@authhero/adapter-interfaces 0.69.0 → 0.70.0

package/dist/adapter-interfaces.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),dt=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),s=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),u=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),_=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:u.optional()}),c=t.z.object({email:t.z.string().optional().transform(e=>e&&e.toLowerCase()),username:t.z.string().optional(),phone_number:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),h=c.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),b=t.z.object({...h.shape,...s.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string().optional(),login_count:t.z.number().default(0),identities:t.z.array(_).optional()}),gt=b,mt=c.extend({login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),ut="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let _t=(e=21)=>{let i="",a=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=ut[a[e]&63];return i};const S=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),f=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:S.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>_t()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),E=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape}),o=t.z.object({x:t.z.number(),y:t.z.number()});var z=(e=>(e.RICH_TEXT="RICH_TEXT",e.NEXT_BUTTON="NEXT_BUTTON",e.BACK_BUTTON="BACK_BUTTON",e.SUBMIT_BUTTON="SUBMIT_BUTTON",e.DIVIDER="DIVIDER",e.TEXT="TEXT",e.EMAIL="EMAIL",e.PASSWORD="PASSWORD",e.NUMBER="NUMBER",e.PHONE="PHONE",e.DATE="DATE",e.CHECKBOX="CHECKBOX",e.RADIO="RADIO",e.SELECT="SELECT",e.HIDDEN="HIDDEN",e.LEGAL="LEGAL",e))(z||{}),p=(e=>(e.BLOCK="BLOCK",e.FIELD="FIELD",e))(p||{});const r=t.z.object({id:t.z.string(),category:t.z.nativeEnum(p),type:t.z.nativeEnum(z)}),I=r.extend({category:t.z.literal("BLOCK"),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}).passthrough()}),y=r.extend({category:t.z.literal("BLOCK"),type:t.z.union([t.z.literal("NEXT_BUTTON"),t.z.literal("BACK_BUTTON"),t.z.literal("SUBMIT_BUTTON")]),config:t.z.object({text:t.z.string()}).passthrough()}),j=r.extend({category:t.z.literal("FIELD"),type:t.z.literal("LEGAL"),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({text:t.z.string()}).passthrough()}),w=r.extend({category:t.z.literal("FIELD"),type:t.z.union([t.z.literal("TEXT"),t.z.literal("EMAIL"),t.z.literal("PASSWORD"),t.z.literal("NUMBER"),t.z.literal("PHONE"),t.z.literal("DATE"),t.z.literal("CHECKBOX"),t.z.literal("RADIO"),t.z.literal("SELECT"),t.z.literal("HIDDEN")]),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({label:t.z.string().optional(),placeholder:t.z.string().optional()}).passthrough()}),C=t.z.object({id:t.z.string(),category:t.z.string(),type:t.z.string()}).passthrough(),k=t.z.union([I,y,j,w,C]);var O=(e=>(e.STEP="STEP",e.FLOW="FLOW",e.CONDITION="CONDITION",e.ACTION="ACTION",e))(O||{});const T=t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({components:t.z.array(k),next_node:t.z.string()}).passthrough()}),A=t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({flow_id:t.z.string(),next_node:t.z.string()})}),v=t.z.object({id:t.z.string(),type:t.z.string(),coordinates:o}).passthrough(),N=t.z.union([T,A,v]),D=t.z.object({next_node:t.z.string(),coordinates:o}).passthrough(),U=t.z.object({resume_flow:t.z.boolean().optional(),coordinates:o}).passthrough(),R=t.z.object({id:t.z.string(),name:t.z.string(),languages:t.z.object({primary:t.z.string()}).passthrough(),nodes:t.z.array(N),start:D,ending:U,created_at:t.z.string(),updated_at:t.z.string(),links:t.z.object({sdkSrc:t.z.string().optional(),sdk_src:t.z.string().optional()}).passthrough()}).passthrough(),ht=R.omit({id:!0,created_at:!0,updated_at:!0});var d=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(d||{}),g=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(g||{}),m=(e=>(e.S256="S256",e.Plain="plain",e))(m||{});const x=t.z.object({client_id:t.z.string(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(d).optional(),response_mode:t.z.nativeEnum(g).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),organization:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(m).