@distilled.cloud/workos 0.0.0 → 0.15.1

package/lib/operations/RedirectUrisControllerCreate.d.ts

@@ -0,0 +1,31 @@
+import * as Schema from "effect/Schema";
+import { BadRequest, UnprocessableEntity } from "../errors.ts";
+export declare const RedirectUrisControllerCreateInput: Schema.Struct<{
+    readonly uri: Schema.String;
+}>;
+export type RedirectUrisControllerCreateInput = typeof RedirectUrisControllerCreateInput.Type;
+export declare const RedirectUrisControllerCreateOutput: Schema.Struct<{
+    readonly object: Schema.String;
+    readonly id: Schema.String;
+    readonly uri: Schema.String;
+    readonly default: Schema.Boolean;
+    readonly created_at: Schema.String;
+    readonly updated_at: Schema.String;
+}>;
+export type RedirectUrisControllerCreateOutput = typeof RedirectUrisControllerCreateOutput.Type;
+/**
+ * Create a redirect URI
+ *
+ * Creates a new redirect URI for an environment.
+ */
+export declare const RedirectUrisControllerCreate: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly uri: string;
+}, {
+    readonly created_at: string;
+    readonly default: boolean;
+    readonly id: string;
+    readonly object: string;
+    readonly updated_at: string;
+    readonly uri: string;
+}, BadRequest | UnprocessableEntity, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=RedirectUrisControllerCreate.d.ts.map

package/lib/operations/RedirectUrisControllerCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedirectUrisControllerCreate.d.ts","sourceRoot":"","sources":["../../src/operations/RedirectUrisControllerCreate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG/D,eAAO,MAAM,iCAAiC;;EAG+B,CAAC;AAC9E,MAAM,MAAM,iCAAiC,GAC3C,OAAO,iCAAiC,CAAC,IAAI,CAAC;AAGhD,eAAO,MAAM,kCAAkC;;;;;;;EAQ3C,CAAC;AACL,MAAM,MAAM,kCAAkC,GAC5C,OAAO,kCAAkC,CAAC,IAAI,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;4EAKpC,CAAC"}

package/lib/operations/RedirectUrisControllerCreate.js

@@ -0,0 +1,32 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { BadRequest, UnprocessableEntity } from "../errors.js";
+// Input Schema
+export const RedirectUrisControllerCreateInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    uri: Schema.String,
+}).pipe(T.Http({ method: "POST", path: "/user_management/redirect_uris" }));
+// Output Schema
+export const RedirectUrisControllerCreateOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    uri: Schema.String,
+    default: Schema.Boolean,
+    created_at: Schema.String,
+    updated_at: Schema.String,
+});
+// The operation
+/**
+ * Create a redirect URI
+ *
+ * Creates a new redirect URI for an environment.
+ */
+export const RedirectUrisControllerCreate = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: RedirectUrisControllerCreateInput,
+    outputSchema: RedirectUrisControllerCreateOutput,
+    errors: [BadRequest, UnprocessableEntity],
+}));
+//# sourceMappingURL=RedirectUrisControllerCreate.js.map

package/lib/operations/RedirectUrisControllerCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedirectUrisControllerCreate.js","sourceRoot":"","sources":["../../src/operations/RedirectUrisControllerCreate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE/D,eAAe;AACf,MAAM,CAAC,MAAM,iCAAiC;AAC5C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;AAI9E,gBAAgB;AAChB,MAAM,CAAC,MAAM,kCAAkC;AAC7C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,GAAG,EAAE,MAAM,CAAC,MAAM;IAClB,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B;AACvC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,iCAAiC;IAC9C,YAAY,EAAE,kCAAkC;IAChD,MAAM,EAAE,CAAC,UAAU,EAAE,mBAAmB,CAAU;CACnD,CAAC,CAAC,CAAC"}

