@faable/auth-sdk 2.7.37 → 2.7.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -19,6 +19,7 @@ export type AuthAccountMetadataCreate = components["schemas"]["AuthAccountMetada
19
19
  export type AuthAccountUpdate = components["schemas"]["AuthAccountUpdate"];
20
20
  export type Client = components["schemas"]["Client"];
21
21
  export type ClientCreate = components["schemas"]["ClientCreate"];
22
+ export type ClientGrantType = components["schemas"]["ClientGrantType"];
22
23
  export type ClientMetadata = components["schemas"]["ClientMetadata"];
23
24
  export type ClientMetadataCreate = components["schemas"]["ClientMetadataCreate"];
24
25
  export type ClientRegistrationRequest = components["schemas"]["ClientRegistrationRequest"];
@@ -4692,11 +4692,14 @@ export interface components {
4692
4692
  callbacks?: string[];
4693
4693
  logout_urls?: string[];
4694
4694
  web_origins?: string[];
4695
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
4695
4696
  /** @description Add Metadata */
4696
4697
  metadata?: {
4697
4698
  [key: string]: unknown;
4698
4699
  };
4699
4700
  };
4701
+ /** @description A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in. */
4702
+ ClientGrantType: "authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code";
4700
4703
  /** @description Add Metadata */
4701
4704
  ClientMetadataCreate: {
4702
4705
  [key: string]: unknown;
@@ -4728,7 +4731,8 @@ export interface components {
4728
4731
  tos_uri?: string | null;
4729
4732
  policy_uri?: string | null;
4730
4733
  contacts?: string[];
4731
- grant_types?: string[];
4734
+ /** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
4735
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
4732
4736
  response_types?: string[];
4733
4737
  token_endpoint_auth_method?: string;
4734
4738
  application_type?: string;
@@ -9809,6 +9813,7 @@ export interface operations {
9809
9813
  callbacks?: string[];
9810
9814
  logout_urls?: string[];
9811
9815
  web_origins?: string[];
9816
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
9812
9817
  /** @description Add Metadata */
9813
9818
  metadata?: {
9814
9819
  [key: string]: unknown;
@@ -10242,7 +10247,8 @@ export interface operations {
10242
10247
  tos_uri?: string | null;
10243
10248
  policy_uri?: string | null;
10244
10249
  contacts?: string[];
10245
- grant_types?: string[];
10250
+ /** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
10251
+ grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
10246
10252
  response_types?: string[];
10247
10253
  token_endpoint_auth_method?: string;
10248
10254
  application_type?: string;
package/dist/version.js CHANGED
@@ -9,13 +9,13 @@
9
9
  // login pages could not import the SDK at all. Same pattern as auth-js.
10
10
  //
11
11
  // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
12
- export const version = "2.7.37";
12
+ export const version = "2.7.38";
13
13
  // Short git SHA of the released commit. The version dates a build; this names
14
14
  // the exact tree, so a canonical log line or an audit entry leads straight to
15
15
  // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
16
16
  // link) cannot be mistaken for a real commit — auth only records values that
17
17
  // look like a SHA, and this one never will.
18
- export const commit = "8d19009";
18
+ export const commit = "0b124d8";
19
19
  // What this SDK writes in `x-faable-client`. Exported for a consumer that
20
20
  // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
21
21
  // token request attributed — a bare `authClientCredentials` stamps only what
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/auth-sdk",
3
- "version": "2.7.37",
3
+ "version": "2.7.38",
4
4
  "author": "Marc Pomar <marc@faable.com>",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
package/spec/openapi.json CHANGED
@@ -3,7 +3,7 @@
3
3
  "info": {
4
4
  "title": "@faablecloud/auth",
5
5
  "description": "Auth Platform made by Faable. Manage Users and Roles",
6
- "version": "2.40.0",
6
+ "version": "2.41.0",
7
7
  "license": {
8
8
  "name": "private",
9
9
  "url": "https://faable.com/docs/platform/privacy-policy"