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional(),vendor_id:t.z.string().optional()}),bt=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),P=t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().optional(),token_endpoint:t.z.string().optional(),userinfo_endpoint:t.z.string().optional(),jwks_uri:t.z.string().optional(),discovery_url:t.z.string().optional(),issuer:t.z.string().optional(),provider:t.z.string().optional(),from:t.z.string().optional(),twilio_sid:t.z.string().optional(),twilio_token:t.z.string().optional()}),L=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:P.default({}),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),B=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(L.shape),H=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),F=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...H.shape,id:t.z.string()}),St=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()});t.z.object({...E.shape,tenant:F,connections:t.z.array(B)});const K=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),M=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:K,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:t.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:t.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:t.z.string().optional().openapi({description:"The redirect URI associated with the code"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),ft=t.z.object({...M.shape,created_at:t.z.string()}),G=t.z.object({domain:t.z.string(),custom_domain_id:t.z.string().optional(),type:t.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:t.z.enum(["txt"]).optional(),tls_policy:t.z.enum(["recommended"]).optional(),custom_client_ip_header:t.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:t.z.record(t.z.string().max(255)).optional()}),W=t.z.object({name:t.z.literal("txt"),record:t.z.string(),domain:t.z.string()}),X=t.z.object({...G.shape,custom_domain_id:t.z.string(),primary:t.z.boolean(),status:t.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:t.z.string().optional(),verification:t.z.object({methods:t.z.array(W)}).optional(),tls_policy:t.z.string().optional()}),Et=X.extend({tenant_id:t.z.string()}),It=t.z.object({id:t.z.string(),type:t.z.literal("submit"),label:t.z.string(),className:t.z.string().optional(),disabled:t.z.boolean().optional().default(!1),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0),customizations:t.z.record(t.z.string(),t.z.any()).optional()}),q=t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("LEGAL"),config:t.z.object({text:t.z.string(),html:t.z.boolean().optional()}),required:t.z.boolean().optional(),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("NEXT_BUTTON"),config:t.z.object({text:t.z.string().optional()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)})]),V=t.z.object({name:t.z.string().openapi({description:"The name of the form"}),messages:t.z.object({errors:t.z.record(t.z.string(),t.z.any()).optional(),custom:t.z.record(t.z.string(),t.z.any()).optional()}).optional(),languages:t.z.object({primary:t.z.string().optional(),default:t.z.string().optional()}).optional(),translations:t.z.record(t.z.string(),t.z.any()).optional(),nodes:t.z.array(t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({flow_id:t.z.string().max(30),next_node:t.z.string()})}),t.z.object({id:t.z.string(),type:t.z.literal("ROUTER"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150),config:t.z.object({rules:t.z.array(t.z.object({id:t.z.string(),alias:t.z.string().min(1).max(150).optional(),condition:t.z.any(),next_node:t.z.string()})),fallback:t.z.array(t.z.string())})}),t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({components:t.z.array(q),next_node:t.z.string()})})])).optional(),start:t.z.object({hidden_fields:t.z.array(t.z.object({key:t.z.string(),value:t.z.string()})).optional(),next_node:t.z.string().optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional()}).optional(),ending:t.z.object({redirection:t.z.object({delay:t.z.number().optional(),target:t.z.string().optional()}).optional(),after_submit:t.z.object({flow_id:t.z.string().optional()}).optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional(),resume_flow:t.z.boolean().optional()}).optional(),style:t.z.object({css:t.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches new JSON structure)"}),yt=t.z.object({...s.shape,...V.shape,id:t.z.string()}),Q=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),Y=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),l={enabled:t.z.boolean().default(!1),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional(),hook_id:t.z.string().optional()},jt=t.z.object({...l,trigger_id:Q,url:t.z.string()}),wt=t.z.object({...l,trigger_id:Y,form_id:t.z.string()}),Ct=t.z.union([jt,wt]),kt=t.z.object({...l,trigger_id:Q,...s.shape,hook_id:t.z.string(),url:t.z.string()}),Ot=t.z.object({...l,trigger_id:Y,...s.shape,hook_id:t.z.string(),form_id:t.z.string()}),Tt=t.z.union([kt,Ot]),J=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),At=t.z.object({keys:t.z.array(J)}),vt=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),Z=t.z.object({csrf_token:t.z.string(),auth0Client:t.z.string().optional(),authParams:x,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional(),session_id:t.z.string().optional(),authorization_url:t.z.string().optional(),login_completed:t.