@authhero/adapter-interfaces 3.11.0 → 4.0.0

package/dist/types/adapters/UserRoles.d.ts

@@ -7,8 +7,27 @@ export interface ListUserRolesResponse {
     limit: number;
     length: number;
 }
+export interface ListRoleUsersResponse {
+    /** Distinct user ids holding the role, ordered by user_id ascending. */
+    userIds: string[];
+    start: number;
+    limit: number;
+    /**
+     * Offset mode: total number of distinct users holding the role.
+     * Checkpoint mode: number of ids in this page (no total is computed).
+     */
+    length: number;
+    /** Opaque checkpoint cursor for the next page; absent on the last page. */
+    next?: string;
+}
 export interface UserRolesAdapter {
     list(tenantId: string, userId: string, params?: ListParams, organizationId?: string): Promise<Role[]>;
+    /**
+     * List the distinct users assigned to a role, across all organization
+     * scopes (a user holding the role in several organizations appears once).
+     * Supports offset (page/per_page) and checkpoint (from/take) pagination.
+     */
+    listUsers(tenantId: string, roleId: string, params?: ListParams): Promise<ListRoleUsersResponse>;
     create(tenantId: string, userId: string, roleId: string, organizationId?: string, options?: CreateOptions): Promise<boolean>;
     remove(tenantId: string, userId: string, roleId: string, organizationId?: string): Promise<boolean>;
 }

package/dist/types/types/Client.d.ts

@@ -44,7 +44,16 @@ export declare const clientInsertSchema: z.ZodObject<{
     connections: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     allowed_logout_urls: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     session_transfer: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-    oidc_logout: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+    oidc_logout: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+        backchannel_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        backchannel_logout_initiators: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<{
+                custom: "custom";
+                all: "all";
+            }>>;
+            selected_initiators: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>>>;
     grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     jwt_configuration: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
     signing_keys: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodAny>>>>;
@@ -168,7 +177,16 @@ export declare const clientSchema: z.ZodObject<{
     connections: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     allowed_logout_urls: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     session_transfer: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-    oidc_logout: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+    oidc_logout: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+        backchannel_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        backchannel_logout_initiators: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<{
+                custom: "custom";
+                all: "all";
+            }>>;
+            selected_initiators: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>>>;
     grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     jwt_configuration: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
     signing_keys: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodAny>>>>;

package/dist/types/types/JWKS.d.ts

@@ -87,4 +87,6 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
     request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
     token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
     client_id_metadata_document_supported: z.ZodOptional<z.ZodBoolean>;
+    backchannel_logout_supported: z.ZodOptional<z.ZodBoolean>;
+    backchannel_logout_session_supported: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/types/utils/base32.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Base32 (RFC 4648 §6, uppercase alphabet), the canonical implementation
+ * for the AuthHero packages. Replaces the `oslo/encoding` dependency we
+ * are migrating away from.
+ *
+ * The primary consumer is TOTP secret handling (RFC 6238 secrets are
+ * conventionally shared as unpadded base32). Encoding is padding-free;
+ * decoding is lenient and accepts input with or without padding.
+ */
+/** Encode raw bytes as a padding-free base32 string. */
+export declare function encodeBase32(bytes: Uint8Array): string;
+/** Decode a base32 string (with or without padding, case-insensitive)
+ * back to raw bytes. Throws on non-canonical input: characters outside
+ * the alphabet, impossible unpadded lengths, or non-zero trailing bits —
+ * so distinct malformed strings can never normalize to the same bytes. */
+export declare function decodeBase32(input: string): Uint8Array;

package/dist/types/utils/base64.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Standard base64 (RFC 4648 §4), the canonical implementation for the
+ * AuthHero packages (see base64url.ts for the URL-safe variant). Replaces
+ * the `oslo/encoding` dependency we are migrating away from.
+ *
+ * Encoding emits padding ("=") to match the conventional wire format
+ * (PEM bodies, `openssl rand -base64` keys). Decoding is lenient and
+ * accepts input with or without padding.
+ */
+/** Encode raw bytes as a padded standard-base64 string. */
+export declare function encodeBase64(bytes: Uint8Array): string;
+/** Decode a standard-base64 string (with or without padding) to raw bytes. */
+export declare function decodeBase64(input: string): Uint8Array;

package/dist/types/utils/hex.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Lowercase hex encoding, the canonical implementation for the AuthHero
+ * packages. Replaces the `oslo/encoding` dependency we are migrating
+ * away from.
+ */
+/** Encode bytes as a lowercase hex string. Accepts an ArrayBuffer so
+ * Web Crypto digest/thumbprint results can be passed directly. */
+export declare function encodeHex(data: Uint8Array | ArrayBuffer): string;

package/dist/types/utils/index.d.ts

@@ -3,5 +3,8 @@ export * from "./passthrough";
 export * from "./connection-attributes";
 export * from "./guards";
 export * from "./base64url";
+export * from "./base64";
+export * from "./base32";
+export * from "./hex";
 export * from "./cursor";
 export * from "./lucene";

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "3.11.0",
+  "version": "4.0.0",
   "files": [
     "dist"
   ],