@authhero/adapter-interfaces 0.43.0 → 0.44.0

package/dist/adapter-interfaces.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),K=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),a=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),p=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),z=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:p.optional()}),s=t.z.object({email:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),d=s.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),g=t.z.object({...d.shape,...a.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string(),login_count:t.z.number(),identities:t.z.array(z).optional()}),G=g,L=s.extend({email:t.z.string(),login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),B="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let M=(e=21)=>{let i="",o=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=B[o[e]&63];return i};const _=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),u=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:_.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>M()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),m=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...u.shape});var r=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(r||{}),l=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(l||{}),c=(e=>(e.S256="S256",e.Plain="plain",e))(c||{});const h=t.z.object({client_id:t.z.string(),vendor_id:t.z.string().optional(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(r).optional(),response_mode:t.z.nativeEnum(l).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(c).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional()}),q=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),b=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().default("").optional(),token_endpoint:t.z.string().default("").optional(),userinfo_endpoint:t.z.string().default("").optional(),jwks_uri:t.z.string().default("").optional(),discovery_url:t.z.string().default("").optional(),issuer:t.z.string().default("").optional()}).default({}).optional(),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),S=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(b.shape),f=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),k=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape,id:t.z.string()}),W=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()}),Q=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()});t.z.object({...m.shape,domains:t.z.array(Q),tenant:k,connections:t.z.array(S)});const y=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),I=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:y,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),V=t.z.object({...I.shape,created_at:t.z.string()}),w=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()}),Y=a.extend({...w.shape,id:t.z.string()}),E=t.z.object({trigger_id:t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),enabled:t.z.boolean().default(!1),url:t.z.string(),hook_id:t.z.string().optional(),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional()}),X=E.extend({...a.shape,hook_id:t.z.string()}),C=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),J=t.z.object({keys:t.z.array(C)}),Z=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),j=t.z.object({auth0Client:t.z.string().optional(),authParams:h,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional()}).openapi({description:"This represents a login sesion"}),$=t.z.object({...j.shape,login_id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var v=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))(v||{});const tt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),A=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),et=t.z.object({type:tt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:A.optional()}),O=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),nt=t.z.object({...O.shape,created_at:t.z.string(),updated_at:t.z.string()}),it=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),U=t.z.object({id:t.z.string(),session_id:t.z.string().optional(),client_id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),device:it.