@@ -1813,6 +1813,69 @@
1813
1813
  "type": "string"
1814
1814
  }
1815
1815
  },
1816
+ "grant_types": {
1817
+ "type": "array",
1818
+ "items": {
1819
+ "anyOf": [
1820
+ {
1821
+ "type": "string",
1822
+ "enum": [
1823
+ "authorization_code"
1824
+ ]
1825
+ },
1826
+ {
1827
+ "type": "string",
1828
+ "enum": [
1829
+ "client_credentials"
1830
+ ]
1831
+ },
1832
+ {
1833
+ "type": "string",
1834
+ "enum": [
1835
+ "refresh_token"
1836
+ ]
1837
+ },
1838
+ {
1839
+ "type": "string",
1840
+ "enum": [
1841
+ "password"
1842
+ ]
1843
+ },
1844
+ {
1845
+ "type": "string",
1846
+ "enum": [
1847
+ "http://auth0.com/oauth/grant-type/passwordless/otp"
1848
+ ]
1849
+ },
1850
+ {
1851
+ "type": "string",
1852
+ "enum": [
1853
+ "urn:ietf:params:oauth:grant-type:token-exchange"
1854
+ ]
1855
+ },
1856
+ {
1857
+ "type": "string",
1858
+ "enum": [
1859
+ "urn:ietf:params:oauth:grant-type:device_code"
1860
+ ]
1861
+ },
1862
+ {
1863
+ "type": "string",
1864
+ "enum": [
1865
+ "http://auth0.com/oauth/grant-type/mfa-otp"
1866
+ ]
1867
+ },
1868
+ {
1869
+ "type": "string",
1870
+ "enum": [
1871
+ "http://auth0.com/oauth/grant-type/mfa-recovery-code"
1872
+ ]
1873
+ }
1874
+ ],
1875
+ "description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
1876
+ },
1877
+ "uniqueItems": true
1878
+ },
1816
1879
  "metadata": {
1817
1880
  "type": "object",
1818
1881
  "properties": {},
@@ -1823,6 +1886,65 @@
1823
1886
  "description": "ClientCreate",
1824
1887
  "additionalProperties": false
1825
1888
  },
1889
+ "ClientGrantType": {
1890
+ "anyOf": [
1891
+ {
1892
+ "type": "string",
1893
+ "enum": [
1894
+ "authorization_code"
1895
+ ]
1896
+ },
1897
+ {
1898
+ "type": "string",
1899
+ "enum": [
1900
+ "client_credentials"
1901
+ ]
1902
+ },
1903
+ {
1904
+ "type": "string",
1905
+ "enum": [
1906
+ "refresh_token"
1907
+ ]
1908
+ },
1909
+ {
1910
+ "type": "string",
1911
+ "enum": [
1912
+ "password"
1913
+ ]
1914
+ },
1915
+ {
1916
+ "type": "string",
1917
+ "enum": [
1918
+ "http://auth0.com/oauth/grant-type/passwordless/otp"
1919
+ ]
1920
+ },
1921
+ {
1922
+ "type": "string",
1923
+ "enum": [
1924
+ "urn:ietf:params:oauth:grant-type:token-exchange"
1925
+ ]
1926
+ },
1927
+ {
1928
+ "type": "string",
1929
+ "enum": [
1930
+ "urn:ietf:params:oauth:grant-type:device_code"
1931
+ ]
1932
+ },
1933
+ {
1934
+ "type": "string",
1935
+ "enum": [
1936
+ "http://auth0.com/oauth/grant-type/mfa-otp"
1937
+ ]
1938
+ },
1939
+ {
1940
+ "type": "string",
1941
+ "enum": [
1942
+ "http://auth0.com/oauth/grant-type/mfa-recovery-code"
1943
+ ]
1944
+ }
1945
+ ],
1946
+ "description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
1947
+ },
1826
1948
  "ClientMetadataCreate": {
1827
1949
  "type": "object",
1828
1950
  "properties": {},
@@ -1918,8 +2040,66 @@
1918
2040
  "grant_types": {
1919
2041
  "type": "array",
1920
2042
  "items": {
1921
- "type": "string"
1922
- }
2043
+ "anyOf": [
2044
+ {
2045
+ "type": "string",
2046
+ "enum": [
2047
+ "authorization_code"
2048
+ ]
2049
+ },
2050
+ {
2051
+ "type": "string",
2052
+ "enum": [
2053
+ "client_credentials"
2054
+ ]
2055
+ },
2056
+ {
2057
+ "type": "string",
2058
+ "enum": [
2059
+ "refresh_token"
2060
+ ]
2061
+ },
2062
+ {
2063
+ "type": "string",
2064
+ "enum": [
2065
+ "password"
2066
+ ]
2067
+ },
2068
+ {
2069
+ "type": "string",
2070
+ "enum": [
2071
+ "http://auth0.com/oauth/grant-type/passwordless/otp"
2072
+ ]
2073
+ },
2074
+ {
2075
+ "type": "string",
2076
+ "enum": [
2077
+ "urn:ietf:params:oauth:grant-type:token-exchange"
2078
+ ]
2079
+ },
2080
+ {
2081
+ "type": "string",
2082
+ "enum": [
2083
+ "urn:ietf:params:oauth:grant-type:device_code"
2084
+ ]
2085
+ },
2086
+ {
2087
+ "type": "string",
2088
+ "enum": [
2089
+ "http://auth0.com/oauth/grant-type/mfa-otp"
2090
+ ]
2091
+ },
2092
+ {
2093
+ "type": "string",
2094
+ "enum": [
2095
+ "http://auth0.com/oauth/grant-type/mfa-recovery-code"
2096
+ ]
2097
+ }
2098
+ ],
2099
+ "description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
2100
+ },
2101
+ "uniqueItems": true,
2102
+ "description": "Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used."
