@authhero/adapter-interfaces 1.7.0 → 1.9.0

package/dist/adapter-interfaces.d.ts

@@ -3091,6 +3091,13 @@ export declare const clientInsertSchema: z.ZodObject<{
 	]>>;
 	par_request_expiry: z.ZodOptional<z.ZodNumber>;
 	token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	owner_user_id: z.ZodOptional<z.ZodString>;
+	registration_type: z.ZodOptional<z.ZodEnum<[
+		"manual",
+		"open_dcr",
+		"iat_dcr"
+	]>>;
+	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	client_id: string;
@@ -3140,6 +3147,9 @@ export declare const clientInsertSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }, {
 	name: string;
 	client_id: string;
@@ -3189,6 +3199,9 @@ export declare const clientInsertSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }>;
 export type ClientInsert = z.input<typeof clientInsertSchema>;
 export declare const clientSchema: z.ZodObject<{
@@ -3284,6 +3297,13 @@ export declare const clientSchema: z.ZodObject<{
 	]>>;
 	par_request_expiry: z.ZodOptional<z.ZodNumber>;
 	token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	owner_user_id: z.ZodOptional<z.ZodString>;
+	registration_type: z.ZodOptional<z.ZodEnum<[
+		"manual",
+		"open_dcr",
+		"iat_dcr"
+	]>>;
+	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -3337,6 +3357,9 @@ export declare const clientSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -3388,6 +3411,9 @@ export declare const clientSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }>;
 export type Client = z.infer<typeof clientSchema>;
 export declare const clientGrantInsertSchema: z.ZodObject<{
@@ -3516,6 +3542,84 @@ export declare const clientGrantListSchema: z.ZodArray<z.ZodObject<{
 	authorization_details_types?: string[] | undefined;
 }>, "many">;
 export type ClientGrantList = z.infer<typeof clientGrantListSchema>;
+export declare const clientRegistrationTokenTypeSchema: z.ZodEnum<[
+	"iat",
+	"rat"
+]>;
+export type ClientRegistrationTokenType = z.infer<typeof clientRegistrationTokenTypeSchema>;
+export declare const clientRegistrationTokenInsertSchema: z.ZodObject<{
+	id: z.ZodString;
+	token_hash: z.ZodString;
+	type: z.ZodEnum<[
+		"iat",
+		"rat"
+	]>;
+	client_id: z.ZodOptional<z.ZodString>;
+	sub: z.ZodOptional<z.ZodString>;
+	constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+	single_use: z.ZodDefault<z.ZodBoolean>;
+	expires_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	single_use: boolean;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	expires_at?: string | undefined;
+}, {
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	single_use?: boolean | undefined;
+	expires_at?: string | undefined;
+}>;
+export type ClientRegistrationTokenInsert = z.infer<typeof clientRegistrationTokenInsertSchema>;
+export declare const clientRegistrationTokenSchema: z.ZodObject<{
+	id: z.ZodString;
+	token_hash: z.ZodString;
+	type: z.ZodEnum<[
+		"iat",
+		"rat"
+	]>;
+	client_id: z.ZodOptional<z.ZodString>;
+	sub: z.ZodOptional<z.ZodString>;
+	constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+	single_use: z.ZodDefault<z.ZodBoolean>;
+	expires_at: z.ZodOptional<z.ZodString>;
+	created_at: z.ZodString;
+	used_at: z.ZodOptional<z.ZodString>;
+	revoked_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	created_at: string;
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	single_use: boolean;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	expires_at?: string | undefined;
+	used_at?: string | undefined;
+	revoked_at?: string | undefined;
+}, {
+	created_at: string;
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	single_use?: boolean | undefined;
+	expires_at?: string | undefined;
+	used_at?: string | undefined;
+	revoked_at?: string | undefined;
+}>;
+export type ClientRegistrationToken = z.infer<typeof clientRegistrationTokenSchema>;
 /**
  * Types for Auth0 Form Flow components
  * Based on the actual structure used by Auth0 forms API
@@ -11372,12 +11476,13 @@ export declare const codeInsertSchema: z.ZodObject<{
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11385,14 +11490,14 @@ export declare const codeInsertSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }, {
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11400,7 +11505,6 @@ export declare const codeInsertSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }>;
 export type CodeInsert = z.infer<typeof codeInsertSchema>;
 export declare const codeSchema: z.ZodObject<{
@@ -11432,12 +11536,13 @@ export declare const codeSchema: z.ZodObject<{
 	user_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	created_at: string;
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11445,15 +11550,15 @@ export declare const codeSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }, {
 	created_at: string;
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11461,7 +11566,6 @@ export declare const codeSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }>;
 export type Code = z.infer<typeof codeSchema>;
