@corvushold/guard-sdk 0.13.4 → 0.15.0

package/dist/index.d.ts

@@ -159,6 +159,8 @@ interface components {
             /** @description Recommended/preferred login method based on context
              *     Values: "sso", "password", "magic_link", "social" */
             preferred_method?: string;
+            /** @description Whether new user signup is enabled for this tenant */
+            signup_enabled?: boolean;
             /** @description Social login providers (tenant-wide or global) */
             social_providers?: components["schemas"]["controller.SocialProviderOption"][];
             /** @description SSO providers configured for this tenant */
@@ -167,6 +169,8 @@ interface components {
             sso_required?: boolean;
             /** @description Tenant information (if discovered) */
             tenant_id?: string;
+            /** @description Tenant logo URL for branding on the login page */
+            tenant_logo_url?: string;
             tenant_name?: string;
             /** @description If email is present in multiple tenants, list them so the UI can prompt the user.
              *     When multiple tenants are present, tenant_id/tenant_name will only be set when
@@ -202,6 +206,54 @@ interface components {
              */
             name: string;
         };
+        "controller.acceptInvitationReq": {
+            /** @description Optional first name */
+            first_name?: string;
+            /** @description Optional last name */
+            last_name?: string;
+            /** @description Password for the new account (min 8 chars) */
+            password: string;
+            /** @description Invitation token from the invite URL */
+            token: string;
+        };
+        "controller.adminCreateUserReq": {
+            /** @description User email address */
+            email: string;
+            /** @description Mark email as verified */
+            email_verified?: boolean;
+            /** @description Optional first name */
+            first_name?: string;
+            /** @description Optional last name */
+            last_name?: string;
+            /** @description Password (min 8 chars) */
+            password: string;
+            /** @description Optional roles to assign */
+            roles?: string[];
+            /** @description Send welcome email to user */
+            send_welcome?: boolean;
+            /** @description Tenant ID (UUID) */
+            tenant_id: string;
+        };
+        "controller.adminCreateUserResp": {
+            /** @description Creation timestamp */
+            created_at?: string;
+            /** @description User email */
+            email?: string;
+            /** @description Whether email is verified */
+            email_verified?: boolean;
+            /** @description First name */
+            first_name?: string;
+            /** @description User ID */
+            id?: string;
+            /** @description Whether user is active */
+            is_active?: boolean;
+            /** @description Last name */
+            last_name?: string;
+            /** @description Assigned roles */
+            roles?: string[];
+            /** @description Tenant ID */
+            tenant_id?: string;
+        };
         "controller.adminUpdateNamesReq": {
             first_name?: string;
             last_name?: string;
@@ -211,6 +263,7 @@ interface components {
         };
         "controller.adminUser": {
             created_at?: string;
+            email?: string;
             email_verified?: boolean;
             first_name?: string;
             id?: string;
@@ -223,16 +276,85 @@ interface components {
         "controller.adminUsersResp": {
             users?: components["schemas"]["controller.adminUser"][];
         };
+        "controller.apiKeyItem": {
+            created_at?: string;
+            created_by?: string;
+            expires_at?: string;
+            id?: string;
+            key_prefix?: string;
+            last_used_at?: string;
+            name?: string;
+            revoked_at?: string;
+            scopes?: string[];
+            tenant_id?: string;
+            updated_at?: string;
+        };
+        "controller.apiKeysListResp": {
+            api_keys?: components["schemas"]["controller.apiKeyItem"][];
+        };
         "controller.authExchangeResp": {
             access_token?: string;
             refresh_token?: string;
             /** @example true */
             success?: boolean;
         };
+        "controller.authorizeDecisionReq": {
+            approved?: boolean;
+            client_id: string;
+            code_challenge?: string;
+            code_challenge_method?: string;
+            consent_challenge: string;
+            nonce?: string;
+            redirect_uri: string;
+            response_type: string;
+            scope?: string;
+            state?: string;
+        };
+        "controller.bulkImportResult": {
+            created?: number;
+            errors?: string[];
+            skipped?: number;
+        };
         "controller.changePasswordReq": {
             current_password: string;
             new_password: string;
         };
+        "controller.createAPIKeyReq": {
+            /** @description RFC3339 timestamp */
+            expires_at?: string;
+            name: string;
+            scopes?: string[];
+        };
+        "controller.createAPIKeyResp": {
+            created_at?: string;
+            expires_at?: string;
+            id?: string;
+            key_prefix?: string;
+            name?: string;
+            /** @description Only returned on creation */
+            raw_key?: string;
+            scopes?: string[];
+            tenant_id?: string;
+        };
+        "controller.createAppRequest": {
+            description?: string;
+            homepage_url?: string;
+            logo_uri?: string;
+            name: string;
+        };
+        "controller.createClientReq": {
+            /** @enum {string} */
+            client_type?: "confidential" | "public";
+            grant_types?: string[];
+            logo_uri?: string;
+            name: string;
+            redirect_uris: string[];
+            scopes?: string[];
+        };
+        "controller.createClientResp": {
+            client?: components["schemas"]["domain.OAuthClient"];
+            client_secret?: string;
+        };
         "controller.createProviderRequest": {
             acs_url?: string;
             allow_signup?: boolean;
@@ -278,6 +400,11 @@ interface components {
             name: string;
             parent_tenant_id?: string;
         };
+        "controller.createWebhookRequest": {
+            events: string[];
+            secret: string;
+            url: string;
+        };
         "controller.fgaAuthorizeReq": {
             object_id?: string;
             object_type: string;
@@ -331,6 +458,33 @@ interface components {
         "controller.introspectReq": {
             token?: string;
         };
+        "controller.invitationResp": {
+            accepted_at?: string;
+            created_at?: string;
+            email?: string;
+            expires_at?: string;
+            id?: string;
+            role?: string;
+            status?: string;
+            tenant_id?: string;
+        };
+        "controller.invitationsListResp": {
+            invitations?: components["schemas"]["controller.invitationResp"][];
+        };
+        "controller.inviteUserReq": {
+            email: string;
+            role?: string;
+            tenant_id: string;
+        };
+        "controller.inviteUserResp": {
+            created_at?: string;
+            email?: string;
+            expires_at?: string;
+            id?: string;
+            invite_url?: string;
+            role?: string;
+            status?: string;
+        };
         "controller.listResponse": {
             items?: components["schemas"]["controller.tenantResp"][];
             page?: number;
@@ -387,6 +541,8 @@ interface components {
             method: "totp" | "backup_code";
         };
         "controller.oauth2MetadataResp": {
+            authorization_endpoint?: string;
+            code_challenge_methods_supported?: string[];
             grant_types_supported?: string[];
             guard_auth_mode_default?: string;
             /** @description Guard-specific extensions */
@@ -395,6 +551,7 @@ interface components {
             introspection_endpoint?: string;
             introspection_endpoint_auth_methods_supported?: string[];
             issuer?: string;
+            jwks_uri?: string;
             response_types_supported?: string[];
             revocation_endpoint?: string;
             revocation_endpoint_auth_methods_supported?: string[];
@@ -403,6 +560,12 @@ interface components {
             token_endpoint_auth_methods_supported?: string[];
             userinfo_endpoint?: string;
         };
+        "controller.passkeyResponse": {
+            created_at?: string;
+            friendly_name?: string;
+            id?: string;
+            last_used_at?: string;
+        };
         "controller.permissionGrantItem": {
             key?: string;
             object_id?: string;
@@ -422,11 +585,27 @@ interface components {
             app_cors_allowed_origins?: string;
             /** @description Auth */
             jwt_signing_key?: string;
+            /** @description Rate limits (per-endpoint, tenant-scoped overrides) */
+            rl_login_limit?: string;
+            rl_login_window?: string;
+            rl_magic_limit?: string;
+            rl_magic_window?: string;
+            rl_mfa_limit?: string;
+            rl_mfa_window?: string;
+            rl_signup_limit?: string;
+            rl_signup_window?: string;
+            rl_sso_limit?: string;
+            rl_sso_window?: string;
+            rl_token_limit?: string;
+            rl_token_window?: string;
             /** @description Scope is deprecated and ignored. Kept for backward compatibility with older SDKs. */
             scope?: string;
+            /** @description Signup & branding */
+            signup_enabled?: string;
             sso_provider?: string;
             sso_redirect_allowlist?: string;
             sso_state_ttl?: string;
+            tenant_logo_url?: string;
             workos_api_key?: string;
             workos_client_id?: string;
             workos_client_secret?: string;
@@ -479,10 +658,19 @@ interface components {
         };
         "controller.rbacUserRolesResp": {
             role_ids?: string[];
+            roles?: components["schemas"]["controller.rbacRoleItem"][];
         };
         "controller.refreshReq": {
             refresh_token?: string;
         };
+        "controller.registerPasskeyRequest": {
+            aaguid?: string;
+            attestation_type?: string;
+            credential_id: string;
+            friendly_name?: string;
+            public_key: string;
+            transports?: string[];
+        };
         "controller.resetPasswordConfirmReq": {
             new_password: string;
             tenant_id?: string;
@@ -514,10 +702,26 @@ interface components {
         "controller.settingsResponse": {
             /** @description App */
             app_cors_allowed_origins?: string;
+            /** @description Rate limits (per-endpoint, tenant-scoped overrides) */
+            rl_login_limit?: string;
+            rl_login_window?: string;
+            rl_magic_limit?: string;
+            rl_magic_window?: string;
+            rl_mfa_limit?: string;
+            rl_mfa_window?: string;
+            rl_signup_limit?: string;
+            rl_signup_window?: string;
+            rl_sso_limit?: string;
+            rl_sso_window?: string;
+            rl_token_limit?: string;
+            rl_token_window?: string;
+            /** @description Signup & branding */
+            signup_enabled?: string;
             /** @description SSO */
             sso_provider?: string;
             sso_redirect_allowlist?: string;
             sso_state_ttl?: string;
+            tenant_logo_url?: string;
             /** @description masked */
             workos_api_key?: string;
             workos_client_id?: string;
@@ -552,10 +756,32 @@ interface components {
             parent_tenant_id?: string;
             updated_at?: string;
         };
+        "controller.updateAppRequest": {
+            description?: string;
+            homepage_url?: string;
+            is_active?: boolean;
+            logo_uri?: string;
+            name?: string;
+        };
+        "controller.updateClientReq": {
+            grant_types?: string[];
+            is_active?: boolean;
+            logo_uri?: string;
+            name?: string;
+            redirect_uris?: string[];
+            scopes?: string[];
+        };
+        "controller.updateParentReq": {
+            parent_tenant_id?: string;
+        };
         "controller.updateProfileReq": {
             first_name?: string;
             last_name?: string;
         };
+        "controller.updateProfileRequest": {
+            first_name?: string;
+            last_name?: string;
+        };
         "controller.updateProviderRequest": {
             acs_url?: string;
             allow_signup?: boolean;
@@ -599,6 +825,26 @@ interface components {
             want_assertions_signed?: boolean;
             want_response_signed?: boolean;
         };
+        "controller.updateWebhookRequest": {
+            events?: string[];
+            is_active?: boolean;
+            url?: string;
+        };
+        "controller.verifyEmailReq": {
+            token: string;
+        };
+        "domain.Application": {
+            created_at?: string;
+            created_by?: string;
+            description?: string;
+            homepage_url?: string;
+            id?: string;
+            is_active?: boolean;
+            logo_uri?: string;
+            name?: string;
+            tenant_id?: string;
+            updated_at?: string;
+        };
         "domain.Introspection": {
             active?: boolean;
             email?: string;
@@ -610,11 +856,105 @@ interface components {
             tenant_id?: string;
             user_id?: string;
         };
+        "domain.OAuthClient": {
+            client_id?: string;
+            /**
+             * @description confidential | public
+             * @enum {string}
+             */
+            client_type?: "confidential" | "public";
+            created_at?: string;
+            created_by?: string;
+            grant_types?: string[];
+            id?: string;
+            is_active?: boolean;
+            logo_uri?: string;
+            name?: string;
+            redirect_uris?: string[];
+            scopes?: string[];
+            tenant_id?: string;
+            updated_at?: string;
+        };
         "domain.PortalLink": {
             link?: string;
         };
         /** @enum {string} */
         "domain.ProviderType": "oidc" | "saml" | "oauth2" | "workos" | "dev";
+        "domain.SCIMEmail": {
+            primary?: boolean;
+            type?: string;
+            value?: string;
+        };