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),ot=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...U.shape}),at=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var N=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e))(N||{});const st=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const R=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),T=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),D=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),P=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),x=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),F=t.z.object({borders:R,colors:T,displayName:t.z.string(),fonts:D,page_background:P,widget:x}),rt=F.extend({themeId:t.z.string()}),lt=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),ct=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),H=t.z.object({token:t.z.string(),session_id:t.z.string(),scope:t.z.string(),audience:t.z.string(),expires_at:t.z.string(),used_at:t.z.string().optional(),revoked_at:t.z.string().optional()}),pt=t.z.object({created_at:t.z.string(),...H.shape});function zt(e){const[i,o]=e.split("|");if(!i||!o)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:o}}exports.Auth0Client=A;exports.AuthorizationResponseMode=l;exports.AuthorizationResponseType=r;exports.CodeChallengeMethod=c;exports.GrantType=N;exports.LogTypes=v;exports.applicationInsertSchema=u;exports.applicationSchema=m;exports.auth0UserResponseSchema=G;exports.authParamsSchema=h;exports.baseUserSchema=s;exports.bordersSchema=R;exports.brandingSchema=q;exports.codeInsertSchema=I;exports.codeSchema=V;exports.codeTypeSchema=y;exports.colorsSchema=T;exports.connectionInsertSchema=b;exports.connectionSchema=S;exports.domainInsertSchema=w;exports.domainSchema=Y;exports.emailProviderSchema=ct;exports.fontDetailsSchema=n;exports.fontsSchema=D;exports.hookInsertSchema=E;exports.hookSchema=X;exports.identitySchema=z;exports.jwksKeySchema=J;exports.jwksSchema=C;exports.logSchema=et;exports.loginInsertSchema=j;exports.loginSchema=$;exports.openIDConfigurationSchema=Z;exports.pageBackgroundSchema=P;exports.parseUserId=zt;exports.passwordInsertSchema=O;exports.passwordSchema=nt;exports.profileDataSchema=p;exports.promptSettingSchema=lt;exports.refreshTokenInsertSchema=H;exports.refreshTokenSchema=pt;exports.samlpAddon=_;exports.sessionInsertSchema=U;exports.sessionSchema=ot;exports.signingKeySchema=at;exports.tenantInsertSchema=f;exports.tenantSchema=k;exports.themeInsertSchema=F;exports.themeSchema=rt;exports.tokenResponseSchema=st;exports.totalsSchema=K;exports.userInsertSchema=d;exports.userResponseSchema=L;exports.userSchema=g;exports.vendorSettingsSchema=W;exports.widgetSchema=x;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),G=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),a=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),p=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),z=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:p.optional()}),s=t.z.object({email:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),d=s.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),g=t.z.object({...d.shape,...a.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string(),login_count:t.z.number(),identities:t.z.array(z).optional()}),L=g,B=s.extend({email:t.z.string(),login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),M="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let q=(e=21)=>{let i="",o=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=M[o[e]&63];return i};const _=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),u=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:_.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>q()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),m=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...u.shape});var r=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(r||{}),l=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(l||{}),c=(e=>(e.S256="S256",e.Plain="plain",e))(c||{});const h=t.z.object({client_id:t.z.string(),vendor_id:t.z.string().optional(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(r).optional(),response_mode:t.z.nativeEnum(l).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(c).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional()}),W=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),b=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().default("").optional(),token_endpoint:t.z.string().default("").optional(),userinfo_endpoint:t.z.string().default("").optional(),jwks_uri:t.z.string().default("").optional(),discovery_url:t.z.string().default("").optional(),issuer:t.z.string().default("").optional()}).default({}).optional(),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),S=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(b.shape),f=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),k=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape,id:t.z.string()}),Q=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()}),V=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()});t.z.object({...m.shape,domains:t.z.array(V),tenant:k,connections:t.z.array(S)});const