@faable/auth-sdk 1.3.31 → 1.3.33
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/FaableAuthApi.d.ts +40 -0
- package/dist/api/types.d.ts +85 -1
- package/package.json +1 -1
- package/spec/openapi.json +576 -3
package/dist/FaableAuthApi.d.ts
CHANGED
|
@@ -483,6 +483,14 @@ export declare class FaableAuthApi extends FaableApi {
|
|
|
483
483
|
} | undefined;
|
|
484
484
|
readonly is_using_default_credentials: boolean;
|
|
485
485
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | undefined;
|
|
486
|
+
password_policy?: {
|
|
487
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
488
|
+
min_length?: number | undefined;
|
|
489
|
+
require_lowercase?: boolean | undefined;
|
|
490
|
+
require_uppercase?: boolean | undefined;
|
|
491
|
+
require_number?: boolean | undefined;
|
|
492
|
+
require_special?: boolean | undefined;
|
|
493
|
+
} | undefined;
|
|
486
494
|
account: string;
|
|
487
495
|
metadata: {
|
|
488
496
|
[key: string]: unknown;
|
|
@@ -513,6 +521,14 @@ export declare class FaableAuthApi extends FaableApi {
|
|
|
513
521
|
} | undefined;
|
|
514
522
|
readonly is_using_default_credentials: boolean;
|
|
515
523
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | undefined;
|
|
524
|
+
password_policy?: {
|
|
525
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
526
|
+
min_length?: number | undefined;
|
|
527
|
+
require_lowercase?: boolean | undefined;
|
|
528
|
+
require_uppercase?: boolean | undefined;
|
|
529
|
+
require_number?: boolean | undefined;
|
|
530
|
+
require_special?: boolean | undefined;
|
|
531
|
+
} | undefined;
|
|
516
532
|
account: string;
|
|
517
533
|
metadata: {
|
|
518
534
|
[key: string]: unknown;
|
|
@@ -546,6 +562,14 @@ export declare class FaableAuthApi extends FaableApi {
|
|
|
546
562
|
} | undefined;
|
|
547
563
|
readonly is_using_default_credentials: boolean;
|
|
548
564
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | undefined;
|
|
565
|
+
password_policy?: {
|
|
566
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
567
|
+
min_length?: number | undefined;
|
|
568
|
+
require_lowercase?: boolean | undefined;
|
|
569
|
+
require_uppercase?: boolean | undefined;
|
|
570
|
+
require_number?: boolean | undefined;
|
|
571
|
+
require_special?: boolean | undefined;
|
|
572
|
+
} | undefined;
|
|
549
573
|
account: string;
|
|
550
574
|
metadata: {
|
|
551
575
|
[key: string]: unknown;
|
|
@@ -577,6 +601,14 @@ export declare class FaableAuthApi extends FaableApi {
|
|
|
577
601
|
} | undefined;
|
|
578
602
|
readonly is_using_default_credentials: boolean;
|
|
579
603
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | undefined;
|
|
604
|
+
password_policy?: {
|
|
605
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
606
|
+
min_length?: number | undefined;
|
|
607
|
+
require_lowercase?: boolean | undefined;
|
|
608
|
+
require_uppercase?: boolean | undefined;
|
|
609
|
+
require_number?: boolean | undefined;
|
|
610
|
+
require_special?: boolean | undefined;
|
|
611
|
+
} | undefined;
|
|
580
612
|
account: string;
|
|
581
613
|
metadata: {
|
|
582
614
|
[key: string]: unknown;
|
|
@@ -713,6 +745,14 @@ export declare class FaableAuthApi extends FaableApi {
|
|
|
713
745
|
} | undefined;
|
|
714
746
|
readonly is_using_default_credentials: boolean;
|
|
715
747
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | undefined;
|
|
748
|
+
password_policy?: {
|
|
749
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
750
|
+
min_length?: number | undefined;
|
|
751
|
+
require_lowercase?: boolean | undefined;
|
|
752
|
+
require_uppercase?: boolean | undefined;
|
|
753
|
+
require_number?: boolean | undefined;
|
|
754
|
+
require_special?: boolean | undefined;
|
|
755
|
+
} | undefined;
|
|
716
756
|
account: string;
|
|
717
757
|
metadata: {
|
|
718
758
|
[key: string]: unknown;
|
package/dist/api/types.d.ts
CHANGED
|
@@ -1709,6 +1709,15 @@ export interface components {
|
|
|
1709
1709
|
readonly is_using_default_credentials: boolean;
|
|
1710
1710
|
/** @description Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant. */
|
|
1711
1711
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
1712
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
1713
|
+
password_policy?: {
|
|
1714
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
1715
|
+
min_length?: number;
|
|
1716
|
+
require_lowercase?: boolean;
|
|
1717
|
+
require_uppercase?: boolean;
|
|
1718
|
+
require_number?: boolean;
|
|
1719
|
+
require_special?: boolean;
|
|
1720
|
+
};
|
|
1712
1721
|
/** @description Object is related with this account */
|
|
1713
1722
|
account: string;
|
|
1714
1723
|
/**
|
|
@@ -1759,6 +1768,15 @@ export interface components {
|
|
|
1759
1768
|
* - `always_sync`: the federated provider's email is always written back, overwriting any manual change. Useful for tenants whose source of truth for identity is the IdP (corporate SSO, etc.).
