@authhero/adapter-interfaces 0.69.0 → 0.71.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- "use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),dt=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),s=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),u=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),_=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:u.optional()}),c=t.z.object({email:t.z.string().optional().transform(e=>e&&e.toLowerCase()),username:t.z.string().optional(),phone_number:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),h=c.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),b=t.z.object({...h.shape,...s.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string().optional(),login_count:t.z.number().default(0),identities:t.z.array(_).optional()}),gt=b,mt=c.extend({login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),ut="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let _t=(e=21)=>{let i="",a=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=ut[a[e]&63];return i};const S=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),f=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:S.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>_t()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),E=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape}),o=t.z.object({x:t.z.number(),y:t.z.number()});var z=(e=>(e.RICH_TEXT="RICH_TEXT",e.NEXT_BUTTON="NEXT_BUTTON",e.BACK_BUTTON="BACK_BUTTON",e.SUBMIT_BUTTON="SUBMIT_BUTTON",e.DIVIDER="DIVIDER",e.TEXT="TEXT",e.EMAIL="EMAIL",e.PASSWORD="PASSWORD",e.NUMBER="NUMBER",e.PHONE="PHONE",e.DATE="DATE",e.CHECKBOX="CHECKBOX",e.RADIO="RADIO",e.SELECT="SELECT",e.HIDDEN="HIDDEN",e.LEGAL="LEGAL",e))(z||{}),p=(e=>(e.BLOCK="BLOCK",e.FIELD="FIELD",e))(p||{});const r=t.z.object({id:t.z.string(),category:t.z.nativeEnum(p),type:t.z.nativeEnum(z)}),I=r.extend({category:t.z.literal("BLOCK"),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}).passthrough()}),y=r.extend({category:t.z.literal("BLOCK"),type:t.z.union([t.z.literal("NEXT_BUTTON"),t.z.literal("BACK_BUTTON"),t.z.literal("SUBMIT_BUTTON")]),config:t.z.object({text:t.z.string()}).passthrough()}),j=r.extend({category:t.z.literal("FIELD"),type:t.z.literal("LEGAL"),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({text:t.z.string()}).passthrough()}),w=r.extend({category:t.z.literal("FIELD"),type:t.z.union([t.z.literal("TEXT"),t.z.literal("EMAIL"),t.z.literal("PASSWORD"),t.z.literal("NUMBER"),t.z.literal("PHONE"),t.z.literal("DATE"),t.z.literal("CHECKBOX"),t.z.literal("RADIO"),t.z.literal("SELECT"),t.z.literal("HIDDEN")]),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({label:t.z.string().optional(),placeholder:t.z.string().optional()}).passthrough()}),C=t.z.object({id:t.z.string(),category:t.z.string(),type:t.z.string()}).passthrough(),k=t.z.union([I,y,j,w,C]);var O=(e=>(e.STEP="STEP",e.FLOW="FLOW",e.CONDITION="CONDITION",e.ACTION="ACTION",e))(O||{});const T=t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({components:t.z.array(k),next_node:t.z.string()}).passthrough()}),A=t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({flow_id:t.z.string(),next_node:t.z.string()})}),v=t.z.object({id:t.z.string(),type:t.z.string(),coordinates:o}).passthrough(),N=t.z.union([T,A,v]),D=t.z.object({next_node:t.z.string(),coordinates:o}).passthrough(),U=t.z.object({resume_flow:t.z.boolean().optional(),coordinates:o}).passthrough(),R=t.z.object({id:t.z.string(),name:t.z.string(),languages:t.z.object({primary:t.z.string()}).passthrough(),nodes:t.z.array(N),start:D,ending:U,created_at:t.z.string(),updated_at:t.z.string(),links:t.z.object({sdkSrc:t.z.string().optional(),sdk_src:t.z.string().optional()}).passthrough()}).passthrough(),ht=R.omit({id:!0,created_at:!0,updated_at:!0});var d=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(d||{}),g=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(g||{}),m=(e=>(e.S256="S256",e.Plain="plain",e))(m||{});const x=t.z.object({client_id:t.z.string(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(d).optional(),response_mode:t.z.nativeEnum(g).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),organization:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(m).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional(),vendor_id:t.z.string().optional()}),bt=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),P=t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().optional(),token_endpoint:t.z.string().optional(),userinfo_endpoint:t.z.string().optional(),jwks_uri:t.z.string().optional(),discovery_url:t.z.string().optional(),issuer:t.z.string().optional(),provider:t.z.string().optional(),from:t.z.string().optional(),twilio_sid:t.z.string().optional(),twilio_token:t.z.string().optional()}),L=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:P.default({}),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),B=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(L.shape),H=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),F=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...H.shape,id:t.z.string()}),St=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()});t.z.object({...E.shape,tenant:F,connections:t.z.array(B)});const K=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),M=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:K,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:t.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:t.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:t.z.string().optional().openapi({description:"The redirect URI associated with the code"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),ft=t.z.object({...M.shape,created_at:t.z.string()}),G=t.z.object({domain:t.z.string(),custom_domain_id:t.z.string().optional(),type:t.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:t.z.enum(["txt"]).optional(),tls_policy:t.z.enum(["recommended"]).optional(),custom_client_ip_header:t.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:t.z.record(t.z.string().max(255)).optional()}),W=t.z.object({name:t.z.literal("txt"),record:t.z.string(),domain:t.z.string()}),X=t.z.object({...G.shape,custom_domain_id:t.z.string(),primary:t.z.boolean(),status:t.