@aepstore-dev/contracts 1.100.0 → 1.101.0

package/gen/auth.d.ts

@@ -78,6 +78,37 @@ export interface ResetUserTwoFactorRequest {
     adminId: string;
     reason: string;
 }
+export interface GeneratePasskeyRegistrationOptionsRequest {
+    userId: string;
+}
+export interface VerifyPasskeyRegistrationRequest {
+    userId: string;
+    challengeId: string;
+    /** Raw JSON returned by @simplewebauthn/browser startRegistration(). */
+    responseJson: string;
+    name: string;
+}
+export interface ListPasskeysRequest {
+    userId: string;
+}
+export interface DeletePasskeyRequest {
+    userId: string;
+    passkeyId: string;
+}
+export interface GeneratePasskeyAuthenticationOptionsRequest {
+    /**
+     * Username or email. V1 requires an existing account identifier and does
+     * not implement passkey-first/account-discovery registration.
+     */
+    credentials: string;
+}
+export interface VerifyPasskeyAuthenticationRequest {
+    challengeId: string;
+    /** Raw JSON returned by @simplewebauthn/browser startAuthentication(). */
+    responseJson: string;
+    userAgent: string;
+    ip: string;
+}
 export interface AuthUser {
     id: string;
     username: string;
@@ -150,6 +181,30 @@ export interface ResetUserTwoFactorResponse {
     previousType: TwoFactorType;
     revokedSessions: number;
 }
+export interface PasskeyOptionsResponse {
+    /** PublicKeyCredentialCreationOptionsJSON or PublicKeyCredentialRequestOptionsJSON. */
+    optionsJson: string;
+    challengeId: string;
+}
+export interface PasskeyInfo {
+    id: string;
+    name: string;
+    createdAt: string;
+    lastUsedAt: string;
+    deviceType: string;
+    backedUp: boolean;
+    transports: string[];
+}
+export interface PasskeyRegistrationResponse {
+    ok: boolean;
+    passkey: PasskeyInfo | undefined;
+}
+export interface ListPasskeysResponse {
+    items: PasskeyInfo[];
+}
+export interface DeletePasskeyResponse {
+    ok: boolean;
+}
 export interface RestoreLoginRequest {
     /** email or username */
     credentials: string;
@@ -198,6 +253,12 @@ export interface AuthServiceClient {
     getProfile(request: GetProfileRequest): Observable<AuthUser>;
     cleanupExpiredTotpSetups(request: Empty): Observable<Empty>;
     resetUserTwoFactor(request: ResetUserTwoFactorRequest): Observable<ResetUserTwoFactorResponse>;
+    generatePasskeyRegistrationOptions(request: GeneratePasskeyRegistrationOptionsRequest): Observable<PasskeyOptionsResponse>;
+    verifyPasskeyRegistration(request: VerifyPasskeyRegistrationRequest): Observable<PasskeyRegistrationResponse>;
+    listPasskeys(request: ListPasskeysRequest): Observable<ListPasskeysResponse>;
+    deletePasskey(request: DeletePasskeyRequest): Observable<DeletePasskeyResponse>;
+    generatePasskeyAuthenticationOptions(request: GeneratePasskeyAuthenticationOptionsRequest): Observable<PasskeyOptionsResponse>;
+    verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Observable<AuthResult>;
     /**
      * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
      * HMAC matches; LogoutAll wipes every row for the user.
@@ -235,6 +296,12 @@ export interface AuthServiceController {
     getProfile(request: GetProfileRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
     cleanupExpiredTotpSetups(request: Empty): Promise<Empty> | Observable<Empty> | Empty;
     resetUserTwoFactor(request: ResetUserTwoFactorRequest): Promise<ResetUserTwoFactorResponse> | Observable<ResetUserTwoFactorResponse> | ResetUserTwoFactorResponse;
+    generatePasskeyRegistrationOptions(request: GeneratePasskeyRegistrationOptionsRequest): Promise<PasskeyOptionsResponse> | Observable<PasskeyOptionsResponse> | PasskeyOptionsResponse;
+    verifyPasskeyRegistration(request: VerifyPasskeyRegistrationRequest): Promise<PasskeyRegistrationResponse> | Observable<PasskeyRegistrationResponse> | PasskeyRegistrationResponse;
+    listPasskeys(request: ListPasskeysRequest): Promise<ListPasskeysResponse> | Observable<ListPasskeysResponse> | ListPasskeysResponse;
+    deletePasskey(request: DeletePasskeyRequest): Promise<DeletePasskeyResponse> | Observable<DeletePasskeyResponse> | DeletePasskeyResponse;
+    generatePasskeyAuthenticationOptions(request: GeneratePasskeyAuthenticationOptionsRequest): Promise<PasskeyOptionsResponse> | Observable<PasskeyOptionsResponse> | PasskeyOptionsResponse;
+    verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
     /**
      * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
      * HMAC matches; LogoutAll wipes every row for the user.

