@cubist-labs/cubesigner-sdk 0.4.268 → 0.4.270

package/package.json

@@ -5,7 +5,7 @@
     "url": "git+https://github.com/cubist-labs/CubeSigner-TypeScript-SDK.git",
     "directory": "packages/sdk"
   },
-  "version": "0.4.268",
+  "version": "0.4.270",
   "type": "module",
   "description": "CubeSigner TypeScript SDK",
   "license": "MIT OR Apache-2.0",

package/src/org.ts

@@ -420,14 +420,45 @@ export class Org {
     alienKeyCountThreshold: number,
     opts?: { mfaReceipt?: MfaReceipts },
   ) {
+    return await this.#updateExtProps((data) => {
+      data.alien_key_count_threshold = alienKeyCountThreshold;
+    }, opts);
+  }
+
+  /**
+   * Update whether the alien users should be allowed to update their own key policies.
+   *
+   * @param aliensCanUpdateKeyPolicy Whether alien users should be allowed to update their own key policies.
+   * @param opts Optional parameters
+   * @param opts.mfaReceipt Optional MFA receipts
+   * @returns Org info
+   */
+  async setAliensCanUpdateKeyPolicy(
+    aliensCanUpdateKeyPolicy: boolean,
+    opts?: { mfaReceipt?: MfaReceipts },
+  ) {
+    return await this.#updateExtProps((data) => {
+      data.aliens_can_update_key_policy = aliensCanUpdateKeyPolicy;
+    }, opts);
+  }
+
+  /**
+   * Update select extended properties.
+   *
+   * @param update The update function
+   * @param opts Optional parameters
+   * @param opts.mfaReceipt Optional MFA receipts
+   * @returns Org info
+   */
+  async #updateExtProps(update: (data: OrgExtProps) => void, opts?: { mfaReceipt?: MfaReceipts }) {
     const data = { ...((await this.getExtendedProperties()) ?? {}) };
 
     // erase the metadata that cannot be updated
     data.created = undefined;
     data.last_modified = undefined;
 
-    // update 'alien_key_count_threshold' and keep everything else the same
-    data.alien_key_count_threshold = alienKeyCountThreshold;
+    // execute client-supplied update function
+    update(data);
 