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:t.z.string().optional(),verification:t.z.object({methods:t.z.array(W)}).optional(),tls_policy:t.z.string().optional()}),Et=X.extend({tenant_id:t.z.string()}),It=t.z.object({id:t.z.string(),type:t.z.literal("submit"),label:t.z.string(),className:t.z.string().optional(),disabled:t.z.boolean().optional().default(!1),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0),customizations:t.z.record(t.z.string(),t.z.any()).optional()}),q=t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("LEGAL"),config:t.z.object({text:t.z.string(),html:t.z.boolean().optional()}),required:t.z.boolean().optional(),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("NEXT_BUTTON"),config:t.z.object({text:t.z.string().optional()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)})]),V=t.z.object({name:t.z.string().openapi({description:"The name of the form"}),messages:t.z.object({errors:t.z.record(t.z.string(),t.z.any()).optional(),custom:t.z.record(t.z.string(),t.z.any()).optional()}).optional(),languages:t.z.object({primary:t.z.string().optional(),default:t.z.string().optional()}).optional(),translations:t.z.record(t.z.string(),t.z.any()).optional(),nodes:t.z.array(t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({flow_id:t.z.string().max(30),next_node:t.z.string()})}),t.z.object({id:t.z.string(),type:t.z.literal("ROUTER"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150),config:t.z.object({rules:t.z.array(t.z.object({id:t.z.string(),alias:t.z.string().min(1).max(150).optional(),condition:t.z.any(),next_node:t.z.string()})),fallback:t.z.array(t.z.string())})}),t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({components:t.z.array(q),next_node:t.z.string()})})])).optional(),start:t.z.object({hidden_fields:t.z.array(t.z.object({key:t.z.string(),value:t.z.string()})).optional(),next_node:t.z.string().optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional()}).optional(),ending:t.z.object({redirection:t.z.object({delay:t.z.number().optional(),target:t.z.string().optional()}).optional(),after_submit:t.z.object({flow_id:t.z.string().optional()}).optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional(),resume_flow:t.z.boolean().optional()}).optional(),style:t.z.object({css:t.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches new JSON structure)"}),yt=t.z.object({...s.shape,...V.shape,id:t.z.string()}),Q=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),Y=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),l={enabled:t.z.boolean().default(!1),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional(),hook_id:t.z.string().optional()},jt=t.z.object({...l,trigger_id:Q,url:t.z.string()}),wt=t.z.object({...l,trigger_id:Y,form_id:t.z.string()}),Ct=t.z.union([jt,wt]),kt=t.z.object({...l,trigger_id:Q,...s.shape,hook_id:t.z.string(),url:t.z.string()}),Ot=t.z.object({...l,trigger_id:Y,...s.shape,hook_id:t.z.string(),form_id:t.z.string()}),Tt=t.z.union([kt,Ot]),J=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),At=t.z.object({keys:t.z.array(J)}),vt=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),Z=t.z.object({csrf_token:t.z.string(),auth0Client:t.z.string().optional(),authParams:x,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional(),session_id:t.z.string().optional(),authorization_url:t.z.string().optional(),login_completed:t.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Nt=t.z.object({...Z.shape,id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var $=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))($||{});const Dt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),tt=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),Ut=t.z.object({type:Dt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:tt.optional()}),et=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),Rt=t.z.object({...et.shape,created_at:t.z.string(),updated_at:t.z.string()}),nt=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),ot=t.z.object({id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string().optional(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),login_session_id:t.z.string(),idle_expires_at:t.z.string().optional(),device:nt.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),xt=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...ot.shape}),Pt=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var it=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",e))(it||{});const Lt=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const at=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),st=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),rt=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),lt=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),ct=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),zt=t.z.object({borders:at,colors:st,displayName:t.z.string(),fonts:rt,page_background:lt,widget:ct}),Bt=zt.extend({themeId:t.z.string()}),Ht=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),Ft=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),pt=t.z.object({id:t.z.string(),session_id:t.z.string(),user_id:t.z.string(),client_id:t.z.string(),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),last_exchanged_at:t.z.string().optional(),device:nt,resource_servers:t.z.array(t.z.object({audience:t.z.string(),scopes:t.z.string()})),rotating:t.z.boolean()}),Kt=t.z.object({created_at:t.z.string(),...pt.shape}),Mt=t.z.object({to:t.z.string(),message:t.z.string()}),Gt=t.z.object({name:t.z.string(),options:t.z.object({})});function Wt(e){const[i,a]=e.split("|");if(!i||!a)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:a}}exports.Auth0Client=tt;exports.AuthorizationResponseMode=g;exports.AuthorizationResponseType=d;exports.CodeChallengeMethod=m;exports.ComponentCategory=p;exports.ComponentType=z;exports.GrantType=it;exports.LogTypes=$;exports.NodeType=O;exports.applicationInsertSchema=f;exports.applicationSchema=E;exports.auth0FlowInsertSchema=ht;exports.auth0FlowSchema=R;exports.auth0UserResponseSchema=gt;exports.authParamsSchema=x;exports.baseUserSchema=c;exports.bordersSchema=at;exports.brandingSchema=bt;exports.buttonComponentSchema=y;exports.codeInsertSchema=M;exports.codeSchema=ft;exports.codeTypeSchema=K;exports.colorsSchema=st;exports.componentSchema=k;exports.connectionInsertSchema=L;exports.connectionOptionsSchema=P;exports.connectionSchema=B;exports.coordinatesSchema=o;exports.customDomainInsertSchema=G;exports.customDomainSchema=X;exports.customDomainWithTenantIdSchema=Et;exports.emailProviderSchema=Ft;exports.endingSchema=U;exports.fieldComponentSchema=w;exports.flowNodeSchema=A;exports.fontDetailsSchema=n;exports.fontsSchema=rt;exports.formControlSchema=It;exports.formInsertSchema=V;exports.formNodeComponentDefinition=q;exports.formSchema=yt;exports.genericComponentSchema=C;exports.genericNodeSchema=v;exports.hookInsertSchema=Ct;exports.hookSchema=Tt;exports.identitySchema=_;exports.jwksKeySchema=At;exports.jwksSchema=J;exports.legalComponentSchema=j;exports.logSchema=Ut;exports.loginSessionInsertSchema=Z;exports.loginSessionSchema=Nt;exports.nodeSchema=N;exports.openIDConfigurationSchema=vt;exports.pageBackgroundSchema=lt;exports.parseUserId=Wt;exports.passwordInsertSchema=et;exports.passwordSchema=Rt;exports.profileDataSchema=u;exports.promptSettingSchema=Ht;exports.refreshTokenInsertSchema=pt;exports.refreshTokenSchema=Kt;exports.richTextComponentSchema=I;exports.samlpAddon=S;exports.sessionInsertSchema=ot;exports.sessionSchema=xt;exports.signingKeySchema=Pt;exports.smsProviderSchema=Gt;exports.smsSendParamsSchema=Mt;exports.startSchema=D;exports.stepNodeSchema=T;exports.tenantInsertSchema=H;exports.tenantSchema=F;exports.themeInsertSchema=zt;exports.themeSchema=Bt;exports.tokenResponseSchema=Lt;exports.totalsSchema=dt;exports.userInsertSchema=h;exports.userResponseSchema=mt;exports.userSchema=b;exports.vendorSettingsSchema=St;exports.verificationMethodsSchema=W;exports.widgetSchema=ct;
