@axinom/mosaic-user-auth-utils 0.8.31-rc.5 → 0.9.0-rc.0

package/dist/cjs/common/enums.d.ts

@@ -89,6 +89,62 @@ export declare enum CheckOtpResponseCode {
     ERROR = "ERROR",
     SERVICE_CONFIGURATION_ERROR = "SERVICE_CONFIGURATION_ERROR"
 }
+/**
+ * Response code for the Device Authorization request (the device starts the flow).
+ */
+export declare enum DeviceAuthorizationResponseCode {
+    SUCCESS = "SUCCESS",
+    DEVICE_FLOW_NOT_ENABLED = "DEVICE_FLOW_NOT_ENABLED",
+    APPLICATION_NOT_ACTIVE = "APPLICATION_NOT_ACTIVE",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for the Device poll (the device polls until the user approves; on approval it
+ * receives its refresh token).
+ */
+export declare enum DevicePollResponseCode {
+    SUCCESS = "SUCCESS",
+    AUTHORIZATION_PENDING = "AUTHORIZATION_PENDING",
+    SLOW_DOWN = "SLOW_DOWN",
+    ACCESS_DENIED = "ACCESS_DENIED",
+    EXPIRED = "EXPIRED",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for the Device Verification lookup (the activation page reads what a user code authorizes).
+ */
+export declare enum DeviceVerificationResponseCode {
+    SUCCESS = "SUCCESS",
+    NOT_FOUND = "NOT_FOUND",
+    EXPIRED = "EXPIRED",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for Device Approval / Denial (the signed-in user approves or denies a device).
+ */
+export declare enum DeviceApprovalResponseCode {
+    SUCCESS = "SUCCESS",
+    NOT_FOUND = "NOT_FOUND",
+    EXPIRED = "EXPIRED",
+    ALREADY_USED = "ALREADY_USED",
+    ACCESS_TOKEN_EXPIRED = "ACCESS_TOKEN_EXPIRED",
+    NEEDS_LOGIN = "NEEDS_LOGIN",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Lifecycle status of a device authorization record.
+ */
+export declare enum DeviceAuthorizationStatus {
+    PENDING = "PENDING",
+    APPROVED = "APPROVED",
+    DENIED = "DENIED",
+    EXPIRED = "EXPIRED",
+    REDEEMED = "REDEEMED"
+}
 /**
  * IDP Protocol categories
  */

package/dist/cjs/common/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IACnD,WAAW,gBAAgB;IAC3B,kBAAkB,uBAAuB;IACzC,YAAY,iBAAiB;IAC7B,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,4BAA4B;IACtC,OAAO,YAAY;IACnB,sBAAsB,2BAA2B;IACjD,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;CAClD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;;GAGG;AACH,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,wBAAwB,6BAA6B;CACtD;AAED;;GAEG;AACH,oBAAY,0CAA0C;IACpD,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,mCAAmC,wCAAwC;CAC5E"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IACnD,WAAW,gBAAgB;IAC3B,kBAAkB,uBAAuB;IACzC,YAAY,iBAAiB;IAC7B,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,4BAA4B;IACtC,OAAO,YAAY;IACnB,sBAAsB,2BAA2B;IACjD,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;CAClD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;;GAGG;AACH,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;;GAGG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,0BAA0B;IACpC,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,wBAAwB,6BAA6B;CACtD;AAED;;GAEG;AACH,oBAAY,0CAA0C;IACpD,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,mCAAmC,wCAAwC;CAC5E"}