y=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),I=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:y,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),Y=t.z.object({...I.shape,created_at:t.z.string()}),w=t.z.object({domain:t.z.string(),dkim_private_key:t.z.string().optional(),dkim_public_key:t.z.string().optional(),email_api_key:t.z.string().optional(),email_service:t.z.string().optional()}),X=a.extend({...w.shape,id:t.z.string()}),E=t.z.object({trigger_id:t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),enabled:t.z.boolean().default(!1),url:t.z.string(),hook_id:t.z.string().optional(),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional()}),J=E.extend({...a.shape,hook_id:t.z.string()}),C=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),Z=t.z.object({keys:t.z.array(C)}),$=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),j=t.z.object({auth0Client:t.z.string().optional(),authParams:h,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional()}).openapi({description:"This represents a login sesion"}),tt=t.z.object({...j.shape,login_id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var v=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))(v||{});const et=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),A=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),nt=t.z.object({type:et,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:A.optional()}),O=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),it=t.z.object({...O.shape,created_at:t.z.string(),updated_at:t.z.string()}),U=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),N=t.z.object({id:t.z.string(),client_id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),device:U.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),ot=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...N.shape}),at=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var R=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e))(R||{});const st=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const T=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),D=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),x=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),P=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),F=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),H=t.z.object({borders:T,colors:D,displayName:t.z.string(),fonts:x,page_background:P,widget:F}),rt=H.extend({themeId:t.z.string()}),lt=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),ct=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),K=t.z.object({token:t.z.string(),session_id:t.z.string(),user_id:t.z.string(),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),last_exchanged_at:t.z.string().optional(),device:U.optional(),resource_servers:t.z.array(t.z.object({audience:t.z.string(),scopes:t.z.string()})),rotating:t.z.boolean()}),pt=t.z.object({created_at:t.z.string(),...K.shape});function zt(e){const[i,o]=e.split("|");if(!i||!o)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:o}}exports.Auth0Client=A;exports.AuthorizationResponseMode=l;exports.AuthorizationResponseType=r;exports.CodeChallengeMethod=c;exports.GrantType=R;exports.LogTypes=v;exports.applicationInsertSchema=u;exports.applicationSchema=m;exports.auth0UserResponseSchema=L;exports.authParamsSchema=h;exports.baseUserSchema=s;exports.bordersSchema=T;exports.brandingSchema=W;exports.codeInsertSchema=I;exports.codeSchema=Y;exports.codeTypeSchema=y;exports.colorsSchema=D;exports.connectionInsertSchema=b;exports.connectionSchema=S;exports.domainInsertSchema=w;exports.domainSchema=X;exports.emailProviderSchema=ct;exports.fontDetailsSchema=n;exports.fontsSchema=x;exports.hookInsertSchema=E;exports.hookSchema=J;exports.identitySchema=z;exports.jwksKeySchema=Z;exports.jwksSchema=C;exports.logSchema=nt;exports.loginInsertSchema=j;exports.loginSchema=tt;exports.openIDConfigurationSchema=$;exports.pageBackgroundSchema=P;exports.parseUserId=zt;exports.passwordInsertSchema=O;exports.passwordSchema=it;exports.profileDataSchema=p;exports.promptSettingSchema=lt;exports.refreshTokenInsertSchema=K;exports.refreshTokenSchema=pt;exports.samlpAddon=_;exports.sessionInsertSchema=N;exports.sessionSchema=ot;exports.signingKeySchema=at;exports.tenantInsertSchema=f;exports.tenantSchema=k;exports.themeInsertSchema=H;exports.themeSchema=rt;exports.tokenResponseSchema=st;exports.totalsSchema=G;exports.userInsertSchema=d;exports.userResponseSchema=B;exports.userSchema=g;exports.vendorSettingsSchema=Q;exports.widgetSchema=F;

