@faable/auth-sdk 1.3.21 → 1.3.23

package/dist/api/types.d.ts

@@ -419,6 +419,78 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/credentials": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Credentialss
+         * @description List Credentialss
+         */
+        get: operations["credentials/list"];
+        put?: never;
+        /**
+         * Create Credentials
+         * @description Create Credentials
+         */
+        post: operations["credentials/create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/credentials/{credentials_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Credentials
+         * @description Get Credentials
+         */
+        get: operations["credentials/get"];
+        put?: never;
+        /**
+         * Update Credentials
+         * @description Update Credentials
+         */
+        post: operations["credentials/update"];
+        /**
+         * Delete Credentials
+         * @description Delete Credentials
+         */
+        delete: operations["credentials/delete"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/credentials/{credentials_id}/set-password": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set a credential's password
+         * @description Sets or rotates the password for a database credential. The previous password is invalidated immediately. Records a `credential.password_changed` audit entry (initiated_by=admin) for traceability. The password is never returned.
+         */
+        post: operations["credentials/setPassword"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/role": {
         parameters: {
             query?: never;
@@ -1934,8 +2006,6 @@ export interface components {
             locale?: string;
             /** @description A URI pointing to the user's picture. */
             picture?: string;
-            /** @description Initial password for this user. Only used (and required) when the user is being provisioned against a `database` connection; ignored for federated/social connections. */
-            password?: string;
             /** @description User Metadata */
             user_metadata?: {
                 [key: string]: unknown;
@@ -1965,8 +2035,6 @@ export interface components {
             email?: string;
             /** @description Flip the email verification flag. Setting `true` marks the email as verified by the admin (`email_verified_method=manual`). Setting `false` clears the verification metadata. */
             email_verified?: boolean;
-            /** @description New password for this user */
-            password?: string;
             /** @description Contact phone number. Changing it to a new value automatically resets `phone_verified` to false (and clears `phone_verified_method` / `phone_verified_at`) unless the same patch sets `phone_verified` explicitly. */
             phone?: string;
             /** @description Flip the phone verification flag. Setting `true` marks the phone as verified by the admin (`phone_verified_method=manual`). */
@@ -2040,6 +2108,47 @@ export interface components {
             refresh_token?: string;
             profile_data: unknown;
         };
+        /** @description Credential */
+        Credential: {
+            /** @description Credential ID */
+            id: string;
+            connection: components["schemas"]["Connection"] | string | unknown;
+            user: components["schemas"]["User"] | string | unknown;
+            /** @description Email login identifier (unique within the connection). */
+            email?: string;
+            /** @description Username login identifier (unique within the connection). */
+            username?: string;
+            /** @description Object is related with this account */
+            account: string;
+            /**
+             * @description CredentialMetadata
+             * @default {}
+             */
+            metadata: {
+                [key: string]: unknown;
+            };
+            /** @description Credential creation date */
+            createdAt: string;
+            /** @description Credential updated date */
+            updatedAt?: string;
+        };
+        /**
+         * @description CredentialMetadata
+         * @default {}
+         */
+        CredentialMetadata: {
+            [key: string]: unknown;
+        };
+        CredentialsCreate: {
+            user: string;
+            connection: string;
+            email?: string;
+            username?: string;
+        };
+        CredentialsUpdate: {
+            email?: string;
+            username?: string;
+        };
         /** @description Role */
         Role: {
             /** @description Role ID */
@@ -2968,6 +3077,8 @@ export interface components {
             /** @description An opaque value the applications adds to the initial request that the authorization server includes when redirecting the back to the application. This value must be used by the application to prevent CSRF attacks. */
             state?: string;
             response_type?: string;
+            /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
+            redirect_to?: string;
             client_id: string;
             /** @description Deprecated. Use connection_id */
             connection?: string;
@@ -4262,8 +4373,6 @@ export interface operations {
                     locale?: string;
                     /** @description A URI pointing to the user's picture. */
                     picture?: string;
-                    /** @description Initial password for this user. Only used (and required) when the user is being provisioned against a `database` connection; ignored for federated/social connections. */
-                    password?: string;
                     /** @description User Metadata */
                     user_metadata?: {
                         [key: string]: unknown;
@@ -4526,8 +4635,6 @@ export interface operations {
                     email?: string;
                     /** @description Flip the email verification flag. Setting `true` marks the email as verified by the admin (`email_verified_method=manual`). Setting `false` clears the verification metadata. */
                     email_verified?: boolean;
-                    /** @description New password for this user */
-                    password?: string;
                     /** @description Contact phone number. Changing it to a new value automatically resets `phone_verified` to false (and clears `phone_verified_method` / `phone_verified_at`) unless the same patch sets `phone_verified` explicitly. */
                     phone?: string;
                     /** @description Flip the phone verification flag. Setting `true` marks the phone as verified by the admin (`phone_verified_method=manual`). */
@@ -5109,6 +5216,286 @@ export interface operations {
             };
         };
     };
+    "credentials/list": {
+        parameters: {
+            query?: {
+                /** @description Number of items per page (max 200) */
+                pageSize?: number;
+                /** @description Cursor for next page */
+                cursor?: string;
+                /** @description Cursor returned by the previous page */
+                next?: string;
+                /** @description Filter using a FaableQL query */
+                query?: string;
