@authhero/adapter-interfaces 0.41.0 → 0.42.0

package/dist/adapter-interfaces.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),K=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),a=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),p=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),z=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:p.optional()}),s=t.z.object({email:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),d=s.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),g=t.z.object({...d.shape,...a.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string(),login_count:t.z.number(),identities:t.z.array(z).optional()}),G=g,B=s.extend({email:t.z.string(),login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),M="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let L=(e=21)=>{let i="",o=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=M[o[e]&63];return i};const _=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),u=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:_.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>L()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),m=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...u.shape});var r=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(r||{}),l=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(l||{}),c=(e=>(e.S256="S256",e.Plain="plain",e))(c||{});const h=t.z.object({client_id:t.z.string(),vendor_id:t.z.string().optional(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(r).optional(),response_mode:t.z.nativeEnum(l).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(c).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional()}),q=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),b=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().default("").optional(),token_endpoint:t.z.string().default("").optional(),userinfo_endpoint:t.z.string().default("").optional(),jwks_uri:t.z.string().default("").optional(),discovery_url:t.z.string().default("").optional(),issuer:t.z.string().default("").optional()}).default({}).optional(),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),S=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(b.shape),f=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional()}),k=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),id:t.z.string(),...f.shape}),W=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()}),Q=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()});t.z.object({...m.shape,domains:t.z.array(Q),tenant:k,connections:t.z.array(S)});const y=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),I=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:y,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),V=t.z.object({...I.shape,created_at:t.z.string()}),E=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()}),Y=a.extend({...E.shape,id:t.z.string()}),C=t.z.object({trigger_id:t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),enabled:t.z.boolean().default(!1),url:t.z.string(),hook_id:t.z.string().optional(),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional()}),X=C.extend({...a.shape,hook_id:t.z.string()}),w=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),J=t.z.object({keys:t.z.array(w)}),Z=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),j=t.z.object({auth0Client:t.z.string().optional(),authParams:h,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional()}).openapi({description:"This represents a login sesion"}),$=t.z.object({...j.shape,login_id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var v=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))(v||{});const tt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),A=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),et=t.z.object({type:tt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:A.optional()}),O=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),nt=t.z.object({...O.shape,created_at:t.z.string(),updated_at:t.z.string()}),U=t.z.object({session_id:t.z.string(),client_id:t.z.string(),expires_at:t.z.string(),used_at:t.z.string(),deleted_at:t.z.string().optional(),user_id:t.z.string()}),it=t.z.object({created_at:t.z.string(),...U.shape}),ot=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var N=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e))(N||{});const at=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const