@faable/auth-sdk 2.7.37 → 2.7.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api/api-types.d.ts +1 -0
- package/dist/api/types.d.ts +12 -15
- package/dist/version.js +2 -2
- package/package.json +1 -1
- package/spec/openapi.json +309 -11
package/dist/api/api-types.d.ts
CHANGED
|
@@ -19,6 +19,7 @@ export type AuthAccountMetadataCreate = components["schemas"]["AuthAccountMetada
|
|
|
19
19
|
export type AuthAccountUpdate = components["schemas"]["AuthAccountUpdate"];
|
|
20
20
|
export type Client = components["schemas"]["Client"];
|
|
21
21
|
export type ClientCreate = components["schemas"]["ClientCreate"];
|
|
22
|
+
export type ClientGrantType = components["schemas"]["ClientGrantType"];
|
|
22
23
|
export type ClientMetadata = components["schemas"]["ClientMetadata"];
|
|
23
24
|
export type ClientMetadataCreate = components["schemas"]["ClientMetadataCreate"];
|
|
24
25
|
export type ClientRegistrationRequest = components["schemas"]["ClientRegistrationRequest"];
|
package/dist/api/types.d.ts
CHANGED
|
@@ -4692,11 +4692,14 @@ export interface components {
|
|
|
4692
4692
|
callbacks?: string[];
|
|
4693
4693
|
logout_urls?: string[];
|
|
4694
4694
|
web_origins?: string[];
|
|
4695
|
+
grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
|
|
4695
4696
|
/** @description Add Metadata */
|
|
4696
4697
|
metadata?: {
|
|
4697
4698
|
[key: string]: unknown;
|
|
4698
4699
|
};
|
|
4699
4700
|
};
|
|
4701
|
+
/** @description A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in. */
|
|
4702
|
+
ClientGrantType: "authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code";
|
|
4700
4703
|
/** @description Add Metadata */
|
|
4701
4704
|
ClientMetadataCreate: {
|
|
4702
4705
|
[key: string]: unknown;
|
|
@@ -4728,7 +4731,8 @@ export interface components {
|
|
|
4728
4731
|
tos_uri?: string | null;
|
|
4729
4732
|
policy_uri?: string | null;
|
|
4730
4733
|
contacts?: string[];
|
|
4731
|
-
|
|
4734
|
+
/** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
|
|
4735
|
+
grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
|
|
4732
4736
|
response_types?: string[];
|
|
4733
4737
|
token_endpoint_auth_method?: string;
|
|
4734
4738
|
application_type?: string;
|
|
@@ -4777,18 +4781,12 @@ export interface components {
|
|
|
4777
4781
|
login_flow?: string | null;
|
|
4778
4782
|
/** @description Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it. */
|
|
4779
4783
|
default_audience?: string | null;
|
|
4780
|
-
/**
|
|
4781
|
-
|
|
4782
|
-
* @default {}
|
|
4783
|
-
*/
|
|
4784
|
-
metadata: {
|
|
4784
|
+
/** @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched. */
|
|
4785
|
+
metadata?: {
|
|
4785
4786
|
[key: string]: unknown;
|
|
4786
4787
|
};
|
|
4787
4788
|
};
|
|
4788
|
-
/**
|
|
4789
|
-
* @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta.
