@authhero/saml 0.5.10 → 0.5.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core.cjs +1 -1
- package/dist/core.mjs +124 -88
- package/dist/saml.cjs +1 -1
- package/dist/saml.mjs +129 -93
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/package.json +2 -2
package/dist/saml.mjs
CHANGED
|
@@ -5902,14 +5902,15 @@ var ca = e.enum([
|
|
|
5902
5902
|
"seed",
|
|
5903
5903
|
"upgrade",
|
|
5904
5904
|
"backup",
|
|
5905
|
-
"deprovision"
|
|
5905
|
+
"deprovision",
|
|
5906
|
+
"users_import"
|
|
5906
5907
|
]), la = e.enum([
|
|
5907
5908
|
"pending",
|
|
5908
5909
|
"running",
|
|
5909
5910
|
"succeeded",
|
|
5910
5911
|
"failed",
|
|
5911
5912
|
"cancelled"
|
|
5912
|
-
]), ua = e.
|
|
5913
|
+
]), ua = e.string().max(64);
|
|
5913
5914
|
e.object({
|
|
5914
5915
|
tenant_id: e.string().max(255).nullable().default(null),
|
|
5915
5916
|
rollout_id: e.string().max(255).nullable().optional(),
|
|
@@ -5918,12 +5919,16 @@ e.object({
|
|
|
5918
5919
|
engine_instance_id: e.string().max(100).nullable().optional(),
|
|
5919
5920
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5920
5921
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5921
|
-
initiated_by: e.string().max(255).nullable().optional()
|
|
5922
|
+
initiated_by: e.string().max(255).nullable().optional(),
|
|
5923
|
+
input: e.record(e.string(), e.unknown()).nullable().optional()
|
|
5922
5924
|
}).extend({
|
|
5923
5925
|
id: e.string(),
|
|
5924
5926
|
status: la,
|
|
5925
5927
|
current_step: e.string().max(255).nullable().optional(),
|
|
5926
5928
|
error: e.string().nullable().optional(),
|
|
5929
|
+
result: e.record(e.string(), e.unknown()).nullable().optional(),
|
|
5930
|
+
claimed_by: e.string().max(255).nullable().optional(),
|
|
5931
|
+
claim_expires_at: e.string().nullable().optional(),
|
|
5927
5932
|
created_at: e.string(),
|
|
5928
5933
|
updated_at: e.string(),
|
|
5929
5934
|
finished_at: e.string().nullable().optional()
|
|
@@ -5934,6 +5939,9 @@ e.object({
|
|
|
5934
5939
|
target_worker_version: !0,
|
|
5935
5940
|
target_database_version: !0,
|
|
5936
5941
|
error: !0,
|
|
5942
|
+
result: !0,
|
|
5943
|
+
claimed_by: !0,
|
|
5944
|
+
claim_expires_at: !0,
|
|
5937
5945
|
finished_at: !0
|
|
5938
5946
|
}).partial();
|
|
5939
5947
|
var da = e.enum([
|
|
@@ -5955,10 +5963,38 @@ e.object({
|
|
|
5955
5963
|
created_at: e.string()
|
|
5956
5964
|
});
|
|
5957
5965
|
var fa = e.enum([
|
|
5966
|
+
"pending",
|
|
5967
|
+
"inserted",
|
|
5968
|
+
"updated",
|
|
5969
|
+
"failed",
|
|
5970
|
+
"skipped"
|
|
5971
|
+
]);
|
|
5972
|
+
e.object({
|
|
5973
|
+
operation_id: e.string().max(255),
|
|
5974
|
+
seq: e.number().int().min(0),
|
|
5975
|
+
payload: e.record(e.string(), e.unknown()),
|
|
5976
|
+
status: fa.default("pending"),
|
|
5977
|
+
error_code: e.string().max(64).nullable().optional(),
|
|
5978
|
+
error_message: e.string().nullable().optional(),
|
|
5979
|
+
error_path: e.string().max(255).nullable().optional(),
|
|
5980
|
+
entity_id: e.string().max(255).nullable().optional()
|
|
5981
|
+
}).extend({
|
|
5982
|
+
status: fa,
|
|
5983
|
+
created_at: e.string(),
|
|
5984
|
+
updated_at: e.string()
|
|
5985
|
+