1
+ "use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("@hono/zod-openapi"),dt=t.z.object({start:t.z.number(),limit:t.z.number(),length:t.z.number()}),s=t.z.object({created_at:t.z.string(),updated_at:t.z.string()}),u=t.z.object({email:t.z.string().optional(),email_verified:t.z.boolean().optional(),name:t.z.string().optional(),username:t.z.string().optional(),given_name:t.z.string().optional(),phone_number:t.z.string().optional(),phone_verified:t.z.boolean().optional(),family_name:t.z.string().optional()}).catchall(t.z.any()),h=t.z.object({connection:t.z.string(),user_id:t.z.string(),provider:t.z.string(),isSocial:t.z.boolean(),access_token:t.z.string().optional(),access_token_secret:t.z.string().optional(),refresh_token:t.z.string().optional(),profileData:u.optional()}),c=t.z.object({email:t.z.string().optional().transform(e=>e&&e.toLowerCase()),username:t.z.string().optional(),phone_number:t.z.string().optional(),given_name:t.z.string().optional(),family_name:t.z.string().optional(),nickname:t.z.string().optional(),name:t.z.string().optional(),picture:t.z.string().optional(),locale:t.z.string().optional(),linked_to:t.z.string().optional(),profileData:t.z.string().optional(),user_id:t.z.string().optional(),app_metadata:t.z.any().default({}).optional(),user_metadata:t.z.any().default({}).optional()}),_=c.extend({email_verified:t.z.boolean().default(!1),verify_email:t.z.boolean().optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string().optional(),provider:t.z.string().default("email"),connection:t.z.string().default("email"),is_social:t.z.boolean().optional()}),b=t.z.object({..._.shape,...s.shape,user_id:t.z.string(),is_social:t.z.boolean(),email:t.z.string().optional(),login_count:t.z.number().default(0),identities:t.z.array(h).optional()}),gt=b,mt=c.extend({login_count:t.z.number(),multifactor:t.z.array(t.z.string()).optional(),last_ip:t.z.string().optional(),last_login:t.z.string().optional(),user_id:t.z.string()}).catchall(t.z.any()),ut="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let ht=(e=21)=>{let i="",a=crypto.getRandomValues(new Uint8Array(e));for(;e--;)i+=ut[a[e]&63];return i};const S=t.z.object({audience:t.z.string().optional(),recipient:t.z.string().optional(),createUpnClaim:t.z.boolean().optional(),mapUnknownClaimsAsIs:t.z.boolean().optional(),passthroughClaimsWithNoMapping:t.z.boolean().optional(),mapIdentities:t.z.boolean().optional(),signatureAlgorithm:t.z.string().optional(),digestAlgorithm:t.z.string().optional(),issuer:t.z.string().optional(),destination:t.z.string().optional(),lifetimeInSeconds:t.z.number().optional(),signResponse:t.z.boolean().optional(),nameIdentifierFormat:t.z.string().optional(),nameIdentifierProbes:t.z.array(t.z.string()).optional(),authnContextClassRef:t.z.string().optional(),mappings:t.z.record(t.z.string()).optional()}),f=t.z.object({id:t.z.string(),name:t.z.string(),callbacks:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted to use as a callback to the client after authentication."}),allowed_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level. Query strings and hash information are not taken into account when validating these URLs."}),web_origins:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),allowed_logout_urls:t.z.array(t.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),allowed_clients:t.z.array(t.z.string()).default([]).optional().openapi({description:"Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients"}),addons:t.z.object({samlp:S.optional()}).default({}).optional().openapi({description:"Addons associated with the client. The key is the addon's package name and the value is an object with the configuration for the addon."}),email_validation:t.z.enum(["enabled","disabled","enforced"]).default("enforced").optional().openapi({description:"Defines if it possible to sign in with an unverified email and if verification emails will be sent. This is not available in auth0"}),client_secret:t.z.string().default(()=>ht()).optional(),disable_sign_ups:t.z.boolean().optional().default(!1).openapi({description:"Prevents users from signing up using the hosted login page. This is not available in auth0"})}),E=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...f.shape}),o=t.z.object({x:t.z.number(),y:t.z.number()});var z=(e=>(e.RICH_TEXT="RICH_TEXT",e.NEXT_BUTTON="NEXT_BUTTON",e.BACK_BUTTON="BACK_BUTTON",e.SUBMIT_BUTTON="SUBMIT_BUTTON",e.DIVIDER="DIVIDER",e.TEXT="TEXT",e.EMAIL="EMAIL",e.PASSWORD="PASSWORD",e.NUMBER="NUMBER",e.PHONE="PHONE",e.DATE="DATE",e.CHECKBOX="CHECKBOX",e.RADIO="RADIO",e.SELECT="SELECT",e.HIDDEN="HIDDEN",e.LEGAL="LEGAL",e))(z||{}),p=(e=>(e.BLOCK="BLOCK",e.FIELD="FIELD",e))(p||{});const r=t.z.object({id:t.z.string(),category:t.z.nativeEnum(p),type:t.z.nativeEnum(z)}),I=r.extend({category:t.z.literal("BLOCK"),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}).passthrough()}),y=r.extend({category:t.z.literal("BLOCK"),type:t.z.union([t.z.literal("NEXT_BUTTON"),t.z.literal("BACK_BUTTON"),t.z.literal("SUBMIT_BUTTON")]),config:t.z.object({text:t.z.string()}).passthrough()}),j=r.extend({category:t.z.literal("FIELD"),type:t.z.literal("LEGAL"),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({text:t.z.string()}).passthrough()}),w=r.extend({category:t.z.literal("FIELD"),type:t.z.union([t.z.literal("TEXT"),t.z.literal("EMAIL"),t.z.literal("PASSWORD"),t.z.literal("NUMBER"),t.z.literal("PHONE"),t.z.literal("DATE"),t.z.literal("CHECKBOX"),t.z.literal("RADIO"),t.z.literal("SELECT"),t.z.literal("HIDDEN")]),required:t.z.boolean().optional(),sensitive:t.z.boolean().optional(),config:t.z.object({label:t.z.string().optional(),placeholder:t.z.string().optional()}).passthrough()}),C=t.z.object({id:t.z.string(),category:t.z.string(),type:t.z.string()}).passthrough(),k=t.z.union([I,y,j,w,C]);var O=(e=>(e.STEP="STEP",e.FLOW="FLOW",e.CONDITION="CONDITION",e.ACTION="ACTION",e))(O||{});const