@adelie/server 0.5.8 → 0.5.9

package/dist/api/types.d.ts

@@ -1139,7 +1139,8 @@ interface ModelBalanceFailure {
 /**
  * How the authorization code travels back. `callback` sends the browser to a harness URL
  * the provider redirects to; `manual` asks the provider for a one-time code the user copies
- * back by hand, for the case where that redirect cannot reach the harness.
+ * back by hand, for the case where that redirect cannot reach the harness — or where the
+ * provider would refuse it: only an HTTPS or loopback HTTP origin can be redirected to.
  */
 type ModelOAuthMode = "callback" | "manual";
 /**
@@ -1150,13 +1151,19 @@ type ModelOAuthMode = "callback" | "manual";
 interface ModelOAuthStartRequest {
     /** Provider group id (must be a catalog group that publishes a key-minting flow). */
     provider: string;
-    /** Defaults to `callback`. */
+    /** Defaults to `callback`; the response says which mode the flow was opened in. */
     mode?: ModelOAuthMode;
 }
 /** The opaque flow handle plus the page to send the user to. No secret of the flow's is included. */
 interface ModelOAuthStartResponse {
     flowId: string;
     authorizeUrl: string;
+    /**
+     * The mode the flow was opened in: `manual` for a `callback` request when the origin the
+     * request reached this server on is neither HTTPS nor loopback HTTP, which the provider's
+     * authorization page refuses as a callback.
+     */
+    mode: ModelOAuthMode;
 }
 /** Why a flow failed, as a code the frontend phrases; never carries a code, a verifier or a key. */
 type ModelOAuthErrorCode = "invalid_request" | "code_rejected" | "upstream_failed" | "unreachable" | "apply_failed";

package/dist/api/types.js

@@ -1,7 +1,7 @@
 import {
   MACHINE_PHASES,
   TICKET_SLUG_PATTERN
-} from "../chunk-6IXN3YH4.js";
+} from "../chunk-7ROH3XZA.js";
 import "../chunk-B5IP37ZQ.js";
 export {
   MACHINE_PHASES,

package/dist/{chunk-6IXN3YH4.js → chunk-7ROH3XZA.js}

@@ -13,4 +13,4 @@ export {
   MACHINE_PHASES,
   TICKET_SLUG_PATTERN
 };
-//# sourceMappingURL=chunk-6IXN3YH4.js.map
+//# sourceMappingURL=chunk-7ROH3XZA.js.map