswordlessTokenStore;
@@ -1,162 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import { type PasswordlessRouteProps } from './config';
3
- export declare const passwordlessRoutes: <UserType>({ authSessionStore, cookieSecure, emit, getUserByEmail, getUserId, magicLinkTokenDurationMs, onCreateUser, onPasswordlessLogin, onSendMagicLink, onSendOtp, otpDurationMs, otpLength, passwordlessRoute, passwordlessTokenStore, sessionDurationMs }: PasswordlessRouteProps<UserType>) => Elysia<"", {
4
- decorator: {};
5
- store: {} | {
6
- session: import("../session/internalData").InternalSessionRecord<UserType>;
7
- unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
8
- } | {
9
- session: import("../session/internalData").InternalSessionRecord<UserType>;
10
- unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
11
- } | {
12
- session: import("../session/internalData").InternalSessionRecord<UserType>;
13
- unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
14
- };
15
- derive: {};
16
- resolve: {};
17
- }, {
18
- typebox: {};
19
- error: {};
20
- }, {
21
- schema: {};
22
- standaloneSchema: {};
23
- macro: {};
24
- macroFn: {};
25
- parser: {};
26
- response: {};
27
- }, ({} | ({
28
- [x: string]: {
29
- "magic-link": {
30
- post: {
31
- body: {
32
- email: string;
33
- };
34
- params: {};
35
- query: unknown;
36
- headers: unknown;
37
- response: {
38
- 200: {
39
- readonly status: "magic_link_sent";
40
- };
41
- 422: {
42
- type: "validation";
43
- on: string;
44
- summary?: string;
45
- message?: string;
46
- found?: unknown;
47
- property?: string;
48
- expected?: string;
49
- };
50
- };
51
- };
52
- };
53
- };
54
- } & {
55
- [x: string]: {
56
- "magic-link": {
57
- verify: {
58
- post: {
59
- body: {
60
- token: string;
61
- };
62
- params: {};
63
- query: unknown;
64
- headers: unknown;
65
- response: {
66
- 400: "Invalid or expired link";
67
- 401: "No account for this email";
68
- 200: {
69
- readonly status: "authenticated";
70
- };
71
- 422: {
72
- type: "validation";
73
- on: string;
74
- summary?: string;
75
- message?: string;
76
- found?: unknown;
77
- property?: string;
78
- expected?: string;
79
- };
80
- };
81
- };
82
- };
83
- };
84
- };
85
- })) & ({} | ({
86
- [x: string]: {
87
- otp: {
88
- post: {
89
- body: {
90
- email: string;
91
- };
92
- params: {};
93
- query: unknown;
94
- headers: unknown;
95
- response: {
96
- 200: {
97
- readonly status: "otp_sent";
98
- };
99
- 422: {
100
- type: "validation";
101
- on: string;
102
- summary?: string;
103
- message?: string;
104
- found?: unknown;
105
- property?: string;
106
- expected?: string;
107
- };
108
- };
109
- };
110
- };
111
- };
112
- } & {
113
- [x: string]: {
114
- otp: {
115
- verify: {
116
- post: {
117
- body: {
118
- email: string;
119
- code: string;
120
- };
121
- params: {};
122
- query: unknown;
123
- headers: unknown;
124
- response: {
125
- 400: "Invalid or expired code";
126
- 401: "No account for this email";
127
- 200: {
128
- readonly status: "authenticated";
129
- };
130
- 422: {
131
- type: "validation";
132
- on: string;
133
- summary?: string;
134
- message?: string;
135
- found?: unknown;
136
- property?: string;
137
- expected?: string;
138
- };
139
- };
140
- };
141
- };
142
- };
143
- };
144
- })), {
145
- derive: {};
146
- resolve: {};
147
- schema: {};
148
- standaloneSchema: {};
149
- response: {};
150
- }, {
151
- derive: {};
152
- resolve: {};
153
- schema: {};
154
- standaloneSchema: {};
155
- response: {};
156
- } & {
157
