@auth0/auth0-server-js 1.12.0 → 1.12.1

package/dist/index.d.cts

@@ -690,6 +690,12 @@ declare class ServerPasskeyClient<TStoreOptions = unknown> {
      *
      * This method does not create a session; no state is persisted.
      *
+     * On a confidential client this endpoint accepts `client_secret` as its only
+     * credential, so configure `clientSecret` on the `ServerClient`. It does not
+     * accept a private key JWT and is not served on the mTLS endpoint aliases, so a
+     * client configured with only `clientAssertionSigningKey` or only `useMtls` is
+     * rejected by Auth0. Public clients authenticate with `clientId` alone.
+     *
      * @param options User profile data and optional realm/organization.
      * @param storeOptions Optional options used to resolve the domain (resolver mode).
      *
@@ -708,6 +714,9 @@ declare class ServerPasskeyClient<TStoreOptions = unknown> {
      *
      * This method does not create a session; no state is persisted.
      *
+     * Client authentication works the same way as {@link ServerPasskeyClient.register}:
+     * on a confidential client, only a `clientSecret` is accepted here.
+     *
      * @param options Optional realm/organization configuration.
      * @param storeOptions Optional options used to resolve the domain (resolver mode).
      *

package/dist/index.d.ts

@@ -690,6 +690,12 @@ declare class ServerPasskeyClient<TStoreOptions = unknown> {
      *
      * This method does not create a session; no state is persisted.
      *
+     * On a confidential client this endpoint accepts `client_secret` as its only
+     * credential, so configure `clientSecret` on the `ServerClient`. It does not
+     * accept a private key JWT and is not served on the mTLS endpoint aliases, so a
+     * client configured with only `clientAssertionSigningKey` or only `useMtls` is
+     * rejected by Auth0. Public clients authenticate with `clientId` alone.
+     *
      * @param options User profile data and optional realm/organization.
      * @param storeOptions Optional options used to resolve the domain (resolver mode).
      *
@@ -708,6 +714,9 @@ declare class ServerPasskeyClient<TStoreOptions = unknown> {
      *
      * This method does not create a session; no state is persisted.
      *
+     * Client authentication works the same way as {@link ServerPasskeyClient.register}:
+     * on a confidential client, only a `clientSecret` is accepted here.
+     *
      * @param options Optional realm/organization configuration.
      * @param storeOptions Optional options used to resolve the domain (resolver mode).
      *

package/dist/index.js

@@ -211,7 +211,7 @@ function getTelemetryConfig(config) {
   return {
     enabled: true,
     name: config?.name ?? "@auth0/auth0-server-js",
-    version: config?.version ?? "1.12.0"
+    version: config?.version ?? "1.12.1"
   };
 }
 
@@ -317,6 +317,12 @@ var ServerPasskeyClient = class {
    *
    * This method does not create a session; no state is persisted.
    *
+   * On a confidential client this endpoint accepts `client_secret` as its only
+   * credential, so configure `clientSecret` on the `ServerClient`. It does not
+   * accept a private key JWT and is not served on the mTLS endpoint aliases, so a
+   * client configured with only `clientAssertionSigningKey` or only `useMtls` is
+   * rejected by Auth0. Public clients authenticate with `clientId` alone.
+   *
    * @param options User profile data and optional realm/organization.
    * @param storeOptions Optional options used to resolve the domain (resolver mode).
    *
@@ -339,6 +345,9 @@ var ServerPasskeyClient = class {
    *
    * This method does not create a session; no state is persisted.
    *
+   * Client authentication works the same way as {@link ServerPasskeyClient.register}:
+   * on a confidential client, only a `clientSecret` is accepted here.
+   *
    * @param options Optional realm/organization configuration.
    * @param storeOptions Optional options used to resolve the domain (resolver mode).
    *