+        "domain.SCIMError": {
+            detail?: string;
+            schemas?: string[];
+            status?: number;
+        };
+        "domain.SCIMGroup": {
+            displayName?: string;
+            id?: string;
+            members?: components["schemas"]["domain.SCIMMemberRef"][];
+            meta?: components["schemas"]["domain.SCIMMeta"];
+            schemas?: string[];
+        };
+        "domain.SCIMGroupRef": {
+            $ref?: string;
+            display?: string;
+            value?: string;
+        };
+        "domain.SCIMListResponse": {
+            Resources?: unknown;
+            itemsPerPage?: number;
+            schemas?: string[];
+            startIndex?: number;
+            totalResults?: number;
+        };
+        "domain.SCIMMemberRef": {
+            $ref?: string;
+            display?: string;
+            value?: string;
+        };
+        "domain.SCIMMeta": {
+            created?: string;
+            lastModified?: string;
+            location?: string;
+            resourceType?: string;
+        };
+        "domain.SCIMName": {
+            familyName?: string;
+            givenName?: string;
+        };
+        "domain.SCIMPatchOp": {
+            /** @description add, remove, replace */
+            op?: string;
+            /** @description attribute path, e.g. "name.givenName" */
+            path?: string;
+            /** @description new value */
+            value?: unknown;
+        };
+        "domain.SCIMPatchRequest": {
+            Operations?: components["schemas"]["domain.SCIMPatchOp"][];
+            schemas?: string[];
+        };
+        "domain.SCIMUser": {
+            active?: boolean;
+            emails?: components["schemas"]["domain.SCIMEmail"][];
+            externalId?: string;
+            groups?: components["schemas"]["domain.SCIMGroupRef"][];
+            id?: string;
+            meta?: components["schemas"]["domain.SCIMMeta"];
+            name?: components["schemas"]["domain.SCIMName"];
+            schemas?: string[];
+            userName?: string;
+        };
+        "domain.TokenResponse": {
+            access_token?: string;
+            expires_in?: number;
+            id_token?: string;
+            refresh_token?: string;
+            scope?: string;
+            token_type?: string;
+        };
         "domain.UserProfile": {
             email?: string;
             email_verified?: boolean;
@@ -626,6 +966,15 @@ interface components {
             roles?: string[];
             tenant_id?: string;
         };
+        "domain.Webhook": {
+            created_at?: string;
+            events?: string[];
+            id?: string;
+            is_active?: boolean;
+            tenant_id?: string;
+            updated_at?: string;
+            url?: string;
+        };
     };
     responses: never;
     parameters: never;
@@ -636,6 +985,12 @@ interface components {
                 "application/json": components["schemas"]["controller.magicVerifyReq"];
             };
         };
+        /** @description Group resource */
+        "domain.SCIMGroup": {
+            content: {
+                "application/json": components["schemas"]["domain.SCIMGroup"];
+            };
+        };
         /** @description permission_key, scope_type, optional resource_type/resource_id */
         "controller.rbacRolePermissionReq": {
             content: {
@@ -654,6 +1009,18 @@ interface components {
                 "application/json": components["schemas"]["controller.rbacModifyUserRoleReq"];
             };
         };
+        /** @description Patch operations */
+        "domain.SCIMPatchRequest": {
+            content: {
+                "application/json": components["schemas"]["domain.SCIMPatchRequest"];
+            };
+        };
+        /** @description User resource */
+        "domain.SCIMUser": {
+            content: {
+                "application/json": components["schemas"]["domain.SCIMUser"];
+            };
+        };
     };
     headers: never;
     pathItems: never;
@@ -781,6 +1148,62 @@ interface SessionItem {
 interface SessionsListResp {
     sessions: SessionItem[];
 }
+type InvitationStatus = 'pending' | 'accepted' | 'revoked' | 'expired';
+interface Invitation {
+    id: string;
+    tenant_id: string | null;
+    email: string;
+    role?: string;
+    status: InvitationStatus;
+    expires_at: string;
+    created_at: string;
+    accepted_at: string | null;
+    revoked_at?: string | null;
+}
+interface InvitationsListResp {
+    invitations: Invitation[];
+}
+interface InviteUserReq {
+    tenant_id?: string;
+    email: string;
+    role?: string;
+}
+interface InviteUserResp {
+    id: string;
+    email: string;
+    role?: string;
+    status: string;
+    expires_at: string;
+    created_at: string;
+    invite_url?: string;
+}
+interface AcceptInvitationReq {
+    token: string;
+    password: string;
+    first_name?: string;
+    last_name?: string;
+}
+interface AdminCreateUserReq {
+    tenant_id?: string;
+    email: string;
+    password: string;
