@faable/auth-sdk 2.7.36 → 2.7.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -19,6 +19,7 @@ export type AuthAccountMetadataCreate = components["schemas"]["AuthAccountMetada
19
19
  export type AuthAccountUpdate = components["schemas"]["AuthAccountUpdate"];
20
20
  export type Client = components["schemas"]["Client"];
21
21
  export type ClientCreate = components["schemas"]["ClientCreate"];
22
+ export type ClientGrantType = components["schemas"]["ClientGrantType"];
22
23
  export type ClientMetadata = components["schemas"]["ClientMetadata"];
23
24
  export type ClientMetadataCreate = components["schemas"]["ClientMetadataCreate"];
24
25
  export type ClientRegistrationRequest = components["schemas"]["ClientRegistrationRequest"];
@@ -2771,6 +2771,51 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
2771
2771
  updatedAt?: string | undefined;
2772
2772
  }>>;
2773
2773
  };
2774
+ /**
2775
+ * `GET /internal/usage/m2m` — operationId: `internal/m2mUsage`
2776
+ *
2777
+ * M2M tokens served per project in a month (platform)
2778
+ *
2779
+ * Per-project count of successful client_credentials token responses in the given month (cached ones included), read from the monthly counters. Consumed by the billing usage job. Platform token with `read:usage`.
2780
+ *
2781
+ * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
2782
+ * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
2783
+ * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
2784
+ * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
2785
+ * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
2786
+ * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
2787
+ * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
2788
+ * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
2789
+ */
2790
+ internalM2mUsage(params?: OpQuery<"internal/m2mUsage">): Promise<{
2791
+ month: string;
2792
+ rows: {
2793
+ team: string;
2794
+ tokens: number;
2795
+ }[];
2796
+ }>;
2797
+ /**
2798
+ * `GET /internal/usage/m2m/range` — operationId: `internal/m2mUsageRange`
2799
+ *
2800
+ * M2M tokens a project was served in a time range (platform)
2801
+ *
2802
+ * Sum of the hourly client_credentials counters of one project between `from` (first full hour after it) and `to`. At most 40 days back. Platform token with `read:usage`.
2803
+ *
2804
+ * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
2805
+ * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
2806
+ * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
2807
+ * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
2808
+ * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
2809
+ * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
2810
+ * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
2811
+ * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
2812
+ */
2813
+ internalM2mUsageRange(params?: OpQuery<"internal/m2mUsageRange">): Promise<{
2814
+ team: string;
2815
+ from: string;
2816
+ to: string;
2817
+ tokens: number;
2818
+ }>;
2774
2819
  /**
2775
2820
  * `POST /internal/mgmt-token` — operationId: `internal/mintMgmtToken`
2776
2821
  *
@@ -985,6 +985,44 @@ export class GeneratedFaableAuthApi extends FaableApi {
985
985
  identityList(params) {
986
986
  return this.paginator({ url: `/identity`, params });
987
987
  }
988
+ /**
989
+ * `GET /internal/usage/m2m` — operationId: `internal/m2mUsage`
990
+ *
991
+ * M2M tokens served per project in a month (platform)
992
+ *
993
+ * Per-project count of successful client_credentials token responses in the given month (cached ones included), read from the monthly counters. Consumed by the billing usage job. Platform token with `read:usage`.
994
+ *
995
+ * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
996
+ * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
997
+ * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
998
+ * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
999
+ * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
1000
+ * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
1001
+ * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
1002
+ * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
1003
+ */
1004
+ internalM2mUsage(params) {
1005
+ return this.fetcher.request({ method: "GET", url: `/internal/usage/m2m`, params });
1006
+ }
1007
+ /**
1008
+ * `GET /internal/usage/m2m/range` — operationId: `internal/m2mUsageRange`
1009
+ *
1010
+ * M2M tokens a project was served in a time range (platform)
1011
+ *
1012
+ * Sum of the hourly client_credentials counters of one project between `from` (first full hour after it) and `to`. At most 40 days back. Platform token with `read:usage`.
