@extrahorizon/javascript-sdk 8.14.0-dev-196-5b15a56 → 8.14.0-dev-201-d4ed5b4

package/build/index.cjs.js

@@ -972,6 +972,12 @@ exports.ApplicationType = void 0;
     ApplicationType["oauth2"] = "oauth2";
 })(exports.ApplicationType || (exports.ApplicationType = {}));
 
+exports.PKCECodeMethods = void 0;
+(function (PKCECodeMethods) {
+    PKCECodeMethods["PLAIN"] = "plain";
+    PKCECodeMethods["S256"] = "S256";
+})(exports.PKCECodeMethods || (exports.PKCECodeMethods = {}));
+
 exports.LoginAttemptStatus = void 0;
 (function (LoginAttemptStatus) {
     LoginAttemptStatus["SUCCESS"] = "success";
@@ -3373,7 +3379,7 @@ var applications = (client, httpWithAuth) => ({
 });
 
 var oauth1 = (client, httpWithAuth) => ({
-    tokens: createTokenService$1(client, httpWithAuth),
+    tokens: createTokenService(client, httpWithAuth),
     async generateSsoToken() {
         return (await client.post(httpWithAuth, '/oauth1/ssoTokens/generate', {}))
             .data;
@@ -3389,7 +3395,7 @@ var oauth1 = (client, httpWithAuth) => ({
             .data;
     },
 });
-function createTokenService$1(client, httpWithAuth) {
+function createTokenService(client, httpWithAuth) {
     return {
         async find(options) {
             return (await client.get(httpWithAuth, `/oauth1/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
@@ -3411,41 +3417,59 @@ function createTokenService$1(client, httpWithAuth) {
     };
 }
 
-var oauth2 = (client, httpWithAuth) => ({
-    tokens: createTokenService(client, httpWithAuth),
-    refreshTokens: createRefreshTokenService(client, httpWithAuth),
-    async createAuthorization(data, options) {
-        return (await client.post(httpWithAuth, '/oauth2/authorizations', data, options)).data;
+var accessTokens = (client, httpWithAuth) => ({
+    async find(options) {
+        return (await client.get(httpWithAuth, `/oauth2/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
     },
-    async getAuthorizations(options) {
-        return (await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+    async findFirst(options) {
+        const res = await this.find(options);
+        return res.data[0];
     },
-    async deleteAuthorization(authorizationId, options) {
-        return (await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options)).data;
+    async findById(id, options) {
+        const rqlWithId = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', id).build();
+        return await this.findFirst({ ...options, rql: rqlWithId });
+    },
+    async findAll(options) {
+        return await findAllGeneric(this.find, options);
+    },
+    async remove(id) {
+        return (await client.delete(httpWithAuth, `/oauth2/tokens/${id}`)).data;
     },
 });
-function createTokenService(client, httpWithAuth) {
+
+var authorizations = (client, httpWithAuth) => {
+    async function find(options) {
+        const result = await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options);
+        return result.data;
+    }
     return {
+        async create(data, options) {
+            const result = await client.post(httpWithAuth, '/oauth2/authorizations', data, options);
+            return result.data;
+        },
         async find(options) {
-            return (await client.get(httpWithAuth, `/oauth2/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+            const result = await find(options);
+            return addPagersFn(find, options, result);
         },
-        async findFirst(options) {
-            const res = await this.find(options);
-            return res.data[0];
+        async findAll(options) {
+            return findAllGeneric(find, options);
         },
-        async findById(id, options) {
-            const rqlWithId = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', id).build();
-            return await this.findFirst({ ...options, rql: rqlWithId });
+        async findFirst(options) {
+            const result = await find(options);
+            return result.data[0];
         },
-        async findAll(options) {
-            return await findAllGeneric(this.find, options);
+        async findById(authorizationId, options) {
+            const rql = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', authorizationId).build();
+            return await this.findFirst({ ...options, rql });
         },
-        async remove(id) {
-            return (await client.delete(httpWithAuth, `/oauth2/tokens/${id}`)).data;
+        async remove(authorizationId, options) {
+            const result = await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options);
+            return result.data;
         },
     };
-}
-function createRefreshTokenService(client, httpWithAuth) {
+};
+
+var refreshTokens = (client, httpWithAuth) => {
     async function find(options) {
         const result = await client.get(httpWithAuth, `/oauth2/refreshTokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options);
         return result.data;
@@ -3472,7 +3496,22 @@ function createRefreshTokenService(client, httpWithAuth) {
             return result.data;
         },
     };
-}
+};
+
+var oauth2 = (client, httpWithAuth) => ({
+    tokens: accessTokens(client, httpWithAuth),
+    refreshTokens: refreshTokens(client, httpWithAuth),
+    authorizations: authorizations(client, httpWithAuth),
+    async createAuthorization(data, options) {
+        return (await client.post(httpWithAuth, '/oauth2/authorizations', data, options)).data;
+    },
+    async getAuthorizations(options) {
+        return (await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+    },
+    async deleteAuthorization(authorizationId, options) {
+        return (await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options)).data;
+    },
+});
 
 var loginAttempts = (oidcClient, httpWithAuth) => {
     async function query(options) {
@@ -5696,7 +5735,7 @@ const templatesV2Service = (httpWithAuth) => {
     };
 };
 
-const version = '8.14.0-dev-196-5b15a56';
+const version = '8.14.0-dev-201-d4ed5b4';
 
 /**
  * Create ExtraHorizon client.

package/build/index.mjs

@@ -942,6 +942,12 @@ var ApplicationType;
     ApplicationType["oauth2"] = "oauth2";
 })(ApplicationType || (ApplicationType = {}));
 
+var PKCECodeMethods;
+(function (PKCECodeMethods) {
+    PKCECodeMethods["PLAIN"] = "plain";
+    PKCECodeMethods["S256"] = "S256";
+})(PKCECodeMethods || (PKCECodeMethods = {}));
+
 var LoginAttemptStatus;
 (function (LoginAttemptStatus) {
     LoginAttemptStatus["SUCCESS"] = "success";
@@ -3343,7 +3349,7 @@ var applications = (client, httpWithAuth) => ({
 });
 
 var oauth1 = (client, httpWithAuth) => ({
-    tokens: createTokenService$1(client, httpWithAuth),
+    tokens: createTokenService(client, httpWithAuth),
     async generateSsoToken() {
         return (await client.post(httpWithAuth, '/oauth1/ssoTokens/generate', {}))
             .data;
@@ -3359,7 +3365,7 @@ var oauth1 = (client, httpWithAuth) => ({
             .data;
     },
 });
-function createTokenService$1(client, httpWithAuth) {
+function createTokenService(client, httpWithAuth) {
     return {
         async find(options) {
             return (await client.get(httpWithAuth, `/oauth1/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
@@ -3381,41 +3387,59 @@ function createTokenService$1(client, httpWithAuth) {
     };
 }
 
-var oauth2 = (client, httpWithAuth) => ({
-    tokens: createTokenService(client, httpWithAuth),
-    refreshTokens: createRefreshTokenService(client, httpWithAuth),
-    async createAuthorization(data, options) {
-        return (await client.post(httpWithAuth, '/oauth2/authorizations', data, options)).data;
+var accessTokens = (client, httpWithAuth) => ({
+    async find(options) {
+        return (await client.get(httpWithAuth, `/oauth2/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
     },
-    async getAuthorizations(options) {
-        return (await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+    async findFirst(options) {
+        const res = await this.find(options);
+        return res.data[0];
     },
-    async deleteAuthorization(authorizationId, options) {
-        return (await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options)).data;
+    async findById(id, options) {
+        const rqlWithId = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', id).build();
+        return await this.findFirst({ ...options, rql: rqlWithId });
+    },
+    async findAll(options) {
+        return await findAllGeneric(this.find, options);
+    },
+    async remove(id) {
+        return (await client.delete(httpWithAuth, `/oauth2/tokens/${id}`)).data;
     },
 });
-function createTokenService(client, httpWithAuth) {
+
+var authorizations = (client, httpWithAuth) => {
+    async function find(options) {
+        const result = await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options);
+        return result.data;
+    }
     return {
+        async create(data, options) {
+            const result = await client.post(httpWithAuth, '/oauth2/authorizations', data, options);
+            return result.data;
+        },
         async find(options) {
-            return (await client.get(httpWithAuth, `/oauth2/tokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+            const result = await find(options);
+            return addPagersFn(find, options, result);
         },
-        async findFirst(options) {
-            const res = await this.find(options);
-            return res.data[0];
+        async findAll(options) {
+            return findAllGeneric(find, options);
         },
-        async findById(id, options) {
-            const rqlWithId = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', id).build();
-            return await this.findFirst({ ...options, rql: rqlWithId });
+        async findFirst(options) {
+            const result = await find(options);
+            return result.data[0];
         },
-        async findAll(options) {
-            return await findAllGeneric(this.find, options);
+        async findById(authorizationId, options) {
+            const rql = rqlBuilder(options === null || options === void 0 ? void 0 : options.rql).eq('id', authorizationId).build();
+            return await this.findFirst({ ...options, rql });
         },
-        async remove(id) {
-            return (await client.delete(httpWithAuth, `/oauth2/tokens/${id}`)).data;
+        async remove(authorizationId, options) {
+            const result = await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options);
+            return result.data;
         },
     };
-}
-function createRefreshTokenService(client, httpWithAuth) {
+};
+
+var refreshTokens = (client, httpWithAuth) => {
     async function find(options) {
         const result = await client.get(httpWithAuth, `/oauth2/refreshTokens${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options);
         return result.data;
@@ -3442,7 +3466,22 @@ function createRefreshTokenService(client, httpWithAuth) {
             return result.data;
         },
     };
-}
+};
+
+var oauth2 = (client, httpWithAuth) => ({
+    tokens: accessTokens(client, httpWithAuth),
+    refreshTokens: refreshTokens(client, httpWithAuth),
+    authorizations: authorizations(client, httpWithAuth),
+    async createAuthorization(data, options) {
+        return (await client.post(httpWithAuth, '/oauth2/authorizations', data, options)).data;
+    },
+    async getAuthorizations(options) {
+        return (await client.get(httpWithAuth, `/oauth2/authorizations${(options === null || options === void 0 ? void 0 : options.rql) || ''}`, options)).data;
+    },
+    async deleteAuthorization(authorizationId, options) {
+        return (await client.delete(httpWithAuth, `/oauth2/authorizations/${authorizationId}`, options)).data;
+    },
+});
 
 var loginAttempts = (oidcClient, httpWithAuth) => {
     async function query(options) {
@@ -5666,7 +5705,7 @@ const templatesV2Service = (httpWithAuth) => {
     };
 };
 
-const version = '8.14.0-dev-196-5b15a56';
+const version = '8.14.0-dev-201-d4ed5b4';
 