|
|
1760
1769
|
*/
|
|
1761
1770
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
1771
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
1772
|
+
password_policy?: {
|
|
1773
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
1774
|
+
min_length?: number;
|
|
1775
|
+
require_lowercase?: boolean;
|
|
1776
|
+
require_uppercase?: boolean;
|
|
1777
|
+
require_number?: boolean;
|
|
1778
|
+
require_special?: boolean;
|
|
1779
|
+
};
|
|
1762
1780
|
/** @description Add Metadata */
|
|
1763
1781
|
metadata?: {
|
|
1764
1782
|
[key: string]: unknown;
|
|
@@ -1793,6 +1811,14 @@ export interface components {
|
|
|
1793
1811
|
[key: string]: string;
|
|
1794
1812
|
};
|
|
1795
1813
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | null;
|
|
1814
|
+
password_policy?: {
|
|
1815
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
1816
|
+
min_length?: number;
|
|
1817
|
+
require_lowercase?: boolean;
|
|
1818
|
+
require_uppercase?: boolean;
|
|
1819
|
+
require_number?: boolean;
|
|
1820
|
+
require_special?: boolean;
|
|
1821
|
+
} | null;
|
|
1796
1822
|
};
|
|
1797
1823
|
/** @description Client */
|
|
1798
1824
|
Client: {
|
|
@@ -3623,6 +3649,15 @@ export interface operations {
|
|
|
3623
3649
|
* - `always_sync`: the federated provider's email is always written back, overwriting any manual change. Useful for tenants whose source of truth for identity is the IdP (corporate SSO, etc.).
|
|
3624
3650
|
*/
|
|
3625
3651
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
3652
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
3653
|
+
password_policy?: {
|
|
3654
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
3655
|
+
min_length?: number;
|
|
3656
|
+
require_lowercase?: boolean;
|
|
3657
|
+
require_uppercase?: boolean;
|
|
3658
|
+
require_number?: boolean;
|
|
3659
|
+
require_special?: boolean;
|
|
3660
|
+
};
|
|
3626
3661
|
/** @description Add Metadata */
|
|
3627
3662
|
metadata?: {
|
|
3628
3663
|
[key: string]: unknown;
|
|
@@ -3678,6 +3713,15 @@ export interface operations {
|
|
|
3678
3713
|
readonly is_using_default_credentials: boolean;
|
|
3679
3714
|
/** @description Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant. */
|
|
3680
3715
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
3716
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
3717
|
+
password_policy?: {
|
|
3718
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
3719
|
+
min_length?: number;
|
|
3720
|
+
require_lowercase?: boolean;
|
|
3721
|
+
require_uppercase?: boolean;
|
|
3722
|
+
require_number?: boolean;
|
|
3723
|
+
require_special?: boolean;
|
|
3724
|
+
};
|
|
3681
3725
|
/** @description Object is related with this account */
|
|
3682
3726
|
account: string;
|
|
3683
3727
|
/**
|
|
@@ -3754,6 +3798,15 @@ export interface operations {
|
|
|
3754
3798
|
readonly is_using_default_credentials: boolean;
|
|
3755
3799
|
/** @description Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant. */
|
|
3756
3800
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
3801
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
3802
|
+
password_policy?: {
|
|
3803
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
3804
|
+
min_length?: number;
|
|
3805
|
+
require_lowercase?: boolean;
|
|
3806
|
+
require_uppercase?: boolean;
|
|
3807
|
+
require_number?: boolean;
|
|
3808
|
+
require_special?: boolean;
|
|
3809
|
+
};
|
|
3757
3810
|
/** @description Object is related with this account */
|
|
3758
3811
|
account: string;
|
|
3759
3812
|
/**
|
|
@@ -3808,6 +3861,14 @@ export interface operations {
|
|
|
3808
3861
|
[key: string]: string;
|
|
3809
3862
|
};
|
|
3810
3863
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync" | null;
|
|
3864
|
+
password_policy?: {
|
|
3865
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
3866
|
+
min_length?: number;
|
|
3867
|
+
require_lowercase?: boolean;
|
|
3868
|
+
require_uppercase?: boolean;
|
|
3869
|
+
require_number?: boolean;
|
|
3870
|
+
require_special?: boolean;
|
|
3871
|
+
} | null;
|
|
3811
3872
|
};
|
|
3812
3873
|
};
|
|
3813
3874
|
};
|
|
@@ -3859,6 +3920,15 @@ export interface operations {
|
|
|
3859
3920
|
readonly is_using_default_credentials: boolean;
|
|
3860
3921
|
/** @description Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant. */
|
|
3861
3922
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
3923
