@descope/node-sdk 1.0.4-alpha.9 → 1.0.5

package/dist/index.d.ts

@@ -3,22 +3,59 @@ import _descope_core_js_sdk__default, { SdkResponse, ExchangeAccessKeyResponse }
 export { DeliveryMethod, OAuthProvider } from '@descope/core-js-sdk';
 import { JWTHeaderParameters, KeyLike } from 'jose';
 
-/** Represents a tenant association for a User. The tenantId is required to denote
- * which tenant the user belongs to. The roleNames array is an optional list of
- * roles for the user in this specific tenant.
+/** Represents a tenant association for a User or Access Key. The tenantId is required to denote
+ * which tenant the user or access key belongs to. The roleNames array is an optional list of
+ * roles for the user or access key in this specific tenant.
  */
-declare type UserTenant = {
+declare type AssociatedTenant = {
     tenantId: string;
     roleNames: string[];
 };
 /** The tenantId of a newly created tenant */
 declare type CreateTenantResponse = {
-    tenantId: string;
+    id: string;
+};
+/** An access key that can be used to access descope */
+declare type AccessKey = {
+    id: string;
+    name: string;
+    expiredTime: number;
+    roleNames: string[];
+    keyTenants?: AssociatedTenant[];
+    status: string;
+    createdTime: number;
+    expiresTime: number;
+    createdBy: string;
+};
+/** Access Key extended details including created key cleartext */
+declare type CreatedAccessKeyResponse = {
+    key: AccessKey;
+    cleartext: string;
+};
+/** Represents a mapping between a set of groups of users and a role that will be assigned to them */
+declare type RoleMapping = {
+    groups: string[];
+    role: string;
+};
+/** Represents a mapping between Descope and IDP user attributes */
+declare type AttributeMapping = {
+    name?: string;
+    email?: string;
+    phoneNumber?: string;
+    group?: string;
 };
 /** UpdateJWT response with a new JWT value with the added custom claims */
 declare type UpdateJWTResponse = {
     jwt: string;
 };
+/** Represents a tenant in a project. It has an id, a name and an array of
+ * self provisioning domains used to associate users with that tenant.
+ */
+declare type Tenant = {
+    id: string;
+    name: string;
+    selfProvisioningDomains: string[];
+};
 /** Represents a permission in a project. It has a name and optionally a description.
  * It also has a flag indicating whether it is system default or not.
  */
@@ -35,6 +72,18 @@ declare type Role = {
     description?: string;
     permissionNames: string[];
 };
+/** Represents a group in a project. It has an id and display name and a list of group members. */
+declare type Group = {
+    id: string;
+    display: string;
+    members?: GroupMember[];
+};
+/** Represents a group member. It has loginId, userId and display. */
+declare type GroupMember = {
+    loginId: string;
+    userId: string;
+    display: string;
+};
 
 /** Parsed JWT token */
 interface Token {
@@ -50,376 +99,403 @@ interface AuthenticationInfo {
     cookies?: string[];
 }
 
-/** Refresh JWT cookie name */
-declare const refreshTokenCookieName = "DSR";
-/** Session JWT cookie name */
-declare const sessionTokenCookieName = "DS";
-
 /** Configuration arguments which include the Descope core SDK args and an optional management key */
 declare type NodeSdkArgs = Parameters<typeof _descope_core_js_sdk__default>[0] & {
     managementKey?: string;
 };
-/** Descope SDK client with delivery methods enum.
- *
- * Please see full documentation at {@link https://docs.descope.com/guides Descope Docs}
- * @example Usage
- *
- * ```js
- * import descopeSdk from '@descope/node-sdk';
- *
- * const myProjectId = 'xxx';
- * const sdk = descopeSdk({ projectId: myProjectId });
- *
- * const userIdentifier = 'identifier';
- * sdk.otp.signIn.email(userIdentifier);
- * const jwtResponse = sdk.otp.verify.email(userIdentifier, codeFromEmail);
- * ```
- */
-declare const sdkWithAttributes: ((args: NodeSdkArgs) => {
-    /**
-     * Provides various APIs for managing a Descope project programmatically. A management key must
-     * be provided as an argument when initializing the SDK to use these APIs. Management keys can be
-     * generated in the Descope console.