package/dist/cjs/common/enums.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticateEndUserApplicationResponseCode = exports.DecryptNativeCookieResponseCode = exports.IdpProtocol = exports.CheckOtpResponseCode = exports.CompleteUserSignUpResponseCode = exports.UserSignUpResponseCode = exports.ResetPasswordResponseCode = exports.SignInResponseCode = exports.IdpConfigurationResponseCode = exports.SignOutResponseCode = exports.TokenResponseCode = exports.UserAuthErrorCode = void 0;
+exports.AuthenticateEndUserApplicationResponseCode = exports.DecryptNativeCookieResponseCode = exports.IdpProtocol = exports.DeviceAuthorizationStatus = exports.DeviceApprovalResponseCode = exports.DeviceVerificationResponseCode = exports.DevicePollResponseCode = exports.DeviceAuthorizationResponseCode = exports.CheckOtpResponseCode = exports.CompleteUserSignUpResponseCode = exports.UserSignUpResponseCode = exports.ResetPasswordResponseCode = exports.SignInResponseCode = exports.IdpConfigurationResponseCode = exports.SignOutResponseCode = exports.TokenResponseCode = exports.UserAuthErrorCode = void 0;
 /**
  * This is the Error Type that the REST middleware will respond when there's an error
  * from the User Service that does not belong to Token/SignOut or IDPConfiguration responses.
@@ -101,6 +101,67 @@ var CheckOtpResponseCode;
     CheckOtpResponseCode["ERROR"] = "ERROR";
     CheckOtpResponseCode["SERVICE_CONFIGURATION_ERROR"] = "SERVICE_CONFIGURATION_ERROR";
 })(CheckOtpResponseCode || (exports.CheckOtpResponseCode = CheckOtpResponseCode = {}));
+/**
+ * Response code for the Device Authorization request (the device starts the flow).
+ */
+var DeviceAuthorizationResponseCode;
+(function (DeviceAuthorizationResponseCode) {
+    DeviceAuthorizationResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceAuthorizationResponseCode["DEVICE_FLOW_NOT_ENABLED"] = "DEVICE_FLOW_NOT_ENABLED";
+    DeviceAuthorizationResponseCode["APPLICATION_NOT_ACTIVE"] = "APPLICATION_NOT_ACTIVE";
+    DeviceAuthorizationResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceAuthorizationResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceAuthorizationResponseCode || (exports.DeviceAuthorizationResponseCode = DeviceAuthorizationResponseCode = {}));
+/**
+ * Response code for the Device poll (the device polls until the user approves; on approval it
+ * receives its refresh token).
+ */
+var DevicePollResponseCode;
+(function (DevicePollResponseCode) {
+    DevicePollResponseCode["SUCCESS"] = "SUCCESS";
+    DevicePollResponseCode["AUTHORIZATION_PENDING"] = "AUTHORIZATION_PENDING";
+    DevicePollResponseCode["SLOW_DOWN"] = "SLOW_DOWN";
+    DevicePollResponseCode["ACCESS_DENIED"] = "ACCESS_DENIED";
+    DevicePollResponseCode["EXPIRED"] = "EXPIRED";
+    DevicePollResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DevicePollResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DevicePollResponseCode || (exports.DevicePollResponseCode = DevicePollResponseCode = {}));
+/**
+ * Response code for the Device Verification lookup (the activation page reads what a user code authorizes).
+ */
+var DeviceVerificationResponseCode;
+(function (DeviceVerificationResponseCode) {
+    DeviceVerificationResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceVerificationResponseCode["NOT_FOUND"] = "NOT_FOUND";
+    DeviceVerificationResponseCode["EXPIRED"] = "EXPIRED";
+    DeviceVerificationResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceVerificationResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceVerificationResponseCode || (exports.DeviceVerificationResponseCode = DeviceVerificationResponseCode = {}));
+/**
+ * Response code for Device Approval / Denial (the signed-in user approves or denies a device).
+ */
+var DeviceApprovalResponseCode;
+(function (DeviceApprovalResponseCode) {
+    DeviceApprovalResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceApprovalResponseCode["NOT_FOUND"] = "NOT_FOUND";
+    DeviceApprovalResponseCode["EXPIRED"] = "EXPIRED";
+    DeviceApprovalResponseCode["ALREADY_USED"] = "ALREADY_USED";
+    DeviceApprovalResponseCode["ACCESS_TOKEN_EXPIRED"] = "ACCESS_TOKEN_EXPIRED";
+    DeviceApprovalResponseCode["NEEDS_LOGIN"] = "NEEDS_LOGIN";
+    DeviceApprovalResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceApprovalResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceApprovalResponseCode || (exports.DeviceApprovalResponseCode = DeviceApprovalResponseCode = {}));
+/**
+ * Lifecycle status of a device authorization record.
+ */
+var DeviceAuthorizationStatus;
+(function (DeviceAuthorizationStatus) {
+    DeviceAuthorizationStatus["PENDING"] = "PENDING";
+    DeviceAuthorizationStatus["APPROVED"] = "APPROVED";
+    DeviceAuthorizationStatus["DENIED"] = "DENIED";
+    DeviceAuthorizationStatus["EXPIRED"] = "EXPIRED";
+    DeviceAuthorizationStatus["REDEEMED"] = "REDEEMED";
+})(DeviceAuthorizationStatus || (exports.DeviceAuthorizationStatus = DeviceAuthorizationStatus = {}));
 /**
  * IDP Protocol categories
  */