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
3924
|
+
password_policy?: {
|
|
3925
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
3926
|
+
min_length?: number;
|
|
3927
|
+
require_lowercase?: boolean;
|
|
3928
|
+
require_uppercase?: boolean;
|
|
3929
|
+
require_number?: boolean;
|
|
3930
|
+
require_special?: boolean;
|
|
3931
|
+
};
|
|
3862
3932
|
/** @description Object is related with this account */
|
|
3863
3933
|
account: string;
|
|
3864
3934
|
/**
|
|
@@ -3935,6 +4005,15 @@ export interface operations {
|
|
|
3935
4005
|
readonly is_using_default_credentials: boolean;
|
|
3936
4006
|
/** @description Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant. */
|
|
3937
4007
|
email_oauth_sync_policy?: "preserve_manual" | "always_sync";
|
|
4008
|
+
/** @description Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login. */
|
|
4009
|
+
password_policy?: {
|
|
4010
|
+
level: "none" | "low" | "fair" | "good" | "excellent";
|
|
4011
|
+
min_length?: number;
|
|
4012
|
+
require_lowercase?: boolean;
|
|
4013
|
+
require_uppercase?: boolean;
|
|
4014
|
+
require_number?: boolean;
|
|
4015
|
+
require_special?: boolean;
|
|
4016
|
+
};
|
|
3938
4017
|
/** @description Object is related with this account */
|
|
3939
4018
|
account: string;
|
|
3940
4019
|
/**
|
|
@@ -9103,7 +9182,12 @@ export interface operations {
|
|
|
9103
9182
|
headers: {
|
|
9104
9183
|
[name: string]: unknown;
|
|
9105
9184
|
};
|
|
9106
|
-
content
|
|
9185
|
+
content: {
|
|
9186
|
+
"application/json": {
|
|
9187
|
+
/** @enum {string} */
|
|
9188
|
+
status: "ok";
|
|
9189
|
+
};
|
|
9190
|
+
};
|
|
9107
9191
|
};
|
|
9108
9192
|
};
|
|
9109
9193
|
};
|
package/package.json
CHANGED
package/spec/openapi.json
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
"info": {
|
|
4
4
|
"title": "@faablecloud/auth",
|
|
5
5
|
"description": "Auth Platform made by Faable. Manage Users and Roles",
|
|
6
|
-
"version": "1.10.
|
|
6
|
+
"version": "1.10.8",
|
|
7
7
|
"license": {
|
|
8
8
|
"name": "private",
|
|
9
9
|
"url": "https://faable.com/docs/platform/privacy-policy"
|
|
@@ -354,6 +354,66 @@
|
|
|
354
354
|
],
|
|
355
355
|
"description": "Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant."
|
|
356
356
|
},
|
|
357
|
+
"password_policy": {
|
|
358
|
+
"type": "object",
|
|
359
|
+
"required": [
|
|
360
|
+
"level"
|
|
361
|
+
],
|
|
362
|
+
"properties": {
|
|
363
|
+
"level": {
|
|
364
|
+
"anyOf": [
|
|
365
|
+
{
|
|
366
|
+
"type": "string",
|
|
367
|
+
"enum": [
|
|
368
|
+
"none"
|
|
369
|
+
]
|
|
370
|
+
},
|
|
371
|
+
{
|
|
372
|
+
"type": "string",
|
|
373
|
+
"enum": [
|
|
374
|
+
"low"
|
|
375
|
+
]
|
|
376
|
+
},
|
|
377
|
+
{
|
|
378
|
+
"type": "string",
|
|
379
|
+
"enum": [
|
|
380
|
+
"fair"
|
|
381
|
+
]
|
|
382
|
+
},
|
|
383
|
+
{
|
|
384
|
+
"type": "string",
|
|
385
|
+
"enum": [
|
|
386
|
+
"good"
|
|
387
|
+
]
|
|
388
|
+
},
|
|
389
|
+
{
|
|
390
|
+
"type": "string",
|
|
391
|
+
"enum": [
|
|
392
|
+
"excellent"
|
|
393
|
+
]
|
|
394
|
+
}
|
|
395
|
+
]
|
|
396
|
+
},
|
|
397
|
+
"min_length": {
|
|
398
|
+
"type": "integer",
|
|
399
|
+
"minimum": 1,
|
|
400
|
+
"maximum": 128
|
|
401
|
+
},
|
|
402
|
+
"require_lowercase": {
|
|
403
|
+
"type": "boolean"
|
|
404
|
+
},
|
|
405
|
+
"require_uppercase": {
|
|
406
|
+
"type": "boolean"
|
|
407
|
+
},
|
|
408
|
+
"require_number": {
|
|
409
|
+
"type": "boolean"
|
|
410
|
+
},
|
|
411
|
+
"require_special": {
|
|
412
|
+
"type": "boolean"
|
|
413
|
+
}
|
|
414
|
+
},
|
|
415
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
416
|
+
},
|
|
357
417
|
"account": {
|
|
358
418
|
"type": "string",
|
|
359
419
|
"description": "Object is related with this account"
|
|
@@ -459,6 +519,66 @@
|
|
|
459
519
|
],
|
|
460
520
|
"description": "Controls what happens to `user.email` on subsequent OAuth/federated logins when the user previously changed their email manually through this auth server (i.e. `user.email_change_locked_at` is set).\n\n- `preserve_manual` (default): the manually-set email wins. The federated provider's email is ignored on re-sync; `email` and `email_verified` are not touched. The identity link stays valid via `provider_user_id`, so the user can still log in with Google/etc.\n- `always_sync`: the federated provider's email is always written back, overwriting any manual change. Useful for tenants whose source of truth for identity is the IdP (corporate SSO, etc.)."