-     */
-    management: {
-        user: {
-            create: (identifier: string, email?: string, phone?: string, displayName?: string, roleNames?: string[], userTenants?: UserTenant[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-            update: (identifier: string, email?: string, phone?: string, displayName?: string, roleNames?: string[], userTenants?: UserTenant[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-            delete: (identifier: string) => Promise<SdkResponse<never>>;
-            load: (identifier: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-            searchAll: (tenantIds?: string[], roleNames?: string[], limit?: number) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse[]>>;
-        };
-        tenant: {
-            create: (name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<CreateTenantResponse>>;
-            createWithId: (tenantId: string, name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<never>>;
-            update: (tenantId: string, name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<never>>;
-            delete: (tenantId: string) => Promise<SdkResponse<never>>;
-        };
-        jwt: {
-            update: (jwt: string, customClaims?: Record<string, any>) => Promise<SdkResponse<UpdateJWTResponse>>;
-        };
-        permission: {
-            create: (name: string, description?: string) => Promise<SdkResponse<never>>;
-            update: (name: string, newName: string, description?: string) => Promise<SdkResponse<never>>;
-            delete: (name: string) => Promise<SdkResponse<never>>;
-            loadAll: () => Promise<SdkResponse<Permission[]>>;
-        };
-        role: {
-            create: (name: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
-            update: (name: string, newName: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
-            delete: (name: string) => Promise<SdkResponse<never>>;
-            loadAll: () => Promise<SdkResponse<Role[]>>;
-        };
-    };
-    /** Get the key that can validate the given JWT KID in the header. Can retrieve the public key from local cache or from Descope. */
-    getKey(header: JWTHeaderParameters): Promise<KeyLike | Uint8Array>;
-    /**
-     * Validate the given JWT with the right key and make sure the issuer is correct
-     * @param jwt the JWT string to parse and validate
-     * @returns AuthenticationInfo with the parsed token and JWT. Will throw an error if validation fails.
-     */
-    validateJwt(jwt: string): Promise<AuthenticationInfo>;
-    /**
-     * Validate session based on at least one of session and refresh JWTs. You must provide at least one of them.
-     *
-     * @param sessionToken session JWT
-     * @param refreshToken refresh JWT
-     * @returns AuthenticationInfo promise or throws Error if there is an issue with JWTs
-     */
-    validateSession(sessionToken?: string, refreshToken?: string): Promise<AuthenticationInfo>;
-    /**
-     * Exchange API key (access key) for a session key
-     * @param accessKey access key to exchange for a session JWT
-     * @returns AuthneticationInfo with session JWT data
-     */
-    exchangeAccessKey(accessKey: string): Promise<AuthenticationInfo>;
-    /**
-     * Make sure that all given permissions exist on the parsed JWT top level claims
-     * @param authInfo JWT parsed info
-     * @param permissions list of permissions to make sure they exist on te JWT claims
-     * @returns true if all permissions exist, false otherwise
-     */
-    validatePermissions(authInfo: AuthenticationInfo, permissions: string[]): boolean;
-    /**
-     * Make sure that all given permissions exist on the parsed JWT tenant claims
-     * @param authInfo JWT parsed info
-     * @param permissions list of permissions to make sure they exist on te JWT claims
-     * @returns true if all permissions exist, false otherwise
-     */
-    validateTenantPermissions(authInfo: AuthenticationInfo, tenant: string, permissions: string[]): boolean;
-    /**
-     * Make sure that all given roles exist on the parsed JWT top level claims
-     * @param authInfo JWT parsed info
-     * @param roles list of roles to make sure they exist on te JWT claims
-     * @returns true if all roles exist, false otherwise
-     */
-    validateRoles(authInfo: AuthenticationInfo, roles: string[]): boolean;
-    /**
-     * Make sure that all given roles exist on the parsed JWT tenant claims
-     * @param authInfo JWT parsed info
-     * @param roles list of roles to make sure they exist on te JWT claims
-     * @returns true if all roles exist, false otherwise
-     */
-    validateTenantRoles(authInfo: AuthenticationInfo, tenant: string, roles: string[]): boolean;
-    accessKey: {
-        exchange: (accessKey: string) => Promise<SdkResponse<ExchangeAccessKeyResponse>>;
-    };
-    otp: {
-        verify: {
-            email: (identifier: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-            sms: (identifier: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-            whatsapp: (identifier: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-        };
-        signIn: {
-            email: (identifier: string) => Promise<SdkResponse<never>>;
-            sms: (identifier: string) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string) => Promise<SdkResponse<never>>;
-        };
-        signUp: {
-            email: (identifier: string, user?: {
-                email?: string;
-                name?: string;
-                phone?: string;