 /**
  * Create ExtraHorizon client.
@@ -5846,4 +5885,4 @@ const parseStoredCredentials = (fileContent) => exhCredentialsDecoder(fileConten
     .filter(line => line.length === 2)
     .reduce((memo, [key, value]) => ({ ...memo, [key]: value }), {}));
 
-export { AccessTokenExpiredError, AccessTokenUnknownError, ActionType, ActivationRequestLimitError, ActivationRequestTimeoutError, ActivationUnknownError, AlreadyActivatedError, ApiError, ApiFunctionRequestMethod, ApiRequestErrorType, AppStoreTransactionAlreadyLinked, ApplicationNotAuthenticatedError, ApplicationType, ApplicationUnknownError, AuthenticationError, AuthorizationCodeExpiredError, AuthorizationUnknownError, BadGatewayServerError, BadRequestError, BodyFormatError, CallbackNotValidError, Comorbidities, DefaultLocalizationMissingError, DisabledForOidcUsersError, DuplicateRequestError, EmailUnknownError, EmailUsedError, EmptyBodyError, ErrorClassMap, FieldFormatError, FieldType, FileTooLargeError, FirebaseConnectionError, FirebaseInvalidPlatformDataError, ForbiddenError, ForgotPasswordRequestLimitError, ForgotPasswordRequestTimeoutError, FunctionPermissionMode, Gender, GlobalPermissionName, IDFormatError, IllegalArgumentError, IllegalStateError, Impediments, IncorrectPinCodeError, InvalidClientError, InvalidCurrencyForProductPrice, InvalidGrantError, InvalidMfaCodeError, InvalidMfaTokenError, InvalidNonceError, InvalidPKCEError, InvalidPresenceTokenError, InvalidReceiptDataError, InvalidRequestError, InvalidRqlError, InvalidTokenError, JSONSchemaType, LambdaInvocationError, LocalizationKeyMissingError, LockedDocumentError, LoginAttemptStatus, LoginFreezeError, LoginTimeoutError, MedicationFrequency, MedicationUnit, MfaReattemptDelayError, MfaRequiredError, MissingPKCEVerifierError, MissingRequiredFieldsError, NewMFARequiredError, NewPasswordHashUnknownError, NewPasswordPinCodeUnknownError, NoConfiguredAppStoreProduct, NoConfiguredPlayStoreProduct, NoMatchingPlayStoreLinkedSubscription, NoPermissionError, NotActivatedError, NotEnoughMfaMethodsError, NotFoundError, OAuth2ClientIdError, OAuth2ClientSecretError, OAuth2ErrorClassMap, OAuth2LoginError, OAuth2MissingClientCredentialsError, OauthKeyError, OauthSignatureError, OauthTokenError, OidcIdTokenError, OidcInvalidAuthorizationCodeError, OidcProviderResponseError, OrderSchemaStatus, PasswordError, PaymentIntentCreationSchemaPaymentMethodType, PaymentIntentCreationSchemaSetupPaymentMethodReuse, PinCodesNotEnabledError, PlayStoreTransactionAlreadyLinked, ProfileActivity, ProfileAlreadyExistsError, QueuedMailStatus, RefreshTokenExpiredError, RefreshTokenUnknownError, RemoveFieldError, RequestAbortedError, ResourceAlreadyExistsError, ResourceUnknownError, Results, ServerError, ServiceNotFoundError, ServiceUnavailableError, ServiceUnreachableError, StatusInUseError, StripePaymentMethodError, StripeRequestError, SubscriptionEntitlementSource, SubscriptionEntitlementStatus, SubscriptionEntitlementStatusCategory, SubscriptionEventSource, SubscriptionEventType, SupportedLanguageCodes, TaskStatus, TemplateFillingError, TemplateResolvingError, TemplateSyntaxError, TokenNotDeleteableError, TokenPermission, TooManyFailedAttemptsError, UnauthorizedClientError, UnauthorizedError, UnauthorizedTokenError, UnknownReceiptTransactionError, UnsupportedGrantError, UnsupportedGrantTypeError, UnsupportedResponseTypeError, UserNotAuthenticatedError, createClient, createOAuth1Client, createOAuth2Client, createProxyClient, findAllGeneric, findAllIterator, getMockSdkOAuth2 as getMockSdk, getMockSdkOAuth1, getMockSdkOAuth2, getMockSdkProxy, parseGlobalPermissions, parseStoredCredentials, recursiveMap, rqlBuilder, rqlParser };
+export { AccessTokenExpiredError, AccessTokenUnknownError, ActionType, ActivationRequestLimitError, ActivationRequestTimeoutError, ActivationUnknownError, AlreadyActivatedError, ApiError, ApiFunctionRequestMethod, ApiRequestErrorType, AppStoreTransactionAlreadyLinked, ApplicationNotAuthenticatedError, ApplicationType, ApplicationUnknownError, AuthenticationError, AuthorizationCodeExpiredError, AuthorizationUnknownError, BadGatewayServerError, BadRequestError, BodyFormatError, CallbackNotValidError, Comorbidities, DefaultLocalizationMissingError, DisabledForOidcUsersError, DuplicateRequestError, EmailUnknownError, EmailUsedError, EmptyBodyError, ErrorClassMap, FieldFormatError, FieldType, FileTooLargeError, FirebaseConnectionError, FirebaseInvalidPlatformDataError, ForbiddenError, ForgotPasswordRequestLimitError, ForgotPasswordRequestTimeoutError, FunctionPermissionMode, Gender, GlobalPermissionName, IDFormatError, IllegalArgumentError, IllegalStateError, Impediments, IncorrectPinCodeError, InvalidClientError, InvalidCurrencyForProductPrice, InvalidGrantError, InvalidMfaCodeError, InvalidMfaTokenError, InvalidNonceError, InvalidPKCEError, InvalidPresenceTokenError, InvalidReceiptDataError, InvalidRequestError, InvalidRqlError, InvalidTokenError, JSONSchemaType, LambdaInvocationError, LocalizationKeyMissingError, LockedDocumentError, LoginAttemptStatus, LoginFreezeError, LoginTimeoutError, MedicationFrequency, MedicationUnit, MfaReattemptDelayError, MfaRequiredError, MissingPKCEVerifierError, MissingRequiredFieldsError, NewMFARequiredError, NewPasswordHashUnknownError, NewPasswordPinCodeUnknownError, NoConfiguredAppStoreProduct, NoConfiguredPlayStoreProduct, NoMatchingPlayStoreLinkedSubscription, NoPermissionError, NotActivatedError, NotEnoughMfaMethodsError, NotFoundError, OAuth2ClientIdError, OAuth2ClientSecretError, OAuth2ErrorClassMap, OAuth2LoginError, OAuth2MissingClientCredentialsError, OauthKeyError, OauthSignatureError, OauthTokenError, OidcIdTokenError, OidcInvalidAuthorizationCodeError, OidcProviderResponseError, OrderSchemaStatus, PKCECodeMethods, PasswordError, PaymentIntentCreationSchemaPaymentMethodType, PaymentIntentCreationSchemaSetupPaymentMethodReuse, PinCodesNotEnabledError, PlayStoreTransactionAlreadyLinked, ProfileActivity, ProfileAlreadyExistsError, QueuedMailStatus, RefreshTokenExpiredError, RefreshTokenUnknownError, RemoveFieldError, RequestAbortedError, ResourceAlreadyExistsError, ResourceUnknownError, Results, ServerError, ServiceNotFoundError, ServiceUnavailableError, ServiceUnreachableError, StatusInUseError, StripePaymentMethodError, StripeRequestError, SubscriptionEntitlementSource, SubscriptionEntitlementStatus, SubscriptionEntitlementStatusCategory, SubscriptionEventSource, SubscriptionEventType, SupportedLanguageCodes, TaskStatus, TemplateFillingError, TemplateResolvingError, TemplateSyntaxError, TokenNotDeleteableError, TokenPermission, TooManyFailedAttemptsError, UnauthorizedClientError, UnauthorizedError, UnauthorizedTokenError, UnknownReceiptTransactionError, UnsupportedGrantError, UnsupportedGrantTypeError, UnsupportedResponseTypeError, UserNotAuthenticatedError, createClient, createOAuth1Client, createOAuth2Client, createProxyClient, findAllGeneric, findAllIterator, getMockSdkOAuth2 as getMockSdk, getMockSdkOAuth1, getMockSdkOAuth2, getMockSdkProxy, parseGlobalPermissions, parseStoredCredentials, recursiveMap, rqlBuilder, rqlParser };

