@faable/auth-sdk 2.4.16 → 2.4.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -678,6 +678,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
678
678
  client_secret: string;
679
679
  callbacks: string[];
680
680
  logout_urls: string[];
681
+ web_origins: string[];
681
682
  refresh_token: {
682
683
  expiration_mode: "expire" | "not-expire";
683
684
  infinite_token_lifetime: boolean;
@@ -711,6 +712,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
711
712
  client_secret: string;
712
713
  callbacks: string[];
713
714
  logout_urls: string[];
715
+ web_origins: string[];
714
716
  refresh_token: {
715
717
  expiration_mode: "expire" | "not-expire";
716
718
  infinite_token_lifetime: boolean;
@@ -747,6 +749,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
747
749
  client_secret: string;
748
750
  callbacks: string[];
749
751
  logout_urls: string[];
752
+ web_origins: string[];
750
753
  refresh_token: {
751
754
  expiration_mode: "expire" | "not-expire";
752
755
  infinite_token_lifetime: boolean;
@@ -782,6 +785,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
782
785
  client_secret: string;
783
786
  callbacks: string[];
784
787
  logout_urls: string[];
788
+ web_origins: string[];
785
789
  refresh_token: {
786
790
  expiration_mode: "expire" | "not-expire";
787
791
  infinite_token_lifetime: boolean;
@@ -578,6 +578,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
578
578
  client_secret: string;
579
579
  callbacks: string[];
580
580
  logout_urls: string[];
581
+ web_origins: string[];
581
582
  refresh_token: {
582
583
  expiration_mode: "expire" | "not-expire";
583
584
  infinite_token_lifetime: boolean;
@@ -616,6 +617,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
616
617
  client_secret: string;
617
618
  callbacks: string[];
618
619
  logout_urls: string[];
620
+ web_origins: string[];
619
621
  refresh_token: {
620
622
  expiration_mode: "expire" | "not-expire";
621
623
  infinite_token_lifetime: boolean;
@@ -654,6 +656,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
654
656
  client_secret: string;
655
657
  callbacks: string[];
656
658
  logout_urls: string[];
659
+ web_origins: string[];
657
660
  refresh_token: {
658
661
  expiration_mode: "expire" | "not-expire";
659
662
  infinite_token_lifetime: boolean;
@@ -693,6 +696,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
693
696
  client_secret: string;
694
697
  callbacks: string[];
695
698
  logout_urls: string[];
699
+ web_origins: string[];
696
700
  refresh_token: {
697
701
  expiration_mode: "expire" | "not-expire";
698
702
  infinite_token_lifetime: boolean;
@@ -726,6 +730,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
726
730
  client_secret: string;
727
731
  callbacks: string[];
728
732
  logout_urls: string[];
733
+ web_origins: string[];
729
734
  refresh_token: {
730
735
  expiration_mode: "expire" | "not-expire";
731
736
  infinite_token_lifetime: boolean;
@@ -762,6 +767,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
762
767
  client_secret: string;
763
768
  callbacks: string[];
764
769
  logout_urls: string[];
770
+ web_origins: string[];
765
771
  refresh_token: {
766
772
  expiration_mode: "expire" | "not-expire";
767
773
  infinite_token_lifetime: boolean;
@@ -801,6 +807,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
801
807
  client_secret: string;
802
808
  callbacks: string[];
803
809
  logout_urls: string[];
810
+ web_origins: string[];
804
811
  refresh_token: {
805
812
  expiration_mode: "expire" | "not-expire";
806
813
  infinite_token_lifetime: boolean;
@@ -839,6 +846,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
839
846
  client_secret: string;
840
847
  callbacks: string[];
841
848
  logout_urls: string[];
849
+ web_origins: string[];
842
850
  refresh_token: {
843
851
  expiration_mode: "expire" | "not-expire";
844
852
  infinite_token_lifetime: boolean;
@@ -1856,6 +1856,8 @@ export interface components {
1856
1856
  client_secret: string;
1857
1857
  callbacks: string[];
1858
1858
  logout_urls: string[];
1859
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
1860
+ web_origins: string[];
1859
1861
  refresh_token: {
1860
1862
  /** @enum {unknown} */
1861
1863
  expiration_mode: "expire" | "not-expire";
@@ -1902,6 +1904,7 @@ export interface components {
1902
1904
  description?: string;
1903
1905
  callbacks?: string[];
1904
1906
  logout_urls?: string[];
1907
+ web_origins?: string[];
1905