-            }) => Promise<SdkResponse<never>>;
-            sms: (identifier: string, user?: {
-                email?: string;
-                name?: string;
-                phone?: string;
-            }) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string, user?: {
-                email?: string;
-                name?: string;
-                phone?: string;
-            }) => Promise<SdkResponse<never>>;
+declare const nodeSdk: {
+    ({ managementKey, ...config }: NodeSdkArgs): {
+        management: {
+            user: {
+                create: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                update: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                delete: (loginId: string) => Promise<SdkResponse<never>>;
+                load: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                loadByUserId: (userId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                searchAll: (tenantIds?: string[], roles?: string[], limit?: number) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse[]>>;
+                activate: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                deactivate: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                updateEmail: (loginId: string, email: string, isVerified: boolean) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                updatePhone: (loginId: string, phone: string, isVerified: boolean) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                updateDisplayName: (loginId: string, displayName: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                addRoles: (loginId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                removeRoles: (loginId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                addTenant: (loginId: string, tenantId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                removeTenant: (loginId: string, tenantId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                addTenantRoles: (loginId: string, tenantId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                removeTenantRoles: (loginId: string, tenantId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+            };
+            accessKey: {
+                create: (name: string, expireTime: number, roles?: string[], keyTenants?: AssociatedTenant[]) => Promise<SdkResponse<CreatedAccessKeyResponse>>;
+                load: (id: string) => Promise<SdkResponse<AccessKey>>;
+                searchAll: (tenantIds?: string[]) => Promise<SdkResponse<AccessKey[]>>;
+                update: (id: string, name: string) => Promise<SdkResponse<AccessKey>>;
+                deactivate: (id: string) => Promise<SdkResponse<never>>;
+                activate: (id: string) => Promise<SdkResponse<never>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+            };
+            tenant: {
+                create: (name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<CreateTenantResponse>>;
+                createWithId: (id: string, name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<never>>;
+                update: (id: string, name: string, selfProvisioningDomains?: string[]) => Promise<SdkResponse<never>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+                loadAll: () => Promise<SdkResponse<Tenant[]>>;
+            };
+            sso: {
+                configureSettings: (tenantId: string, idpURL: string, idpCert: string, entityId: string, redirectURL?: string, domain?: string) => Promise<SdkResponse<never>>;
+                configureMetadata: (tenantId: string, idpMetadataURL: string) => Promise<SdkResponse<never>>;
+                configureMapping: (tenantId: string, roleMapping?: RoleMapping, attributeMapping?: AttributeMapping) => Promise<SdkResponse<never>>;
+            };
+            jwt: {
+                update: (jwt: string, customClaims?: Record<string, any>) => Promise<SdkResponse<UpdateJWTResponse>>;
+            };
+            permission: {
+                create: (name: string, description?: string) => Promise<SdkResponse<never>>;
+                update: (name: string, newName: string, description?: string) => Promise<SdkResponse<never>>;
+                delete: (name: string) => Promise<SdkResponse<never>>;
+                loadAll: () => Promise<SdkResponse<Permission[]>>;
+            };
+            role: {
+                create: (name: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
+                update: (name: string, newName: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
+                delete: (name: string) => Promise<SdkResponse<never>>;
+                loadAll: () => Promise<SdkResponse<Role[]>>;
+            };
+            group: {
+                loadAllGroups: (tenantId: string) => Promise<SdkResponse<Group[]>>;
+                loadAllGroupsForMember: (tenantId: string, userIds: string[], loginIds: string[]) => Promise<SdkResponse<Group[]>>;
+                loadAllGroupMembers: (tenantId: string, groupId: string) => Promise<SdkResponse<Group[]>>;
+            };
         };
-        signUpOrIn: {
-            email: (identifier: string) => Promise<SdkResponse<never>>;
-            sms: (identifier: string) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string) => Promise<SdkResponse<never>>;
+        getKey: (header: JWTHeaderParameters) => Promise<KeyLike | Uint8Array>;
+        validateJwt: (jwt: string) => Promise<AuthenticationInfo>;
+        validateSession: (sessionToken: string) => Promise<AuthenticationInfo>;