package/build/mockType.d.ts

@@ -524,6 +524,14 @@ export declare type MockClientOAuth1<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;
@@ -1118,6 +1126,14 @@ export declare type MockClientOAuth2<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;
@@ -1712,6 +1728,14 @@ export declare type MockClientProxy<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;

package/build/services/auth/oauth2/accessTokens/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { AuthOauth2TokenService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => AuthOauth2TokenService;
+export default _default;

package/build/services/auth/oauth2/accessTokens/types.d.ts

@@ -0,0 +1,61 @@
+import { AffectedRecords, OptionsWithRql, PagedResult } from '../../../types';
+export interface AuthOauth2TokenService {
+    /**
+     * Get a list of OAuth2 tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Token>>;
+    /**
+     * Get a list of OAuth2 tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2Token[]>;
+    /**
+     * Get the first OAuth2 token found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
+    /**
+     * Get an oAuth2 token by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findById(id: string, options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
+    /**
+     * Remove an oAuth2 token
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 tokens for this account
+     * DELETE_AUTHORIZATIONS | global | Delete any OAuth2 tokens belonging to any user
+     */
+    remove(id: string): Promise<AffectedRecords>;
+}
+export interface OAuth2Token {
+    id: string;
+    applicationId: string;
+    userId: string;
+    refreshTokenId: string;
+    /**
+     * @deprecated `accessToken` will be removed from responses returned by listing endpoints in a future version.
+     */
+    accessToken?: string;
+    expiryTimestamp: Date;
+    updateTimestamp: Date;
+    creationTimestamp: Date;
+}

package/build/services/auth/oauth2/authorizations/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { OAuth2AuthorizationsService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => OAuth2AuthorizationsService;
+export default _default;