package/lib/operations/SsoControllerAuthorize.d.ts

@@ -0,0 +1,64 @@
+import * as Schema from "effect/Schema";
+export declare const SsoControllerAuthorizeInput: Schema.Struct<{
+    readonly provider_scopes: Schema.optional<Schema.String>;
+    readonly provider_query_params: Schema.optional<Schema.String>;
+    readonly client_id: Schema.String;
+    readonly domain: Schema.optional<Schema.String>;
+    readonly provider: Schema.optional<Schema.Literals<readonly ["AppleOAuth", "BitbucketOAuth", "GitHubOAuth", "GitLabOAuth", "GoogleOAuth", "IntuitOAuth", "LinkedInOAuth", "MicrosoftOAuth", "SalesforceOAuth", "SlackOAuth", "VercelMarketplaceOAuth", "VercelOAuth", "XeroOAuth"]>>;
+    readonly redirect_uri: Schema.String;
+    readonly response_type: Schema.String;
+    readonly state: Schema.optional<Schema.String>;
+    readonly connection: Schema.optional<Schema.String>;
+    readonly organization: Schema.optional<Schema.String>;
+    readonly domain_hint: Schema.optional<Schema.String>;
+    readonly login_hint: Schema.optional<Schema.String>;
+    readonly nonce: Schema.optional<Schema.String>;
+}>;
+export type SsoControllerAuthorizeInput = typeof SsoControllerAuthorizeInput.Type;
+export declare const SsoControllerAuthorizeOutput: Schema.Struct<{
+    readonly url: Schema.String;
+}>;
+export type SsoControllerAuthorizeOutput = typeof SsoControllerAuthorizeOutput.Type;
+/**
+ * Initiate SSO
+ *
+ * Initiates the single sign-on flow.
+ *
+ * @param provider_scopes - Additional scopes to request from the identity provider. Applicable when using OAuth or OpenID Connect connections.
+ * @param provider_query_params - Key/value pairs of query parameters to pass to the OAuth provider. Only applicable when using OAuth connections.
+ * @param client_id - The unique identifier of the WorkOS environment client.
+ * @param domain - Deprecated. Use `connection` or `organization` instead. Used to initiate SSO for a connection by domain. The domain must be associated with a connection in your WorkOS environment.
+ * @param provider - Used to initiate OAuth authentication with various providers.
+ * @param redirect_uri - Where to redirect the user after they complete the authentication process. You must use one of the redirect URIs configured via the [Redirects](https://dashboard.workos.com/redirects) page on the dashboard.
+ * @param response_type - The only valid option for the response type parameter is `"code"`.
+
+The `"code"` parameter value initiates an [authorization code grant type](https://tools.ietf.org/html/rfc6749#section-4.1). This grant type allows you to exchange an authorization code for an access token during the redirect that takes place after a user has authenticated with an identity provider.
+ * @param state - An optional parameter that can be used to encode arbitrary information to help restore application state between redirects. If included, the redirect URI received from WorkOS will contain the exact `state` that was passed.
+ * @param connection - Used to initiate SSO for a connection. The value should be a WorkOS connection ID.
+
+You can persist the WorkOS connection ID with application user or team identifiers. WorkOS will use the connection indicated by the connection parameter to direct the user to the corresponding IdP for authentication.
+ * @param organization - Used to initiate SSO for an organization. The value should be a WorkOS organization ID.
+
+You can persist the WorkOS organization ID with application user or team identifiers. WorkOS will use the organization ID to determine the appropriate connection and the IdP to direct the user to for authentication.
+ * @param domain_hint - Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type.
+ * @param login_hint - Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, and Entra ID connections.
+ * @param nonce - A random string generated by the client that is used to mitigate replay attacks.
+ */
+export declare const SsoControllerAuthorize: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly client_id: string;
+    readonly connection?: string | undefined;
+    readonly domain?: string | undefined;
+    readonly domain_hint?: string | undefined;
+    readonly login_hint?: string | undefined;
+    readonly nonce?: string | undefined;
+    readonly organization?: string | undefined;
+    readonly provider?: "AppleOAuth" | "BitbucketOAuth" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "IntuitOAuth" | "LinkedInOAuth" | "MicrosoftOAuth" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth" | undefined;
+    readonly provider_query_params?: string | undefined;
+    readonly provider_scopes?: string | undefined;
+    readonly redirect_uri: string;
+    readonly response_type: string;
+    readonly state?: string | undefined;
+}, {
+    readonly url: string;
+}, never, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=SsoControllerAuthorize.d.ts.map

package/lib/operations/SsoControllerAuthorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerAuthorize.d.ts","sourceRoot":"","sources":["../../src/operations/SsoControllerAuthorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAKxC,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;EA+BoB,CAAC;AAC7D,MAAM,MAAM,2BAA2B,GACrC,OAAO,2BAA2B,CAAC,IAAI,CAAC;AAG1C,eAAO,MAAM,4BAA4B;;EAGrC,CAAC;AACL,MAAM,MAAM,4BAA4B,GACtC,OAAO,4BAA4B,CAAC,IAAI,CAAC;AAG3C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;iDAKlC,CAAC"}

