@faable/auth-sdk 2.7.18 → 2.7.20

package/dist/FaableAuthApi.d.ts

@@ -794,6 +794,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -854,6 +855,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -917,6 +919,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -979,6 +982,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;

package/dist/api/generated-client.d.ts

@@ -1241,6 +1241,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;
@@ -1317,6 +1318,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;
@@ -1394,6 +1396,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;
@@ -1472,6 +1475,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -1532,6 +1536,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -1595,6 +1600,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
+            default_audience?: string | null | undefined;
             account: string;
             metadata: {
                 [key: string]: unknown;
@@ -1674,6 +1680,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;
@@ -1751,6 +1758,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
+        default_audience?: string | null | undefined;
         account: string;
         metadata: {
             [key: string]: unknown;

package/dist/api/types.d.ts

@@ -4546,6 +4546,8 @@ export interface components {
             };
             /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
             login_flow?: string | null;
+            /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+            default_audience?: string | null;
             /** @description Object is related with this account */
             account: string;
             /**
@@ -4657,6 +4659,8 @@ export interface components {
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[];
             } | null;
             login_flow?: string | null;
+            /** @description Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it. */
+            default_audience?: string | null;
             /**
              * @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta.
              * @default {}
@@ -9522,6 +9526,8 @@ export interface operations {
                         };
                         /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
                         login_flow?: string | null;
+                        /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+                        default_audience?: string | null;
                         /** @description Object is related with this account */
                         account: string;
                         /**
@@ -9716,6 +9722,8 @@ export interface operations {
                         };
                         /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
                         login_flow?: string | null;
+                        /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+                        default_audience?: string | null;
                         /** @description Object is related with this account */
                         account: string;
                         /**
@@ -9907,6 +9915,8 @@ export interface operations {
                         visible?: ("email" | "sms" | "whatsapp" | "factor")[];
                     } | null;
                     login_flow?: string | null;
+                    /** @description Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it. */
+                    default_audience?: string | null;
                     /**
                      * @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta.
                      * @default {}
@@ -10001,6 +10011,8 @@ export interface operations {
                         };
                         /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
                         login_flow?: string | null;
+                        /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+                        default_audience?: string | null;
                         /** @description Object is related with this account */
                         account: string;
                         /**
@@ -10201,6 +10213,8 @@ export interface operations {
                         };
                         /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
                         login_flow?: string | null;
+                        /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+                        default_audience?: string | null;
                         /** @description Object is related with this account */
                         account: string;
                         /**
@@ -10399,6 +10413,8 @@ export interface operations {
                         };
                         /** @description A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit. */
                         login_flow?: string | null;
+                        /** @description Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`. */
+                        default_audience?: string | null;
                         /** @description Object is related with this account */
                         account: string;
                         /**

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.7.18";
+export const version = "2.7.20";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "a842ca6";
+export const commit = "d9f28a7";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.7.18",
+  "version": "2.7.20",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.27.1",
+    "version": "2.30.0",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -1657,6 +1657,11 @@
             ],
             "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
           },
+          "default_audience": {
+            "type": "string",
+            "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+            "nullable": true
+          },
           "account": {
             "type": "string",
             "description": "Object is related with this account"
@@ -2131,6 +2136,12 @@
               }
             ]
           },
+          "default_audience": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it.",
+            "nullable": true
+          },
           "metadata": {
             "type": "object",
             "properties": {},
@@ -15735,6 +15746,11 @@
                       ],
                       "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
                     },
+                    "default_audience": {
+                      "type": "string",
+                      "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+                      "nullable": true
+                    },
                     "account": {
                       "type": "string",
                       "description": "Object is related with this account"
@@ -16342,6 +16358,11 @@
                       ],
                       "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
                     },
+                    "default_audience": {
+                      "type": "string",
+                      "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+                      "nullable": true
+                    },
                     "account": {
                       "type": "string",
                       "description": "Object is related with this account"
@@ -16934,6 +16955,12 @@
                       }
                     ]
                   },
+                  "default_audience": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it.",
+                    "nullable": true
+                  },
                   "metadata": {
                     "type": "object",
                     "properties": {},
@@ -17367,6 +17394,11 @@
                       ],
                       "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
                     },
+                    "default_audience": {
+                      "type": "string",
+                      "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+                      "nullable": true
+                    },
                     "account": {
                       "type": "string",
                       "description": "Object is related with this account"
@@ -17974,6 +18006,11 @@
                       ],
                       "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
                     },
+                    "default_audience": {
+                      "type": "string",
+                      "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+                      "nullable": true
+                    },
                     "account": {
                       "type": "string",
                       "description": "Object is related with this account"
@@ -18582,6 +18619,11 @@
                       ],
                       "description": "A login flow bound to this client (`loginflow_xxx`), overriding the account's. Absent = inherit."
                     },
+                    "default_audience": {
+                      "type": "string",
+                      "description": "Audience used when a client_credentials token request sends none (e.g. `faable:management:<account_id>`). An explicit `audience` in the request wins. Absent = `${iss}/userinfo`.",
+                      "nullable": true
+                    },
                     "account": {
                       "type": "string",
                       "description": "Object is related with this account"