- derive: {};
158
- resolve: {};
159
- schema: {};
160
- standaloneSchema: {};
161
- response: {};
162
- }>;
@@ -1,9 +0,0 @@
1
- export type PasswordlessToken = {
2
- email: string;
3
- expiresAt: number;
4
- tokenHash: string;
5
- };
6
- export type PasswordlessTokenStore = {
7
- consumeToken: (tokenHash: string) => Promise<PasswordlessToken | undefined>;
8
- saveToken: (token: PasswordlessToken) => Promise<void>;
9
- };
@@ -1,34 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { ScimTokenStore } from '../scim/types';
3
- import type { SSOConnectionStore, SSOConnectionType } from '../sso/types';
4
- import type { OrganizationId } from '../tenancy';
5
- import type { RouteString } from '../types';
6
- import type { SetupCapability, SetupSessionStore } from './types';
7
- export declare const DEFAULT_PORTAL_ROUTE: RouteString;
8
- export declare const DEFAULT_SETUP_SESSION_TTL_MS: number;
9
- export type PortalConfig = {
10
- setupSessionStore: SetupSessionStore;
11
- onScimTokenCreated?: (context: {
12
- organizationId: OrganizationId;
13
- tokenId: string;
14
- }) => void | Promise<void>;
15
- onSsoConnectionConfigured?: (context: {
16
- organizationId: OrganizationId;
17
- type: SSOConnectionType;
18
- }) => void | Promise<void>;
19
- portalRoute?: RouteString;
20
- scimRoute?: RouteString;
21
- scimTokenStore?: ScimTokenStore;
22
- ssoConnectionStore?: SSOConnectionStore;
23
- ssoRoute?: RouteString;
24
- };
25
- export type PortalRouteProps = PortalConfig & {
26
- emit?: AuditEmitter;
27
- };
28
- export type SetupSessionRequest = {
29
- capabilities: SetupCapability[];
30
- createdBy?: string;
31
- organizationId: OrganizationId;
32
- setupSessionDurationMs?: number;
33
- setupSessionStore: SetupSessionStore;
34
- };
@@ -1,2 +0,0 @@
1
- import type { SetupSessionStore } from './types';
2
- export declare const createInMemorySetupSessionStore: () => SetupSessionStore;
@@ -1,10 +0,0 @@
1
- import { type SetupSessionRequest } from './config';
2
- import type { SetupSession, SetupSessionStore } from './types';
3
- export declare const createSetupSession: ({ capabilities, createdBy, organizationId, setupSessionDurationMs, setupSessionStore }: SetupSessionRequest) => Promise<{
4
- setupSession: SetupSession;
5
- token: string;
6
- }>;
7
- export declare const resolveSetupSession: ({ authorization, setupSessionStore }: {
8
- authorization: string | undefined;
9
- setupSessionStore: SetupSessionStore;
10
- }) => Promise<SetupSession | undefined>;
@@ -1,116 +0,0 @@
1
- import { type AnyPgDatabase } from '../stores/postgres';
2
- import type { SetupCapability, SetupSessionStore } from './types';
3
- export declare const setupSessionsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
4
- name: "auth_setup_sessions";
5
- schema: undefined;
6
- columns: {
7
- capabilities: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetHasDefault<import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, SetupCapability[]>>>, {
8
- name: string;
9
- tableName: "auth_setup_sessions";
10
- dataType: "object json";
11
- data: SetupCapability[];
12
- driverParam: unknown;
13
- notNull: true;
14
- hasDefault: true;
15
- isPrimaryKey: false;
16
- isAutoincrement: false;
17
- hasRuntimeDefault: false;
18
- enumValues: undefined;
19
- identity: undefined;
20
- generated: undefined;
21
- }>;
22
- created_at_ms: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgBigInt53Builder>, {
23
- name: string;
24
- tableName: "auth_setup_sessions";
25
