@authhero/adapter-interfaces 4.6.0 → 4.8.0

package/dist/types/adapters/Analytics.d.ts

@@ -1,4 +1,4 @@
-import { AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, SessionRetentionParams, SessionRetentionResponse } from "../types/Analytics";
+import { AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, SessionRetentionParams, SessionRetentionResponse } from "../types/Analytics";
 export interface AnalyticsAdapter {
     /**
      * Run an analytics query for a tenant. The adapter is responsible for
@@ -13,4 +13,13 @@ export interface AnalyticsAdapter {
      * route responds 501 when it is absent.
      */
     sessionRetention?(tenantId: string, params: SessionRetentionParams): Promise<SessionRetentionResponse>;
+    /**
+     * Weekly refresh-token cohort retention, computed from the refresh_tokens
+     * table. Rotating tokens mint a new row per exchange, so rows are grouped
+     * into rotation families before folding: a family's cohort week comes from
+     * its first token's created_at_ts and its last-active week from the max of
+     * last_exchanged_at_ts/created_at_ts across the family. Optional for the
+     * same reason as sessionRetention.
+     */
+    refreshTokenRetention?(tenantId: string, params: RefreshTokenRetentionParams): Promise<RefreshTokenRetentionResponse>;
 }

package/dist/types/types/Analytics.d.ts

@@ -96,6 +96,36 @@ export interface SessionRetentionResponse {
     to: string;
     cohorts: SessionRetentionCohort[];
 }
+export interface RefreshTokenRetentionParams {
+    /** Number of weekly cohorts to include, counting back from the current week */
+    weeks: number;
+    /** Optional filter to one or more client IDs */
+    client_id?: string[];
+}
+export interface RefreshTokenRetentionCohort {
+    /** ISO date (UTC Monday) the cohort week starts on */
+    cohort: string;
+    /**
+     * Refresh-token families created during the cohort week. Rotating tokens
+     * mint a new row on every exchange, so the retention unit is the rotation
+     * family (a non-rotating token is a family of one).
+     */
+    tokens: number;
+    /**
+     * active[k] = token families still active k weeks after the cohort week,
+     * i.e. last exchanged during week k or later. active[0] === tokens. The
+     * array is truncated at the current week.
+     */
+    active: number[];
+}
+export interface RefreshTokenRetentionResponse {
+    interval: "week";
+    /** Inclusive lower bound of the first cohort week */
+    from: string;
+    /** Timestamp the query ran at; the last cohort week is still in progress */
+    to: string;
+    cohorts: RefreshTokenRetentionCohort[];
+}
 export declare const sessionRetentionCohortSchema: z.ZodObject<{
     cohort: z.ZodString;
     sessions: z.ZodNumber;
@@ -111,6 +141,21 @@ export declare const sessionRetentionResponseSchema: z.ZodObject<{
         active: z.ZodArray<z.ZodNumber>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+export declare const refreshTokenRetentionCohortSchema: z.ZodObject<{
+    cohort: z.ZodString;
+    tokens: z.ZodNumber;
+    active: z.ZodArray<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const refreshTokenRetentionResponseSchema: z.ZodObject<{
+    interval: z.ZodLiteral<"week">;
+    from: z.ZodString;
+    to: z.ZodString;
+    cohorts: z.ZodArray<z.ZodObject<{
+        cohort: z.ZodString;
+        tokens: z.ZodNumber;
+        active: z.ZodArray<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export declare const analyticsColumnMetaSchema: z.ZodObject<{
     name: z.ZodString;
     type: z.ZodString;