T=t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({components:t.z.array(k),next_node:t.z.string()}).passthrough()}),A=t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:o,alias:t.z.string().optional(),config:t.z.object({flow_id:t.z.string(),next_node:t.z.string()})}),v=t.z.object({id:t.z.string(),type:t.z.string(),coordinates:o}).passthrough(),N=t.z.union([T,A,v]),D=t.z.object({next_node:t.z.string(),coordinates:o}).passthrough(),U=t.z.object({resume_flow:t.z.boolean().optional(),coordinates:o}).passthrough(),R=t.z.object({id:t.z.string(),name:t.z.string(),languages:t.z.object({primary:t.z.string()}).passthrough(),nodes:t.z.array(N),start:D,ending:U,created_at:t.z.string(),updated_at:t.z.string(),links:t.z.object({sdkSrc:t.z.string().optional(),sdk_src:t.z.string().optional()}).passthrough()}).passthrough(),_t=R.omit({id:!0,created_at:!0,updated_at:!0});var d=(e=>(e.TOKEN="token",e.TOKEN_ID_TOKEN="token id_token",e.CODE="code",e))(d||{}),g=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e.WEB_MESSAGE="web_message",e.SAML_POST="saml_post",e))(g||{}),m=(e=>(e.S256="S256",e.Plain="plain",e))(m||{});const x=t.z.object({client_id:t.z.string(),act_as:t.z.string().optional(),response_type:t.z.nativeEnum(d).optional(),response_mode:t.z.nativeEnum(g).optional(),redirect_uri:t.z.string().optional(),audience:t.z.string().optional(),organization:t.z.string().optional(),state:t.z.string().optional(),nonce:t.z.string().optional(),scope:t.z.string().optional(),prompt:t.z.string().optional(),code_challenge_method:t.z.nativeEnum(m).optional(),code_challenge:t.z.string().optional(),username:t.z.string().optional(),ui_locales:t.z.string().optional(),vendor_id:t.z.string().optional()}),bt=t.z.object({colors:t.z.object({primary:t.z.string(),page_background:t.z.object({type:t.z.string().optional(),start:t.z.string().optional(),end:t.z.string().optional(),angle_deg:t.z.number().optional()}).optional()}).optional(),logo_url:t.z.string().optional(),favicon_url:t.z.string().optional(),font:t.z.object({url:t.z.string()}).optional()}),P=t.z.object({kid:t.z.string().optional(),team_id:t.z.string().optional(),realms:t.z.string().optional(),authentication_method:t.z.string().optional(),client_id:t.z.string().optional(),client_secret:t.z.string().optional(),app_secret:t.z.string().optional(),scope:t.z.string().optional(),authorization_endpoint:t.z.string().optional(),token_endpoint:t.z.string().optional(),userinfo_endpoint:t.z.string().optional(),jwks_uri:t.z.string().optional(),discovery_url:t.z.string().optional(),issuer:t.z.string().optional(),provider:t.z.string().optional(),from:t.z.string().optional(),twilio_sid:t.z.string().optional(),twilio_token:t.z.string().optional()}),L=t.z.object({id:t.z.string().optional(),name:t.z.string(),strategy:t.z.string(),options:P.default({}),enabled_clients:t.z.array(t.z.string()).default([]).optional(),response_type:t.z.custom().optional(),response_mode:t.z.custom().optional()}),B=t.z.object({id:t.z.string(),created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e)}).extend(L.shape),H=t.z.object({name:t.z.string(),audience:t.z.string(),sender_email:t.z.string().email(),sender_name:t.z.string(),support_url:t.z.string().url().optional(),logo:t.z.string().url().optional(),primary_color:t.z.string().optional(),secondary_color:t.z.string().optional(),language:t.z.string().optional(),id:t.z.string().optional()}),F=t.z.object({created_at:t.z.string().transform(e=>e===null?"":e),updated_at:t.z.string().transform(e=>e===null?"":e),...H.shape,id:t.z.string()}),St=t.z.object({logoUrl:t.z.string(),loginBackgroundImage:t.z.string().nullish(),style:t.z.object({primaryColor:t.z.string(),buttonTextColor:t.z.string(),primaryHoverColor:t.z.string()}),supportEmail:t.z.string().nullable(),supportUrl:t.z.string().nullable(),name:t.z.string(),showGreyishBackground:t.z.boolean().optional(),termsAndConditionsUrl:t.z.string().nullable(),companyName:t.z.string().optional(),checkoutHideSocial:t.z.boolean().optional(),siteUrl:t.z.string().nullable(),manageSubscriptionsUrl:t.z.string().optional()});t.z.object({...E.shape,tenant:F,connections:t.z.array(B)});const K=t.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),M=t.z.object({code_id:t.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:t.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:t.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:K,code_verifier:t.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:t.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:t.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:t.z.string().optional().openapi({description:"The redirect URI associated with the code"}),nonce:t.z.string().optional().openapi({description:"The nonce value used for security in OIDC flows"}),state:t.z.string().optional().openapi({description:"The state parameter used for CSRF protection in OAuth flows"}),expires_at:t.z.string(),used_at:t.z.string().optional(),user_id:t.z.string().optional()}),ft=t.z.object({...M.shape,created_at:t.z.string()}),G=t.z.object({domain:t.z.string(),custom_domain_id:t.z.string().optional(),type:t.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:t.z.enum(["txt"]).optional(),tls_policy:t.z.enum(["recommended"]).optional(),custom_client_ip_header:t.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:t.z.record(t.z.string().max(255)).optional()}),W=t.z.object({name:t.z.literal("txt"),record:t.z.string(),domain:t.z.string()}),X=t.z.object({...G.shape,custom_domain_id:t.z.string(),primary:t.z.boolean(),status:t.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:t.z.string().optional(),verification:t.z.object({methods:t.z.array(W)}).optional(),tls_policy:t.z.string().optional()}),Et=X.extend({tenant_id:t.z.string()}),It=t.z.object({id:t.z.string(),type:t.z.literal("submit"),label:t.z.string(),className:t.z.string().optional(),disabled:t.z.boolean().optional().default(!1),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0),customizations:t.z.record(t.z.string(),t.z.any()).optional()}),q=t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("RICH_TEXT"),config:t.z.object({content:t.z.string()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("LEGAL"),config:t.z.object({text:t.z.string(),html:t.z.boolean().optional()}),required:t.z.boolean().optional(),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)}),t.z.object({id:t.z.string(),type:t.z.literal("NEXT_BUTTON"),config:t.z.object({text:t.z.string().optional()}),order:t.z.number().optional(),visible:t.z.boolean().optional().default(!0)})]),V=t.z.object({name:t.z.string().openapi({description:"The name of the