R=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),T=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),D=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),P=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),x=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),F=t.z.object({borders:R,colors:T,displayName:t.z.string(),fonts:D,page_background:P,widget:x}),st=F.extend({themeId:t.z.string()}),rt=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),lt=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),H=t.z.object({token:t.z.string(),session_id:t.z.string(),scope:t.z.string(),audience:t.z.string(),expires_at:t.z.string(),used_at:t.z.string().optional(),revoked_at:t.z.string().optional()}),ct=t.z.object({created_at:t.z.string(),...H.shape});function pt(e){const[i,o]=e.split("|");if(!i||!o)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:o}}exports.Auth0Client=A;exports.AuthorizationResponseMode=l;exports.AuthorizationResponseType=r;exports.CodeChallengeMethod=c;exports.GrantType=N;exports.LogTypes=v;exports.applicationInsertSchema=u;exports.applicationSchema=m;exports.auth0UserResponseSchema=G;exports.authParamsSchema=h;exports.baseUserSchema=s;exports.bordersSchema=R;exports.brandingSchema=q;exports.codeInsertSchema=I;exports.codeSchema=V;exports.codeTypeSchema=y;exports.colorsSchema=T;exports.connectionInsertSchema=b;exports.connectionSchema=S;exports.domainInsertSchema=E;exports.domainSchema=Y;exports.emailProviderSchema=lt;exports.fontDetailsSchema=n;exports.fontsSchema=D;exports.hookInsertSchema=C;exports.hookSchema=X;exports.identitySchema=z;exports.jwksKeySchema=J;exports.jwksSchema=w;exports.logSchema=et;exports.loginInsertSchema=j;exports.loginSchema=$;exports.openIDConfigurationSchema=Z;exports.pageBackgroundSchema=P;exports.parseUserId=pt;exports.passwordInsertSchema=O;exports.passwordSchema=nt;exports.profileDataSchema=p;exports.promptSettingSchema=rt;exports.refreshTokenInsertSchema=H;exports.refreshTokenSchema=ct;exports.samlpAddon=_;exports.sessionInsertSchema=U;exports.sessionSchema=it;exports.signingKeySchema=ot;exports.tenantInsertSchema=f;exports.tenantSchema=k;exports.themeInsertSchema=F;exports.themeSchema=st;exports.tokenResponseSchema=at;exports.totalsSchema=K;exports.userInsertSchema=d;exports.userResponseSchema=B;exports.userSchema=g;exports.vendorSettingsSchema=W;exports.widgetSchema=x;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),K=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),a=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),p=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),z=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:p.optional()}),s=t.z.object({email:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),d=s.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),g=t.z.object({...d.shape,...a.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string(),login_count:t.z.number(),identities:t.z.array(z).optional()}),G=g,L=s.extend({email:t.z.string(),login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),B="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let M=(e=21)=>{let i="",o=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=B[o[e]&63];return i};const _=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),u=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:_.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>M()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),m=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...u.shape});var r=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(r||{}),l=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(l||{}),c=(e=>(e.S256="S256",e.Plain="plain",e))(c||{});const h=t.z.object({client_id:t.z.string(),vendor_id:t.z.string().optional(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(r).optional(),response_mode:t.z.nativeEnum(l).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(c).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional()}),q=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),b=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().default("").optional(),token_endpoint:t.z.string().default("").optional(),userinfo_endpoint:t.z.string().default("").optional(),jwks_uri:t.z.string().default("").optional(),discovery_url:t.z.string().default("").optional(),issuer:t.z.string().default("").optional()}).default({}).optional(),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),S=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(b.shape),f=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional()}),k=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),id:t.z.string(),...f.shape}),W=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()}),Q=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()});t.z.object({...m.shape,domains:t.z.array(Q),tenant:k,connections:t.z.array(S)});const