1923
2103
  },
1924
2104
  "response_types": {
1925
2105
  "type": "array",
@@ -15830,6 +16010,69 @@
15830
16010
  "type": "string"
15831
16011
  }
15832
16012
  },
16013
+ "grant_types": {
16014
+ "type": "array",
16015
+ "items": {
16016
+ "anyOf": [
16017
+ {
16018
+ "type": "string",
16019
+ "enum": [
16020
+ "authorization_code"
16021
+ ]
16022
+ },
16023
+ {
16024
+ "type": "string",
16025
+ "enum": [
16026
+ "client_credentials"
16027
+ ]
16028
+ },
16029
+ {
16030
+ "type": "string",
16031
+ "enum": [
16032
+ "refresh_token"
16033
+ ]
16034
+ },
16035
+ {
16036
+ "type": "string",
16037
+ "enum": [
16038
+ "password"
16039
+ ]
16040
+ },
16041
+ {
16042
+ "type": "string",
16043
+ "enum": [
16044
+ "http://auth0.com/oauth/grant-type/passwordless/otp"
16045
+ ]
16046
+ },
16047
+ {
16048
+ "type": "string",
16049
+ "enum": [
16050
+ "urn:ietf:params:oauth:grant-type:token-exchange"
16051
+ ]
16052
+ },
16053
+ {
16054
+ "type": "string",
16055
+ "enum": [
16056
+ "urn:ietf:params:oauth:grant-type:device_code"
16057
+ ]
16058
+ },
16059
+ {
16060
+ "type": "string",
16061
+ "enum": [
16062
+ "http://auth0.com/oauth/grant-type/mfa-otp"
16063
+ ]
16064
+ },
16065
+ {
16066
+ "type": "string",
16067
+ "enum": [
16068
+ "http://auth0.com/oauth/grant-type/mfa-recovery-code"
16069
+ ]
16070
+ }
16071
+ ],
16072
+ "description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
16073
+ },
16074
+ "uniqueItems": true
16075
+ },
15833
16076
  "metadata": {
15834
16077
  "type": "object",
15835
16078
  "properties": {},
@@ -17151,8 +17394,66 @@
17151
17394
  "grant_types": {
17152
17395
  "type": "array",
17153
17396
  "items": {
17154
- "type": "string"
17155
- }
17397
+ "anyOf": [
17398
+ {
17399
+ "type": "string",
17400
+ "enum": [
17401
+ "authorization_code"
17402
+ ]
17403
+ },
17404
+ {
17405
+ "type": "string",
17406
+ "enum": [
17407
+ "client_credentials"
17408
+ ]
17409
+ },
17410
+ {
17411
+ "type": "string",
17412
+ "enum": [
17413
+ "refresh_token"
17414
+ ]
17415
+ },
17416
+ {
17417
+ "type": "string",
17418
+ "enum": [
17419
+ "password"
17420
+ ]
17421
+ },
17422
+ {
17423
+ "type": "string",
17424
+ "enum": [
17425
+ "http://auth0.com/oauth/grant-type/passwordless/otp"
17426
+ ]
17427
+ },
17428
+ {
17429
+ "type": "string",
17430
+ "enum": [
17431
+ "urn:ietf:params:oauth:grant-type:token-exchange"
17432
+ ]
17433
+ },
17434
+ {
17435
+ "type": "string",
17436
+ "enum": [
17437
+ "urn:ietf:params:oauth:grant-type:device_code"
17438
+ ]
17439
+ },
17440
+ {
17441
+ "type": "string",
17442
+ "enum": [
17443
+ "http://auth0.com/oauth/grant-type/mfa-otp"
17444
+ ]
17445
+ },
17446
+ {
17447
+ "type": "string",
17448
+ "enum": [
17449
+ "http://auth0.com/oauth/grant-type/mfa-recovery-code"
17450
+ ]
17451
+ }
17452
+ ],
17453
+ "description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
17454
+ },
17455
+ "uniqueItems": true,
17456
+ "description": "Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used."
17156
17457
  },
17157
17458
  "response_types": {
17158
17459
  "type": "array",