@djangocfg/api 2.1.441 → 2.1.443

package/dist/auth-server.cjs

@@ -1445,11 +1445,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRetrieve(options) {
     return (options?.client ?? client).get({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1469,11 +1465,31 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRegenerateCreate(options) {
     return (options.client ?? client).post({
       security: [
+        { scheme: "bearer", type: "http" },
         {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
+          in: "cookie",
+          name: "sessionid",
+          type: "apiKey"
         },
+        { name: "X-API-Key", type: "apiKey" }
+      ],
+      url: "/cfg/accounts/api-key/regenerate/",
+      ...options,
+      headers: {
+        "Content-Type": "application/json",
+        ...options.headers
+      }
+    });
+  }
+  /**
+   * Reveal API key
+   *
+   * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+   */
+  static cfgAccountsApiKeyRevealCreate(options) {
+    return (options.client ?? client).post({
+      security: [
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1481,7 +1497,7 @@ var CfgAccountsApiKey = class {
         },
         { name: "X-API-Key", type: "apiKey" }
       ],
-      url: "/cfg/accounts/api-key/regenerate/",
+      url: "/cfg/accounts/api-key/reveal/",
       ...options,
       headers: {
         "Content-Type": "application/json",
@@ -1497,11 +1513,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyTestCreate(options) {
     return (options.client ?? client).post({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1529,11 +1541,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthConnectionsList(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/connections/",
       ...options
     });
@@ -1545,11 +1553,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthDisconnectCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/disconnect/",
       ...options,
       headers: {
@@ -1606,11 +1610,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpRequestCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/request/",
       ...options,
       headers: {
@@ -1631,11 +1631,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/verify/",
       ...options,
       headers: {
@@ -1656,11 +1652,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1677,11 +1669,7 @@ var CfgAccountsProfile = class {
   static cfgAccountsProfileAvatarCreate(options) {
     return (options?.client ?? client).post({
       ...formDataBodySerializer,
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/profile/avatar/",
       ...options,
       headers: {
@@ -1707,11 +1695,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileDeleteCreate(options) {
     return (options?.client ?? client).post({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1727,11 +1711,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialPartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1751,11 +1731,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1775,11 +1751,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdatePartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1799,11 +1771,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdateUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1823,6 +1791,12 @@ var CfgAccountsAuth = class {
   }
   /**
    * Refresh JWT token.
+   *
+   * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+   * rotated access/refresh in the response are re-stamped with the same `cnf`
+   * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+   * proof is required on the refresh request — so a stolen refresh token can't
+   * be used to mint fresh tokens.
    */
   static cfgAccountsTokenRefreshCreate(options) {
     return (options.client ?? client).post({
@@ -1846,11 +1820,7 @@ var CfgCentrifugo = class {
    */
   static cfgCentrifugoAuthTokenRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/centrifugo/auth/token/",
       ...options
     });
@@ -1865,11 +1835,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/",
       ...options
     });
@@ -1882,11 +1848,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRegenerateCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/regenerate/",
       ...options,
       headers: {
@@ -1905,11 +1867,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/",
       ...options
     });
@@ -1921,11 +1879,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesDestroy(options) {
     return (options.client ?? client).delete({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/{id}/",
       ...options
     });
@@ -1937,11 +1891,7 @@ var CfgTotp = class {
    */
   static cfgTotpDisableCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/disable/",
       ...options,
       headers: {
@@ -1962,11 +1912,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupCreate(options) {
     return (options?.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/",
       ...options,
       headers: {
@@ -1982,11 +1928,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupConfirmCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/confirm/",
       ...options,
       headers: {
@@ -2007,11 +1949,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/",
       ...options,
       headers: {
@@ -2027,11 +1965,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyBackupCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/backup/",
       ...options,
       headers: {