@atlasauth/backend 0.1.0

package/dist/client/fga.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fgaResource = fgaResource;
+const request_1 = require("./request");
+function fgaResource(request) {
+    const api = {
+        stores: {
+            list() {
+                return request({ method: 'GET', path: '/v1/fga/stores' });
+            },
+            create(body, idempotencyKey) {
+                return request({ method: 'POST', path: '/v1/fga/stores', body, idempotencyKey });
+            },
+            get(id) {
+                return request({ method: 'GET', path: `/v1/fga/stores/${(0, request_1.enc)(id)}` });
+            },
+            delete(id) {
+                return request({ method: 'DELETE', path: `/v1/fga/stores/${(0, request_1.enc)(id)}` });
+            },
+        },
+        models: {
+            list(storeId) {
+                return request({
+                    method: 'GET',
+                    path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models`,
+                });
+            },
+            create(storeId, body, idempotencyKey) {
+                return request({
+                    method: 'POST',
+                    path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models`,
+                    body,
+                    idempotencyKey,
+                });
+            },
+            get(storeId, modelId) {
+                return request({
+                    method: 'GET',
+                    path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models/${(0, request_1.enc)(modelId)}`,
+                });
+            },
+        },
+        /** Write and/or delete tuples in one atomic call. */
+        write(storeId, body, idempotencyKey) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/write`, body, idempotencyKey });
+        },
+        /** Query stored tuples by any of user / relation / object. */
+        read(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/read`, body });
+        },
+        /** Resolve a single access question against the model. */
+        check(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/check`, body });
+        },
+        /** Resolve MANY access questions in one round trip (list-authorization UIs). */
+        batchCheck(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/batch-check`, body });
+        },
+        /** List the objects of a type a user has a relation to. */
+        listObjects(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/list-objects`, body });
+        },
+        /** Expand the full userset tree for an object#relation. */
+        expand(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/expand`, body });
+        },
+        /**
+         * Bind a default store so an app that uses one store (the common case) can
+         * call `fga.store(id).check({ user, relation, object })` instead of threading
+         * the store id through every call — the ergonomic OpenFGA/Auth0-FGA SDKs
+         * offer. Returns the same operations with `storeId` pre-applied.
+         */
+        store(storeId) {
+            return {
+                write: (body, idempotencyKey) => api.write(storeId, body, idempotencyKey),
+                read: (body) => api.read(storeId, body),
+                check: (body) => api.check(storeId, body),
+                batchCheck: (body) => api.batchCheck(storeId, body),
+                listObjects: (body) => api.listObjects(storeId, body),
+                expand: (body) => api.expand(storeId, body),
+                models: {
+                    list: () => api.models.list(storeId),
+                    create: (body, idempotencyKey) => api.models.create(storeId, body, idempotencyKey),
+                    get: (modelId) => api.models.get(storeId, modelId),
+                },
+            };
+        },
+    };
+    return api;
+}
+//# sourceMappingURL=fga.js.map

package/dist/client/fga.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fga.js","sourceRoot":"","sources":["../../src/client/fga.ts"],"names":[],"mappings":";;AAwFA,kCAoHC;AA5MD,uCAAgD;AAwFhD,SAAgB,WAAW,CAAC,OAAkB;IAC5C,MAAM,GAAG,GAAG;QACV,MAAM,EAAE;YACN,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,IAAsB,EAAE,cAAuB;gBACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,OAAe;gBAClB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;iBAC5D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,OAAe,EACf,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;oBAC3D,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,OAAe;gBAClC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;SACF;QAED,qDAAqD;QACrD,KAAK,CACH,OAAe,EACf,IAAuD,EACvD,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,8DAA8D;QAC9D,IAAI,CACF,OAAe,EACf,IAA2D;YAE3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,0DAA0D;QAC1D,KAAK,CACH,OAAe,EACf,IAAkB;YAElB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,gFAAgF;QAChF,UAAU,CACR,OAAe,EACf,IAAsE;YAEtE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,2DAA2D;QAC3D,WAAW,CACT,OAAe,EACf,IAAwB;YAExB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,2DAA2D;QAC3D,MAAM,CACJ,OAAe,EACf,IAA2E;YAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED;;;;;WAKG;QACH,KAAK,CAAC,OAAe;YACnB,OAAO;gBACL,KAAK,EAAE,CAAC,IAAuD,EAAE,cAAuB,EAAE,EAAE,CAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;gBAC1C,IAAI,EAAE,CAAC,IAA2D,EAAE,EAAE,CACpE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzB,KAAK,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;gBACvD,UAAU,EAAE,CAAC,IAAsE,EAAE,EAAE,CACrF,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC/B,WAAW,EAAE,CAAC,IAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzE,MAAM,EAAE,CAAC,IAA2E,EAAE,EAAE,CACtF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC3B,MAAM,EAAE;oBACN,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;oBACpC,MAAM,EAAE,CAAC,IAAgC,EAAE,cAAuB,EAAE,EAAE,CACpE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;oBAClD,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;iBAC3D;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/client/import-export.d.ts

