@faable/auth-sdk 2.6.7 → 2.6.9

package/dist/api/generated-client.d.ts

@@ -4156,6 +4156,23 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             updatedAt?: string | undefined;
         }>>;
     };
+    /**
+     * `GET /user/{user_id}/tickets` — operationId: `user/listTickets`
+     *
+     * List the tickets issued for a user
+     */
+    userListTickets(user_id: string): Promise<{
+        results: {
+            id: string;
+            type: string;
+            status: "active" | "expired" | "used";
+            email: string;
+            createdAt: string;
+            expires_at: string;
+            ttl: number;
+            link?: string | undefined;
+        }[];
+    }>;
     /**
      * `POST /user/{user_id}/password-setup` — operationId: `user/passwordSetup`
      *
@@ -4166,6 +4183,15 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
         credential_id: string;
         ticket_id: string;
     }>;
+    /**
+     * `POST /user/{user_id}/tickets/{ticket_id}/revoke` — operationId: `user/revokeTicket`
+     *
+     * Revoke a ticket issued for a user
+     */
+    userRevokeTicket(user_id: string, ticket_id: string): Promise<{
+        status: "revoked" | "already_used";
+        id: string;
+    }>;
     /**
      * `POST /user/{user_id}` — operationId: `user/update`
      *

package/dist/api/generated-client.js

@@ -821,6 +821,15 @@ export class GeneratedFaableAuthApi extends FaableApi {
     userList(params) {
         return this.paginator({ url: `/user`, params });
     }
+    /**
+     * `GET /user/{user_id}/tickets` — operationId: `user/listTickets`
+     *
+     * List the tickets issued for a user
+     */
+    userListTickets(user_id) {
+        requireId("user_id", user_id);
+        return this.fetcher.get(`/user/${user_id}/tickets`);
+    }
     /**
      * `POST /user/{user_id}/password-setup` — operationId: `user/passwordSetup`
      *
@@ -830,6 +839,16 @@ export class GeneratedFaableAuthApi extends FaableApi {
         requireId("user_id", user_id);
         return this.fetcher.post(`/user/${user_id}/password-setup`, data);
     }
+    /**
+     * `POST /user/{user_id}/tickets/{ticket_id}/revoke` — operationId: `user/revokeTicket`
+     *
+     * Revoke a ticket issued for a user
+     */
+    userRevokeTicket(user_id, ticket_id) {
+        requireId("user_id", user_id);
+        requireId("ticket_id", ticket_id);
+        return this.fetcher.post(`/user/${user_id}/tickets/${ticket_id}/revoke`, {});
+    }
     /**
      * `POST /user/{user_id}` — operationId: `user/update`
      *

package/dist/api/types.d.ts

@@ -464,6 +464,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/user/{user_id}/tickets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the tickets issued for a user
+         * @description Returns the password-reset / verification / invitation tickets issued for this user, newest first, each with its status and — while it is still usable — the link that was emailed. Intended for handing a recovery link over by another channel when the email does not reach the person. Requires `update:credentials`: the link grants the same account access that setting a password does, and each reveal is recorded in the audit log.
+         */
+        get: operations["user/listTickets"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/user/{user_id}/tickets/{ticket_id}/revoke": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Revoke a ticket issued for a user
+         * @description Marks the ticket as consumed so its link stops working immediately. The counterpart of listing links: once a link has been copied out of the dashboard it can end up in the wrong chat window, and the TTL alone is too slow an answer.
+         */
+        post: operations["user/revokeTicket"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/user/{user_id}/factors": {
         parameters: {
             query?: never;
@@ -7515,6 +7555,66 @@ export interface operations {
             };
         };
     };
+    "user/listTickets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                user_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        results: {
+                            id: string;
+                            type: string;
+                            status: "active" | "expired" | "used";
+                            email: string;
+                            createdAt: string;
+                            expires_at: string;
+                            ttl: number;
+                            /** @description The link from the ticket email. Present only while the ticket is usable — a dead link is noise, not a recovery path. */
+                            link?: string;
+                        }[];
+                    };
+                };
+            };
+        };
+    };
+    "user/revokeTicket": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                user_id: string;
+                ticket_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        status: "revoked" | "already_used";
+                        id: string;
+                    };
+                };
+            };
+        };
+    };
     "user/factors": {
         parameters: {
             query?: never;

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.6.7";
+export const version = "2.6.9";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "02df4b8";
+export const commit = "68c9ebc";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.6.7",
+  "version": "2.6.9",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.12.3",
+    "version": "2.13.0",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -14704,6 +14704,179 @@
         }
       }
     },
+    "/user/{user_id}/tickets": {
+      "get": {
+        "operationId": "user/listTickets",
+        "summary": "List the tickets issued for a user",
+        "tags": [
+          "user"
+        ],
+        "description": "Returns the password-reset / verification / invitation tickets issued for this user, newest first, each with its status and — while it is still usable — the link that was emailed. Intended for handing a recovery link over by another channel when the email does not reach the person. Requires `update:credentials`: the link grants the same account access that setting a password does, and each reveal is recorded in the audit log.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "path",
+            "name": "user_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Default Response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "results"
+                  ],
+                  "properties": {
+                    "results": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "required": [
+                          "id",
+                          "type",
+                          "status",
+                          "email",
+                          "createdAt",
+                          "expires_at",
+                          "ttl"
+                        ],
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "type": {
+                            "type": "string"
+                          },
+                          "status": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "active"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "expired"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "used"
+                                ]
+                              }
+                            ]
+                          },
+                          "email": {
+                            "type": "string"
+                          },
+                          "createdAt": {
+                            "type": "string"
+                          },
+                          "expires_at": {
+                            "type": "string"
+                          },
+                          "ttl": {
+                            "type": "number"
+                          },
+                          "link": {
+                            "type": "string",
+                            "description": "The link from the ticket email. Present only while the ticket is usable — a dead link is noise, not a recovery path."
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/user/{user_id}/tickets/{ticket_id}/revoke": {
+      "post": {
+        "operationId": "user/revokeTicket",
+        "summary": "Revoke a ticket issued for a user",
+        "tags": [
+          "user"
+        ],
+        "description": "Marks the ticket as consumed so its link stops working immediately. The counterpart of listing links: once a link has been copied out of the dashboard it can end up in the wrong chat window, and the TTL alone is too slow an answer.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "path",
+            "name": "user_id",
+            "required": true
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "path",
+            "name": "ticket_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Default Response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "status",
+                    "id"
+                  ],
+                  "properties": {
+                    "status": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "revoked"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "already_used"
+                          ]
+                        }
+                      ]
+                    },
+                    "id": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/user/{user_id}/factors": {
       "get": {
         "operationId": "user/factors",