@frontegg/rest-api 3.0.138 → 3.0.140
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/constants.d.ts +13 -0
- package/constants.js +13 -0
- package/index.d.ts +4 -0
- package/index.js +5 -2
- package/node/constants.js +13 -0
- package/node/index.js +19 -2
- package/node/security-center/index.js +19 -0
- package/node/security-center/interfaces.js +85 -0
- package/node/users/index.js +5 -0
- package/package.json +1 -1
- package/security-center/index.d.ts +3 -0
- package/security-center/index.js +8 -0
- package/security-center/interfaces.d.ts +117 -0
- package/security-center/interfaces.js +74 -0
- package/security-center/package.json +6 -0
- package/users/index.d.ts +1 -0
- package/users/index.js +3 -0
package/constants.d.ts
CHANGED
|
@@ -43,6 +43,11 @@ export declare const urls: {
|
|
|
43
43
|
v1: string;
|
|
44
44
|
};
|
|
45
45
|
};
|
|
46
|
+
passwords: {
|
|
47
|
+
resetBreachedPasswords: {
|
|
48
|
+
v1: string;
|
|
49
|
+
};
|
|
50
|
+
};
|
|
46
51
|
};
|
|
47
52
|
configurations: {
|
|
48
53
|
v1: string;
|
|
@@ -238,5 +243,13 @@ export declare const urls: {
|
|
|
238
243
|
entitlements: {
|
|
239
244
|
v1: string;
|
|
240
245
|
};
|
|
246
|
+
securityCenter: {
|
|
247
|
+
recommendations: {
|
|
248
|
+
v1: string;
|
|
249
|
+
};
|
|
250
|
+
insights: {
|
|
251
|
+
v1: string;
|
|
252
|
+
};
|
|
253
|
+
};
|
|
241
254
|
};
|
|
242
255
|
export declare const GENERIC_ERROR_MESSAGE = "We're facing some difficulties, Please try again";
|
package/constants.js
CHANGED
|
@@ -42,6 +42,11 @@ export const urls = {
|
|
|
42
42
|
resendAll: {
|
|
43
43
|
v1: '/identity/resources/users/v1/invitation/reset/all'
|
|
44
44
|
}
|
|
45
|
+
},
|
|
46
|
+
passwords: {
|
|
47
|
+
resetBreachedPasswords: {
|
|
48
|
+
v1: 'identity/resources/users/v1/passwords/breached/reset/bulk'
|
|
49
|
+
}
|
|
45
50
|
}
|
|
46
51
|
},
|
|
47
52
|
configurations: {
|
|
@@ -237,6 +242,14 @@ export const urls = {
|
|
|
237
242
|
},
|
|
238
243
|
entitlements: {
|
|
239
244
|
v1: '/entitlements/api/v1/user-entitlements'
|
|
245
|
+
},
|
|
246
|
+
securityCenter: {
|
|
247
|
+
recommendations: {
|
|
248
|
+
v1: '/security-center/resources/v1/security-center'
|
|
249
|
+
},
|
|
250
|
+
insights: {
|
|
251
|
+
v1: '/security-center/resources/v1/insights'
|
|
252
|
+
}
|
|
240
253
|
}
|
|
241
254
|
};
|
|
242
255
|
export const GENERIC_ERROR_MESSAGE = `We're facing some difficulties, Please try again`;
|
package/index.d.ts
CHANGED
|
@@ -21,6 +21,7 @@ import * as impersonate from "./impersonate";
|
|
|
21
21
|
import * as groups from "./groups";
|
|
22
22
|
import * as users from "./users";
|
|
23
23
|
import * as entitlements from "./entitlements";
|
|
24
|
+
import * as securityCenter from "./security-center";
|
|
24
25
|
import { ContextHolder, FronteggContext } from "./ContextHolder";
|
|
25
26
|
export * from "./interfaces";
|
|
26
27
|
export * from "./auth/interfaces";
|
|
@@ -46,6 +47,7 @@ export * from "./groups/interfaces";
|
|
|
46
47
|
export * from "./groups/enums";
|
|
47
48
|
export * from "./users/interfaces";
|
|
48
49
|
export * from "./entitlements/interfaces";
|
|
50
|
+
export * from "./security-center/interfaces";
|
|
49
51
|
declare const api: {
|
|
50
52
|
auth: typeof auth;
|
|
51
53
|
teams: typeof teams;
|
|
@@ -66,6 +68,7 @@ declare const api: {
|
|
|
66
68
|
groups: typeof groups;
|
|
67
69
|
users: typeof users;
|
|
68
70
|
entitlements: typeof entitlements;
|
|
71
|
+
securityCenter: typeof securityCenter;
|
|
69
72
|
};
|
|
70
73
|
export { fetch, ContextHolder, FronteggContext, api, FronteggApiError, AuthStrategyEnum, SocialLoginProviders, ISubscriptionCancellationPolicy, ISubscriptionStatus, PaymentMethodType, ProviderType, MachineToMachineAuthStrategy, };
|
|
71
74
|
declare const _default: {
|
|
@@ -98,6 +101,7 @@ declare const _default: {
|
|
|
98
101
|
groups: typeof groups;
|
|
99
102
|
users: typeof users;
|
|
100
103
|
entitlements: typeof entitlements;
|
|
104
|
+
securityCenter: typeof securityCenter;
|
|
101
105
|
};
|
|
102
106
|
FronteggApiError: typeof FronteggApiError;
|
|
103
107
|
AuthStrategyEnum: typeof auth.AuthStrategyEnum;
|
package/index.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
/** @license Frontegg v3.0.