package/gen/auth.js

@@ -31,6 +31,12 @@ function AuthServiceControllerMethods() {
             "getProfile",
             "cleanupExpiredTotpSetups",
             "resetUserTwoFactor",
+            "generatePasskeyRegistrationOptions",
+            "verifyPasskeyRegistration",
+            "listPasskeys",
+            "deletePasskey",
+            "generatePasskeyAuthenticationOptions",
+            "verifyPasskeyAuthentication",
             "logoutCurrent",
             "logoutAll",
             "restoreLogin",

package/gen/auth.ts

@@ -98,6 +98,43 @@ export interface ResetUserTwoFactorRequest {
   reason: string;
 }
 
+export interface GeneratePasskeyRegistrationOptionsRequest {
+  userId: string;
+}
+
+export interface VerifyPasskeyRegistrationRequest {
+  userId: string;
+  challengeId: string;
+  /** Raw JSON returned by @simplewebauthn/browser startRegistration(). */
+  responseJson: string;
+  name: string;
+}
+
+export interface ListPasskeysRequest {
+  userId: string;
+}
+
+export interface DeletePasskeyRequest {
+  userId: string;
+  passkeyId: string;
+}
+
+export interface GeneratePasskeyAuthenticationOptionsRequest {
+  /**
+   * Username or email. V1 requires an existing account identifier and does
+   * not implement passkey-first/account-discovery registration.
+   */
+  credentials: string;
+}
+
+export interface VerifyPasskeyAuthenticationRequest {
+  challengeId: string;
+  /** Raw JSON returned by @simplewebauthn/browser startAuthentication(). */
+  responseJson: string;
+  userAgent: string;
+  ip: string;
+}
+
 export interface AuthUser {
   id: string;
   username: string;
@@ -178,6 +215,35 @@ export interface ResetUserTwoFactorResponse {
   revokedSessions: number;
 }
 
+export interface PasskeyOptionsResponse {
+  /** PublicKeyCredentialCreationOptionsJSON or PublicKeyCredentialRequestOptionsJSON. */
+  optionsJson: string;
+  challengeId: string;
+}
+
+export interface PasskeyInfo {
+  id: string;
+  name: string;
+  createdAt: string;
+  lastUsedAt: string;
+  deviceType: string;
+  backedUp: boolean;
+  transports: string[];
+}
+
+export interface PasskeyRegistrationResponse {
+  ok: boolean;
+  passkey: PasskeyInfo | undefined;
+}
+
+export interface ListPasskeysResponse {
+  items: PasskeyInfo[];
+}
+
+export interface DeletePasskeyResponse {
+  ok: boolean;
+}
+
 export interface RestoreLoginRequest {
   /** email or username */
   credentials: string;
@@ -242,6 +308,22 @@ export interface AuthServiceClient {
 
   resetUserTwoFactor(request: ResetUserTwoFactorRequest): Observable<ResetUserTwoFactorResponse>;
 
+  generatePasskeyRegistrationOptions(
+    request: GeneratePasskeyRegistrationOptionsRequest,
+  ): Observable<PasskeyOptionsResponse>;
+
+  verifyPasskeyRegistration(request: VerifyPasskeyRegistrationRequest): Observable<PasskeyRegistrationResponse>;
+
+  listPasskeys(request: ListPasskeysRequest): Observable<ListPasskeysResponse>;
+
+  deletePasskey(request: DeletePasskeyRequest): Observable<DeletePasskeyResponse>;
+
+  generatePasskeyAuthenticationOptions(
+    request: GeneratePasskeyAuthenticationOptionsRequest,
+  ): Observable<PasskeyOptionsResponse>;
+
+  verifyPasskeyAuthentication(request: VerifyPasskeyAuthenticationRequest): Observable<AuthResult>;
+
   /**
    * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
    * HMAC matches; LogoutAll wipes every row for the user.
@@ -301,6 +383,30 @@ export interface AuthServiceController {
     request: ResetUserTwoFactorRequest,
   ): Promise<ResetUserTwoFactorResponse> | Observable<ResetUserTwoFactorResponse> | ResetUserTwoFactorResponse;
 
