@faable/auth-sdk 2.7.66 → 2.7.68

package/dist/api/generated-client.d.ts

@@ -441,7 +441,22 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 mode?: "required" | "optional" | "off" | undefined;
                 allowed_factors?: ("webauthn" | "totp")[] | undefined;
                 remember_device_days?: number | undefined;
-            } | undefined;
+            } | undefined; /**
+             * `GET /user/{user_id}/factors` — operationId: `user/factors`
+             *
+             * List a user's second factors
+             *
+             * Management view of the security methods a user has enrolled. Carries no secret material — TOTP seeds and recovery-code hashes are redacted by the store, so this endpoint cannot be used to impersonate the user.
+             *
+             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
+             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
+             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
+             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
+             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
+             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
+             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
+             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
+             */
             recovery_channels?: {
                 enabled?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;
@@ -502,7 +517,22 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 mode?: "required" | "optional" | "off" | undefined;
                 allowed_factors?: ("webauthn" | "totp")[] | undefined;
                 remember_device_days?: number | undefined;
-            } | undefined;
+            } | undefined; /**
+             * `GET /user/{user_id}/factors` — operationId: `user/factors`
+             *
+             * List a user's second factors
+             *
+             * Management view of the security methods a user has enrolled. Carries no secret material — TOTP seeds and recovery-code hashes are redacted by the store, so this endpoint cannot be used to impersonate the user.
+             *
+             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
+             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
+             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
+             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
+             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
+             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
+             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
+             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
+             */
             recovery_channels?: {
                 enabled?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;
@@ -566,7 +596,22 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 mode?: "required" | "optional" | "off" | undefined;
                 allowed_factors?: ("webauthn" | "totp")[] | undefined;
                 remember_device_days?: number | undefined;
-            } | undefined;
+            } | undefined; /**
+             * `GET /user/{user_id}/factors` — operationId: `user/factors`
+             *
+             * List a user's second factors
+             *
+             * Management view of the security methods a user has enrolled. Carries no secret material — TOTP seeds and recovery-code hashes are redacted by the store, so this endpoint cannot be used to impersonate the user.
+             *
+             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
+             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
+             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
+             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
+             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
+             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
+             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
+             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
+             */
             recovery_channels?: {
                 enabled?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;

package/dist/api/types.d.ts

@@ -3303,6 +3303,8 @@ export interface paths {
                     "application/json": {
                         client_id: string;
                         redirect_to?: string;
+                        /** @description The login's key from `/authorize`. Only ties the ceremony to that login for tracing; not consumed, never rejects (`/passkey/login/verify` is the step that uses it). */
+                        state?: string;
                     };
                 };
             };
@@ -26680,6 +26682,8 @@ export interface operations {
                     auth_params?: {
                         [key: string]: string;
                     };
+                    /** @description The login's key from `/authorize` — the hosted screen's `?state=`. Only ties the code this start issues to that login for tracing; it is not consumed and never rejects the request (`/passwordless/verify_code` is the step that uses it). */
+                    state?: string;
                 };
             };
         };

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.7.66";
+export const version = "2.7.68";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "b40ea33";
+export const commit = "46acf9c";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.7.66",
+  "version": "2.7.68",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.53.0",
+    "version": "2.55.0",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -54922,6 +54922,10 @@
                     "additionalProperties": {
                       "type": "string"
                     }
+                  },
+                  "state": {
+                    "type": "string",
+                    "description": "The login's key from `/authorize` — the hosted screen's `?state=`. Only ties the code this start issues to that login for tracing; it is not consumed and never rejects the request (`/passwordless/verify_code` is the step that uses it)."
                   }
                 }
               }
@@ -57073,6 +57077,10 @@
                   },
                   "redirect_to": {
                     "type": "string"
+                  },
+                  "state": {
+                    "type": "string",
+                    "description": "The login's key from `/authorize`. Only ties the ceremony to that login for tracing; not consumed, never rejects (`/passkey/login/verify` is the step that uses it)."
                   }
                 }
               }