package/build/services/auth/oauth2/authorizations/types.d.ts

@@ -0,0 +1,67 @@
+import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../../types';
+import { OAuth2Authorization, OAuth2AuthorizationCreation, OAuth2AuthorizationCreationResponse } from '../types';
+export interface OAuth2AuthorizationsService {
+    /**
+     * Create an OAuth2 authorization
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Everyone can use this endpoint
+     */
+    create(data: OAuth2AuthorizationCreation, options?: OptionsBase): Promise<OAuth2AuthorizationCreationResponse>;
+    /**
+     * Get a list of OAuth2 authorizations
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns PagedResult<OAuth2Authorization>
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Authorization>>;
+    /**
+     * Get a list of OAuth2 authorizations
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns OAuth2Authorization[]
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2Authorization[]>;
+    /**
+     * Get the first OAuth2 authorization found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2Authorization | undefined>}
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2Authorization | undefined>;
+    /**
+     * Get an OAuth2 authorization by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param authorizationId the authorization id
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2Authorization | undefined>}
+     */
+    findById(authorizationId: string, options?: OptionsWithRql): Promise<OAuth2Authorization | undefined>;
+    /**
+     * Delete an OAuth2 authorization
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 authorizations for this account
+     * DELETE_AUTHORIZATIONS | global | Delete any authorizations belonging to any user
+     * @param authorizationId the Authorization id
+     */
+    remove(authorizationId: string, options?: OptionsBase): Promise<AffectedRecords>;
+}

package/build/services/auth/oauth2/refreshTokens/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { OAuth2RefreshTokenService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => OAuth2RefreshTokenService;
+export default _default;

package/build/services/auth/oauth2/refreshTokens/types.d.ts

@@ -0,0 +1,72 @@
+import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../../types';
+export interface OAuth2RefreshTokenService {
+    /**
+     * # Get a list of OAuth2 refresh tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns PagedResult<OAuth2RefreshToken>
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2RefreshToken>>;
+    /**
+     * Get a list of OAuth2 refresh tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns OAuth2RefreshToken[]
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2RefreshToken[]>;
+    /**
+     * Get the first OAuth2 refresh token found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2RefreshToken | undefined>}
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
+    /**
+     * Get an oAuth2 refresh token by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param id the refresh token id
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2RefreshToken | undefined>}
+     */
+    findById(id: string, options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
+    /**
+     * Delete an oAuth2 refresh token
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 refresh tokens for this account
+     * DELETE_OAUTH2_REFRESH_TOKEN or DELETE_AUTHORIZATIONS | global | Delete any OAuth2 refresh tokens belonging to any user
+     * Using DELETE_AUTHORIZATIONS for this endpoint is deprecated; use DELETE_OAUTH2_REFRESH_TOKEN instead
+     * @param id the refresh token id
+     * @returns AffectedRecords
+     */
+    remove(id: string, options?: OptionsBase): Promise<AffectedRecords>;
+}
+export interface OAuth2RefreshToken {
+    id: string;
+    applicationId: string;
+    userId: string;
+    expiryTimestamp: Date;
+    updateTimestamp: Date;
+    creationTimestamp: Date;
+}

package/build/services/auth/oauth2/types.d.ts

@@ -1,7 +1,14 @@
 import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../types';
+import { AuthOauth2TokenService } from './accessTokens/types';
+import { OAuth2AuthorizationsService } from './authorizations/types';
+import { OAuth2RefreshTokenService } from './refreshTokens/types';
+export * from './accessTokens/types';
+export * from './authorizations/types';
+export * from './refreshTokens/types';
 export interface AuthOauth2Service {
     tokens: AuthOauth2TokenService;
     refreshTokens: OAuth2RefreshTokenService;
+    authorizations: OAuth2AuthorizationsService;
     /**
      * Create an OAuth2 authorization
      *
@@ -12,6 +19,7 @@ export interface AuthOauth2Service {
      * @throws {ApplicationUnknownError}
      * @throws {CallbackNotValidError}
      * @throws {UnsupportedResponseTypeError}
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.create` instead
      */
     createAuthorization(data: OAuth2AuthorizationCreation, options?: OptionsBase): Promise<OAuth2AuthorizationCreationResponse>;
     /**
@@ -22,6 +30,7 @@ export interface AuthOauth2Service {
      * none | | Can only see a list of OAuth2 authorizations for this account
      * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
      * @see https://swagger.extrahorizon.com/swagger-ui/?url=https://swagger.extrahorizon.com/auth-service/2.0.4-dev/openapi.yaml#/OAuth2/get_oauth2_authorizations
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.find*` instead
      */
     getAuthorizations(options?: OptionsWithRql): Promise<PagedResult<OAuth2Authorization>>;
     /**
@@ -33,125 +42,16 @@ export interface AuthOauth2Service {
      * DELETE_AUTHORIZATIONS | global | Delete any authorizations belonging to any user
      * @see https://swagger.extrahorizon.com/swagger-ui/?url=https://swagger.extrahorizon.com/auth-service/2.0.4-dev/openapi.yaml#/OAuth2/delete_oauth2_authorizations__authorizationId_
      * @throws {ResourceUnknownError}
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.remove` instead
      */
     deleteAuthorization(authorizationId: string, options?: OptionsWithRql): Promise<AffectedRecords>;
 }
-export interface AuthOauth2TokenService {
-    /**
-     * Get a list of OAuth2 tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Token>>;
-    /**
-     * Get a list of OAuth2 tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findAll(options?: OptionsWithRql): Promise<OAuth2Token[]>;
-    /**
-     * Get the first OAuth2 token found
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findFirst(options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
-    /**
-     * Get an oAuth2 token by its id
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findById(id: string, options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
-    /**
-     * Remove an oAuth2 token
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only delete OAuth2 tokens for this account
-     * DELETE_AUTHORIZATIONS | global | Delete any OAuth2 tokens belonging to any user
-     */
-    remove(id: string): Promise<AffectedRecords>;
-}
-export interface OAuth2RefreshTokenService {
-    /**
-     * # Get a list of OAuth2 refresh tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns PagedResult<OAuth2RefreshToken>
-     */
-    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2RefreshToken>>;
-    /**
-     * Get a list of OAuth2 refresh tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns OAuth2RefreshToken[]
-     */
-    findAll(options?: OptionsWithRql): Promise<OAuth2RefreshToken[]>;
-    /**
-     * Get the first OAuth2 refresh token found
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns {Promise<OAuth2RefreshToken | undefined>}
-     */
-    findFirst(options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
-    /**
-     * Get an oAuth2 refresh token by its id
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param id the refresh token id
-     * @param options.rql Add filters to the requested list
-     * @returns {Promise<OAuth2RefreshToken | undefined>}
-     */
-    findById(id: string, options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
-    /**
-     * Delete an oAuth2 refresh token
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only delete OAuth2 refresh tokens for this account
-     * DELETE_OAUTH2_REFRESH_TOKEN or DELETE_AUTHORIZATIONS | global | Delete any OAuth2 refresh tokens belonging to any user
-     * Using DELETE_AUTHORIZATIONS for this endpoint is deprecated; use DELETE_OAUTH2_REFRESH_TOKEN instead
-     * @param id the refresh token id
-     * @returns AffectedRecords
-     */
-    remove(id: string, options?: OptionsBase): Promise<AffectedRecords>;
-}
 export interface OAuth2AuthorizationCreation {
-    responseType: string;
+    responseType: 'code';
     clientId: string;
     redirectUri?: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     codeChallenge?: string;
 }
 export interface OAuth2AuthorizationCreationResponse {
@@ -160,7 +60,7 @@ export interface OAuth2AuthorizationCreationResponse {
     userId: string;
     redirectUri: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     codeChallenge?: string;
     authorizationCode: string;
     expiryTimestamp: Date;
@@ -173,7 +73,7 @@ export interface OAuth2Authorization {
     userId: string;
     redirectUri: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     /**
      @deprecated `codeChallenge` will be removed from responses returned by listing endpoints in a future version.
      */
@@ -186,24 +86,7 @@ export interface OAuth2Authorization {
     updateTimestamp: Date;
     creationTimestamp: Date;
 }
-export interface OAuth2Token {
-    id: string;
-    applicationId: string;
-    userId: string;
-    refreshTokenId: string;
-    /**
-     * @deprecated `accessToken` will be removed from responses returned by listing endpoints in a future version.
-     */
-    accessToken?: string;
-    expiryTimestamp: Date;
-    updateTimestamp: Date;
-    creationTimestamp: Date;
-}
-export interface OAuth2RefreshToken {
-    id: string;
-    applicationId: string;
-    userId: string;
-    expiryTimestamp: Date;
-    updateTimestamp: Date;
-    creationTimestamp: Date;
+export declare enum PKCECodeMethods {
+    PLAIN = "plain",
+    S256 = "S256"
 }