+    first_name?: string;
+    last_name?: string;
+    roles?: string[];
+    email_verified?: boolean;
+    send_welcome?: boolean;
+}
+interface AdminCreateUserResp {
+    id: string;
+    email: string;
+    first_name: string;
+    last_name: string;
+    roles: string[];
+    tenant_id: string;
+    email_verified: boolean;
+    is_active: boolean;
+    created_at: string;
+}
 interface TenantSettingsResponse {
     sso_provider: string;
     workos_client_id: string;
@@ -790,6 +1213,19 @@ interface TenantSettingsResponse {
     workos_default_organization_id?: string;
     sso_state_ttl: string;
     sso_redirect_allowlist: string;
+    app_cors_allowed_origins?: string;
+    rl_login_limit?: string;
+    rl_login_window?: string;
+    rl_signup_limit?: string;
+    rl_signup_window?: string;
+    rl_magic_limit?: string;
+    rl_magic_window?: string;
+    rl_sso_limit?: string;
+    rl_sso_window?: string;
+    rl_token_limit?: string;
+    rl_token_window?: string;
+    rl_mfa_limit?: string;
+    rl_mfa_window?: string;
 }
 interface TenantSettingsPutRequest {
     sso_provider?: string | null;
@@ -800,6 +1236,55 @@ interface TenantSettingsPutRequest {
     workos_default_organization_id?: string | null;
     sso_state_ttl?: string | null;
     sso_redirect_allowlist?: string | null;
+    app_cors_allowed_origins?: string | null;
+    jwt_signing_key?: string | null;
+    rl_login_limit?: string | null;
+    rl_login_window?: string | null;
+    rl_signup_limit?: string | null;
+    rl_signup_window?: string | null;
+    rl_magic_limit?: string | null;
+    rl_magic_window?: string | null;
+    rl_sso_limit?: string | null;
+    rl_sso_window?: string | null;
+    rl_token_limit?: string | null;
+    rl_token_window?: string | null;
+    rl_mfa_limit?: string | null;
+    rl_mfa_window?: string | null;
+}
+interface OAuthClientItem {
+    id: string;
+    tenant_id: string;
+    client_id: string;
+    client_type: 'confidential' | 'public';
+    name: string;
+    redirect_uris: string[];
+    scopes: string[];
+    grant_types: string[];
+    logo_uri?: string;
+    is_active: boolean;
+    created_by?: string;
+    created_at: string;
+    updated_at: string;
+}
+interface CreateOAuthClientReq {
+    name: string;
+    client_type?: 'confidential' | 'public';
+    redirect_uris: string[];
+    scopes?: string[];
+    grant_types?: string[];
+    logo_uri?: string;
+}
+interface CreateOAuthClientResp {
+    client: OAuthClientItem;
+    client_secret?: string;
+}
+interface UpdateOAuthClientReq {
+    name?: string;
+    redirect_uris?: string[];
+    scopes?: string[];
+    grant_types?: string[];
+    logo_uri?: string;
+    is_active?: boolean;
 }
 type SsoProviderType = 'oidc' | 'saml';
 type SsoLinkingPolicy = 'never' | 'verified_email' | 'always';
@@ -861,12 +1346,14 @@ interface SsoProviderOption {
 interface LoginOptionsResp {
     password_enabled: boolean;
     magic_link_enabled: boolean;
+    signup_enabled: boolean;
     sso_providers: SsoProviderOption[];
     preferred_method: AuthMethod;
     sso_required: boolean;
     user_exists: boolean;
     tenant_id?: string;
     tenant_name?: string;
+    tenant_logo_url?: string;
     tenants?: Array<{
         id: string;
         name?: string;
@@ -1092,6 +1579,18 @@ declare class GuardClient {
     unblockUser(id: string): Promise<ResponseWrapper<unknown>>;
     verifyUserEmail(id: string): Promise<ResponseWrapper<unknown>>;
     unverifyUserEmail(id: string): Promise<ResponseWrapper<unknown>>;
+    listInvitations(params?: {
+        tenant_id?: string;
+        status?: string;
+    }): Promise<ResponseWrapper<InvitationsListResp>>;
+    createInvitation(body: InviteUserReq): Promise<ResponseWrapper<InviteUserResp>>;
+    revokeInvitation(id: string): Promise<ResponseWrapper<unknown>>;
+    deleteInvitation(id: string): Promise<ResponseWrapper<unknown>>;
+    getInvitation(params: {
+        token: string;
+    }): Promise<ResponseWrapper<Invitation>>;
+    acceptInvitation(body: AcceptInvitationReq): Promise<ResponseWrapper<TokensResp>>;
+    adminCreateUser(body: AdminCreateUserReq): Promise<ResponseWrapper<AdminCreateUserResp>>;
     listSessions(options?: {
         includeAll?: boolean;
     }): Promise<ResponseWrapper<SessionsListResp>>;
@@ -1271,6 +1770,13 @@ declare class GuardClient {
         object_type: string;
         object_id?: string | null;
     }): Promise<ResponseWrapper<unknown>>;
+    listOAuthClients(): Promise<ResponseWrapper<{
+        clients: OAuthClientItem[];
+    }>>;
+    createOAuthClient(body: CreateOAuthClientReq): Promise<ResponseWrapper<CreateOAuthClientResp>>;
+    getOAuthClient(id: string): Promise<ResponseWrapper<OAuthClientItem>>;
+    updateOAuthClient(id: string, body: UpdateOAuthClientReq): Promise<ResponseWrapper<unknown>>;
+    deleteOAuthClient(id: string): Promise<ResponseWrapper<unknown>>;
     /**
      * Fetch OAuth 2.0 Authorization Server Metadata (RFC 8414)
      * Returns server capabilities including supported auth modes, endpoints, and grant types.