}), e.object({
|
|
5986
|
+
seq: e.number().int().min(0),
|
|
5987
|
+
status: fa,
|
|
5988
|
+
error_code: e.string().max(64).nullable().optional(),
|
|
5989
|
+
error_message: e.string().nullable().optional(),
|
|
5990
|
+
error_path: e.string().max(255).nullable().optional(),
|
|
5991
|
+
entity_id: e.string().max(255).nullable().optional()
|
|
5992
|
+
});
|
|
5993
|
+
var pa = e.enum([
|
|
5958
5994
|
"upgrade",
|
|
5959
5995
|
"reseed",
|
|
5960
5996
|
"backup"
|
|
5961
|
-
]),
|
|
5997
|
+
]), ma = e.enum([
|
|
5962
5998
|
"pending",
|
|
5963
5999
|
"canary",
|
|
5964
6000
|
"rolling",
|
|
@@ -5967,7 +6003,7 @@ var fa = e.enum([
|
|
|
5967
6003
|
"failed"
|
|
5968
6004
|
]);
|
|
5969
6005
|
e.object({
|
|
5970
|
-
kind:
|
|
6006
|
+
kind: pa,
|
|
5971
6007
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5972
6008
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5973
6009
|
wave_size: e.number().int().min(1).default(10),
|
|
@@ -5976,7 +6012,7 @@ e.object({
|
|
|
5976
6012
|
initiated_by: e.string().max(255).nullable().optional()
|
|
5977
6013
|
}).extend({
|
|
5978
6014
|
id: e.string(),
|
|
5979
|
-
status:
|
|
6015
|
+
status: ma,
|
|
5980
6016
|
created_at: e.string(),
|
|
5981
6017
|
updated_at: e.string(),
|
|
5982
6018
|
finished_at: e.string().nullable().optional()
|
|
@@ -5998,7 +6034,7 @@ e.object({
|
|
|
5998
6034
|
code: e.string(),
|
|
5999
6035
|
state: e.string().optional()
|
|
6000
6036
|
});
|
|
6001
|
-
var
|
|
6037
|
+
var ha = e.object({
|
|
6002
6038
|
button_border_radius: e.number(),
|
|
6003
6039
|
button_border_weight: e.number(),
|
|
6004
6040
|
buttons_style: e.enum([
|
|
@@ -6016,7 +6052,7 @@ var ma = e.object({
|
|
|
6016
6052
|
show_widget_shadow: e.boolean(),
|
|
6017
6053
|
widget_border_weight: e.number(),
|
|
6018
6054
|
widget_corner_radius: e.number()
|
|
6019
|
-
}),
|
|
6055
|
+
}), ga = e.object({
|
|
6020
6056
|
base_focus_color: e.string(),
|
|
6021
6057
|
base_hover_color: e.string(),
|
|
6022
6058
|
body_text: e.string(),
|
|
@@ -6043,7 +6079,7 @@ var ma = e.object({
|
|
|
6043
6079
|
}), $ = e.object({
|
|
6044
6080
|
bold: e.boolean(),
|
|
6045
6081
|
size: e.number()
|
|
6046
|
-
}),
|
|
6082
|
+
}), _a = e.object({
|
|
6047
6083
|
body_text: $,
|
|
6048
6084
|
buttons_text: $,
|
|
6049
6085
|
font_url: e.string(),
|
|
@@ -6053,7 +6089,7 @@ var ma = e.object({
|
|
|
6053
6089
|
reference_text_size: e.number(),
|
|
6054
6090
|
subtitle: $,
|
|
6055
6091
|
title: $
|
|
6056
|
-
}),
|
|
6092
|
+
}), va = e.object({
|
|
6057
6093
|
background_color: e.string(),
|
|
6058
6094
|
background_image_url: e.string(),
|
|
6059
6095
|
page_layout: e.enum([
|
|
@@ -6066,7 +6102,7 @@ var ma = e.object({
|
|
|
6066
6102
|
"chip",
|
|
6067
6103
|
"none"
|
|
6068
6104
|
]).optional()
|
|
6069
|
-
}),
|
|
6105
|
+
}), ya = e.object({
|
|
6070
6106
|
header_text_alignment: e.enum([
|
|
6071
6107
|
"center",
|
|
6072
6108
|
"left",
|
|
@@ -6083,12 +6119,12 @@ var ma = e.object({
|
|
|
6083
6119
|
social_buttons_layout: e.enum(["bottom", "top"])
|
|
6084
6120
|
});
|
|
6085
6121
|
e.object({
|
|
6086
|
-
borders:
|
|
6087
|
-
colors:
|
|
6122
|
+
borders: ha,
|
|
6123
|