y=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),I=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:y,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),V=t.z.object({...I.shape,created_at:t.z.string()}),w=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()}),Y=a.extend({...w.shape,id:t.z.string()}),E=t.z.object({trigger_id:t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),enabled:t.z.boolean().default(!1),url:t.z.string(),hook_id:t.z.string().optional(),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional()}),X=E.extend({...a.shape,hook_id:t.z.string()}),C=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),J=t.z.object({keys:t.z.array(C)}),Z=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),j=t.z.object({auth0Client:t.z.string().optional(),authParams:h,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional()}).openapi({description:"This represents a login sesion"}),$=t.z.object({...j.shape,login_id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var v=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))(v||{});const tt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),A=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),et=t.z.object({type:tt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:A.optional()}),O=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),nt=t.z.object({...O.shape,created_at:t.z.string(),updated_at:t.z.string()}),it=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),U=t.z.object({id:t.z.string(),session_id:t.z.string().optional(),client_id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),device:it.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),ot=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...U.shape}),at=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var N=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e))(N||{});const st=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const R=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),T=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),D=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),P=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),x=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),F=t.z.object({borders:R,colors:T,displayName:t.z.string(),fonts:D,page_background:P,widget:x}),rt=F.extend({themeId:t.z.string()}),lt=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),ct=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),H=t.z.object({token:t.z.string(),session_id:t.z.string(),scope:t.z.string(),audience:t.z.string(),expires_at:t.z.string(),used_at:t.z.string().optional(),revoked_at:t.z.string().optional()}),pt=t.z.object({created_at:t.z.string(),...H.shape});function zt(e){const[i,o]=e.split("|");if(!i||!o)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:o}}exports.Auth0Client=A;exports.AuthorizationResponseMode=l;exports.AuthorizationResponseType=r;exports.CodeChallengeMethod=c;exports.GrantType=N;exports.LogTypes=v;exports.applicationInsertSchema=u;exports.applicationSchema=m;exports.auth0UserResponseSchema=G;exports.authParamsSchema=h;exports.baseUserSchema=s;exports.bordersSchema=R;exports.brandingSchema=q;exports.codeInsertSchema=I;exports.codeSchema=V;exports.codeTypeSchema=y;exports.colorsSchema=T;exports.connectionInsertSchema=b;exports.connectionSchema=S;exports.domainInsertSchema=w;exports.domainSchema=Y;exports.emailProviderSchema=ct;exports.fontDetailsSchema=n;exports.fontsSchema=D;exports.hookInsertSchema=E;exports.hookSchema=X;exports.identitySchema=z;exports.jwksKeySchema=J;exports.jwksSchema=C;exports.logSchema=et;exports.loginInsertSchema=j;exports.loginSchema=$;exports.openIDConfigurationSchema=Z;exports.pageBackgroundSchema=P;exports.parseUserId=zt;exports.passwordInsertSchema=O;exports.passwordSchema=nt;exports.profileDataSchema=p;exports.promptSettingSchema=lt;exports.refreshTokenInsertSchema=H;exports.refreshTokenSchema=pt;exports.samlpAddon=_;exports.sessionInsertSchema=U;exports.sessionSchema=ot;exports.signingKeySchema=at;exports.tenantInsertSchema=f;exports.tenantSchema=k;exports.themeInsertSchema=F;exports.themeSchema=rt;exports.tokenResponseSchema=st;exports.totalsSchema=K;exports.userInsertSchema=d;exports.userResponseSchema=L;exports.userSchema=g;exports.vendorSettingsSchema=W;exports.widgetSchema=x;

package/dist/adapter-interfaces.d.ts

@@ -2697,52 +2697,155 @@ export declare const passwordSchema: z.ZodObject<{
 }>;
 export type Password = z.infer<typeof passwordSchema>;
 export declare const sessionInsertSchema: z.ZodObject<{
-	session_id: z.ZodString;
+	id: z.ZodString;
+	session_id: z.ZodOptional<z.ZodString>;
 	client_id: z.ZodString;
-	expires_at: z.ZodString;
+	revoked_at: z.ZodOptional<z.ZodString>;