package/dist/adapter-interfaces.d.ts

@@ -2698,7 +2698,6 @@ export declare const passwordSchema: z.ZodObject<{
 export type Password = z.infer<typeof passwordSchema>;
 export declare const sessionInsertSchema: z.ZodObject<{
 	id: z.ZodString;
-	session_id: z.ZodOptional<z.ZodString>;
 	client_id: z.ZodString;
 	revoked_at: z.ZodOptional<z.ZodString>;
 	used_at: z.ZodString;
@@ -2743,7 +2742,6 @@ export declare const sessionInsertSchema: z.ZodObject<{
 	};
 	clients: string[];
 	expires_at?: string | undefined;
-	session_id?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 }, {
@@ -2761,14 +2759,12 @@ export declare const sessionInsertSchema: z.ZodObject<{
 	};
 	clients: string[];
 	expires_at?: string | undefined;
-	session_id?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 }>;
 export type SessionInsert = z.infer<typeof sessionInsertSchema>;
 export declare const sessionSchema: z.ZodObject<{
 	id: z.ZodString;
-	session_id: z.ZodOptional<z.ZodString>;
 	client_id: z.ZodString;
 	revoked_at: z.ZodOptional<z.ZodString>;
 	used_at: z.ZodString;
@@ -2821,7 +2817,6 @@ export declare const sessionSchema: z.ZodObject<{
 	authenticated_at: string;
 	last_interaction_at: string;
 	expires_at?: string | undefined;
-	session_id?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 }, {
@@ -2843,7 +2838,6 @@ export declare const sessionSchema: z.ZodObject<{
 	authenticated_at: string;
 	last_interaction_at: string;
 	expires_at?: string | undefined;
-	session_id?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 }>;
@@ -4313,56 +4307,168 @@ export type EmailProvider = z.infer<typeof emailProviderSchema>;
 export declare const refreshTokenInsertSchema: z.ZodObject<{
 	token: z.ZodString;
 	session_id: z.ZodString;
-	scope: z.ZodString;
-	audience: z.ZodString;
-	expires_at: z.ZodString;
-	used_at: z.ZodOptional<z.ZodString>;
-	revoked_at: z.ZodOptional<z.ZodString>;
+	user_id: z.ZodString;
+	expires_at: z.ZodOptional<z.ZodString>;
+	idle_expires_at: z.ZodOptional<z.ZodString>;
+	last_exchanged_at: z.ZodOptional<z.ZodString>;
+	device: z.ZodOptional<z.ZodObject<{
+		initial_user_agent: z.ZodString;
+		initial_ip: z.ZodString;
+		initial_asn: z.ZodString;
+		last_user_agent: z.ZodString;
+		last_ip: z.ZodString;
+		last_asn: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}>>;
+	resource_servers: z.ZodArray<z.ZodObject<{
+		audience: z.ZodString;
+		scopes: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		audience: string;
+		scopes: string;
+	}, {
+		audience: string;
+		scopes: string;
+	}>, "many">;
+	rotating: z.ZodBoolean;
 }, "strip", z.ZodTypeAny, {
-	audience: string;
+	user_id: string;
 	token: string;
-	scope: string;
-	expires_at: string;
 	session_id: string;
-	used_at?: string | undefined;
-	revoked_at?: string | undefined;
+	resource_servers: {
+		audience: string;
+		scopes: string;
+	}[];
+	rotating: boolean;
+	expires_at?: string | undefined;
+	idle_expires_at?: string | undefined;
+	device?: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	} | undefined;
+	last_exchanged_at?: string | undefined;
 }, {
-	audience: string;
+	user_id: string;
 	token: string;
-	scope: string;
-	expires_at: string;
 	session_id: string;
-	used_at?: string | undefined;
-	revoked_at?: string | undefined;
+	resource_servers: {
+		audience: string;
+		scopes: string;
+	}[];
+	rotating: boolean;
+	expires_at?: string | undefined;
+	idle_expires_at?: string | undefined;
+	device?: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	} | undefined;
+	last_exchanged_at?: string | undefined;
 }>;
 export type RefreshTokenInsert = z.infer<typeof refreshTokenInsertSchema>;
 export declare const refreshTokenSchema: z.ZodObject<{
 	token: z.ZodString;
 	session_id: z.ZodString;
-	scope: z.ZodString;
-	audience: z.ZodString;
-	expires_at: z.ZodString;
-	used_at: z.ZodOptional<z.ZodString>;
-	revoked_at: z.ZodOptional<z.ZodString>;
+	user_id: z.ZodString;
+	expires_at: z.ZodOptional<z.ZodString>;
+	idle_expires_at: z.ZodOptional<z.ZodString>;
+	last_exchanged_at: z.ZodOptional<z.ZodString>;
+	device: z.ZodOptional<z.ZodObject<{
+		initial_user_agent: z.ZodString;
+		initial_ip: z.ZodString;
+		initial_asn: z.ZodString;
+		last_user_agent: z.ZodString;
+		last_ip: z.ZodString;
+		last_asn: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}, {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	}>>;
+	resource_servers: z.ZodArray<z.ZodObject<{
+		audience: z.ZodString;