+        refreshSession: (refreshToken: string) => Promise<AuthenticationInfo>;
+        validateAndRefreshSession: (sessionToken?: string, refreshToken?: string) => Promise<AuthenticationInfo>;
+        exchangeAccessKey: (accessKey: string) => Promise<AuthenticationInfo>;
+        validatePermissions: (authInfo: AuthenticationInfo, permissions: string[]) => boolean;
+        validateTenantPermissions: (authInfo: AuthenticationInfo, tenant: string, permissions: string[]) => boolean;
+        validateRoles: (authInfo: AuthenticationInfo, roles: string[]) => boolean;
+        validateTenantRoles: (authInfo: AuthenticationInfo, tenant: string, roles: string[]) => boolean;
+        accessKey: {
+            exchange: (accessKey: string) => Promise<SdkResponse<ExchangeAccessKeyResponse>>;
         };
-        update: {
-            email: (identifier: string, email: string, token?: string) => Promise<SdkResponse<never>>;
-            phone: {
-                email: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
-                sms: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
-                whatsapp: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
-            }; /**
-             * Make sure that all given roles exist on the parsed JWT top level claims
-             * @param authInfo JWT parsed info
-             * @param roles list of roles to make sure they exist on te JWT claims
-             * @returns true if all roles exist, false otherwise
-             */
+        otp: {
+            verify: {
+                email: (loginId: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                    refreshJwt?: string;
+                    cookies?: string[];
+                }>>;
+                sms: (loginId: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                    refreshJwt?: string;
+                    cookies?: string[];
+                }>>;
+                whatsapp: (loginId: string, code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                    refreshJwt?: string;
+                    cookies?: string[];
+                }>>;
+            };
+            signIn: {
+                email: (loginId: string) => Promise<SdkResponse<never>>;
+                sms: (loginId: string) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string) => Promise<SdkResponse<never>>;
+            };
+            signUp: {
+                email: (loginId: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+                sms: (loginId: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+            };
+            signUpOrIn: {
+                email: (loginId: string) => Promise<SdkResponse<never>>;
+                sms: (loginId: string) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string) => Promise<SdkResponse<never>>;
+            };
+            update: {
+                email: (loginId: string, email: string, token?: string) => Promise<SdkResponse<never>>;
+                phone: {
+                    email: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                    sms: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                    whatsapp: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                };
+            };
         };
-    };
-    magicLink: {
-        verify: (token: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-        signIn: {
-            email: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
-            sms: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
+        magicLink: {
+            verify: (token: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
+            }>>;
+            signIn: {
+                email: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+                sms: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+            };
+            signUp: {
+                email: (loginId: string, uri: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+                sms: (loginId: string, uri: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string, uri: string, user?: {
+                    email?: string;
+                    name?: string;
+                    phone?: string;
+                }) => Promise<SdkResponse<never>>;
+            };
+            signUpOrIn: {
+                email: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+                sms: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+                whatsapp: (loginId: string, uri: string) => Promise<SdkResponse<never>>;
+            };
+            update: {
+                email: (loginId: string, email: string, URI?: string, token?: string) => Promise<SdkResponse<never>>;
+                phone: {
+                    email: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                    sms: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                    whatsapp: (loginId: string, phone: string) => Promise<SdkResponse<never>>;
+                };
+            };
         };
-        signUp: {
-            email: (identifier: string, uri: string, user?: {
-                email?: string;
-                name?: string;
-                phone?: string;
-            }) => Promise<SdkResponse<never>>;
-            sms: (identifier: string, uri: string, user?: {
-                email?: string;
-                name?: string;
-                phone?: string;
-            }) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string, uri: string, user?: {
+        enchantedLink: {
