@corbado/observe 1.7.1 → 1.7.2

package/dist/index.d.mts

@@ -2974,7 +2974,7 @@ declare class EventStore<T = Event> {
 type WebAuthnIdentifierProjector = (value: string) => string | null | undefined;
 /**
  * Optional user identifier projection shared by native WebAuthn capture and network serializers.
- * A missing callback preserves user identifiers. Callbacks should be deterministic across payloads.
+ * A missing callback omits user identifiers. Callbacks should be deterministic across payloads.
  * Credential IDs and encoded attestation/authenticator data are retained unchanged.
  */
 type WebAuthnIdentifierProjectors = {
@@ -2983,10 +2983,10 @@ type WebAuthnIdentifierProjectors = {
 };
 /**
  * Serializes WebAuthn creation options, removing `user.name` and `user.displayName`.
- * Binary values become base64url strings. User IDs are retained unless a projector is supplied.
+ * Binary values become base64url strings. `user.id` is omitted unless a projector is supplied.
  *
  * @param value - Native publicKey options, a JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. No tracker initialization is required.
  * @example
@@ -2998,10 +2998,10 @@ type WebAuthnIdentifierProjectors = {
 declare function sanitizeCreationOptions(value: unknown, projectors?: WebAuthnIdentifierProjectors): string | undefined;
 /**
  * Serializes a registration credential, removing `clientExtensionResults.prf.results`.
- * By default other fields remain, including attestation material and credential IDs. Binary values become base64url strings.
+ * `response.userHandle` is omitted unless a projector is supplied. By default other fields remain, including attestation material and credential IDs. Binary values become base64url strings.
  *
  * @param value - A native registration credential, JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. Encoded attestation and client-data blobs are not decoded or redacted.
  */
@@ -3017,10 +3017,11 @@ declare function sanitizeCreationResponse(value: unknown, projectors?: WebAuthnI
 declare function sanitizeRequestOptions(value: unknown): string | undefined;
 /**
  * Serializes an authentication credential, removing `response.signature` and `clientExtensionResults.prf.results`.
- * By default other fields remain, including credential IDs and user handles. Binary values become base64url strings.
+ * `response.userHandle` is omitted unless a projector is supplied. Other fields remain, including credential IDs.
+ * Binary values become base64url strings.
  *
  * @param value - A native authentication credential, JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. This is a path blacklist, not general-purpose secret detection; encoded client-data blobs are not decoded or redacted.
  */

package/dist/index.d.ts

@@ -2974,7 +2974,7 @@ declare class EventStore<T = Event> {
 type WebAuthnIdentifierProjector = (value: string) => string | null | undefined;
 /**
  * Optional user identifier projection shared by native WebAuthn capture and network serializers.
- * A missing callback preserves user identifiers. Callbacks should be deterministic across payloads.
+ * A missing callback omits user identifiers. Callbacks should be deterministic across payloads.
  * Credential IDs and encoded attestation/authenticator data are retained unchanged.
  */
 type WebAuthnIdentifierProjectors = {
@@ -2983,10 +2983,10 @@ type WebAuthnIdentifierProjectors = {
 };
 /**
  * Serializes WebAuthn creation options, removing `user.name` and `user.displayName`.
- * Binary values become base64url strings. User IDs are retained unless a projector is supplied.
+ * Binary values become base64url strings. `user.id` is omitted unless a projector is supplied.
  *
  * @param value - Native publicKey options, a JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. No tracker initialization is required.
  * @example
@@ -2998,10 +2998,10 @@ type WebAuthnIdentifierProjectors = {
 declare function sanitizeCreationOptions(value: unknown, projectors?: WebAuthnIdentifierProjectors): string | undefined;
 /**
  * Serializes a registration credential, removing `clientExtensionResults.prf.results`.
- * By default other fields remain, including attestation material and credential IDs. Binary values become base64url strings.
+ * `response.userHandle` is omitted unless a projector is supplied. By default other fields remain, including attestation material and credential IDs. Binary values become base64url strings.
  *
  * @param value - A native registration credential, JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. Encoded attestation and client-data blobs are not decoded or redacted.
  */
@@ -3017,10 +3017,11 @@ declare function sanitizeCreationResponse(value: unknown, projectors?: WebAuthnI
 declare function sanitizeRequestOptions(value: unknown): string | undefined;
 /**
  * Serializes an authentication credential, removing `response.signature` and `clientExtensionResults.prf.results`.
- * By default other fields remain, including credential IDs and user handles. Binary values become base64url strings.
+ * `response.userHandle` is omitted unless a projector is supplied. Other fields remain, including credential IDs.
+ * Binary values become base64url strings.
  *
  * @param value - A native authentication credential, JSON object, or JSON text; not an application envelope.
- * @param projectors - Optional synchronous user identifier projection; default identity.
+ * @param projectors - Optional synchronous user identifier projection; default omits user identifiers.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input, read blacklisted getters, or call toJSON. This is a path blacklist, not general-purpose secret detection; encoded client-data blobs are not decoded or redacted.
  */