|
|
461
521
|
},
|
|
522
|
+
"password_policy": {
|
|
523
|
+
"type": "object",
|
|
524
|
+
"required": [
|
|
525
|
+
"level"
|
|
526
|
+
],
|
|
527
|
+
"properties": {
|
|
528
|
+
"level": {
|
|
529
|
+
"anyOf": [
|
|
530
|
+
{
|
|
531
|
+
"type": "string",
|
|
532
|
+
"enum": [
|
|
533
|
+
"none"
|
|
534
|
+
]
|
|
535
|
+
},
|
|
536
|
+
{
|
|
537
|
+
"type": "string",
|
|
538
|
+
"enum": [
|
|
539
|
+
"low"
|
|
540
|
+
]
|
|
541
|
+
},
|
|
542
|
+
{
|
|
543
|
+
"type": "string",
|
|
544
|
+
"enum": [
|
|
545
|
+
"fair"
|
|
546
|
+
]
|
|
547
|
+
},
|
|
548
|
+
{
|
|
549
|
+
"type": "string",
|
|
550
|
+
"enum": [
|
|
551
|
+
"good"
|
|
552
|
+
]
|
|
553
|
+
},
|
|
554
|
+
{
|
|
555
|
+
"type": "string",
|
|
556
|
+
"enum": [
|
|
557
|
+
"excellent"
|
|
558
|
+
]
|
|
559
|
+
}
|
|
560
|
+
]
|
|
561
|
+
},
|
|
562
|
+
"min_length": {
|
|
563
|
+
"type": "integer",
|
|
564
|
+
"minimum": 1,
|
|
565
|
+
"maximum": 128
|
|
566
|
+
},
|
|
567
|
+
"require_lowercase": {
|
|
568
|
+
"type": "boolean"
|
|
569
|
+
},
|
|
570
|
+
"require_uppercase": {
|
|
571
|
+
"type": "boolean"
|
|
572
|
+
},
|
|
573
|
+
"require_number": {
|
|
574
|
+
"type": "boolean"
|
|
575
|
+
},
|
|
576
|
+
"require_special": {
|
|
577
|
+
"type": "boolean"
|
|
578
|
+
}
|
|
579
|
+
},
|
|
580
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
581
|
+
},
|
|
462
582
|
"metadata": {
|
|
463
583
|
"type": "object",
|
|
464
584
|
"properties": {},
|
|
@@ -552,6 +672,73 @@
|
|
|
552
672
|
"type": "null"
|
|
553
673
|
}
|
|
554
674
|
]
|
|
675
|
+
},
|
|
676
|
+
"password_policy": {
|
|
677
|
+
"anyOf": [
|
|
678
|
+
{
|
|
679
|
+
"type": "object",
|
|
680
|
+
"required": [
|
|
681
|
+
"level"
|
|
682
|
+
],
|
|
683
|
+
"properties": {
|
|
684
|
+
"level": {
|
|
685
|
+
"anyOf": [
|
|
686
|
+
{
|
|
687
|
+
"type": "string",
|
|
688
|
+
"enum": [
|
|
689
|
+
"none"
|
|
690
|
+
]
|
|
691
|
+
},
|
|
692
|
+
{
|
|
693
|
+
"type": "string",
|
|
694
|
+
"enum": [
|
|
695
|
+
"low"
|
|
696
|
+
]
|
|
697
|
+
},
|
|
698
|
+
{
|
|
699
|
+
"type": "string",
|
|
700
|
+
"enum": [
|
|
701
|
+
"fair"
|
|
702
|
+
]
|
|
703
|
+
},
|
|
704
|
+
{
|
|
705
|
+
"type": "string",
|
|
706
|
+
"enum": [
|
|
707
|
+
"good"
|
|
708
|
+
]
|
|
709
|
+
},
|
|
710
|
+
{
|
|
711
|
+
"type": "string",
|
|
712
|
+
"enum": [
|
|
713
|
+
"excellent"
|
|
714
|
+
]
|
|
715
|
+
}
|
|
716
|
+
]
|
|
717
|
+
},
|
|
718
|
+
"min_length": {
|
|
719
|
+
"type": "integer",
|
|
720
|
+
"minimum": 1,
|
|
721
|
+
"maximum": 128
|
|
722
|
+
},
|
|
723
|
+
"require_lowercase": {
|
|
724
|
+
"type": "boolean"
|
|
725
|
+
},
|
|
726
|
+
"require_uppercase": {
|
|
727
|
+
"type": "boolean"
|
|
728
|
+
},
|
|
729
|
+
"require_number": {
|
|
730
|
+
"type": "boolean"
|
|
731
|
+
},
|
|
732
|
+
"require_special": {
|
|
733
|
+
"type": "boolean"
|