+            verify: (token: string) => Promise<SdkResponse<never>>;
+            signIn: (loginId: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
+            }>>;
+            signUpOrIn: (loginId: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
+            signUp: (loginId: string, uri: string, user?: {
                 email?: string;
                 name?: string;
                 phone?: string;
-            }) => Promise<SdkResponse<never>>;
-        };
-        signUpOrIn: {
-            email: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
-            sms: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
-            whatsapp: (identifier: string, uri: string) => Promise<SdkResponse<never>>;
+            }) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
+            }>>;
+            waitForSession: (pendingRef: string, config?: {
+                pollingIntervalMs: number;
+                timeoutMs: number;
+            }) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
+            update: {
+                email: (loginId: string, email: string, URI?: string, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
+            };
         };
-        update: {
-            email: (identifier: string, email: string, uri: string, token?: string) => Promise<SdkResponse<never>>;
-            phone: {
-                email: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
-                sms: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
-                whatsapp: (identifier: string, phone: string) => Promise<SdkResponse<never>>;
+        oauth: {
+            start: {
+                facebook: <B extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B) => Promise<B extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                github: <B_1 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_1) => Promise<B_1 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                google: <B_2 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_2) => Promise<B_2 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                microsoft: <B_3 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_3) => Promise<B_3 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                gitlab: <B_4 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_4) => Promise<B_4 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                apple: <B_5 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_5) => Promise<B_5 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                discord: <B_6 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_6) => Promise<B_6 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
+                linkedin: <B_7 extends {
+                    redirect: boolean;
+                }>(redirectURL?: string, config?: B_7) => Promise<B_7 extends {
+                    redirect: true;
+                } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
             };
-        }; /**
-         * Make sure that all given roles exist on the parsed JWT tenant claims
-         * @param authInfo JWT parsed info
-         * @param roles list of roles to make sure they exist on te JWT claims
-         * @returns true if all roles exist, false otherwise
-         */
-    };
-    enchantedLink: {
-        verify: (token: string) => Promise<SdkResponse<never>>;
-        signIn: (identifier: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
-        signUpOrIn: (identifier: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
-        signUp: (identifier: string, uri: string, user?: {
-            email?: string;
-            name?: string;
-            phone?: string;
-        }) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
-        waitForSession: (pendingRef: string, config?: {
-            pollingIntervalMs: number;
-            timeoutMs: number;
-        }) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-        update: {
-            email: (identifier: string, email: string, uri: string, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
+            exchange: (code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
+            }>>;
         };
-    };
-    oauth: {
-        start: {
-            facebook: <B extends {
-                redirect: boolean;
-            }>(redirectURL?: string, config?: B) => Promise<B extends {
-                redirect: true;
-            } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-            github: <B_1 extends {
+        saml: {
+            start: <B_1 extends {
                 redirect: boolean;
-            }>(redirectURL?: string, config?: B_1) => Promise<B_1 extends {
+            }>(tenantNameOrEmail: string, config?: B_1) => Promise<B_1 extends {
                 redirect: true;
             } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-            google: <B_2 extends {
-                redirect: boolean;
-            }>(redirectURL?: string, config?: B_2) => Promise<B_2 extends {
-                redirect: true;
-            } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-            microsoft: <B_3 extends {
-                redirect: boolean;
-            }>(redirectURL?: string, config?: B_3) => Promise<B_3 extends {
-                redirect: true;
-            } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-            gitlab: <B_4 extends {
-                redirect: boolean;
-            }>(redirectURL?: string, config?: B_4) => Promise<B_4 extends {
-                redirect: true;