|
|
4790
|
-
* @default {}
|
|
4791
|
-
*/
|
|
4789
|
+
/** @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched. */
|
|
4792
4790
|
ClientUpdateMetadata: {
|
|
4793
4791
|
[key: string]: unknown;
|
|
4794
4792
|
};
|
|
@@ -9809,6 +9807,7 @@ export interface operations {
|
|
|
9809
9807
|
callbacks?: string[];
|
|
9810
9808
|
logout_urls?: string[];
|
|
9811
9809
|
web_origins?: string[];
|
|
9810
|
+
grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
|
|
9812
9811
|
/** @description Add Metadata */
|
|
9813
9812
|
metadata?: {
|
|
9814
9813
|
[key: string]: unknown;
|
|
@@ -10242,7 +10241,8 @@ export interface operations {
|
|
|
10242
10241
|
tos_uri?: string | null;
|
|
10243
10242
|
policy_uri?: string | null;
|
|
10244
10243
|
contacts?: string[];
|
|
10245
|
-
|
|
10244
|
+
/** @description Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used. */
|
|
10245
|
+
grant_types?: ("authorization_code" | "client_credentials" | "refresh_token" | "password" | "http://auth0.com/oauth/grant-type/passwordless/otp" | "urn:ietf:params:oauth:grant-type:token-exchange" | "urn:ietf:params:oauth:grant-type:device_code" | "http://auth0.com/oauth/grant-type/mfa-otp" | "http://auth0.com/oauth/grant-type/mfa-recovery-code")[];
|
|
10246
10246
|
response_types?: string[];
|
|
10247
10247
|
token_endpoint_auth_method?: string;
|
|
10248
10248
|
application_type?: string;
|
|
@@ -10291,10 +10291,7 @@ export interface operations {
|
|
|
10291
10291
|
login_flow?: string | null;
|
|
10292
10292
|
/** @description Audience a client_credentials token request gets when it sends none. An explicit `audience` wins. `null` removes it. */
|
|
10293
10293
|
default_audience?: string | null;
|
|
10294
|
-
/**
|
|
10295
|
-
* @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta.
|
|
10296
|
-
* @default {}
|
|
10297
|
-
*/
|
|
10294
|
+
/** @description Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched. */
|
|
10298
10295
|
metadata?: {
|
|
10299
10296
|
[key: string]: unknown;
|
|
10300
10297
|
};
|
package/dist/version.js
CHANGED
|
@@ -9,13 +9,13 @@
|
|
|
9
9
|
// login pages could not import the SDK at all. Same pattern as auth-js.
|
|
10
10
|
//
|
|
11
11
|
// The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
|
|
12
|
-
export const version = "2.7.
|
|
12
|
+
export const version = "2.7.39";
|
|
13
13
|
// Short git SHA of the released commit. The version dates a build; this names
|
|
14
14
|
// the exact tree, so a canonical log line or an audit entry leads straight to
|
|
15
15
|
// `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
|
|
16
16
|
// link) cannot be mistaken for a real commit — auth only records values that
|
|
17
17
|
// look like a SHA, and this one never will.
|
|
18
|
-
export const commit = "
|
|
18
|
+
export const commit = "7956a31";
|
|
19
19
|
// What this SDK writes in `x-faable-client`. Exported for a consumer that
|
|
20
20
|
// builds a strategy on its own (outside `FaableAuthApi`) and still wants the
|
|
21
21
|
// token request attributed — a bare `authClientCredentials` stamps only what
|
package/package.json
CHANGED
package/spec/openapi.json
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
"info": {
|
|
4
4
|
"title": "@faablecloud/auth",
|
|
5
5
|
"description": "Auth Platform made by Faable. Manage Users and Roles",
|
|
6
|
-
"version": "2.
