@faable/auth-sdk 2.7.33 → 2.7.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -627,6 +627,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
627
627
  require_number?: boolean | undefined;
628
628
  require_special?: boolean | undefined;
629
629
  } | undefined;
630
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
630
631
  disable_signup?: boolean | undefined;
631
632
  account: string;
632
633
  metadata: {
@@ -666,6 +667,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
666
667
  require_number?: boolean | undefined;
667
668
  require_special?: boolean | undefined;
668
669
  } | undefined;
670
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
669
671
  disable_signup?: boolean | undefined;
670
672
  account: string;
671
673
  metadata: {
@@ -708,6 +710,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
708
710
  require_number?: boolean | undefined;
709
711
  require_special?: boolean | undefined;
710
712
  } | undefined;
713
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
711
714
  disable_signup?: boolean | undefined;
712
715
  account: string;
713
716
  metadata: {
@@ -749,6 +752,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
749
752
  require_number?: boolean | undefined;
750
753
  require_special?: boolean | undefined;
751
754
  } | undefined;
755
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
752
756
  disable_signup?: boolean | undefined;
753
757
  account: string;
754
758
  metadata: {
@@ -1812,6 +1812,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
1812
1812
  require_number?: boolean | undefined;
1813
1813
  require_special?: boolean | undefined;
1814
1814
  } | undefined;
1815
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
1815
1816
  disable_signup?: boolean | undefined;
1816
1817
  account: string;
1817
1818
  metadata: {
@@ -1867,6 +1868,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
1867
1868
  require_number?: boolean | undefined;
1868
1869
  require_special?: boolean | undefined;
1869
1870
  } | undefined;
1871
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
1870
1872
  disable_signup?: boolean | undefined;
1871
1873
  account: string;
1872
1874
  metadata: {
@@ -1923,6 +1925,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
1923
1925
  require_number?: boolean | undefined;
1924
1926
  require_special?: boolean | undefined;
1925
1927
  } | undefined;
1928
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
1926
1929
  disable_signup?: boolean | undefined;
1927
1930
  account: string;
1928
1931
  metadata: {
@@ -1980,6 +1983,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
1980
1983
  require_number?: boolean | undefined;
1981
1984
  require_special?: boolean | undefined;
1982
1985
  } | undefined;
1986
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
1983
1987
  disable_signup?: boolean | undefined;
1984
1988
  account: string;
1985
1989
  metadata: {
@@ -2019,6 +2023,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
2019
2023
  require_number?: boolean | undefined;
2020
2024
  require_special?: boolean | undefined;
2021
2025
  } | undefined;
2026
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
2022
2027
  disable_signup?: boolean | undefined;
2023
2028
  account: string;
2024
2029
  metadata: {
@@ -2061,6 +2066,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
2061
2066
  require_number?: boolean | undefined;
2062
2067
  require_special?: boolean | undefined;
2063
2068
  } | undefined;
2069
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
2064
2070
  disable_signup?: boolean | undefined;
2065
2071
  account: string;
2066
2072
  metadata: {
@@ -2118,6 +2124,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
2118
2124
  require_number?: boolean | undefined;
2119
2125
  require_special?: boolean | undefined;
2120
2126
  } | undefined;
2127
+ login_identifier?: "username" | "email" | "email_or_username" | undefined;
2121
2128
  disable_signup?: boolean | undefined;
2122
2129
  account: string;
2123
2130
  metadata: {
@@ -4387,6 +4387,8 @@ export interface components {
4387
4387
  require_number?: boolean;
4388
4388
  require_special?: boolean;
4389
4389
  };
4390
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
4391
+ login_identifier?: "email" | "username" | "email_or_username";
4390
4392
  /** @description When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`. */
4391
4393
  disable_signup?: boolean;
4392
4394
  /** @description Object is related with this account */
@@ -4449,6 +4451,8 @@ export interface components {
4449
4451
  require_special?: boolean;
4450
4452
  };
4451
4453
  disable_signup?: boolean;
4454
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
4455
+ login_identifier?: "email" | "username" | "email_or_username";
4452
4456
  /** @description Add Metadata */
4453
4457
  metadata?: {
4454
4458
  [key: string]: unknown;
@@ -4492,6 +4496,8 @@ export interface components {
4492
4496
  require_special?: boolean;
4493
4497
  } | null;
4494
4498
  disable_signup?: boolean;
4499
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
4500
+ login_identifier?: "email" | "username" | "email_or_username";
4495
4501
  };
4496
4502