@@ -0,0 +1,88 @@
+import { type RequestFn } from './request';
+import type { CursorPage, CursorParams, ListPage, Metadata } from './types';
+/**
+ * §9.3 bulk user import/export — the Auth0 `jobs` parity surface. A job runs
+ * synchronously for a small batch (201 with the finished job) or is queued for
+ * a larger one (202 with a `pending` job the caller polls). An export never
+ * carries a password hash or provider secret, by construction.
+ */
+export interface Job {
+    object: 'job';
+    id: string;
+    type: 'user_import' | 'user_export';
+    status: string;
+    total: number;
+    processed: number;
+    succeeded: number;
+    failed: number;
+    error_count: number;
+    /** Present only on an export job: the serialised user array, or null. */
+    result?: ExportedUser[] | null;
+    created_at: number;
+    updated_at: number;
+    completed_at: number | null;
+}
+/** One recorded per-row failure inside a job's `errors` array. */
+export interface JobError {
+    index: number;
+    email: string | null;
+    code: string;
+    message: string;
+}
+/** A user as serialised into an export job's `result`. Never a secret. */
+export interface ExportedUser {
+    object: 'user';
+    id: string;
+    username: string | null;
+    first_name: string | null;
+    last_name: string | null;
+    image_url: string | null;
+    public_metadata: Metadata;
+    private_metadata: Metadata;
+    email_addresses: Array<{
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+    }>;
+    mfa_enabled: boolean;
+    banned: boolean;
+    created_at: number;
+    updated_at: number;
+}
+/** One user row accepted by an import. Provide `password` or a `password_hash`. */
+export interface ImportUserRow {
+    email_address?: string;
+    email?: string;
+    password?: string;
+    password_hash?: string;
+    email_verified?: boolean;
+    verified?: boolean;
+    first_name?: string;
+    last_name?: string;
+    username?: string;
+    public_metadata?: unknown;
+    private_metadata?: unknown;
+    external_accounts?: Array<{
+        provider?: string;
+        provider_user_id?: string;
+        email?: string;
+        email_verified?: boolean;
+    }>;
+}
+export interface ImportUsersBody {
+    users: ImportUserRow[];
+    /** Update an existing user matched by verified email instead of skipping it. */
+    upsert?: boolean;
+}
+export declare function importExportResource(request: RequestFn): {
+    /** Import users through the same per-row path sign-up uses. Deduped by verified email. */
+    importUsers(body: ImportUsersBody, idempotencyKey?: string): Promise<Job>;
+    /** Export every non-deleted user in the instance, serialised without secrets. */
+    exportUsers(idempotencyKey?: string): Promise<Job>;
+    /** Poll the instance's import/export jobs, newest first. */
+    listJobs(params?: CursorParams): Promise<CursorPage<Job>>;
+    getJob(id: string): Promise<Job>;
+    /** The per-row failures recorded against a job. */
+    getJobErrors(id: string): Promise<ListPage<JobError>>;
+};

package/dist/client/import-export.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.importExportResource = importExportResource;
+const request_1 = require("./request");
+function importExportResource(request) {
+    return {
+        /** Import users through the same per-row path sign-up uses. Deduped by verified email. */
+        importUsers(body, idempotencyKey) {
+            return request({ method: 'POST', path: '/v1/user_imports', body, idempotencyKey });
+        },
+        /** Export every non-deleted user in the instance, serialised without secrets. */
+        exportUsers(idempotencyKey) {
+            return request({ method: 'POST', path: '/v1/user_exports', idempotencyKey });
+        },
+        /** Poll the instance's import/export jobs, newest first. */
+        listJobs(params = {}) {
+            return request({ method: 'GET', path: '/v1/jobs', query: { ...params } });
+        },
+        getJob(id) {
+            return request({ method: 'GET', path: `/v1/jobs/${(0, request_1.enc)(id)}` });
+        },
+        /** The per-row failures recorded against a job. */
+        getJobErrors(id) {
+            return request({ method: 'GET', path: `/v1/jobs/${(0, request_1.enc)(id)}/errors` });
+        },
+    };
+}
+//# sourceMappingURL=import-export.js.map

package/dist/client/import-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-export.js","sourceRoot":"","sources":["../../src/client/import-export.ts"],"names":[],"mappings":";;AAmFA,oDAsBC;AAzGD,uCAAgD;AAmFhD,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,0FAA0F;QAC1F,WAAW,CAAC,IAAqB,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,iFAAiF;QACjF,WAAW,CAAC,cAAuB;YACjC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,4DAA4D;QAC5D,QAAQ,CAAC,SAAuB,EAAE;YAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,mDAAmD;QACnD,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}