package/dist/types/types/Connection.d.ts

@@ -9,6 +9,9 @@ export declare const connectionOptionsSchema: z.ZodObject<{
     client_secret: z.ZodOptional<z.ZodString>;
     app_secret: z.ZodOptional<z.ZodString>;
     scope: z.ZodOptional<z.ZodString>;
+    client_secret_hint: z.ZodOptional<z.ZodString>;
+    app_secret_hint: z.ZodOptional<z.ZodString>;
+    twilio_token_hint: z.ZodOptional<z.ZodString>;
     authorization_endpoint: z.ZodOptional<z.ZodString>;
     token_endpoint: z.ZodOptional<z.ZodString>;
     userinfo_endpoint: z.ZodOptional<z.ZodString>;
@@ -55,6 +58,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
         userinfo_endpoint: z.ZodOptional<z.ZodString>;
         client_id: z.ZodOptional<z.ZodString>;
         client_secret: z.ZodOptional<z.ZodString>;
+        client_secret_hint: z.ZodOptional<z.ZodString>;
         realm: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     attributes: z.ZodOptional<z.ZodObject<{
@@ -160,6 +164,9 @@ export declare const connectionInsertSchema: z.ZodObject<{
         client_secret: z.ZodOptional<z.ZodString>;
         app_secret: z.ZodOptional<z.ZodString>;
         scope: z.ZodOptional<z.ZodString>;
+        client_secret_hint: z.ZodOptional<z.ZodString>;
+        app_secret_hint: z.ZodOptional<z.ZodString>;
+        twilio_token_hint: z.ZodOptional<z.ZodString>;
         authorization_endpoint: z.ZodOptional<z.ZodString>;
         token_endpoint: z.ZodOptional<z.ZodString>;
         userinfo_endpoint: z.ZodOptional<z.ZodString>;
@@ -206,6 +213,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
             userinfo_endpoint: z.ZodOptional<z.ZodString>;
             client_id: z.ZodOptional<z.ZodString>;
             client_secret: z.ZodOptional<z.ZodString>;
+            client_secret_hint: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
         attributes: z.ZodOptional<z.ZodObject<{
@@ -322,6 +330,9 @@ export declare const connectionSchema: z.ZodObject<{
         client_secret: z.ZodOptional<z.ZodString>;
         app_secret: z.ZodOptional<z.ZodString>;
         scope: z.ZodOptional<z.ZodString>;
+        client_secret_hint: z.ZodOptional<z.ZodString>;
+        app_secret_hint: z.ZodOptional<z.ZodString>;
+        twilio_token_hint: z.ZodOptional<z.ZodString>;
         authorization_endpoint: z.ZodOptional<z.ZodString>;
         token_endpoint: z.ZodOptional<z.ZodString>;
         userinfo_endpoint: z.ZodOptional<z.ZodString>;
@@ -368,6 +379,7 @@ export declare const connectionSchema: z.ZodObject<{
             userinfo_endpoint: z.ZodOptional<z.ZodString>;
             client_id: z.ZodOptional<z.ZodString>;
             client_secret: z.ZodOptional<z.ZodString>;
+            client_secret_hint: z.ZodOptional<z.ZodString>;
             realm: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
         attributes: z.ZodOptional<z.ZodObject<{

package/dist/types/types/Hook.d.ts

@@ -1,4 +1,15 @@
 import { z } from "@hono/zod-openapi";
+/**
+ * Triggers the given stored hook is allowed to run on, or `undefined` when the
+ * value isn't a recognisable hook.
+ *
+ * Needed because the update path validates a union of *partial* variant
+ * schemas: a body carrying only `trigger_id` matches whichever member has no
+ * other required field left, so the stored hook's type is invisible to the
+ * request validator. Callers re-check the incoming trigger against the row
+ * they're about to modify.
+ */
+export declare function allowedTriggersForHook(hook: unknown): readonly string[] | undefined;
 /**
  * Built-in universal-login pages a page hook can interrupt the login with.
  * The runtime redirects to `/u/{page_id}` (or `/u2/{page_id}`), so this enum
@@ -44,12 +55,7 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>, z.ZodObject<{
     trigger_id: z.ZodEnum<{
-        "pre-user-registration": "pre-user-registration";
-        "post-user-registration": "post-user-registration";
         "post-user-login": "post-user-login";
-        "validate-registration-username": "validate-registration-username";
-        "pre-user-deletion": "pre-user-deletion";
-        "post-user-deletion": "post-user-deletion";
     }>;
     form_id: z.ZodString;
     enabled: z.ZodDefault<z.ZodBoolean>;
@@ -122,12 +128,7 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
     url: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     trigger_id: z.ZodEnum<{
-        "pre-user-registration": "pre-user-registration";
-        "post-user-registration": "post-user-registration";
         "post-user-login": "post-user-login";
-        "validate-registration-username": "validate-registration-username";
-        "pre-user-deletion": "pre-user-deletion";
-        "post-user-deletion": "post-user-deletion";
     }>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;

package/dist/types/utils/session-retention.d.ts

@@ -1,4 +1,4 @@
-import { SessionRetentionResponse } from "../types/Analytics";
+import { RefreshTokenRetentionResponse, SessionRetentionResponse } from "../types/Analytics";
 export declare const WEEK_MS: number;
 /**
  * The Unix epoch (1970-01-01) was a Thursday; adding 3 days before dividing
@@ -30,3 +30,9 @@ export interface SessionRetentionRawRow {
  * enough to reconstruct the whole retention triangle.
  */
 export declare function buildSessionRetention(rows: SessionRetentionRawRow[], weeks: number, now?: number): SessionRetentionResponse;
+/**
+ * Same fold as {@link buildSessionRetention}, but the rows count refresh-token
+ * families (created-week = the family's first token, used-week = its last
+ * exchange) and the per-cohort total is reported as `tokens`.
+ */
+export declare function buildRefreshTokenRetention(rows: SessionRetentionRawRow[], weeks: number, now?: number): RefreshTokenRetentionResponse;

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "4.6.0",
+  "version": "4.8.0",
   "files": [
     "dist"
   ],