|
|
6
|
+
"version": "2.41.1",
|
|
7
7
|
"license": {
|
|
8
8
|
"name": "private",
|
|
9
9
|
"url": "https://faable.com/docs/platform/privacy-policy"
|
|
@@ -1813,6 +1813,69 @@
|
|
|
1813
1813
|
"type": "string"
|
|
1814
1814
|
}
|
|
1815
1815
|
},
|
|
1816
|
+
"grant_types": {
|
|
1817
|
+
"type": "array",
|
|
1818
|
+
"items": {
|
|
1819
|
+
"anyOf": [
|
|
1820
|
+
{
|
|
1821
|
+
"type": "string",
|
|
1822
|
+
"enum": [
|
|
1823
|
+
"authorization_code"
|
|
1824
|
+
]
|
|
1825
|
+
},
|
|
1826
|
+
{
|
|
1827
|
+
"type": "string",
|
|
1828
|
+
"enum": [
|
|
1829
|
+
"client_credentials"
|
|
1830
|
+
]
|
|
1831
|
+
},
|
|
1832
|
+
{
|
|
1833
|
+
"type": "string",
|
|
1834
|
+
"enum": [
|
|
1835
|
+
"refresh_token"
|
|
1836
|
+
]
|
|
1837
|
+
},
|
|
1838
|
+
{
|
|
1839
|
+
"type": "string",
|
|
1840
|
+
"enum": [
|
|
1841
|
+
"password"
|
|
1842
|
+
]
|
|
1843
|
+
},
|
|
1844
|
+
{
|
|
1845
|
+
"type": "string",
|
|
1846
|
+
"enum": [
|
|
1847
|
+
"http://auth0.com/oauth/grant-type/passwordless/otp"
|
|
1848
|
+
]
|
|
1849
|
+
},
|
|
1850
|
+
{
|
|
1851
|
+
"type": "string",
|
|
1852
|
+
"enum": [
|
|
1853
|
+
"urn:ietf:params:oauth:grant-type:token-exchange"
|
|
1854
|
+
]
|
|
1855
|
+
},
|
|
1856
|
+
{
|
|
1857
|
+
"type": "string",
|
|
1858
|
+
"enum": [
|
|
1859
|
+
"urn:ietf:params:oauth:grant-type:device_code"
|
|
1860
|
+
]
|
|
1861
|
+
},
|
|
1862
|
+
{
|
|
1863
|
+
"type": "string",
|
|
1864
|
+
"enum": [
|
|
1865
|
+
"http://auth0.com/oauth/grant-type/mfa-otp"
|
|
1866
|
+
]
|
|
1867
|
+
},
|
|
1868
|
+
{
|
|
1869
|
+
"type": "string",
|
|
1870
|
+
"enum": [
|
|
1871
|
+
"http://auth0.com/oauth/grant-type/mfa-recovery-code"
|
|
1872
|
+
]
|
|
1873
|
+
}
|
|
1874
|
+
],
|
|
1875
|
+
"description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
|
|
1876
|
+
},
|
|
1877
|
+
"uniqueItems": true
|
|
1878
|
+
},
|
|
1816
1879
|
"metadata": {
|
|
1817
1880
|
"type": "object",
|
|
1818
1881
|
"properties": {},
|
|
@@ -1823,6 +1886,65 @@
|
|
|
1823
1886
|
"description": "ClientCreate",
|
|
1824
1887
|
"additionalProperties": false
|
|
1825
1888
|
},
|
|
1889
|
+
"ClientGrantType": {
|
|
1890
|
+
"anyOf": [
|
|
1891
|
+
{
|
|
1892
|
+
"type": "string",
|
|
1893
|
+
"enum": [
|
|
1894
|
+
"authorization_code"
|
|
1895
|
+
]
|
|
1896
|
+
},
|
|
1897
|
+
{
|
|
1898
|
+
"type": "string",
|
|
1899
|
+
"enum": [
|
|
1900
|
+
"client_credentials"
|
|
1901
|
+
]
|
|
1902
|
+
},
|
|
1903
|
+
{
|
|
1904
|
+
"type": "string",
|
|
1905
|
+
"enum": [
|
|
1906
|
+
"refresh_token"
|
|
1907
|
+
]
|
|
1908
|
+
},
|
|
1909
|
+
{
|
|
1910
|
+
"type": "string",
|
|
1911
|
+
"enum": [
|
|
1912
|
+
"password"
|
|
1913
|
+
]
|
|
1914
|
+
},
|
|
1915
|
+
{
|
|
1916
|
+
"type": "string",
|
|
1917