+
colors: ga,
|
|
6088
6124
|
displayName: e.string(),
|
|
6089
|
-
fonts:
|
|
6090
|
-
page_background:
|
|
6091
|
-
widget:
|
|
6125
|
+
fonts: _a,
|
|
6126
|
+
page_background: va,
|
|
6127
|
+
widget: ya
|
|
6092
6128
|
}).extend({ themeId: e.string() }), e.object({
|
|
6093
6129
|
universal_login_experience: e.enum(["new", "classic"]).default("new"),
|
|
6094
6130
|
identifier_first: e.boolean().default(!0),
|
|
@@ -6096,44 +6132,44 @@ e.object({
|
|
|
6096
6132
|
show_last_used_connection: e.boolean().default(!1),
|
|
6097
6133
|
webauthn_platform_first_factor: e.boolean()
|
|
6098
6134
|
});
|
|
6099
|
-
var
|
|
6135
|
+
var ba = e.object({
|
|
6100
6136
|
hosts: e.array(e.string()).optional(),
|
|
6101
6137
|
methods: e.array(e.string()).optional(),
|
|
6102
6138
|
path: e.string().default("/*"),
|
|
6103
6139
|
headers: e.record(e.string(), e.string()).optional(),
|
|
6104
6140
|
query: e.record(e.string(), e.string()).optional()
|
|
6105
|
-
}),
|
|
6141
|
+
}), xa = e.object({
|
|
6106
6142
|
type: e.string(),
|
|
6107
6143
|
options: e.record(e.string(), e.unknown()).default({})
|
|
6108
|
-
}),
|
|
6144
|
+
}), Sa = e.object({
|
|
6109
6145
|
id: e.string().optional(),
|
|
6110
6146
|
custom_domain_id: e.string(),
|
|
6111
6147
|
priority: e.number().int().default(100),
|
|
6112
|
-
match:
|
|
6113
|
-
handlers: e.array(
|
|
6148
|
+
match: ba,
|
|
6149
|
+
handlers: e.array(xa).min(1)
|
|
6114
6150
|
});
|
|
6115
|
-
|
|
6151
|
+
Sa.extend({
|
|
6116
6152
|
id: e.string(),
|
|
6117
6153
|
tenant_id: e.string(),
|
|
6118
6154
|
created_at: e.string(),
|
|
6119
6155
|
updated_at: e.string()
|
|
6120
|
-
}),
|
|
6156
|
+
}), Sa.partial().omit({
|
|
6121
6157
|
id: !0,
|
|
6122
6158
|
custom_domain_id: !0
|
|
6123
6159
|
});
|
|
6124
|
-
var
|
|
6160
|
+
var Ca = e.object({
|
|
6125
6161
|
scim: e.string(),
|
|
6126
6162
|
auth0: e.string()
|
|
6127
|
-
}),
|
|
6163
|
+
}), wa = e.object({
|
|
6128
6164
|
connection_id: e.string(),
|
|
6129
6165
|
user_id_attribute: e.string().default("externalId"),
|
|
6130
|
-
mapping: e.array(
|
|
6166
|
+
mapping: e.array(Ca).default([])
|
|
6131
6167
|
});
|
|
6132
6168
|
e.object({
|
|
6133
6169
|
created_at: e.string(),
|
|
6134
6170
|
updated_at: e.string()
|
|
6135
|
-
}).extend(
|
|
6136
|
-
var
|
|
6171
|
+
}).extend(wa.shape);
|
|
6172
|
+
var Ta = e.object({
|
|
6137
6173
|
token_id: e.string(),
|
|
6138
6174
|
connection_id: e.string(),
|
|
6139
6175
|
token_hash: e.string(),
|
|
@@ -6143,20 +6179,20 @@ var wa = e.object({
|
|
|
6143
6179
|
e.object({
|
|
6144
6180
|
created_at: e.string(),
|
|
6145
6181
|
last_used_at: e.string().optional()
|
|
6146
|
-
}).extend(
|
|
6147
|
-
var
|
|
6182
|
+
}).extend(Ta.shape);
|
|
6183
|
+
var Ea = e.object({
|
|
6148
6184
|
connection_id: e.string(),
|
|
6149
6185
|
external_id: e.string(),
|
|
6150
6186
|
user_id: e.string()
|
|
6151
6187
|
});
|
|
6152
|
-
e.object({ created_at: e.string() }).extend(
|
|
6188
|
+
e.object({ created_at: e.string() }).extend(Ea.shape), e.object({
|
|
6153
6189
|
name: e.string(),
|
|
6154
6190
|
enabled: e.boolean().optional().default(!0),
|
|
6155
6191
|
default_from_address: e.string().optional(),