|
|
1
|
+
/** @license Frontegg v3.0.140
|
|
2
2
|
*
|
|
3
3
|
* This source code is licensed under the MIT license found in the
|
|
4
4
|
* LICENSE file in the root directory of this source tree.
|
|
@@ -26,6 +26,7 @@ import * as impersonate from "./impersonate";
|
|
|
26
26
|
import * as groups from "./groups";
|
|
27
27
|
import * as users from "./users";
|
|
28
28
|
import * as entitlements from "./entitlements";
|
|
29
|
+
import * as securityCenter from "./security-center";
|
|
29
30
|
import { ContextHolder, FronteggContext } from "./ContextHolder";
|
|
30
31
|
export * from "./interfaces";
|
|
31
32
|
export * from "./auth/interfaces";
|
|
@@ -51,6 +52,7 @@ export * from "./groups/interfaces";
|
|
|
51
52
|
export * from "./groups/enums";
|
|
52
53
|
export * from "./users/interfaces";
|
|
53
54
|
export * from "./entitlements/interfaces";
|
|
55
|
+
export * from "./security-center/interfaces";
|
|
54
56
|
const api = {
|
|
55
57
|
auth,
|
|
56
58
|
teams,
|
|
@@ -70,7 +72,8 @@ const api = {
|
|
|
70
72
|
impersonate,
|
|
71
73
|
groups,
|
|
72
74
|
users,
|
|
73
|
-
entitlements
|
|
75
|
+
entitlements,
|
|
76
|
+
securityCenter
|
|
74
77
|
};
|
|
75
78
|
export { fetch, ContextHolder, FronteggContext, api, FronteggApiError, AuthStrategyEnum, SocialLoginProviders, ISubscriptionCancellationPolicy, ISubscriptionStatus, PaymentMethodType, ProviderType, MachineToMachineAuthStrategy };
|
|
76
79
|
export default {
|
package/node/constants.js
CHANGED
|
@@ -48,6 +48,11 @@ const urls = {
|
|
|
48
48
|
resendAll: {
|
|
49
49
|
v1: '/identity/resources/users/v1/invitation/reset/all'
|
|
50
50
|
}
|
|
51
|
+
},
|
|
52
|
+
passwords: {
|
|
53
|
+
resetBreachedPasswords: {
|
|
54
|
+
v1: 'identity/resources/users/v1/passwords/breached/reset/bulk'
|
|
55
|
+
}
|
|
51
56
|
}
|
|
52
57
|
},
|
|
53
58
|
configurations: {
|
|
@@ -243,6 +248,14 @@ const urls = {
|
|
|
243
248
|
},
|
|
244
249
|
entitlements: {
|
|
245
250
|
v1: '/entitlements/api/v1/user-entitlements'
|
|
251
|
+
},
|
|
252
|
+
securityCenter: {
|
|
253
|
+
recommendations: {
|
|
254
|
+
v1: '/security-center/resources/v1/security-center'
|
|
255
|
+
},
|
|
256
|
+
insights: {
|
|
257
|
+
v1: '/security-center/resources/v1/insights'
|
|
258
|
+
}
|
|
246
259
|
}
|
|
247
260
|
};
|
|
248
261
|
exports.urls = urls;
|
package/node/index.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
/** @license Frontegg v3.0.
|
|
1
|
+
/** @license Frontegg v3.0.140
|
|
2
2
|
*
|
|
3
3
|
* This source code is licensed under the MIT license found in the
|
|
4
4
|
* LICENSE file in the root directory of this source tree.
