@faable/auth-sdk 2.5.60 → 2.5.62

package/dist/api/types.d.ts

@@ -9154,6 +9154,8 @@ export interface operations {
                 code_challenge?: string;
                 /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
                 redirect_to?: string;
+                /** @description Space-separated extra scopes to request from the upstream identity provider (Auth0-compatible), added to the ones configured in the connection. The `scope` parameter describes the tokens Faable issues and is never forwarded to the provider. */
+                connection_scope?: string;
                 /** @description Link mode: attach the resulting provider identity to the ACTIVE session user instead of signing in or up. Requires a session; incompatible with prompt=login/consent. */
                 link?: boolean;
                 /** @description Single-use ticket from `POST /oauth/link_ticket`. With `link=true`, establishes the cookie session for the ticket’s user before linking — for Relying Parties that hold tokens but no cookie session (direct grants such as passwordless OTP). Invalid or expired tickets are ignored. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.5.60",
+  "version": "2.5.62",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "1.55.0",
+    "version": "1.55.2",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -18862,6 +18862,15 @@
             "required": false,
             "description": "Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored."
           },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "connection_scope",
+            "required": false,
+            "description": "Space-separated extra scopes to request from the upstream identity provider (Auth0-compatible), added to the ones configured in the connection. The `scope` parameter describes the tokens Faable issues and is never forwarded to the provider."
+          },
           {
             "schema": {
               "type": "boolean"