|
|
6156
6192
|
credentials: e.record(e.string(), e.unknown()),
|
|
6157
6193
|
settings: e.object({}).optional()
|
|
6158
6194
|
});
|
|
6159
|
-
var
|
|
6195
|
+
var Da = e.enum([
|
|
6160
6196
|
"verify_email",
|
|
6161
6197
|
"verify_email_by_code",
|
|
6162
6198
|
"reset_email",
|
|
@@ -6171,7 +6207,7 @@ var Ea = e.enum([
|
|
|
6171
6207
|
"user_invitation"
|
|
6172
6208
|
]);
|
|
6173
6209
|
e.object({
|
|
6174
|
-
template:
|
|
6210
|
+
template: Da,
|
|
6175
6211
|
body: e.string(),
|
|
6176
6212
|
from: e.string(),
|
|
6177
6213
|
subject: e.string(),
|
|
@@ -6213,10 +6249,10 @@ e.object({
|
|
|
6213
6249
|
name: e.string(),
|
|
6214
6250
|
options: e.object({})
|
|
6215
6251
|
});
|
|
6216
|
-
var
|
|
6252
|
+
var Oa = e.object({
|
|
6217
6253
|
value: e.string(),
|
|
6218
6254
|
description: e.string().optional()
|
|
6219
|
-
}),
|
|
6255
|
+
}), ka = e.object({
|
|
6220
6256
|
token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
|
|
6221
6257
|
enforce_policies: e.boolean().optional(),
|
|
6222
6258
|
allow_skipping_userinfo: e.boolean().optional(),
|
|
@@ -6224,11 +6260,11 @@ var Da = e.object({
|
|
|
6224
6260
|
persist_client_authorization: e.boolean().optional(),
|
|
6225
6261
|
enable_introspection_endpoint: e.boolean().optional(),
|
|
6226
6262
|
mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
|
|
6227
|
-
}),
|
|
6263
|
+
}), Aa = e.object({
|
|
6228
6264
|
id: e.string().optional(),
|
|
6229
6265
|
name: e.string(),
|
|
6230
6266
|
identifier: e.string(),
|
|
6231
|
-
scopes: e.array(
|
|
6267
|
+
scopes: e.array(Oa).optional(),
|
|
6232
6268
|
signing_alg: e.string().optional(),
|
|
6233
6269
|
signing_secret: e.string().optional(),
|
|
6234
6270
|
token_lifetime: e.number().default(86400),
|
|
@@ -6236,20 +6272,20 @@ var Da = e.object({
|
|
|
6236
6272
|
skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
|
|
6237
6273
|
allow_offline_access: e.boolean().optional(),
|
|
6238
6274
|
verificationKey: e.string().optional(),
|
|
6239
|
-
options:
|
|
6275
|
+
options: ka.optional(),
|
|
6240
6276
|
is_system: e.boolean().optional(),
|
|
6241
6277
|
metadata: e.record(e.string(), e.any()).optional()
|
|
6242
6278
|
}).extend({
|
|
6243
6279
|
created_at: e.string().optional(),
|
|
6244
6280
|
updated_at: e.string().optional()
|
|
6245
6281
|
});
|
|
6246
|
-
e.array(
|
|
6247
|
-
var
|
|
6282
|
+
e.array(Aa);
|
|
6283
|
+
var ja = e.object({
|
|
6248
6284
|
role_id: e.string(),
|
|
6249
6285
|
resource_server_identifier: e.string(),
|
|
6250
6286
|
permission_name: e.string()
|
|
6251
6287
|
}).extend({ created_at: e.string() });
|
|
6252
|
-
e.array(
|
|
6288
|
+
e.array(ja), e.object({
|
|
6253
6289
|
user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
|
|
6254
6290
|
clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
|
|
6255
6291
|
audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
|
|
@@ -6262,7 +6298,7 @@ e.array(Aa), e.object({
|
|
|
6262
6298
|
failed_logins: e.array(e.string()).optional(),
|
|
6263
6299
|
last_password_reset: e.string().optional()
|
|
6264
6300
|
});
|
|
6265
|
-
var
|
|
6301
|
+
var Ma = e.object({
|
|
6266
6302