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Nt=t.z.object({...Z.shape,id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var $=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))($||{});const Dt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),tt=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),Ut=t.z.object({type:Dt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:tt.optional()}),et=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),Rt=t.z.object({...et.shape,created_at:t.z.string(),updated_at:t.z.string()}),nt=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),ot=t.z.object({id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string().optional(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),login_session_id:t.z.string(),idle_expires_at:t.z.string().optional(),device:nt.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),xt=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...ot.shape}),Pt=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var it=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",e))(it||{});const Lt=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const at=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),st=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),rt=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),lt=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),ct=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),zt=t.z.object({borders:at,colors:st,displayName:t.z.string(),fonts:rt,page_background:lt,widget:ct}),Bt=zt.extend({themeId:t.z.string()}),Ht=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),Ft=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),pt=t.z.object({id:t.z.string(),session_id:t.z.string(),user_id:t.z.string(),client_id:t.z.string(),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),last_exchanged_at:t.z.string().optional(),device:nt,resource_servers:t.z.array(t.z.object({audience:t.z.string(),scopes:t.z.string()})),rotating:t.z.boolean()}),Kt=t.z.object({created_at:t.z.string(),...pt.shape}),Mt=t.z.object({to:t.z.string(),message:t.z.string()}),Gt=t.z.object({name:t.z.string(),options:t.z.object({})});function Wt(e){const[i,a]=e.split("|");if(!i||!a)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:a}}exports.Auth0Client=tt;exports.AuthorizationResponseMode=g;exports.AuthorizationResponseType=d;exports.CodeChallengeMethod=m;exports.ComponentCategory=p;exports.ComponentType=z;exports.GrantType=it;exports.LogTypes=$;exports.NodeType=O;exports.applicationInsertSchema=f;exports.applicationSchema=E;exports.auth0FlowInsertSchema=ht;exports.auth0FlowSchema=R;exports.auth0UserResponseSchema=gt;exports.authParamsSchema=x;exports.baseUserSchema=c;exports.bordersSchema=at;exports.brandingSchema=bt;exports.buttonComponentSchema=y;exports.codeInsertSchema=M;exports.codeSchema=ft;exports.codeTypeSchema=K;exports.colorsSchema=st;exports.componentSchema=k;exports.connectionInsertSchema=L;exports.connectionOptionsSchema=P;exports.connectionSchema=B;exports.coordinatesSchema=o;exports.customDomainInsertSchema=G;exports.customDomainSchema=X;exports.customDomainWithTenantIdSchema=Et;exports.emailProviderSchema=Ft;exports.endingSchema=U;exports.fieldComponentSchema=w;exports.flowNodeSchema=A;exports.fontDetailsSchema=n;exports.fontsSchema=rt;exports.formControlSchema=It;exports.formInsertSchema=V;exports.formNodeComponentDefinition=q;exports.formSchema=yt;exports.genericComponentSchema=C;exports.genericNodeSchema=v;exports.hookInsertSchema=Ct;exports.hookSchema=Tt;exports.identitySchema=_;exports.jwksKeySchema=At;exports.jwksSchema=J;exports.legalComponentSchema=j;exports.logSchema=Ut;exports.loginSessionInsertSchema=Z;exports.loginSessionSchema=Nt;exports.nodeSchema=N;exports.openIDConfigurationSchema=vt;exports.pageBackgroundSchema=lt;exports.parseUserId=Wt;exports.passwordInsertSchema=et;exports.passwordSchema=Rt;exports.profileDataSchema=u;exports.promptSettingSchema=Ht;exports.refreshTokenInsertSchema=pt;exports.refreshTokenSchema=Kt;exports.richTextComponentSchema=I;exports.samlpAddon=S;exports.sessionInsertSchema=ot;exports.sessionSchema=xt;exports.signingKeySchema=Pt;exports.smsProviderSchema=Gt;exports.smsSendParamsSchema=Mt;exports.startSchema=D;exports.stepNodeSchema=T;exports.tenantInsertSchema=H;exports.tenantSchema=F;exports.themeInsertSchema=zt;exports.themeSchema=Bt;exports.tokenResponseSchema=Lt;exports.totalsSchema=dt;exports.userInsertSchema=h;exports.userResponseSchema=mt;exports.userSchema=b;exports.vendorSettingsSchema=St;exports.verificationMethodsSchema=W;exports.widgetSchema=ct;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),dt=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),s=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),u=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),h=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:u.optional()}),c=t.z.object({email:t.z.string().optional().transform(e=>e&&e.toLowerCase()),username:t.z.string().optional(),phone_number:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),_=c.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),b=t.z.object({..._.shape,...s.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string().optional(),login_count:t.z.number().default(0),identities:t.z.array(h).optional()}),gt=b,mt=c.extend({login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),ut="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let ht=(e=21)=>{let i="",a=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=ut[a[e]&63];return i};const S=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),f=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:S.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>ht()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),E=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape}),o=t.z.object({x:t.z.number(),y:t.z.number()});var z=(e=>(e.RICH_TEXT="RICH_TEXT",e.NEXT_BUTTON="NEXT_BUTTON",e.BACK_BUTTON="BACK_BUTTON",e.SUBMIT_BUTTON="SUBMIT_BUTTON",e.DIVIDER="DIVIDER",e.TEXT="TEXT",e.EMAIL="EMAIL",e.PASSWORD="PASSWORD",e.NUMBER="NUMBER",e.PHONE="PHONE",e.DATE="DATE",e.CHECKBOX="CHECKBOX",e.RADIO="RADIO",e.SELECT="SELECT",e.HIDDEN="HIDDEN",e.LEGAL="LEGAL",e))(z||{}),p=(e=>(e.BLOCK="BLOCK",e.FIELD="FIELD",e))(p||{});const r=t.z.object({id:t.z.string(),category:t.z.nativeEnum(p),type:t.z.nativeEnum(z)}),I=r.extend({category:t.z.literal("BLOCK"),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}).passthrough()}),y=r.extend({category:t.z.literal("BLOCK"),type:t.z.union([t.z.literal("NEXT_BUTTON"),t.z.literal("BACK_BUTTON"),t.z.literal("SUBMIT_BUTTON")]),config:t.z.object({text:t.z.string()}).passthrough()}),j=r.extend({category:t.z.literal("FIELD"),type:t.z.literal("LEGAL"),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({text:t.z.string()}).passthrough()}),w=r.extend({category:t.z.literal("FIELD"),type:t.z.union([t.z.literal("TEXT"),t.z.literal("EMAIL"),t.z.literal("PASSWORD"),t.z.literal("NUMBER"),t.z.literal("PHONE"),t.z.literal("DATE"),t.z.literal("CHECKBOX"),t.z.literal("RADIO"),t.z.literal("SELECT"),t.z.literal("HIDDEN")]),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({label:t.z.string().optional(),placeholder:t.z.string().optional()}).passthrough()}),C=t.z.object({id:t.z.string(),category:t.z.string(),type:t.z.string()}).passthrough(),k=t.z.union([I,y,j,w,C]);var O=(e=>(e.STEP="STEP",e.FLOW="FLOW",e.CONDITION="CONDITION",e.ACTION="ACTION",e))(O||{});const T=t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({components:t.z.array(k),next_node:t.z.string()}).passthrough()}),A=t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({flow_id:t.z.string(),next_node:t.z.string()})}),v=t.z.object({id:t.z.string(),type:t.z.string(),coordinates:o}).passthrough(),N=t.z.union([T,A,v]),D=t.z.object({next_node:t.z.string(),coordinates:o}).passthrough(),U=t.z.object({resume_flow:t.z.boolean().optional(),coordinates:o}).passthrough(),R=t.z.object({id:t.z.string(),name:t.z.string(),languages:t.z.object({primary:t.z.string()}).passthrough(),nodes:t.z.array(N),start:D,ending:U,created_at:t.z.string(),updated_at:t.z.string(),links:t.z.object({sdkSrc:t.z.string().optional(),sdk_src:t.z.string().optional()}).passthrough()}).passthrough(),_t=R.omit({id:!0,created_at:!0,updated_at:!0});var d=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(d||{}),g=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(g||{}),m=(e=>(e.S256="S256",e.Plain="plain",e))(m||{});const x=t.z.object({client_id:t.z.string(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(d).optional(),response_mode:t.z.nativeEnum(g).