-            } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-            apple: <B_5 extends {
-                redirect: boolean;
-            }>(redirectURL?: string, config?: B_5) => Promise<B_5 extends {
-                redirect: true;
-            } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-        };
-        exchange: (code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-    };
-    saml: {
-        start: <B_1 extends {
-            redirect: boolean;
-        }>(tenantNameOrEmail: string, config?: B_1) => Promise<B_1 extends {
-            redirect: true;
-        } ? undefined : SdkResponse<_descope_core_js_sdk.URLResponse>>;
-        exchange: (code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-    };
-    totp: {
-        signUp: (identifier: string, user?: {
-            email?: string;
-            name?: string;
-            phone?: string;
-        }) => Promise<SdkResponse<_descope_core_js_sdk.TOTPResponse>>;
-        verify: (identifier: string, code: string, loginOptions?: {
-            stepup?: boolean;
-            mfa?: boolean;
-            customClaims?: Record<string, any>;
-        }, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-        update: (identifier: string, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.TOTPResponse>>;
-    };
-    webauthn: {
-        signUp: {
-            start: (identifier: string, origin: string, name: string) => Promise<SdkResponse<{
-                transactionId: string;
-                options: string;
-                create: boolean;
+            exchange: (code: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
             }>>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
         };
-        signIn: {
-            start: (identifier: string, origin: string, loginOptions?: {
+        totp: {
+            signUp: (loginId: string, user?: {
+                email?: string;
+                name?: string;
+                phone?: string;
+            }) => Promise<SdkResponse<_descope_core_js_sdk.TOTPResponse>>;
+            verify: (loginId: string, code: string, loginOptions?: {
                 stepup?: boolean;
                 mfa?: boolean;
                 customClaims?: Record<string, any>;
-            }, token?: string) => Promise<SdkResponse<{
-                transactionId: string;
-                options: string;
-                create: boolean;
-            }>>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-        };
-        signUpOrIn: {
-            start: (identifier: string, origin: string) => Promise<SdkResponse<{
-                transactionId: string;
-                options: string;
-                create: boolean;
+            }, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                refreshJwt?: string;
+                cookies?: string[];
             }>>;
+            update: (loginId: string, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.TOTPResponse>>;
         };
-        update: {
-            start: (identifier: string, origin: string, token: string) => Promise<SdkResponse<{
-                transactionId: string;
-                options: string;
-                create: boolean;
-            }>>;
-            finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.ResponseData>>;
-        };
-    };
-    flow: {
-        start: (flowId: string, interactionId?: string, input?: Record<string, FormDataEntryValue>, options?: {
-            redirectUrl?: string;
-            tenant?: string;
-            deviceInfo?: {
-                webAuthnSupport?: boolean;
+        webauthn: {
+            signUp: {
+                start: (loginId: string, origin: string, name: string) => Promise<SdkResponse<{
+                    transactionId: string;
+                    options: string;
+                    create: boolean;
+                }>>;
+                finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                    refreshJwt?: string;
+                    cookies?: string[];
+                }>>;
             };
-            lastUser?: {
-                authMethod?: "otp" | "totp" | "webauthn" | "magiclink" | "social" | "sso";
-                oauthProvider?: string;
-                externalId?: string;
+            signIn: {
+                start: (loginId: string, origin: string, loginOptions?: {
+                    stepup?: boolean;
+                    mfa?: boolean;
+                    customClaims?: Record<string, any>;
+                }, token?: string) => Promise<SdkResponse<{
+                    transactionId: string;
+                    options: string;
+                    create: boolean;
+                }>>;
+                finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+                    refreshJwt?: string;
+                    cookies?: string[];
+                }>>;
             };
-        }) => Promise<SdkResponse<_descope_core_js_sdk.FlowResponse>>;
-        next: (executionId: string, stepId: string, interactionId: string, input?: Record<string, FormDataEntryValue>) => Promise<SdkResponse<_descope_core_js_sdk.FlowResponse>>;
-    };
-    refresh: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-    logout: (token?: string) => Promise<SdkResponse<never>>;
-    logoutAll: (token?: string) => Promise<SdkResponse<never>>;
-    me: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-    isJwtExpired: (token: string) => boolean;
-    getJwtPermissions: (token: string, tenant?: string) => string[];
-    getJwtRoles: (token: string, tenant?: string) => string[];