  /** @description Presentation metadata for one connection type. Contains no endpoint URLs and no credentials. */
4497
4503
  ConnectionTypeInfo: {
@@ -4535,6 +4541,8 @@ export interface components {
4535
4541
  require_number?: boolean;
4536
4542
  require_special?: boolean;
4537
4543
  };
4544
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
4545
+ login_identifier?: "email" | "username" | "email_or_username";
4538
4546
  };
4539
4547
  /** @description Client */
4540
4548
  Client: {
@@ -8411,6 +8419,8 @@ export interface operations {
8411
8419
  require_special?: boolean;
8412
8420
  };
8413
8421
  disable_signup?: boolean;
8422
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
8423
+ login_identifier?: "email" | "username" | "email_or_username";
8414
8424
  /** @description Add Metadata */
8415
8425
  metadata?: {
8416
8426
  [key: string]: unknown;
@@ -8475,6 +8485,8 @@ export interface operations {
8475
8485
  require_number?: boolean;
8476
8486
  require_special?: boolean;
8477
8487
  };
8488
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
8489
+ login_identifier?: "email" | "username" | "email_or_username";
8478
8490
  /** @description When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`. */
8479
8491
  disable_signup?: boolean;
8480
8492
  /** @description Object is related with this account */
@@ -8644,6 +8656,8 @@ export interface operations {
8644
8656
  require_number?: boolean;
8645
8657
  require_special?: boolean;
8646
8658
  };
8659
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
8660
+ login_identifier?: "email" | "username" | "email_or_username";
8647
8661
  /** @description When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`. */
8648
8662
  disable_signup?: boolean;
8649
8663
  /** @description Object is related with this account */
@@ -8797,6 +8811,8 @@ export interface operations {
8797
8811
  require_special?: boolean;
8798
8812
  } | null;
8799
8813
  disable_signup?: boolean;
8814
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
8815
+ login_identifier?: "email" | "username" | "email_or_username";
8800
8816
  };
8801
8817
  };
8802
8818
  };
@@ -8857,6 +8873,8 @@ export interface operations {
8857
8873
  require_number?: boolean;
8858
8874
  require_special?: boolean;
8859
8875
  };
8876
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
8877
+ login_identifier?: "email" | "username" | "email_or_username";
8860
8878
  /** @description When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`. */
8861
8879
  disable_signup?: boolean;
8862
8880
  /** @description Object is related with this account */
@@ -9032,6 +9050,8 @@ export interface operations {
9032
9050
  require_number?: boolean;
9033
9051
  require_special?: boolean;
9034
9052
  };
9053
+ /** @description What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections. */
9054
+ login_identifier?: "email" | "username" | "email_or_username";
9035
9055
  /** @description When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`. */
9036
9056
  disable_signup?: boolean;
9037
9057
  /** @description Object is related with this account */
package/dist/version.js CHANGED
@@ -9,13 +9,13 @@
9
9
  // login pages could not import the SDK at all. Same pattern as auth-js.
10
10
  //
11
11
  // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
12
- export const version = "2.7.33";
12
+ export const version = "2.7.35";
13
13
  // Short git SHA of the released commit. The version dates a build; this names
14
14
  // the exact tree, so a canonical log line or an audit entry leads straight to
15
15
  // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
16
16
  // link) cannot be mistaken for a real commit — auth only records values that
17
17
  // look like a SHA, and this one never will.
18
- export const commit = "e945524";
18
+ export const commit = "715fc7a";
19
19
  // What this SDK writes in `x-faable-client`. Exported for a consumer that
20
20
  // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
21
21
  // token request attributed — a bare `authClientCredentials` stamps only what
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/auth-sdk",
3
- "version": "2.7.33",
3
+ "version": "2.7.35",
4
4
  "author": "Marc Pomar <marc@faable.com>",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
package/spec/openapi.json CHANGED
@@ -3,7 +3,7 @@
3
3
  "info": {
4
4
  "title": "@faablecloud/auth",
5
5
  "description": "Auth Platform made by Faable. Manage Users and Roles",
6
- "version": "2.37.1",
6
+ "version": "2.38.0",
7
7
  "license": {
8
8
  "name": "private",
9
9
  "url": "https://faable.com/docs/platform/privacy-policy"
@@ -741,6 +741,29 @@
741
741
  },
742
742
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
743
743
  },
744
+ "login_identifier": {
745
+ "anyOf": [
746
+ {
747
+ "type": "string",
748
+ "enum": [
749
+ "email"
750
+ ]
751
+ },
752
+ {
753
+ "type": "string",
754
+ "enum": [
755
+ "username"
756
+ ]
757
+ },
758
+ {
759
+ "type": "string",
760
+ "enum": [
761
+ "email_or_username"
762
+ ]
763
+ }
764
+ ],
765
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
766
+ },
744
767
  "disable_signup": {
745
768
  "type": "boolean",
746
769
  "description": "When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`."