- dataType: "number int53";
26
- data: number;
27
- driverParam: string | number;
28
- notNull: true;
29
- hasDefault: false;
30
- isPrimaryKey: false;
31
- isAutoincrement: false;
32
- hasRuntimeDefault: false;
33
- enumValues: undefined;
34
- identity: undefined;
35
- generated: undefined;
36
- }>;
37
- created_by: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>, {
38
- name: string;
39
- tableName: "auth_setup_sessions";
40
- dataType: "string";
41
- data: string;
42
- driverParam: string;
43
- notNull: false;
44
- hasDefault: false;
45
- isPrimaryKey: false;
46
- isAutoincrement: false;
47
- hasRuntimeDefault: false;
48
- enumValues: undefined;
49
- identity: undefined;
50
- generated: undefined;
51
- }>;
52
- expires_at_ms: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgBigInt53Builder>, {
53
- name: string;
54
- tableName: "auth_setup_sessions";
55
- dataType: "number int53";
56
- data: number;
57
- driverParam: string | number;
58
- notNull: true;
59
- hasDefault: false;
60
- isPrimaryKey: false;
61
- isAutoincrement: false;
62
- hasRuntimeDefault: false;
63
- enumValues: undefined;
64
- identity: undefined;
65
- generated: undefined;
66
- }>;
67
- organization_id: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
68
- name: string;
69
- tableName: "auth_setup_sessions";
70
- dataType: "string";
71
- data: string;
72
- driverParam: string;
73
- notNull: true;
74
- hasDefault: false;
75
- isPrimaryKey: false;
76
- isAutoincrement: false;
77
- hasRuntimeDefault: false;
78
- enumValues: undefined;
79
- identity: undefined;
80
- generated: undefined;
81
- }>;
82
- setup_session_id: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetIsPrimaryKey<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
83
- name: string;
84
- tableName: "auth_setup_sessions";
85
- dataType: "string";
86
- data: string;
87
- driverParam: string;
88
- notNull: true;
89
- hasDefault: false;
90
- isPrimaryKey: false;
91
- isAutoincrement: false;
92
- hasRuntimeDefault: false;
93
- enumValues: undefined;
94
- identity: undefined;
95
- generated: undefined;
96
- }>;
97
- token_hash: import("drizzle-orm/pg-core").PgBuildColumn<"auth_setup_sessions", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
98
- name: string;
99
- tableName: "auth_setup_sessions";
100
- dataType: "string";
101
- data: string;
102
- driverParam: string;
103
- notNull: true;
104
- hasDefault: false;
105
- isPrimaryKey: false;
106
- isAutoincrement: false;
107
- hasRuntimeDefault: false;
108
- enumValues: undefined;
109
- identity: undefined;
110
- generated: undefined;
111
- }>;
112
- };
113
- dialect: "pg";
114
- }>;
115
- export declare const createNeonSetupSessionStore: (databaseUrl: string) => SetupSessionStore;
116
- export declare const createPostgresSetupSessionStore: <DB extends AnyPgDatabase>(db: DB) => SetupSessionStore;
@@ -1,160 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import { type PortalRouteProps } from './config';
3
- export declare const portalRoutes: ({ emit, onScimTokenCreated, onSsoConnectionConfigured, portalRoute, scimRoute, scimTokenStore, setupSessionStore, ssoConnectionStore, ssoRoute }: PortalRouteProps) => Elysia<"", {
4
- decorator: {};
5
- store: {};
6
- derive: {};
7
- resolve: {};
8
- }, {
9
- typebox: {};
10
- error: {};
11
- }, {
12
- schema: {};
13
- standaloneSchema: {};
14
- macro: {};
15
- macroFn: {};
16
- parser: {};
17
- response: {};
18
- }, {
19
- [x: string]: {
20
- session: {
21
- get: {
22
- body: unknown;
23