package/dist/cjs/common/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IAC3B,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,gDAA2B,CAAA;IAC3B,8DAAyC,CAAA;IACzC,kDAA6B,CAAA;IAC7B,gEAA2C,CAAA;IAC3C,sEAAiD,CAAA;IACjD,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;AACjD,CAAC,EAVW,iBAAiB,iCAAjB,iBAAiB,QAU5B;AAED;;GAEG;AACH,IAAY,iBAQX;AARD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gDAA2B,CAAA;IAC3B,sDAAiC,CAAA;IACjC,8DAAyC,CAAA;IACzC,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,oEAA+C,CAAA;AACjD,CAAC,EARW,iBAAiB,iCAAjB,iBAAiB,QAQ5B;AAED;;GAEG;AACH,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,0CAAmB,CAAA;IACnB,kDAA2B,CAAA;IAC3B,sEAA+C,CAAA;AACjD,CAAC,EAJW,mBAAmB,mCAAnB,mBAAmB,QAI9B;AAED;;GAEG;AACH,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,mDAAmB,CAAA;IACnB,iFAAiD,CAAA;IACjD,iEAAiC,CAAA;IACjC,yEAAyC,CAAA;IACzC,2DAA2B,CAAA;IAC3B,+EAA+C,CAAA;AACjD,CAAC,EAPW,4BAA4B,4CAA5B,4BAA4B,QAOvC;AAED;;GAEG;AACH,IAAY,kBAQX;AARD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,qEAA+C,CAAA;IAC/C,yDAAmC,CAAA;IACnC,iEAA2C,CAAA;IAC3C,iFAA2D,CAAA;IAC3D,uEAAiD,CAAA;IACjD,uEAAiD,CAAA;AACnD,CAAC,EARW,kBAAkB,kCAAlB,kBAAkB,QAQ7B;AAED;;GAEG;AACH,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,4CAAe,CAAA;IACf,wFAA2D,CAAA;AAC7D,CAAC,EAJW,yBAAyB,yCAAzB,yBAAyB,QAIpC;AAED;;GAEG;AACH,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yCAAe,CAAA;IACf,qFAA2D,CAAA;AAC7D,CAAC,EAJW,sBAAsB,sCAAtB,sBAAsB,QAIjC;AAED;;GAEG;AACH,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,iDAAe,CAAA;IACf,6FAA2D,CAAA;AAC7D,CAAC,EAJW,8BAA8B,8CAA9B,8BAA8B,QAIzC;AAED;;;GAGG;AACH,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,uCAAe,CAAA;IACf,mFAA2D,CAAA;AAC7D,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,sCAAuB,CAAA;AACzB,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED;;GAEG;AACH,IAAY,+BAGX;AAHD,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,wFAAqD,CAAA;AACvD,CAAC,EAHW,+BAA+B,+CAA/B,+BAA+B,QAG1C;AAED;;GAEG;AACH,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,iEAAmB,CAAA;IACnB,6FAA+C,CAAA;IAC/C,iGAAmD,CAAA;IACnD,yHAA2E,CAAA;AAC7E,CAAC,EALW,0CAA0C,0DAA1C,0CAA0C,QAKrD"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IAC3B,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,gDAA2B,CAAA;IAC3B,8DAAyC,CAAA;IACzC,kDAA6B,CAAA;IAC7B,gEAA2C,CAAA;IAC3C,sEAAiD,CAAA;IACjD,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;AACjD,CAAC,EAVW,iBAAiB,iCAAjB,iBAAiB,QAU5B;AAED;;GAEG;AACH,IAAY,iBAQX;AARD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gDAA2B,CAAA;IAC3B,sDAAiC,CAAA;IACjC,8DAAyC,CAAA;IACzC,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,oEAA+C,CAAA;AACjD,CAAC,EARW,iBAAiB,iCAAjB,iBAAiB,QAQ5B;AAED;;GAEG;AACH,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,0CAAmB,CAAA;IACnB,kDAA2B,CAAA;IAC3B,sEAA+C,CAAA;AACjD,CAAC,EAJW,mBAAmB,mCAAnB,mBAAmB,QAI9B;AAED;;GAEG;AACH,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,mDAAmB,CAAA;IACnB,iFAAiD,CAAA;IACjD,iEAAiC,CAAA;IACjC,yEAAyC,CAAA;IACzC,2DAA2B,CAAA;IAC3B,+EAA+C,CAAA;AACjD,CAAC,EAPW,4BAA4B,4CAA5B,4BAA4B,QAOvC;AAED;;GAEG;AACH,IAAY,kBAQX;AARD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,qEAA+C,CAAA;IAC/C,yDAAmC,CAAA;IACnC,iEAA2C,CAAA;IAC3C,iFAA2D,CAAA;IAC3D,uEAAiD,CAAA;IACjD,uEAAiD,CAAA;AACnD,CAAC,EARW,kBAAkB,kCAAlB,kBAAkB,QAQ7B;AAED;;GAEG;AACH,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,4CAAe,CAAA;IACf,wFAA2D,CAAA;AAC7D,CAAC,EAJW,yBAAyB,yCAAzB,yBAAyB,QAIpC;AAED;;GAEG;AACH,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yCAAe,CAAA;IACf,qFAA2D,CAAA;AAC7D,CAAC,EAJW,sBAAsB,sCAAtB,sBAAsB,QAIjC;AAED;;GAEG;AACH,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,iDAAe,CAAA;IACf,6FAA2D,CAAA;AAC7D,CAAC,EAJW,8BAA8B,8CAA9B,8BAA8B,QAIzC;AAED;;;GAGG;AACH,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,uCAAe,CAAA;IACf,mFAA2D,CAAA;AAC7D,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,IAAY,+BAMX;AAND,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,sFAAmD,CAAA;IACnD,oFAAiD,CAAA;IACjD,8DAA2B,CAAA;IAC3B,kFAA+C,CAAA;AACjD,CAAC,EANW,+BAA+B,+CAA/B,+BAA+B,QAM1C;AAED;;;GAGG;AACH,IAAY,sBAQX;AARD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yEAA+C,CAAA;IAC/C,iDAAuB,CAAA;IACvB,yDAA+B,CAAA;IAC/B,6CAAmB,CAAA;IACnB,qDAA2B,CAAA;IAC3B,yEAA+C,CAAA;AACjD,CAAC,EARW,sBAAsB,sCAAtB,sBAAsB,QAQjC;AAED;;GAEG;AACH,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,yDAAuB,CAAA;IACvB,qDAAmB,CAAA;IACnB,6DAA2B,CAAA;IAC3B,iFAA+C,CAAA;AACjD,CAAC,EANW,8BAA8B,8CAA9B,8BAA8B,QAMzC;AAED;;GAEG;AACH,IAAY,0BASX;AATD,WAAY,0BAA0B;IACpC,iDAAmB,CAAA;IACnB,qDAAuB,CAAA;IACvB,iDAAmB,CAAA;IACnB,2DAA6B,CAAA;IAC7B,2EAA6C,CAAA;IAC7C,yDAA2B,CAAA;IAC3B,yDAA2B,CAAA;IAC3B,6EAA+C,CAAA;AACjD,CAAC,EATW,0BAA0B,0CAA1B,0BAA0B,QASrC;AAED;;GAEG;AACH,IAAY,yBAMX;AAND,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,kDAAqB,CAAA;IACrB,8CAAiB,CAAA;IACjB,gDAAmB,CAAA;IACnB,kDAAqB,CAAA;AACvB,CAAC,EANW,yBAAyB,yCAAzB,yBAAyB,QAMpC;AAED;;GAEG;AACH,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,sCAAuB,CAAA;AACzB,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED;;GAEG;AACH,IAAY,+BAGX;AAHD,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,wFAAqD,CAAA;AACvD,CAAC,EAHW,+BAA+B,+CAA/B,+BAA+B,QAG1C;AAED;;GAEG;AACH,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,iEAAmB,CAAA;IACnB,6FAA+C,CAAA;IAC/C,iGAAmD,CAAA;IACnD,yHAA2E,CAAA;AAC7E,CAAC,EALW,0CAA0C,0DAA1C,0CAA0C,QAKrD"}