|
user_id: e.string(),
|
|
6267
6303
|
resource_server_identifier: e.string(),
|
|
6268
6304
|
permission_name: e.string(),
|
|
@@ -6271,8 +6307,8 @@ var ja = e.object({
|
|
|
6271
6307
|
tenant_id: e.string(),
|
|
6272
6308
|
created_at: e.string().optional()
|
|
6273
6309
|
});
|
|
6274
|
-
e.array(
|
|
6275
|
-
var
|
|
6310
|
+
e.array(Ma);
|
|
6311
|
+
var Na = e.object({
|
|
6276
6312
|
user_id: e.string(),
|
|
6277
6313
|
resource_server_identifier: e.string(),
|
|
6278
6314
|
resource_server_name: e.string(),
|
|
@@ -6281,8 +6317,8 @@ var Ma = e.object({
|
|
|
6281
6317
|
created_at: e.string().optional(),
|
|
6282
6318
|
organization_id: e.string().optional()
|
|
6283
6319
|
});
|
|
6284
|
-
e.array(
|
|
6285
|
-
var
|
|
6320
|
+
e.array(Na);
|
|
6321
|
+
var Pa = e.object({
|
|
6286
6322
|
user_id: e.string(),
|
|
6287
6323
|
role_id: e.string(),
|
|
6288
6324
|
organization_id: e.string().optional()
|
|
@@ -6290,8 +6326,8 @@ var Na = e.object({
|
|
|
6290
6326
|
tenant_id: e.string(),
|
|
6291
6327
|
created_at: e.string().optional()
|
|
6292
6328
|
});
|
|
6293
|
-
e.array(
|
|
6294
|
-
var
|
|
6329
|
+
e.array(Pa);
|
|
6330
|
+
var Fa = e.object({
|
|
6295
6331
|
id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
|
|
6296
6332
|
name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
|
|
6297
6333
|
description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
|
|
@@ -6302,19 +6338,19 @@ var Pa = e.object({
|
|
|
6302
6338
|
created_at: e.string().optional(),
|
|
6303
6339
|
updated_at: e.string().optional()
|
|
6304
6340
|
});
|
|
6305
|
-
e.array(
|
|
6306
|
-
var
|
|
6341
|
+
e.array(Fa);
|
|
6342
|
+
var Ia = e.object({
|
|
6307
6343
|
logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
|
|
6308
6344
|
colors: e.object({
|
|
6309
6345
|
primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
|
|
6310
6346
|
page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
|
|
6311
6347
|
}).optional()
|
|
6312
|
-
}).optional(),
|
|
6348
|
+
}).optional(), La = e.object({
|
|
6313
6349
|
connection_id: e.string().openapi({ description: "ID of the connection" }),
|
|
6314
6350
|
assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
|
|
6315
6351
|
show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
|
|
6316
6352
|
is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
|
|
6317
|
-
}),
|
|
6353
|
+
}), Ra = e.object({ client_credentials: e.object({
|
|
6318
6354
|
enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
|
|
6319
6355
|
per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
|
|
6320
6356
|
per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
|
|
@@ -6323,15 +6359,15 @@ e.object({
|
|
|
6323
6359
|
id: e.string().optional(),
|
|
6324
6360
|
name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
|
|
6325
6361
|
display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
|
|
6326
|
-
branding:
|
|
6362
|
+
branding: Ia,
|
|
6327
6363
|
metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
|
|
6328
|
-
enabled_connections: e.array(
|
|
6329
|
-
token_quota:
|
|
6364
|
+
enabled_connections: e.array(La).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