package/lib/operations/SsoControllerAuthorize.js

@@ -0,0 +1,70 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+// Input Schema
+export const SsoControllerAuthorizeInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    provider_scopes: Schema.optional(Schema.String),
+    provider_query_params: Schema.optional(Schema.String),
+    client_id: Schema.String,
+    domain: Schema.optional(Schema.String),
+    provider: Schema.optional(Schema.Literals([
+        "AppleOAuth",
+        "BitbucketOAuth",
+        "GitHubOAuth",
+        "GitLabOAuth",
+        "GoogleOAuth",
+        "IntuitOAuth",
+        "LinkedInOAuth",
+        "MicrosoftOAuth",
+        "SalesforceOAuth",
+        "SlackOAuth",
+        "VercelMarketplaceOAuth",
+        "VercelOAuth",
+        "XeroOAuth",
+    ])),
+    redirect_uri: Schema.String,
+    response_type: Schema.String,
+    state: Schema.optional(Schema.String),
+    connection: Schema.optional(Schema.String),
+    organization: Schema.optional(Schema.String),
+    domain_hint: Schema.optional(Schema.String),
+    login_hint: Schema.optional(Schema.String),
+    nonce: Schema.optional(Schema.String),
+}).pipe(T.Http({ method: "GET", path: "/sso/authorize" }));
+// Output Schema
+export const SsoControllerAuthorizeOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    url: Schema.String,
+});
+// The operation
+/**
+ * Initiate SSO
+ *
+ * Initiates the single sign-on flow.
+ *
+ * @param provider_scopes - Additional scopes to request from the identity provider. Applicable when using OAuth or OpenID Connect connections.
+ * @param provider_query_params - Key/value pairs of query parameters to pass to the OAuth provider. Only applicable when using OAuth connections.
+ * @param client_id - The unique identifier of the WorkOS environment client.
+ * @param domain - Deprecated. Use `connection` or `organization` instead. Used to initiate SSO for a connection by domain. The domain must be associated with a connection in your WorkOS environment.
+ * @param provider - Used to initiate OAuth authentication with various providers.
+ * @param redirect_uri - Where to redirect the user after they complete the authentication process. You must use one of the redirect URIs configured via the [Redirects](https://dashboard.workos.com/redirects) page on the dashboard.
+ * @param response_type - The only valid option for the response type parameter is `"code"`.
+
+The `"code"` parameter value initiates an [authorization code grant type](https://tools.ietf.org/html/rfc6749#section-4.1). This grant type allows you to exchange an authorization code for an access token during the redirect that takes place after a user has authenticated with an identity provider.
+ * @param state - An optional parameter that can be used to encode arbitrary information to help restore application state between redirects. If included, the redirect URI received from WorkOS will contain the exact `state` that was passed.
+ * @param connection - Used to initiate SSO for a connection. The value should be a WorkOS connection ID.
+
+You can persist the WorkOS connection ID with application user or team identifiers. WorkOS will use the connection indicated by the connection parameter to direct the user to the corresponding IdP for authentication.
+ * @param organization - Used to initiate SSO for an organization. The value should be a WorkOS organization ID.
+
+You can persist the WorkOS organization ID with application user or team identifiers. WorkOS will use the organization ID to determine the appropriate connection and the IdP to direct the user to for authentication.
+ * @param domain_hint - Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type.
+ * @param login_hint - Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, and Entra ID connections.
+ * @param nonce - A random string generated by the client that is used to mitigate replay attacks.
+ */
+export const SsoControllerAuthorize = /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: SsoControllerAuthorizeInput,
+    outputSchema: SsoControllerAuthorizeOutput,
+}));
+//# sourceMappingURL=SsoControllerAuthorize.js.map