+		scopes: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		audience: string;
+		scopes: string;
+	}, {
+		audience: string;
+		scopes: string;
+	}>, "many">;
+	rotating: z.ZodBoolean;
 	created_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
 	created_at: string;
-	audience: string;
+	user_id: string;
 	token: string;
-	scope: string;
-	expires_at: string;
 	session_id: string;
-	used_at?: string | undefined;
-	revoked_at?: string | undefined;
+	resource_servers: {
+		audience: string;
+		scopes: string;
+	}[];
+	rotating: boolean;
+	expires_at?: string | undefined;
+	idle_expires_at?: string | undefined;
+	device?: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	} | undefined;
+	last_exchanged_at?: string | undefined;
 }, {
 	created_at: string;
-	audience: string;
+	user_id: string;
 	token: string;
-	scope: string;
-	expires_at: string;
 	session_id: string;
-	used_at?: string | undefined;
-	revoked_at?: string | undefined;
+	resource_servers: {
+		audience: string;
+		scopes: string;
+	}[];
+	rotating: boolean;
+	expires_at?: string | undefined;
+	idle_expires_at?: string | undefined;
+	device?: {
+		last_ip: string;
+		initial_user_agent: string;
+		initial_ip: string;
+		initial_asn: string;
+		last_user_agent: string;
+		last_asn: string;
+	} | undefined;
+	last_exchanged_at?: string | undefined;
 }>;
 export type RefreshToken = z.infer<typeof refreshTokenSchema>;
 export declare function parseUserId(user_id: string): {

package/dist/adapter-interfaces.mjs

@@ -6,7 +6,7 @@ const Q = t.object({
 }), s = t.object({
   created_at: t.string(),
   updated_at: t.string()
-}), p = t.object({
+}), d = t.object({
   email: t.string().optional(),
   email_verified: t.boolean().optional(),
   name: t.string().optional(),
@@ -15,7 +15,7 @@ const Q = t.object({
   phone_number: t.string().optional(),
   phone_verified: t.boolean().optional(),
   family_name: t.string().optional()
-}).catchall(t.any()), d = t.object({
+}).catchall(t.any()), g = t.object({
   connection: t.string(),
   user_id: t.string(),
   provider: t.string(),
@@ -23,7 +23,7 @@ const Q = t.object({
   access_token: t.string().optional(),
   access_token_secret: t.string().optional(),
   refresh_token: t.string().optional(),
-  profileData: p.optional()
+  profileData: d.optional()
 }), a = t.object({
   email: t.string().optional(),
   username: t.string().optional(),
@@ -38,7 +38,7 @@ const Q = t.object({
   user_id: t.string().optional(),
   app_metadata: t.any().default({}).optional(),
   user_metadata: t.any().default({}).optional()
-}), g = a.extend({
+}), _ = a.extend({
   email_verified: t.boolean().default(!1),
   verify_email: t.boolean().optional(),
   last_ip: t.string().optional(),
@@ -47,30 +47,30 @@ const Q = t.object({
   provider: t.string().default("email"),
   connection: t.string().default("email"),
   is_social: t.boolean().optional()
-}), _ = t.object({
-  ...g.shape,
+}), u = t.object({
+  ..._.shape,
   ...s.shape,
   user_id: t.string(),
   is_social: t.boolean(),
   // TODO: this not might be correct if you use the username
   email: t.string(),
   login_count: t.number(),
-  identities: t.array(d).optional()
-}), V = _, Y = a.extend({
+  identities: t.array(g).optional()
+}), V = u, Y = a.extend({
   email: t.string(),
   login_count: t.number(),
   multifactor: t.array(t.string()).optional(),
   last_ip: t.string().optional(),
   last_login: t.string().optional(),
   user_id: t.string()
-}).catchall(t.any()), u = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let m = (e = 21) => {
+}).catchall(t.any()), m = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+let h = (e = 21) => {
   let i = "", o = crypto.getRandomValues(new Uint8Array(e));
   for (; e--; )
-    i += u[o[e] & 63];
+    i += m[o[e] & 63];
   return i;
 };
-const h = t.object({
+const b = t.object({
   audience: t.string().optional(),
   recipient: t.string().optional(),
   createUpnClaim: t.boolean().optional(),
@@ -87,7 +87,7 @@ const h = t.object({
   nameIdentifierProbes: t.array(t.string()).optional(),
   authnContextClassRef: t.string().optional(),
   mappings: t.record(t.string()).optional()
-}), b = t.object({
+}), f = t.object({
   id: t.string(),
   name: t.string(),
   callbacks: t.array(t.string()).default([]).optional().openapi({
@@ -106,24 +106,24 @@ const h = t.object({
     description: "Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"
   }),
   addons: t.object({
-    samlp: h.optional()
+    samlp: b.optional()
   }).default({}).optional().openapi({
     description: "Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."