|
+
"enum": [
|
|
1918
|
+
"http://auth0.com/oauth/grant-type/passwordless/otp"
|
|
1919
|
+
]
|
|
1920
|
+
},
|
|
1921
|
+
{
|
|
1922
|
+
"type": "string",
|
|
1923
|
+
"enum": [
|
|
1924
|
+
"urn:ietf:params:oauth:grant-type:token-exchange"
|
|
1925
|
+
]
|
|
1926
|
+
},
|
|
1927
|
+
{
|
|
1928
|
+
"type": "string",
|
|
1929
|
+
"enum": [
|
|
1930
|
+
"urn:ietf:params:oauth:grant-type:device_code"
|
|
1931
|
+
]
|
|
1932
|
+
},
|
|
1933
|
+
{
|
|
1934
|
+
"type": "string",
|
|
1935
|
+
"enum": [
|
|
1936
|
+
"http://auth0.com/oauth/grant-type/mfa-otp"
|
|
1937
|
+
]
|
|
1938
|
+
},
|
|
1939
|
+
{
|
|
1940
|
+
"type": "string",
|
|
1941
|
+
"enum": [
|
|
1942
|
+
"http://auth0.com/oauth/grant-type/mfa-recovery-code"
|
|
1943
|
+
]
|
|
1944
|
+
}
|
|
1945
|
+
],
|
|
1946
|
+
"description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
|
|
1947
|
+
},
|
|
1826
1948
|
"ClientMetadataCreate": {
|
|
1827
1949
|
"type": "object",
|
|
1828
1950
|
"properties": {},
|
|
@@ -1918,8 +2040,66 @@
|
|
|
1918
2040
|
"grant_types": {
|
|
1919
2041
|
"type": "array",
|
|
1920
2042
|
"items": {
|
|
1921
|
-
"
|
|
1922
|
-
|
|
2043
|
+
"anyOf": [
|
|
2044
|
+
{
|
|
2045
|
+
"type": "string",
|
|
2046
|
+
"enum": [
|
|
2047
|
+
"authorization_code"
|
|
2048
|
+
]
|
|
2049
|
+
},
|
|
2050
|
+
{
|
|
2051
|
+
"type": "string",
|
|
2052
|
+
"enum": [
|
|
2053
|
+
"client_credentials"
|
|
2054
|
+
]
|
|
2055
|
+
},
|
|
2056
|
+
{
|
|
2057
|
+
"type": "string",
|
|
2058
|
+
"enum": [
|
|
2059
|
+
"refresh_token"
|
|
2060
|
+
]
|
|
2061
|
+
},
|
|
2062
|
+
{
|
|
2063
|
+
"type": "string",
|
|
2064
|
+
"enum": [
|
|
2065
|
+
"password"
|
|
2066
|
+
]
|
|
2067
|
+
},
|
|
2068
|
+
{
|
|
2069
|
+
"type": "string",
|
|
2070
|
+
"enum": [
|
|
2071
|
+
"http://auth0.com/oauth/grant-type/passwordless/otp"
|
|
2072
|
+
]
|
|
2073
|
+
},
|
|
2074
|
+
{
|
|
2075
|
+
"type": "string",
|
|
2076
|
+
"enum": [
|
|
2077
|
+
"urn:ietf:params:oauth:grant-type:token-exchange"
|
|
2078
|
+
]
|
|
2079
|
+
},
|
|
2080
|
+
{
|
|
2081
|
+
"type": "string",
|
|
2082
|
+
"enum": [
|
|
2083
|
+
"urn:ietf:params:oauth:grant-type:device_code"
|
|
2084
|
+
]
|
|
2085
|
+
},
|
|
2086
|
+
{
|
|
2087
|
+
"type": "string",
|
|
2088
|
+
"enum": [
|
|
2089
|
+
"http://auth0.com/oauth/grant-type/mfa-otp"
|
|
2090
|
+
]
|
|
2091
|
+
},
|
|
2092
|
+
{
|
|
2093
|
+
"type": "string",
|
|
2094
|
+
"enum": [
|
|
2095
|
+
"http://auth0.com/oauth/grant-type/mfa-recovery-code"
|
|
2096
|
+
]
|
|
2097
|
+
}
|
|
2098
|
+
],
|
|
2099
|
+
"description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
|
|
2100
|
+
},
|
|
2101
|
+
"uniqueItems": true,
|
|
2102
|
+
"description": "Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used."