|
|
6365
|
+
token_quota: Ra
|
|
6330
6366
|
}).extend(G.shape).extend({
|
|
6331
6367
|
id: e.string(),
|
|
6332
6368
|
name: e.string().min(1).openapi({ description: "The name of the organization" })
|
|
6333
6369
|
});
|
|
6334
|
-
var
|
|
6370
|
+
var za = e.object({
|
|
6335
6371
|
connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
|
|
6336
6372
|
assign_membership_on_login: e.boolean().optional().default(!1),
|
|
6337
6373
|
show_as_button: e.boolean().optional().default(!0),
|
|
@@ -6344,7 +6380,7 @@ var Ra = e.object({
|
|
|
6344
6380
|
created_at: e.string().optional(),
|
|
6345
6381
|
updated_at: e.string().optional()
|
|
6346
6382
|
});
|
|
6347
|
-
e.array(
|
|
6383
|
+
e.array(za), e.object({
|
|
6348
6384
|
user_id: e.string().openapi({ description: "ID of the user" }),
|
|
6349
6385
|
organization_id: e.string().openapi({ description: "ID of the organization" })
|
|
6350
6386
|
}).extend(G.shape).extend({ id: e.string() }), e.object({
|
|
@@ -6483,7 +6519,7 @@ e.array(Ra), e.object({
|
|
|
6483
6519
|
"passwordless",
|
|
6484
6520
|
"enterprise"
|
|
6485
6521
|
]);
|
|
6486
|
-
var
|
|
6522
|
+
var Ba = e.object({
|
|
6487
6523
|
cohort: e.string(),
|
|
6488
6524
|
sessions: e.number(),
|
|
6489
6525
|
active: e.array(e.number())
|
|
@@ -6492,9 +6528,9 @@ e.object({
|
|
|
6492
6528
|
interval: e.literal("week"),
|
|
6493
6529
|
from: e.string(),
|
|
6494
6530
|
to: e.string(),
|
|
6495
|
-
cohorts: e.array(
|
|
6531
|
+
cohorts: e.array(Ba)
|
|
6496
6532
|
});
|
|
6497
|
-
var
|
|
6533
|
+
var Va = e.object({
|
|
6498
6534
|
cohort: e.string(),
|
|
6499
6535
|
tokens: e.number(),
|
|
6500
6536
|
active: e.array(e.number())
|
|
@@ -6503,24 +6539,24 @@ e.object({
|
|
|
6503
6539
|
interval: e.literal("week"),
|
|
6504
6540
|
from: e.string(),
|
|
6505
6541
|
to: e.string(),
|
|
6506
|
-
cohorts: e.array(
|
|
6542
|
+
cohorts: e.array(Va)
|
|
6507
6543
|
});
|
|
6508
|
-
var
|
|
6544
|
+
var Ha = e.object({
|
|
6509
6545
|
name: e.string(),
|
|
6510
6546
|
type: e.string()
|
|
6511
|
-
}),
|
|
6547
|
+
}), Ua = e.object({
|
|
6512
6548
|
elapsed: e.number(),
|
|
6513
6549
|
rows_read: e.number().optional(),
|
|
6514
6550
|
bytes_read: e.number().optional()
|
|
6515
6551
|
});
|
|
6516
6552
|
e.object({
|
|
6517
|
-
meta: e.array(
|
|
6553
|
+
meta: e.array(Ha),
|
|
6518
6554
|
data: e.array(e.record(e.string(), e.any())),
|
|
6519
6555
|
rows: e.number(),
|
|
6520
6556
|
rows_before_limit_at_least: e.number().optional(),
|
|
6521
|
-
statistics:
|
|
6557
|
+
statistics: Ua.optional()
|
|
6522
6558
|
});
|
|
6523
|
-
var
|
|
6559
|
+
var Wa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ga = e.record(e.string(), e.record(e.string(), e.string())).openapi({
|
|
6524
6560
|
type: "object",
|
|
6525
6561
|
additionalProperties: {
|
|
6526
6562
|
type: "object",
|
|
@@ -6528,11 +6564,11 @@ var Ua = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
|
|
|
6528
6564
|
}
|
|
6529
6565
|
});
|
|
6530
6566
|
e.object({
|
|
6531
|
-
prompt:
|
|
6567
|
+
prompt: Wa,
|
|
6532
6568
|
language: e.string(),
|
|
6533
|
-
custom_text:
|
|
6569
|
+
custom_text: Ga
|
|
6534
6570
|
});
|
|
6535
|
-
var