form"}),messages:t.z.object({errors:t.z.record(t.z.string(),t.z.any()).optional(),custom:t.z.record(t.z.string(),t.z.any()).optional()}).optional(),languages:t.z.object({primary:t.z.string().optional(),default:t.z.string().optional()}).optional(),translations:t.z.record(t.z.string(),t.z.any()).optional(),nodes:t.z.array(t.z.discriminatedUnion("type",[t.z.object({id:t.z.string(),type:t.z.literal("FLOW"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({flow_id:t.z.string().max(30),next_node:t.z.string()})}),t.z.object({id:t.z.string(),type:t.z.literal("ROUTER"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150),config:t.z.object({rules:t.z.array(t.z.object({id:t.z.string(),alias:t.z.string().min(1).max(150).optional(),condition:t.z.any(),next_node:t.z.string()})),fallback:t.z.array(t.z.string())})}),t.z.object({id:t.z.string(),type:t.z.literal("STEP"),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}),alias:t.z.string().min(1).max(150).optional(),config:t.z.object({components:t.z.array(q),next_node:t.z.string()})})])).optional(),start:t.z.object({hidden_fields:t.z.array(t.z.object({key:t.z.string(),value:t.z.string()})).optional(),next_node:t.z.string().optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional()}).optional(),ending:t.z.object({redirection:t.z.object({delay:t.z.number().optional(),target:t.z.string().optional()}).optional(),after_submit:t.z.object({flow_id:t.z.string().optional()}).optional(),coordinates:t.z.object({x:t.z.number(),y:t.z.number()}).optional(),resume_flow:t.z.boolean().optional()}).optional(),style:t.z.object({css:t.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches new JSON structure)"}),yt=t.z.object({...s.shape,...V.shape,id:t.z.string()}),Q=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),Y=t.z.enum(["pre-user-signup","post-user-registration","post-user-login"]),l={enabled:t.z.boolean().default(!1),synchronous:t.z.boolean().default(!1),priority:t.z.number().optional(),hook_id:t.z.string().optional()},jt=t.z.object({...l,trigger_id:Q,url:t.z.string()}),wt=t.z.object({...l,trigger_id:Y,form_id:t.z.string()}),Ct=t.z.union([jt,wt]),kt=t.z.object({...l,trigger_id:Q,...s.shape,hook_id:t.z.string(),url:t.z.string()}),Ot=t.z.object({...l,trigger_id:Y,...s.shape,hook_id:t.z.string(),form_id:t.z.string()}),Tt=t.z.union([kt,Ot]),J=t.z.object({alg:t.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:t.z.string(),kid:t.z.string(),kty:t.z.enum(["RSA","EC","oct"]),n:t.z.string(),x5t:t.z.string().optional(),x5c:t.z.array(t.z.string()).optional(),use:t.z.enum(["sig","enc"]).optional()}),At=t.z.object({keys:t.z.array(J)}),vt=t.z.object({issuer:t.z.string(),authorization_endpoint:t.z.string(),token_endpoint:t.z.string(),device_authorization_endpoint:t.z.string(),userinfo_endpoint:t.z.string(),mfa_challenge_endpoint:t.z.string(),jwks_uri:t.z.string(),registration_endpoint:t.z.string(),revocation_endpoint:t.z.string(),scopes_supported:t.z.array(t.z.string()),response_types_supported:t.z.array(t.z.string()),code_challenge_methods_supported:t.z.array(t.z.string()),response_modes_supported:t.z.array(t.z.string()),subject_types_supported:t.z.array(t.z.string()),id_token_signing_alg_values_supported:t.z.array(t.z.string()),token_endpoint_auth_methods_supported:t.z.array(t.z.string()),claims_supported:t.z.array(t.z.string()),request_uri_parameter_supported:t.z.boolean(),request_parameter_supported:t.z.boolean(),token_endpoint_auth_signing_alg_values_supported:t.z.array(t.z.string())}),Z=t.z.object({csrf_token:t.z.string(),auth0Client:t.z.string().optional(),authParams:x,expires_at:t.z.string(),deleted_at:t.z.string().optional(),ip:t.z.string().optional(),useragent:t.z.string().optional(),session_id:t.z.string().optional(),authorization_url:t.z.string().optional(),login_completed:t.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Nt=t.z.object({...Z.shape,id:t.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:t.z.string(),updated_at:t.z.string()});var $=(e=>(e.FAILED_SILENT_AUTH="fsa",e.FAILED_SIGNUP="fs",e.FAILED_LOGIN="f",e.FAILED_LOGIN_INCORRECT_PASSWORD="fp",e.FAILED_CHANGE_PASSWORD="fcp",e.FAILED_BY_CONNECTOR="fc",e.FAILED_LOGIN_INVALID_EMAIL_USERNAME="fu",e.FAILED_HOOK="fh",e.FAILED_CROSS_ORIGIN_AUTHENTICATION="fcoa",e.SUCCESS_API_OPERATION="sapi",e.SUCCESS_CHANGE_PASSWORD="scp",e.SUCCESS_CHANGE_PASSWORD_REQUEST="scpr",e.SUCCESS_CHANGE_USERNAME="scu",e.SUCCESS_CROSS_ORIGIN_AUTHENTICATION="scoa",e.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN="seacft",e.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN="serft",e.SUCCESS_LOGIN="s",e.SUCCESS_LOGOUT="slo",e.SUCCESS_SIGNUP="ss",e.SUCCESS_SILENT_AUTH="ssa",e.SUCCESS_VERIFICATION_EMAIL="sv",e.SUCCESS_VERIFICATION_EMAIL_REQUEST="svr",e.CODE_LINK_SENT="cls",e.BLOCKED_ACCOUNT_EMAIL="limit_wc",e.BLOCKED_ACCOUNT_IP="limit_sul",e.BLOCKED_IP_ADDRESS="limit_mu",e))($||{});const Dt=t.z.enum(["cls","fsa","fs","f","fc","fcoa","fcp","fh","fp","fs","fu","s","sapi","scoa","scp","scpr","scu","seacft","serft","slo","ss","ssa","sv","svr"]),tt=t.z.object({name:t.z.string(),version:t.z.string(),env:t.z.object({node:t.z.string().optional()}).optional()}),Ut=t.z.object({type:Dt,date:t.z.string(),description:t.z.string().optional(),log_id:t.z.string().optional(),_id:t.z.string().optional(),ip:t.z.string(),user_agent:t.z.string(),details:t.z.any().optional(),isMobile:t.z.boolean(),user_id:t.z.string().optional(),user_name:t.z.string().optional(),connection:t.z.string().optional(),connection_id:t.z.string().optional(),client_id:t.z.string().optional(),client_name:t.z.string().optional(),audience:t.z.string().optional(),scope:t.z.array(t.z.string()).optional(),strategy:t.z.string().optional(),strategy_type:t.z.string().optional(),hostname:t.z.string().optional(),auth0_client:tt.optional()}),et=t.z.object({user_id:t.z.string(),password:t.z.string(),algorithm:t.z.enum(["bcrypt","argon2id"]).default("argon2id")}),Rt=t.z.object({...et.shape,created_at:t.z.string(),updated_at:t.z.string()}),nt=t.z.object({initial_user_agent:t.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:t.z.string().describe("First IP address associated with this session"),initial_asn:t.z.string().describe("First autonomous system number associated with this session"),last_user_agent:t.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:t.z.string().describe("Last IP address from which this user logged in"),last_asn:t.z.string().describe("Last autonomous system number from which this user logged in")}),ot=t.z.object({id:t.z.string(),revoked_at:t.z.string().optional(),used_at:t.z.string().optional(),user_id:t.z.string().describe("The user ID associated with the session"),expires_at:t.z.string().optional(),login_session_id:t.z.string(),idle_expires_at:t.z.string().optional(),device:nt.describe("Metadata related to the device used in the session"),clients:t.z.array(t.z.string()).describe("List of client details for the session")}),xt=t.z.object({created_at:t.z.string(),updated_at:t.z.string(),authenticated_at:t.z.string(),last_interaction_at:t.z.string(),...ot.shape}),Pt=t.z.object({kid:t.z.string().openapi({description:"The key id of the signing key"}),cert:t.