|
|
@@ -128,6 +128,8 @@ var users = _interopRequireWildcard(require("./users"));
|
|
|
128
128
|
|
|
129
129
|
var entitlements = _interopRequireWildcard(require("./entitlements"));
|
|
130
130
|
|
|
131
|
+
var securityCenter = _interopRequireWildcard(require("./security-center"));
|
|
132
|
+
|
|
131
133
|
var _ContextHolder = require("./ContextHolder");
|
|
132
134
|
|
|
133
135
|
var _interfaces = require("./interfaces");
|
|
@@ -466,6 +468,20 @@ Object.keys(_interfaces20).forEach(function (key) {
|
|
|
466
468
|
});
|
|
467
469
|
});
|
|
468
470
|
|
|
471
|
+
var _interfaces21 = require("./security-center/interfaces");
|
|
472
|
+
|
|
473
|
+
Object.keys(_interfaces21).forEach(function (key) {
|
|
474
|
+
if (key === "default" || key === "__esModule") return;
|
|
475
|
+
if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
|
|
476
|
+
if (key in exports && exports[key] === _interfaces21[key]) return;
|
|
477
|
+
Object.defineProperty(exports, key, {
|
|
478
|
+
enumerable: true,
|
|
479
|
+
get: function () {
|
|
480
|
+
return _interfaces21[key];
|
|
481
|
+
}
|
|
482
|
+
});
|
|
483
|
+
});
|
|
484
|
+
|
|
469
485
|
function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
|
|
470
486
|
|
|
471
487
|
function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
|
|
@@ -489,7 +505,8 @@ const api = {
|
|
|
489
505
|
impersonate,
|
|
490
506
|
groups,
|
|
491
507
|
users,
|
|
492
|
-
entitlements
|
|
508
|
+
entitlements,
|
|
509
|
+
securityCenter
|
|
493
510
|
};
|
|
494
511
|
exports.api = api;
|
|
495
512
|
var _default = {
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, "__esModule", {
|
|
4
|
+
value: true
|
|
5
|
+
});
|
|
6
|
+
exports.getInsights = getInsights;
|
|
7
|
+
exports.getRecommendations = getRecommendations;
|
|
8
|
+
|
|
9
|
+
var _fetch = require("../fetch");
|
|
10
|
+
|
|
11
|
+
var _constants = require("../constants");
|
|
12
|
+
|
|
13
|
+
async function getRecommendations() {
|
|
14
|
+
return (0, _fetch.Get)(_constants.urls.securityCenter.recommendations.v1);
|
|
15
|
+
}
|
|
16
|
+
|
|
17
|
+
async function getInsights() {
|
|
18
|
+
return (0, _fetch.Get)(_constants.urls.securityCenter.insights.v1);
|
|
19
|
+
}
|
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
|
|
3
|
+
Object.defineProperty(exports, "__esModule", {
|
|
4
|
+
value: true
|
|
5
|
+
});
|
|
6
|
+
exports.SecurityCategory = exports.RecommendationSeverity = exports.RecommendationCode = exports.RecommendationActionKey = exports.InsightCode = void 0;
|
|
7
|
+
let RecommendationCode;
|
|
8
|
+
exports.RecommendationCode = RecommendationCode;
|
|
9
|
+
|
|
10
|
+
(function (RecommendationCode) {
|
|
11
|
+
RecommendationCode["FORCE_MFA"] = "FORCE_MFA";
|
|
12
|
+
RecommendationCode["BREACHED_PASSWORDS_EXIST"] = "BREACHED_PASSWORDS_EXIST";
|
|
13
|
+
RecommendationCode["ENABLE_USER_LOCKOUT"] = "ENABLE_USER_LOCKOUT";
|
|
14
|
+
RecommendationCode["STRENGTHEN_USER_LOCKOUT"] = "STRENGTHEN_USER_LOCKOUT";
|
|
15
|
+
RecommendationCode["ENABLE_PASSWORD_HISTORY"] = "ENABLE_PASSWORD_HISTORY";
|
|
16
|
+
RecommendationCode["STRENGTHEN_PASSWORD_HISTORY"] = "STRENGTHEN_PASSWORD_HISTORY";
|
|
17
|
+
RecommendationCode["ENABLE_FORCE_RELOGIN"] = "ENABLE_FORCE_RELOGIN";
|
|
18
|
+
RecommendationCode["SET_FORCE_RELOGIN"] = "SET_FORCE_RELOGIN";
|
|
19
|
+
RecommendationCode["ENABLE_SESSION_CONCURRENCY"] = "ENABLE_SESSION_CONCURRENCY";
|
|
20
|
+
RecommendationCode["SET_SESSION_CONCURRENCY"] = "SET_SESSION_CONCURRENCY";
|
|
21
|
+
RecommendationCode["ENABLE_IDLE_SESSION"] = "ENABLE_IDLE_SESSION";
|
|
22
|
+
RecommendationCode["SET_IDLE_SESSION"] = "SET_IDLE_SESSION";
|
|
23
|
+
RecommendationCode["ENABLE_IP_RESTRICTIONS"] = "ENABLE_IP_RESTRICTIONS";
|
|
24
|
+
RecommendationCode["CHANGE_IP_TO_ALLOWLIST"] = "CHANGE_IP_TO_ALLOWLIST";
|
|
25
|
+
RecommendationCode["ENABLE_DOMAIN_RESTRICTION"] = "ENABLE_DOMAIN_RESTRICTIONS";
|
|
26
|
+
RecommendationCode["CHANGE_DOMAIN_TO_ALLOWLIST"] = "CHANGE_DOMAIN_TO_ALLOWLIST";
|
|
27
|
+
RecommendationCode["REMOVE_STALE_USERS"] = "REMOVE_STALE_USERS";
|
|
28
|
+
})(RecommendationCode || (exports.RecommendationCode = RecommendationCode = {}));
|
|
29
|
+
|
|
30
|
+
let InsightCode;
|
|
31
|
+
exports.InsightCode = InsightCode;
|
|
32
|
+
|
|
33
|
+
(function (InsightCode) {
|
|
34
|
+
InsightCode["MFA_FORCED"] = "MFA_FORCED";
|
|
35
|
+
InsightCode["PARTIALLY_FORCED_MFA"] = "PARTIALLY_FORCED_MFA";
|
|
36
|
+
InsightCode["PARTIAL_MFA_USAGE"] = "PARTIAL_MFA_USAGE";
|
|
37
|
+
InsightCode["FULL_MFA_USAGE"] = "FULL_MFA_USAGE";
|
|
38
|
+
InsightCode["BREACHED_PASSWORD_USERS_EXIST"] = "BREACHED_PASSWORD_USERS_EXIST";
|
|
39
|
+
InsightCode["IMPROVE_LOCKOUT_POLICY"] = "IMPROVE_LOCKOUT_POLICY";
|
|
40
|
+
InsightCode["IMPROVE_PASSWORD_HISTORY_POLICY"] = "IMPROVE_PASSWORD_HISTORY_POLICY";
|
|
41
|
+
InsightCode["NO_SESSION_SETTINGS"] = "NO_SESSION_SETTINGS";
|
|
42
|
+
InsightCode["PARTIAL_SESSION_SETTINGS"] = "PARTIAL_SESSION_SETTINGS";
|
|
43
|
+
InsightCode["PARTIAL_INCORRECT_SESSION_SETTINGS"] = "PARTIAL_INCORRECT_SESSION_SETTINGS";
|
|
44
|
+
InsightCode["FULL_SESSION_SETTINGS"] = "FULL_SESSION_SETTINGS";
|
|
45
|
+
InsightCode["FULL_INCORRECT_SESSION_SETTINGS"] = "FULL_INCORRECT_SESSION_SETTINGS";
|
|
46
|
+
InsightCode["STALE_USERS_EXIST"] = "STALE_USERS_EXIST";
|
|
47
|
+
InsightCode["NO_STALE_USERS_EXIST"] = "NO_STALE_USERS_EXIST";
|
|
48
|
+
InsightCode["NO_IP_RESTRICTIONS"] = "NO_IP_RESTRICTIONS";
|
|
49
|
+
InsightCode["IP_ALLOWLIST"] = "IP_ALLOWLIST";
|
|
50
|
+
InsightCode["IP_DENYLIST"] = "IP_DENYLIST";
|
|
51
|
+
InsightCode["NO_DOMAIN_RESTRICTIONS"] = "NO_DOMAIN_RESTRICTIONS";
|
|
52
|
+
InsightCode["DOMAIN_ALLOWLIST"] = "DOMAIN_ALLOWLIST";
|
|
53
|
+
InsightCode["DOMAIN_DENYLIST"] = "DOMAIN_DENYLIST";
|
|
54
|
+
})(InsightCode || (exports.InsightCode = InsightCode = {}));
|
|
55
|
+
|
|
56
|
+
let RecommendationActionKey;
|
|
57
|
+
exports.RecommendationActionKey = RecommendationActionKey;
|
|
58
|
+
|
|
59
|
+
(function (RecommendationActionKey) {
|
|
60
|
+
RecommendationActionKey["SEND_RESET_BREACHED_PASSWORD_EMAIL"] = "SEND_RESET_BREACHED_PASSWORD_EMAIL";
|
|
61
|
+
RecommendationActionKey["ADJUST_FORCE_RELOGIN"] = "ADJUST_FORCE_RELOGIN";
|
|
62
|
+
RecommendationActionKey["ADJUST_MAX_CONCURRENT_SESSIONS"] = "ADJUST_MAX_CONCURRENT_SESSIONS";
|
|
63
|
+
RecommendationActionKey["ADJUST_IDLE_TIMEOUT"] = "ADJUST_IDLE_TIMEOUT";
|
|
64
|
+
RecommendationActionKey["REMOVE_STALE_USERS"] = "REMOVE_STALE_USERS";
|
|
65
|
+
})(RecommendationActionKey || (exports.RecommendationActionKey = RecommendationActionKey = {}));
|
|
66
|
+
|
|
67
|
+
let RecommendationSeverity;
|
|
68
|
+
exports.RecommendationSeverity = RecommendationSeverity;
|
|
69
|
+
|
|
70
|
+
(function (RecommendationSeverity) {
|
|
71
|
+
RecommendationSeverity["SEVERE"] = "SEVERE";
|
|
72
|
+
RecommendationSeverity["WARNING"] = "WARNING";
|
|
73
|
+
RecommendationSeverity["INFO"] = "INFO";
|
|
74
|
+
})(RecommendationSeverity || (exports.RecommendationSeverity = RecommendationSeverity = {}));
|
|
75
|
+
|
|
76
|
+
let SecurityCategory;
|
|
77
|
+
exports.SecurityCategory = SecurityCategory;
|
|
78
|
+
|
|
79
|
+
(function (SecurityCategory) {
|
|
80
|
+
SecurityCategory["MFA"] = "MFA";
|
|
81
|
+
SecurityCategory["SESSIONS"] = "SESSIONS";
|
|
82
|
+
SecurityCategory["PASSWORD"] = "PASSWORD";
|
|
83
|
+
SecurityCategory["INACTIVITY"] = "INACTIVITY";
|
|
84
|
+
SecurityCategory["RESTRICTIONS"] = "RESTRICTIONS";
|
|
85
|
+
})(SecurityCategory || (exports.SecurityCategory = SecurityCategory = {}));
|
package/node/users/index.js
CHANGED
|
@@ -11,6 +11,7 @@ exports.getUsersGroups = getUsersGroups;
|
|
|
11
11
|
exports.getUsersRoles = getUsersRoles;
|
|
12
12
|
exports.getUsersV2 = getUsersV2;
|
|
13
13
|
exports.getUsersV3 = getUsersV3;
|
|
14
|
+
exports.sendResetBreachedPasswordEmails = sendResetBreachedPasswordEmails;
|
|
14
15
|
|
|
15
16
|
var _extends2 = _interopRequireDefault(require("@babel/runtime/helpers/extends"));
|
|
16
17
|
|
|
@@ -54,4 +55,8 @@ async function getCurrentUserTenantsV3(options) {
|
|
|
54
55
|
return (0, _fetch.Get)(_constants.urls.identity.users.tenants.me.v3, undefined, {
|
|
55
56
|
headers: (0, _fetch.extractHeadersFromOptions)(options)
|
|
56
57
|
});
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
async function sendResetBreachedPasswordEmails() {
|
|
61
|
+
return (0, _fetch.Post)(_constants.urls.identity.users.passwords.resetBreachedPasswords.v1);
|
|
57
62
|
}
|
package/package.json
CHANGED
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { Get } from '../fetch';
|
|
2
|
+
import { urls } from '../constants';
|
|
3
|
+
export async function getRecommendations() {
|
|
4
|
+
return Get(urls.securityCenter.recommendations.v1);
|
|
5
|
+
}
|
|
6
|
+
export async function getInsights() {
|
|
7
|
+
return Get(urls.securityCenter.insights.v1);
|
|
8
|
+
}
|
|
@@ -0,0 +1,117 @@
|
|
|
1
|
+
export interface Recommendation {
|
|
2
|
+
code: RecommendationCode;
|
|
3
|
+
severity: RecommendationSeverity;
|
|
4
|
+
category: SecurityCategory;
|
|
5
|
+
actions?: RecommendationAction[];
|
|
6
|
+
metadata?: RecommendationMetadata;
|
|
7
|
+
}
|
|
8
|
+
export interface Insight {
|
|
9
|
+
code: InsightCode;
|
|
10
|
+
metadata?: InsightsMetadata;
|
|
11
|
+
}
|
|
12
|
+
interface BaseRecommendationMetadata {
|
|
13
|
+
totalUsers?: number;
|
|
14
|
+
mfa?: {
|
|
15
|
+
enrolledUsersCount?: number;
|
|
16
|
+
};
|
|
17
|
+
inactivity?: {
|
|
18
|
+
staleUsersCount?: number;
|
|
19
|
+
};
|
|
20
|
+
password?: {
|
|
21
|
+
breachedPasswordUsersCount?: number;
|
|
22
|
+
historyRecommendations?: number;
|
|
23
|
+
userLockoutRecommendation?: number;
|
|
24
|
+
};
|
|
25
|
+
sessions?: {
|
|
26
|
+
configuredSessionSettings?: number;
|
|
27
|
+
forceReloginRecommendation?: number;
|
|
28
|
+
concurrencyRecommendation?: number;
|
|
29
|
+
idleTimeoutRecommendation?: number;
|
|
30
|
+
};
|
|
31
|
+
restrictions?: {
|
|
32
|
+
ipsCount?: number;
|
|
33
|
+
domainsCount?: number;
|
|
34
|
+
};
|
|
35
|
+
}
|
|
36
|
+
export declare type RecommendationMetadata = BaseRecommendationMetadata;
|
|
37
|
+
export declare type InsightsMetadata = BaseRecommendationMetadata;
|
|
38
|
+
export declare enum RecommendationCode {
|
|
39
|
+
FORCE_MFA = "FORCE_MFA",
|
|
40
|
+
BREACHED_PASSWORDS_EXIST = "BREACHED_PASSWORDS_EXIST",
|
|
41
|
+
ENABLE_USER_LOCKOUT = "ENABLE_USER_LOCKOUT",
|
|
42
|
+
STRENGTHEN_USER_LOCKOUT = "STRENGTHEN_USER_LOCKOUT",
|
|
43
|
+
ENABLE_PASSWORD_HISTORY = "ENABLE_PASSWORD_HISTORY",
|
|
44
|
+
STRENGTHEN_PASSWORD_HISTORY = "STRENGTHEN_PASSWORD_HISTORY",
|
|
45
|
+
ENABLE_FORCE_RELOGIN = "ENABLE_FORCE_RELOGIN",
|
|
46
|
+
SET_FORCE_RELOGIN = "SET_FORCE_RELOGIN",
|
|
47
|
+
ENABLE_SESSION_CONCURRENCY = "ENABLE_SESSION_CONCURRENCY",
|
|
48
|
+
SET_SESSION_CONCURRENCY = "SET_SESSION_CONCURRENCY",
|
|
49
|
+
ENABLE_IDLE_SESSION = "ENABLE_IDLE_SESSION",
|
|
50
|
+
SET_IDLE_SESSION = "SET_IDLE_SESSION",
|
|
51
|
+
ENABLE_IP_RESTRICTIONS = "ENABLE_IP_RESTRICTIONS",
|
|
52
|
+
CHANGE_IP_TO_ALLOWLIST = "CHANGE_IP_TO_ALLOWLIST",
|
|
53
|
+
ENABLE_DOMAIN_RESTRICTION = "ENABLE_DOMAIN_RESTRICTIONS",
|
|
54
|
+
CHANGE_DOMAIN_TO_ALLOWLIST = "CHANGE_DOMAIN_TO_ALLOWLIST",
|
|
55
|
+
REMOVE_STALE_USERS = "REMOVE_STALE_USERS"
|
|
56
|
+
}
|
|
57
|
+
export declare enum InsightCode {
|
|
58
|
+
MFA_FORCED = "MFA_FORCED",
|
|
59
|
+
PARTIALLY_FORCED_MFA = "PARTIALLY_FORCED_MFA",
|
|
60
|
+
PARTIAL_MFA_USAGE = "PARTIAL_MFA_USAGE",
|
|
61
|
+
FULL_MFA_USAGE = "FULL_MFA_USAGE",
|
|
62
|
+
BREACHED_PASSWORD_USERS_EXIST = "BREACHED_PASSWORD_USERS_EXIST",
|
|
63
|
+
IMPROVE_LOCKOUT_POLICY = "IMPROVE_LOCKOUT_POLICY",
|
|
64
|
+
IMPROVE_PASSWORD_HISTORY_POLICY = "IMPROVE_PASSWORD_HISTORY_POLICY",
|
|
65
|
+
NO_SESSION_SETTINGS = "NO_SESSION_SETTINGS",
|
|
66
|
+
PARTIAL_SESSION_SETTINGS = "PARTIAL_SESSION_SETTINGS",
|
|
67
|
+
PARTIAL_INCORRECT_SESSION_SETTINGS = "PARTIAL_INCORRECT_SESSION_SETTINGS",
|
|
68
|
+
FULL_SESSION_SETTINGS = "FULL_SESSION_SETTINGS",
|
|
69
|
+
FULL_INCORRECT_SESSION_SETTINGS = "FULL_INCORRECT_SESSION_SETTINGS",
|
|
70
|
+
STALE_USERS_EXIST = "STALE_USERS_EXIST",
|
|
71
|
+
NO_STALE_USERS_EXIST = "NO_STALE_USERS_EXIST",
|
|
72
|
+
NO_IP_RESTRICTIONS = "NO_IP_RESTRICTIONS",
|
|
73
|
+
IP_ALLOWLIST = "IP_ALLOWLIST",
|
|
74
|
+
IP_DENYLIST = "IP_DENYLIST",
|
|
75
|
+
NO_DOMAIN_RESTRICTIONS = "NO_DOMAIN_RESTRICTIONS",
|
|
76
|
+
DOMAIN_ALLOWLIST = "DOMAIN_ALLOWLIST",
|
|
77
|
+
DOMAIN_DENYLIST = "DOMAIN_DENYLIST"
|
|
78
|
+
}
|
|
79
|
+
export interface RecommendationAction {
|
|
80
|
+
key: RecommendationActionKey;
|
|
81
|
+
}
|
|
82
|
+
export declare enum RecommendationActionKey {
|
|
83
|
+
SEND_RESET_BREACHED_PASSWORD_EMAIL = "SEND_RESET_BREACHED_PASSWORD_EMAIL",
|
|
84
|
+
ADJUST_FORCE_RELOGIN = "ADJUST_FORCE_RELOGIN",
|
|
85
|
+
ADJUST_MAX_CONCURRENT_SESSIONS = "ADJUST_MAX_CONCURRENT_SESSIONS",
|
|
86
|
+
ADJUST_IDLE_TIMEOUT = "ADJUST_IDLE_TIMEOUT",
|
|
87
|
+
REMOVE_STALE_USERS = "REMOVE_STALE_USERS"
|
|
88
|
+
}
|
|
89
|
+
export declare enum RecommendationSeverity {
|
|
90
|
+
SEVERE = "SEVERE",
|
|
91
|
+
WARNING = "WARNING",
|
|
92
|
+
INFO = "INFO"
|
|
93
|
+
}
|
|
94
|
+
export declare enum SecurityCategory {
|
|
95
|
+
MFA = "MFA",
|
|
96
|
+
SESSIONS = "SESSIONS",
|
|
97
|
+
PASSWORD = "PASSWORD",
|
|
98
|
+
INACTIVITY = "INACTIVITY",
|
|
99
|
+
RESTRICTIONS = "RESTRICTIONS"
|
|
100
|
+
}
|
|
101
|
+
export interface ScoringResponse {
|
|
102
|
+
score: number;
|
|
103
|
+
}
|
|
104
|
+
export interface RecommendationsResponse {
|
|
105
|
+
items: Recommendation[];
|
|
106
|
+
}
|
|
107
|
+
export interface GetRecommendationsResponse {
|
|
108
|
+
scoring: ScoringResponse;
|
|
109
|
+
recommendations: RecommendationsResponse;
|
|
110
|
+
}
|
|
111
|
+
export interface InsightsResponse {
|
|
112
|
+
items: Insight[];
|
|
113
|
+
}
|
|
114
|
+
export interface GetInsightsResponse {
|
|
115
|
+
insights: InsightsResponse;
|
|
116
|
+
}
|
|
117
|
+
export {};
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
export let RecommendationCode;
|
|
2
|
+
|
|
3
|
+
(function (RecommendationCode) {
|
|
4
|
+
RecommendationCode["FORCE_MFA"] = "FORCE_MFA";
|
|
5
|
+
RecommendationCode["BREACHED_PASSWORDS_EXIST"] = "BREACHED_PASSWORDS_EXIST";
|
|
6
|
+
RecommendationCode["ENABLE_USER_LOCKOUT"] = "ENABLE_USER_LOCKOUT";
|
|
7
|
+
RecommendationCode["STRENGTHEN_USER_LOCKOUT"] = "STRENGTHEN_USER_LOCKOUT";
|
|
8
|
+
RecommendationCode["ENABLE_PASSWORD_HISTORY"] = "ENABLE_PASSWORD_HISTORY";
|
|
9
|
+
RecommendationCode["STRENGTHEN_PASSWORD_HISTORY"] = "STRENGTHEN_PASSWORD_HISTORY";
|
|
10
|
+
RecommendationCode["ENABLE_FORCE_RELOGIN"] = "ENABLE_FORCE_RELOGIN";
|
|
11
|
+
RecommendationCode["SET_FORCE_RELOGIN"] = "SET_FORCE_RELOGIN";
|
|
12
|
+
RecommendationCode["ENABLE_SESSION_CONCURRENCY"] = "ENABLE_SESSION_CONCURRENCY";
|
|
13
|
+
RecommendationCode["SET_SESSION_CONCURRENCY"] = "SET_SESSION_CONCURRENCY";
|
|
14
|
+
RecommendationCode["ENABLE_IDLE_SESSION"] = "ENABLE_IDLE_SESSION";
|
|
15
|
+
RecommendationCode["SET_IDLE_SESSION"] = "SET_IDLE_SESSION";
|
|
16
|
+
RecommendationCode["ENABLE_IP_RESTRICTIONS"] = "ENABLE_IP_RESTRICTIONS";
|
|
17
|
+
RecommendationCode["CHANGE_IP_TO_ALLOWLIST"] = "CHANGE_IP_TO_ALLOWLIST";
|
|
18
|
+
RecommendationCode["ENABLE_DOMAIN_RESTRICTION"] = "ENABLE_DOMAIN_RESTRICTIONS";
|
|
19
|
+
RecommendationCode["CHANGE_DOMAIN_TO_ALLOWLIST"] = "CHANGE_DOMAIN_TO_ALLOWLIST";
|
|
20
|
+
RecommendationCode["REMOVE_STALE_USERS"] = "REMOVE_STALE_USERS";
|
|
21
|
+
})(RecommendationCode || (RecommendationCode = {}));
|
|
22
|
+
|
|
23
|
+
export let InsightCode;
|
|
24
|
+
|
|
25
|
+
(function (InsightCode) {
|
|
26
|
+
InsightCode["MFA_FORCED"] = "MFA_FORCED";
|
|
27
|
+
InsightCode["PARTIALLY_FORCED_MFA"] = "PARTIALLY_FORCED_MFA";
|
|
28
|
+
InsightCode["PARTIAL_MFA_USAGE"] = "PARTIAL_MFA_USAGE";
|
|
29
|
+
InsightCode["FULL_MFA_USAGE"] = "FULL_MFA_USAGE";
|
|
30
|
+
InsightCode["BREACHED_PASSWORD_USERS_EXIST"] = "BREACHED_PASSWORD_USERS_EXIST";
|
|
31
|
+
InsightCode["IMPROVE_LOCKOUT_POLICY"] = "IMPROVE_LOCKOUT_POLICY";
|
|
32
|
+
InsightCode["IMPROVE_PASSWORD_HISTORY_POLICY"] = "IMPROVE_PASSWORD_HISTORY_POLICY";
|
|
33
|
+
InsightCode["NO_SESSION_SETTINGS"] = "NO_SESSION_SETTINGS";
|
|
34
|
+
InsightCode["PARTIAL_SESSION_SETTINGS"] = "PARTIAL_SESSION_SETTINGS";
|
|
35
|
+
InsightCode["PARTIAL_INCORRECT_SESSION_SETTINGS"] = "PARTIAL_INCORRECT_SESSION_SETTINGS";
