@faable/auth-sdk 2.8.11 → 2.8.12

package/dist/api/types.d.ts

@@ -33470,8 +33470,10 @@ export interface operations {
             query: {
                 /** @description A ticket from `POST /oauth/link_ticket`, single use. */
                 ticket: string;
-                /** @description Where to go once the session is open: a path of this host under `/flow/` (e.g. `/flow/account/security?client_id=…`). */
+                /** @description Where to go once the session is open: a path of this host under `/flow/` (e.g. `/flow/account/security?client_id=…`), or — with `client_id` — a URL on one of that client’s own origins (its `web_origins` or the origin of a registered callback). */
                 redirect_to: string;
+                /** @description The OAuth `client_id` the ticket was minted for. Required when `redirect_to` leaves `/flow/`: it is what the return URL is checked against, before the ticket is spent. */
+                client_id?: string;
             };
             header?: never;
             path?: never;

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.8.11";
+export const version = "2.8.12";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "3a3fd61";
+export const commit = "a76f608";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.8.11",
+  "version": "2.8.12",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.83.0",
+    "version": "2.83.1",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -72150,7 +72150,16 @@
             "in": "query",
             "name": "redirect_to",
             "required": true,
-            "description": "Where to go once the session is open: a path of this host under `/flow/` (e.g. `/flow/account/security?client_id=…`)."
+            "description": "Where to go once the session is open: a path of this host under `/flow/` (e.g. `/flow/account/security?client_id=…`), or — with `client_id` — a URL on one of that client’s own origins (its `web_origins` or the origin of a registered callback)."
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "client_id",
+            "required": false,
+            "description": "The OAuth `client_id` the ticket was minted for. Required when `redirect_to` leaves `/flow/`: it is what the return URL is checked against, before the ticket is spent."
           }
         ],
         "responses": {