|
734
|
+
}
|
|
735
|
+
},
|
|
736
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
737
|
+
},
|
|
738
|
+
{
|
|
739
|
+
"type": "null"
|
|
740
|
+
}
|
|
741
|
+
]
|
|
555
742
|
}
|
|
556
743
|
},
|
|
557
744
|
"description": "Partial update for a Connection. Only the supplied fields are modified. `connection_type` is intentionally excluded — changing it would orphan every identity already linked to this connection.",
|
|
@@ -5258,6 +5445,66 @@
|
|
|
5258
5445
|
],
|
|
5259
5446
|
"description": "Controls what happens to `user.email` on subsequent OAuth/federated logins when the user previously changed their email manually through this auth server (i.e. `user.email_change_locked_at` is set).\n\n- `preserve_manual` (default): the manually-set email wins. The federated provider's email is ignored on re-sync; `email` and `email_verified` are not touched. The identity link stays valid via `provider_user_id`, so the user can still log in with Google/etc.\n- `always_sync`: the federated provider's email is always written back, overwriting any manual change. Useful for tenants whose source of truth for identity is the IdP (corporate SSO, etc.)."
|
|
5260
5447
|
},
|
|
5448
|
+
"password_policy": {
|
|
5449
|
+
"type": "object",
|
|
5450
|
+
"required": [
|
|
5451
|
+
"level"
|
|
5452
|
+
],
|
|
5453
|
+
"properties": {
|
|
5454
|
+
"level": {
|
|
5455
|
+
"anyOf": [
|
|
5456
|
+
{
|
|
5457
|
+
"type": "string",
|
|
5458
|
+
"enum": [
|
|
5459
|
+
"none"
|
|
5460
|
+
]
|
|
5461
|
+
},
|
|
5462
|
+
{
|
|
5463
|
+
"type": "string",
|
|
5464
|
+
"enum": [
|
|
5465
|
+
"low"
|
|
5466
|
+
]
|
|
5467
|
+
},
|
|
5468
|
+
{
|
|
5469
|
+
"type": "string",
|
|
5470
|
+
"enum": [
|
|
5471
|
+
"fair"
|
|
5472
|
+
]
|
|
5473
|
+
},
|
|
5474
|
+
{
|
|
5475
|
+
"type": "string",
|
|
5476
|
+
"enum": [
|
|
5477
|
+
"good"
|
|
5478
|
+
]
|
|
5479
|
+
},
|
|
5480
|
+
{
|
|
5481
|
+
"type": "string",
|
|
5482
|
+
"enum": [
|
|
5483
|
+
"excellent"
|
|
5484
|
+
]
|
|
5485
|
+
}
|
|
5486
|
+
]
|
|
5487
|
+
},
|
|
5488
|
+
"min_length": {
|
|
5489
|
+
"type": "integer",
|
|
5490
|
+
"minimum": 1,
|
|
5491
|
+
"maximum": 128
|
|
5492
|
+
},
|
|
5493
|
+
"require_lowercase": {
|
|
5494
|
+
"type": "boolean"
|
|
5495
|
+
},
|
|
5496
|
+
"require_uppercase": {
|
|
5497
|
+
"type": "boolean"
|
|
5498
|
+
},
|
|
5499
|
+
"require_number": {
|
|
5500
|
+
"type": "boolean"
|
|
5501
|
+
},
|
|
5502
|
+
"require_special": {
|
|
5503
|
+
"type": "boolean"
|
|
5504
|
+
}
|
|
5505
|
+
},
|
|
5506
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
5507
|
+
},
|
|
5261
5508
|
"metadata": {
|
|
5262
5509
|
"type": "object",
|
|
5263
5510
|
"properties": {},
|
|
@@ -5409,6 +5656,66 @@
|
|
|
5409
5656
|
],
|
|
5410
5657
|
"description": "Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant."