1908
  /** @description Add Metadata */
1906
1909
  metadata?: {
1907
1910
  [key: string]: unknown;
@@ -1921,6 +1924,8 @@ export interface components {
1921
1924
  callbacks?: string[];
1922
1925
  /** @description Whitelist of allowed `post_logout_redirect_uri` values. */
1923
1926
  logout_urls?: string[];
1927
+ /** @description Whitelist of origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin. */
1928
+ web_origins?: string[];
1924
1929
  refresh_token?: {
1925
1930
  /** @enum {unknown} */
1926
1931
  expiration_mode: "expire" | "not-expire";
@@ -3079,6 +3084,8 @@ export interface components {
3079
3084
  frontchannel_logout_uri?: string;
3080
3085
  /** @description OIDC Front-Channel Logout 1.0 — when true, the OP MUST include `iss` and `sid` parameters when calling the frontchannel_logout_uri. */
3081
3086
  frontchannel_logout_session_required?: boolean;
3087
+ /** @description Non-standard (Auth0-compatible) — origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin. */
3088
+ web_origins?: string[];
3082
3089
  } & {
3083
3090
  [key: string]: unknown;
3084
3091
  };
@@ -3106,6 +3113,7 @@ export interface components {
3106
3113
  software_version?: string;
3107
3114
  frontchannel_logout_uri?: string;
3108
3115
  frontchannel_logout_session_required?: boolean;
3116
+ web_origins?: string[];
3109
3117
  } & {
3110
3118
  [key: string]: unknown;
3111
3119
  };
@@ -4146,6 +4154,7 @@ export interface operations {
4146
4154
  description?: string;
4147
4155
  callbacks?: string[];
4148
4156
  logout_urls?: string[];
4157
+ web_origins?: string[];
4149
4158
  /** @description Add Metadata */
4150
4159
  metadata?: {
4151
4160
  [key: string]: unknown;
@@ -4169,6 +4178,8 @@ export interface operations {
4169
4178
  client_secret: string;
4170
4179
  callbacks: string[];
4171
4180
  logout_urls: string[];
4181
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
4182
+ web_origins: string[];
4172
4183
  refresh_token: {
4173
4184
  /** @enum {unknown} */
4174
4185
  expiration_mode: "expire" | "not-expire";
@@ -4232,6 +4243,8 @@ export interface operations {
4232
4243
  client_secret: string;
4233
4244
  callbacks: string[];
4234
4245
  logout_urls: string[];
4246
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
4247
+ web_origins: string[];
4235
4248
  refresh_token: {
4236
4249
  /** @enum {unknown} */
4237
4250
  expiration_mode: "expire" | "not-expire";
@@ -4290,6 +4303,8 @@ export interface operations {
4290
4303
  callbacks?: string[];
4291
4304
  /** @description Whitelist of allowed `post_logout_redirect_uri` values. */
4292
4305
  logout_urls?: string[];
4306
+ /** @description Whitelist of origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin. */
4307
+ web_origins?: string[];
4293
4308
  refresh_token?: {
4294
4309
  /** @enum {unknown} */
4295
4310
  expiration_mode: "expire" | "not-expire";
@@ -4328,6 +4343,8 @@ export interface operations {
4328
4343
  client_secret: string;
4329
4344
  callbacks: string[];
4330
4345
  logout_urls: string[];
4346
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
4347
+ web_origins: string[];
4331
4348
  refresh_token: {
4332
4349
  /** @enum {unknown} */
4333
4350
  expiration_mode: "expire" | "not-expire";
@@ -4391,6 +4408,8 @@ export interface operations {
4391
4408
  client_secret: string;
4392
4409
  callbacks: string[];
4393
4410
  logout_urls: string[];
4411
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
4412
+ web_origins: string[];
4394
4413
  refresh_token: {
4395
4414
  /** @enum {unknown} */
4396
4415
  expiration_mode: "expire" | "not-expire";
@@ -4454,6 +4473,8 @@ export interface operations {
4454
4473
  client_secret: string;
4455
4474
  callbacks: string[];
4456
4475
  logout_urls: string[];
4476
+ /** @description Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin. */
4477
+ web_origins: string[];
4457
4478
  refresh_token: {
4458
4479
  /** @enum {unknown} */
4459
4480
  expiration_mode: "expire" | "not-expire";
@@ -9111,6 +9132,8 @@ export interface operations {
9111
9132
  frontchannel_logout_uri?: string;
9112
9133
  /** @description OIDC Front-Channel Logout 1.0 — when true, the OP MUST include `iss` and `sid` parameters when calling the frontchannel_logout_uri. */
9113
9134
  frontchannel_logout_session_required?: boolean;
9135
+ /** @description Non-standard (Auth0-compatible) — origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin. */
9136