|
|
1923
2103
|
},
|
|
1924
2104
|
"response_types": {
|
|
1925
2105
|
"type": "array",
|
|
@@ -2238,8 +2418,7 @@
|
|
|
2238
2418
|
"type": "object",
|
|
2239
2419
|
"properties": {},
|
|
2240
2420
|
"additionalProperties": true,
|
|
2241
|
-
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta."
|
|
2242
|
-
"default": {}
|
|
2421
|
+
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched."
|
|
2243
2422
|
}
|
|
2244
2423
|
},
|
|
2245
2424
|
"description": "Partial update for a Client. Only the supplied fields are modified. `client_id` and `client_secret` are not editable through this endpoint to prevent accidental rotation; use a dedicated endpoint when secret rotation is added.",
|
|
@@ -2249,8 +2428,7 @@
|
|
|
2249
2428
|
"type": "object",
|
|
2250
2429
|
"properties": {},
|
|
2251
2430
|
"additionalProperties": true,
|
|
2252
|
-
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta."
|
|
2253
|
-
"default": {}
|
|
2431
|
+
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched."
|
|
2254
2432
|
},
|
|
2255
2433
|
"User": {
|
|
2256
2434
|
"type": "object",
|
|
@@ -15830,6 +16008,69 @@
|
|
|
15830
16008
|
"type": "string"
|
|
15831
16009
|
}
|
|
15832
16010
|
},
|
|
16011
|
+
"grant_types": {
|
|
16012
|
+
"type": "array",
|
|
16013
|
+
"items": {
|
|
16014
|
+
"anyOf": [
|
|
16015
|
+
{
|
|
16016
|
+
"type": "string",
|
|
16017
|
+
"enum": [
|
|
16018
|
+
"authorization_code"
|
|
16019
|
+
]
|
|
16020
|
+
},
|
|
16021
|
+
{
|
|
16022
|
+
"type": "string",
|
|
16023
|
+
"enum": [
|
|
16024
|
+
"client_credentials"
|
|
16025
|
+
]
|
|
16026
|
+
},
|
|
16027
|
+
{
|
|
16028
|
+
"type": "string",
|
|
16029
|
+
"enum": [
|
|
16030
|
+
"refresh_token"
|
|
16031
|
+
]
|
|
16032
|
+
},
|
|
16033
|
+
{
|
|
16034
|
+
"type": "string",
|
|
16035
|
+
"enum": [
|
|
16036
|
+
"password"
|
|
16037
|
+
]
|
|
16038
|
+
},
|
|
16039
|
+
{
|
|
16040
|
+
"type": "string",
|
|
16041
|
+
"enum": [
|
|
16042
|
+
"http://auth0.com/oauth/grant-type/passwordless/otp"
|
|
16043
|
+
]
|
|
16044
|
+
},
|
|
16045
|
+
{
|
|
16046
|
+
"type": "string",
|
|
16047
|
+
"enum": [
|
|
16048
|
+
"urn:ietf:params:oauth:grant-type:token-exchange"
|
|
16049
|
+
]
|
|
16050
|
+
},
|
|
16051
|
+
{
|
|
16052
|
+
"type": "string",
|
|
16053
|
+
"enum": [
|
|
16054
|
+
"urn:ietf:params:oauth:grant-type:device_code"
|
|
16055
|
+
]
|
|
16056
|
+
},
|
|
16057
|
+
{
|
|
16058
|
+
"type": "string",
|
|
16059
|
+
"enum": [
|
|
16060
|
+
"http://auth0.com/oauth/grant-type/mfa-otp"
|
|
16061
|
+
]
|
|
16062
|
+
},
|
|
16063
|
+
{
|
|
16064
|
+
"type": "string",
|
|
16065
|
+
"enum": [
|
|
16066
|
+
"http://auth0.com/oauth/grant-type/mfa-recovery-code"
|
|
16067
|
+
]
|
|
16068
|
+
}
|
|
16069
|
+
],
|
|
16070
|
+
"description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
|
|
16071
|
+
},
|
|
16072
|
+
"uniqueItems": true
|
|
16073
|
+
},
|
|
15833
16074
|