@@ -914,6 +937,29 @@
914
937
  "disable_signup": {
915
938
  "type": "boolean"
916
939
  },
940
+ "login_identifier": {
941
+ "anyOf": [
942
+ {
943
+ "type": "string",
944
+ "enum": [
945
+ "email"
946
+ ]
947
+ },
948
+ {
949
+ "type": "string",
950
+ "enum": [
951
+ "username"
952
+ ]
953
+ },
954
+ {
955
+ "type": "string",
956
+ "enum": [
957
+ "email_or_username"
958
+ ]
959
+ }
960
+ ],
961
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
962
+ },
917
963
  "metadata": {
918
964
  "type": "object",
919
965
  "properties": {},
@@ -1077,6 +1123,29 @@
1077
1123
  },
1078
1124
  "disable_signup": {
1079
1125
  "type": "boolean"
1126
+ },
1127
+ "login_identifier": {
1128
+ "anyOf": [
1129
+ {
1130
+ "type": "string",
1131
+ "enum": [
1132
+ "email"
1133
+ ]
1134
+ },
1135
+ {
1136
+ "type": "string",
1137
+ "enum": [
1138
+ "username"
1139
+ ]
1140
+ },
1141
+ {
1142
+ "type": "string",
1143
+ "enum": [
1144
+ "email_or_username"
1145
+ ]
1146
+ }
1147
+ ],
1148
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
1080
1149
  }
1081
1150
  },
1082
1151
  "description": "Partial update for a Connection. Only the supplied fields are modified. `connection_type` is intentionally excluded — changing it would orphan every identity already linked to this connection.",
@@ -1252,6 +1321,29 @@
1252
1321
  }
1253
1322
  },
1254
1323
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
1324
+ },
1325
+ "login_identifier": {
1326
+ "anyOf": [
1327
+ {
1328
+ "type": "string",
1329
+ "enum": [
1330
+ "email"
1331
+ ]
1332
+ },
1333
+ {
1334
+ "type": "string",
1335
+ "enum": [
1336
+ "username"
1337
+ ]
1338
+ },
1339
+ {
1340
+ "type": "string",
1341
+ "enum": [
1342
+ "email_or_username"
1343
+ ]
1344
+ }
1345
+ ],
1346
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
1255
1347
  }
1256
1348
  },
1257
1349
  "additionalProperties": false
@@ -12541,6 +12633,29 @@
12541
12633
  "disable_signup": {
12542
12634
  "type": "boolean"
12543
12635
  },
12636
+ "login_identifier": {
12637
+ "anyOf": [
12638
+ {
12639
+ "type": "string",
12640
+ "enum": [
12641
+ "email"
12642
+ ]
12643
+ },
12644
+ {
12645
+ "type": "string",
12646
+ "enum": [
12647
+ "username"
12648
+ ]
12649
+ },
12650
+ {
12651
+ "type": "string",
12652
+ "enum": [
12653
+ "email_or_username"
12654
+ ]
12655
+ }
12656
+ ],
12657
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
12658
+ },
12544
12659
  "metadata": {
12545
12660
  "type": "object",
12546
12661
  "properties": {},
@@ -12753,6 +12868,29 @@
12753
12868
  },
12754
12869
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
12755
12870
  },
12871
+ "login_identifier": {
12872
+ "anyOf": [
12873
+ {
12874
+ "type": "string",
12875
+ "enum": [
12876
+ "email"
12877
+ ]
12878
+ },
12879
+ {
12880
+ "type": "string",
12881
+ "enum": [
12882
+ "username"
12883
+ ]
12884
+ },
12885
+ {
12886
+ "type": "string",
12887
+ "enum": [
12888
+ "email_or_username"
12889
+ ]
12890
+ }
12891
+ ],
12892
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
12893
+ },
12756
12894
  "disable_signup": {
12757
12895
  "type": "boolean",
12758
12896
  "description": "When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`."