|
|
5411
5658
|
},
|
|
5659
|
+
"password_policy": {
|
|
5660
|
+
"type": "object",
|
|
5661
|
+
"required": [
|
|
5662
|
+
"level"
|
|
5663
|
+
],
|
|
5664
|
+
"properties": {
|
|
5665
|
+
"level": {
|
|
5666
|
+
"anyOf": [
|
|
5667
|
+
{
|
|
5668
|
+
"type": "string",
|
|
5669
|
+
"enum": [
|
|
5670
|
+
"none"
|
|
5671
|
+
]
|
|
5672
|
+
},
|
|
5673
|
+
{
|
|
5674
|
+
"type": "string",
|
|
5675
|
+
"enum": [
|
|
5676
|
+
"low"
|
|
5677
|
+
]
|
|
5678
|
+
},
|
|
5679
|
+
{
|
|
5680
|
+
"type": "string",
|
|
5681
|
+
"enum": [
|
|
5682
|
+
"fair"
|
|
5683
|
+
]
|
|
5684
|
+
},
|
|
5685
|
+
{
|
|
5686
|
+
"type": "string",
|
|
5687
|
+
"enum": [
|
|
5688
|
+
"good"
|
|
5689
|
+
]
|
|
5690
|
+
},
|
|
5691
|
+
{
|
|
5692
|
+
"type": "string",
|
|
5693
|
+
"enum": [
|
|
5694
|
+
"excellent"
|
|
5695
|
+
]
|
|
5696
|
+
}
|
|
5697
|
+
]
|
|
5698
|
+
},
|
|
5699
|
+
"min_length": {
|
|
5700
|
+
"type": "integer",
|
|
5701
|
+
"minimum": 1,
|
|
5702
|
+
"maximum": 128
|
|
5703
|
+
},
|
|
5704
|
+
"require_lowercase": {
|
|
5705
|
+
"type": "boolean"
|
|
5706
|
+
},
|
|
5707
|
+
"require_uppercase": {
|
|
5708
|
+
"type": "boolean"
|
|
5709
|
+
},
|
|
5710
|
+
"require_number": {
|
|
5711
|
+
"type": "boolean"
|
|
5712
|
+
},
|
|
5713
|
+
"require_special": {
|
|
5714
|
+
"type": "boolean"
|
|
5715
|
+
}
|
|
5716
|
+
},
|
|
5717
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
5718
|
+
},
|
|
5412
5719
|
"account": {
|
|
5413
5720
|
"type": "string",
|
|
5414
5721
|
"description": "Object is related with this account"
|
|
@@ -5592,6 +5899,66 @@
|
|
|
5592
5899
|
],
|
|
5593
5900
|
"description": "Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant."
|
|
5594
5901
|
},
|
|
5902
|
+
"password_policy": {
|
|
5903
|
+
"type": "object",
|
|
5904
|
+
"required": [
|
|
5905
|
+
"level"
|
|
5906
|
+
],
|
|
5907
|
+
"properties": {
|
|
5908
|
+
"level": {
|
|
5909
|
+
"anyOf": [
|
|
5910
|
+
{
|
|
5911
|
+
"type": "string",
|
|
5912
|
+
"enum": [
|
|
5913
|
+
"none"
|
|
5914
|
+
]
|
|
5915
|
+
},
|
|
5916
|
+
{
|
|
5917
|
+
"type": "string",
|
|
5918
|
+
"enum": [
|
|
5919
|
+
"low"
|
|
5920
|
+
]
|
|
5921
|
+
},
|
|
5922
|
+
{
|
|
5923
|
+
"type": "string",
|
|
5924
|
+
"enum": [
|
|
5925
|
+
"fair"
|
|
5926
|
+
]
|
|
5927
|
+
},
|
|
5928
|
+
{
|
|
5929
|
+
"type": "string",
|
|
5930
|
+
"enum": [
|
|
5931
|
+
"good"
|
|
5932
|
+
]
|
|
5933
|
+
},
|
|
5934
|
+
{
|
|
5935
|
+
"type": "string",
|
|
5936
|
+
"enum": [
|
|
5937
|
+
"excellent"
|
|
5938
|
+
]
|
|
5939
|
+
}
|
|
5940
|
+
]
|
|
5941
|
+
},
|
|
5942
|
+
"min_length": {
|
|
5943
|
+
"type": "integer",
|
|
5944
|
+
"minimum": 1,
|
|
5945
|
+
"maximum": 128
|
|
5946
|
+
},
|
|
5947
|
+
"require_lowercase": {
|
|
5948
|
+
"type": "boolean"
|
|
5949
|
+
},
|
|
5950
|
+
"require_uppercase": {
|
|
5951
|
+
"type": "boolean"
|
|
5952
|
+
},
|
|
5953
|
+
"require_number": {
|
|
5954
|
+
"type": "boolean"
|
|
5955
|
+
},
|
|
5956
|
+
"require_special": {
|
|
5957
|
+
"type": "boolean"
|
|
5958
|
+
}
|
|
5959
|
+
},
|
|
5960
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
5961
|
+
},
|
|
5595
5962
|
"account": {
|
|
5596
5963
|
"type": "string",
|
|
5597
5964
|
"description": "Object is related with this account"
|
|
@@ -5707,6 +6074,73 @@
|
|
|
5707
6074
|
"type": "null"
|
|
5708
6075
|
}
|
|
5709
6076
|
]
|
|
6077
|
+
},
|
|
6078
|
+
"password_policy": {
|
|
6079
|
+
"anyOf": [
|
|
6080
|
+
{
|
|
6081
|
+
"type": "object",
|
|
6082
|
+
"required": [
|
|
6083
|
+
"level"
|
|
6084
|
+
],
|
|
6085
|
+
"properties": {
|
|
6086
|
+
"level": {
|
|
6087
|
+
"anyOf": [
|
|
6088
|
+
{
|
|
6089
|
+