package/build/types/mockType.d.ts

@@ -524,6 +524,14 @@ export declare type MockClientOAuth1<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;
@@ -1118,6 +1126,14 @@ export declare type MockClientOAuth2<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;
@@ -1712,6 +1728,14 @@ export declare type MockClientProxy<MockFn> = {
                 findById: MockFn;
                 remove: MockFn;
             };
+            authorizations: {
+                create: MockFn;
+                find: MockFn;
+                findAll: MockFn;
+                findFirst: MockFn;
+                findById: MockFn;
+                remove: MockFn;
+            };
             createAuthorization: MockFn;
             getAuthorizations: MockFn;
             deleteAuthorization: MockFn;

package/build/types/services/auth/oauth2/accessTokens/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { AuthOauth2TokenService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => AuthOauth2TokenService;
+export default _default;

package/build/types/services/auth/oauth2/accessTokens/types.d.ts

@@ -0,0 +1,61 @@
+import { AffectedRecords, OptionsWithRql, PagedResult } from '../../../types';
+export interface AuthOauth2TokenService {
+    /**
+     * Get a list of OAuth2 tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Token>>;
+    /**
+     * Get a list of OAuth2 tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2Token[]>;
+    /**
+     * Get the first OAuth2 token found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
+    /**
+     * Get an oAuth2 token by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 tokens for this account
+     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
+     */
+    findById(id: string, options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
+    /**
+     * Remove an oAuth2 token
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 tokens for this account
+     * DELETE_AUTHORIZATIONS | global | Delete any OAuth2 tokens belonging to any user
+     */
+    remove(id: string): Promise<AffectedRecords>;
+}
+export interface OAuth2Token {
+    id: string;
+    applicationId: string;
+    userId: string;
+    refreshTokenId: string;
+    /**
+     * @deprecated `accessToken` will be removed from responses returned by listing endpoints in a future version.
+     */
+    accessToken?: string;
+    expiryTimestamp: Date;
+    updateTimestamp: Date;
+    creationTimestamp: Date;
+}

package/build/types/services/auth/oauth2/authorizations/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { OAuth2AuthorizationsService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => OAuth2AuthorizationsService;
+export default _default;