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:t.z.string().openapi({description:"The cert fingerprint"}),thumbprint:t.z.string().openapi({description:"The cert thumbprint"}),pkcs7:t.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:t.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:t.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:t.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:t.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:t.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:t.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:t.z.string().optional().openapi({description:"The date and time when the key was revoked"})});var it=(e=>(e.RefreshToken="refresh_token",e.AuthorizationCode="authorization_code",e.ClientCredential="client_credentials",e.Passwordless="passwordless",e.Password="password",e.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",e))(it||{});const Lt=t.z.object({access_token:t.z.string(),id_token:t.z.string().optional(),scope:t.z.string().optional(),state:t.z.string().optional(),refresh_token:t.z.string().optional(),token_type:t.z.string(),expires_in:t.z.number()});t.z.object({code:t.z.string(),state:t.z.string().optional()});const at=t.z.object({button_border_radius:t.z.number(),button_border_weight:t.z.number(),buttons_style:t.z.enum(["pill"]),input_border_radius:t.z.number(),input_border_weight:t.z.number(),inputs_style:t.z.enum(["pill"]),show_widget_shadow:t.z.boolean(),widget_border_weight:t.z.number(),widget_corner_radius:t.z.number()}),st=t.z.object({base_focus_color:t.z.string(),base_hover_color:t.z.string(),body_text:t.z.string(),captcha_widget_theme:t.z.enum(["auto"]),error:t.z.string(),header:t.z.string(),icons:t.z.string(),input_background:t.z.string(),input_border:t.z.string(),input_filled_text:t.z.string(),input_labels_placeholders:t.z.string(),links_focused_components:t.z.string(),primary_button:t.z.string(),primary_button_label:t.z.string(),secondary_button_border:t.z.string(),secondary_button_label:t.z.string(),success:t.z.string(),widget_background:t.z.string(),widget_border:t.z.string()}),n=t.z.object({bold:t.z.boolean(),size:t.z.number()}),rt=t.z.object({body_text:n,buttons_text:n,font_url:t.z.string(),input_labels:n,links:n,links_style:t.z.enum(["normal"]),reference_text_size:t.z.number(),subtitle:n,title:n}),lt=t.z.object({background_color:t.z.string(),background_image_url:t.z.string(),page_layout:t.z.enum(["center"])}),ct=t.z.object({header_text_alignment:t.z.enum(["center"]),logo_height:t.z.number(),logo_position:t.z.enum(["center"]),logo_url:t.z.string(),social_buttons_layout:t.z.enum(["bottom"])}),zt=t.z.object({borders:at,colors:st,displayName:t.z.string(),fonts:rt,page_background:lt,widget:ct}),Bt=zt.extend({themeId:t.z.string()}),Ht=t.z.object({universal_login_experience:t.z.enum(["new","classic"]).default("new"),identifier_first:t.z.boolean().default(!0),password_first:t.z.boolean().default(!1),webauthn_platform_first_factor:t.z.boolean()}),Ft=t.z.object({name:t.z.string(),enabled:t.z.boolean().optional().default(!0),default_from_address:t.z.string().optional(),credentials:t.z.union([t.z.object({accessKeyId:t.z.string(),secretAccessKey:t.z.string(),region:t.z.string()}),t.z.object({smtp_host:t.z.array(t.z.string()),smtp_port:t.z.number(),smtp_user:t.z.string(),smtp_pass:t.z.string()}),t.z.object({api_key:t.z.string(),domain:t.z.string().optional()}),t.z.object({connectionString:t.z.string()}),t.z.object({tenantId:t.z.string(),clientId:t.z.string(),clientSecret:t.z.string()})]),settings:t.z.object({}).optional()}),pt=t.z.object({id:t.z.string(),session_id:t.z.string(),user_id:t.z.string(),client_id:t.z.string(),expires_at:t.z.string().optional(),idle_expires_at:t.z.string().optional(),last_exchanged_at:t.z.string().optional(),device:nt,resource_servers:t.z.array(t.z.object({audience:t.z.string(),scopes:t.z.string()})),rotating:t.z.boolean()}),Kt=t.z.object({created_at:t.z.string(),...pt.shape}),Mt=t.z.object({to:t.z.string(),message:t.z.string()}),Gt=t.z.object({name:t.z.string(),options:t.z.object({})});function Wt(e){const[i,a]=e.split("|");if(!i||!a)throw new Error(`Invalid user_id: ${e}`);return{connection:i,id:a}}exports.Auth0Client=tt;exports.AuthorizationResponseMode=g;exports.AuthorizationResponseType=d;exports.CodeChallengeMethod=m;exports.ComponentCategory=p;exports.ComponentType=z;exports.GrantType=it;exports.LogTypes=$;exports.NodeType=O;exports.applicationInsertSchema=f;exports.applicationSchema=E;exports.auth0FlowInsertSchema=_t;exports.auth0FlowSchema=R;exports.auth0UserResponseSchema=gt;exports.authParamsSchema=x;exports.baseUserSchema=c;exports.bordersSchema=at;exports.brandingSchema=bt;exports.buttonComponentSchema=y;exports.codeInsertSchema=M;exports.codeSchema=ft;exports.codeTypeSchema=K;exports.colorsSchema=st;exports.componentSchema=k;exports.connectionInsertSchema=L;exports.connectionOptionsSchema=P;exports.connectionSchema=B;exports.coordinatesSchema=o;exports.customDomainInsertSchema=G;exports.customDomainSchema=X;exports.customDomainWithTenantIdSchema=Et;exports.emailProviderSchema=Ft;exports.endingSchema=U;exports.fieldComponentSchema=w;exports.flowNodeSchema=A;exports.fontDetailsSchema=n;exports.fontsSchema=rt;exports.formControlSchema=It;exports.formInsertSchema=V;exports.formNodeComponentDefinition=q;exports.formSchema=yt;exports.genericComponentSchema=C;exports.genericNodeSchema=v;exports.hookInsertSchema=Ct;exports.hookSchema=Tt;exports.identitySchema=h;exports.jwksKeySchema=At;exports.jwksSchema=J;exports.legalComponentSchema=j;exports.logSchema=Ut;exports.loginSessionInsertSchema=Z;exports.loginSessionSchema=Nt;exports.nodeSchema=N;exports.openIDConfigurationSchema=vt;exports.pageBackgroundSchema=lt;exports.parseUserId=Wt;exports.passwordInsertSchema=et;exports.passwordSchema=Rt;exports.profileDataSchema=u;exports.promptSettingSchema=Ht;exports.refreshTokenInsertSchema=pt;exports.refreshTokenSchema=Kt;exports.richTextComponentSchema=I;exports.samlpAddon=S;exports.sessionInsertSchema=ot;exports.sessionSchema=xt;exports.signingKeySchema=Pt;exports.smsProviderSchema=Gt;exports.smsSendParamsSchema=Mt;exports.startSchema=D;exports.stepNodeSchema=T;exports.tenantInsertSchema=H;exports.tenantSchema=F;exports.themeInsertSchema=zt;exports.themeSchema=Bt;exports.tokenResponseSchema=Lt;exports.totalsSchema=dt;exports.userInsertSchema=_;exports.userResponseSchema=mt;exports.userSchema=b;exports.vendorSettingsSchema=St;exports.verificationMethodsSchema=W;exports.widgetSchema=ct;
@@ -8192,6 +8192,7 @@ declare const ClientSchema: z.ZodObject<{
8192
8192
  kid: z.ZodOptional<z.ZodString>;
8193
8193
  team_id: z.ZodOptional<z.ZodString>;
8194
8194
  realms: z.ZodOptional<z.ZodString>;
8195
+ authentication_method: z.ZodOptional<z.ZodString>;
8195
8196
