@authhero/adapter-interfaces 3.10.0 → 3.12.0

package/dist/adapter-interfaces.d.ts

@@ -11143,6 +11143,46 @@ declare function encodeBase64UrlString(input: string): string;
 /** Decode a base64url string produced from UTF-8 text back to that string. */
 declare function decodeBase64UrlString(input: string): string;
 
+/**
+ * Standard base64 (RFC 4648 §4), the canonical implementation for the
+ * AuthHero packages (see base64url.ts for the URL-safe variant). Replaces
+ * the `oslo/encoding` dependency we are migrating away from.
+ *
+ * Encoding emits padding ("=") to match the conventional wire format
+ * (PEM bodies, `openssl rand -base64` keys). Decoding is lenient and
+ * accepts input with or without padding.
+ */
+/** Encode raw bytes as a padded standard-base64 string. */
+declare function encodeBase64(bytes: Uint8Array): string;
+/** Decode a standard-base64 string (with or without padding) to raw bytes. */
+declare function decodeBase64(input: string): Uint8Array;
+
+/**
+ * Base32 (RFC 4648 §6, uppercase alphabet), the canonical implementation
+ * for the AuthHero packages. Replaces the `oslo/encoding` dependency we
+ * are migrating away from.
+ *
+ * The primary consumer is TOTP secret handling (RFC 6238 secrets are
+ * conventionally shared as unpadded base32). Encoding is padding-free;
+ * decoding is lenient and accepts input with or without padding.
+ */
+/** Encode raw bytes as a padding-free base32 string. */
+declare function encodeBase32(bytes: Uint8Array): string;
+/** Decode a base32 string (with or without padding, case-insensitive)
+ * back to raw bytes. Throws on non-canonical input: characters outside
+ * the alphabet, impossible unpadded lengths, or non-zero trailing bits —
+ * so distinct malformed strings can never normalize to the same bytes. */
+declare function decodeBase32(input: string): Uint8Array;
+
+/**
+ * Lowercase hex encoding, the canonical implementation for the AuthHero
+ * packages. Replaces the `oslo/encoding` dependency we are migrating
+ * away from.
+ */
+/** Encode bytes as a lowercase hex string. Accepts an ArrayBuffer so
+ * Web Crypto digest/thumbprint results can be passed directly. */
+declare function encodeHex(data: Uint8Array | ArrayBuffer): string;
+
 interface CursorPayload {
     /**
      * Value of the sort column on the last row of the previous page. `null` when
@@ -11151,6 +11191,13 @@ interface CursorPayload {
     s?: string | number | null;
     /** Id of the last row of the previous page — the unique tiebreaker. */
     i: string;
+    /**
+     * Sort spec the cursor was minted under (e.g. `date:desc`). Set by endpoints
+     * that honor a caller-chosen sort in checkpoint mode, so a token replayed
+     * with a different sort is rejected instead of silently returning pages from
+     * the wrong position. Absent on fixed-sort endpoints.
+     */
+    k?: string;
 }
 /**
  * Encode a keyset position into an opaque cursor token suitable for returning
@@ -11164,6 +11211,13 @@ declare function encodeCursor(payload: CursorPayload): string;
  */
 declare function decodeCursor(token: string): CursorPayload | null;
 
+/**
+ * Shared pieces of the Lucene-style `q` filter handling. The SQL generation
+ * itself is ORM-specific and lives in each adapter; what is shared here is
+ * the query-string sanitization that enforces the tenant boundary.
+ */
+declare function sanitizeLuceneQuery(query: string, allowedFields: string[]): string;
+
 interface ListActionsResponse extends Totals {
     actions: Action[];
 }
@@ -12241,5 +12295,5 @@ interface DataAdapters {
     };
 }
 
-export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, NodeType, RedirectTargetEnum, Strategy, StrategyType, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase64Url, encodeBase64UrlString, encodeCursor, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, screenLinkSchema, sessionInsertSchema, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, verificationMethodsSchema, widgetComponentSchema, widgetSchema };
+export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, NodeType, RedirectTargetEnum, Strategy, StrategyType, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, screenLinkSchema, sessionInsertSchema, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, verificationMethodsSchema, widgetComponentSchema, widgetSchema };
 export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };