@faable/auth-sdk 2.8.24 → 2.8.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -6359,6 +6359,38 @@ export interface components {
6359
6359
  last_login?: string | null;
6360
6360
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
6361
6361
  first_language?: string | null;
6362
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
6363
+ readonly internal_metadata?: {
6364
+ last_ip_info?: {
6365
+ ip: string;
6366
+ country_code?: string;
6367
+ country_name?: string;
6368
+ asn?: number;
6369
+ as_org?: string;
6370
+ datacenter?: boolean;
6371
+ apple_private_relay?: boolean;
6372
+ /** Format: date-time */
6373
+ resolved_at: string;
6374
+ };
6375
+ signup?: {
6376
+ ip?: string;
6377
+ user_agent?: string;
6378
+ language?: string;
6379
+ /** Format: date-time */
6380
+ at: string;
6381
+ ip_info?: {
6382
+ ip: string;
6383
+ country_code?: string;
6384
+ country_name?: string;
6385
+ asn?: number;
6386
+ as_org?: string;
6387
+ datacenter?: boolean;
6388
+ apple_private_relay?: boolean;
6389
+ /** Format: date-time */
6390
+ resolved_at: string;
6391
+ };
6392
+ };
6393
+ };
6362
6394
  /**
6363
6395
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
6364
6396
  * @default false
@@ -6519,6 +6551,8 @@ export interface components {
6519
6551
  };
6520
6552
  UserIpInsight: {
6521
6553
  ip?: string;
6554
+ /** @description `last_login`: the IP of the latest login. `signup`: the user never logged in, so this is the IP of the request that created them. */
6555
+ source?: "last_login" | "signup";
6522
6556
  geo?: {
6523
6557
  country_code?: string;
6524
6558
  country_name?: string;
@@ -14298,6 +14332,38 @@ export interface operations {
14298
14332
  last_login?: string | null;
14299
14333
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
14300
14334
  first_language?: string | null;
14335
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
14336
+ readonly internal_metadata?: {
14337
+ last_ip_info?: {
14338
+ ip: string;
14339
+ country_code?: string;
14340
+ country_name?: string;
14341
+ asn?: number;
14342
+ as_org?: string;
14343
+ datacenter?: boolean;
14344
+ apple_private_relay?: boolean;
14345
+ /** Format: date-time */
14346
+ resolved_at: string;
14347
+ };
14348
+ signup?: {
14349
+ ip?: string;
14350
+ user_agent?: string;
14351
+ language?: string;
14352
+ /** Format: date-time */
14353
+ at: string;
14354
+ ip_info?: {
14355
+ ip: string;
14356
+ country_code?: string;
14357
+ country_name?: string;
14358
+ asn?: number;
14359
+ as_org?: string;
14360
+ datacenter?: boolean;
14361
+ apple_private_relay?: boolean;
14362
+ /** Format: date-time */
14363
+ resolved_at: string;
14364
+ };
14365
+ };
14366
+ };
14301
14367
  /**
14302
14368
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
14303
14369
  * @default false
@@ -14528,6 +14594,38 @@ export interface operations {
14528
14594
  last_login?: string | null;
14529
14595
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
14530
14596
  first_language?: string | null;
14597
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
14598
+ readonly internal_metadata?: {
14599
+ last_ip_info?: {
14600
+ ip: string;
14601
+ country_code?: string;
14602
+ country_name?: string;
14603
+ asn?: number;
14604
+ as_org?: string;
14605
+ datacenter?: boolean;
14606
+ apple_private_relay?: boolean;
14607
+ /** Format: date-time */
14608
+ resolved_at: string;
14609
+ };
14610
+ signup?: {
14611
+ ip?: string;
14612
+ user_agent?: string;
14613
+ language?: string;
14614
+ /** Format: date-time */
14615
+ at: string;
14616
+ ip_info?: {
14617
+ ip: string;
14618
+ country_code?: string;
14619
+ country_name?: string;
14620
+ asn?: number;
14621
+ as_org?: string;
14622
+ datacenter?: boolean;
14623
+ apple_private_relay?: boolean;
14624
+ /** Format: date-time */
14625
+ resolved_at: string;
14626
+ };
14627
+ };
14628
+ };
14531
14629
  /**
14532
14630
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
14533
14631
  * @default false
@@ -14800,6 +14898,38 @@ export interface operations {
14800
14898
  last_login?: string | null;
14801
14899
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
14802
14900
  first_language?: string | null;
14901
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
14902
+ readonly internal_metadata?: {
14903
+ last_ip_info?: {
14904
+ ip: string;
14905
+ country_code?: string;
14906
+ country_name?: string;
14907
+ asn?: number;
14908
+ as_org?: string;
14909
+ datacenter?: boolean;
14910
+ apple_private_relay?: boolean;
14911
+ /** Format: date-time */
14912
+ resolved_at: string;
14913
+ };
14914
+ signup?: {
14915
+ ip?: string;
14916
+ user_agent?: string;
14917
+ language?: string;
14918
+ /** Format: date-time */
14919
+ at: string;
14920
+ ip_info?: {
14921
+ ip: string;
14922
+ country_code?: string;
14923
+ country_name?: string;
14924
+ asn?: number;
14925
+ as_org?: string;
14926
+ datacenter?: boolean;
14927
+ apple_private_relay?: boolean;
14928
+ /** Format: date-time */
14929
+ resolved_at: string;
14930
+ };
14931
+ };
14932
+ };
14803
14933
  /**
14804
14934
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
14805
14935
  * @default false
@@ -15036,6 +15166,38 @@ export interface operations {
15036
15166
  last_login?: string | null;
15037
15167
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
15038
15168
  first_language?: string | null;
15169
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
15170
+ readonly internal_metadata?: {
15171
+ last_ip_info?: {
15172
+ ip: string;
15173
+ country_code?: string;
15174
+ country_name?: string;
15175
+ asn?: number;
15176
+ as_org?: string;
15177
+ datacenter?: boolean;
15178
+ apple_private_relay?: boolean;
15179
+ /** Format: date-time */
15180
+ resolved_at: string;
15181
+ };
15182
+ signup?: {
15183
+ ip?: string;
15184
+ user_agent?: string;
15185
+ language?: string;
15186
+ /** Format: date-time */
15187
+ at: string;
15188
+ ip_info?: {
15189
+ ip: string;
15190
+ country_code?: string;
15191
+ country_name?: string;
15192
+ asn?: number;
15193
+ as_org?: string;
15194
+ datacenter?: boolean;
15195
+ apple_private_relay?: boolean;
15196
+ /** Format: date-time */
15197
+ resolved_at: string;
15198
+ };
15199
+ };
15200
+ };
15039
15201
  /**
15040
15202
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
15041
15203
  * @default false
@@ -32345,6 +32507,38 @@ export interface operations {
32345
32507
  last_login?: string | null;
32346
32508
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
32347
32509
  first_language?: string | null;
32510
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
32511
+ readonly internal_metadata?: {
32512
+ last_ip_info?: {
32513
+ ip: string;
32514
+ country_code?: string;
32515
+ country_name?: string;
32516
+ asn?: number;
32517
+ as_org?: string;
32518
+ datacenter?: boolean;
32519
+ apple_private_relay?: boolean;
32520
+ /** Format: date-time */
32521
+ resolved_at: string;
32522
+ };
32523
+ signup?: {
32524
+ ip?: string;
32525
+ user_agent?: string;
32526
+ language?: string;
32527
+ /** Format: date-time */
32528
+ at: string;
32529
+ ip_info?: {
32530
+ ip: string;
32531
+ country_code?: string;
32532
+ country_name?: string;
32533
+ asn?: number;
32534
+ as_org?: string;
32535
+ datacenter?: boolean;
32536
+ apple_private_relay?: boolean;
32537
+ /** Format: date-time */
32538
+ resolved_at: string;
32539
+ };
32540
+ };
32541
+ };
32348
32542
  /**
32349
32543
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
32350
32544
  * @default false
@@ -32649,6 +32843,38 @@ export interface operations {
32649
32843
  last_login?: string | null;
32650
32844
  /** @description Primary Accept-Language subtag seen at this user's FIRST login (e.g. "zh"). Written once and never updated, so a later login whose language differs is visible as `event.stats.language_changed` in actions — a cross-session signal no single request can produce. */
32651
32845
  first_language?: string | null;
32846
+ /** @description Computed by Faable Auth, never writable through the API. `last_ip_info`: country, network (ASN) and reputation of `last_ip`, resolved after each login. `signup`: the IP, browser and language of the request that created the user, so a user who signed up but never logged in is not a blank — with the same resolution in `ip_info`. IP geolocation by DB-IP (CC BY 4.0). */
32847
+ readonly internal_metadata?: {
32848
+ last_ip_info?: {
32849
+ ip: string;
32850
+ country_code?: string;
32851
+ country_name?: string;
32852
+ asn?: number;
32853
+ as_org?: string;
32854
+ datacenter?: boolean;
32855
+ apple_private_relay?: boolean;
32856
+ /** Format: date-time */
32857
+ resolved_at: string;
32858
+ };
32859
+ signup?: {
32860
+ ip?: string;
32861
+ user_agent?: string;
32862
+ language?: string;
32863
+ /** Format: date-time */
32864
+ at: string;
32865
+ ip_info?: {
32866
+ ip: string;
32867
+ country_code?: string;
32868
+ country_name?: string;
32869
+ asn?: number;
32870
+ as_org?: string;
32871
+ datacenter?: boolean;
32872
+ apple_private_relay?: boolean;
32873
+ /** Format: date-time */
32874
+ resolved_at: string;
32875
+ };
32876
+ };
32877
+ };
32652
32878
  /**
32653
32879
  * @description true while the user is suspended. A suspended user is rejected at every login flow, token grant, session use and management-API call.
32654
32880
  * @default false
package/dist/version.js CHANGED
@@ -9,13 +9,13 @@
9
9
  // login pages could not import the SDK at all. Same pattern as auth-js.
10
10
  //
11
11
  // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
12
- export const version = "2.8.24";
12
+ export const version = "2.8.26";
13
13
  // Short git SHA of the released commit. The version dates a build; this names
14
14
  // the exact tree, so a canonical log line or an audit entry leads straight to
15
15
  // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
16
16
  // link) cannot be mistaken for a real commit — auth only records values that
17
17
  // look like a SHA, and this one never will.
18
- export const commit = "77a6222";
18
+ export const commit = "80ea0ef";
19
19
  // What this SDK writes in `x-faable-client`. Exported for a consumer that
20
20
  // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
21
21
  // token request attributed — a bare `authClientCredentials` stamps only what
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/auth-sdk",
3
- "version": "2.8.24",
3
+ "version": "2.8.26",
4
4
  "author": "Marc Pomar <marc@faable.com>",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",