@djangocfg/api 2.1.440 → 2.1.442

package/dist/auth-server.mjs

@@ -1416,11 +1416,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRetrieve(options) {
     return (options?.client ?? client).get({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1440,11 +1436,31 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRegenerateCreate(options) {
     return (options.client ?? client).post({
       security: [
+        { scheme: "bearer", type: "http" },
         {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
+          in: "cookie",
+          name: "sessionid",
+          type: "apiKey"
         },
+        { name: "X-API-Key", type: "apiKey" }
+      ],
+      url: "/cfg/accounts/api-key/regenerate/",
+      ...options,
+      headers: {
+        "Content-Type": "application/json",
+        ...options.headers
+      }
+    });
+  }
+  /**
+   * Reveal API key
+   *
+   * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+   */
+  static cfgAccountsApiKeyRevealCreate(options) {
+    return (options.client ?? client).post({
+      security: [
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1452,7 +1468,7 @@ var CfgAccountsApiKey = class {
         },
         { name: "X-API-Key", type: "apiKey" }
       ],
-      url: "/cfg/accounts/api-key/regenerate/",
+      url: "/cfg/accounts/api-key/reveal/",
       ...options,
       headers: {
         "Content-Type": "application/json",
@@ -1468,11 +1484,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyTestCreate(options) {
     return (options.client ?? client).post({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1500,11 +1512,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthConnectionsList(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/connections/",
       ...options
     });
@@ -1516,11 +1524,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthDisconnectCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/disconnect/",
       ...options,
       headers: {
@@ -1577,11 +1581,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpRequestCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/request/",
       ...options,
       headers: {
@@ -1602,11 +1602,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/verify/",
       ...options,
       headers: {
@@ -1627,11 +1623,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1648,11 +1640,7 @@ var CfgAccountsProfile = class {
   static cfgAccountsProfileAvatarCreate(options) {
     return (options?.client ?? client).post({
       ...formDataBodySerializer,
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/profile/avatar/",
       ...options,
       headers: {
@@ -1678,11 +1666,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileDeleteCreate(options) {
     return (options?.client ?? client).post({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1698,11 +1682,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialPartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1722,11 +1702,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1746,11 +1722,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdatePartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1770,11 +1742,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdateUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1794,6 +1762,12 @@ var CfgAccountsAuth = class {
   }
   /**
    * Refresh JWT token.
+   *
+   * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+   * rotated access/refresh in the response are re-stamped with the same `cnf`
+   * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+   * proof is required on the refresh request — so a stolen refresh token can't
+   * be used to mint fresh tokens.
    */
   static cfgAccountsTokenRefreshCreate(options) {
     return (options.client ?? client).post({
@@ -1817,11 +1791,7 @@ var CfgCentrifugo = class {
    */
   static cfgCentrifugoAuthTokenRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/centrifugo/auth/token/",
       ...options
     });
@@ -1836,11 +1806,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/",
       ...options
     });
@@ -1853,11 +1819,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRegenerateCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/regenerate/",
       ...options,
       headers: {
@@ -1876,11 +1838,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/",
       ...options
     });
@@ -1892,11 +1850,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesDestroy(options) {
     return (options.client ?? client).delete({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/{id}/",
       ...options
     });
@@ -1908,11 +1862,7 @@ var CfgTotp = class {
    */
   static cfgTotpDisableCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/disable/",
       ...options,
       headers: {
@@ -1933,11 +1883,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupCreate(options) {
     return (options?.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/",
       ...options,
       headers: {
@@ -1953,11 +1899,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupConfirmCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/confirm/",
       ...options,
       headers: {
@@ -1978,11 +1920,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/",
       ...options,
       headers: {
@@ -1998,11 +1936,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyBackupCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/backup/",
       ...options,
       headers: {