   }),
   email_validation: t.enum(["enabled", "disabled", "enforced"]).default("enforced").optional().openapi({
     description: "Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"
   }),
-  client_secret: t.string().default(() => m()).optional(),
+  client_secret: t.string().default(() => h()).optional(),
   disable_sign_ups: t.boolean().optional().default(!1).openapi({
     description: "Prevents users from signing up using the hosted login page. This is not available in auth0"
   })
-}), f = t.object({
+}), S = t.object({
   created_at: t.string().transform((e) => e === null ? "" : e),
   updated_at: t.string().transform((e) => e === null ? "" : e),
-  ...b.shape
+  ...f.shape
 });
 var r = /* @__PURE__ */ ((e) => (e.TOKEN = "token", e.TOKEN_ID_TOKEN = "token id_token", e.CODE = "code", e))(r || {}), l = /* @__PURE__ */ ((e) => (e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e))(l || {}), c = /* @__PURE__ */ ((e) => (e.S256 = "S256", e.Plain = "plain", e))(c || {});
-const S = t.object({
+const k = t.object({
   client_id: t.string(),
   vendor_id: t.string().optional(),
   act_as: t.string().optional(),
@@ -154,7 +154,7 @@ const S = t.object({
   font: t.object({
     url: t.string()
   }).optional()
-}), k = t.object({
+}), y = t.object({
   id: t.string().optional(),
   name: t.string(),
   strategy: t.string(),
@@ -176,11 +176,11 @@ const S = t.object({
   enabled_clients: t.array(t.string()).default([]).optional(),
   response_type: t.custom().optional(),
   response_mode: t.custom().optional()
-}), y = t.object({
+}), E = t.object({
   id: t.string(),
   created_at: t.string().transform((e) => e === null ? "" : e),
   updated_at: t.string().transform((e) => e === null ? "" : e)
-}).extend(k.shape), E = t.object({
+}).extend(y.shape), w = t.object({
   name: t.string(),
   audience: t.string(),
   sender_email: t.string().email(),
@@ -191,10 +191,10 @@ const S = t.object({
   secondary_color: t.string().optional(),
   language: t.string().optional(),
   id: t.string().optional()
-}), w = t.object({
+}), C = t.object({
   created_at: t.string().transform((e) => e === null ? "" : e),
   updated_at: t.string().transform((e) => e === null ? "" : e),
-  ...E.shape,
+  ...w.shape,
   id: t.string()
 }), z = t.object({
   logoUrl: t.string(),
@@ -213,7 +213,7 @@ const S = t.object({
   checkoutHideSocial: t.boolean().optional(),
   siteUrl: t.string().nullable(),
   manageSubscriptionsUrl: t.string().optional()
-}), C = t.object({
+}), I = t.object({
   domain: t.string(),
   dkim_private_key: t.string().optional(),
   dkim_public_key: t.string().optional(),
@@ -221,19 +221,19 @@ const S = t.object({
   email_service: t.string().optional()
 });
 t.object({
-  ...f.shape,
-  domains: t.array(C),
-  tenant: w,
-  connections: t.array(y)
+  ...S.shape,
+  domains: t.array(I),
+  tenant: C,
+  connections: t.array(E)
 });
-const I = t.enum([
+const j = t.enum([
   "password_reset",
   "email_verification",
   "otp",
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), j = t.object({
+]), v = t.object({
   code_id: t.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -243,7 +243,7 @@ const I = t.enum([
   connection_id: t.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: I,
+  code_type: j,
   code_verifier: t.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -251,18 +251,18 @@ const I = t.enum([
   used_at: t.string().optional(),
   user_id: t.string().optional()
 }), J = t.object({
-  ...j.shape,
+  ...v.shape,
   created_at: t.string()
-}), v = t.object({
+}), A = t.object({
   domain: t.string(),
   dkim_private_key: t.string().optional(),
   dkim_public_key: t.string().optional(),
   email_api_key: t.string().optional(),
   email_service: t.string().optional()
 }), Z = s.extend({
-  ...v.shape,
+  ...A.shape,
   id: t.string()
-}), A = t.object({
+}), O = t.object({
   trigger_id: t.enum([
     "pre-user-signup",
     "post-user-registration",
@@ -273,10 +273,10 @@ const I = t.enum([
   hook_id: t.string().optional(),
   synchronous: t.boolean().default(!1),
   priority: t.number().optional()
-}), $ = A.extend({
+}), $ = O.extend({
   ...s.shape,
   hook_id: t.string()
-}), O = t.object({
+}), N = t.object({
   alg: t.enum([
     "RS256",
     "RS384",
@@ -296,7 +296,7 @@ const I = t.enum([
   x5c: t.array(t.string()).optional(),
   use: t.enum(["sig", "enc"]).optional()
 }), tt = t.object({
-  keys: t.array(O)
+  keys: t.array(N)
 }), et = t.object({
   issuer: t.string(),
   authorization_endpoint: t.string(),
@@ -318,9 +318,9 @@ const I = t.enum([