package/lib/operations/SsoControllerAuthorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerAuthorize.js","sourceRoot":"","sources":["../../src/operations/SsoControllerAuthorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAElC,eAAe;AACf,MAAM,CAAC,MAAM,2BAA2B;AACtC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC/C,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrD,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CACvB,MAAM,CAAC,QAAQ,CAAC;QACd,YAAY;QACZ,gBAAgB;QAChB,aAAa;QACb,aAAa;QACb,aAAa;QACb,aAAa;QACb,eAAe;QACf,gBAAgB;QAChB,iBAAiB;QACjB,YAAY;QACZ,wBAAwB;QACxB,aAAa;QACb,WAAW;KACZ,CAAC,CACH;IACD,YAAY,EAAE,MAAM,CAAC,MAAM;IAC3B,aAAa,EAAE,MAAM,CAAC,MAAM;IAC5B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACtC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAI7D,gBAAgB;AAChB,MAAM,CAAC,MAAM,4BAA4B;AACvC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CACxE,GAAG,EAAE,CAAC,CAAC;IACL,WAAW,EAAE,2BAA2B;IACxC,YAAY,EAAE,4BAA4B;CAC3C,CAAC,CACH,CAAC"}

package/lib/operations/SsoControllerGetProfile.d.ts

@@ -0,0 +1,47 @@
+import * as Schema from "effect/Schema";
+import { NotFound } from "../errors.ts";
+export declare const SsoControllerGetProfileInput: Schema.Struct<{}>;
+export type SsoControllerGetProfileInput = typeof SsoControllerGetProfileInput.Type;
+export declare const SsoControllerGetProfileOutput: Schema.Struct<{
+    readonly object: Schema.String;
+    readonly id: Schema.String;
+    readonly organization_id: Schema.NullOr<Schema.String>;
+    readonly connection_id: Schema.String;
+    readonly connection_type: Schema.Literals<readonly ["Pending", "ADFSSAML", "AdpOidc", "AppleOAuth", "Auth0Migration", "Auth0SAML", "AzureSAML", "BitbucketOAuth", "CasSAML", "ClassLinkSAML", "CleverOIDC", "CloudflareSAML", "CyberArkSAML", "DiscordOAuth", "DuoSAML", "EntraIdOIDC", "GenericOIDC", "GenericSAML", "GitHubOAuth", "GitLabOAuth", "GoogleOAuth", "GoogleOIDC", "GoogleSAML", "IntuitOAuth", "JumpCloudSAML", "KeycloakSAML", "LastPassSAML", "LinkedInOAuth", "LoginGovOidc", "MagicLink", "MicrosoftOAuth", "MiniOrangeSAML", "NetIqSAML", "OktaOIDC", "OktaSAML", "OneLoginSAML", "OracleSAML", "PingFederateSAML", "PingOneSAML", "RipplingSAML", "SalesforceSAML", "ShibbolethGenericSAML", "ShibbolethSAML", "SimpleSamlPhpSAML", "SalesforceOAuth", "SlackOAuth", "TestIdp", "VercelMarketplaceOAuth", "VercelOAuth", "VMwareSAML", "XeroOAuth"]>;
+    readonly idp_id: Schema.String;
+    readonly email: Schema.String;
+    readonly first_name: Schema.NullOr<Schema.String>;
+    readonly last_name: Schema.NullOr<Schema.String>;
+    readonly role: Schema.optional<Schema.Unknown>;
+    readonly roles: Schema.optional<Schema.Unknown>;
+    readonly groups: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly custom_attributes: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    readonly raw_attributes: Schema.$Record<Schema.String, Schema.Unknown>;
+}>;
+export type SsoControllerGetProfileOutput = typeof SsoControllerGetProfileOutput.Type;
+/**
+ * Get a User Profile
+ *
+ * Exchange an access token for a user's [Profile](/reference/sso/profile). Because this profile is returned in the [Get a Profile and Token endpoint](/reference/sso/profile/get-profile-and-token) your application usually does not need to call this endpoint. It is available for any authentication flows that require an additional endpoint to retrieve a user's profile.
+ */
+export declare const SsoControllerGetProfile: import("@distilled.cloud/core/client").OperationMethod<{}, {
+    readonly connection_id: string;
+    readonly connection_type: "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0Migration" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "ClassLinkSAML" | "CleverOIDC" | "CloudflareSAML" | "CyberArkSAML" | "DiscordOAuth" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "Pending" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceOAuth" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SlackOAuth" | "TestIdp" | "VMwareSAML" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth";
+    readonly custom_attributes?: {
+        readonly [x: string]: unknown;
+    } | undefined;
+    readonly email: string;
+    readonly first_name: string | null;
+    readonly groups?: readonly string[] | undefined;
+    readonly id: string;
+    readonly idp_id: string;
+    readonly last_name: string | null;
+    readonly object: string;
+    readonly organization_id: string | null;
+    readonly raw_attributes: {
+        readonly [x: string]: unknown;
+    };
+    readonly role?: unknown;
+    readonly roles?: unknown;
+}, NotFound, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=SsoControllerGetProfile.d.ts.map