  client_id: z.ZodOptional<z.ZodString>;
8196
8197
  client_secret: z.ZodOptional<z.ZodString>;
8197
8198
  app_secret: z.ZodOptional<z.ZodString>;
@@ -8215,6 +8216,7 @@ declare const ClientSchema: z.ZodObject<{
8215
8216
  kid?: string | undefined;
8216
8217
  team_id?: string | undefined;
8217
8218
  realms?: string | undefined;
8219
+ authentication_method?: string | undefined;
8218
8220
  app_secret?: string | undefined;
8219
8221
  authorization_endpoint?: string | undefined;
8220
8222
  token_endpoint?: string | undefined;
@@ -8233,6 +8235,7 @@ declare const ClientSchema: z.ZodObject<{
8233
8235
  kid?: string | undefined;
8234
8236
  team_id?: string | undefined;
8235
8237
  realms?: string | undefined;
8238
+ authentication_method?: string | undefined;
8236
8239
  app_secret?: string | undefined;
8237
8240
  authorization_endpoint?: string | undefined;
8238
8241
  token_endpoint?: string | undefined;
@@ -8256,6 +8259,7 @@ declare const ClientSchema: z.ZodObject<{
8256
8259
  kid?: string | undefined;
8257
8260
  team_id?: string | undefined;
8258
8261
  realms?: string | undefined;
8262
+ authentication_method?: string | undefined;
8259
8263
  app_secret?: string | undefined;
8260
8264
  authorization_endpoint?: string | undefined;
8261
8265
  token_endpoint?: string | undefined;
@@ -8288,6 +8292,7 @@ declare const ClientSchema: z.ZodObject<{
8288
8292
  kid?: string | undefined;
8289
8293
  team_id?: string | undefined;
8290
8294
  realms?: string | undefined;
8295
+ authentication_method?: string | undefined;
8291
8296
  app_secret?: string | undefined;
8292
8297
  authorization_endpoint?: string | undefined;
8293
8298
  token_endpoint?: string | undefined;
@@ -8441,6 +8446,7 @@ declare const ClientSchema: z.ZodObject<{
8441
8446
  kid?: string | undefined;
8442
8447
  team_id?: string | undefined;
8443
8448
  realms?: string | undefined;
8449
+ authentication_method?: string | undefined;
8444
8450
  app_secret?: string | undefined;
8445
8451
  authorization_endpoint?: string | undefined;
8446
8452
  token_endpoint?: string | undefined;
@@ -8520,6 +8526,7 @@ declare const ClientSchema: z.ZodObject<{
8520
8526
  kid?: string | undefined;
8521
8527
  team_id?: string | undefined;
8522
8528
  realms?: string | undefined;
8529
+ authentication_method?: string | undefined;
8523
8530
  app_secret?: string | undefined;
8524
8531
  authorization_endpoint?: string | undefined;
8525
8532
  token_endpoint?: string | undefined;
@@ -8593,6 +8600,8 @@ export declare const codeInsertSchema: z.ZodObject<{
8593
8600
  "S256"
8594
8601
  ]>>;
8595
8602
  redirect_uri: z.ZodOptional<z.ZodString>;
8603
+ nonce: z.ZodOptional<z.ZodString>;
8604
+ state: z.ZodOptional<z.ZodString>;
8596
8605
  expires_at: z.ZodString;
8597
8606
  used_at: z.ZodOptional<z.ZodString>;
8598
8607
  user_id: z.ZodOptional<z.ZodString>;
@@ -8603,6 +8612,8 @@ export declare const codeInsertSchema: z.ZodObject<{
8603
8612
  expires_at: string;
8604
8613
  user_id?: string | undefined;
8605
8614
  redirect_uri?: string | undefined;
8615
+ state?: string | undefined;
8616
+ nonce?: string | undefined;
8606
8617
  code_challenge_method?: "S256" | "plain" | undefined;
8607
8618
  code_challenge?: string | undefined;
8608
8619
  connection_id?: string | undefined;
@@ -8615,6 +8626,8 @@ export declare const codeInsertSchema: z.ZodObject<{
8615
8626
  expires_at: string;
8616
8627
  user_id?: string | undefined;
8617
8628
  redirect_uri?: string | undefined;
8629
+ state?: string | undefined;
8630
+ nonce?: string | undefined;
8618
8631
  code_challenge_method?: "S256" | "plain" | undefined;
8619
8632
  code_challenge?: string | undefined;
8620
8633
  connection_id?: string | undefined;
@@ -8642,6 +8655,8 @@ export declare const codeSchema: z.ZodObject<{
8642
8655
  "S256"
8643
8656
  ]>>;
8644
8657
  redirect_uri: z.ZodOptional<z.ZodString>;
8658
+ nonce: z.ZodOptional<z.ZodString>;
8659
+ state: z.ZodOptional<z.ZodString>;
8645
8660
  expires_at: z.ZodString;
8646
8661
  used_at: z.ZodOptional<z.ZodString>;
8647
8662
  user_id: z.ZodOptional<z.ZodString>;
@@ -8653,6 +8668,8 @@ export declare const codeSchema: z.ZodObject<{
8653
8668
  expires_at: string;
8654
8669
  user_id?: string | undefined;
8655
8670
  redirect_uri?: string | undefined;
8671
+ state?: string | undefined;
8672
+ nonce?: string | undefined;
8656
8673
  code_challenge_method?: "S256" | "plain" | undefined;
8657
8674
  code_challenge?: string | undefined;
8658
8675
  connection_id?: string | undefined;
@@ -8666,6 +8683,8 @@ export declare const codeSchema: z.ZodObject<{
8666
8683
  expires_at: string;
8667
8684
  user_id?: string | undefined;
8668
8685
  redirect_uri?: string | undefined;
8686
+ state?: string | undefined;
8687
+ nonce?: string | undefined;
8669
8688
  code_challenge_method?: "S256" | "plain" | undefined;
8670
8689
  code_challenge?: string | undefined;
8671
8690
  connection_id?: string | undefined;
@@ -8677,6 +8696,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
8677
8696
  kid: z.ZodOptional<z.ZodString>;
8678
8697
  team_id: z.ZodOptional<z.ZodString>;
8679
8698
  realms: z.ZodOptional<z.ZodString>;
8699
+ authentication_method: z.ZodOptional<z.ZodString>;
8680
8700
  client_id: z.ZodOptional<z.ZodString>;
8681
8701
  client_secret: z.ZodOptional<z.ZodString>;
8682
8702
  app_secret: z.ZodOptional<z.ZodString>;
@@ -8700,6 +8720,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
8700
8720
  kid?: string | undefined;
8701
8721
  team_id?: string | undefined;
8702
8722
  realms?: string | undefined;
8723
+ authentication_method?: string | undefined;
8703
8724
  app_secret?: string | undefined;
8704
8725
  authorization_endpoint?: string | undefined;
8705
8726
  token_endpoint?: string | undefined;
@@ -8718,6 +8739,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
8718
8739
  kid?: string | undefined;
8719
8740
  team_id?: string | undefined;
8720
8741
  realms?: string | undefined;
8742
+ authentication_method?: string | undefined;
8721
8743
  app_secret?: string | undefined;
8722
8744
  authorization_endpoint?: string | undefined;
8723
8745
  token_endpoint?: string | undefined;
@@ -8736,6 +8758,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
8736
8758
  kid: z.ZodOptional<z.ZodString>;
8737
8759
  team_id: z.ZodOptional<z.ZodString>;
8738
8760
  realms: z.ZodOptional<z.ZodString>;
8761
+ authentication_method: z.ZodOptional<z.ZodString>;
8739
8762
  client_id: z.ZodOptional<z.ZodString>;
8740
8763
  client_secret: z.ZodOptional<z.ZodString>;
8741
8764
  app_secret: z.ZodOptional<z.ZodString>;
@@ -8759,6 +8782,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
8759
8782
  kid?: string | undefined;
8760
8783
  team_id?: string | undefined;
8761
8784
  realms?: string | undefined;
8785