@@ -1299,4 +1805,4 @@ declare class GuardClient {
 
 declare function generateTOTPCode(base32Secret: string): string;
 
-export { type AdminUser, type AdminUsersResp, ApiError, type AsyncStorageLike, type AuthMethod, type CreateSsoProviderReq, type DiscoverTenantsResp, type FetchLike, type FgaAclTuple, type FgaGroup, type FgaGroupsResp, GuardClient, type GuardClientOptions, type HeadersMap, HttpClient, InMemoryStorage, type Interceptors, type LoginOptionsResp, type Meta, RateLimitError, type RequestInterceptor, type ResponseInterceptor, type ResponseWrapper, type SessionItem, type SessionsListResp, type SsoLinkingPolicy, type SsoPortalContext, type SsoPortalSessionResp, type SsoProvider, type SsoProviderItem, type SsoProviderOption, type SsoProviderSlug, type SsoProviderType, type SsoProvidersListResp, type SsoSPInfoResp, type SsoTestProviderResp, type TenantId, type TenantOption, type TenantSelectionRequiredResp, type TenantSettingsPutRequest, type TenantSettingsResponse, type TenantSummary, type TokenProvider, type TokenStorage, type TransportOptions, type UpdateSsoProviderReq, WebLocalStorage, applyRequestInterceptors, applyResponseInterceptors, buildRateLimitError, generateTOTPCode, isApiError, isMfaChallengeResp, isRateLimitError, isTenantSelectionRequired, isTokensResp, noopStorage, parseRetryAfter, reactNativeStorageAdapter, toHeadersMap };
+export { type AcceptInvitationReq, type AdminCreateUserReq, type AdminCreateUserResp, type AdminUser, type AdminUsersResp, ApiError, type AsyncStorageLike, type AuthMethod, type CreateOAuthClientReq, type CreateOAuthClientResp, type CreateSsoProviderReq, type DiscoverTenantsResp, type FetchLike, type FgaAclTuple, type FgaGroup, type FgaGroupsResp, GuardClient, type GuardClientOptions, type HeadersMap, HttpClient, InMemoryStorage, type Interceptors, type Invitation, type InvitationStatus, type InvitationsListResp, type InviteUserReq, type InviteUserResp, type LoginOptionsResp, type Meta, type OAuthClientItem, RateLimitError, type RequestInterceptor, type ResponseInterceptor, type ResponseWrapper, type SessionItem, type SessionsListResp, type SsoLinkingPolicy, type SsoPortalContext, type SsoPortalSessionResp, type SsoProvider, type SsoProviderItem, type SsoProviderOption, type SsoProviderSlug, type SsoProviderType, type SsoProvidersListResp, type SsoSPInfoResp, type SsoTestProviderResp, type TenantId, type TenantOption, type TenantSelectionRequiredResp, type TenantSettingsPutRequest, type TenantSettingsResponse, type TenantSummary, type TokenProvider, type TokenStorage, type TransportOptions, type UpdateOAuthClientReq, type UpdateSsoProviderReq, WebLocalStorage, applyRequestInterceptors, applyResponseInterceptors, buildRateLimitError, generateTOTPCode, isApiError, isMfaChallengeResp, isRateLimitError, isTenantSelectionRequired, isTokensResp, noopStorage, parseRetryAfter, reactNativeStorageAdapter, toHeadersMap };