package/lib/operations/SsoControllerGetProfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerGetProfile.d.ts","sourceRoot":"","sources":["../../src/operations/SsoControllerGetProfile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,eAAO,MAAM,4BAA4B,mBAGtC,CAAC;AACJ,MAAM,MAAM,4BAA4B,GACtC,OAAO,4BAA4B,CAAC,IAAI,CAAC;AAG3C,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;EAsEtC,CAAC;AACL,MAAM,MAAM,6BAA6B,GACvC,OAAO,6BAA6B,CAAC,IAAI,CAAC;AAG5C;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;oDAMnC,CAAC"}

package/lib/operations/SsoControllerGetProfile.js

@@ -0,0 +1,89 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { NotFound } from "../errors.js";
+// Input Schema
+export const SsoControllerGetProfileInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({}).pipe(T.Http({ method: "GET", path: "/sso/profile" }));
+// Output Schema
+export const SsoControllerGetProfileOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    object: Schema.String,
+    id: Schema.String,
+    organization_id: Schema.NullOr(Schema.String),
+    connection_id: Schema.String,
+    connection_type: Schema.Literals([
+        "Pending",
+        "ADFSSAML",
+        "AdpOidc",
+        "AppleOAuth",
+        "Auth0Migration",
+        "Auth0SAML",
+        "AzureSAML",
+        "BitbucketOAuth",
+        "CasSAML",
+        "ClassLinkSAML",
+        "CleverOIDC",
+        "CloudflareSAML",
+        "CyberArkSAML",
+        "DiscordOAuth",
+        "DuoSAML",
+        "EntraIdOIDC",
+        "GenericOIDC",
+        "GenericSAML",
+        "GitHubOAuth",
+        "GitLabOAuth",
+        "GoogleOAuth",
+        "GoogleOIDC",
+        "GoogleSAML",
+        "IntuitOAuth",
+        "JumpCloudSAML",
+        "KeycloakSAML",
+        "LastPassSAML",
+        "LinkedInOAuth",
+        "LoginGovOidc",
+        "MagicLink",
+        "MicrosoftOAuth",
+        "MiniOrangeSAML",
+        "NetIqSAML",
+        "OktaOIDC",
+        "OktaSAML",
+        "OneLoginSAML",
+        "OracleSAML",
+        "PingFederateSAML",
+        "PingOneSAML",
+        "RipplingSAML",
+        "SalesforceSAML",
+        "ShibbolethGenericSAML",
+        "ShibbolethSAML",
+        "SimpleSamlPhpSAML",
+        "SalesforceOAuth",
+        "SlackOAuth",
+        "TestIdp",
+        "VercelMarketplaceOAuth",
+        "VercelOAuth",
+        "VMwareSAML",
+        "XeroOAuth",
+    ]),
+    idp_id: Schema.String,
+    email: Schema.String,
+    first_name: Schema.NullOr(Schema.String),
+    last_name: Schema.NullOr(Schema.String),
+    role: Schema.optional(Schema.Unknown),
+    roles: Schema.optional(Schema.Unknown),
+    groups: Schema.optional(Schema.Array(Schema.String)),
+    custom_attributes: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+    raw_attributes: Schema.Record(Schema.String, Schema.Unknown),
+});
+// The operation
+/**
+ * Get a User Profile
+ *
+ * Exchange an access token for a user's [Profile](/reference/sso/profile). Because this profile is returned in the [Get a Profile and Token endpoint](/reference/sso/profile/get-profile-and-token) your application usually does not need to call this endpoint. It is available for any authentication flows that require an additional endpoint to retrieve a user's profile.
+ */
+export const SsoControllerGetProfile = /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: SsoControllerGetProfileInput,
+    outputSchema: SsoControllerGetProfileOutput,
+    errors: [NotFound],
+}));
+//# sourceMappingURL=SsoControllerGetProfile.js.map