|
|
36
|
+
InsightCode["FULL_SESSION_SETTINGS"] = "FULL_SESSION_SETTINGS";
|
|
37
|
+
InsightCode["FULL_INCORRECT_SESSION_SETTINGS"] = "FULL_INCORRECT_SESSION_SETTINGS";
|
|
38
|
+
InsightCode["STALE_USERS_EXIST"] = "STALE_USERS_EXIST";
|
|
39
|
+
InsightCode["NO_STALE_USERS_EXIST"] = "NO_STALE_USERS_EXIST";
|
|
40
|
+
InsightCode["NO_IP_RESTRICTIONS"] = "NO_IP_RESTRICTIONS";
|
|
41
|
+
InsightCode["IP_ALLOWLIST"] = "IP_ALLOWLIST";
|
|
42
|
+
InsightCode["IP_DENYLIST"] = "IP_DENYLIST";
|
|
43
|
+
InsightCode["NO_DOMAIN_RESTRICTIONS"] = "NO_DOMAIN_RESTRICTIONS";
|
|
44
|
+
InsightCode["DOMAIN_ALLOWLIST"] = "DOMAIN_ALLOWLIST";
|
|
45
|
+
InsightCode["DOMAIN_DENYLIST"] = "DOMAIN_DENYLIST";
|
|
46
|
+
})(InsightCode || (InsightCode = {}));
|
|
47
|
+
|
|
48
|
+
export let RecommendationActionKey;
|
|
49
|
+
|
|
50
|
+
(function (RecommendationActionKey) {
|
|
51
|
+
RecommendationActionKey["SEND_RESET_BREACHED_PASSWORD_EMAIL"] = "SEND_RESET_BREACHED_PASSWORD_EMAIL";
|
|
52
|
+
RecommendationActionKey["ADJUST_FORCE_RELOGIN"] = "ADJUST_FORCE_RELOGIN";
|
|
53
|
+
RecommendationActionKey["ADJUST_MAX_CONCURRENT_SESSIONS"] = "ADJUST_MAX_CONCURRENT_SESSIONS";
|
|
54
|
+
RecommendationActionKey["ADJUST_IDLE_TIMEOUT"] = "ADJUST_IDLE_TIMEOUT";
|
|
55
|
+
RecommendationActionKey["REMOVE_STALE_USERS"] = "REMOVE_STALE_USERS";
|
|
56
|
+
})(RecommendationActionKey || (RecommendationActionKey = {}));
|
|
57
|
+
|
|
58
|
+
export let RecommendationSeverity;
|
|
59
|
+
|
|
60
|
+
(function (RecommendationSeverity) {
|
|
61
|
+
RecommendationSeverity["SEVERE"] = "SEVERE";
|
|
62
|
+
RecommendationSeverity["WARNING"] = "WARNING";
|
|
63
|
+
RecommendationSeverity["INFO"] = "INFO";
|
|
64
|
+
})(RecommendationSeverity || (RecommendationSeverity = {}));
|
|
65
|
+
|
|
66
|
+
export let SecurityCategory;
|
|
67
|
+
|
|
68
|
+
(function (SecurityCategory) {
|
|
69
|
+
SecurityCategory["MFA"] = "MFA";
|
|
70
|
+
SecurityCategory["SESSIONS"] = "SESSIONS";
|
|
71
|
+
SecurityCategory["PASSWORD"] = "PASSWORD";
|
|
72
|
+
SecurityCategory["INACTIVITY"] = "INACTIVITY";
|
|
73
|
+
SecurityCategory["RESTRICTIONS"] = "RESTRICTIONS";
|
|
74
|
+
})(SecurityCategory || (SecurityCategory = {}));
|
package/users/index.d.ts
CHANGED
|
@@ -6,3 +6,4 @@ export declare function getUsersV3(queryParams: ISearchUserQueryParamsV3, option
|
|
|
6
6
|
export declare function getUsersRoles(queryParams: GetUsersRolesParams, options?: UserJwtOptions): Promise<GetUserRolesResponse[]>;
|
|
7
7
|
export declare function getUsersGroups(queryParams: GetUserGroupsParams, options?: UserJwtOptions): Promise<GetUserGroupsResponse[]>;
|
|
8
8
|
export declare function getCurrentUserTenantsV3(options?: UserJwtOptions): Promise<GetCurrentUserTenantsResponse>;
|
|
9
|
+
export declare function sendResetBreachedPasswordEmails(): Promise<void>;
|
package/users/index.js
CHANGED
|
@@ -32,4 +32,7 @@ export async function getCurrentUserTenantsV3(options) {
|
|
|
32
32
|
return Get(urls.identity.users.tenants.me.v3, undefined, {
|
|
33
33
|
headers: extractHeadersFromOptions(options)
|
|
34
34
|
});
|
|
35
|
+
}
|
|
36
|
+
export async function sendResetBreachedPasswordEmails() {
|
|
37
|
+
return Post(urls.identity.users.passwords.resetBreachedPasswords.v1);
|
|
35
38
|
}
|