+ web_origins?: string[];
9114
9137
  } & {
9115
9138
  [key: string]: unknown;
9116
9139
  };
@@ -9147,6 +9170,7 @@ export interface operations {
9147
9170
  software_version?: string;
9148
9171
  frontchannel_logout_uri?: string;
9149
9172
  frontchannel_logout_session_required?: boolean;
9173
+ web_origins?: string[];
9150
9174
  } & {
9151
9175
  [key: string]: unknown;
9152
9176
  };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/auth-sdk",
3
- "version": "2.4.16",
3
+ "version": "2.4.17",
4
4
  "author": "Marc Pomar <marc@faable.com>",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
package/spec/openapi.json CHANGED
@@ -3,7 +3,7 @@
3
3
  "info": {
4
4
  "title": "@faablecloud/auth",
5
5
  "description": "Auth Platform made by Faable. Manage Users and Roles",
6
- "version": "1.24.0",
6
+ "version": "1.25.0",
7
7
  "license": {
8
8
  "name": "private",
9
9
  "url": "https://faable.com/docs/platform/privacy-policy"
@@ -771,6 +771,7 @@
771
771
  "client_secret",
772
772
  "callbacks",
773
773
  "logout_urls",
774
+ "web_origins",
774
775
  "refresh_token",
775
776
  "account",
776
777
  "createdAt"
@@ -804,6 +805,13 @@
804
805
  "type": "string"
805
806
  }
806
807
  },
808
+ "web_origins": {
809
+ "type": "array",
810
+ "items": {
811
+ "type": "string"
812
+ },
813
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
814
+ },
807
815
  "refresh_token": {
808
816
  "type": "object",
809
817
  "required": [
@@ -934,6 +942,12 @@
934
942
  "type": "string"
935
943
  }
936
944
  },
945
+ "web_origins": {
946
+ "type": "array",
947
+ "items": {
948
+ "type": "string"
949
+ }
950
+ },
937
951
  "metadata": {
938
952
  "type": "object",
939
953
  "properties": {},
@@ -975,6 +989,13 @@
975
989
  },
976
990
  "description": "Whitelist of allowed `post_logout_redirect_uri` values."
977
991
  },
992
+ "web_origins": {
993
+ "type": "array",
994
+ "items": {
995
+ "type": "string"
996
+ },
997
+ "description": "Whitelist of origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin."
998
+ },
978
999
  "refresh_token": {
979
1000
  "type": "object",
980
1001
  "required": [
@@ -3770,6 +3791,13 @@
3770
3791
  "frontchannel_logout_session_required": {
3771
3792
  "type": "boolean",
3772
3793
  "description": "OIDC Front-Channel Logout 1.0 — when true, the OP MUST include `iss` and `sid` parameters when calling the frontchannel_logout_uri."
3794
+ },
3795
+ "web_origins": {
3796
+ "type": "array",
3797
+ "items": {
3798
+ "type": "string"
3799
+ },
3800
+ "description": "Non-standard (Auth0-compatible) — origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin."
3773
3801
  }
3774
3802
  },
3775
3803
  "additionalProperties": true
@@ -3867,6 +3895,12 @@
3867
3895
  },
3868
3896
  "frontchannel_logout_session_required": {
3869
3897
  "type": "boolean"
3898
+ },
3899
+ "web_origins": {
3900
+ "type": "array",
3901
+ "items": {
3902
+ "type": "string"
3903
+ }
3870
3904
  }
3871
3905
  },
3872
3906
  "additionalProperties": true
@@ -6907,6 +6941,12 @@
6907
6941
  "type": "string"
6908
6942
  }
6909
6943
  },
6944
+ "web_origins": {
6945
+ "type": "array",
6946
+ "items": {
6947
+ "type": "string"
6948
+ }
6949
+ },
6910
6950
  "metadata": {
6911
6951
  "type": "object",
6912
6952
  "properties": {},
@@ -6941,6 +6981,7 @@
6941
6981
  "client_secret",
6942
6982
  "callbacks",
6943
6983
  "logout_urls",
6984
+ "web_origins",
6944
6985
  "refresh_token",
6945
6986
  "account",
6946
6987
  "createdAt"
@@ -6974,6 +7015,13 @@
6974
7015
  "type": "string"
6975
7016
  }
6976
7017
  },
7018
+ "web_origins": {
7019
+ "type": "array",
7020
+ "items": {
7021
+ "type": "string"
7022
+ },
7023
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
7024
+ },
6977
7025
  "refresh_token": {
6978
7026
  "type": "object",
6979
7027
  "required": [
@@ -7117,6 +7165,7 @@
7117
7165
  "client_secret",
7118
7166
  "callbacks",
7119
7167
  "logout_urls",
7168
+ "web_origins",
7120
7169
  "refresh_token",
7121
7170
  "account",
7122
7171
  "createdAt"
@@ -7150,6 +7199,13 @@
7150
7199
  "type": "string"
7151
7200
  }
7152
7201
  },
7202
+ "web_origins": {
7203
+ "type": "array",
7204
+ "items": {
7205
+ "type": "string"
7206
+ },
7207
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
7208
+ },
7153
7209
  "refresh_token": {
7154
7210
  "type": "object",
7155
7211
  "required": [
@@ -7290,6 +7346,13 @@
7290
7346
  },
7291
7347
  "description": "Whitelist of allowed `post_logout_redirect_uri` values."