1013
+ *
1014
+ * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
1015
+ * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
1016
+ * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
1017
+ * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
1018
+ * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
1019
+ * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
1020
+ * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
1021
+ * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
1022
+ */
1023
+ internalM2mUsageRange(params) {
1024
+ return this.fetcher.request({ method: "GET", url: `/internal/usage/m2m/range`, params });
1025
+ }
988
1026
  /**
989
1027
  * `POST /internal/mgmt-token` — operationId: `internal/mintMgmtToken`
990
1028
  *
@@ -224,6 +224,46 @@ export interface paths {
224
224
  patch?: never;
225
225
  trace?: never;
226
226
  };
227
+ "/internal/usage/m2m": {
228
+ parameters: {
229
+ query?: never;
230
+ header?: never;
231
+ path?: never;
232
+ cookie?: never;
233
+ };
234
+ /**
235
+ * M2M tokens served per project in a month (platform)
236
+ * @description Per-project count of successful client_credentials token responses in the given month (cached ones included), read from the monthly counters. Consumed by the billing usage job. Platform token with `read:usage`.
237
+ */
238
+ get: operations["internal/m2mUsage"];
239
+ put?: never;
240
+ post?: never;
241
+ delete?: never;
242
+ options?: never;
243
+ head?: never;
244
+ patch?: never;
245
+ trace?: never;
246
+ };
247
+ "/internal/usage/m2m/range": {
248
+ parameters: {
249
+ query?: never;
250
+ header?: never;
251
+ path?: never;
252
+ cookie?: never;
253
+ };
254
+ /**
255
+ * M2M tokens a project was served in a time range (platform)
256
+ * @description Sum of the hourly client_credentials counters of one project between `from` (first full hour after it) and `to`. At most 40 days back. Platform token with `read:usage`.
257
+ */
258
+ get: operations["internal/m2mUsageRange"];
259
+ put?: never;
260
+ post?: never;
261
+ delete?: never;
262
+ options?: never;
263
+ head?: never;
264
+ patch?: never;
265
+ trace?: never;
266
+ };
227
267
  "/account/{account_id}/transfer": {
228
268
  parameters: {
229
269
  query?: never;
@@ -4652,11 +4692,14 @@ export interface components {
4652
4692
  callbacks?: string[];
4653
4693
  logout_urls?: string[];
4654
4694
  web_origins?: string[];
4695
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
4655
4696
  /** @description Add Metadata */
4656
4697
  metadata?: {
4657
4698
  [key: string]: unknown;
4658
4699
  };
4659
4700
  };
4701
+ /** @description A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in. */
4702
+ ClientGrantType: "authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code";
4660
4703
  /** @description Add Metadata */
4661
4704
  ClientMetadataCreate: {
4662
4705
  [key: string]: unknown;
@@ -4688,7 +4731,8 @@ export interface components {
4688
4731
  tos_uri?: string | null;
4689
4732
  policy_uri?: string | null;
4690
4733
  contacts?: string[];
4691
- grant_types?: string[];
4734
+ /** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
4735
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
4692
4736
  response_types?: string[];
4693
4737
  token_endpoint_auth_method?: string;
4694
4738
  application_type?: string;
@@ -6352,6 +6396,7 @@ export interface components {
6352
6396
  * - `login_denied` (401): A post-login Action denied the sign-in. `message` carries the reason it gave. On token grants it is a 403 with `error: invalid_grant`.
6353
6397
  * - `signup_denied` (403): A pre-signup Action or an active block denied the sign-up. `message` carries the reason.
6354
6398
  * - `client_credentials_denied` (401): An Action denied the client_credentials grant. `message` carries the reason.
6399
+ * - `m2m_quota_exceeded` (402): The project used the machine-to-machine tokens its plan includes this month. Free is capped; Hobby and Pro are billed per token instead.
6355
6400
  * - `signup_disabled` (403): Self-service sign-up is disabled on this connection.
6356
6401
  * - `email_taken` (409): Another user in this account already uses that email.
6357
6402
  * - `invalid_email` (400): The email address is not valid.
@@ -6430,7 +6475,7 @@ export interface components {
6430
6475
  * - `revision_not_found` (404): The revision is not in the flow history.