- params: {};
24
- query: unknown;
25
- headers: unknown;
26
- response: {
27
- 401: "Invalid or expired setup link";
28
- 200: {
29
- readonly capabilities: import("./types").SetupCapability[];
30
- readonly configured: {
31
- readonly oidc: boolean;
32
- readonly saml: boolean;
33
- };
34
- readonly expiresAt: number;
35
- readonly oidc: {
36
- redirectUri: string;
37
- } | undefined;
38
- readonly organizationId: string;
39
- readonly saml: {
40
- acsUrl: string;
41
- entityId: string;
42
- metadataUrl: string;
43
- } | undefined;
44
- readonly scim: {
45
- baseUrl: string;
46
- } | undefined;
47
- };
48
- };
49
- };
50
- };
51
- };
52
- } & {
53
- [x: string]: {
54
- connection: {
55
- saml: {
56
- put: {
57
- body: {
58
- idpSloUrl?: string | undefined;
59
- idpEntityId: string;
60
- idpSsoUrl: string;
61
- idpX509Cert: string;
62
- };
63
- params: {};
64
- query: unknown;
65
- headers: unknown;
66
- response: {
67
- 401: "Invalid or expired setup link";
68
- 403: "This setup link cannot configure SAML";
69
- 200: {
70
- readonly configured: true;
71
- readonly type: "saml";
72
- };
73
- 501: "SSO is not configured";
74
- 422: {
75
- type: "validation";
76
- on: string;
77
- summary?: string;
78
- message?: string;
79
- found?: unknown;
80
- property?: string;
81
- expected?: string;
82
- };
83
- };
84
- };
85
- };
86
- };
87
- };
88
- } & {
89
- [x: string]: {
90
- connection: {
91
- oidc: {
92
- put: {
93
- body: {
94
- scopes?: string[] | undefined;
95
- redirectUri?: string | undefined;
96
- issuer: string;
97
- clientId: string;
98
- clientSecret: string;
99
- };
100
- params: {};
101
- query: unknown;
102
- headers: unknown;
103
- response: {
104
- 401: "Invalid or expired setup link";
105
- 403: "This setup link cannot configure OIDC";
106
- 200: {
107
- readonly configured: true;
108
- readonly type: "oidc";
109
- };
110
- 501: "SSO is not configured";
111
- 422: {
112
- type: "validation";
113
- on: string;
114
- summary?: string;
115
- message?: string;
116
- found?: unknown;
117
- property?: string;
118
- expected?: string;
119
- };
120
- };
121
- };
122
- };
123
- };
124
- };
125
- } & {
126
- [x: string]: {
127
- scim: {
128
- token: {
129
- post: {
130
- body: unknown;
131
- params: {};
132
- query: unknown;
133
- headers: unknown;
134
- response: {
135
- 401: "Invalid or expired setup link";
136
- 403: "This setup link cannot configure SCIM";
137
- 200: {
138
- readonly baseUrl: `${string}/${string}`;
139
- readonly token: string;
140
- readonly tokenId: string;
141
- };
142
- 501: "SCIM is not configured";
143
- };
144
- };
145
- };
146
- };
147
- };
148
- }, {
149
- derive: {};
150
- resolve: {};
151
- schema: {};
152
- standaloneSchema: {};
153
- response: {};
154
- }, {
155
- derive: {};
156
- resolve: {};
157
- schema: {};
158
- standaloneSchema: {};
159
- response: {};
160
- }>;
@@ -1,16 +0,0 @@
1
- import type { OrganizationId } from '../tenancy';
2
- export type SetupCapability = 'scim' | 'sso_oidc' | 'sso_saml';
3
- export type SetupSession = {
4
- capabilities: SetupCapability[];
5
- createdAt: number;
6
- createdBy?: string;
7
- expiresAt: number;
8
- organizationId: OrganizationId;
9
- setupSessionId: string;
10
- tokenHash: string;
11
- };
12
- export type SetupSessionStore = {
13
- deleteSetupSession: (setupSessionId: string) => Promise<void>;
14
- getSetupSessionByTokenHash: (tokenHash: string) => Promise<SetupSession | undefined>;
15
- saveSetupSession: (session: SetupSession) => Promise<void>;
16
- };