package/lib/operations/SsoControllerGetProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerGetProfile.js","sourceRoot":"","sources":["../../src/operations/SsoControllerGetProfile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,eAAe;AACf,MAAM,CAAC,MAAM,4BAA4B;AACvC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAChD,CAAC;AAIJ,gBAAgB;AAChB,MAAM,CAAC,MAAM,6BAA6B;AACxC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC,MAAM;IAC5B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC/B,SAAS;QACT,UAAU;QACV,SAAS;QACT,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,WAAW;QACX,gBAAgB;QAChB,SAAS;QACT,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,cAAc;QACd,cAAc;QACd,SAAS;QACT,aAAa;QACb,aAAa;QACb,aAAa;QACb,aAAa;QACb,aAAa;QACb,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,eAAe;QACf,cAAc;QACd,cAAc;QACd,eAAe;QACf,cAAc;QACd,WAAW;QACX,gBAAgB;QAChB,gBAAgB;QAChB,WAAW;QACX,UAAU;QACV,UAAU;QACV,cAAc;QACd,YAAY;QACZ,kBAAkB;QAClB,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,uBAAuB;QACvB,gBAAgB;QAChB,mBAAmB;QACnB,iBAAiB;QACjB,YAAY;QACZ,SAAS;QACT,wBAAwB;QACxB,aAAa;QACb,YAAY;QACZ,WAAW;KACZ,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAC7C;IACD,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;CAC7D,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CACzE,GAAG,EAAE,CAAC,CAAC;IACL,WAAW,EAAE,4BAA4B;IACzC,YAAY,EAAE,6BAA6B;IAC3C,MAAM,EAAE,CAAC,QAAQ,CAAU;CAC5B,CAAC,CACH,CAAC"}

package/lib/operations/SsoControllerJsonWebKeySet.d.ts

@@ -0,0 +1,41 @@
+import * as Schema from "effect/Schema";
+import { NotFound } from "../errors.ts";
+export declare const SsoControllerJsonWebKeySetInput: Schema.Struct<{
+    readonly clientId: Schema.String;
+}>;
+export type SsoControllerJsonWebKeySetInput = typeof SsoControllerJsonWebKeySetInput.Type;
+export declare const SsoControllerJsonWebKeySetOutput: Schema.Struct<{
+    readonly keys: Schema.$Array<Schema.Struct<{
+        readonly alg: Schema.String;
+        readonly kty: Schema.String;
+        readonly use: Schema.String;
+        readonly x5c: Schema.$Array<Schema.String>;
+        readonly n: Schema.String;
+        readonly e: Schema.String;
+        readonly kid: Schema.String;
+        readonly "x5t#S256": Schema.String;
+    }>>;
+}>;
+export type SsoControllerJsonWebKeySetOutput = typeof SsoControllerJsonWebKeySetOutput.Type;
+/**
+ * Get JWKS
+ *
+ * Returns the JSON Web Key Set (JWKS) containing the public keys used for verifying access tokens.
+ *
+ * @param clientId - Identifies the application making the request to the WorkOS server. You can obtain your client ID from the [API Keys](https://dashboard.workos.com/api-keys) page in the dashboard.
+ */
+export declare const SsoControllerJsonWebKeySet: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly clientId: string;
+}, {
+    readonly keys: readonly {
+        readonly alg: string;
+        readonly e: string;
+        readonly kid: string;
+        readonly kty: string;
+        readonly n: string;
+        readonly use: string;
+        readonly x5c: readonly string[];
+        readonly "x5t#S256": string;
+    }[];
+}, NotFound, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=SsoControllerJsonWebKeySet.d.ts.map

package/lib/operations/SsoControllerJsonWebKeySet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerJsonWebKeySet.d.ts","sourceRoot":"","sources":["../../src/operations/SsoControllerJsonWebKeySet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,eAAO,MAAM,+BAA+B;;EAGsB,CAAC;AACnE,MAAM,MAAM,+BAA+B,GACzC,OAAO,+BAA+B,CAAC,IAAI,CAAC;AAG9C,eAAO,MAAM,gCAAgC;;;;;;;;;;;EAczC,CAAC;AACL,MAAM,MAAM,gCAAgC,GAC1C,OAAO,gCAAgC,CAAC,IAAI,CAAC;AAG/C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;oDAMtC,CAAC"}