+ authentication_method?: string | undefined;
8762
8786
  app_secret?: string | undefined;
8763
8787
  authorization_endpoint?: string | undefined;
8764
8788
  token_endpoint?: string | undefined;
@@ -8777,6 +8801,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
8777
8801
  kid?: string | undefined;
8778
8802
  team_id?: string | undefined;
8779
8803
  realms?: string | undefined;
8804
+ authentication_method?: string | undefined;
8780
8805
  app_secret?: string | undefined;
8781
8806
  authorization_endpoint?: string | undefined;
8782
8807
  token_endpoint?: string | undefined;
@@ -8800,6 +8825,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
8800
8825
  kid?: string | undefined;
8801
8826
  team_id?: string | undefined;
8802
8827
  realms?: string | undefined;
8828
+ authentication_method?: string | undefined;
8803
8829
  app_secret?: string | undefined;
8804
8830
  authorization_endpoint?: string | undefined;
8805
8831
  token_endpoint?: string | undefined;
@@ -8828,6 +8854,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
8828
8854
  kid?: string | undefined;
8829
8855
  team_id?: string | undefined;
8830
8856
  realms?: string | undefined;
8857
+ authentication_method?: string | undefined;
8831
8858
  app_secret?: string | undefined;
8832
8859
  authorization_endpoint?: string | undefined;
8833
8860
  token_endpoint?: string | undefined;
@@ -8855,6 +8882,7 @@ export declare const connectionSchema: z.ZodObject<{
8855
8882
  kid: z.ZodOptional<z.ZodString>;
8856
8883
  team_id: z.ZodOptional<z.ZodString>;
8857
8884
  realms: z.ZodOptional<z.ZodString>;
8885
+ authentication_method: z.ZodOptional<z.ZodString>;
8858
8886
  client_id: z.ZodOptional<z.ZodString>;
8859
8887
  client_secret: z.ZodOptional<z.ZodString>;
8860
8888
  app_secret: z.ZodOptional<z.ZodString>;
@@ -8878,6 +8906,7 @@ export declare const connectionSchema: z.ZodObject<{
8878
8906
  kid?: string | undefined;
8879
8907
  team_id?: string | undefined;
8880
8908
  realms?: string | undefined;
8909
+ authentication_method?: string | undefined;
8881
8910
  app_secret?: string | undefined;
8882
8911
  authorization_endpoint?: string | undefined;
8883
8912
  token_endpoint?: string | undefined;
@@ -8896,6 +8925,7 @@ export declare const connectionSchema: z.ZodObject<{
8896
8925
  kid?: string | undefined;
8897
8926
  team_id?: string | undefined;
8898
8927
  realms?: string | undefined;
8928
+ authentication_method?: string | undefined;
8899
8929
  app_secret?: string | undefined;
8900
8930
  authorization_endpoint?: string | undefined;
8901
8931
  token_endpoint?: string | undefined;
@@ -8919,6 +8949,7 @@ export declare const connectionSchema: z.ZodObject<{
8919
8949
  kid?: string | undefined;
8920
8950
  team_id?: string | undefined;
8921
8951
  realms?: string | undefined;
8952
+ authentication_method?: string | undefined;
8922
8953
  app_secret?: string | undefined;
8923
8954
  authorization_endpoint?: string | undefined;
8924
8955
  token_endpoint?: string | undefined;
@@ -8951,6 +8982,7 @@ export declare const connectionSchema: z.ZodObject<{
8951
8982
  kid?: string | undefined;
8952
8983
  team_id?: string | undefined;
8953
8984
  realms?: string | undefined;
8985
+ authentication_method?: string | undefined;
8954
8986
  app_secret?: string | undefined;
8955
8987
  authorization_endpoint?: string | undefined;
8956
8988
  token_endpoint?: string | undefined;
@@ -163,7 +163,7 @@ const r = t.object({
163
163
  config: t.object({
164
164
  text: t.string()
165
165
  }).passthrough()
166
- }), v = r.extend({
166
+ }), T = r.extend({
167
167
  category: t.literal(
168
168
  "FIELD"
169
169
  /* FIELD */
@@ -177,7 +177,7 @@ const r = t.object({
177
177
  config: t.object({
178
178
  text: t.string()
179
179
  }).passthrough()
180
- }), T = r.extend({
180
+ }), v = r.extend({
181
181
  category: t.literal(
182
182
  "FIELD"
183
183
  /* FIELD */
@@ -237,8 +237,8 @@ const r = t.object({
237
237
  }).passthrough(), U = t.union([
238
238
  O,
239
239
  A,
240
- v,
241
240
  T,
241
+ v,
242
242
  N
243
243
  ]);
244
244
  var D = /* @__PURE__ */ ((e) => (e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e))(D || {});
@@ -338,6 +338,7 @@ const K = t.object({
338
338
  kid: t.string().optional(),
339
339
  team_id: t.string().optional(),
340
340
  realms: t.string().optional(),
341
+ authentication_method: t.string().optional(),
341
342
  client_id: t.string().optional(),
342
343
  client_secret: t.string().optional(),
343
344
  app_secret: t.string().optional(),
@@ -433,6 +434,12 @@ const V = t.enum([
433
434
  redirect_uri: t.string().optional().openapi({
434
435
  description: "The redirect URI associated with the code"
435
436
  }),
437
+ nonce: t.string().optional().openapi({
438
+ description: "The nonce value used for security in OIDC flows"
439
+ }),
440
+ state: t.string().optional().openapi({
441
+ description: "The state parameter used for CSRF protection in OAuth flows"
442
+ }),
436
443
  expires_at: t.string(),
437
444
  used_at: t.string().optional(),
438
445
  user_id: t.string().optional()
@@ -583,7 +590,7 @@ const V = t.enum([
583
590
  style: t.object({ css: t.string().optional() }).optional()
584
591
  }).openapi({
585
592
  description: "Schema for flow-based forms (matches new JSON structure)"
586
- }), vt = t.object({
593
+ }), Tt = t.object({
587
594
  ...s.shape,
588
595
  ...$.shape,
589
596
  id: t.string()
@@ -609,7 +616,7 @@ const V = t.enum([
609
616
  ...l,
610
617
  trigger_id: h,
611
618
  form_id: t.string()
612
- }), Tt = t.union([
619
+ }), vt = t.union([
613
620
  tt,
614
621
  et
615
622
  ]), nt = t.object({
@@ -1003,22 +1010,22 @@ export {
1003
1010
  Ot as customDomainWithTenantIdSchema,
1004
1011
  Mt as emailProviderSchema,
1005
1012
  H as endingSchema,
1006
- T as fieldComponentSchema,
1013
+ v as fieldComponentSchema,
1007
1014
  R as flowNodeSchema,
1008
1015
  n as fontDetailsSchema,
1009
1016
  _t as fontsSchema,
1010
1017
  At as formControlSchema,
1011
1018
  $ as formInsertSchema,
1012
1019
  Z as formNodeComponentDefinition,
1013
- vt as formSchema,
1020
+ Tt as formSchema,
1014
1021
  N as genericComponentSchema,
1015
1022
  P as genericNodeSchema,
1016
- Tt as hookInsertSchema,
1023
+ vt as hookInsertSchema,
1017
1024
  Nt as hookSchema,
1018
1025
  S as identitySchema,
1019
1026
  Ut as jwksKeySchema,
1020
1027
  it as jwksSchema,
1021
- v as legalComponentSchema,
1028
+ T as legalComponentSchema,
1022
1029
  Rt as logSchema,
1023
1030
  at as loginSessionInsertSchema,
1024
1031
  xt as loginSessionSchema,
package/package.json CHANGED
@@ -11,7 +11,7 @@
11
11
  "type": "git",
12
12
  "url": "https://github.com/markusahlstrand/authhero"
13
13
  },
14
- "version": "0.69.0",
14
+ "version": "0.71.0",
15
15
  "files": [
16
16
  "dist"
17
17
  ],