package/build/types/services/auth/oauth2/authorizations/types.d.ts

@@ -0,0 +1,67 @@
+import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../../types';
+import { OAuth2Authorization, OAuth2AuthorizationCreation, OAuth2AuthorizationCreationResponse } from '../types';
+export interface OAuth2AuthorizationsService {
+    /**
+     * Create an OAuth2 authorization
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Everyone can use this endpoint
+     */
+    create(data: OAuth2AuthorizationCreation, options?: OptionsBase): Promise<OAuth2AuthorizationCreationResponse>;
+    /**
+     * Get a list of OAuth2 authorizations
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns PagedResult<OAuth2Authorization>
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Authorization>>;
+    /**
+     * Get a list of OAuth2 authorizations
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns OAuth2Authorization[]
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2Authorization[]>;
+    /**
+     * Get the first OAuth2 authorization found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2Authorization | undefined>}
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2Authorization | undefined>;
+    /**
+     * Get an OAuth2 authorization by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 authorizations for this account
+     * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
+     * @param authorizationId the authorization id
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2Authorization | undefined>}
+     */
+    findById(authorizationId: string, options?: OptionsWithRql): Promise<OAuth2Authorization | undefined>;
+    /**
+     * Delete an OAuth2 authorization
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 authorizations for this account
+     * DELETE_AUTHORIZATIONS | global | Delete any authorizations belonging to any user
+     * @param authorizationId the Authorization id
+     */
+    remove(authorizationId: string, options?: OptionsBase): Promise<AffectedRecords>;
+}

package/build/types/services/auth/oauth2/refreshTokens/index.d.ts

@@ -0,0 +1,5 @@
+import { HttpInstance } from '../../../../http/types';
+import { HttpClient } from '../../../http-client';
+import { OAuth2RefreshTokenService } from './types';
+declare const _default: (client: HttpClient, httpWithAuth: HttpInstance) => OAuth2RefreshTokenService;
+export default _default;

package/build/types/services/auth/oauth2/refreshTokens/types.d.ts

@@ -0,0 +1,72 @@
+import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../../types';
+export interface OAuth2RefreshTokenService {
+    /**
+     * # Get a list of OAuth2 refresh tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns PagedResult<OAuth2RefreshToken>
+     */
+    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2RefreshToken>>;
+    /**
+     * Get a list of OAuth2 refresh tokens
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns OAuth2RefreshToken[]
+     */
+    findAll(options?: OptionsWithRql): Promise<OAuth2RefreshToken[]>;
+    /**
+     * Get the first OAuth2 refresh token found
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2RefreshToken | undefined>}
+     */
+    findFirst(options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
+    /**
+     * Get an oAuth2 refresh token by its id
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only see a list of OAuth2 refresh tokens for this account
+     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
+     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
+     * @param id the refresh token id
+     * @param options.rql Add filters to the requested list
+     * @returns {Promise<OAuth2RefreshToken | undefined>}
+     */
+    findById(id: string, options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
+    /**
+     * Delete an oAuth2 refresh token
+     *
+     * Permission | Scope | Effect
+     * - | - | -
+     * none | | Can only delete OAuth2 refresh tokens for this account
+     * DELETE_OAUTH2_REFRESH_TOKEN or DELETE_AUTHORIZATIONS | global | Delete any OAuth2 refresh tokens belonging to any user
+     * Using DELETE_AUTHORIZATIONS for this endpoint is deprecated; use DELETE_OAUTH2_REFRESH_TOKEN instead
+     * @param id the refresh token id
+     * @returns AffectedRecords
+     */
+    remove(id: string, options?: OptionsBase): Promise<AffectedRecords>;
+}
+export interface OAuth2RefreshToken {
+    id: string;
+    applicationId: string;
+    userId: string;
+    expiryTimestamp: Date;
+    updateTimestamp: Date;
+    creationTimestamp: Date;
+}