6431
6476
  * @enum {string}
6432
6477
  */
6433
- ErrorCode: "bad_request" | "validation_error" | "unauthorized" | "payment_required" | "forbidden" | "not_found" | "method_not_allowed" | "conflict" | "payload_too_large" | "unsupported_media_type" | "unprocessable_entity" | "too_many_requests" | "internal_error" | "already_exists" | "invalid_id" | "account_not_found" | "invalid_query" | "search_not_supported" | "invalid_expand" | "access_denied" | "insufficient_scope" | "team_required" | "account_limit_reached" | "invalid_project_id" | "account_transfer_refused" | "plan_required" | "not_logged_in" | "invalid_token" | "not_owner" | "user_suspended" | "invalid_credentials" | "login_denied" | "signup_denied" | "client_credentials_denied" | "signup_disabled" | "email_taken" | "invalid_email" | "same_email" | "user_has_no_email" | "password_too_weak" | "invalid_password_hash" | "weak_password_hash" | "invalid_code" | "invalid_phone" | "phone_changed" | "phone_already_verified" | "sms_unavailable" | "sms_failed" | "invalid_state" | "state_mismatch" | "invalid_ticket" | "ticket_used" | "ticket_expired" | "ticket_not_found" | "credential_not_found" | "invalid_link" | "expired_link" | "invalid_otp" | "invalid_client" | "client_not_found" | "client_mismatch" | "invalid_client_metadata" | "invalid_connection" | "connection_required" | "connection_misconfigured" | "passwordless_unavailable" | "ambiguous_connection" | "invalid_redirect_uri" | "origin_not_allowed" | "audience_not_found" | "system_resource" | "invalid_request" | "invalid_device_code" | "provider_error" | "identity_already_linked" | "identity_link_denied" | "identity_conflict" | "identity_orphaned" | "no_provider_token" | "no_refresh_token" | "action_unavailable" | "login_flow_misconfigured" | "mfa_required" | "step_up_required" | "interaction_required" | "passkey_login_disabled" | "mfa_pending" | "mfa_invalid_code" | "mfa_invalid_recovery_code" | "too_many_attempts" | "too_many_login_attempts" | "totp_not_allowed" | "no_usable_factor" | "factor_not_found" | "factor_already_confirmed" | "invalid_factor" | "session_missing" | "passkey_verification_failed" | "no_passkey_enrolled" | "malformed_credential" | "unknown_passkey" | "invalid_passkey" | "invite_not_found" | "invite_used" | "already_member" | "not_a_member" | "role_not_found" | "invalid_role" | "flow_not_found" | "revision_not_found";
6478
+ ErrorCode: "bad_request" | "validation_error" | "unauthorized" | "payment_required" | "forbidden" | "not_found" | "method_not_allowed" | "conflict" | "payload_too_large" | "unsupported_media_type" | "unprocessable_entity" | "too_many_requests" | "internal_error" | "already_exists" | "invalid_id" | "account_not_found" | "invalid_query" | "search_not_supported" | "invalid_expand" | "access_denied" | "insufficient_scope" | "team_required" | "account_limit_reached" | "invalid_project_id" | "account_transfer_refused" | "plan_required" | "not_logged_in" | "invalid_token" | "not_owner" | "user_suspended" | "invalid_credentials" | "login_denied" | "signup_denied" | "client_credentials_denied" | "m2m_quota_exceeded" | "signup_disabled" | "email_taken" | "invalid_email" | "same_email" | "user_has_no_email" | "password_too_weak" | "invalid_password_hash" | "weak_password_hash" | "invalid_code" | "invalid_phone" | "phone_changed" | "phone_already_verified" | "sms_unavailable" | "sms_failed" | "invalid_state" | "state_mismatch" | "invalid_ticket" | "ticket_used" | "ticket_expired" | "ticket_not_found" | "credential_not_found" | "invalid_link" | "expired_link" | "invalid_otp" | "invalid_client" | "client_not_found" | "client_mismatch" | "invalid_client_metadata" | "invalid_connection" | "connection_required" | "connection_misconfigured" | "passwordless_unavailable" | "ambiguous_connection" | "invalid_redirect_uri" | "origin_not_allowed" | "audience_not_found" | "system_resource" | "invalid_request" | "invalid_device_code" | "provider_error" | "identity_already_linked" | "identity_link_denied" | "identity_conflict" | "identity_orphaned" | "no_provider_token" | "no_refresh_token" | "action_unavailable" | "login_flow_misconfigured" | "mfa_required" | "step_up_required" | "interaction_required" | "passkey_login_disabled" | "mfa_pending" | "mfa_invalid_code" | "mfa_invalid_recovery_code" | "too_many_attempts" | "too_many_login_attempts" | "totp_not_allowed" | "no_usable_factor" | "factor_not_found" | "factor_already_confirmed" | "invalid_factor" | "session_missing" | "passkey_verification_failed" | "no_passkey_enrolled" | "malformed_credential" | "unknown_passkey" | "invalid_passkey" | "invite_not_found" | "invite_used" | "already_member" | "not_a_member" | "role_not_found" | "invalid_role" | "flow_not_found" | "revision_not_found";
6434
6479
  /** @description Every error response has this shape. Branch on `error_code`, never on `message`: the message is written for a person and may change. */
6435
6480
  ErrorResponse: {
6436
6481
  /** @description The HTTP status, repeated. */
@@ -8093,6 +8138,224 @@ export interface operations {
8093
8138
  };
8094
8139
  };
8095
8140
  };
8141
+ "internal/m2mUsage": {
8142
+ parameters: {
8143
+ query: {
8144
+ /** @description YYYY-MM, UTC. */
8145
+ month: string;
8146
+ };
8147
+ header?: never;
8148
+ path?: never;
8149
+ cookie?: never;
8150
+ };
8151
+ requestBody?: never;
8152
+ responses: {
8153
+ /** @description Default Response */
8154
+ 200: {
8155
+ headers: {
8156
+ [name: string]: unknown;
8157
+ };
8158
+ content: {
8159
+ "application/json": {
8160
+ month: string;
8161
+ rows: {
8162
+ /** @description The project (`team_<hex>`), or the account id for a legacy account without one. */
8163
+ team: string;
8164
+ tokens: number;
8165
+ }[];
8166
+ };
8167
+ };
8168
+ };
8169
+ /** @description `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field. */
8170
+ 400: {
8171
+ headers: {
8172
+ [name: string]: unknown;
8173
+ };
8174
+ content: {
8175
+ "application/json": components["schemas"]["ErrorResponse"] & {
8176
+ /** @enum {string} */
8177
+ error_code?: "validation_error";
8178
+ };
8179
+ };
8180
+ };
8181
+ /** @description `unauthorized` — The request carries no valid credentials. */
8182
+ 401: {
8183
+ headers: {
8184
+ [name: string]: unknown;
8185
+ };
8186
+ content: {
8187
+ "application/json": components["schemas"]["ErrorResponse"] & {
8188
+ /** @enum {string} */
8189
+ error_code?: "unauthorized";
8190
+ };
8191
+ };
8192
+ };
8193
+ /**
8194
+ * @description `forbidden` — The credentials are valid but do not allow this operation.
8195
+ *
8196
+ * `insufficient_scope` — The token lacks a scope this operation requires. `message` names it.
8197
+ *
8198
+ * `user_suspended` — The user is suspended and cannot sign in or be modified.
8199
+ */
8200
+ 403: {
8201
+ headers: {
8202
+ [name: string]: unknown;
8203
+ };
8204
+ content: {
8205
+ "application/json": components["schemas"]["ErrorResponse"] & {
8206
+ /** @enum {string} */
8207
+ error_code?: "forbidden" | "insufficient_scope" | "user_suspended";
8208
+ };
8209
+ };
8210
+ };
8211
+ /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
8212
+ 404: {
8213
+ headers: {
8214
+ [name: string]: unknown;
8215
+ };
8216
+ content: {
8217
+ "application/json": components["schemas"]["ErrorResponse"] & {
8218
+ /** @enum {string} */
8219
+ error_code?: "account_not_found";
8220
+ };
8221
+ };
8222
+ };
8223
+ /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
8224
+ 429: {
8225
+ headers: {
8226
+ [name: string]: unknown;
8227
+ };
8228
+ content: {
8229
+ "application/json": components["schemas"]["ErrorResponse"] & {
8230
+ /** @enum {string} */
8231
+ error_code?: "too_many_requests";
8232
+ };
8233
+ };
8234
+ };
8235
+ /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
8236
+ 500: {
8237
+ headers: {
8238
+ [name: string]: unknown;
8239
+ };
8240
+ content: {
8241
+ "application/json": components["schemas"]["ErrorResponse"] & {
8242
+ /** @enum {string} */
8243
+ error_code?: "internal_error";
8244
+ };
8245
+ };
8246
+ };
8247
+ };
8248
+ };
8249
+ "internal/m2mUsageRange": {
8250
+ parameters: {
8251
+ query: {
8252
+ /** @description The project to read, as `team_<hex>`. */
8253
+ team: string;
8254
+ /** @description Start of the range — the subscription period start. Counted from the first full hour after it. */
8255
+ from: string;
8256
+ /** @description End of the range. Defaults to now. */
8257
+ to?: string;
8258
+ };
8259
+ header?: never;
8260
+ path?: never;
8261
+ cookie?: never;
8262
+ };
8263
+ requestBody?: never;
8264
+ responses: {
8265
+ /** @description Default Response */
8266
+ 200: {
8267
+ headers: {
8268
+ [name: string]: unknown;
8269
+ };
8270
+ content: {
8271
+ "application/json": {
8272
+ team: string;
8273
+ from: string;
8274
+ to: string;
8275
+ tokens: number;
8276
+ };
8277
+ };
8278
+ };
8279
+ /** @description `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field. */
8280
+ 400: {
8281
+ headers: {
8282
+ [name: string]: unknown;
8283
+ };
8284
+ content: {
8285
+ "application/json": components["schemas"]["ErrorResponse"] & {
8286
+ /** @enum {string} */
8287
+ error_code?: "validation_error";
8288
+ };
8289
+ };
8290
+ };
8291
+ /** @description `unauthorized` — The request carries no valid credentials. */
8292
+ 401: {
8293
+ headers: {
8294
+ [name: string]: unknown;
8295
+ };
8296
+ content: {
8297
+ "application/json": components["schemas"]["ErrorResponse"] & {
8298
+ /** @enum {string} */
8299
+ error_code?: "unauthorized";
8300
+ };
8301
+ };
8302
+ };
8303
+ /**
8304
+ * @description `forbidden` — The credentials are valid but do not allow this operation.