   request_uri_parameter_supported: t.boolean(),
   request_parameter_supported: t.boolean(),
   token_endpoint_auth_signing_alg_values_supported: t.array(t.string())
-}), N = t.object({
+}), U = t.object({
   auth0Client: t.string().optional(),
-  authParams: S,
+  authParams: k,
   expires_at: t.string(),
   deleted_at: t.string().optional(),
   ip: t.string().optional(),
@@ -328,15 +328,15 @@ const I = t.enum([
 }).openapi({
   description: "This represents a login sesion"
 }), nt = t.object({
-  ...N.shape,
+  ...U.shape,
   login_id: t.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: t.string(),
   updated_at: t.string()
 });
-var U = /* @__PURE__ */ ((e) => (e.FAILED_SILENT_AUTH = "fsa", e.FAILED_SIGNUP = "fs", e.FAILED_LOGIN = "f", e.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", e.FAILED_CHANGE_PASSWORD = "fcp", e.FAILED_BY_CONNECTOR = "fc", e.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", e.FAILED_HOOK = "fh", e.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", e.SUCCESS_API_OPERATION = "sapi", e.SUCCESS_CHANGE_PASSWORD = "scp", e.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", e.SUCCESS_CHANGE_USERNAME = "scu", e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", e.SUCCESS_LOGIN = "s", e.SUCCESS_LOGOUT = "slo", e.SUCCESS_SIGNUP = "ss", e.SUCCESS_SILENT_AUTH = "ssa", e.SUCCESS_VERIFICATION_EMAIL = "sv", e.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", e.CODE_LINK_SENT = "cls", e.BLOCKED_ACCOUNT_EMAIL = "limit_wc", e.BLOCKED_ACCOUNT_IP = "limit_sul", e.BLOCKED_IP_ADDRESS = "limit_mu", e))(U || {});
-const R = t.enum([
+var R = /* @__PURE__ */ ((e) => (e.FAILED_SILENT_AUTH = "fsa", e.FAILED_SIGNUP = "fs", e.FAILED_LOGIN = "f", e.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", e.FAILED_CHANGE_PASSWORD = "fcp", e.FAILED_BY_CONNECTOR = "fc", e.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", e.FAILED_HOOK = "fh", e.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", e.SUCCESS_API_OPERATION = "sapi", e.SUCCESS_CHANGE_PASSWORD = "scp", e.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", e.SUCCESS_CHANGE_USERNAME = "scu", e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", e.SUCCESS_LOGIN = "s", e.SUCCESS_LOGOUT = "slo", e.SUCCESS_SIGNUP = "ss", e.SUCCESS_SILENT_AUTH = "ssa", e.SUCCESS_VERIFICATION_EMAIL = "sv", e.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", e.CODE_LINK_SENT = "cls", e.BLOCKED_ACCOUNT_EMAIL = "limit_wc", e.BLOCKED_ACCOUNT_IP = "limit_sul", e.BLOCKED_IP_ADDRESS = "limit_mu", e))(R || {});
+const D = t.enum([
   "cls",
   // CODE_LINK_SENT
   "fsa",
@@ -385,14 +385,14 @@ const R = t.enum([
   // SUCCESS_VERIFICATION_EMAIL
   "svr"
   // SUCCESS_VERIFICATION_EMAIL_REQUEST
-]), D = t.object({
+]), T = t.object({
   name: t.string(),
   version: t.string(),
   env: t.object({
     node: t.string().optional()
   }).optional()
 }), it = t.object({
-  type: R,
+  type: D,
   date: t.string(),
   description: t.string().optional(),
   log_id: t.string().optional(),
@@ -413,16 +413,16 @@ const R = t.enum([
   strategy: t.string().optional(),
   strategy_type: t.string().optional(),
   hostname: t.string().optional(),
-  auth0_client: D.optional()
-}), T = t.object({
+  auth0_client: T.optional()
+}), x = t.object({
   user_id: t.string(),
   password: t.string(),
   algorithm: t.enum(["bcrypt", "argon2id"]).default("argon2id")
 }), ot = t.object({
-  ...T.shape,
+  ...x.shape,
   created_at: t.string(),
   updated_at: t.string()
-}), x = t.object({
+}), p = t.object({
   initial_user_agent: t.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: t.string().describe("First IP address associated with this session"),
   initial_asn: t.string().describe("First autonomous system number associated with this session"),
@@ -431,15 +431,13 @@ const R = t.enum([
   last_asn: t.string().describe("Last autonomous system number from which this user logged in")
 }), P = t.object({
   id: t.string(),
-  // TODO: Remove once data migrated
-  session_id: t.string().optional(),
   client_id: t.string(),
   revoked_at: t.string().optional(),
   used_at: t.string(),
   user_id: t.string().describe("The user ID associated with the session"),
   expires_at: t.string().optional(),
   idle_expires_at: t.string().optional(),
-  device: x.describe(
+  device: p.describe(
     "Metadata related to the device used in the session"
   ),
   clients: t.array(t.string()).describe("List of client details for the session")
@@ -583,17 +581,23 @@ const H = t.object({
 }), W = t.object({
   // The actual refresh token value (primary key).