+  generatePasskeyRegistrationOptions(
+    request: GeneratePasskeyRegistrationOptionsRequest,
+  ): Promise<PasskeyOptionsResponse> | Observable<PasskeyOptionsResponse> | PasskeyOptionsResponse;
+
+  verifyPasskeyRegistration(
+    request: VerifyPasskeyRegistrationRequest,
+  ): Promise<PasskeyRegistrationResponse> | Observable<PasskeyRegistrationResponse> | PasskeyRegistrationResponse;
+
+  listPasskeys(
+    request: ListPasskeysRequest,
+  ): Promise<ListPasskeysResponse> | Observable<ListPasskeysResponse> | ListPasskeysResponse;
+
+  deletePasskey(
+    request: DeletePasskeyRequest,
+  ): Promise<DeletePasskeyResponse> | Observable<DeletePasskeyResponse> | DeletePasskeyResponse;
+
+  generatePasskeyAuthenticationOptions(
+    request: GeneratePasskeyAuthenticationOptionsRequest,
+  ): Promise<PasskeyOptionsResponse> | Observable<PasskeyOptionsResponse> | PasskeyOptionsResponse;
+
+  verifyPasskeyAuthentication(
+    request: VerifyPasskeyAuthenticationRequest,
+  ): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
   /**
    * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
    * HMAC matches; LogoutAll wipes every row for the user.
@@ -341,6 +447,12 @@ export function AuthServiceControllerMethods() {
       "getProfile",
       "cleanupExpiredTotpSetups",
       "resetUserTwoFactor",
+      "generatePasskeyRegistrationOptions",
+      "verifyPasskeyRegistration",
+      "listPasskeys",
+      "deletePasskey",
+      "generatePasskeyAuthenticationOptions",
+      "verifyPasskeyAuthentication",
       "logoutCurrent",
       "logoutAll",
       "restoreLogin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aepstore-dev/contracts",
-  "version": "1.100.0",
+  "version": "1.101.0",
   "description": "Protobuf definitions for aepstore microservices",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/proto/auth.proto

@@ -19,6 +19,12 @@ service AuthService {
     rpc GetProfile(GetProfileRequest) returns (AuthUser);
     rpc CleanupExpiredTotpSetups(Empty) returns (Empty);
     rpc ResetUserTwoFactor(ResetUserTwoFactorRequest) returns (ResetUserTwoFactorResponse);
+    rpc GeneratePasskeyRegistrationOptions(GeneratePasskeyRegistrationOptionsRequest) returns (PasskeyOptionsResponse);
+    rpc VerifyPasskeyRegistration(VerifyPasskeyRegistrationRequest) returns (PasskeyRegistrationResponse);
+    rpc ListPasskeys(ListPasskeysRequest) returns (ListPasskeysResponse);
+    rpc DeletePasskey(DeletePasskeyRequest) returns (DeletePasskeyResponse);
+    rpc GeneratePasskeyAuthenticationOptions(GeneratePasskeyAuthenticationOptionsRequest) returns (PasskeyOptionsResponse);
+    rpc VerifyPasskeyAuthentication(VerifyPasskeyAuthenticationRequest) returns (AuthResult);
 
     // Logout — kill refresh tokens. LogoutCurrent kills only the one whose
     // HMAC matches; LogoutAll wipes every row for the user.
@@ -113,6 +119,41 @@ message ResetUserTwoFactorRequest {
     string admin_id = 2;
     string reason = 3;
 }
+
+message GeneratePasskeyRegistrationOptionsRequest {
+    string user_id = 1;
+}
+
+message VerifyPasskeyRegistrationRequest {
+    string user_id = 1;
+    string challenge_id = 2;
+    // Raw JSON returned by @simplewebauthn/browser startRegistration().
+    string response_json = 3;
+    string name = 4;
+}
+
+message ListPasskeysRequest {
+    string user_id = 1;
+}
+
+message DeletePasskeyRequest {
+    string user_id = 1;
+    string passkey_id = 2;
+}
+
+message GeneratePasskeyAuthenticationOptionsRequest {
+    // Username or email. V1 requires an existing account identifier and does
+    // not implement passkey-first/account-discovery registration.
+    string credentials = 1;
+}
+
+message VerifyPasskeyAuthenticationRequest {
+    string challenge_id = 1;
+    // Raw JSON returned by @simplewebauthn/browser startAuthentication().
+    string response_json = 2;
+    string user_agent = 3;
+    string ip = 4;
+}
 
 // ---------------------------------------------------------------------------
 // Responses
@@ -195,6 +236,35 @@ message ResetUserTwoFactorResponse {
     TwoFactorType previous_type = 2;
     int32 revoked_sessions = 3;
 }
+
+message PasskeyOptionsResponse {
+    // PublicKeyCredentialCreationOptionsJSON or PublicKeyCredentialRequestOptionsJSON.
+    string options_json = 1;
+    string challenge_id = 2;
+}
+
+message PasskeyInfo {
+    string id = 1;
+    string name = 2;
+    string created_at = 3;
+    string last_used_at = 4;
+    string device_type = 5;
+    bool backed_up = 6;
+    repeated string transports = 7;
+}
+
+message PasskeyRegistrationResponse {
+    bool ok = 1;
+    PasskeyInfo passkey = 2;
+}
+
+message ListPasskeysResponse {
+    repeated PasskeyInfo items = 1;
+}
+
+message DeletePasskeyResponse {
+    bool ok = 1;
+}
 
 message RestoreLoginRequest {
     string credentials = 1; // email or username