 	used_at: z.ZodString;
-	deleted_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodString;
+	expires_at: z.ZodOptional<z.ZodString>;
+	idle_expires_at: z.ZodOptional<z.ZodString>;
+	device: z.ZodObject<{
+		initial_user_agent: z.ZodString;
+		initial_ip: z.ZodString;
+		initial_asn: z.ZodString;
+		last_user_agent: z.ZodString;
+		last_ip: z.ZodString;
+		last_asn: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}>;
+	clients: z.ZodArray<z.ZodString, "many">;
 }, "strip", z.ZodTypeAny, {
 	user_id: string;
+	id: string;
 	client_id: string;
-	expires_at: string;
 	used_at: string;
-	session_id: string;
-	deleted_at?: string | undefined;
+	device: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	};
+	clients: string[];
+	expires_at?: string | undefined;
+	session_id?: string | undefined;
+	revoked_at?: string | undefined;
+	idle_expires_at?: string | undefined;
 }, {
 	user_id: string;
+	id: string;
 	client_id: string;
-	expires_at: string;
 	used_at: string;
-	session_id: string;
-	deleted_at?: string | undefined;
+	device: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	};
+	clients: string[];
+	expires_at?: string | undefined;
+	session_id?: string | undefined;
+	revoked_at?: string | undefined;
+	idle_expires_at?: string | undefined;
 }>;
 export type SessionInsert = z.infer<typeof sessionInsertSchema>;
 export declare const sessionSchema: z.ZodObject<{
-	session_id: z.ZodString;
+	id: z.ZodString;
+	session_id: z.ZodOptional<z.ZodString>;
 	client_id: z.ZodString;
-	expires_at: z.ZodString;
+	revoked_at: z.ZodOptional<z.ZodString>;
 	used_at: z.ZodString;
-	deleted_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodString;
+	expires_at: z.ZodOptional<z.ZodString>;
+	idle_expires_at: z.ZodOptional<z.ZodString>;
+	device: z.ZodObject<{
+		initial_user_agent: z.ZodString;
+		initial_ip: z.ZodString;
+		initial_asn: z.ZodString;
+		last_user_agent: z.ZodString;
+		last_ip: z.ZodString;
+		last_asn: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}>;
+	clients: z.ZodArray<z.ZodString, "many">;
 	created_at: z.ZodString;
+	updated_at: z.ZodString;
+	authenticated_at: z.ZodString;
+	last_interaction_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
 	created_at: string;
+	updated_at: string;
 	user_id: string;
+	id: string;
 	client_id: string;
-	expires_at: string;
 	used_at: string;
-	session_id: string;
-	deleted_at?: string | undefined;
+	device: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	};
+	clients: string[];
+	authenticated_at: string;
+	last_interaction_at: string;
+	expires_at?: string | undefined;
+	session_id?: string | undefined;
+	revoked_at?: string | undefined;
+	idle_expires_at?: string | undefined;
 }, {
 	created_at: string;
+	updated_at: string;
 	user_id: string;
+	id: string;
 	client_id: string;
-	expires_at: string;
 	used_at: string;
-	session_id: string;
-	deleted_at?: string | undefined;
+	device: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	};
+	clients: string[];
+	authenticated_at: string;
+	last_interaction_at: string;
+	expires_at?: string | undefined;
+	session_id?: string | undefined;
+	revoked_at?: string | undefined;
+	idle_expires_at?: string | undefined;
 }>;
 export type Session = z.infer<typeof sessionSchema>;
 export declare const signingKeySchema: z.ZodObject<{
@@ -2763,6 +2866,7 @@ export declare const signingKeySchema: z.ZodObject<{
 	cert: string;
 	fingerprint: string;
 	thumbprint: string;
+	revoked_at?: string | undefined;
 	pkcs7?: string | undefined;
 	current?: boolean | undefined;
 	next?: boolean | undefined;
@@ -2770,12 +2874,12 @@ export declare const signingKeySchema: z.ZodObject<{
 	current_since?: string | undefined;
 	current_until?: string | undefined;
 	revoked?: boolean | undefined;
-	revoked_at?: string | undefined;
 }, {
 	kid: string;
 	cert: string;
 	fingerprint: string;
 	thumbprint: string;
+	revoked_at?: string | undefined;
 	pkcs7?: string | undefined;
 	current?: boolean | undefined;
 	next?: boolean | undefined;
@@ -2783,7 +2887,6 @@ export declare const signingKeySchema: z.ZodObject<{
 	current_since?: string | undefined;
 	current_until?: string | undefined;
 	revoked?: boolean | undefined;
-	revoked_at?: string | undefined;
 }>;
 export type SigningKey = z.infer<typeof signingKeySchema>;
 export declare const tenantInsertSchema: z.ZodObject<{
@@ -4298,9 +4401,7 @@ export interface SessionsAdapter {
 	create: (tenant_id: string, session: SessionInsert) => Promise<Session>;
 	get: (tenant_id: string, id: string) => Promise<Session | null>;
 	list(tenantId: string, params?: ListParams): Promise<ListSesssionsResponse>;
-	update: (tenant_id: string, id: string, session: {