package/lib/operations/SsoControllerJsonWebKeySet.js

@@ -0,0 +1,37 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { NotFound } from "../errors.js";
+// Input Schema
+export const SsoControllerJsonWebKeySetInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    clientId: Schema.String.pipe(T.PathParam()),
+}).pipe(T.Http({ method: "GET", path: "/sso/jwks/{clientId}" }));
+// Output Schema
+export const SsoControllerJsonWebKeySetOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    keys: Schema.Array(Schema.Struct({
+        alg: Schema.String,
+        kty: Schema.String,
+        use: Schema.String,
+        x5c: Schema.Array(Schema.String),
+        n: Schema.String,
+        e: Schema.String,
+        kid: Schema.String,
+        "x5t#S256": Schema.String,
+    })),
+});
+// The operation
+/**
+ * Get JWKS
+ *
+ * Returns the JSON Web Key Set (JWKS) containing the public keys used for verifying access tokens.
+ *
+ * @param clientId - Identifies the application making the request to the WorkOS server. You can obtain your client ID from the [API Keys](https://dashboard.workos.com/api-keys) page in the dashboard.
+ */
+export const SsoControllerJsonWebKeySet = /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: SsoControllerJsonWebKeySetInput,
+    outputSchema: SsoControllerJsonWebKeySetOutput,
+    errors: [NotFound],
+}));
+//# sourceMappingURL=SsoControllerJsonWebKeySet.js.map

package/lib/operations/SsoControllerJsonWebKeySet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerJsonWebKeySet.js","sourceRoot":"","sources":["../../src/operations/SsoControllerJsonWebKeySet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,eAAe;AACf,MAAM,CAAC,MAAM,+BAA+B;AAC1C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CAC5C,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;AAInE,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC;AAC3C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,KAAK,CAChB,MAAM,CAAC,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,MAAM;QAChB,CAAC,EAAE,MAAM,CAAC,MAAM;QAChB,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,CAAC,CACH;CACF,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAC5E,GAAG,EAAE,CAAC,CAAC;IACL,WAAW,EAAE,+BAA+B;IAC5C,YAAY,EAAE,gCAAgC;IAC9C,MAAM,EAAE,CAAC,QAAQ,CAAU;CAC5B,CAAC,CACH,CAAC"}

package/lib/operations/SsoControllerLogout.d.ts

@@ -0,0 +1,20 @@
+import * as Schema from "effect/Schema";
+import { NotFound } from "../errors.ts";
+export declare const SsoControllerLogoutInput: Schema.Struct<{
+    readonly token: Schema.String;
+}>;
+export type SsoControllerLogoutInput = typeof SsoControllerLogoutInput.Type;
+export declare const SsoControllerLogoutOutput: Schema.Void;
+export type SsoControllerLogoutOutput = typeof SsoControllerLogoutOutput.Type;
+/**
+ * Logout Redirect
+ *
+ * Logout allows to sign out a user from your application by triggering the identity provider sign out flow. This `GET` endpoint should be a redirection, since the identity provider user will be identified in the browser session.
+ * Before redirecting to this endpoint, you need to generate a short-lived logout token using the [Logout Authorize](/reference/sso/logout/authorize) endpoint.
+ *
+ * @param token - The logout token returned from the [Logout Authorize](/reference/sso/logout/authorize) endpoint.
+ */
+export declare const SsoControllerLogout: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly token: string;
+}, void, NotFound, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=SsoControllerLogout.d.ts.map

package/lib/operations/SsoControllerLogout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerLogout.d.ts","sourceRoot":"","sources":["../../src/operations/SsoControllerLogout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,eAAO,MAAM,wBAAwB;;EAGoB,CAAC;AAC1D,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAC;AAG5E,eAAO,MAAM,yBAAyB,aACG,CAAC;AAC1C,MAAM,MAAM,yBAAyB,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAC;AAG9E;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;0DAI7B,CAAC"}

package/lib/operations/SsoControllerLogout.js

@@ -0,0 +1,27 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { NotFound } from "../errors.js";
+// Input Schema
+export const SsoControllerLogoutInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    token: Schema.String,
+}).pipe(T.Http({ method: "GET", path: "/sso/logout" }));
+// Output Schema
+export const SsoControllerLogoutOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Void;
+// The operation
+/**
+ * Logout Redirect
+ *
+ * Logout allows to sign out a user from your application by triggering the identity provider sign out flow. This `GET` endpoint should be a redirection, since the identity provider user will be identified in the browser session.
+ * Before redirecting to this endpoint, you need to generate a short-lived logout token using the [Logout Authorize](/reference/sso/logout/authorize) endpoint.
+ *
+ * @param token - The logout token returned from the [Logout Authorize](/reference/sso/logout/authorize) endpoint.
+ */
+export const SsoControllerLogout = /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: SsoControllerLogoutInput,
+    outputSchema: SsoControllerLogoutOutput,
+    errors: [NotFound],
+}));
+//# sourceMappingURL=SsoControllerLogout.js.map