7292
7348
  },
7349
+ "web_origins": {
7350
+ "type": "array",
7351
+ "items": {
7352
+ "type": "string"
7353
+ },
7354
+ "description": "Whitelist of origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin."
7355
+ },
7293
7356
  "refresh_token": {
7294
7357
  "type": "object",
7295
7358
  "required": [
@@ -7405,6 +7468,7 @@
7405
7468
  "client_secret",
7406
7469
  "callbacks",
7407
7470
  "logout_urls",
7471
+ "web_origins",
7408
7472
  "refresh_token",
7409
7473
  "account",
7410
7474
  "createdAt"
@@ -7438,6 +7502,13 @@
7438
7502
  "type": "string"
7439
7503
  }
7440
7504
  },
7505
+ "web_origins": {
7506
+ "type": "array",
7507
+ "items": {
7508
+ "type": "string"
7509
+ },
7510
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
7511
+ },
7441
7512
  "refresh_token": {
7442
7513
  "type": "object",
7443
7514
  "required": [
@@ -7579,6 +7650,7 @@
7579
7650
  "client_secret",
7580
7651
  "callbacks",
7581
7652
  "logout_urls",
7653
+ "web_origins",
7582
7654
  "refresh_token",
7583
7655
  "account",
7584
7656
  "createdAt"
@@ -7612,6 +7684,13 @@
7612
7684
  "type": "string"
7613
7685
  }
7614
7686
  },
7687
+ "web_origins": {
7688
+ "type": "array",
7689
+ "items": {
7690
+ "type": "string"
7691
+ },
7692
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
7693
+ },
7615
7694
  "refresh_token": {
7616
7695
  "type": "object",
7617
7696
  "required": [
@@ -7755,6 +7834,7 @@
7755
7834
  "client_secret",
7756
7835
  "callbacks",
7757
7836
  "logout_urls",
7837
+ "web_origins",
7758
7838
  "refresh_token",
7759
7839
  "account",
7760
7840
  "createdAt"
@@ -7788,6 +7868,13 @@
7788
7868
  "type": "string"
7789
7869
  }
7790
7870
  },
7871
+ "web_origins": {
7872
+ "type": "array",
7873
+ "items": {
7874
+ "type": "string"
7875
+ },
7876
+ "description": "Origins allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty = any origin."
7877
+ },
7791
7878
  "refresh_token": {
7792
7879
  "type": "object",
7793
7880
  "required": [
@@ -18875,6 +18962,13 @@
18875
18962
  "frontchannel_logout_session_required": {
18876
18963
  "type": "boolean",
18877
18964
  "description": "OIDC Front-Channel Logout 1.0 — when true, the OP MUST include `iss` and `sid` parameters when calling the frontchannel_logout_uri."
18965
+ },
18966
+ "web_origins": {
18967
+ "type": "array",
18968
+ "items": {
18969
+ "type": "string"
18970
+ },
18971
+ "description": "Non-standard (Auth0-compatible) — origins (scheme://host[:port], no path) allowed to make cross-origin (CORS) requests to the token and passwordless endpoints. Empty allows any origin."
18878
18972
  }
18879
18973
  },
18880
18974
  "additionalProperties": true
@@ -18980,6 +19074,12 @@
18980
19074
  },
18981
19075
  "frontchannel_logout_session_required": {
18982
19076
  "type": "boolean"
19077
+ },
19078
+ "web_origins": {
19079
+ "type": "array",
19080
+ "items": {
19081
+ "type": "string"
19082
+ }
18983
19083
  }
18984
19084
  },
18985
19085
  "additionalProperties": true