-		used_at: string;
-	}) => Promise<boolean>;
+	update: (tenant_id: string, id: string, session: Partial<Session>) => Promise<boolean>;
 	remove: (tenant_id: string, id: string) => Promise<boolean>;
 }
 export interface CreateTenantParams {

package/dist/adapter-interfaces.mjs

@@ -1,9 +1,9 @@
 import { z as t } from "@hono/zod-openapi";
-const q = t.object({
+const Q = t.object({
   start: t.number(),
   limit: t.number(),
   length: t.number()
-}), a = t.object({
+}), s = t.object({
   created_at: t.string(),
   updated_at: t.string()
 }), p = t.object({
@@ -15,7 +15,7 @@ const q = t.object({
   phone_number: t.string().optional(),
   phone_verified: t.boolean().optional(),
   family_name: t.string().optional()
-}).catchall(t.any()), g = t.object({
+}).catchall(t.any()), d = t.object({
   connection: t.string(),
   user_id: t.string(),
   provider: t.string(),
@@ -24,7 +24,7 @@ const q = t.object({
   access_token_secret: t.string().optional(),
   refresh_token: t.string().optional(),
   profileData: p.optional()
-}), s = t.object({
+}), a = t.object({
   email: t.string().optional(),
   username: t.string().optional(),
   given_name: t.string().optional(),
@@ -38,7 +38,7 @@ const q = t.object({
   user_id: t.string().optional(),
   app_metadata: t.any().default({}).optional(),
   user_metadata: t.any().default({}).optional()
-}), d = s.extend({
+}), g = a.extend({
   email_verified: t.boolean().default(!1),
   verify_email: t.boolean().optional(),
   last_ip: t.string().optional(),
@@ -48,15 +48,15 @@ const q = t.object({
   connection: t.string().default("email"),
   is_social: t.boolean().optional()
 }), _ = t.object({
-  ...d.shape,
-  ...a.shape,
+  ...g.shape,
+  ...s.shape,
   user_id: t.string(),
   is_social: t.boolean(),
   // TODO: this not might be correct if you use the username
   email: t.string(),
   login_count: t.number(),
-  identities: t.array(g).optional()
-}), Q = _, V = s.extend({
+  identities: t.array(d).optional()
+}), V = _, Y = a.extend({
   email: t.string(),
   login_count: t.number(),
   multifactor: t.array(t.string()).optional(),
@@ -64,10 +64,10 @@ const q = t.object({
   last_login: t.string().optional(),
   user_id: t.string()
 }).catchall(t.any()), u = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let m = (n = 21) => {
-  let i = "", o = crypto.getRandomValues(new Uint8Array(n));
-  for (; n--; )
-    i += u[o[n] & 63];
+let m = (e = 21) => {
+  let i = "", o = crypto.getRandomValues(new Uint8Array(e));
+  for (; e--; )
+    i += u[o[e] & 63];
   return i;
 };
 const h = t.object({
@@ -118,11 +118,11 @@ const h = t.object({
     description: "Prevents users from signing up using the hosted login page. This is not available in auth0"
   })
 }), f = t.object({
-  created_at: t.string().transform((n) => n === null ? "" : n),
-  updated_at: t.string().transform((n) => n === null ? "" : n),
+  created_at: t.string().transform((e) => e === null ? "" : e),
+  updated_at: t.string().transform((e) => e === null ? "" : e),
   ...b.shape
 });
-var r = /* @__PURE__ */ ((n) => (n.TOKEN = "token", n.TOKEN_ID_TOKEN = "token id_token", n.CODE = "code", n))(r || {}), l = /* @__PURE__ */ ((n) => (n.QUERY = "query", n.FRAGMENT = "fragment", n.FORM_POST = "form_post", n.WEB_MESSAGE = "web_message", n.SAML_POST = "saml_post", n))(l || {}), c = /* @__PURE__ */ ((n) => (n.S256 = "S256", n.Plain = "plain", n))(c || {});
+var r = /* @__PURE__ */ ((e) => (e.TOKEN = "token", e.TOKEN_ID_TOKEN = "token id_token", e.CODE = "code", e))(r || {}), l = /* @__PURE__ */ ((e) => (e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e))(l || {}), c = /* @__PURE__ */ ((e) => (e.S256 = "S256", e.Plain = "plain", e))(c || {});
 const S = t.object({
   client_id: t.string(),
   vendor_id: t.string().optional(),
@@ -139,7 +139,7 @@ const S = t.object({
   code_challenge: t.string().optional(),
   username: t.string().optional(),
   ui_locales: t.string().optional()
-}), Y = t.object({
+}), X = t.object({
   colors: t.object({
     primary: t.string(),
     page_background: t.object({
@@ -178,8 +178,8 @@ const S = t.object({
   response_mode: t.custom().optional()
 }), y = t.object({
   id: t.string(),
-  created_at: t.string().transform((n) => n === null ? "" : n),
-  updated_at: t.string().transform((n) => n === null ? "" : n)
+  created_at: t.string().transform((e) => e === null ? "" : e),
+  updated_at: t.string().transform((e) => e === null ? "" : e)
 }).extend(k.shape), E = t.object({
   name: t.string(),
   audience: t.string(),
@@ -190,12 +190,12 @@ const S = t.object({
   primary_color: t.string().optional(),
   secondary_color: t.string().optional(),