package/lib/operations/SsoControllerLogout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerLogout.js","sourceRoot":"","sources":["../../src/operations/SsoControllerLogout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,eAAe;AACf,MAAM,CAAC,MAAM,wBAAwB;AACnC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC,MAAM;CACrB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AAG1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,yBAAyB;AACpC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;AAG1C,gBAAgB;AAChB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,WAAW,EAAE,wBAAwB;IACrC,YAAY,EAAE,yBAAyB;IACvC,MAAM,EAAE,CAAC,QAAQ,CAAU;CAC5B,CAAC,CAAC,CAAC"}

package/lib/operations/SsoControllerLogoutAuthorize.d.ts

@@ -0,0 +1,23 @@
+import * as Schema from "effect/Schema";
+import { BadRequest, NotFound } from "../errors.ts";
+export declare const SsoControllerLogoutAuthorizeInput: Schema.Struct<{
+    readonly profile_id: Schema.String;
+}>;
+export type SsoControllerLogoutAuthorizeInput = typeof SsoControllerLogoutAuthorizeInput.Type;
+export declare const SsoControllerLogoutAuthorizeOutput: Schema.Struct<{
+    readonly logout_url: Schema.String;
+    readonly logout_token: Schema.String;
+}>;
+export type SsoControllerLogoutAuthorizeOutput = typeof SsoControllerLogoutAuthorizeOutput.Type;
+/**
+ * Logout Authorize
+ *
+ * You should call this endpoint from your server to generate a logout token which is required for the [Logout Redirect](/reference/sso/logout) endpoint.
+ */
+export declare const SsoControllerLogoutAuthorize: import("@distilled.cloud/core/client").OperationMethod<{
+    readonly profile_id: string;
+}, {
+    readonly logout_token: string;
+    readonly logout_url: string;
+}, BadRequest | NotFound, import("~/credentials.ts").Credentials>;
+//# sourceMappingURL=SsoControllerLogoutAuthorize.d.ts.map

package/lib/operations/SsoControllerLogoutAuthorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerLogoutAuthorize.d.ts","sourceRoot":"","sources":["../../src/operations/SsoControllerLogoutAuthorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGpD,eAAO,MAAM,iCAAiC;;EAGsB,CAAC;AACrE,MAAM,MAAM,iCAAiC,GAC3C,OAAO,iCAAiC,CAAC,IAAI,CAAC;AAGhD,eAAO,MAAM,kCAAkC;;;EAI3C,CAAC;AACL,MAAM,MAAM,kCAAkC,GAC5C,OAAO,kCAAkC,CAAC,IAAI,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;iEAKpC,CAAC"}

package/lib/operations/SsoControllerLogoutAuthorize.js

@@ -0,0 +1,28 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client.js";
+import * as T from "../traits.js";
+import { BadRequest, NotFound } from "../errors.js";
+// Input Schema
+export const SsoControllerLogoutAuthorizeInput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    profile_id: Schema.String,
+}).pipe(T.Http({ method: "POST", path: "/sso/logout/authorize" }));
+// Output Schema
+export const SsoControllerLogoutAuthorizeOutput = 
+/*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    logout_url: Schema.String,
+    logout_token: Schema.String,
+});
+// The operation
+/**
+ * Logout Authorize
+ *
+ * You should call this endpoint from your server to generate a logout token which is required for the [Logout Redirect](/reference/sso/logout) endpoint.
+ */
+export const SsoControllerLogoutAuthorize = 
+/*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
+    inputSchema: SsoControllerLogoutAuthorizeInput,
+    outputSchema: SsoControllerLogoutAuthorizeOutput,
+    errors: [BadRequest, NotFound],
+}));
+//# sourceMappingURL=SsoControllerLogoutAuthorize.js.map

package/lib/operations/SsoControllerLogoutAuthorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoControllerLogoutAuthorize.js","sourceRoot":"","sources":["../../src/operations/SsoControllerLogoutAuthorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAe;AACf,MAAM,CAAC,MAAM,iCAAiC;AAC5C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;AAIrE,gBAAgB;AAChB,MAAM,CAAC,MAAM,kCAAkC;AAC7C,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,YAAY,EAAE,MAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AAIL,gBAAgB;AAChB;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B;AACvC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,iCAAiC;IAC9C,YAAY,EAAE,kCAAkC;IAChD,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAU;CACxC,CAAC,CAAC,CAAC"}