   token: t.string(),
-  // Link to the session record (foreign key).
+  // Link to the session record
   session_id: t.string(),
-  // The scope and audience that was requested when the token was created.
-  scope: t.string(),
-  audience: t.string(),
+  // Link to user (foreign key)
+  user_id: t.string(),
   // When the refresh token expires.
-  expires_at: t.string(),
+  expires_at: t.string().optional(),
+  idle_expires_at: t.string().optional(),
   // When the token was last used.
-  used_at: t.string().optional(),
-  // If the token is revoked or deleted.
-  revoked_at: t.string().optional()
+  last_exchanged_at: t.string().optional(),
+  device: p.optional(),
+  resource_servers: t.array(
+    t.object({
+      audience: t.string(),
+      scopes: t.string()
+    })
+  ),
+  rotating: t.boolean()
 }), dt = t.object({
   // When the refresh token record was created.
   created_at: t.string(),
@@ -607,60 +611,60 @@ function gt(e) {
   return { connection: i, id: o };
 }
 export {
-  D as Auth0Client,
+  T as Auth0Client,
   l as AuthorizationResponseMode,
   r as AuthorizationResponseType,
   c as CodeChallengeMethod,
   F as GrantType,
-  U as LogTypes,
-  b as applicationInsertSchema,
-  f as applicationSchema,
+  R as LogTypes,
+  f as applicationInsertSchema,
+  S as applicationSchema,
   V as auth0UserResponseSchema,
-  S as authParamsSchema,
+  k as authParamsSchema,
   a as baseUserSchema,
   H as bordersSchema,
   X as brandingSchema,
-  j as codeInsertSchema,
+  v as codeInsertSchema,
   J as codeSchema,
-  I as codeTypeSchema,
+  j as codeTypeSchema,
   K as colorsSchema,
-  k as connectionInsertSchema,
-  y as connectionSchema,
-  v as domainInsertSchema,
+  y as connectionInsertSchema,
+  E as connectionSchema,
+  A as domainInsertSchema,
   Z as domainSchema,
   pt as emailProviderSchema,
   n as fontDetailsSchema,
   G as fontsSchema,
-  A as hookInsertSchema,
+  O as hookInsertSchema,
   $ as hookSchema,
-  d as identitySchema,
+  g as identitySchema,
   tt as jwksKeySchema,
-  O as jwksSchema,
+  N as jwksSchema,
   it as logSchema,
-  N as loginInsertSchema,
+  U as loginInsertSchema,
   nt as loginSchema,
   et as openIDConfigurationSchema,
   L as pageBackgroundSchema,
   gt as parseUserId,
-  T as passwordInsertSchema,
+  x as passwordInsertSchema,
   ot as passwordSchema,
-  p as profileDataSchema,
+  d as profileDataSchema,
   ct as promptSettingSchema,
   W as refreshTokenInsertSchema,
   dt as refreshTokenSchema,
-  h as samlpAddon,
+  b as samlpAddon,
   P as sessionInsertSchema,
   st as sessionSchema,
   at as signingKeySchema,
-  E as tenantInsertSchema,
-  w as tenantSchema,
+  w as tenantInsertSchema,
+  C as tenantSchema,
   M as themeInsertSchema,
   lt as themeSchema,
   rt as tokenResponseSchema,
   Q as totalsSchema,
-  g as userInsertSchema,
+  _ as userInsertSchema,
   Y as userResponseSchema,
-  _ as userSchema,
+  u as userSchema,
   z as vendorSettingsSchema,
   B as widgetSchema
 };

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.43.0",
+  "version": "0.44.0",
   "files": [
     "dist"
   ],