"metadata": {
|
|
15834
16075
|
"type": "object",
|
|
15835
16076
|
"properties": {},
|
|
@@ -17151,8 +17392,66 @@
|
|
|
17151
17392
|
"grant_types": {
|
|
17152
17393
|
"type": "array",
|
|
17153
17394
|
"items": {
|
|
17154
|
-
"
|
|
17155
|
-
|
|
17395
|
+
"anyOf": [
|
|
17396
|
+
{
|
|
17397
|
+
"type": "string",
|
|
17398
|
+
"enum": [
|
|
17399
|
+
"authorization_code"
|
|
17400
|
+
]
|
|
17401
|
+
},
|
|
17402
|
+
{
|
|
17403
|
+
"type": "string",
|
|
17404
|
+
"enum": [
|
|
17405
|
+
"client_credentials"
|
|
17406
|
+
]
|
|
17407
|
+
},
|
|
17408
|
+
{
|
|
17409
|
+
"type": "string",
|
|
17410
|
+
"enum": [
|
|
17411
|
+
"refresh_token"
|
|
17412
|
+
]
|
|
17413
|
+
},
|
|
17414
|
+
{
|
|
17415
|
+
"type": "string",
|
|
17416
|
+
"enum": [
|
|
17417
|
+
"password"
|
|
17418
|
+
]
|
|
17419
|
+
},
|
|
17420
|
+
{
|
|
17421
|
+
"type": "string",
|
|
17422
|
+
"enum": [
|
|
17423
|
+
"http://auth0.com/oauth/grant-type/passwordless/otp"
|
|
17424
|
+
]
|
|
17425
|
+
},
|
|
17426
|
+
{
|
|
17427
|
+
"type": "string",
|
|
17428
|
+
"enum": [
|
|
17429
|
+
"urn:ietf:params:oauth:grant-type:token-exchange"
|
|
17430
|
+
]
|
|
17431
|
+
},
|
|
17432
|
+
{
|
|
17433
|
+
"type": "string",
|
|
17434
|
+
"enum": [
|
|
17435
|
+
"urn:ietf:params:oauth:grant-type:device_code"
|
|
17436
|
+
]
|
|
17437
|
+
},
|
|
17438
|
+
{
|
|
17439
|
+
"type": "string",
|
|
17440
|
+
"enum": [
|
|
17441
|
+
"http://auth0.com/oauth/grant-type/mfa-otp"
|
|
17442
|
+
]
|
|
17443
|
+
},
|
|
17444
|
+
{
|
|
17445
|
+
"type": "string",
|
|
17446
|
+
"enum": [
|
|
17447
|
+
"http://auth0.com/oauth/grant-type/mfa-recovery-code"
|
|
17448
|
+
]
|
|
17449
|
+
}
|
|
17450
|
+
],
|
|
17451
|
+
"description": "A grant the client may use at the token endpoint. An empty `grant_types` list allows every grant except `password`, which is always opt-in."
|
|
17452
|
+
},
|
|
17453
|
+
"uniqueItems": true,
|
|
17454
|
+
"description": "Grants this client may use at the token endpoint. Empty allows every grant except `password`, which must be listed to be used."
|
|
17156
17455
|
},
|
|
17157
17456
|
"response_types": {
|
|
17158
17457
|
"type": "array",
|
|
@@ -17471,8 +17770,7 @@
|
|
|
17471
17770
|
"type": "object",
|
|
17472
17771
|
"properties": {},
|
|
17473
17772
|
"additionalProperties": true,
|
|
17474
|
-
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta."
|
|
17475
|
-
"default": {}
|
|
17773
|
+
"description": "Free-form client metadata. Replaces the whole object — send the full merged value, not a partial delta. Omit it to leave the metadata untouched."
|
|
17476
17774
|
}
|
|
17477
17775
|
},
|
|
17478
17776
|
"description": "Partial update for a Client. Only the supplied fields are modified. `client_id` and `client_secret` are not editable through this endpoint to prevent accidental rotation; use a dedicated endpoint when secret rotation is added.",
|