|
|
6571
|
+
var Ka = e.enum([
|
|
6536
6572
|
"phone",
|
|
6537
6573
|
"totp",
|
|
6538
6574
|
"email",
|
|
@@ -6540,9 +6576,9 @@ var Ga = e.enum([
|
|
|
6540
6576
|
"webauthn-roaming",
|
|
6541
6577
|
"webauthn-platform",
|
|
6542
6578
|
"passkey"
|
|
6543
|
-
]),
|
|
6579
|
+
]), qa = e.object({
|
|
6544
6580
|
user_id: e.string(),
|
|
6545
|
-
type:
|
|
6581
|
+
type: Ka,
|
|
6546
6582
|
phone_number: e.string().optional(),
|
|
6547
6583
|
totp_secret: e.string().optional(),
|
|
6548
6584
|
credential_id: e.string().optional(),
|
|
@@ -6553,7 +6589,7 @@ var Ga = e.enum([
|
|
|
6553
6589
|
friendly_name: e.string().optional(),
|
|
6554
6590
|
confirmed: e.boolean().default(!1)
|
|
6555
6591
|
});
|
|
6556
|
-
function
|
|
6592
|
+
function Ja(t, n) {
|
|
6557
6593
|
t.type === "phone" && !t.phone_number && n.addIssue({
|
|
6558
6594
|
code: e.ZodIssueCode.custom,
|
|
6559
6595
|
message: "phone_number is required when type is 'phone'",
|
|
@@ -6576,51 +6612,51 @@ function qa(t, n) {
|
|
|
6576
6612
|
path: ["public_key"]
|
|
6577
6613
|
}));
|
|
6578
6614
|
}
|
|
6579
|
-
|
|
6615
|
+
qa.superRefine(Ja), qa.extend({
|
|
6580
6616
|
id: e.string(),
|
|
6581
6617
|
created_at: e.string(),
|
|
6582
6618
|
updated_at: e.string()
|
|
6583
|
-
}).superRefine(
|
|
6619
|
+
}).superRefine(Ja), e.object({
|
|
6584
6620
|
id: e.string().optional(),
|
|
6585
6621
|
created_at: e.string().datetime({ offset: !0 }).optional(),
|
|
6586
6622
|
updated_at: e.string().datetime({ offset: !0 }).optional()
|
|
6587
6623
|
});
|
|
6588
|
-
function
|
|
6624
|
+
function Ya(e) {
|
|
6589
6625
|
let t = atob(e), n = new Uint8Array(t.length);
|
|
6590
6626
|
for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
|
|
6591
6627
|
return n;
|
|
6592
6628
|
}
|
|
6593
6629
|
//#endregion
|
|
6594
6630
|
//#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
|
|
6595
|
-
var
|
|
6631
|
+
var Xa = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Za = (e = 21) => {
|
|
6596
6632
|
let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
|
|
6597
|
-
for (; e--;) t +=
|
|
6633
|
+
for (; e--;) t += Xa[n[e] & 63];
|
|
6598
6634
|
return t;
|
|
6599
6635
|
};
|
|
6600
6636
|
//#endregion
|
|
6601
6637
|
//#region src/helpers.ts
|
|
6602
|
-
async function
|
|
6638
|
+
async function Qa(e) {
|
|
6603
6639
|
let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
|
|
6604
6640
|
return new Uint8Array(await new Response(r).arrayBuffer());
|
|
6605
6641
|
}
|
|
6606
|
-
async function
|
|
6607
|
-
let t =
|
|
6642
|
+
async function $a(e) {
|
|
6643
|
+
let t = Ya(e.replace(/ /g, "+"));
|
|
6608
6644
|
try {
|
|
6609
|
-
let e = await
|
|
6645
|
+
let e = await Qa(t);
|
|
6610
6646
|
return new TextDecoder().decode(e);
|
|
6611
6647
|
} catch (e) {
|
|
6612
6648
|
return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
|
|
6613
6649
|
}
|
|
6614
6650
|
}
|
|
6615
|
-
async function
|
|
6616
|
-
let t = await
|
|
6651
|
+
async function eo(e) {
|
|
6652
|
+
let t = await $a(e), n = new tn({
|
|
6617
6653
|
attributeNamePrefix: "@_",
|
|
6618
6654
|
alwaysCreateTextNode: !0,
|
|
6619
6655
|
ignoreAttributes: !1
|
|
6620
6656
|
}).parse(t);