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),organization:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(m).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional(),vendor_id:t.z.string().optional()}),bt=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),P=t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().optional(),token_endpoint:t.z.string().optional(),userinfo_endpoint:t.z.string().optional(),jwks_uri:t.z.string().optional(),discovery_url:t.z.string().optional(),issuer:t.z.string().optional(),provider:t.z.string().optional(),from:t.z.string().optional(),twilio_sid:t.z.string().optional(),twilio_token:t.z.string().optional()}),L=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:P.default({}),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),B=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(L.shape),H=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),F=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...H.shape,id:t.z.string()}),St=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()});t.z.object({...E.shape,tenant:F,connections:t.z.array(B)});const K=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),M=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:K,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:t.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:t.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:t.z.string().optional().openapi({description:"The redirect URI associated with the code"}),nonce:t.z.string().optional().openapi({description:"The nonce value used for security in OIDC flows"}),state:t.z.string().optional().openapi({description:"The state parameter used for CSRF protection in OAuth flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),ft=t.z.object({...M.shape,created_at:t.z.string()}),G=t.z.object({domain:t.z.string(),custom_domain_id:t.z.string().optional(),type:t.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:t.z.enum(["txt"]).optional(),tls_policy:t.z.enum(["recommended"]).optional(),custom_client_ip_header:t.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:t.z.record(t.z.string().max(255)).optional()}),W=t.z.object({name:t.z.literal("txt"),record:t.z.string(),domain:t.z.string()}),X=t.z.object({...G.shape,custom_domain_id:t.z.string(),primary:t.z.boolean(),status:t.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:t.z.string().optional(),verification:t.z.object({methods:t.z.array(W)}).optional(),tls_policy:t.z.string().optional()}),Et=X.extend({tenant_id:t.z.string()}),It=t.z.object({id:t.z.string(),type:t.z.literal("submit"),label:t.z.string(),className:t.z.string().optional(),disabled:t.z.boolean().optional().default(!1),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0),customizations:t.z.record(t.z.string(),t.z.any()).optional()}),q=t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("LEGAL"),config:t.z.object({text:t.z.string(),html:t.z.boolean().optional()}),required:t.z.boolean().optional(),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("NEXT_BUTTON"),config:t.z.object({text:t.z.string().optional()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)})]),V=t.z.object({name:t.z.string().openapi({description:"The name of the form"}),messages:t.z.object({errors:t.z.record(t.z.string(),t.z.any()).optional(),custom:t.z.record(t.z.string(),t.z.any()).optional()}).optional(),languages:t.z.object({primary:t.z.string().optional(),default:t.z.string().optional()}).optional(),translations:t.z.record(t.z.string(),t.z.any()).optional(),nodes:t.z.array(t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({flow_id:t.z.string().max(30),next_node:t.z.string()})}),t.z.object({id:t.z.string(),type:t.z.literal("ROUTER"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150),config:t.z.object({rules:t.z.array(t.z.object({id:t.z.string(),alias:t.z.string().min(1).max(150).optional(),condition:t.z.any(),next_node:t.z.string()})),fallback:t.z.array(t.z.string())})}),t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({components:t.z.array(q),next_node:t.z.string()})})])).optional(),start:t.z.object({hidden_fields:t.z.array(t.z.object({key:t.z.string(),value:t.z.string()})).optional(),next_node:t.z.string().optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional()}).optional(),ending:t.z.object({redirection:t.z.object({delay:t.z.number().optional(),target:t.z.string().optional()}).optional(),after_submit:t.z.object({flow_id:t.z.string().optional()}).optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional(),resume_flow:t.z.boolean().optional()}).optional(),style:t.z.object({css:t.