   language: t.string().optional()
-}), C = t.object({
-  created_at: t.string().transform((n) => n === null ? "" : n),
-  updated_at: t.string().transform((n) => n === null ? "" : n),
+}), w = t.object({
+  created_at: t.string().transform((e) => e === null ? "" : e),
+  updated_at: t.string().transform((e) => e === null ? "" : e),
   id: t.string(),
   ...E.shape
-}), X = t.object({
+}), z = t.object({
   logoUrl: t.string(),
   loginBackgroundImage: t.string().nullish(),
   style: t.object({
@@ -212,7 +212,7 @@ const S = t.object({
   checkoutHideSocial: t.boolean().optional(),
   siteUrl: t.string().nullable(),
   manageSubscriptionsUrl: t.string().optional()
-}), w = t.object({
+}), C = t.object({
   domain: t.string(),
   dkim_private_key: t.string().optional(),
   dkim_public_key: t.string().optional(),
@@ -221,8 +221,8 @@ const S = t.object({
 });
 t.object({
   ...f.shape,
-  domains: t.array(w),
-  tenant: C,
+  domains: t.array(C),
+  tenant: w,
   connections: t.array(y)
 });
 const I = t.enum([
@@ -249,7 +249,7 @@ const I = t.enum([
   expires_at: t.string(),
   used_at: t.string().optional(),
   user_id: t.string().optional()
-}), z = t.object({
+}), J = t.object({
   ...j.shape,
   created_at: t.string()
 }), v = t.object({
@@ -258,7 +258,7 @@ const I = t.enum([
   dkim_public_key: t.string().optional(),
   email_api_key: t.string().optional(),
   email_service: t.string().optional()
-}), J = a.extend({
+}), Z = s.extend({
   ...v.shape,
   id: t.string()
 }), A = t.object({
@@ -272,8 +272,8 @@ const I = t.enum([
   hook_id: t.string().optional(),
   synchronous: t.boolean().default(!1),
   priority: t.number().optional()
-}), Z = A.extend({
-  ...a.shape,
+}), $ = A.extend({
+  ...s.shape,
   hook_id: t.string()
 }), O = t.object({
   alg: t.enum([
@@ -294,9 +294,9 @@ const I = t.enum([
   x5t: t.string().optional(),
   x5c: t.array(t.string()).optional(),
   use: t.enum(["sig", "enc"]).optional()
-}), $ = t.object({
-  keys: t.array(O)
 }), tt = t.object({
+  keys: t.array(O)
+}), et = t.object({
   issuer: t.string(),
   authorization_endpoint: t.string(),
   token_endpoint: t.string(),
@@ -334,7 +334,7 @@ const I = t.enum([
   created_at: t.string(),
   updated_at: t.string()
 });
-var U = /* @__PURE__ */ ((n) => (n.FAILED_SILENT_AUTH = "fsa", n.FAILED_SIGNUP = "fs", n.FAILED_LOGIN = "f", n.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", n.FAILED_CHANGE_PASSWORD = "fcp", n.FAILED_BY_CONNECTOR = "fc", n.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", n.FAILED_HOOK = "fh", n.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", n.SUCCESS_API_OPERATION = "sapi", n.SUCCESS_CHANGE_PASSWORD = "scp", n.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", n.SUCCESS_CHANGE_USERNAME = "scu", n.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", n.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", n.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", n.SUCCESS_LOGIN = "s", n.SUCCESS_LOGOUT = "slo", n.SUCCESS_SIGNUP = "ss", n.SUCCESS_SILENT_AUTH = "ssa", n.SUCCESS_VERIFICATION_EMAIL = "sv", n.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", n.CODE_LINK_SENT = "cls", n.BLOCKED_ACCOUNT_EMAIL = "limit_wc", n.BLOCKED_ACCOUNT_IP = "limit_sul", n.BLOCKED_IP_ADDRESS = "limit_mu", n))(U || {});
+var U = /* @__PURE__ */ ((e) => (e.FAILED_SILENT_AUTH = "fsa", e.FAILED_SIGNUP = "fs", e.FAILED_LOGIN = "f", e.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", e.FAILED_CHANGE_PASSWORD = "fcp", e.FAILED_BY_CONNECTOR = "fc", e.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", e.FAILED_HOOK = "fh", e.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", e.SUCCESS_API_OPERATION = "sapi", e.SUCCESS_CHANGE_PASSWORD = "scp", e.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", e.SUCCESS_CHANGE_USERNAME = "scu", e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", e.SUCCESS_LOGIN = "s", e.SUCCESS_LOGOUT = "slo", e.SUCCESS_SIGNUP = "ss", e.SUCCESS_SILENT_AUTH = "ssa", e.SUCCESS_VERIFICATION_EMAIL = "sv", e.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", e.CODE_LINK_SENT = "cls", e.BLOCKED_ACCOUNT_EMAIL = "limit_wc", e.BLOCKED_ACCOUNT_IP = "limit_sul", e.BLOCKED_IP_ADDRESS = "limit_mu", e))(U || {});
 const R = t.enum([
   "cls",
   // CODE_LINK_SENT
@@ -390,7 +390,7 @@ const R = t.enum([
   env: t.object({
     node: t.string().optional()
   }).optional()
-}), et = t.object({
+}), it = t.object({
   type: R,
   date: t.string(),
   description: t.string().optional(),
@@ -417,20 +417,37 @@ const R = t.enum([
   user_id: t.string(),
   password: t.string(),
   algorithm: t.enum(["bcrypt", "argon2id"]).default("argon2id")
-}), it = t.object({
+}), ot = t.object({
   ...T.shape,
   created_at: t.string(),
   updated_at: t.string()
 }), x = t.object({
-  session_id: t.string(),
+  initial_user_agent: t.string().describe("First user agent of the device from which this user logged in"),
+  initial_ip: t.string().describe("First IP address associated with this session"),
+  initial_asn: t.string().describe("First autonomous system number associated with this session"),
+  last_user_agent: t.string().describe("Last user agent of the device from which this user logged in"),
+  last_ip: t.string().describe("Last IP address from which this user logged in"),
+  last_asn: t.string().describe("Last autonomous system number from which this user logged in")
+}), P = t.object({
+  id: t.string(),
+  // TODO: Remove once data migrated
+  session_id: t.string().optional(),
   client_id: t.string(),
-  expires_at: t.string(),
+  revoked_at: t.string().optional(),
   used_at: t.string(),
-  deleted_at: t.string().optional(),
-  user_id: t.string()
-}), ot = t.object({
+  user_id: t.string().describe("The user ID associated with the session"),
+  expires_at: t.string().optional(),
+  idle_expires_at: t.string().optional(),
+  device: x.describe(
+    "Metadata related to the device used in the session"
+  ),
+  clients: t.array(t.string()).describe("List of client details for the session")
+}), st = t.object({
   created_at: t.string(),
-  ...x.shape
+  updated_at: t.string(),
+  authenticated_at: t.string(),
+  last_interaction_at: t.string(),
+  ...P.shape
 }), at = t.object({
   kid: t.string().openapi({ description: "The key id of the signing key" }),
   cert: t.string().openapi({ description: "The public certificate of the signing key" }),
@@ -451,8 +468,8 @@ const R = t.enum([
   revoked: t.boolean().optional().openapi({ description: "True if the key is revoked" }),
   revoked_at: t.string().optional().openapi({ description: "The date and time when the key was revoked" })
 });
-var P = /* @__PURE__ */ ((n) => (n.RefreshToken = "refresh_token", n.AuthorizationCode = "authorization_code", n.ClientCredential = "client_credentials", n.Passwordless = "passwordless", n.Password = "password", n))(P || {});
-const st = t.object({
+var F = /* @__PURE__ */ ((e) => (e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e))(F || {});
+const rt = t.object({
   access_token: t.string(),
   id_token: t.string().optional(),
   scope: t.string().optional(),
@@ -465,7 +482,7 @@ t.object({
   code: t.string(),
   state: t.string().optional()
 });
-const F = t.object({
+const H = t.object({
   button_border_radius: t.number(),
   button_border_weight: t.number(),
   buttons_style: t.enum(["pill"]),
@@ -475,7 +492,7 @@ const F = t.object({
   show_widget_shadow: t.boolean(),
   widget_border_weight: t.number(),
   widget_corner_radius: t.number()
-}), H = t.object({
+}), K = t.object({
   base_focus_color: t.string(),
   base_hover_color: t.string(),
   body_text: t.string(),
@@ -495,20 +512,20 @@ const F = t.object({
   success: t.string(),
   widget_background: t.string(),
   widget_border: t.string()
-}), e = t.object({
+}), n = t.object({
   bold: t.boolean(),
   size: t.number()
-}), K = t.object({
-  body_text: e,
-  buttons_text: e,
+}), G = t.object({
+  body_text: n,
+  buttons_text: n,
   font_url: t.string(),
-  input_labels: e,
-  links: e,
+  input_labels: n,
+  links: n,
   links_style: t.enum(["normal"]),
   reference_text_size: t.number(),
-  subtitle: e,
-  title: e
-}), G = t.object({
+  subtitle: n,
+  title: n
+}), L = t.object({
   background_color: t.string(),
   background_image_url: t.string(),
   page_layout: t.enum(["center"])
@@ -518,21 +535,21 @@ const F = t.object({
   logo_position: t.enum(["center"]),
   logo_url: t.string(),
   social_buttons_layout: t.enum(["bottom"])
-}), L = t.object({
-  borders: F,
-  colors: H,
+}), M = t.object({
+  borders: H,
+  colors: K,
   displayName: t.string(),
-  fonts: K,
-  page_background: G,
+  fonts: G,
+  page_background: L,
   widget: B
-}), rt = L.extend({
+}), lt = M.extend({
   themeId: t.string()
-}), lt = t.object({
+}), ct = t.object({
   universal_login_experience: t.enum(["new", "classic"]).default("new"),
   identifier_first: t.boolean().default(!0),
   password_first: t.boolean().default(!1),
   webauthn_platform_first_factor: t.boolean()
-}), ct = t.object({
+}), pt = t.object({
   name: t.string(),
   enabled: t.boolean().optional().default(!0),
   default_from_address: t.string().optional(),
@@ -562,7 +579,7 @@ const F = t.object({
     })
   ]),
   settings: t.object({}).optional()
-}), M = t.object({
+}), W = t.object({
   // The actual refresh token value (primary key).