+                /** @description Expand id-only fields in the response. Pass one path per entry (e.g. `?expand=user`). */
+                expand?: ("user" | "connection")[];
+                /** @description Full-text search across: `email`, `username`. */
+                q?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        next: string | null;
+                        results: components["schemas"]["Credential"][];
+                    };
+                };
+            };
+        };
+    };
+    "credentials/create": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    user: string;
+                    connection: string;
+                    email?: string;
+                    username?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Credential */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Credential ID */
+                        id: string;
+                        connection: components["schemas"]["Connection"] | string | unknown;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description Email login identifier (unique within the connection). */
+                        email?: string;
+                        /** @description Username login identifier (unique within the connection). */
+                        username?: string;
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description CredentialMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Credential creation date */
+                        createdAt: string;
+                        /** @description Credential updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+        };
+    };
+    "credentials/get": {
+        parameters: {
+            query?: {
+                /** @description Expand id-only fields in the response. Pass one path per entry (e.g. `?expand=user`). */
+                expand?: ("user" | "connection")[];
+            };
+            header?: never;
+            path: {
+                credentials_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Credential */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Credential ID */
+                        id: string;
+                        connection: components["schemas"]["Connection"] | string | unknown;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description Email login identifier (unique within the connection). */
+                        email?: string;
+                        /** @description Username login identifier (unique within the connection). */
+                        username?: string;
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description CredentialMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Credential creation date */
+                        createdAt: string;
+                        /** @description Credential updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+        };
+    };
+    "credentials/update": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                credentials_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    email?: string;
+                    username?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Credential */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Credential ID */
+                        id: string;
+                        connection: components["schemas"]["Connection"] | string | unknown;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description Email login identifier (unique within the connection). */
+                        email?: string;
+                        /** @description Username login identifier (unique within the connection). */
+                        username?: string;
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description CredentialMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Credential creation date */
+                        createdAt: string;
+                        /** @description Credential updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+        };
+    };
+    "credentials/delete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                credentials_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Credential */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Credential ID */
+                        id: string;
+                        connection: components["schemas"]["Connection"] | string | unknown;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description Email login identifier (unique within the connection). */
+                        email?: string;
+                        /** @description Username login identifier (unique within the connection). */
+                        username?: string;
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description CredentialMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Credential creation date */
+                        createdAt: string;
+                        /** @description Credential updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+        };
+    };
+    "credentials/setPassword": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                credentials_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description New plaintext password (hashed on write). */
+                    password: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Credential */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Credential ID */
+                        id: string;
+                        connection: components["schemas"]["Connection"] | string | unknown;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description Email login identifier (unique within the connection). */
+                        email?: string;
+                        /** @description Username login identifier (unique within the connection). */
+                        username?: string;
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description CredentialMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Credential creation date */
+                        createdAt: string;
+                        /** @description Credential updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+        };
+    };
     "role/list": {
         parameters: {
             query?: {
@@ -7996,6 +8383,8 @@ export interface operations {
                 code_challenge_method?: string;
                 /** @description Challenge for PKCE authorization code flow */
                 code_challenge?: string;
+                /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
+                redirect_to?: string;
                 client_id: string;
                 /** @description Deprecated. Use connection_id */
                 connection?: string;
@@ -8540,6 +8929,8 @@ export interface operations {
                     /** @description An opaque value the applications adds to the initial request that the authorization server includes when redirecting the back to the application. This value must be used by the application to prevent CSRF attacks. */
                     state?: string;
                     response_type?: string;
+                    /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
+                    redirect_to?: string;
                     client_id: string;
                     /** @description Deprecated. Use connection_id */
                     connection?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "1.3.21",
+  "version": "1.3.23",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",