package/build/types/services/auth/oauth2/types.d.ts

@@ -1,7 +1,14 @@
 import { AffectedRecords, OptionsBase, OptionsWithRql, PagedResult } from '../../types';
+import { AuthOauth2TokenService } from './accessTokens/types';
+import { OAuth2AuthorizationsService } from './authorizations/types';
+import { OAuth2RefreshTokenService } from './refreshTokens/types';
+export * from './accessTokens/types';
+export * from './authorizations/types';
+export * from './refreshTokens/types';
 export interface AuthOauth2Service {
     tokens: AuthOauth2TokenService;
     refreshTokens: OAuth2RefreshTokenService;
+    authorizations: OAuth2AuthorizationsService;
     /**
      * Create an OAuth2 authorization
      *
@@ -12,6 +19,7 @@ export interface AuthOauth2Service {
      * @throws {ApplicationUnknownError}
      * @throws {CallbackNotValidError}
      * @throws {UnsupportedResponseTypeError}
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.create` instead
      */
     createAuthorization(data: OAuth2AuthorizationCreation, options?: OptionsBase): Promise<OAuth2AuthorizationCreationResponse>;
     /**
@@ -22,6 +30,7 @@ export interface AuthOauth2Service {
      * none | | Can only see a list of OAuth2 authorizations for this account
      * VIEW_AUTHORIZATIONS | global | See any authorizations belonging to any user
      * @see https://swagger.extrahorizon.com/swagger-ui/?url=https://swagger.extrahorizon.com/auth-service/2.0.4-dev/openapi.yaml#/OAuth2/get_oauth2_authorizations
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.find*` instead
      */
     getAuthorizations(options?: OptionsWithRql): Promise<PagedResult<OAuth2Authorization>>;
     /**
@@ -33,125 +42,16 @@ export interface AuthOauth2Service {
      * DELETE_AUTHORIZATIONS | global | Delete any authorizations belonging to any user
      * @see https://swagger.extrahorizon.com/swagger-ui/?url=https://swagger.extrahorizon.com/auth-service/2.0.4-dev/openapi.yaml#/OAuth2/delete_oauth2_authorizations__authorizationId_
      * @throws {ResourceUnknownError}
+     * @deprecated - Will be removed in a future version, please use `auth.oauth2.authorizations.remove` instead
      */
     deleteAuthorization(authorizationId: string, options?: OptionsWithRql): Promise<AffectedRecords>;
 }
-export interface AuthOauth2TokenService {
-    /**
-     * Get a list of OAuth2 tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2Token>>;
-    /**
-     * Get a list of OAuth2 tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findAll(options?: OptionsWithRql): Promise<OAuth2Token[]>;
-    /**
-     * Get the first OAuth2 token found
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findFirst(options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
-    /**
-     * Get an oAuth2 token by its id
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 tokens for this account
-     * VIEW_AUTHORIZATIONS | global | See any OAuth2 tokens belonging to any user
-     */
-    findById(id: string, options?: OptionsWithRql): Promise<OAuth2Token | undefined>;
-    /**
-     * Remove an oAuth2 token
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only delete OAuth2 tokens for this account
-     * DELETE_AUTHORIZATIONS | global | Delete any OAuth2 tokens belonging to any user
-     */
-    remove(id: string): Promise<AffectedRecords>;
-}
-export interface OAuth2RefreshTokenService {
-    /**
-     * # Get a list of OAuth2 refresh tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns PagedResult<OAuth2RefreshToken>
-     */
-    find(options?: OptionsWithRql): Promise<PagedResult<OAuth2RefreshToken>>;
-    /**
-     * Get a list of OAuth2 refresh tokens
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns OAuth2RefreshToken[]
-     */
-    findAll(options?: OptionsWithRql): Promise<OAuth2RefreshToken[]>;
-    /**
-     * Get the first OAuth2 refresh token found
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param options.rql Add filters to the requested list
-     * @returns {Promise<OAuth2RefreshToken | undefined>}
-     */
-    findFirst(options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
-    /**
-     * Get an oAuth2 refresh token by its id
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only see a list of OAuth2 refresh tokens for this account
-     * VIEW_OAUTH2_REFRESH_TOKENS or VIEW_AUTHORIZATIONS | global | Can see a list of OAuth2 refresh tokens for any account
-     * Using VIEW_AUTHORIZATIONS for this endpoint is deprecated; use VIEW_OAUTH2_REFRESH_TOKENS instead
-     * @param id the refresh token id
-     * @param options.rql Add filters to the requested list
-     * @returns {Promise<OAuth2RefreshToken | undefined>}
-     */
-    findById(id: string, options?: OptionsWithRql): Promise<OAuth2RefreshToken | undefined>;
-    /**
-     * Delete an oAuth2 refresh token
-     *
-     * Permission | Scope | Effect
-     * - | - | -
-     * none | | Can only delete OAuth2 refresh tokens for this account
-     * DELETE_OAUTH2_REFRESH_TOKEN or DELETE_AUTHORIZATIONS | global | Delete any OAuth2 refresh tokens belonging to any user
-     * Using DELETE_AUTHORIZATIONS for this endpoint is deprecated; use DELETE_OAUTH2_REFRESH_TOKEN instead
-     * @param id the refresh token id
-     * @returns AffectedRecords
-     */
-    remove(id: string, options?: OptionsBase): Promise<AffectedRecords>;
-}
 export interface OAuth2AuthorizationCreation {
-    responseType: string;
+    responseType: 'code';
     clientId: string;
     redirectUri?: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     codeChallenge?: string;
 }
 export interface OAuth2AuthorizationCreationResponse {
@@ -160,7 +60,7 @@ export interface OAuth2AuthorizationCreationResponse {
     userId: string;
     redirectUri: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     codeChallenge?: string;
     authorizationCode: string;
     expiryTimestamp: Date;
@@ -173,7 +73,7 @@ export interface OAuth2Authorization {
     userId: string;
     redirectUri: string;
     state?: string;
-    codeChallengeMethod?: string;
+    codeChallengeMethod?: PKCECodeMethods;
     /**
      @deprecated `codeChallenge` will be removed from responses returned by listing endpoints in a future version.
      */
@@ -186,24 +86,7 @@ export interface OAuth2Authorization {
     updateTimestamp: Date;
     creationTimestamp: Date;
 }
-export interface OAuth2Token {
-    id: string;
-    applicationId: string;
-    userId: string;
-    refreshTokenId: string;
-    /**
-     * @deprecated `accessToken` will be removed from responses returned by listing endpoints in a future version.
-     */
-    accessToken?: string;
-    expiryTimestamp: Date;
-    updateTimestamp: Date;
-    creationTimestamp: Date;
-}
-export interface OAuth2RefreshToken {
-    id: string;
-    applicationId: string;
-    userId: string;
-    expiryTimestamp: Date;
-    updateTimestamp: Date;
-    creationTimestamp: Date;
+export declare enum PKCECodeMethods {
+    PLAIN = "plain",
+    S256 = "S256"
 }

package/build/types/version.d.ts

@@ -1 +1 @@
-export declare const version = "8.14.0-dev-196-5b15a56";
+export declare const version = "8.14.0-dev-201-d4ed5b4";

package/build/version.d.ts

@@ -1 +1 @@
-export declare const version = "8.14.0-dev-196-5b15a56";
+export declare const version = "8.14.0-dev-201-d4ed5b4";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@extrahorizon/javascript-sdk",
-  "version": "8.14.0-dev-196-5b15a56",
+  "version": "8.14.0-dev-201-d4ed5b4",
   "description": "This package serves as a JavaScript wrapper around all Extra Horizon cloud services.",
   "main": "build/index.cjs.js",
   "types": "build/types/index.d.ts",