@authhero/saml 0.5.4 → 0.5.5

package/dist/saml.mjs

@@ -6488,21 +6488,32 @@ e.object({
 	cohorts: e.array(La)
 });
 var Ra = e.object({
+	cohort: e.string(),
+	tokens: e.number(),
+	active: e.array(e.number())
+});
+e.object({
+	interval: e.literal("week"),
+	from: e.string(),
+	to: e.string(),
+	cohorts: e.array(Ra)
+});
+var za = e.object({
 	name: e.string(),
 	type: e.string()
-}), za = e.object({
+}), Ba = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(Ra),
+	meta: e.array(za),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: za.optional()
+	statistics: Ba.optional()
 });
-var Ba = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Va = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var Va = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ha = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -6510,11 +6521,11 @@ var Ba = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: Ba,
+	prompt: Va,
 	language: e.string(),
-	custom_text: Va
+	custom_text: Ha
 });
-var Ha = e.enum([
+var Ua = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -6522,9 +6533,9 @@ var Ha = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), Ua = e.object({
+]), Wa = e.object({
 	user_id: e.string(),
-	type: Ha,
+	type: Ua,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -6535,7 +6546,7 @@ var Ha = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function Wa(t, n) {
+function Ga(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -6558,51 +6569,51 @@ function Wa(t, n) {
 		path: ["public_key"]
 	}));
 }
-Ua.superRefine(Wa), Ua.extend({
+Wa.superRefine(Ga), Wa.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(Wa), e.object({
+}).superRefine(Ga), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-function Ga(e) {
+function Ka(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
-var Ka = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", qa = (e = 21) => {
+var qa = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ja = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Ka[n[e] & 63];
+	for (; e--;) t += qa[n[e] & 63];
 	return t;
 };
 //#endregion
 //#region src/helpers.ts
-async function Ja(e) {
+async function Ya(e) {
 	let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
 	return new Uint8Array(await new Response(r).arrayBuffer());
 }
-async function Ya(e) {
-	let t = Ga(e.replace(/ /g, "+"));
+async function Xa(e) {
+	let t = Ka(e.replace(/ /g, "+"));
 	try {
-		let e = await Ja(t);
+		let e = await Ya(t);
 		return new TextDecoder().decode(e);
 	} catch (e) {
 		return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
 	}
 }
-async function Xa(e) {
-	let t = await Ya(e), n = new an({
+async function Za(e) {
+	let t = await Xa(e), n = new an({
 		attributeNamePrefix: "@_",
 		alwaysCreateTextNode: !0,
 		ignoreAttributes: !1
 	}).parse(t);
 	return r.parse(n);
 }
-function Za(e) {
+function Qa(e) {
 	let t = e.certificates.map((e) => ({
 		"@_use": "signing",
 		KeyInfo: {
@@ -6676,8 +6687,8 @@ function Za(e) {
 		attributeNamePrefix: "@_"
 	}).build(n);
 }
-async function Qa(e, t) {
-	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${qa()}`, s = e.assertionId || `_${qa()}`, c = [{
+async function $a(e, t) {
+	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Ja()}`, s = e.assertionId || `_${Ja()}`, c = [{
 		"samlp:Response": [
 			{ "saml:Issuer": [{ "#text": e.issuer }] },
 			{ "samlp:Status": [{
@@ -6858,7 +6869,7 @@ async function Qa(e, t) {
 }
 //#endregion
 //#region src/signers/local.ts
-var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w3.org/2001/04/xmlenc#sha256", to = "http://www.w3.org/2001/10/xml-exc-c14n#", no = class {
+var eo = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", to = "http://www.w3.org/2001/04/xmlenc#sha256", no = "http://www.w3.org/2001/10/xml-exc-c14n#", ro = class {
 	async signSAML(e, t, n) {
 		try {
 			let r = await import("xml-crypto"), i = r.SignedXml || r.default?.SignedXml;
@@ -6867,11 +6878,11 @@ var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w
 				privateKey: t,
 				publicCert: n
 			});
-			a.canonicalizationAlgorithm = to, a.addReference({
+			a.canonicalizationAlgorithm = no, a.addReference({
 				xpath: "(/*[local-name()='Response']/*[local-name()='Assertion'])[1]",
-				digestAlgorithm: eo,
-				transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", to]
-			}), a.signatureAlgorithm = $a;
+				digestAlgorithm: to,
+				transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", no]
+			}), a.signatureAlgorithm = eo;
 			let o = n.replace(/-----BEGIN CERTIFICATE-----|-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
 			return a.keyInfoProvider = { getKeyInfo: () => `<X509Data><X509Certificate>${o}</X509Certificate></X509Data>` }, a.computeSignature(e, { location: {
 				reference: "/*[local-name()='Response']/*[local-name()='Assertion']/*[local-name()='Issuer']",
@@ -6881,7 +6892,7 @@ var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w
 			throw Error(`Failed to sign SAML locally. Make sure xml-crypto is installed. Error: ${e}`);
 		}
 	}
-}, ro = class {
+}, io = class {
 	signUrl;
 	constructor(e) {
 		this.signUrl = e;
@@ -6901,4 +6912,4 @@ var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w
 	}
 };
 //#endregion
-export { ro as HttpSamlSigner, no as LocalSamlSigner, Za as createSamlMetadata, Qa as createSamlResponse, s as dsSignatureSchema, Ya as inflateDecompress, Ja as inflateRaw, Xa as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
+export { io as HttpSamlSigner, ro as LocalSamlSigner, Qa as createSamlMetadata, $a as createSamlResponse, s as dsSignatureSchema, Xa as inflateDecompress, Ya as inflateRaw, Za as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };