@better-auth/scim 1.5.0-beta.9 → 1.5.1-beta.1

package/README.md

@@ -0,0 +1,17 @@
+# Better Auth SCIM Plugin
+
+SCIM (System for Cross-domain Identity Management) plugin for [Better Auth](https://www.better-auth.com) — enable enterprise user provisioning.
+
+## Installation
+
+```bash
+npm install @better-auth/scim
+```
+
+## Documentation
+
+For full documentation, visit [better-auth.com/docs/plugins/scim](https://www.better-auth.com/docs/plugins/scim).
+
+## License
+
+MIT

package/dist/client.d.mts

@@ -6,4 +6,5 @@ declare const scimClient: () => {
   $InferServerPlugin: ReturnType<typeof scim>;
 };
 //#endregion
-export { scimClient };
+export { scimClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/client.mjs

@@ -7,4 +7,5 @@ const scimClient = () => {
 };
 
 //#endregion
-export { scimClient };
+export { scimClient };
+//# sourceMappingURL=client.mjs.map

package/dist/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["import type { BetterAuthClientPlugin } from \"better-auth/client\";\nimport type { scim } from \"./index\";\n\nexport const scimClient = () => {\n\treturn {\n\t\tid: \"scim-client\",\n\t\t$InferServerPlugin: {} as ReturnType<typeof scim>,\n\t} satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AAGA,MAAa,mBAAmB;AAC/B,QAAO;EACN,IAAI;EACJ,oBAAoB,EAAE;EACtB"}

package/dist/index.d.mts

@@ -1,8 +1,8 @@
-import { Member } from "better-auth/plugins";
 import * as better_auth0 from "better-auth";
 import { User } from "better-auth";
 import * as better_call0 from "better-call";
-import * as zod0 from "zod";
+import * as zod from "zod";
+import { Member } from "better-auth/plugins";
 