"type": "string",
|
|
6090
|
+
"enum": [
|
|
6091
|
+
"none"
|
|
6092
|
+
]
|
|
6093
|
+
},
|
|
6094
|
+
{
|
|
6095
|
+
"type": "string",
|
|
6096
|
+
"enum": [
|
|
6097
|
+
"low"
|
|
6098
|
+
]
|
|
6099
|
+
},
|
|
6100
|
+
{
|
|
6101
|
+
"type": "string",
|
|
6102
|
+
"enum": [
|
|
6103
|
+
"fair"
|
|
6104
|
+
]
|
|
6105
|
+
},
|
|
6106
|
+
{
|
|
6107
|
+
"type": "string",
|
|
6108
|
+
"enum": [
|
|
6109
|
+
"good"
|
|
6110
|
+
]
|
|
6111
|
+
},
|
|
6112
|
+
{
|
|
6113
|
+
"type": "string",
|
|
6114
|
+
"enum": [
|
|
6115
|
+
"excellent"
|
|
6116
|
+
]
|
|
6117
|
+
}
|
|
6118
|
+
]
|
|
6119
|
+
},
|
|
6120
|
+
"min_length": {
|
|
6121
|
+
"type": "integer",
|
|
6122
|
+
"minimum": 1,
|
|
6123
|
+
"maximum": 128
|
|
6124
|
+
},
|
|
6125
|
+
"require_lowercase": {
|
|
6126
|
+
"type": "boolean"
|
|
6127
|
+
},
|
|
6128
|
+
"require_uppercase": {
|
|
6129
|
+
"type": "boolean"
|
|
6130
|
+
},
|
|
6131
|
+
"require_number": {
|
|
6132
|
+
"type": "boolean"
|
|
6133
|
+
},
|
|
6134
|
+
"require_special": {
|
|
6135
|
+
"type": "boolean"
|
|
6136
|
+
}
|
|
6137
|
+
},
|
|
6138
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
6139
|
+
},
|
|
6140
|
+
{
|
|
6141
|
+
"type": "null"
|
|
6142
|
+
}
|
|
6143
|
+
]
|
|
5710
6144
|
}
|
|
5711
6145
|
},
|
|
5712
6146
|
"description": "Partial update for a Connection. Only the supplied fields are modified. `connection_type` is intentionally excluded — changing it would orphan every identity already linked to this connection.",
|
|
@@ -5863,6 +6297,66 @@
|
|
|
5863
6297
|
],
|
|
5864
6298
|
"description": "Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant."
|
|
5865
6299
|
},
|
|
6300
|
+
"password_policy": {
|
|
6301
|
+
"type": "object",
|
|
6302
|
+
"required": [
|
|
6303
|
+
"level"
|
|
6304
|
+
],
|
|
6305
|
+
"properties": {
|
|
6306
|
+
"level": {
|
|
6307
|
+
"anyOf": [
|
|
6308
|
+
{
|
|
6309
|
+
"type": "string",
|
|
6310
|
+
"enum": [
|
|
6311
|
+
"none"
|
|
6312
|
+
]
|
|
6313
|
+
},
|
|
6314
|
+
{
|
|
6315
|
+
"type": "string",
|
|
6316
|
+
"enum": [
|
|
6317
|
+
"low"
|
|
6318
|
+
]
|
|
6319
|
+
},
|
|
6320
|
+
{
|
|
6321
|
+
"type": "string",
|
|
6322
|
+
"enum": [
|
|
6323
|
+
"fair"
|
|
6324
|
+
]
|
|
6325
|
+
},
|
|
6326
|
+
{
|
|
6327
|
+
"type": "string",
|
|
6328
|
+
"enum": [
|
|
6329
|
+
"good"
|
|
6330
|
+
]
|
|
6331
|
+
},
|
|
6332
|
+
{
|
|
6333
|
+
"type": "string",
|
|
6334
|
+
"enum": [
|
|
6335
|
+
"excellent"
|
|
6336
|
+
]
|
|
6337
|
+
}
|
|
6338
|
+
]
|
|
6339
|
+
},
|
|
6340
|
+
"min_length": {
|
|
6341
|
+
"type": "integer",
|
|
6342
|
+
"minimum": 1,
|
|
6343
|
+
"maximum": 128
|
|
6344
|
+
},
|
|
6345
|
+
"require_lowercase": {
|
|
6346
|
+
"type": "boolean"
|
|
6347
|
+
},
|
|
6348
|
+
"require_uppercase": {
|
|
6349
|
+
"type": "boolean"
|
|
6350
|
+
},
|
|
6351
|
+
"require_number": {
|
|
6352
|
+
"type": "boolean"
|
|
6353
|
+
},
|
|
6354
|
+
"require_special": {
|
|
6355
|
+
"type": "boolean"
|
|
6356
|
+
}
|
|
6357
|
+
},
|
|
6358
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
6359
|
+
},
|
|
5866
6360
|
"account": {
|
|
5867
6361
|
"type": "string",
|
|
5868
6362
|
"description": "Object is related with this account"
|
|
@@ -6044,6 +6538,66 @@
|
|
|
6044
6538
|
],
|
|
6045
6539
|
"description": "Per-connection override of `Account.email_oauth_sync_policy`. When set on a Connection, takes precedence over the Account-level setting for logins through this IdP. When unset (default), the Account-level policy applies. Use this to allow `always_sync` for a trusted IdP (e.g. corporate SSO) while keeping `preserve_manual` for others within the same tenant."