 export declare const connectionOptionsSchema: z.ZodObject<{
@@ -42924,7 +43028,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	userinfo_endpoint: z.ZodString;
 	mfa_challenge_endpoint: z.ZodString;
 	jwks_uri: z.ZodString;
-	registration_endpoint: z.ZodString;
+	registration_endpoint: z.ZodOptional<z.ZodString>;
 	revocation_endpoint: z.ZodString;
 	scopes_supported: z.ZodArray<z.ZodString, "many">;
 	response_types_supported: z.ZodArray<z.ZodString, "many">;
@@ -42945,7 +43049,6 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	issuer: string;
 	device_authorization_endpoint: string;
 	mfa_challenge_endpoint: string;
-	registration_endpoint: string;
 	revocation_endpoint: string;
 	scopes_supported: string[];
 	response_types_supported: string[];
@@ -42958,6 +43061,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_uri_parameter_supported: boolean;
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
+	registration_endpoint?: string | undefined;
 }, {
 	authorization_endpoint: string;
 	token_endpoint: string;
@@ -42966,7 +43070,6 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	issuer: string;
 	device_authorization_endpoint: string;
 	mfa_challenge_endpoint: string;
-	registration_endpoint: string;
 	revocation_endpoint: string;
 	scopes_supported: string[];
 	response_types_supported: string[];
@@ -42979,6 +43082,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_uri_parameter_supported: boolean;
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
+	registration_endpoint?: string | undefined;
 }>;
 export interface ListParams {
 	page?: number;
@@ -43115,8 +43219,8 @@ export declare const loginSessionInsertSchema: z.ZodObject<{
 	}>>;
 	authenticated_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-	state: LoginSessionState;
 	expires_at: string;
+	state: LoginSessionState;
 	csrf_token: string;
 	authParams: {
 		client_id: string;
@@ -43284,8 +43388,8 @@ export declare const loginSessionSchema: z.ZodObject<{
 	created_at: string;
 	updated_at: string;
 	id: string;
-	state: LoginSessionState;
 	expires_at: string;
+	state: LoginSessionState;
 	csrf_token: string;
 	authParams: {
 		client_id: string;
@@ -44148,6 +44252,10 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections: z.ZodOptional<z.ZodBoolean>;
 		enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -44182,6 +44290,10 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44216,6 +44328,10 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44491,6 +44607,10 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44615,6 +44735,10 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44751,6 +44875,10 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections: z.ZodOptional<z.ZodBoolean>;
 		enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -44785,6 +44913,10 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44819,6 +44951,10 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -45098,6 +45234,10 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -45224,6 +45364,10 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
+		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -48750,6 +48894,7 @@ export interface IdentifierConfig {
  *   options.attributes.username.validation.{min_length,max_length}
  */
 export declare function getConnectionIdentifierConfig(connection: ConnectionLike | null | undefined): IdentifierConfig;
+export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
 export interface ListActionsResponse extends Totals {
 	actions: Action[];
 }
@@ -48863,6 +49008,16 @@ export interface ClientGrantsAdapter {
 	update(tenant_id: string, id: string, clientGrant: Partial<ClientGrantInsert>): Promise<boolean>;
 	remove(tenant_id: string, id: string): Promise<boolean>;
 }
+export interface ClientRegistrationTokensAdapter {
+	create: (tenant_id: string, token: ClientRegistrationTokenInsert) => Promise<ClientRegistrationToken>;
+	get: (tenant_id: string, id: string) => Promise<ClientRegistrationToken | null>;
+	getByHash: (tenant_id: string, token_hash: string) => Promise<ClientRegistrationToken | null>;
+	listByClient: (tenant_id: string, client_id: string) => Promise<ClientRegistrationToken[]>;
+	markUsed: (tenant_id: string, id: string, used_at: string) => Promise<boolean>;
+	revoke: (tenant_id: string, id: string, revoked_at: string) => Promise<boolean>;
+	revokeByClient: (tenant_id: string, client_id: string, revoked_at: string) => Promise<number>;
+	remove: (tenant_id: string, id: string) => Promise<boolean>;
+}
 export interface ListCodesResponse extends Totals {
 	codes: Code[];
 }
@@ -49325,6 +49480,7 @@ export interface DataAdapters {
 	clients: ClientsAdapter;
 	clientConnections: ClientConnectionsAdapter;
 	clientGrants: ClientGrantsAdapter;
+	clientRegistrationTokens?: ClientRegistrationTokensAdapter;
 	codes: CodesAdapter;
 	connections: ConnectionsAdapter;
 	customDomains: CustomDomainsAdapter;