 //#region src/types.d.ts
 interface SCIMProvider {
@@ -10,6 +10,7 @@ interface SCIMProvider {
   providerId: string;
   scimToken: string;
   organizationId?: string;
+  userId?: string;
 }
 type SCIMName = {
   formatted?: string;
@@ -21,6 +22,13 @@ type SCIMEmail = {
   primary?: boolean;
 };
 type SCIMOptions = {
+  /**
+   * SCIM provider ownership configuration. When enabled, each provider
+   * connection is linked to the user who generated its token
+   */
+  providerOwnership?: {
+    enabled: boolean;
+  };
   /**
    * Default list of SCIM providers for testing
    * These will take precedence over the database when present
@@ -68,7 +76,7 @@ type SCIMOptions = {
 //#endregion
 //#region src/index.d.ts
 declare module "@better-auth/core" {
-  interface BetterAuthPluginRegistry<Auth, Context> {
+  interface BetterAuthPluginRegistry<AuthOptions, Options> {
     scim: {
       creator: typeof scim;
     };
@@ -79,9 +87,9 @@ declare const scim: (options?: SCIMOptions) => {
   endpoints: {
     generateSCIMToken: better_call0.StrictEndpoint<"/scim/generate-token", {
       method: "POST";
-      body: zod0.ZodObject<{
-        providerId: zod0.ZodString;
-        organizationId: zod0.ZodOptional<zod0.ZodString>;
+      body: zod.ZodObject<{
+        providerId: zod.ZodString;
+        organizationId: zod.ZodOptional<zod.ZodString>;
       }, better_auth0.$strip>;
       metadata: {
         openapi: {
@@ -133,6 +141,208 @@ declare const scim: (options?: SCIMOptions) => {
     }, {
       scimToken: string;
     }>;
+    listSCIMProviderConnections: better_call0.StrictEndpoint<"/scim/list-provider-connections", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      providers: {
+                        type: string;
+                        items: {
+                          type: string;
+                          properties: {
+                            id: {
+                              type: string;
+                            };
+                            providerId: {
+                              type: string;
+                            };
+                            organizationId: {
+                              type: string;
+                              nullable: boolean;
+                            };
+                          };
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      providers: {
+        id: string;
+        providerId: string;
+        organizationId: string | null;
+      }[];
+    }>;
+    getSCIMProviderConnection: better_call0.StrictEndpoint<"/scim/get-provider-connection", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      query: zod.ZodObject<{
+        providerId: zod.ZodString;
+      }, better_auth0.$strip>;
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      id: {
+                        type: string;
+                      };
+                      providerId: {
+                        type: string;
+                      };
+                      organizationId: {
+                        type: string;
+                        nullable: boolean;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+            };
+            "403": {
+              description: string;
+            };
+          };
+        };
+      };
+    }, {
+      id: string;
+      providerId: string;
+      organizationId: string | null;
+    }>;
+    deleteSCIMProviderConnection: better_call0.StrictEndpoint<"/scim/delete-provider-connection", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: zod.ZodObject<{
+        providerId: zod.ZodString;
+      }, better_auth0.$strip>;
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      success: {
+                        type: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+            };
+            "403": {
+              description: string;
+            };
+          };
+        };
+      };
+    }, {
+      success: boolean;
+    }>;
     getSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users/:userId", {
       method: "GET";
       metadata: {
@@ -411,17 +621,17 @@ declare const scim: (options?: SCIMOptions) => {
     }>;
     createSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users", {
       method: "POST";
-      body: zod0.ZodObject<{
-        userName: zod0.ZodString;
-        externalId: zod0.ZodOptional<zod0.ZodString>;
-        name: zod0.ZodOptional<zod0.ZodObject<{
-          formatted: zod0.ZodOptional<zod0.ZodString>;
-          givenName: zod0.ZodOptional<zod0.ZodString>;
-          familyName: zod0.ZodOptional<zod0.ZodString>;
+      body: zod.ZodObject<{
+        userName: zod.ZodString;
+        externalId: zod.ZodOptional<zod.ZodString>;
+        name: zod.ZodOptional<zod.ZodObject<{
+          formatted: zod.ZodOptional<zod.ZodString>;
+          givenName: zod.ZodOptional<zod.ZodString>;
+          familyName: zod.ZodOptional<zod.ZodString>;
         }, better_auth0.$strip>>;
-        emails: zod0.ZodOptional<zod0.ZodArray<zod0.ZodObject<{
-          value: zod0.ZodEmail;
-          primary: zod0.ZodOptional<zod0.ZodBoolean>;
+        emails: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          value: zod.ZodEmail;
+          primary: zod.ZodOptional<zod.ZodBoolean>;
         }, better_auth0.$strip>>>;
       }, better_auth0.$strip>;
       metadata: {
@@ -700,16 +910,16 @@ declare const scim: (options?: SCIMOptions) => {
     }>;
     patchSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users/:userId", {
       method: "PATCH";
-      body: zod0.ZodObject<{
-        schemas: zod0.ZodArray<zod0.ZodString>;
-        Operations: zod0.ZodArray<zod0.ZodObject<{
-          op: zod0.ZodPipe<zod0.ZodDefault<zod0.ZodString>, zod0.ZodEnum<{
+      body: zod.ZodObject<{
+        schemas: zod.ZodArray<zod.ZodString>;
+        Operations: zod.ZodArray<zod.ZodObject<{
+          op: zod.ZodPipe<zod.ZodDefault<zod.ZodString>, zod.ZodEnum<{
+            replace: "replace";
             add: "add";
             remove: "remove";
-            replace: "replace";
           }>>;
-          path: zod0.ZodOptional<zod0.ZodString>;
-          value: zod0.ZodAny;
+          path: zod.ZodOptional<zod.ZodString>;
+          value: zod.ZodAny;
         }, better_auth0.$strip>>;
       }, better_auth0.$strip>;
       metadata: {
@@ -1076,17 +1286,17 @@ declare const scim: (options?: SCIMOptions) => {
     }, void>;
     updateSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users/:userId", {
       method: "PUT";
-      body: zod0.ZodObject<{
-        userName: zod0.ZodString;
-        externalId: zod0.ZodOptional<zod0.ZodString>;
-        name: zod0.ZodOptional<zod0.ZodObject<{
-          formatted: zod0.ZodOptional<zod0.ZodString>;
-          givenName: zod0.ZodOptional<zod0.ZodString>;
-          familyName: zod0.ZodOptional<zod0.ZodString>;
+      body: zod.ZodObject<{
+        userName: zod.ZodString;
+        externalId: zod.ZodOptional<zod.ZodString>;
+        name: zod.ZodOptional<zod.ZodObject<{
+          formatted: zod.ZodOptional<zod.ZodString>;
+          givenName: zod.ZodOptional<zod.ZodString>;
+          familyName: zod.ZodOptional<zod.ZodString>;
         }, better_auth0.$strip>>;
-        emails: zod0.ZodOptional<zod0.ZodArray<zod0.ZodObject<{
-          value: zod0.ZodEmail;
-          primary: zod0.ZodOptional<zod0.ZodBoolean>;
+        emails: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          value: zod.ZodEmail;
+          primary: zod.ZodOptional<zod.ZodBoolean>;
         }, better_auth0.$strip>>>;
       }, better_auth0.$strip>;
       metadata: {
@@ -1365,8 +1575,8 @@ declare const scim: (options?: SCIMOptions) => {
     }>;
     listSCIMUsers: better_call0.StrictEndpoint<"/scim/v2/Users", {
       method: "GET";
-      query: zod0.ZodOptional<zod0.ZodObject<{
-        filter: zod0.ZodOptional<zod0.ZodString>;
+      query: zod.ZodOptional<zod.ZodObject<{
+        filter: zod.ZodOptional<zod.ZodString>;
       }, better_auth0.$strip>>;
       metadata: {
         allowedMediaTypes: string[];
@@ -1639,6 +1849,12 @@ declare const scim: (options?: SCIMOptions) => {
         scimProvider: Omit<SCIMProvider, "id">;
       }>)[];
     }, {
+      readonly schemas: readonly ["urn:ietf:params:scim:api:messages:2.0:ListResponse"];
+      readonly totalResults: 0;
+      readonly startIndex: 1;
+      readonly itemsPerPage: 0;
+      readonly Resources: readonly [];
+    } | {
       schemas: string[];
       totalResults: number;
       startIndex: number;
@@ -3199,6 +3415,10 @@ declare const scim: (options?: SCIMOptions) => {
   schema: {
     scimProvider: {
       fields: {
+        userId?: {
+          type: "string";
+          required: false;
+        } | undefined;
         providerId: {
           type: "string";
           required: true;
@@ -3219,4 +3439,5 @@ declare const scim: (options?: SCIMOptions) => {
   options: SCIMOptions | undefined;
 };
 //#endregion
-export { SCIMEmail, SCIMName, SCIMOptions, SCIMProvider, scim };
+export { SCIMEmail, SCIMName, SCIMOptions, SCIMProvider, scim };
+//# sourceMappingURL=index.d.mts.map