|
|
6621
6657
|
return r.parse(n);
|
|
6622
6658
|
}
|
|
6623
|
-
function
|
|
6659
|
+
function to(e) {
|
|
6624
6660
|
let t = e.certificates.map((e) => ({
|
|
6625
6661
|
"@_use": "signing",
|
|
6626
6662
|
KeyInfo: {
|
|
@@ -6694,8 +6730,8 @@ function eo(e) {
|
|
|
6694
6730
|
attributeNamePrefix: "@_"
|
|
6695
6731
|
}).build(n);
|
|
6696
6732
|
}
|
|
6697
|
-
async function
|
|
6698
|
-
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${
|
|
6733
|
+
async function no(e, t) {
|
|
6734
|
+
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Za()}`, s = e.assertionId || `_${Za()}`, c = [{
|
|
6699
6735
|
"samlp:Response": [
|
|
6700
6736
|
{ "saml:Issuer": [{ "#text": e.issuer }] },
|
|
6701
6737
|
{ "samlp:Status": [{
|
|
@@ -6876,7 +6912,7 @@ async function to(e, t) {
|
|
|
6876
6912
|
}
|
|
6877
6913
|
//#endregion
|
|
6878
6914
|
//#region src/signers/local.ts
|
|
6879
|
-
var
|
|
6915
|
+
var ro = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", io = "http://www.w3.org/2001/04/xmlenc#sha256", ao = "http://www.w3.org/2001/10/xml-exc-c14n#", oo = class {
|
|
6880
6916
|
async signSAML(e, t, n) {
|
|
6881
6917
|
try {
|
|
6882
6918
|
let r = await import("xml-crypto"), i = r.SignedXml || r.default?.SignedXml;
|
|
@@ -6885,11 +6921,11 @@ var no = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", ro = "http://www.w
|
|
|
6885
6921
|
privateKey: t,
|
|
6886
6922
|
publicCert: n
|
|
6887
6923
|
});
|
|
6888
|
-
a.canonicalizationAlgorithm =
|
|
6924
|
+
a.canonicalizationAlgorithm = ao, a.addReference({
|
|
6889
6925
|
xpath: "(/*[local-name()='Response']/*[local-name()='Assertion'])[1]",
|
|
6890
|
-
digestAlgorithm:
|
|
6891
|
-
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature",
|
|
6892
|
-
}), a.signatureAlgorithm =
|
|
6926
|
+
digestAlgorithm: io,
|
|
6927
|
+
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", ao]
|
|
6928
|
+
}), a.signatureAlgorithm = ro;
|
|
6893
6929
|
let o = n.replace(/-----BEGIN CERTIFICATE-----|-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
|
|
6894
6930
|
return a.keyInfoProvider = { getKeyInfo: () => `<X509Data><X509Certificate>${o}</X509Certificate></X509Data>` }, a.computeSignature(e, { location: {
|
|
6895
6931
|
reference: "/*[local-name()='Response']/*[local-name()='Assertion']/*[local-name()='Issuer']",
|
|
@@ -6899,7 +6935,7 @@ var no = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", ro = "http://www.w
|
|
|
6899
6935
|
throw Error(`Failed to sign SAML locally. Make sure xml-crypto is installed. Error: ${e}`);
|
|
6900
6936
|
}
|
|
6901
6937
|
}
|
|
6902
|
-
},
|
|
6938
|
+
}, so = class {
|
|
6903
6939
|
signUrl;
|
|
6904
6940
|
constructor(e) {
|
|
6905
6941
|
this.signUrl = e;
|
|
@@ -6919,4 +6955,4 @@ var no = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", ro = "http://www.w
|
|
|
6919
6955
|
}
|
|
6920
6956
|
};
|
|
6921
6957
|
//#endregion
|
|
6922
|
-
export {
|
|
6958
|
+
export { so as HttpSamlSigner, oo as LocalSamlSigner, to as createSamlMetadata, no as createSamlResponse, s as dsSignatureSchema, $a as inflateDecompress, Qa as inflateRaw, eo as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
|