-    httpClient: {
-        get: (path: string, config?: {
-            headers?: HeadersInit;
-            queryParams?: {
-                [key: string]: string;
+            signUpOrIn: {
+                start: (loginId: string, origin: string) => Promise<SdkResponse<{
+                    transactionId: string;
+                    options: string;
+                    create: boolean;
+                }>>;
             };
-            token?: string;
-        }) => Promise<globalThis.Response>;
-        post: (path: string, body?: any, config?: {
-            headers?: HeadersInit;
-            queryParams?: {
-                [key: string]: string;
+            update: {
+                start: (loginId: string, origin: string, token: string) => Promise<SdkResponse<{
+                    transactionId: string;
+                    options: string;
+                    create: boolean;
+                }>>;
+                finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.ResponseData>>;
             };
-            token?: string;
-        }) => Promise<globalThis.Response>;
-        put: (path: string, body?: any, config?: {
-            headers?: HeadersInit;
-            queryParams?: {
-                [key: string]: string;
-            };
-            token?: string;
-        }) => Promise<globalThis.Response>;
-        delete: (path: string, body?: any, config?: {
-            headers?: HeadersInit;
-            queryParams?: {
-                [key: string]: string;
+        };
+        flow: {
+            start: (flowId: string, options?: {
+                redirectUrl?: string;
+                tenant?: string;
+                deviceInfo?: {
+                    webAuthnSupport?: boolean;
+                };
+                lastAuth?: {
+                    authMethod?: "otp" | "oauth" | "saml" | "totp" | "webauthn" | "magiclink" | "enchantedlink";
+                    oauthProvider?: string;
+                    name?: string;
+                    loginId?: string;
+                };
+            }, conditionInteractionId?: string, interactionId?: string, input?: {
+                [x: string]: string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | any)[])[])[])[])[])[])[])[])[])[])[];
+            }) => Promise<SdkResponse<_descope_core_js_sdk.FlowResponse>>;
+            next: (executionId: string, stepId: string, interactionId: string, input?: {
+                [x: string]: string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | (string | number | boolean | any)[])[])[])[])[])[])[])[])[])[])[];
+            }) => Promise<SdkResponse<_descope_core_js_sdk.FlowResponse>>;
+        };
+        refresh: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse & {
+            refreshJwt?: string;
+            cookies?: string[];
+        }>>;
+        logout: (token?: string) => Promise<SdkResponse<never>>;
+        logoutAll: (token?: string) => Promise<SdkResponse<never>>;
+        me: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+        isJwtExpired: (token: string) => boolean;
+        getJwtPermissions: (token: string, tenant?: string) => string[];
+        getJwtRoles: (token: string, tenant?: string) => string[];
+        httpClient: {
+            get: (path: string, config?: {
+                headers?: HeadersInit;
+                queryParams?: {
+                    [key: string]: string;
+                };
+                token?: string;
+            }) => Promise<Response>;
+            post: (path: string, body?: any, config?: {
+                headers?: HeadersInit;
+                queryParams?: {
+                    [key: string]: string;
+                };
+                token?: string;
+            }) => Promise<Response>;
+            put: (path: string, body?: any, config?: {
+                headers?: HeadersInit;
+                queryParams?: {
+                    [key: string]: string;
+                };
+                token?: string;
+            }) => Promise<Response>;
+            delete: (path: string, body?: any, config?: {
+                headers?: HeadersInit;
+                queryParams?: {
+                    [key: string]: string;
+                };
+                token?: string;
+            }) => Promise<Response>;
+            hooks?: {
+                beforeRequest?: (config: _descope_core_js_sdk.RequestConfig) => _descope_core_js_sdk.RequestConfig;
+                afterRequest?: (req: _descope_core_js_sdk.RequestConfig, res: Response) => void | Promise<void>;
             };
-            token?: string;
-        }) => Promise<globalThis.Response>;
+        };
     };
-}) & {
-    DeliveryMethods: typeof _descope_core_js_sdk__default.DeliveryMethods;
-    RefreshTokenCookieName: typeof refreshTokenCookieName;
-    SessionTokenCookieName: typeof sessionTokenCookieName;
+    /** Descope SDK client with delivery methods enum.
+     *
+     * Please see full documentation at {@link https://docs.descope.com/guides Descope Docs}
+     * @example Usage
+     *
+     * ```js
+     * import descopeSdk from '@descope/node-sdk';
+     *
+     * const myProjectId = 'xxx';
+     * const sdk = descopeSdk({ projectId: myProjectId });
+     *
+     * const userLoginId = 'loginId';
+     * sdk.otp.signIn.email(userLoginId);
+     * const jwtResponse = sdk.otp.verify.email(userLoginId, codeFromEmail);
+     * ```
+     */
+    RefreshTokenCookieName: string;
+    SessionTokenCookieName: string;
 };
 
-export { NodeSdkArgs, sdkWithAttributes as default };
+export { nodeSdk as default };