     return await this.update({ ext_props: data }, opts?.mfaReceipt);
   }

package/src/schema.ts

@@ -1609,6 +1609,9 @@ export interface paths {
     /**
      * Get user by id
      * @description Get user by id
+     *
+     * If the requesting user is an owner of the org, the response additionally
+     * includes the user's OIDC identities.
      */
     get: operations["getUserInOrg"];
     /**
@@ -3869,6 +3872,7 @@ export interface components {
       acl?: unknown[] | null;
       /** @description Arbitrary user-defined metadata. */
       metadata?: unknown;
+      org_id: components["schemas"]["Id"];
       owner: components["schemas"]["Id"];
     }) & {
       /** @description The name of the bucket. */
@@ -3891,6 +3895,7 @@ export interface components {
       acl?: unknown[] | null;
       /** @description Arbitrary user-defined metadata. */
       metadata?: unknown;
+      org_id: components["schemas"]["Id"];
       owner: components["schemas"]["Id"];
     };
     /**
@@ -8207,6 +8212,11 @@ export interface components {
                * In other words, org admins can still assign unlimited number of keys to their alien users.
                */
               alien_key_count_threshold?: number | null;
+              /**
+               * @description Whether alien users are allowed to update their own key policies.
+               * Defaults to 'false'.
+               */
+              aliens_can_update_key_policy?: boolean | null;
             } & {
               created?: components["schemas"]["EpochDateTime"] | null;
               last_modified?: components["schemas"]["EpochDateTime"] | null;
@@ -9984,10 +9994,8 @@ export interface components {
     /** @description Answer to a Sign-in with Solana challenge. */
     SiwsCompleteRequest: {
       challenge_id: components["schemas"]["Id"];
-      /** @description The base58-encoded ed25519 signature of `signed_message`. */
+      /** @description The base58-encoded ed25519 signature of the challenge's canonical message text (the rendered `SignInInput`). */
       signature: string;
-      /** @description The base58-encoded UTF-8 bytes of the message that was signed (the rendered `SignInInput`). */
-      signed_message: string;
     };
     /** @description Returned upon a successful SIWS authentication. */
     SiwsCompleteResponse: {
@@ -11038,6 +11046,11 @@ export interface components {
              * In other words, org admins can still assign unlimited number of keys to their alien users.
              */
             alien_key_count_threshold?: number | null;
+            /**
+             * @description Whether alien users are allowed to update their own key policies.
+             * Defaults to 'false'.
+             */
+            aliens_can_update_key_policy?: boolean | null;
           } & {
             /**
              * Format: int64
@@ -11182,6 +11195,11 @@ export interface components {
              * In other words, org admins can still assign unlimited number of keys to their alien users.
              */
             alien_key_count_threshold?: number | null;
+            /**
+             * @description Whether alien users are allowed to update their own key policies.
+             * Defaults to 'false'.
+             */
+            aliens_can_update_key_policy?: boolean | null;
           } & {
             created?: components["schemas"]["EpochDateTime"] | null;
             last_modified?: components["schemas"]["EpochDateTime"] | null;
@@ -11986,6 +12004,7 @@ export interface components {
           acl?: unknown[] | null;
           /** @description Arbitrary user-defined metadata. */
           metadata?: unknown;
+          org_id: components["schemas"]["Id"];
           owner: components["schemas"]["Id"];
         }) & {
           /** @description The name of the bucket. */
@@ -12612,6 +12631,11 @@ export interface components {
                    * In other words, org admins can still assign unlimited number of keys to their alien users.
                    */
                   alien_key_count_threshold?: number | null;
+                  /**
+                   * @description Whether alien users are allowed to update their own key policies.
+                   * Defaults to 'false'.
+                   */
+                  aliens_can_update_key_policy?: boolean | null;
                 } & {
                   created?: components["schemas"]["EpochDateTime"] | null;
                   last_modified?: components["schemas"]["EpochDateTime"] | null;
@@ -13484,6 +13508,11 @@ export interface components {
                  * In other words, org admins can still assign unlimited number of keys to their alien users.
                  */
                 alien_key_count_threshold?: number | null;
+                /**
+                 * @description Whether alien users are allowed to update their own key policies.
+                 * Defaults to 'false'.
+                 */
+                aliens_can_update_key_policy?: boolean | null;
               } & {
                 created?: components["schemas"]["EpochDateTime"] | null;
                 last_modified?: components["schemas"]["EpochDateTime"] | null;
@@ -13637,6 +13666,32 @@ export interface components {
         };
       };
     };
+    UserInOrgInfoWithIdentity: {
+      content: {
+        "application/json": {
+          /**
+           * @description The user's email (optional)
+           * @example alice@example.com
+           */
+          email?: string | null;
+          /**
+           * @description The id of the user
+           * @example User#c3b9379c-4e8c-4216-bd0a-65ace53cf98f
+           */
+          id: string;
+          /** @description Whether the user has ever successfully logged in */
+          initialized?: boolean;
+          membership: components["schemas"]["MemberRole"];
+          /** @description Optional user name. */
+          name?: string | null;
+          status: components["schemas"]["MembershipStatus"];
+          verified_email?: components["schemas"]["VerifiedEmail"] | null;
+        } & {
+          /** @description Optional third-party identities via which the user was found */
+          identities?: components["schemas"]["IdentityInfo"][];
+        };
+      };
+    };
     UserInfo: {
       content: {
         "application/json": {
@@ -19220,6 +19275,9 @@ export interface operations {
   /**
    * Get user by id
    * @description Get user by id
+   *
+   * If the requesting user is an owner of the org, the response additionally
+   * includes the user's OIDC identities.
    */
   getUserInOrg: {
     parameters: {
@@ -19237,7 +19295,7 @@ export interface operations {
       };
     };
     responses: {
-      200: components["responses"]["UserInOrgInfo"];
+      200: components["responses"]["UserInOrgInfoWithIdentity"];
       default: {
         content: {
           "application/json": components["schemas"]["ErrorResponse"];