package/dist/cjs/common/types.d.ts

@@ -1,4 +1,4 @@
-import type { CheckOtpResponseCode, CompleteUserSignUpResponseCode, DecryptNativeCookieResponseCode, IdpConfigurationResponseCode, ResetPasswordResponseCode, SignInResponseCode, SignOutResponseCode, TokenResponseCode, UserSignUpResponseCode } from './enums.js';
+import type { CheckOtpResponseCode, CompleteUserSignUpResponseCode, DecryptNativeCookieResponseCode, DeviceApprovalResponseCode, DeviceAuthorizationResponseCode, DeviceAuthorizationStatus, DevicePollResponseCode, DeviceVerificationResponseCode, IdpConfigurationResponseCode, ResetPasswordResponseCode, SignInResponseCode, SignOutResponseCode, TokenResponseCode, UserSignUpResponseCode } from './enums.js';
 /**
  * Represents a user token
  */
@@ -132,4 +132,70 @@ export interface DecryptNativeCookieResponse {
     message?: string;
     decryptedCookie?: string;
 }
+/**
+ * Request body for the Device Authorization request (device → user-service).
+ * The application is taken from the URL path; there is no client_id.
+ */
+export interface DeviceAuthorizationRequest {
+    /** Optional human-friendly label supplied by the device; display-only / untrusted. */
+    deviceLabel?: string;
+}
+/**
+ * Device Authorization response — the codes the device shows and polls with.
+ */
+export interface DeviceAuthorizationResponse {
+    code: DeviceAuthorizationResponseCode;
+    message?: string;
+    /** Secret the device polls with. */
+    deviceCode?: string;
+    /** Short code the user types on the verification page. */
+    userCode?: string;
+    /** Customer activate-page URL the user opens. */
+    verificationUri?: string;
+    /** verificationUri with the user code embedded (for a QR code). */
+    verificationUriComplete?: string;
+    /** Seconds until the device_code expires. */
+    expiresIn?: number;
+    /** Minimum seconds between polls. */
+    interval?: number;
+}
+/**
+ * Request body for the Device poll (device → user-service).
+ */
+export interface DevicePollRequest {
+    deviceCode: string;
+}
+/**
+ * Device poll response. On SUCCESS it carries only the device's `refreshToken`; the device then
+ * obtains access tokens from the standard `/token` endpoint (Bearer refresh token), exactly like
+ * a renewal.
+ */
+export interface DevicePollResponse {
+    code: DevicePollResponseCode;
+    message?: string;
+    /** The device's refresh token — present only on SUCCESS. */
+    refreshToken?: string;
+}
+/**
+ * Device Verification response — what a given user code is about to authorize.
+ */
+export interface DeviceVerificationResponse {
+    code: DeviceVerificationResponseCode;
+    message?: string;
+    deviceLabel?: string;
+    status?: DeviceAuthorizationStatus;
+}
+/**
+ * Request body for Device Approval / Denial (activation page → user-service).
+ */
+export interface DeviceApprovalRequest {
+    userCode: string;
+}
+/**
+ * Device Approval / Denial response.
+ */
+export interface DeviceApprovalResponse {
+    code: DeviceApprovalResponseCode;
+    message?: string;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/cjs/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,4BAA4B,EAC5B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/esm/common/enums.d.ts

@@ -89,6 +89,62 @@ export declare enum CheckOtpResponseCode {
     ERROR = "ERROR",
     SERVICE_CONFIGURATION_ERROR = "SERVICE_CONFIGURATION_ERROR"
 }
+/**
+ * Response code for the Device Authorization request (the device starts the flow).
+ */
+export declare enum DeviceAuthorizationResponseCode {
+    SUCCESS = "SUCCESS",
+    DEVICE_FLOW_NOT_ENABLED = "DEVICE_FLOW_NOT_ENABLED",
+    APPLICATION_NOT_ACTIVE = "APPLICATION_NOT_ACTIVE",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for the Device poll (the device polls until the user approves; on approval it
+ * receives its refresh token).
+ */
+export declare enum DevicePollResponseCode {
+    SUCCESS = "SUCCESS",
+    AUTHORIZATION_PENDING = "AUTHORIZATION_PENDING",
+    SLOW_DOWN = "SLOW_DOWN",
+    ACCESS_DENIED = "ACCESS_DENIED",
+    EXPIRED = "EXPIRED",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for the Device Verification lookup (the activation page reads what a user code authorizes).
+ */
+export declare enum DeviceVerificationResponseCode {
+    SUCCESS = "SUCCESS",
+    NOT_FOUND = "NOT_FOUND",
+    EXPIRED = "EXPIRED",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Response code for Device Approval / Denial (the signed-in user approves or denies a device).
+ */
+export declare enum DeviceApprovalResponseCode {
+    SUCCESS = "SUCCESS",
+    NOT_FOUND = "NOT_FOUND",
+    EXPIRED = "EXPIRED",
+    ALREADY_USED = "ALREADY_USED",
+    ACCESS_TOKEN_EXPIRED = "ACCESS_TOKEN_EXPIRED",
+    NEEDS_LOGIN = "NEEDS_LOGIN",
+    BAD_REQUEST = "BAD_REQUEST",
+    INTERNAL_SERVER_ERROR = "INTERNAL_SERVER_ERROR"
+}
+/**
+ * Lifecycle status of a device authorization record.
+ */
+export declare enum DeviceAuthorizationStatus {
+    PENDING = "PENDING",
+    APPROVED = "APPROVED",
+    DENIED = "DENIED",
+    EXPIRED = "EXPIRED",
+    REDEEMED = "REDEEMED"
+}
 /**
  * IDP Protocol categories
  */

package/dist/esm/common/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IACnD,WAAW,gBAAgB;IAC3B,kBAAkB,uBAAuB;IACzC,YAAY,iBAAiB;IAC7B,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,4BAA4B;IACtC,OAAO,YAAY;IACnB,sBAAsB,2BAA2B;IACjD,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;CAClD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;;GAGG;AACH,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,wBAAwB,6BAA6B;CACtD;AAED;;GAEG;AACH,oBAAY,0CAA0C;IACpD,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,mCAAmC,wCAAwC;CAC5E"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IACnD,WAAW,gBAAgB;IAC3B,kBAAkB,uBAAuB;IACzC,YAAY,iBAAiB;IAC7B,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,4BAA4B;IACtC,OAAO,YAAY;IACnB,sBAAsB,2BAA2B;IACjD,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;IACzC,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;CAClD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;;GAGG;AACH,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,2BAA2B,gCAAgC;CAC5D;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;;GAGG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,8BAA8B;IACxC,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,0BAA0B;IACpC,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,qBAAqB,0BAA0B;CAChD;AAED;;GAEG;AACH,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC,OAAO,YAAY;IACnB,wBAAwB,6BAA6B;CACtD;AAED;;GAEG;AACH,oBAAY,0CAA0C;IACpD,OAAO,YAAY;IACnB,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,mCAAmC,wCAAwC;CAC5E"}

package/dist/esm/common/enums.js

@@ -98,6 +98,67 @@ export var CheckOtpResponseCode;
     CheckOtpResponseCode["ERROR"] = "ERROR";
     CheckOtpResponseCode["SERVICE_CONFIGURATION_ERROR"] = "SERVICE_CONFIGURATION_ERROR";
 })(CheckOtpResponseCode || (CheckOtpResponseCode = {}));
+/**
+ * Response code for the Device Authorization request (the device starts the flow).
+ */
+export var DeviceAuthorizationResponseCode;
+(function (DeviceAuthorizationResponseCode) {
+    DeviceAuthorizationResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceAuthorizationResponseCode["DEVICE_FLOW_NOT_ENABLED"] = "DEVICE_FLOW_NOT_ENABLED";
+    DeviceAuthorizationResponseCode["APPLICATION_NOT_ACTIVE"] = "APPLICATION_NOT_ACTIVE";
+    DeviceAuthorizationResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceAuthorizationResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceAuthorizationResponseCode || (DeviceAuthorizationResponseCode = {}));
+/**
+ * Response code for the Device poll (the device polls until the user approves; on approval it
+ * receives its refresh token).
+ */
+export var DevicePollResponseCode;
+(function (DevicePollResponseCode) {
+    DevicePollResponseCode["SUCCESS"] = "SUCCESS";
+    DevicePollResponseCode["AUTHORIZATION_PENDING"] = "AUTHORIZATION_PENDING";
+    DevicePollResponseCode["SLOW_DOWN"] = "SLOW_DOWN";
+    DevicePollResponseCode["ACCESS_DENIED"] = "ACCESS_DENIED";
+    DevicePollResponseCode["EXPIRED"] = "EXPIRED";
+    DevicePollResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DevicePollResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DevicePollResponseCode || (DevicePollResponseCode = {}));
+/**
+ * Response code for the Device Verification lookup (the activation page reads what a user code authorizes).
+ */
+export var DeviceVerificationResponseCode;
+(function (DeviceVerificationResponseCode) {
+    DeviceVerificationResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceVerificationResponseCode["NOT_FOUND"] = "NOT_FOUND";
+    DeviceVerificationResponseCode["EXPIRED"] = "EXPIRED";
+    DeviceVerificationResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceVerificationResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceVerificationResponseCode || (DeviceVerificationResponseCode = {}));
+/**
+ * Response code for Device Approval / Denial (the signed-in user approves or denies a device).
+ */
+export var DeviceApprovalResponseCode;
+(function (DeviceApprovalResponseCode) {
+    DeviceApprovalResponseCode["SUCCESS"] = "SUCCESS";
+    DeviceApprovalResponseCode["NOT_FOUND"] = "NOT_FOUND";
+    DeviceApprovalResponseCode["EXPIRED"] = "EXPIRED";
+    DeviceApprovalResponseCode["ALREADY_USED"] = "ALREADY_USED";
+    DeviceApprovalResponseCode["ACCESS_TOKEN_EXPIRED"] = "ACCESS_TOKEN_EXPIRED";
+    DeviceApprovalResponseCode["NEEDS_LOGIN"] = "NEEDS_LOGIN";
+    DeviceApprovalResponseCode["BAD_REQUEST"] = "BAD_REQUEST";
+    DeviceApprovalResponseCode["INTERNAL_SERVER_ERROR"] = "INTERNAL_SERVER_ERROR";
+})(DeviceApprovalResponseCode || (DeviceApprovalResponseCode = {}));
+/**
+ * Lifecycle status of a device authorization record.
+ */
+export var DeviceAuthorizationStatus;
+(function (DeviceAuthorizationStatus) {
+    DeviceAuthorizationStatus["PENDING"] = "PENDING";
+    DeviceAuthorizationStatus["APPROVED"] = "APPROVED";
+    DeviceAuthorizationStatus["DENIED"] = "DENIED";
+    DeviceAuthorizationStatus["EXPIRED"] = "EXPIRED";
+    DeviceAuthorizationStatus["REDEEMED"] = "REDEEMED";
+})(DeviceAuthorizationStatus || (DeviceAuthorizationStatus = {}));
 /**
  * IDP Protocol categories
  */

package/dist/esm/common/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAN,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IAC3B,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,gDAA2B,CAAA;IAC3B,8DAAyC,CAAA;IACzC,kDAA6B,CAAA;IAC7B,gEAA2C,CAAA;IAC3C,sEAAiD,CAAA;IACjD,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;AACjD,CAAC,EAVW,iBAAiB,KAAjB,iBAAiB,QAU5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAQX;AARD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gDAA2B,CAAA;IAC3B,sDAAiC,CAAA;IACjC,8DAAyC,CAAA;IACzC,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,oEAA+C,CAAA;AACjD,CAAC,EARW,iBAAiB,KAAjB,iBAAiB,QAQ5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,0CAAmB,CAAA;IACnB,kDAA2B,CAAA;IAC3B,sEAA+C,CAAA;AACjD,CAAC,EAJW,mBAAmB,KAAnB,mBAAmB,QAI9B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,mDAAmB,CAAA;IACnB,iFAAiD,CAAA;IACjD,iEAAiC,CAAA;IACjC,yEAAyC,CAAA;IACzC,2DAA2B,CAAA;IAC3B,+EAA+C,CAAA;AACjD,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAQX;AARD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,qEAA+C,CAAA;IAC/C,yDAAmC,CAAA;IACnC,iEAA2C,CAAA;IAC3C,iFAA2D,CAAA;IAC3D,uEAAiD,CAAA;IACjD,uEAAiD,CAAA;AACnD,CAAC,EARW,kBAAkB,KAAlB,kBAAkB,QAQ7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,4CAAe,CAAA;IACf,wFAA2D,CAAA;AAC7D,CAAC,EAJW,yBAAyB,KAAzB,yBAAyB,QAIpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yCAAe,CAAA;IACf,qFAA2D,CAAA;AAC7D,CAAC,EAJW,sBAAsB,KAAtB,sBAAsB,QAIjC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,iDAAe,CAAA;IACf,6FAA2D,CAAA;AAC7D,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,uCAAe,CAAA;IACf,mFAA2D,CAAA;AAC7D,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,sCAAuB,CAAA;AACzB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,+BAGX;AAHD,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,wFAAqD,CAAA;AACvD,CAAC,EAHW,+BAA+B,KAA/B,+BAA+B,QAG1C;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,iEAAmB,CAAA;IACnB,6FAA+C,CAAA;IAC/C,iGAAmD,CAAA;IACnD,yHAA2E,CAAA;AAC7E,CAAC,EALW,0CAA0C,KAA1C,0CAA0C,QAKrD"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/common/enums.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAN,IAAY,iBAUX;AAVD,WAAY,iBAAiB;IAC3B,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,gDAA2B,CAAA;IAC3B,8DAAyC,CAAA;IACzC,kDAA6B,CAAA;IAC7B,gEAA2C,CAAA;IAC3C,sEAAiD,CAAA;IACjD,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;AACjD,CAAC,EAVW,iBAAiB,KAAjB,iBAAiB,QAU5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAQX;AARD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gDAA2B,CAAA;IAC3B,sDAAiC,CAAA;IACjC,8DAAyC,CAAA;IACzC,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,oEAA+C,CAAA;AACjD,CAAC,EARW,iBAAiB,KAAjB,iBAAiB,QAQ5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,0CAAmB,CAAA;IACnB,kDAA2B,CAAA;IAC3B,sEAA+C,CAAA;AACjD,CAAC,EAJW,mBAAmB,KAAnB,mBAAmB,QAI9B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,mDAAmB,CAAA;IACnB,iFAAiD,CAAA;IACjD,iEAAiC,CAAA;IACjC,yEAAyC,CAAA;IACzC,2DAA2B,CAAA;IAC3B,+EAA+C,CAAA;AACjD,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAQX;AARD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,qEAA+C,CAAA;IAC/C,yDAAmC,CAAA;IACnC,iEAA2C,CAAA;IAC3C,iFAA2D,CAAA;IAC3D,uEAAiD,CAAA;IACjD,uEAAiD,CAAA;AACnD,CAAC,EARW,kBAAkB,KAAlB,kBAAkB,QAQ7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,4CAAe,CAAA;IACf,wFAA2D,CAAA;AAC7D,CAAC,EAJW,yBAAyB,KAAzB,yBAAyB,QAIpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yCAAe,CAAA;IACf,qFAA2D,CAAA;AAC7D,CAAC,EAJW,sBAAsB,KAAtB,sBAAsB,QAIjC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,iDAAe,CAAA;IACf,6FAA2D,CAAA;AAC7D,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,uCAAe,CAAA;IACf,mFAA2D,CAAA;AAC7D,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,+BAMX;AAND,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,sFAAmD,CAAA;IACnD,oFAAiD,CAAA;IACjD,8DAA2B,CAAA;IAC3B,kFAA+C,CAAA;AACjD,CAAC,EANW,+BAA+B,KAA/B,+BAA+B,QAM1C;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,sBAQX;AARD,WAAY,sBAAsB;IAChC,6CAAmB,CAAA;IACnB,yEAA+C,CAAA;IAC/C,iDAAuB,CAAA;IACvB,yDAA+B,CAAA;IAC/B,6CAAmB,CAAA;IACnB,qDAA2B,CAAA;IAC3B,yEAA+C,CAAA;AACjD,CAAC,EARW,sBAAsB,KAAtB,sBAAsB,QAQjC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,yDAAuB,CAAA;IACvB,qDAAmB,CAAA;IACnB,6DAA2B,CAAA;IAC3B,iFAA+C,CAAA;AACjD,CAAC,EANW,8BAA8B,KAA9B,8BAA8B,QAMzC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,0BASX;AATD,WAAY,0BAA0B;IACpC,iDAAmB,CAAA;IACnB,qDAAuB,CAAA;IACvB,iDAAmB,CAAA;IACnB,2DAA6B,CAAA;IAC7B,2EAA6C,CAAA;IAC7C,yDAA2B,CAAA;IAC3B,yDAA2B,CAAA;IAC3B,6EAA+C,CAAA;AACjD,CAAC,EATW,0BAA0B,KAA1B,0BAA0B,QASrC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,yBAMX;AAND,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,kDAAqB,CAAA;IACrB,8CAAiB,CAAA;IACjB,gDAAmB,CAAA;IACnB,kDAAqB,CAAA;AACvB,CAAC,EANW,yBAAyB,KAAzB,yBAAyB,QAMpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,sCAAuB,CAAA;AACzB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,+BAGX;AAHD,WAAY,+BAA+B;IACzC,sDAAmB,CAAA;IACnB,wFAAqD,CAAA;AACvD,CAAC,EAHW,+BAA+B,KAA/B,+BAA+B,QAG1C;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,iEAAmB,CAAA;IACnB,6FAA+C,CAAA;IAC/C,iGAAmD,CAAA;IACnD,yHAA2E,CAAA;AAC7E,CAAC,EALW,0CAA0C,KAA1C,0CAA0C,QAKrD"}

package/dist/esm/common/types.d.ts

@@ -1,4 +1,4 @@
-import type { CheckOtpResponseCode, CompleteUserSignUpResponseCode, DecryptNativeCookieResponseCode, IdpConfigurationResponseCode, ResetPasswordResponseCode, SignInResponseCode, SignOutResponseCode, TokenResponseCode, UserSignUpResponseCode } from './enums.js';
+import type { CheckOtpResponseCode, CompleteUserSignUpResponseCode, DecryptNativeCookieResponseCode, DeviceApprovalResponseCode, DeviceAuthorizationResponseCode, DeviceAuthorizationStatus, DevicePollResponseCode, DeviceVerificationResponseCode, IdpConfigurationResponseCode, ResetPasswordResponseCode, SignInResponseCode, SignOutResponseCode, TokenResponseCode, UserSignUpResponseCode } from './enums.js';
 /**
  * Represents a user token
  */
@@ -132,4 +132,70 @@ export interface DecryptNativeCookieResponse {
     message?: string;
     decryptedCookie?: string;
 }
+/**
+ * Request body for the Device Authorization request (device → user-service).
+ * The application is taken from the URL path; there is no client_id.
+ */
+export interface DeviceAuthorizationRequest {
+    /** Optional human-friendly label supplied by the device; display-only / untrusted. */
+    deviceLabel?: string;
+}
+/**
+ * Device Authorization response — the codes the device shows and polls with.
+ */
+export interface DeviceAuthorizationResponse {
+    code: DeviceAuthorizationResponseCode;
+    message?: string;
+    /** Secret the device polls with. */
+    deviceCode?: string;
+    /** Short code the user types on the verification page. */
+    userCode?: string;
+    /** Customer activate-page URL the user opens. */
+    verificationUri?: string;
+    /** verificationUri with the user code embedded (for a QR code). */
+    verificationUriComplete?: string;
+    /** Seconds until the device_code expires. */
+    expiresIn?: number;
+    /** Minimum seconds between polls. */
+    interval?: number;
+}
+/**
+ * Request body for the Device poll (device → user-service).
+ */
+export interface DevicePollRequest {
+    deviceCode: string;
+}
+/**
+ * Device poll response. On SUCCESS it carries only the device's `refreshToken`; the device then
+ * obtains access tokens from the standard `/token` endpoint (Bearer refresh token), exactly like
+ * a renewal.
+ */
+export interface DevicePollResponse {
+    code: DevicePollResponseCode;
+    message?: string;
+    /** The device's refresh token — present only on SUCCESS. */
+    refreshToken?: string;
+}
+/**
+ * Device Verification response — what a given user code is about to authorize.
+ */
+export interface DeviceVerificationResponse {
+    code: DeviceVerificationResponseCode;
+    message?: string;
+    deviceLabel?: string;
+    status?: DeviceAuthorizationStatus;
+}
+/**
+ * Request body for Device Approval / Denial (activation page → user-service).
+ */
+export interface DeviceApprovalRequest {
+    userCode: string;
+}
+/**
+ * Device Approval / Denial response.
+ */
+export interface DeviceApprovalResponse {
+    code: DeviceApprovalResponseCode;
+    message?: string;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/esm/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,4BAA4B,EAC5B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-user-auth-utils",
-  "version": "0.8.31-rc.5",
+  "version": "0.9.0-rc.0",
   "description": "Shared types used by user-service for integration clients",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -45,5 +45,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "de32a725eacfcbdd7d845a5f719b26072d4fb79e"
+  "gitHead": "be52e29c7c5b16981a4b922bafa17dd34ec3ce69"
 }

package/src/common/enums.ts

@@ -98,6 +98,67 @@ export enum CheckOtpResponseCode {
   SERVICE_CONFIGURATION_ERROR = 'SERVICE_CONFIGURATION_ERROR',
 }
 
+/**
+ * Response code for the Device Authorization request (the device starts the flow).
+ */
+export enum DeviceAuthorizationResponseCode {
+  SUCCESS = 'SUCCESS',
+  DEVICE_FLOW_NOT_ENABLED = 'DEVICE_FLOW_NOT_ENABLED',
+  APPLICATION_NOT_ACTIVE = 'APPLICATION_NOT_ACTIVE',
+  BAD_REQUEST = 'BAD_REQUEST',
+  INTERNAL_SERVER_ERROR = 'INTERNAL_SERVER_ERROR',
+}
+
+/**
+ * Response code for the Device poll (the device polls until the user approves; on approval it
+ * receives its refresh token).
+ */
+export enum DevicePollResponseCode {
+  SUCCESS = 'SUCCESS',
+  AUTHORIZATION_PENDING = 'AUTHORIZATION_PENDING',
+  SLOW_DOWN = 'SLOW_DOWN',
+  ACCESS_DENIED = 'ACCESS_DENIED',
+  EXPIRED = 'EXPIRED',
+  BAD_REQUEST = 'BAD_REQUEST',
+  INTERNAL_SERVER_ERROR = 'INTERNAL_SERVER_ERROR',
+}
+
+/**
+ * Response code for the Device Verification lookup (the activation page reads what a user code authorizes).
+ */
+export enum DeviceVerificationResponseCode {
+  SUCCESS = 'SUCCESS',
+  NOT_FOUND = 'NOT_FOUND',
+  EXPIRED = 'EXPIRED',
+  BAD_REQUEST = 'BAD_REQUEST',
+  INTERNAL_SERVER_ERROR = 'INTERNAL_SERVER_ERROR',
+}
+
+/**
+ * Response code for Device Approval / Denial (the signed-in user approves or denies a device).
+ */
+export enum DeviceApprovalResponseCode {
+  SUCCESS = 'SUCCESS',
+  NOT_FOUND = 'NOT_FOUND',
+  EXPIRED = 'EXPIRED',
+  ALREADY_USED = 'ALREADY_USED',
+  ACCESS_TOKEN_EXPIRED = 'ACCESS_TOKEN_EXPIRED',
+  NEEDS_LOGIN = 'NEEDS_LOGIN',
+  BAD_REQUEST = 'BAD_REQUEST',
+  INTERNAL_SERVER_ERROR = 'INTERNAL_SERVER_ERROR',
+}
+
+/**
+ * Lifecycle status of a device authorization record.
+ */
+export enum DeviceAuthorizationStatus {
+  PENDING = 'PENDING',
+  APPROVED = 'APPROVED',
+  DENIED = 'DENIED',
+  EXPIRED = 'EXPIRED',
+  REDEEMED = 'REDEEMED',
+}
+
 /**
  * IDP Protocol categories
  */

package/src/common/types.ts

@@ -2,6 +2,11 @@ import type {
   CheckOtpResponseCode,
   CompleteUserSignUpResponseCode,
   DecryptNativeCookieResponseCode,
+  DeviceApprovalResponseCode,
+  DeviceAuthorizationResponseCode,
+  DeviceAuthorizationStatus,
+  DevicePollResponseCode,
+  DeviceVerificationResponseCode,
   IdpConfigurationResponseCode,
   ResetPasswordResponseCode,
   SignInResponseCode,
@@ -157,3 +162,78 @@ export interface DecryptNativeCookieResponse {
   message?: string;
   decryptedCookie?: string;
 }
+
+/* --- Device Authorization grant (input-constrained devices such as smart TVs) --- */
+
+/**
+ * Request body for the Device Authorization request (device → user-service).
+ * The application is taken from the URL path; there is no client_id.
+ */
+export interface DeviceAuthorizationRequest {
+  /** Optional human-friendly label supplied by the device; display-only / untrusted. */
+  deviceLabel?: string;
+}
+
+/**
+ * Device Authorization response — the codes the device shows and polls with.
+ */
+export interface DeviceAuthorizationResponse {
+  code: DeviceAuthorizationResponseCode;
+  message?: string;
+  /** Secret the device polls with. */
+  deviceCode?: string;
+  /** Short code the user types on the verification page. */
+  userCode?: string;
+  /** Customer activate-page URL the user opens. */
+  verificationUri?: string;
+  /** verificationUri with the user code embedded (for a QR code). */
+  verificationUriComplete?: string;
+  /** Seconds until the device_code expires. */
+  expiresIn?: number;
+  /** Minimum seconds between polls. */
+  interval?: number;
+}
+
+/**
+ * Request body for the Device poll (device → user-service).
+ */
+export interface DevicePollRequest {
+  deviceCode: string;
+}
+
+/**
+ * Device poll response. On SUCCESS it carries only the device's `refreshToken`; the device then
+ * obtains access tokens from the standard `/token` endpoint (Bearer refresh token), exactly like
+ * a renewal.
+ */
+export interface DevicePollResponse {
+  code: DevicePollResponseCode;
+  message?: string;
+  /** The device's refresh token — present only on SUCCESS. */
+  refreshToken?: string;
+}
+
+/**
+ * Device Verification response — what a given user code is about to authorize.
+ */
+export interface DeviceVerificationResponse {
+  code: DeviceVerificationResponseCode;
+  message?: string;
+  deviceLabel?: string;
+  status?: DeviceAuthorizationStatus;
+}
+
+/**
+ * Request body for Device Approval / Denial (activation page → user-service).
+ */
+export interface DeviceApprovalRequest {
+  userCode: string;
+}
+
+/**
+ * Device Approval / Denial response.
+ */
+export interface DeviceApprovalResponse {
+  code: DeviceApprovalResponseCode;
+  message?: string;
+}