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches new JSON structure)"}),yt=t.z.object({...s.shape,...V.shape,id:t.z.string()}),Q=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),Y=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),l={enabled:t.z.boolean().default(!1),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional(),hook_id:t.z.string().optional()},jt=t.z.object({...l,trigger_id:Q,url:t.z.string()}),wt=t.z.object({...l,trigger_id:Y,form_id:t.z.string()}),Ct=t.z.union([jt,wt]),kt=t.z.object({...l,trigger_id:Q,...s.shape,hook_id:t.z.string(),url:t.z.string()}),Ot=t.z.object({...l,trigger_id:Y,...s.shape,hook_id:t.z.string(),form_id:t.z.string()}),Tt=t.z.union([kt,Ot]),J=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),At=t.z.object({keys:t.z.array(J)}),vt=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),Z=t.z.object({csrf_token:t.z.string(),auth0Client:t.z.string().optional(),authParams:x,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional(),session_id:t.z.string().optional(),authorization_url:t.z.string().optional(),login_completed:t.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Nt=t.z.object({...Z.shape,id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var $=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))($||{});const Dt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),tt=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),Ut=t.z.object({type:Dt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:tt.optional()}),et=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),Rt=t.z.object({...et.shape,created_at:t.z.string(),updated_at:t.z.string()}),nt=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),ot=t.z.object({id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string().optional(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),login_session_id:t.z.string(),idle_expires_at:t.z.string().optional(),device:nt.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),xt=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...ot.shape}),Pt=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var it=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",e))(it||{});const Lt=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const at=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),st=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),rt=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),lt=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),ct=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),zt=t.z.object({borders:at,colors:st,displayName:t.z.string(),fonts:rt,page_background:lt,widget:ct}),Bt=zt.extend({themeId:t.z.string()}),Ht=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),Ft=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),pt=t.z.object({id:t.z.string(),session_id:t.z.string(),user_id:t.z.string(),client_id:t.z.string(),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),last_exchanged_at:t.z.string().optional(),device:nt,resource_servers:t.z.array(t.z.object({audience:t.z.string(),scopes:t.z.string()})),rotating:t.z.boolean()}),Kt=t.z.object({created_at:t.z.string(),...pt.shape}),Mt=t.z.object({to:t.z.string(),message:t.z.string()}),Gt=t.z.object({name:t.z.string(),options:t.z.object({})});function Wt(e){const[i,a]=e.split("|");if(!i||!a)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:a}}exports.Auth0Client=tt;exports.AuthorizationResponseMode=g;exports.AuthorizationResponseType=d;exports.CodeChallengeMethod=m;exports.ComponentCategory=p;exports.ComponentType=z;exports.GrantType=it;exports.LogTypes=$;exports.NodeType=O;exports.applicationInsertSchema=f;exports.applicationSchema=E;exports.auth0FlowInsertSchema=_t;exports.auth0FlowSchema=R;exports.auth0UserResponseSchema=gt;exports.authParamsSchema=x;exports.baseUserSchema=c;exports.bordersSchema=at;exports.brandingSchema=bt;exports.buttonComponentSchema=y;exports.codeInsertSchema=M;exports.codeSchema=ft;exports.codeTypeSchema=K;exports.colorsSchema=st;exports.componentSchema=k;exports.connectionInsertSchema=L;exports.connectionOptionsSchema=P;exports.connectionSchema=B;exports.coordinatesSchema=o;exports.customDomainInsertSchema=G;exports.customDomainSchema=X;exports.customDomainWithTenantIdSchema=Et;exports.emailProviderSchema=Ft;exports.endingSchema=U;exports.fieldComponentSchema=w;exports.flowNodeSchema=A;exports.fontDetailsSchema=n;exports.fontsSchema=rt;exports.formControlSchema=It;exports.formInsertSchema=V;exports.formNodeComponentDefinition=q;exports.formSchema=yt;exports.genericComponentSchema=C;exports.genericNodeSchema=v;exports.hookInsertSchema=Ct;exports.hookSchema=Tt;exports.identitySchema=h;exports.jwksKeySchema=At;exports.jwksSchema=J;exports.legalComponentSchema=j;exports.logSchema=Ut;exports.loginSessionInsertSchema=Z;exports.loginSessionSchema=Nt;exports.nodeSchema=N;exports.openIDConfigurationSchema=vt;exports.pageBackgroundSchema=lt;exports.parseUserId=Wt;exports.passwordInsertSchema=et;exports.passwordSchema=Rt;exports.profileDataSchema=u;exports.promptSettingSchema=Ht;exports.refreshTokenInsertSchema=pt;exports.refreshTokenSchema=Kt;exports.richTextComponentSchema=I;exports.samlpAddon=S;exports.sessionInsertSchema=ot;exports.sessionSchema=xt;exports.signingKeySchema=Pt;exports.smsProviderSchema=Gt;exports.smsSendParamsSchema=Mt;exports.startSchema=D;exports.stepNodeSchema=T;exports.tenantInsertSchema=H;exports.tenantSchema=F;exports.themeInsertSchema=zt;exports.themeSchema=Bt;exports.tokenResponseSchema=Lt;exports.totalsSchema=dt;exports.userInsertSchema=_;exports.userResponseSchema=mt;exports.userSchema=b;exports.vendorSettingsSchema=St;exports.verificationMethodsSchema=W;exports.widgetSchema=ct;

package/dist/adapter-interfaces.d.ts

@@ -8593,6 +8593,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	nonce: z.ZodOptional<z.ZodString>;
+	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
@@ -8603,6 +8605,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8615,6 +8619,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8642,6 +8648,8 @@ export declare const codeSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	nonce: z.ZodOptional<z.ZodString>;
+	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
@@ -8653,6 +8661,8 @@ export declare const codeSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8666,6 +8676,8 @@ export declare const codeSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;

package/dist/adapter-interfaces.mjs

@@ -163,7 +163,7 @@ const r = t.object({
   config: t.object({
     text: t.string()
   }).passthrough()
-}), v = r.extend({
+}), T = r.extend({
   category: t.literal(
     "FIELD"
     /* FIELD */
@@ -177,7 +177,7 @@ const r = t.object({
   config: t.object({
     text: t.string()
   }).passthrough()
-}), T = r.extend({
+}), v = r.extend({
   category: t.literal(
     "FIELD"
     /* FIELD */
@@ -237,8 +237,8 @@ const r = t.object({
 }).passthrough(), U = t.union([
   O,
   A,
-  v,
   T,
+  v,
   N
 ]);
 var D = /* @__PURE__ */ ((e) => (e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e))(D || {});
@@ -433,6 +433,12 @@ const V = t.enum([
   redirect_uri: t.string().optional().openapi({
     description: "The redirect URI associated with the code"
   }),
+  nonce: t.string().optional().openapi({
+    description: "The nonce value used for security in OIDC flows"
+  }),
+  state: t.string().optional().openapi({
+    description: "The state parameter used for CSRF protection in OAuth flows"
+  }),
   expires_at: t.string(),
   used_at: t.string().optional(),
   user_id: t.string().optional()
@@ -583,7 +589,7 @@ const V = t.enum([
   style: t.object({ css: t.string().optional() }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches new JSON structure)"
-}), vt = t.object({
+}), Tt = t.object({
   ...s.shape,
   ...$.shape,
   id: t.string()
@@ -609,7 +615,7 @@ const V = t.enum([
   ...l,
   trigger_id: h,
   form_id: t.string()
-}), Tt = t.union([
+}), vt = t.union([
   tt,
   et
 ]), nt = t.object({
@@ -1003,22 +1009,22 @@ export {
   Ot as customDomainWithTenantIdSchema,
   Mt as emailProviderSchema,
   H as endingSchema,
-  T as fieldComponentSchema,
+  v as fieldComponentSchema,
   R as flowNodeSchema,
   n as fontDetailsSchema,
   _t as fontsSchema,
   At as formControlSchema,
   $ as formInsertSchema,
   Z as formNodeComponentDefinition,
-  vt as formSchema,
+  Tt as formSchema,
   N as genericComponentSchema,
   P as genericNodeSchema,
-  Tt as hookInsertSchema,
+  vt as hookInsertSchema,
   Nt as hookSchema,
   S as identitySchema,
   Ut as jwksKeySchema,
   it as jwksSchema,
-  v as legalComponentSchema,
+  T as legalComponentSchema,
   Rt as logSchema,
   at as loginSessionInsertSchema,
   xt as loginSessionSchema,

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.69.0",
+  "version": "0.70.0",
   "files": [
     "dist"
   ],