   token: t.string(),
   // Link to the session record (foreign key).
@@ -576,16 +593,16 @@ const F = t.object({
   used_at: t.string().optional(),
   // If the token is revoked or deleted.
   revoked_at: t.string().optional()
-}), pt = t.object({
+}), dt = t.object({
   // When the refresh token record was created.
   created_at: t.string(),
   // Spread in the rest of the refresh token properties.
-  ...M.shape
+  ...W.shape
 });
-function gt(n) {
-  const [i, o] = n.split("|");
+function gt(e) {
+  const [i, o] = e.split("|");
   if (!i || !o)
-    throw new Error(`Invalid user_id: ${n}`);
+    throw new Error(`Invalid user_id: ${e}`);
   return { connection: i, id: o };
 }
 export {
@@ -593,56 +610,56 @@ export {
   l as AuthorizationResponseMode,
   r as AuthorizationResponseType,
   c as CodeChallengeMethod,
-  P as GrantType,
+  F as GrantType,
   U as LogTypes,
   b as applicationInsertSchema,
   f as applicationSchema,
-  Q as auth0UserResponseSchema,
+  V as auth0UserResponseSchema,
   S as authParamsSchema,
-  s as baseUserSchema,
-  F as bordersSchema,
-  Y as brandingSchema,
+  a as baseUserSchema,
+  H as bordersSchema,
+  X as brandingSchema,
   j as codeInsertSchema,
-  z as codeSchema,
+  J as codeSchema,
   I as codeTypeSchema,
-  H as colorsSchema,
+  K as colorsSchema,
   k as connectionInsertSchema,
   y as connectionSchema,
   v as domainInsertSchema,
-  J as domainSchema,
-  ct as emailProviderSchema,
-  e as fontDetailsSchema,
-  K as fontsSchema,
+  Z as domainSchema,
+  pt as emailProviderSchema,
+  n as fontDetailsSchema,
+  G as fontsSchema,
   A as hookInsertSchema,
-  Z as hookSchema,
-  g as identitySchema,
-  $ as jwksKeySchema,
+  $ as hookSchema,
+  d as identitySchema,
+  tt as jwksKeySchema,
   O as jwksSchema,
-  et as logSchema,
+  it as logSchema,
   N as loginInsertSchema,
   nt as loginSchema,
-  tt as openIDConfigurationSchema,
-  G as pageBackgroundSchema,
+  et as openIDConfigurationSchema,
+  L as pageBackgroundSchema,
   gt as parseUserId,
   T as passwordInsertSchema,
-  it as passwordSchema,
+  ot as passwordSchema,
   p as profileDataSchema,
-  lt as promptSettingSchema,
-  M as refreshTokenInsertSchema,
-  pt as refreshTokenSchema,
+  ct as promptSettingSchema,
+  W as refreshTokenInsertSchema,
+  dt as refreshTokenSchema,
   h as samlpAddon,
-  x as sessionInsertSchema,
-  ot as sessionSchema,
+  P as sessionInsertSchema,
+  st as sessionSchema,
   at as signingKeySchema,
   E as tenantInsertSchema,
-  C as tenantSchema,
-  L as themeInsertSchema,
-  rt as themeSchema,
-  st as tokenResponseSchema,
-  q as totalsSchema,
-  d as userInsertSchema,
-  V as userResponseSchema,
+  w as tenantSchema,
+  M as themeInsertSchema,
+  lt as themeSchema,
+  rt as tokenResponseSchema,
+  Q as totalsSchema,
+  g as userInsertSchema,
+  Y as userResponseSchema,
   _ as userSchema,
-  X as vendorSettingsSchema,
+  z as vendorSettingsSchema,
   B as widgetSchema
 };

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.41.0",
+  "version": "0.42.0",
   "files": [
     "dist"
   ],