|
|
6046
6540
|
},
|
|
6541
|
+
"password_policy": {
|
|
6542
|
+
"type": "object",
|
|
6543
|
+
"required": [
|
|
6544
|
+
"level"
|
|
6545
|
+
],
|
|
6546
|
+
"properties": {
|
|
6547
|
+
"level": {
|
|
6548
|
+
"anyOf": [
|
|
6549
|
+
{
|
|
6550
|
+
"type": "string",
|
|
6551
|
+
"enum": [
|
|
6552
|
+
"none"
|
|
6553
|
+
]
|
|
6554
|
+
},
|
|
6555
|
+
{
|
|
6556
|
+
"type": "string",
|
|
6557
|
+
"enum": [
|
|
6558
|
+
"low"
|
|
6559
|
+
]
|
|
6560
|
+
},
|
|
6561
|
+
{
|
|
6562
|
+
"type": "string",
|
|
6563
|
+
"enum": [
|
|
6564
|
+
"fair"
|
|
6565
|
+
]
|
|
6566
|
+
},
|
|
6567
|
+
{
|
|
6568
|
+
"type": "string",
|
|
6569
|
+
"enum": [
|
|
6570
|
+
"good"
|
|
6571
|
+
]
|
|
6572
|
+
},
|
|
6573
|
+
{
|
|
6574
|
+
"type": "string",
|
|
6575
|
+
"enum": [
|
|
6576
|
+
"excellent"
|
|
6577
|
+
]
|
|
6578
|
+
}
|
|
6579
|
+
]
|
|
6580
|
+
},
|
|
6581
|
+
"min_length": {
|
|
6582
|
+
"type": "integer",
|
|
6583
|
+
"minimum": 1,
|
|
6584
|
+
"maximum": 128
|
|
6585
|
+
},
|
|
6586
|
+
"require_lowercase": {
|
|
6587
|
+
"type": "boolean"
|
|
6588
|
+
},
|
|
6589
|
+
"require_uppercase": {
|
|
6590
|
+
"type": "boolean"
|
|
6591
|
+
},
|
|
6592
|
+
"require_number": {
|
|
6593
|
+
"type": "boolean"
|
|
6594
|
+
},
|
|
6595
|
+
"require_special": {
|
|
6596
|
+
"type": "boolean"
|
|
6597
|
+
}
|
|
6598
|
+
},
|
|
6599
|
+
"description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
|
|
6600
|
+
},
|
|
6047
6601
|
"account": {
|
|
6048
6602
|
"type": "string",
|
|
6049
6603
|
"description": "Object is related with this account"
|
|
@@ -18415,7 +18969,8 @@
|
|
|
18415
18969
|
"type": "string"
|
|
18416
18970
|
},
|
|
18417
18971
|
"new_password": {
|
|
18418
|
-
"type": "string"
|
|
18972
|
+
"type": "string",
|
|
18973
|
+
"minLength": 1
|
|
18419
18974
|
}
|
|
18420
18975
|
}
|
|
18421
18976
|
}
|
|
@@ -18424,7 +18979,25 @@
|
|
|
18424
18979
|
},
|
|
18425
18980
|
"responses": {
|
|
18426
18981
|
"200": {
|
|
18427
|
-
"description": "Default Response"
|
|
18982
|
+
"description": "Default Response",
|
|
18983
|
+
"content": {
|
|
18984
|
+
"application/json": {
|
|
18985
|
+
"schema": {
|
|
18986
|
+
"type": "object",
|
|
18987
|
+
"required": [
|
|
18988
|
+
"status"
|
|
18989
|
+
],
|
|
18990
|
+
"properties": {
|
|
18991
|
+
"status": {
|
|
18992
|
+
"type": "string",
|
|
18993
|
+
"enum": [
|
|
18994
|
+
"ok"
|
|
18995
|
+
]
|
|
18996
|
+
}
|
|
18997
|
+
}
|
|
18998
|
+
}
|
|
18999
|
+
}
|
|
19000
|
+
}
|
|
18428
19001
|
}
|
|
18429
19002
|
}
|
|
18430
19003
|
}
|