@@ -13154,6 +13292,29 @@
13154
13292
  },
13155
13293
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
13156
13294
  },
13295
+ "login_identifier": {
13296
+ "anyOf": [
13297
+ {
13298
+ "type": "string",
13299
+ "enum": [
13300
+ "email"
13301
+ ]
13302
+ },
13303
+ {
13304
+ "type": "string",
13305
+ "enum": [
13306
+ "username"
13307
+ ]
13308
+ },
13309
+ {
13310
+ "type": "string",
13311
+ "enum": [
13312
+ "email_or_username"
13313
+ ]
13314
+ }
13315
+ ],
13316
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
13317
+ },
13157
13318
  "disable_signup": {
13158
13319
  "type": "boolean",
13159
13320
  "description": "When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`."
@@ -13498,6 +13659,29 @@
13498
13659
  },
13499
13660
  "disable_signup": {
13500
13661
  "type": "boolean"
13662
+ },
13663
+ "login_identifier": {
13664
+ "anyOf": [
13665
+ {
13666
+ "type": "string",
13667
+ "enum": [
13668
+ "email"
13669
+ ]
13670
+ },
13671
+ {
13672
+ "type": "string",
13673
+ "enum": [
13674
+ "username"
13675
+ ]
13676
+ },
13677
+ {
13678
+ "type": "string",
13679
+ "enum": [
13680
+ "email_or_username"
13681
+ ]
13682
+ }
13683
+ ],
13684
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
13501
13685
  }
13502
13686
  },
13503
13687
  "description": "Partial update for a Connection. Only the supplied fields are modified. `connection_type` is intentionally excluded — changing it would orphan every identity already linked to this connection.",
@@ -13715,6 +13899,29 @@
13715
13899
  },
13716
13900
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
13717
13901
  },
13902
+ "login_identifier": {
13903
+ "anyOf": [
13904
+ {
13905
+ "type": "string",
13906
+ "enum": [
13907
+ "email"
13908
+ ]
13909
+ },
13910
+ {
13911
+ "type": "string",
13912
+ "enum": [
13913
+ "username"
13914
+ ]
13915
+ },
13916
+ {
13917
+ "type": "string",
13918
+ "enum": [
13919
+ "email_or_username"
13920
+ ]
13921
+ }
13922
+ ],
13923
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
13924
+ },
13718
13925
  "disable_signup": {
13719
13926
  "type": "boolean",
13720
13927
  "description": "When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`."
@@ -14116,6 +14323,29 @@
14116
14323
  },
14117
14324
  "description": "Password policy enforced when writing a password through this database connection (password reset and admin set-password). `level` is an Auth0-style preset (none/low/fair/good/excellent); the dashboard expands it into the explicit rule fields when saving. The rule fields override the preset baseline. When unset on the connection, the server applies the `good` default. Does not affect login."
14118
14325
  },
14326
+ "login_identifier": {
14327
+ "anyOf": [
14328
+ {
14329
+ "type": "string",
14330
+ "enum": [
14331
+ "email"
14332
+ ]
14333
+ },
14334
+ {
14335
+ "type": "string",
14336
+ "enum": [
14337
+ "username"
14338
+ ]
14339
+ },
14340
+ {
14341
+ "type": "string",
14342
+ "enum": [
14343
+ "email_or_username"
14344
+ ]
14345
+ }
14346
+ ],
14347
+ "description": "What users of this database connection sign in with: `email`, `username`, or `email_or_username` (email first, then username). The login looks up only the matching field, and the hosted login screen asks for it — validating the address format under `email`. New database connections default to `email`; a connection created before this setting existed behaves as `email_or_username`. Only meaningful on `database` connections."
14348
+ },
14119
14349
  "disable_signup": {
14120
14350
  "type": "boolean",
14121
14351
  "description": "When true, the public self-service signup endpoint (`POST /dbconnections/signup`) rejects new registrations against this database connection with `403 signup_disabled`. Defaults to false (signup allowed). Only meaningful on `database` connections; mirrors Auth0 `disable_signup`."