8305
+ *
8306
+ * `insufficient_scope` — The token lacks a scope this operation requires. `message` names it.
8307
+ *
8308
+ * `user_suspended` — The user is suspended and cannot sign in or be modified.
8309
+ */
8310
+ 403: {
8311
+ headers: {
8312
+ [name: string]: unknown;
8313
+ };
8314
+ content: {
8315
+ "application/json": components["schemas"]["ErrorResponse"] & {
8316
+ /** @enum {string} */
8317
+ error_code?: "forbidden" | "insufficient_scope" | "user_suspended";
8318
+ };
8319
+ };
8320
+ };
8321
+ /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
8322
+ 404: {
8323
+ headers: {
8324
+ [name: string]: unknown;
8325
+ };
8326
+ content: {
8327
+ "application/json": components["schemas"]["ErrorResponse"] & {
8328
+ /** @enum {string} */
8329
+ error_code?: "account_not_found";
8330
+ };
8331
+ };
8332
+ };
8333
+ /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
8334
+ 429: {
8335
+ headers: {
8336
+ [name: string]: unknown;
8337
+ };
8338
+ content: {
8339
+ "application/json": components["schemas"]["ErrorResponse"] & {
8340
+ /** @enum {string} */
8341
+ error_code?: "too_many_requests";
8342
+ };
8343
+ };
8344
+ };
8345
+ /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
8346
+ 500: {
8347
+ headers: {
8348
+ [name: string]: unknown;
8349
+ };
8350
+ content: {
8351
+ "application/json": components["schemas"]["ErrorResponse"] & {
8352
+ /** @enum {string} */
8353
+ error_code?: "internal_error";
8354
+ };
8355
+ };
8356
+ };
8357
+ };
8358
+ };
8096
8359
  "account/transfer": {
8097
8360
  parameters: {
8098
8361
  query?: never;
@@ -9550,6 +9813,7 @@ export interface operations {
9550
9813
  callbacks?: string[];
9551
9814
  logout_urls?: string[];
9552
9815
  web_origins?: string[];
9816
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
9553
9817
  /** @description Add Metadata */
9554
9818
  metadata?: {
9555
9819
  [key: string]: unknown;
@@ -9983,7 +10247,8 @@ export interface operations {
9983
10247
  tos_uri?: string | null;
9984
10248
  policy_uri?: string | null;
9985
10249
  contacts?: string[];
9986
- grant_types?: string[];
10250
+ /** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
10251
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
9987
10252
  response_types?: string[];
9988
10253
  token_endpoint_auth_method?: string;
9989
10254
  application_type?: string;
package/dist/version.js CHANGED
@@ -9,13 +9,13 @@
9
9
  // login pages could not import the SDK at all. Same pattern as auth-js.
10
10
  //
11
11
  // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
12
- export const version = "2.7.36";
12
+ export const version = "2.7.38";
13
13
  // Short git SHA of the released commit. The version dates a build; this names
14
14
  // the exact tree, so a canonical log line or an audit entry leads straight to
15
15
  // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
16
16
  // link) cannot be mistaken for a real commit — auth only records values that
17
17
  // look like a SHA, and this one never will.
18
- export const commit = "3f9e3b8";
18
+ export const commit = "0b124d8";
19
19
  // What this SDK writes in `x-faable-client`. Exported for a consumer that
20
20
  // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
21
21
  // token request attributed — a bare `authClientCredentials` stamps only what
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/auth-sdk",
3
- "version": "2.7.36",
3
+ "version": "2.7.38",
4
4
  "author": "Marc Pomar <marc@faable.com>",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",